Error: failed to add subkeys on update

Ask Fedora
,
1

I’m getting the following error message; in another post, I found a link to Bugzilla, but that was about different packages.

2 metadata, 0 content objects fetched; 788 B transferred in 1 seconds; 0 bytes content written
Checking out tree 4d99657... done
Inactive requests:
  openssl (already provided by openssl-1:3.5.4-1.fc43.x86_64)
Enabled rpm-md repositories: fedora-cisco-openh264 updates fedora repository updates-archive
Importing rpm-md... done
rpm-md repo 'fedora-cisco-openh264' (cached); generated: 2025-03-05T10:45:56Z solvables: 6
rpm-md repo 'updates' (cached); generated: 2025-11-01T01:31:00Z solvables: 7380
rpm-md repo 'fedora' (cached); generated: 2025-10-24T04:56:13Z solvables: 77663
rpm-md repo 'repository' (cached); generated: 2025-10-30T19:14:39Z solvables: 45
rpm-md repo 'updates-archive' (cached); generated: 2025-11-01T02:51:53Z solvables: 5445
Resolving dependencies... done
error: failed to add subkeys for /var/cache/rpm-ostree/repomd/repository-43-x86_64/pubkey.gpg to rpmdb


ostree diff commit from: ed577fa07fa49812cfd3ba617da6910bdc716a2953bc14088f0df4c18a75d5b8
ostree diff commit to:   4d99657dbc38dcc217256822760019a3fb19455e219ed279f61ca4658fa66fad
Upgraded:
  cldr-emoji-annotation 1:48~beta1-1.fc43 -> 1:48-1.fc43
  cldr-emoji-annotation-dtd 1:48~beta1-1.fc43 -> 1:48-1.fc43
  espeak-ng 1.51.1-11.fc43 -> 1.51.1-12.fc43
  firefox 143.0.4-1.fc43 -> 144.0-3.fc43
  firefox-langpacks 143.0.4-1.fc43 -> 144.0-3.fc43
  glib2 2.86.0-2.fc43 -> 2.86.1-1.fc43
  iptables-libs 1.8.11-11.fc43 -> 1.8.11-12.fc43
  iptables-nft 1.8.11-11.fc43 -> 1.8.11-12.fc43
  libchromaprint 1.5.1-25.fc43 -> 1.6.0-1.fc43
  libportal 0.9.1-2.fc43 -> 0.9.1-3.fc43
  libportal-gtk4 0.9.1-2.fc43 -> 0.9.1-3.fc43
  llvm-filesystem 21.1.3-1.fc43 -> 21.1.4-1.fc43
  llvm-libs 21.1.3-1.fc43 -> 21.1.4-1.fc43
  python3-boto3 1.40.54-1.fc43 -> 1.40.61-1.fc43
  python3-botocore 1.40.54-1.fc43 -> 1.40.61-1.fc43
  unbound-anchor 1.23.1-3.fc43 -> 1.24.1-1.fc43
  unbound-libs 1.23.1-3.fc43 -> 1.24.1-1.fc43
Added:
  ngtcp2-crypto-ossl-1.16.0-1.fc43.x86_64
3

I was bold and just deleted the repos I don’t use, that seems to have helped:
sudo rm /etc/yum.repos.d/google-chrome.repo

deactivating probably wasn’t enough:

cat /etc/yum.repos.d/google-chrome.repo 
[google-chrome]
name=google-chrome
baseurl=https://dl.google.com/linux/chrome/rpm/stable/x86_64
skip_if_unavailable=True
gpgcheck=1
gpgkey=https://dl.google.com/linux/linux_signing_key.pub
enabled=0
1 Like
Error: failed to add subkeys for /var/cache/rpm-ostree/repomd/google-chrome-43-x86_64/linux_signing_key.pub to rpmdb
4

This is still a problem to me. Any idea if/when this is gonna be be fixed? I use some third party repos and just hit the failed to add subkeys for error

5

Would love to know the answer to this as well…

6

If you are still hitting this issue, disable/remove all offending repos and layered packages, update to the latest version and re-add repos/packages.