On 2/14/26 12:55 PM, Michael D. Setzer II via users wrote:
On 14 Feb 2026 at 11:37, Frank Bures wrote:

From:                   Frank Bures <[email protected]>
Date sent:              Sat, 14 Feb 2026 11:37:19 -0500
Subject:                Re: Update of google chrome updated required
manual removal of
        gpgkey?
To:                     [email protected]
Send reply to:          [email protected],
        Community support for Fedora users
<[email protected]>

On 2026-02-14 11:28, Tim Evans wrote:
On 2/14/26 11:19 AM, Frank Bures wrote:
On 2026-02-13 06:38, Patrick O'Callaghan wrote:
On Thu, 2026-02-12 at 22:20 +0000, Will McDonald wrote:
On Thu, 12 Feb 2026 at 20:31, Michael D. Setzer II via users <
[email protected]> wrote:

Would not install update it found, and wasn't importing the new
key?

Had to
rpm --erase --allmatches gpg-pubkey-d38b4796-570c8cd3
Then the dnf update prompted to install key and updated.


I don't know if this is precisely the same issue but you might be
running
into:
https://wmcdonald404.co.uk/2024/02/18/google-chrome-gpg-keys.html

I got the same error. However the recommended fix (run
/etc/cron.daily/google-chrome) didn't fix it. I'll see if it fixes
itself tomorrow (I don't usually use Chrome anyway).

poc

I had to do

dnf clean all

to get rid of the gpg-keys mess

Cheers
Frank

Seems the solution varies for different machines?
For my Fedora 42 machine I got the message and found a key it
mentioned on a web page, and removed it, and update in stalled.

Tried on some others, and it came back with key doesn't exist, and
the search didn't show a google key at all??
Changed the gpgcheck=0 in the repo, and then it installed, and it
worked. Then changed back to =1, and did a reinstall to check.

Sometimes different combinations worked, but eventual got them
all updated

Currently getting these result.
On this notebook. Fedora 42
rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' | grep
'Google'
gpg-pubkey-d38b4796-570c8cd3    Google Inc. (Linux Packages
Signing Authority) <[email protected]>
public key

These with Fedora 43

Had a few give this?
gpg-pubkey-eb4c1bfd4f042f6dddccec917721f63bd38b4796-570c8c
d3      Google Inc. (Linux Packages Signing Authority)
<[email protected]> public key

Just have one show this?
gpg-pubkey-4cca1eaf950cee4ab83976dca040830f7fac5991-45f06f4
6       Google, Inc. Linux Package Signing Key
<[email protected]> public key
gpg-pubkey-eb4c1bfd4f042f6dddccec917721f63bd38b4796-570c8c
d3      Google Inc. (Linux Packages Signing Authority)
<[email protected]> public key

On this notebook removed the different key, did a reinstalled, and it
talked about an expired key, and seems to install key, but check
shows the old one again. Perhaps 42 and 43 are different???

# rpm --erase --allmatches gpg-pubkey-d38b4796-570c8cd3
root@setzcodell:/etc/yum.repos.d# dnf reinstall
google-chrome-stable
Updating and loading repositories:
Repositories loaded.
Package                                        Arch        Version
Repository                     Size
Reinstalling:
  google-chrome-stable                          x86_64      145.0.7632.75-1
google-chrome             386.9 MiB
    replacing google-chrome-stable              x86_64
145.0.7632.75-1                                google-chrome             386.9
MiB

Transaction Summary:
  Reinstalling:       1 package
  Replacing:          1 package

Total size of inbound packages is 119 MiB. Need to download 119
MiB.
After this operation, 0 B extra will be used (install 387 MiB, remove
387 MiB).
Is this ok [y/N]: y
[1/1] google-chrome-stable-0:145.0.7632.75-1.x86_64
100% |  25.9 MiB/s | 119.0 MiB |  00m05s
-------------------------------------------------------------------------------------------------------------
--------------------------------
[1/1] Total
100% |  25.9 MiB/s | 119.0 MiB |  00m05s
[1/2] https://dl.google.com/linux/linux_signing_key.pub
???% [<=>               ] |   0.0   B/s |   0.0   B |  00m00s
[1/2] https://dl.google.com/linux/linux_signing_key.pub
???% [<=>               ] |   0.0   B/s |   0.0   B |  00m00s
[1/2] https://dl.google.com/linux/linux_signing_key.pub
100% |  60.8 KiB/s |  17.0 KiB |  00m00s
-------------------------------------------------------------------------------------------------------------
--------------------------------
[2/2] Total
100% |  25.9 MiB/s | 119.0 MiB |  00m05s
Importing OpenPGP key 0xD38B4796:
  UserID     : "Google Inc. (Linux Packages Signing Authority)
<[email protected]>"
  Fingerprint: EB4C1BFD4F042F6DDDCCEC917721F63BD38B4796
  From       : https://dl.google.com/linux/linux_signing_key.pub
Is this ok [y/N]: y
The key was successfully imported.
[1/4] Verify package files
100% |   1.0   B/s |   1.0   B |  00m01s
[2/4] Prepare transaction
100% |   1.0   B/s |   2.0   B |  00m01s
[3/4] Reinstalling google-chrome-stable-0:145.0.7632.75-1.x86_64
100% |  38.7 MiB/s | 387.0 MiB |  00m10s
[4/4] Removing google-chrome-stable-0:145.0.7632.75-1.x86_64
100% | 188.0   B/s | 274.0   B |  00m01s
Complete!
root@setzcodell:/etc/yum.repos.d# rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' | grep
'Google'
gpg-pubkey-d38b4796-570c8cd3    Google Inc. (Linux Packages
Signing Authority) <[email protected]>
public key

List of all keys?
# rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'
gpg-pubkey-25f5e69c-6557e4e1
        https://packagecloud.io/dcommander/turbovnc
(https://packagecloud.io/docs#gpg_signing)
<[email protected]> public key
gpg-pubkey-52d11d8f-6105487d    rob72_DOSBox-X (None)
<rob72#[email protected]> public key
gpg-pubkey-d651ff2e-5dadbbc1    RPM Fusion free repository for
Fedora (2020) <[email protected]> public
key
gpg-pubkey-94843c65-5dadbc64    RPM Fusion nonfree repository
for Fedora (2020) <[email protected]>
public key
gpg-pubkey-f987672f-5c0e9ab8    WineHQ packages
<[email protected]> public key
gpg-pubkey-e99d6ad1-64d2612c    Fedora (41)
<[email protected]> public key
gpg-pubkey-7c96ab47-6570bb3e    codifryed_CoolerControl (None)
<codifryed#[email protected]> public key
gpg-pubkey-b693a745-682b1270    Opera Software Archive
Automatic Signing Key 2025 <[email protected]> public key
gpg-pubkey-105ef944-65ca83d1    Fedora (42)
<[email protected]> public key
gpg-pubkey-6e7fe9a1-5fb43cea    The VirtualGL Project (Signing
key for official binaries) <[email protected]> public key
gpg-pubkey-72feb9ce-55ae4233    The VirtualGL Project (Signing
key for official binaries) <[email protected]> public key
gpg-pubkey-d38b4796-570c8cd3    Google Inc. (Linux Packages
Signing Authority) <[email protected]>
public key

On a Fedora 43 machine getting this.
# rpm -q gpg-pubkey --qf
'%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'
gpg-pubkey-d651ff2e-5dadbbc1    RPM Fusion free repository for
Fedora (2020) <[email protected]> public
key
gpg-pubkey-94843c65-5dadbc64    RPM Fusion nonfree repository
for Fedora (2020) <[email protected]>
public key
gpg-pubkey-f987672f-5c0e9ab8    WineHQ packages
<[email protected]> public key
gpg-pubkey-52d11d8f-6105487d    rob72_DOSBox-X (None)
<rob72#[email protected]> public key
gpg-pubkey-105ef944-65ca83d1    Fedora (42)
<[email protected]> public key
gpg-pubkey-b693a745-682b1270    Opera Software Archive
Automatic Signing Key 2025 <[email protected]> public key
gpg-pubkey-25f5e69c-6557e4e1
        https://packagecloud.io/dcommander/turbovnc
(https://packagecloud.io/docs#gpg_signing)
<[email protected]> public key
gpg-pubkey-6e7fe9a1-5fb43cea    The VirtualGL Project (Signing
key for official binaries) <[email protected]> public key
gpg-pubkey-72feb9ce-55ae4233    The VirtualGL Project (Signing
key for official binaries) <[email protected]> public key
gpg-pubkey-31645531-66b6dccf    Fedora (43)
<[email protected]> public key
gpg-pubkey-eb4c1bfd4f042f6dddccec917721f63bd38b4796-570c8c
d3      Google Inc. (Linux Packages Signing Authority)
<[email protected]> public key
root@setzco:~#






Doesn't work here.  Also, 'dnf reinstall' fails, as well as 'dnf remove'
and subsequent 'install.


In my case

rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' | grep
'Google'

returned the key which

rpmkeys --delete

returned as non-existent.

dnf clean all

solved the problem.

Cheers
Frank
--

<[email protected]>
--
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new


+------------------------------------------------------------+
  Michael D. Setzer II - Computer Science Instructor (Retired)
  mailto:[email protected]
  mailto:[email protected]
  mailto:[email protected]
  Guam - Where America's Day Begins
  G4L Disk Imaging Project maintainer
  http://sourceforge.net/projects/g4l/
+------------------------------------------------------------+



YMMV, but the following procedure did update google-chrome-stable (and -unstable) here, although I don't understand it and am not sure it fully completes the task.

1. Run dnf update as usual; it will fail with the signature verification error we have seen. (All other updates in the batch also fail to install, as we have seen--do NOT re-run dnf with the --exclude flag.)

2. Re-start your system. Do not do anything before doing so, in particular do not 'dnf clean.' (This leaves the downloaded-but-not-installed updates in the dnf cache.)

3. Anwser yes to the "install pending updates" pop-up. System starts to reboot.

4. Previously downloaded updates in the dnf cache, including google-chrome* install duing the reboot; I did not see any signature verification messages during this process. System may reboot a second time.

I don't know, of course, what will happen with the next google-chrome update.

--
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to