Browse Source

fixing banner

pull/428/head
benny Vasquez 1 year ago
parent
commit
c94c4d1a3e
  1. 0
      content/blog/2023-12-19-almalinux-8-key-update.md
  2. 66
      content/blog/2023-12-20-almalinux-8-key-update.md
  3. BIN
      static/blog-images/2023-12-19almalinux8keychange.png
  4. BIN
      static/blog-images/2023-12-almalinux8keychange.png

0
content/blog/2023-12-19-almalinux-8-key-update.md

66
content/blog/2023-12-20-almalinux-8-key-update.md

@ -0,0 +1,66 @@
---
title: "AlmaLinux 8 GPG key change"
type: blog
author:
name: "Andrew Lukoshko"
bio: "Release Engineering Lead"
image: /users/alukoshko.jpg
date: 2023-12-19
images:
- /blog-images/2023-12-almalinux8keychange.png
post:
title: "AlmaLinux 8 GPG key change"
image: /blog-images/2023-12-almalinux8keychange.png
---
Earlier this year we realized that the GPG key we use to sign packages for AlmaLinux 8 is set to expire in January of 2024. If you keep your system up to date, you don't need to take any further action.
If your device is running a little behind in updates for AlmaLinux 8, please read more below to identify the actions you need to take.
## Getting ready for AlmaLinux 8 GPG key change
On January 12, 2024 we will start signing RPM packages and repodata for AlmaLinux 8 with the updated GPG key. Taking the steps below will allow you to continue to recieve updates without problems when we make the switch.
### Fast track
If you want to make sure your system already includes and trusts new AlmaLinux 8 GPG key you can just import it:
```
rpm --import https://repo.almalinux.org/almalinux/RPM-GPG-KEY-AlmaLinux
```
This command imports new AlmaLinux 8 GPG key to rpm database if it's not there yet, or does nothing if it's already trusted. No more action required.
### How to check your system and import new key
The new GPG key is included in the `almalinux-release` package version `8.8-3.el8` (released Oct 16, 2023) or higher. To see if your system already trusts the new AlmaLinux 8 GPG key you can run the following:
```
rpm -q gpg-pubkey-ced7258b-6525146f
```
If the new GPG key is already trusted, you will see the following message, and no further action is necessary:
```
gpg-pubkey-ced7258b-6525146f
```
If the GPG key is not trusted, you will see the following error:
```
package gpg-pubkey-ced7258b-6525146f is not installed
```
In this case we recommended that you import the new AlmaLinux 8 GPG key to the rpm database:
```
rpm --import https://repo.almalinux.org/almalinux/RPM-GPG-KEY-AlmaLinux
```
If your device is running in an airgapped environment, or does not have an external network connection, as long as the `almalinux-release` package version `8.8-3.el8` or higher is installed you can also import key directly from the file:
```
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
```
### What will happen if none of the above is done?
If your system is recent enough and you install updates on regular basis, nothing bad will happen. The new AlmaLinux 8 GPG key is included in `almalinux-release` package version `8.8-3.el8` or higher (released Oct 16, 2023).
In this case when trying to install package signed with the new key `dnf` may ask you to trust new key (this is exactly what happens when you install updates on clean just installed OS). If you use `dnf` with `-y` argument this will happen automatically.
**BUT**, if your system has not received updates for a long time and `almalinux-release` package version is lower than `8.8-3.el8` you will not be able to install packages signed with the new key until you manually import new GPG key as trusted.
## Get or give help!
As the number of AlmaLinux users grows the number of people asking questions and needing help is growing, too! If you have questions about this or anything else AlmaLinux-related, you can ask on our forums or in our [AlmaLinux Community Chat](https://chat.almalinux.org/). While you're there, take a second to see if there are any unanswered questions that you can help with!
You can also keep up to date with all things AlmaLinux by subscribing to our [announce](https://lists.almalinux.org/postorius/lists/announce.lists.almalinux.org/) mailing list, or our signing up for our [monthly newsletter](https://lists.almalinux.org/postorius/lists/newsletters.lists.almalinux.org/). Catch us on [Reddit](https://reddit.com/r/almalinux), and follow us on Mastodon [@almalinux@fosstodon.org](https://fosstodon.org/@almalinux) or [X](https://twitter.com/almalinux).

BIN
static/blog-images/2023-12-19almalinux8keychange.png

Binary file not shown.

Before

Width:  |  Height:  |  Size: 438 KiB

BIN
static/blog-images/2023-12-almalinux8keychange.png

Binary file not shown.

After

Width:  |  Height:  |  Size: 499 KiB

Loading…
Cancel
Save