Dnf upgrade gives BAD signature error

Ask Fedora
1

Upgrading rawhide beginning on 10 February. All of the packages download (or are skipped in the download phase) and dnf fails the transaction check.


Running transaction check
error: rpmdbNextIterator: skipping h#      44
Header V3 RSA/SHA256 Signature, key ID 429476b4: BAD
Header SHA256 digest: OK
Header SHA1 digest: OK
error: rpmdbNextIterator: skipping h#      44
Header V3 RSA/SHA256 Signature, key ID 429476b4: BAD
Header SHA256 digest: OK
Header SHA1 digest: OK
The downloaded packages were saved in cache until the next successful
transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: An rpm exception occurred: package not installed

I did a full ‘dnf upgrade’ a number of weeks ago. I’ve run ‘rpm --rebuilddb’ a few times and disabled a number of exotic repos with no change in the result. This morning dnf successfully imported the Fedora 39 GPG key, then failed the same way.

Various Fedora forums posts end with “sorry, you’re screwed.”

I’ve installed things piecemeal rather than the full 3200+ packages but I’m convinced that at some point that will lead to an unbootable laptop. The only subset that gave me the same error was qemu, libvirt and their dependencies.

Is it possible to identify an offending package and remove it before the upgrade, or should I be preparing to install the OS from scratch?

Mike

2

Does this solve your issue?

3

Thanks Matthew. That looks exactly like it. I’ll give it a try as soon as I have time for a restart.

Mike

1 Like
4

Yes, success. I didn’t find the offending package (I uninstalled google-chrome some months ago) but now dnf works at the DEFAULT crypto policy level.

Thanks again.

Mike