Bug #115287 Wrong GPG key for el7 repository
Submitted: 11 Jun 20:55 Modified: 12 Jun 11:39
Reporter: Sveta Smirnova (OCA) Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Package Repos Severity:S3 (Non-critical)
Version:8.0.37, 8.4.0 OS:CentOS (7)
Assigned to: CPU Architecture:Any

[11 Jun 20:55] Sveta Smirnova
Description:
When I try to install MySQL server on a fresh CentOS 7 machine, the installation fails with the error:

Public key for mysql-community-libs-8.0.37-1.el7.x86_64.rpm is not installed

 Failing package is: mysql-community-libs-8.0.37-1.el7.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2022, file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql

How to repeat:
- Start Docker CentOS7 machine
- Install MySQL repo, try to install MySQL Server:

[root@c8dbcec9ce68 /]# yum install https://repo.mysql.com/mysql80-community-release-el7-5.noarch.rpm
Loaded plugins: fastestmirror, ovl
mysql80-community-release-el7-5.noarch.rpm                                                                                                                                          |  11 kB  00:00:00     
Examining /var/tmp/yum-root-NXfkqF/mysql80-community-release-el7-5.noarch.rpm: mysql80-community-release-el7-5.noarch
Marking /var/tmp/yum-root-NXfkqF/mysql80-community-release-el7-5.noarch.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package mysql80-community-release.noarch 0:el7-5 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===========================================================================================================================================================================================================
 Package                                                Arch                                Version                             Repository                                                            Size
===========================================================================================================================================================================================================
Installing:
 mysql80-community-release                              noarch                              el7-5                               /mysql80-community-release-el7-5.noarch                              9.1 k

Transaction Summary
===========================================================================================================================================================================================================
Install  1 Package

Total size: 9.1 k
Installed size: 9.1 k
Is this ok [y/d/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : mysql80-community-release-el7-5.noarch                                                                                                                                                  1/1 
  Verifying  : mysql80-community-release-el7-5.noarch                                                                                                                                                  1/1 

Installed:
  mysql80-community-release.noarch 0:el7-5                                                                                                                                                                 

Complete!

[root@c8dbcec9ce68 /]# yum install mysql-community-server  
...
Dependencies Resolved

===========================================================================================================================================================================================================
 Package                                                    Arch                               Version                                                 Repository                                     Size
===========================================================================================================================================================================================================
Installing:
 mysql-community-libs                                       x86_64                             8.0.37-1.el7                                            mysql80-community                             1.5 M
     replacing  mariadb-libs.x86_64 1:5.5.68-1.el7
 mysql-community-server                                     x86_64                             8.0.37-1.el7                                            mysql80-community                              65 M
Installing for dependencies:
 mysql-community-client                                     x86_64                             8.0.37-1.el7                                            mysql80-community                              16 M
 mysql-community-client-plugins                             x86_64                             8.0.37-1.el7                                            mysql80-community                             3.5 M
 mysql-community-common                                     x86_64                             8.0.37-1.el7                                            mysql80-community                             666 k
 mysql-community-icu-data-files                             x86_64                             8.0.37-1.el7                                            mysql80-community                             2.2 M
 net-tools                                                  x86_64                             2.0-0.25.20131004git.el7                                base                                          306 k
 numactl-libs                                               x86_64                             2.0.12-5.el7                                            base                                           30 k

Transaction Summary
===========================================================================================================================================================================================================
Install  2 Packages (+6 Dependent packages)

Total download size: 89 M
Is this ok [y/d/N]: y
Downloading packages:
warning: /var/cache/yum/x86_64/7/mysql80-community/packages/mysql-community-client-plugins-8.0.37-1.el7.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID a8d3785c: NOKEY 1.0 MB/s | 3.8 MB  00:01:26 ETA 
Public key for mysql-community-client-plugins-8.0.37-1.el7.x86_64.rpm is not installed
(1/8): mysql-community-client-plugins-8.0.37-1.el7.x86_64.rpm                                                                                                                       | 3.5 MB  00:00:02     
(2/8): mysql-community-common-8.0.37-1.el7.x86_64.rpm                                                                                                                               | 666 kB  00:00:00     
(3/8): mysql-community-icu-data-files-8.0.37-1.el7.x86_64.rpm                                                                                                                       | 2.2 MB  00:00:01     
(4/8): mysql-community-libs-8.0.37-1.el7.x86_64.rpm                                                                                                                                 | 1.5 MB  00:00:00     
(5/8): numactl-libs-2.0.12-5.el7.x86_64.rpm                                                                                                                                         |  30 kB  00:00:00     
(6/8): net-tools-2.0-0.25.20131004git.el7.x86_64.rpm                                                                                                                                | 306 kB  00:00:00     
(7/8): mysql-community-client-8.0.37-1.el7.x86_64.rpm                                                                                                                               |  16 MB  00:00:22     
(8/8): mysql-community-server-8.0.37-1.el7.x86_64.rpm                                                                                                                               |  65 MB  00:00:22     
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                      3.2 MB/s |  89 MB  00:00:27     
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2022
Importing GPG key 0x3A79BD29:
 Userid     : "MySQL Release Engineering <mysql-build@oss.oracle.com>"
 Fingerprint: 859b e8d7 c586 f538 430b 19c2 467b 942d 3a79 bd29
 Package    : mysql80-community-release-el7-5.noarch (@/mysql80-community-release-el7-5.noarch)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2022
Is this ok [y/N]: y
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql
Importing GPG key 0x5072E1F5:
 Userid     : "MySQL Release Engineering <mysql-build@oss.oracle.com>"
 Fingerprint: a4a9 4068 76fc bd3c 4567 70c8 8c71 8d3b 5072 e1f5
 Package    : mysql80-community-release-el7-5.noarch (@/mysql80-community-release-el7-5.noarch)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-mysql
Is this ok [y/N]: y

Public key for mysql-community-libs-8.0.37-1.el7.x86_64.rpm is not installed

 Failing package is: mysql-community-libs-8.0.37-1.el7.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql-2022, file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql

Suggested fix:
Install current GPG key when installing repository.
[11 Jun 20:55] Sveta Smirnova
Workaround: install GPG key manually

rpm --import  http://repo.mysql.com/RPM-GPG-KEY-mysql-2023
[12 Jun 7:04] MySQL Verification Team
Hello Sveta,

Thank you for the report and feedback.

regards,
Umesh
[12 Jun 8:01] Terje Røsten
Hi Sveta,

try to use the latest release package (-5 is somewhat outdated).

This link should resolve to latest available release package for MySQL 8.0:

  http://repo.mysql.com/mysql80-community-release-el7.rpm

for MySQL 8.4, use

  http://repo.mysql.com/mysql84-community-release-el7.rpm
[12 Jun 11:39] Sveta Smirnova
Thank you, Terje! I used the outdated link, indeed.