install zabbix 7.0 on RHEL 8.x fails - GPG checks FAILED - Wrong Public Keys?

[jburysom]

Hello there,

I’m trying to install zabbix 7.x on Red Hat Enterprise Linux 8.10 from the repository using the commands from the following docuementation:

https://www.zabbix.com/download?zabbix=7.0&os_distribution=red_hat_enterp rise_linux&os_version=8&components=server_frontend _agent&db=mysql&ws=apache

The installation fails with the following error dealing with incorrect gpg keys. Any help would be greatly appreciated. I tried installing by disabling the non-supported repository and it fails to find fping. Is fping needed in zabbix 7.x?

Thanks!

=-=-=-=-=-=-=-=

1. Errors from first attempt at installing:

# dnf install zabbix-server-mysql zabbix-web-mysql zabbix-apache-conf zabbix-sql-scripts zabbix-selinux-policy zabbix-agent
.
.
Zabbix Official Repository - x86_64 3.0 MB/s | 3.1 kB 00:00
Importing GPG key 0xB5333005:
Userid : "Zabbix LLC (Apr 2024) <[email protected]>"
Fingerprint: 4C3D 6F2C C75F 5146 754F C374 D913 219A B533 3005
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-B5333005
Is this ok [y/N]: y
Key imported successfully
Zabbix Official Repository non-supported - x86_64 3.0 MB/s | 3.1 kB 00:00
Importing GPG key 0x08EFA7DD:
Userid : "Zabbix LLC (Jul 2022) <[email protected]>"
Fingerprint: D9AA 84C2 B617 479C 6E4F CF4D 19F2 4753 08EF A7DD
From : /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-08EFA7DD
Is this ok [y/N]: y
Key imported successfully
Import of key(s) didn't help, wrong key(s)?
Public key for fping-5.1-1.el8.x86_64.rpm is not installed. Failing package is: fping-5.1-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-08EFA7DD
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

2. Subsequent tries fail with the following error:

# dnf install zabbix-server-mysql zabbix-web-mysql zabbix-apache-conf zabbix-sql-scripts zabbix-selinux-policy zabbix-agent
.
.
Zabbix Official Repository non-supported - x86_64 3.0 MB/s | 3.1 kB 00:00
GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-08EFA7DD (0x08EFA7DD) is already installed
The GPG keys listed for the "Zabbix Official Repository non-supported - x86_64" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: fping-5.1-1.el8.x86_64
GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-08EFA7DD
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

3. Trying to disable the zabbix non-supported repository:

# dnf install zabbix-server-mysql zabbix-web-mysql zabbix-apache-conf zabbix-sql-scripts zabbix-selinux-policy zabbix-agent --disablerepo=zabbix-non-supported
Updating Subscription Management repositories.
Red Hat CodeReady Linux Builder for RHEL 8 x86_64 (RPMs) 52 kB/s | 2.8 kB 00:00
MySQL 8.0 Community Server 34 kB/s | 1.8 kB 00:00
MySQL Tools Community 34 kB/s | 1.8 kB 00:00
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs) 54 kB/s | 2.8 kB 00:00
MySQL Connectors Community 18 kB/s | 1.8 kB 00:00
Red Hat Satellite Tools 6.9 for RHEL 8 x86_64 (RPMs) 22 kB/s | 2.1 kB 00:00
Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs) 25 kB/s | 2.4 kB 00:00
Error:
Problem: conflicting requests
- nothing provides fping needed by zabbix-server-mysql-7.0.0-release1.el8.x86_64 from zabbix
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
#

[tim.mooney]

Is fping needed in zabbix 7.x?

Any template or item that uses any of the icmpping variants relies on fping being available.

In addition, there's an option in the GUI to ping a host, and I believe that uses fping too.

There's an older version of fping available from EPEL. You could install that first and then do the Zabbix install you've attempted.

I haven't tried Zabbix 7.x yet and I don't use the Zabbix package for fping (we package our own, since other software our network group uses also requires fping) so I don't know exactly what the problem is. It looks like the package is signed with the wong key, but I would have to spend some more time investigating to be sure.

[elan]

Facing this exact issue with zabbix 7.0- proxy
```
The GPG keys listed for the "Zabbix Official Repository non-supported - x86_64" repository are already installed but they are not correct for this package.

Check that the correct key URLs are configured for this repository.. Failing package is: fping-5.1-1.el9.x86_64
```

[elan]

The fping package is created with older key. Import the older key https://repo.zabbix.com/RPM-GPG-KEY-ZABBIX-08EFA7DD using `rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-08EFA7DD`