On 14 Feb 2026 at 11:37, Frank Bures wrote:

From:                   Frank Bures<[email protected]>
Date sent:              Sat, 14 Feb 2026 11:37:19 -0500
Subject:                Re: Update of google chrome updated required
manual removal of
        gpgkey?
To:                     [email protected]
Send reply to:          [email protected],
        Community support for Fedora users
<[email protected]>

On 2026-02-14 11:28, Tim Evans wrote:
On 2/14/26 11:19 AM, Frank Bures wrote:
On 2026-02-13 06:38, Patrick O'Callaghan wrote:
On Thu, 2026-02-12 at 22:20 +0000, Will McDonald wrote:
On Thu, 12 Feb 2026 at 20:31, Michael D. Setzer II via users< 
[email protected]> wrote:

Would not install update it found, and wasn't importing the new
key?

Had to
rpm --erase --allmatches gpg-pubkey-d38b4796-570c8cd3
Then the dnf update prompted to install key and updated.

I don't know if this is precisely the same issue but you might be
running
into:
https://wmcdonald404.co.uk/2024/02/18/google-chrome-gpg-keys.html
I got the same error. However the recommended fix (run
/etc/cron.daily/google-chrome) didn't fix it. I'll see if it fixes
itself tomorrow (I don't usually use Chrome anyway).

poc
I had to do

dnf clean all

to get rid of the gpg-keys mess

Cheers
Frank
Seems the solution varies for different machines?
For my Fedora 42 machine I got the message and found a key it
mentioned on a web page, and removed it, and update in stalled.

Tried on some others, and it came back with key doesn't exist, and
the search didn't show a google key at all??
Changed the gpgcheck=0 in the repo, and then it installed, and it
worked. Then changed back to =1, and did a reinstall to check.

Sometimes different combinations worked, but eventual got them
all updated

Currently getting these result.
On this notebook. Fedora 42
rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' | grep
'Google'
gpg-pubkey-d38b4796-570c8cd3    Google Inc. (Linux Packages
Signing Authority)<[email protected]> public key

These with Fedora 43

Had a few give this?
gpg-pubkey-eb4c1bfd4f042f6dddccec917721f63bd38b4796-570c8c
d3      Google Inc. (Linux Packages Signing Authority)
<[email protected]> public key

Just have one show this?
gpg-pubkey-4cca1eaf950cee4ab83976dca040830f7fac5991-45f06f4
6       Google, Inc. Linux Package Signing Key
<[email protected]> public key
gpg-pubkey-eb4c1bfd4f042f6dddccec917721f63bd38b4796-570c8c
d3      Google Inc. (Linux Packages Signing Authority)
<[email protected]> public key

On this notebook removed the different key, did a reinstalled, and it
talked about an expired key, and seems to install key, but check
shows the old one again. Perhaps 42 and 43 are different???

# rpm --erase --allmatches gpg-pubkey-d38b4796-570c8cd3
root@setzcodell:/etc/yum.repos.d# dnf reinstall
google-chrome-stable
Updating and loading repositories:
Repositories loaded.
Package                                        Arch        Version
Repository                     Size
Reinstalling:
  google-chrome-stable                          x86_64      145.0.7632.75-1
google-chrome             386.9 MiB
    replacing google-chrome-stable              x86_64
145.0.7632.75-1                                google-chrome             386.9
MiB

Transaction Summary:
  Reinstalling:       1 package
  Replacing:          1 package

Total size of inbound packages is 119 MiB. Need to download 119
MiB.
After this operation, 0 B extra will be used (install 387 MiB, remove
387 MiB).
Is this ok [y/N]: y
[1/1] google-chrome-stable-0:145.0.7632.75-1.x86_64
100% |  25.9 MiB/s | 119.0 MiB |  00m05s
-------------------------------------------------------------------------------------------------------------
--------------------------------
[1/1] Total
100% |  25.9 MiB/s | 119.0 MiB |  00m05s
[1/2]https://dl.google.com/linux/linux_signing_key.pub ???% [<=> ] | 0.0 B/s | 0.0 B | 00m00s [1/2]https://dl.google.com/linux/linux_signing_key.pub ???% [<=> ] | 0.0 B/s | 0.0 B | 00m00s [1/2]https://dl.google.com/linux/linux_signing_key.pub 100% | 60.8 KiB/s | 17.0 KiB | 00m00s
-------------------------------------------------------------------------------------------------------------
--------------------------------
[2/2] Total
100% |  25.9 MiB/s | 119.0 MiB |  00m05s
Importing OpenPGP key 0xD38B4796:
  UserID     : "Google Inc. (Linux Packages Signing Authority)
<[email protected]>"
  Fingerprint: EB4C1BFD4F042F6DDDCCEC917721F63BD38B4796
  From       :https://dl.google.com/linux/linux_signing_key.pub
Is this ok [y/N]: y
The key was successfully imported.
[1/4] Verify package files
100% |   1.0   B/s |   1.0   B |  00m01s
[2/4] Prepare transaction
100% |   1.0   B/s |   2.0   B |  00m01s
[3/4] Reinstalling google-chrome-stable-0:145.0.7632.75-1.x86_64
100% |  38.7 MiB/s | 387.0 MiB |  00m10s
[4/4] Removing google-chrome-stable-0:145.0.7632.75-1.x86_64
100% | 188.0   B/s | 274.0   B |  00m01s
Complete!
root@setzcodell:/etc/yum.repos.d# rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' | grep
'Google'
gpg-pubkey-d38b4796-570c8cd3    Google Inc. (Linux Packages
Signing Authority)<[email protected]> public key

List of all keys?
# rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'
gpg-pubkey-25f5e69c-6557e4e1
https://packagecloud.io/dcommander/turbovnc (https://packagecloud.io/docs#gpg_signing)
<[email protected]> public key
gpg-pubkey-52d11d8f-6105487d    rob72_DOSBox-X (None)
<rob72#[email protected]> public key
gpg-pubkey-d651ff2e-5dadbbc1    RPM Fusion free repository for
Fedora (2020)<[email protected]> public
key
gpg-pubkey-94843c65-5dadbc64    RPM Fusion nonfree repository
for Fedora (2020)<[email protected]> public key
gpg-pubkey-f987672f-5c0e9ab8    WineHQ packages
<[email protected]> public key
gpg-pubkey-e99d6ad1-64d2612c    Fedora (41)
<[email protected]> public key
gpg-pubkey-7c96ab47-6570bb3e    codifryed_CoolerControl (None)
<codifryed#[email protected]> public key
gpg-pubkey-b693a745-682b1270    Opera Software Archive
Automatic Signing Key 2025<[email protected]> public key
gpg-pubkey-105ef944-65ca83d1    Fedora (42)
<[email protected]> public key
gpg-pubkey-6e7fe9a1-5fb43cea    The VirtualGL Project (Signing
key for official binaries)<[email protected]> public key
gpg-pubkey-72feb9ce-55ae4233    The VirtualGL Project (Signing
key for official binaries)<[email protected]> public key
gpg-pubkey-d38b4796-570c8cd3    Google Inc. (Linux Packages
Signing Authority)<[email protected]> public key

On a Fedora 43 machine getting this.
# rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'
gpg-pubkey-d651ff2e-5dadbbc1    RPM Fusion free repository for
Fedora (2020)<[email protected]> public
key
gpg-pubkey-94843c65-5dadbc64    RPM Fusion nonfree repository
for Fedora (2020)<[email protected]> public key
gpg-pubkey-f987672f-5c0e9ab8    WineHQ packages
<[email protected]> public key
gpg-pubkey-52d11d8f-6105487d    rob72_DOSBox-X (None)
<rob72#[email protected]> public key
gpg-pubkey-105ef944-65ca83d1    Fedora (42)
<[email protected]> public key
gpg-pubkey-b693a745-682b1270    Opera Software Archive
Automatic Signing Key 2025<[email protected]> public key
gpg-pubkey-25f5e69c-6557e4e1
https://packagecloud.io/dcommander/turbovnc (https://packagecloud.io/docs#gpg_signing)
<[email protected]> public key
gpg-pubkey-6e7fe9a1-5fb43cea    The VirtualGL Project (Signing
key for official binaries)<[email protected]> public key
gpg-pubkey-72feb9ce-55ae4233    The VirtualGL Project (Signing
key for official binaries)<[email protected]> public key
gpg-pubkey-31645531-66b6dccf    Fedora (43)
<[email protected]> public key
gpg-pubkey-eb4c1bfd4f042f6dddccec917721f63bd38b4796-570c8c
d3      Google Inc. (Linux Packages Signing Authority)
<[email protected]> public key
root@setzco:~#




Doesn't work here.  Also, 'dnf reinstall' fails, as well as 'dnf remove'
and subsequent 'install.

In my case

rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' | grep
'Google'

returned the key which

rpmkeys --delete

returned as non-existent.

dnf clean all

solved the problem.

Cheers
Frank

Just a silly question, I have google-chrome-stable install for the google repository and when doing issuing sudo dnf upgrade I have never gotten into the situation with the keys (I'm on F43 so chrome was installed after installing F43 from scratch), does that means somehow I have the google repository and chrome installed with using keys?

regards,
BEGIN:VCARD
VERSION:4.0
N:Morris;Stephen;;;
FN:Stephen Morris
EMAIL;PREF=1;TYPE=home:[email protected]
END:VCARD
-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to