GPG check FAILED: Can't update crowdsec-firewall-bouncer-iptables

[arbrebinaire]

I'm having some difficulty upgrading the iptables bouncer to this version:

Package	Architecture	Version	Repository	Size
crowdsec-firewall-bouncer-iptables	x86_64	0.0.26-1.el8	crowdsec_crowdsec	3.9 M

[root@host ~]# dnf update crowdsec-firewall-bouncer-iptables
crowdsec_crowdsec                                                                                                                                                                                             611  B/s | 833  B     00:01    
crowdsec_crowdsec-source                                                                                                                                                                                      626  B/s | 833  B     00:01    
Dependencies resolved.

-- Please see table above for package info --

Upgrade  1 Package

Total size: 3.9 M
Is this ok [y/N]: y
Downloading Packages:
[SKIPPED] crowdsec-firewall-bouncer-iptables-0.0.26-1.el8.x86_64.rpm: Already downloaded                                                                                                                                                     
crowdsec_crowdsec                                                                                                                                                                                              10 kB/s | 3.9 kB     00:00    
GPG key at https://packagecloud.io/crowdsec/crowdsec/gpgkey (0x6E93CD0C) is already installed
crowdsec_crowdsec                                                                                                                                                                                             6.5 kB/s | 2.4 kB     00:00    
GPG key at https://packagecloud.io/crowdsec/crowdsec/gpgkey/crowdsec-crowdsec-B78D1222C9AD2D5D.pub.gpg (0xD059946B) is already installed
crowdsec_crowdsec                                                                                                                                                                                             6.9 kB/s | 2.4 kB     00:00    
GPG key at https://packagecloud.io/crowdsec/crowdsec/gpgkey/crowdsec-crowdsec-FED78314A2468CCF.pub.gpg (0x3CDF0DB4) is already installed
The GPG keys listed for the "crowdsec_crowdsec" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: crowdsec-firewall-bouncer-iptables-0.0.26-1.el8.x86_64
 GPG Keys are configured as: https://packagecloud.io/crowdsec/crowdsec/gpgkey, https://packagecloud.io/crowdsec/crowdsec/gpgkey/crowdsec-crowdsec-B78D1222C9AD2D5D.pub.gpg, https://packagecloud.io/crowdsec/crowdsec/gpgkey/crowdsec-crowdsec-FED78314A2468CCF.pub.gpg
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

How can I upgrade the bouncer without a complete reinstall ? (I'd like to keep state, configuration, etc. safely intact)

Thanks.

[LaurenceJJones]

Hey we have updated our GPG key you must re run the packagecloud script so it updates the repo.d

curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.rpm.sh | sudo bash

This will not reinstall anything just update the GPG keys so it has our new one.

[arbrebinaire]

Here is some of the output of the command you suggested:

No match for argument: pygpgme
Error: Unable to find a match: pygpgme

WARNING: 
The pygpgme package could not be installed. This means GPG verification is not possible for any RPM installed on your system. 
To fix this, add a repository with pygpgme. Usualy, the EPEL repository for your system will have this. 
More information: https://fedoraproject.org/wiki/EPEL#How_can_I_use_these_extra_packages.3F

Is that package obsolete? EPEL is ready on my system (Rocky Linux 8).

Nonetheless, I could finally update crowdsec-firewall-bouncer-iptables and it restarted without a hitch.

Thanks!

[LaurenceJJones]

Here is some of the output of the command you suggested:

You can ignore those messages.

Great! I will close and pin issue so it visible.