{"id":751,"date":"2024-10-23T15:48:37","date_gmt":"2024-10-23T15:48:37","guid":{"rendered":"https:\/\/webhostingpune.co.in\/blog\/?p=751"},"modified":"2024-10-23T15:48:41","modified_gmt":"2024-10-23T15:48:41","slug":"almalinux-8-gpg-key-change","status":"publish","type":"post","link":"https:\/\/webhostingpune.co.in\/blog\/almalinux-8-gpg-key-change\/","title":{"rendered":"AlmaLinux 8 GPG key change"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/almalinux.org\/\" target=\"_blank\" rel=\"noopener\">AlmaLinux<\/a> 8, a popular open-source operating system built from the source code of Red Hat Enterprise Linux (RHEL), made a significant change in its GPG (GNU Privacy Guard) key infrastructure starting with AlmaLinux 8. The GPG key is used to verify the authenticity of packages, ensuring that they haven\u2019t been tampered with.<\/p>\n\n\n\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Table of Contents<\/h2><nav><ul><li><a href=\"#what-happened-with-the-gpg-key-in-alma-linux-8\">What Happened with the GPG Key in AlmaLinux 8?<\/a><\/li><li><a href=\"#updating-the-gpg-key\">Updating the GPG Key<\/a><ul><li><a href=\"#how-to-check-your-system-and-import-new-key\">How to check your system and import new key<\/a><\/li><\/ul><\/li><li><a href=\"#conclusion\">Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-happened-with-the-gpg-key-in-alma-linux-8\">What Happened with the GPG Key in AlmaLinux 8?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The change in the GPG key usually relates to a key rotation or an upgrade in the cryptographic methods used to sign the packages for security reasons. AlmaLinux periodically updates its signing keys, and if you&#8217;re running AlmaLinux 8 and need to update or import the new GPG key, you&#8217;ll need to follow specific instructions.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"536\" src=\"https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/rectangle_large_type_2_b87b3d472a7e3ec8cdb5de5c95ac8732-1024x536.webp\" alt=\"\" class=\"wp-image-758\" style=\"width:692px;height:auto\" srcset=\"https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/rectangle_large_type_2_b87b3d472a7e3ec8cdb5de5c95ac8732-1024x536.webp 1024w, https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/rectangle_large_type_2_b87b3d472a7e3ec8cdb5de5c95ac8732-300x157.webp 300w, https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/rectangle_large_type_2_b87b3d472a7e3ec8cdb5de5c95ac8732.webp 1280w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"updating-the-gpg-key\">Updating the GPG Key<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To update or import the new GPG key, you can follow these steps:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check for the Current GPG Key:<\/strong> Run the following command to list all the GPG keys that are currently installed:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm -qa gpg-pubkey<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Download and Import the New AlmaLinux GPG Key:<\/strong> If you want to make sure your system already includes and trusts new AlmaLinux 8 GPG key you can just import it<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm --import https:\/\/repo.almalinux.org\/almalinux\/RPM-GPG-KEY-AlmaLinux<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">This command downloads and imports new AlmaLinux 8 GPG key to rpm database if it\u2019s not there yet or does nothing if it\u2019s already trusted. No more action required.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"711\" src=\"https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/AlmaLinux-stackscale-grupo-aire-1024x711.png\" alt=\"\" class=\"wp-image-759\" style=\"width:493px;height:auto\" srcset=\"https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/AlmaLinux-stackscale-grupo-aire-1024x711.png 1024w, https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/AlmaLinux-stackscale-grupo-aire-300x208.png 300w, https:\/\/webhostingpune.co.in\/blog\/wp-content\/uploads\/2024\/10\/AlmaLinux-stackscale-grupo-aire.png 1470w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"how-to-check-your-system-and-import-new-key\">How to check your system and import new key<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The new GPG key is included in the&nbsp;<code>almalinux-release<\/code>&nbsp;package version&nbsp;<code>8.8-3.el8<\/code>&nbsp;(released Oct 16, 2023) or higher. To see if your system already trusts the new AlmaLinux 8 GPG key you can run the following:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm -q gpg-pubkey-ced7258b-6525146f<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">If the new GPG key is already trusted, you will see the following message, and no further action is necessary:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>gpg-pubkey-ced7258b-6525146f<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">If the GPG key is not trusted, you will see the following error:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>package gpg-pubkey-ced7258b-6525146f is not installed<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">In this case we recommended that you import the new AlmaLinux 8 GPG key to the rpm database:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm --import https:\/\/repo.almalinux.org\/almalinux\/RPM-GPG-KEY-AlmaLinux<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"conclusion\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AlmaLinux 8 GPG key change is a routine security measure to ensure the integrity and authenticity of its packages. By updating the GPG key, AlmaLinux strengthens the cryptographic protection of its software distribution. Users should download and import the new GPG key, remove any outdated keys, and update their system to continue receiving verified packages securely. This process is critical for maintaining system security and trust in the open-source ecosystem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AlmaLinux 8, a popular open-source operating system built from the source code of Red Hat Enterprise Linux (RHEL), made a significant change in its GPG (GNU Privacy Guard) key infrastructure starting with AlmaLinux 8. The GPG key is used to verify the authenticity of packages, ensuring that they haven\u2019t been tampered with. What Happened with the GPG Key in AlmaLinux 8? The change in the GPG key usually relates to a key rotation or an upgrade in the cryptographic methods used to sign the packages for security reasons. AlmaLinux periodically updates its signing keys, and if you&#8217;re running AlmaLinux 8 and need to update or import the new GPG key, you&#8217;ll need to follow specific instructions. Updating the GPG Key To update or import the new GPG key, you can follow these steps: Check for the Current GPG Key: Run the following command to list all the GPG keys that are currently installed: Download and Import the New AlmaLinux GPG Key: If you want to make sure your system already includes and trusts new AlmaLinux 8 GPG key you can just import it This command downloads and imports new AlmaLinux 8 GPG key to rpm database if it\u2019s not there yet or does nothing if it\u2019s already trusted. No more action required. How to check your system and import new key The new GPG key is included in the&nbsp;almalinux-release&nbsp;package version&nbsp;8.8-3.el8&nbsp;(released Oct 16, 2023) or higher. To see if your system already trusts the new AlmaLinux 8 GPG key you can run the following: If the new GPG key is already trusted, you will see the following message, and no further action is necessary: If the GPG key is not trusted, you will see the following error: In this case we recommended that you import the new AlmaLinux 8 GPG key to the rpm database: Conclusion AlmaLinux 8 GPG key change is a routine security measure to ensure the integrity and authenticity of its packages. By updating the GPG key, AlmaLinux strengthens the cryptographic protection of its software distribution. Users should download and import the new GPG key, remove any outdated keys, and update their system to continue receiving verified packages securely. This process is critical for maintaining system security and trust in the open-source ecosystem.<\/p>\n","protected":false},"author":1,"featured_media":757,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-751","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/posts\/751","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/comments?post=751"}],"version-history":[{"count":6,"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/posts\/751\/revisions"}],"predecessor-version":[{"id":760,"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/posts\/751\/revisions\/760"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/media\/757"}],"wp:attachment":[{"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/media?parent=751"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/categories?post=751"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webhostingpune.co.in\/blog\/wp-json\/wp\/v2\/tags?post=751"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}