Having Trouble Upgrading Nobara Linux? It Could be the Problematic GPG Keys
Prerequisites
This article is for Linux users who have hands-on experience working with the command line.
Instructions
Open the terminal in GNOME (Konsole in KDE) and type in the following commands as root:
sudo dnf update fedora-gpg-keys --nogpgcheck --refresh sudo dnf update nobara-gpg-keys --nogpgcheck --refresh
Press ENTER, enter the user password (if prompted), and let the updater take care of the rest.
Example Error Messages
This is when I tried to see if there are any packages available and I came across the messages:
... GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-nobara-appstream-pubkey.gpg (0x0FE970A2) is already installed The GPG keys listed for the "nobara-appstream" repository are already installed but they are not correct for this package. Check that the correct key URLs are configured for this repository.. Failing package is: dkms-nvidia-3:535.86.05-1.fc38.x86_64 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-nobara-appstream-pubkey.gpg Public key for mesa-dri-drivers-23.1.3-2.fc38.i686.rpm is not installed. Failing package is: mesa-dri-drivers-23.1.3-2.fc38.i686 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-nobara-appstream-pubkey.gpg Public key for mesa-dri-drivers-23.1.3-2.fc38.x86_64.rpm is not installed. Failing package is: mesa-dri-drivers-23.1.3-2.fc38.x86_64 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-nobara-appstream-pubkey.gpg ...
Frankly, I'm not too sure how I am getting this error messages.
Frequently Asked Questions
What is Nobara Linux?
Nobara Linux is an operating system that is suited for gamers and content creators. Nobara makes it easy for point-and-click users to install software such as Blender and OBS as well as installing proprietary drivers for hardware such as NVIDIA GeForce GPUs or any wireless adapters that do not work with Linux out of the box.
What is GPG?
GPG (or GNU Privacy Guard) is used by various Linux distributions for verifying packages such as Steam, Blender, OBS, the Linux kernel, and so many other packages. Without a signature of any kind, any threat actors can push a package to a repository that can load any malicious software (malware) into your computer (even if the name of the package is Blender). GPG is also used for encrypting files and directories. The three letters (GNU) for GNU Privacy Guard is a recursive acronym for GNU is Not Unix.
How did you find out the commands?
While getting these error messages when I do a dnf update
, a search led me to a thread in Reddit where someone had a different problem than mine.
I tried the commands that bypasses the GPG checks and it worked!
By "different," I meant that poorly-formatted error message with <br /> (line break) tags that have a completely different error message than mine. For
web accessibility enthusiasts, this fails WCAG 2.0 Success Criteron
1.3.1 (info and relationship) and 4.1.1 (parsing). It seems Reddit did not parse the text as HTML. The error message in Reddit is as follows (not mine):
Invalid package file: package mesa-vulkan-drivers-23.2.0-git.20230714.27d30fe.fc38.i686 cannot be verified and repo nobara-appstream is GPG enabled: /var/cache/PackageKit/38/metadata/nobara-appstream-38-x86_64/packages/mesa-vulkan-drivers-23.2.0-git.20230714.27d30fe.fc38.i686.rpm could not be verified.
Conclusion
The issue is resolved in my end and I can go about my day. Hopefully yours should be fixed as well if you are currently running Nobara Linux. Happy gaming and content creating!
Article published: 2023-07-24 16:27
Categories: The World of Computers, Computers, Information Technology,