Help! Error: GPG check failed duing installation on CentOS8

[ragerma]

I was following the official guide on installing on CentOS. https://www.rabbitmq.com/install-rpm.html#package-cloud
However there is an Error with GPG check. Does anyone knwo how to fix it?

[root@junlinux ~]# rpm --import https://packagecloud.io/rabbitmq/erlang/gpgkey
[root@junlinux ~]# rpm --import https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey
[root@junlinux ~]# yum update -y
rabbitmq_erlang                                                                        244  B/s | 833  B     00:03    
rabbitmq_erlang-source                                                                  63  B/s | 819  B     00:13    
rabbitmq_server                                                                         98  B/s | 833  B     00:08    
rabbitmq_server-source                                                                 223  B/s | 819  B     00:03    
=======================================================================
Some packages in your transaction are brought to you by GetPageSpeed: 
 - libuv-1:1.41.0-1.el8.x86_64
 - python3-cairo-1.18.1-4.el8.x86_64
 - brotli-1.0.9-1.el8.i686
 - brotli-1.0.9-1.el8.x86_64
 - libva-devel-2.9.0-1.el8.x86_64
 - python2-cairo-1.18.1-4.el8.x86_64
 - python3-dbus-1.2.8-8.el8.x86_64
 - libbluray-1.1.2-3.el8.x86_64
 - libv4l-1.18.0-2.el8.x86_64
 - python3-gobject-3.34.0-3.el8.x86_64
 - python3-gobject-base-3.34.0-3.el8.x86_64
 - libva-2.9.0-1.el8.i686
 - libva-2.9.0-1.el8.x86_64
 - smartmontools-1:7.1-7.el8.x86_64
To enable package installs, subscribe using the following link:

https://www.getpagespeed.com/repo-subscribe?server_ip=58.96.19.195
=======================================================================
[root@junlinux ~]# yum -q makecache -y --disablerepo='*' --enablerepo='rabbitmq_erlang' --enablerepo='rabbitmq_server'
[root@junlinux ~]# yum install socat logrotate -y
Last metadata expiration check: 0:00:11 ago on Mon 29 Mar 2021 15:14:38 AEDT.
Package socat-1.7.3.3-2.el8.x86_64 is already installed.
Package logrotate-3.14.0-4.el8.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@junlinux ~]# yum install --repo rabbitmq_erlang --repo rabbitmq_server erlang rabbitmq-server
Last metadata expiration check: 0:00:24 ago on Mon 29 Mar 2021 15:14:38 AEDT.
Dependencies resolved.
=======================================================================================================================
 Package                        Architecture          Version                     Repository                      Size
=======================================================================================================================
Installing:
 erlang                         x86_64                23.3-2.el8                  rabbitmq_erlang                 20 M
 rabbitmq-server                noarch                3.8.14-1.el8                rabbitmq_server                 15 M

Transaction Summary
=======================================================================================================================
Install  2 Packages

Total size: 35 M
Installed size: 52 M
Is this ok [y/N]: y
Downloading Packages:
[SKIPPED] erlang-23.3-2.el8.x86_64.rpm: Already downloaded                                                            
[SKIPPED] rabbitmq-server-3.8.14-1.el8.noarch.rpm: Already downloaded                                                 
warning: /var/cache/dnf/rabbitmq_erlang-06eb3d05cea0e596/packages/erlang-23.3-2.el8.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 6026dfca: NOKEY
rabbitmq_erlang                                                                        3.5 kB/s | 3.8 kB     00:01    
GPG key at https://packagecloud.io/rabbitmq/erlang/gpgkey (0xDF309A0B) is already installed
The GPG keys listed for the "rabbitmq_erlang" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: erlang-23.3-2.el8.x86_64
 GPG Keys are configured as: https://packagecloud.io/rabbitmq/erlang/gpgkey
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'yum clean packages'.
Error: GPG check FAILED

[root@junlinux ~]#

[michaelklishin]

I cannot reproduce. PackageCloud rolled its signing keys for all accounts a couple of years ago. If you never had that key imported,
it must be removed before importing the new one I guess, because they may use the same name.

The RPM installation Guide has been refreshed just a couple of days ago and I did not run into this. I'll try again.

[michaelklishin]

I can reproduce but only for the Erlang package. Curiously this one liner from PackageCloud works:

curl -s https://packagecloud.io/install/repositories/rabbitmq/erlang/script.rpm.sh | sudo bash

[michaelklishin]

The following .repo file which lists two GPG keys for the zero dependency Erlang package works fine for me:

# /etc/yum.repos.d/rabbitmq.repo

[rabbitmq_erlang]
name=rabbitmq_erlang
baseurl=https://packagecloud.io/rabbitmq/erlang/el/8/$basearch
repo_gpgcheck=1
gpgcheck=0
enabled=1
gpgkey=https://packagecloud.io/rabbitmq/erlang/gpgkey
       https://github.com/rabbitmq/signing-keys/releases/download/2.0/rabbitmq-release-signing-key.asc
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300

[rabbitmq_erlang-source]
name=rabbitmq_erlang-source
baseurl=https://packagecloud.io/rabbitmq/erlang/el/8/SRPMS
repo_gpgcheck=1
gpgcheck=0
enabled=1
gpgkey=https://packagecloud.io/rabbitmq/erlang/gpgkey
       https://github.com/rabbitmq/signing-keys/releases/download/2.0/rabbitmq-release-signing-key.asc
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300



##
## RabbitMQ server
##

[rabbitmq_server]
name=rabbitmq_server
baseurl=https://packagecloud.io/rabbitmq/rabbitmq-server/el/8/$basearch
repo_gpgcheck=1
gpgcheck=0
enabled=1
gpgkey=https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300

[rabbitmq_server-source]
name=rabbitmq_server-source
baseurl=https://packagecloud.io/rabbitmq/rabbitmq-server/el/8/SRPMS
repo_gpgcheck=1
gpgcheck=0
enabled=1
gpgkey=https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300

[michaelklishin]

rabbitmq/rabbitmq-website@11b81f1#diff-fb6ae130056dc04e68f379908ffa170fd9fd4c673ee0a43dba2ab2c279941f3d adds the key to the guide which will be updated within a few minutes