Zabbix Agent 更新時に GPG check FAILED が出た場合の解決方法

updateしてたらこんなエラーがでて出来なかった。
The GPG keys listed for the "Zabbix Official Repository" repository are already installed but they are not correct for this package.
Failing package is: zabbix-agent-6.0.43-release1.el8.x86_64
Error: GPG check FAILED

原因はこんな感じでしょう。
・Zabbix 6.0 系で GPGキーが更新
・AlmaLinux 側で 古い GPG Key(A14FE591)を参照
・または 正しい GPG Key が未登録
・その結果、RPM署名検証に失敗して更新できない

解決してみた。
① 正しい Zabbix GPG Key を取得
# rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-B5333005

② GPG Key を RPM DB に登録
# rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-B5333005

③ GPG Key 登録確認
# rpm -qa gpg-pubkey* | grep b5333005
gpg-pubkey-b5333005-66308c87

④ Zabbix リポジトリ設定を確認・修正
こんな感じで全部書き換える
# vi /etc/yum.repos.d/zabbix.repo

#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-B5333005
gpgcheck=1

⑤ dnf キャッシュを削除
dnf clean all
# rm -rf /var/cache/dnf

⑥ Zabbix Agent を更新
# dnf update zabbix-agent
AlmaLinux 8 - BaseOS 9.1 MB/s | 51 MB 00:05
AlmaLinux 8 - AppStream 7.8 MB/s | 23 MB 00:03
AlmaLinux 8 - Extras 18 kB/s | 14 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 6.5 MB/s | 14 MB 00:02
MariaDB Server 543 kB/s | 779 kB 00:01
MariaDB MaxScale 26 kB/s | 6.6 kB 00:00
MariaDB Tools 11 kB/s | 4.3 kB 00:00
nginx stable repo 47 kB/s | 94 kB 00:02
prometheus 410 B/s | 833 B 00:02
prometheus 6.0 kB/s | 3.9 kB 00:00
Importing GPG key 0x7457CCD1:
Userid : "https://packagecloud.io/prometheus-rpm/centos (https://packagecloud.io/docs#gpg_signing) "
Fingerprint: D7DF C575 AF4B 92C6 E62A D3C5 F721 6757 7457 CCD1
From : https://packagecloud.io/prometheus-rpm/release/gpgkey
Is this ok [y/N]: y
prometheus 12 kB/s | 3.0 kB 00:00
Importing GPG key 0x168A1EA1:
Userid : "prometheus-rpm "
Fingerprint: C7B7 CCCB BE77 86A4 9DF8 E28D 3A09 16E8 168A 1EA1
From : https://raw.githubusercontent.com/lest/prometheus-rpm/master/RPM-GPG-KEY-prometheus-rpm
Is this ok [y/N]: y
prometheus 41 kB/s | 108 kB 00:02
Remi's RPM repository for Enterprise Linux 8 - 502 B/s | 833 B 00:01
Remi's RPM repository for Enterprise Linux 8 - 3.0 MB/s | 3.1 kB 00:00
Importing GPG key 0x5F11735A:
Userid : "Remi's RPM repository "
Fingerprint: 6B38 FEA7 231F 87F5 2B9C A9D8 5550 9759 5F11 735A
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-remi.el8
Is this ok [y/N]: y
Remi's RPM repository for Enterprise Linux 8 - 998 kB/s | 4.0 MB 00:04
Remi's Modular repository for Enterprise Linux 359 kB/s | 1.1 MB 00:03
Zabbix Official Repository - x86_64 380 kB/s | 654 kB 00:01
Zabbix Official Repository (non-supported) - x8 1.3 kB/s | 1.4 kB 00:01
Zabbix Official Repository (Agent2 Plugins) - x 1.5 kB/s | 1.7 kB 00:01
Dependencies resolved.
================================================================================
Package Architecture Version Repository Size
================================================================================
Upgrading:
zabbix-agent x86_64 6.0.43-release1.el8 zabbix 588 k

Transaction Summary
================================================================================
Upgrade 1 Package

Total download size: 588 k
Is this ok [y/N]: y
Downloading Packages:
zabbix-agent-6.0.43-release1.el8.x86_64.rpm 501 kB/s | 588 kB 00:01
--------------------------------------------------------------------------------
Total 499 kB/s | 588 kB 00:01
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 1/1
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Upgrading : zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Running scriptlet: zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Cleanup : zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Running scriptlet: zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Running scriptlet: zabbix-agent-6.0.43-release1.el8.x86_64 2/2
Running scriptlet: zabbix-agent-6.0.42-release1.el8.x86_64 2/2
Verifying : zabbix-agent-6.0.43-release1.el8.x86_64 1/2
Verifying : zabbix-agent-6.0.42-release1.el8.x86_64 2/2

Upgraded:
zabbix-agent-6.0.43-release1.el8.x86_64

Complete!

update出来るようになりました。

タグ , . ブックマークする パーマリンク.

コメントを残す

メールアドレスが公開されることはありません。 が付いている欄は必須項目です