Gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-Salt As far as I can tell, changing the gpgkey= line has no effect: gpgkey=file:///etc/pki/rpm-gpg/saltstack-signing-key I got the same failure with all three of these variations.
I edited /etc//salt-latest.repo and changed the gpgkey= line. Notice the key PGP#f4a80eb5 matches the key referenced above, F4A8 0EB5. They are all the same, so here's just one of them for example: wget īabel-0.9.: RSA sha1 ((MD5) PGP) md5 NOT OK (MISSING KEYS: (MD5) PGP#f4a80eb5) So I manually download all the files that failed (in a for-loop) and check the signatures of their signing keys. Removing libyaml-0.1.4-11.el7_0.i686.rpm, due to missing GPG key. It fails with errors like these: Removing babel-0.9., due to missing GPG key. Reposync -gpgcheck -plugins -repoid=salt-latest -download_path=/root/foobar -newest-only -downloadcomps -delete -download-metadata Key fingerprint = 6341 AB27 53D7 8A78 A7C2 7BB1 24C6 A8A7 F4A8 0EB5Īttempt to reposync download: mkdir /root/foobar Pub 4096R/F4A80EB5 CentOS-7 Key (CentOS 7 Official Signing Key)
Notice, amongst other things, this creates the following two GPG key files: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-Saltįor later reference, notice the fingerprint of the CentOS key ends with f4a80eb5: # gpg -quiet -with-fingerprint /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-Salt
On a RHEL 7.4 system, I add the salt-latest repo as follows: yum -y install