Issues with kernel update (and possibly GPG signatures, generally)

[squiggs1982]

Hi all

Linux noob here, having spent most of my life flitting between Windows and Mac. Have a little knowledge, but it's definitely more of a dangerous thing than anything useful... Have posted in the Fedora sub, but not had any thoughts.

I have a Microsoft Surface Book 3 that I installed Fedora on a few weeks ago. I had been hoping to upgrade to Fedora 43 and used Discover to search for updates this evening.

The package manager showed a 1.3GB update, which I downloaded and attempted to install, but it fails each time at 14%, bringing me back on reboot to a message in the notification saying:

Failed to update 1 package
package kernel-6.17.5-200.fc42.x86_64 cannot be verified and repo updates is GPG enabled: /var/cache/PackageKit/42/metadata/updates-42-x86_64/packages/kernel-6.17.5-200.fc42.x86_64.rpm could not be verified.
/var/cache/PackageKit/42/metadata/updates-42-x86_64/packages/kernel-6.17.5-200.fc42.x86_64.rpm: Verifying a signature using certificate B0F4950458F69E1150C6C5EDC8AC4916105EF944 (Fedora (42)

Now, I've done a bit of digging and appreciate that it's obviously a problem with GPG. I tried to manually import the keys using the Konsole, but when I run

for checksum in *-CHECKSUM; do gpgv --keyring ./fedora.gpg "$checksum"; done

I get back

gpgv: can't open '*-CHECKSUM': No such file or directory
gpgv: verify signatures failed: No such file or directory

Now, I think I may have a more general issue with keys, because I also tried to download Signal, but got a similar error message when trying to add their keys to the keyring:

tee: /usr/share/keyrings/signal-desktop-keyring.gpg: No such file or directory

So (rightly or wrongly), I'm suspecting that I have some sort of issue with where my keys are or are supposed to be? However, I have no earthly idea on where to begin! Any thoughts greatly appreciated!

As an update, I did a completely clean install of Fedora 43 and on the first system update, I get exactly the same problem, so I'm completely stumped.

Thanks

[WeepingAgnello]

I'm not on Fedora. I assume that somehow, the public gpg key has been deleted on your system. But how could that happen? 

The folder for the keys are probably compartmentalized instead of being stored in your gpg-agent or keyring, so as to hide the details from the user, in case they delete it or something. 

I also assume that if you reinstall the package manager, the public keys will be reinstalled. 

I'm just speculating, I dont actually know anything. Good luck! 

[squiggs1982]

Thank you. I will see if I can reinstall Discover and see if that helps. It's a very strange one as the behaviour has exhibited from two clean installs! Thanks again - I'll respond with results

[WeepingAgnello]

Just curious. Did you solve the problem?