Almalinux dnf upgrade fail: GPG check FAILED

[jordanefillatre]

Since the 17/01/24, the dnf upgrade run from almalinux:8.8 image fail:

AlmaLinux 8 - BaseOS                                                                                                            3.3 MB/s | 3.4 kB     00:00    
Importing GPG key 0xC21AD6EA:
 Userid     : "AlmaLinux <packager@almalinux.org>"
 Fingerprint: E53C F5EF 91CE B0AD 1812 ECB8 51D6 647E C21A D6EA
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
Is this ok [y/N]: y
Key imported successfully
Import of key(s) didn't help, wrong key(s)?
Public key for platform-python-3.6.8-56.el8_9.3.alma.1.x86_64.rpm is not installed. Failing package is: platform-python-3.6.8-56.el8_9.3.alma.1.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
Public key for python3-libs-3.6.8-56.el8_9.3.alma.1.x86_64.rpm is not installed. Failing package is: python3-libs-3.6.8-56.el8_9.3.alma.1.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
Public key for sqlite-libs-3.26.0-19.el8_9.x86_64.rpm is not installed. Failing package is: sqlite-libs-3.26.0-19.el8_9.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

It appears that these packages versions have been added between the 16-Jan-2024 at 11:57 and the 16-Jan-2024 at 16:46

[codyro]

Please see if this resolves your issue: https://almalinux.org/blog/2023-12-20-almalinux-8-key-update/

[dosas]

That solves the issue (I would see it as a workaround) but it would be nice to have a docker image with up to date gpg key.
Are there any plans for image updates?

[codyro]

It looks like you're using the 8.8 tag--can you see if the latest/8.9 show this issue for you?

[dosas]

@codyro Thanks 8.9 works fine!

[jordanefillatre]

If older tag than 8.9 can't be used without issues, may be they can be removed from registry?

[codyro]

If older tag than 8.9 can't be used without issues, may be they can be removed from registry?

Let me see if we can get these updated with the newer key.