Red Hat Bugzilla – Bug 1115532
redhat-upgrade-tool does not import RHEL-7 repo keys
Last modified: 2016-07-28 12:30:56 EDT
I don't think that redhat-upgrade-tool should automatically import the gpg keys. It doesn't *really* know what the keys are, since there isn't any data in the treeinfo files to indicate what they are, and this is an ongoing problem that goes all the way to bug 998. I did, however, fix the generated repo files so that the gpgcheck and gpgkey settings used in the post-upgrade scripts are the same as those used during the upgrade process, so errors like this shouldn't occur during post-upgrade. Also, as a workaround for bug 1123915, redhat-upgrade-tool will automatically add /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release as the key for the main repo when the treeinfo contains "Red Hat Enterprise Linux". This also means that when upgrading, if the GPG key is not imported into RPM, the upgrade will fail during package download and indicate that the key needs to be imported.
Verified on redhat-upgrade-tool-0.7.32-1. There is no gpg issues in installations in postupgrade scripts.
This bug was fixed in redhat-upgrade-tool-0.7.32-1.el6. Closing as CURRENTRELEASE.