yum安装提示NOKEY

#环境

os: CentOS 7
pc: VirtualBox

#故障描述
安装过程中已经导入一个PUBKEY,但还是提示NOKEY

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                1.5 MB/s |  83 MB  00:00:56     
Retrieving key from https://packages.cloud.google.com/yum/doc/yum-key.gpg
Importing GPG key 0xA7317B0F:
 Userid     : "Google Cloud Packages Automatic Signing Key <gc-team@google.com>"
 Fingerprint: d0bc 747f d8ca f711 7500 d6fa 3746 c208 a731 7b0f
 From       : https://packages.cloud.google.com/yum/doc/yum-key.gpg
Is this ok [y/N]: y

Public key for 571c54a5e4049647541a24d77337898fb4243f6b39c7f3df5d92ab180055bd87-kubectl-1.10.3-0.x86_64.rpm is not installed

 Failing package is: kubectl-1.10.3-0.x86_64
 GPG Keys are configured as: https://packages.cloud.google.com/yum/doc/yum-key.gpg
warning: /var/cache/yum/x86_64/7/kubernetes/packages/571c54a5e4049647541a24d77337898fb4243f6b39c7f3df5d92ab180055bd87-kubectl-1.10.3-0.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 3e1ba8d5: NOKEY

#修复
查看下载下来的rpm文件的信息

1
2

[root@k8s-node-b pki]# rpm -K /var/cache/yum/x86_64/7/kubernetes/packages/571c54a5e4049647541a24d77337898fb4243f6b39c7f3df5d92ab180055bd87-kubectl-1.10.3-0.x86_64.rpm
/var/cache/yum/x86_64/7/kubernetes/packages/571c54a5e4049647541a24d77337898fb4243f6b39c7f3df5d92ab180055bd87-kubectl-1.10.3-0.x86_64.rpm: RSA sha1 ((MD5) PGP) md5 NOT OK (MISSING KEYS: (MD5) PGP#3e1ba8d5)

查看当前系统是否已经导入相应的key文件

1
2
3

[root@k8s-node-b pki]# rpm -q gpg-pubkey-*
gpg-pubkey-f4a80eb5-53a7ff4b
gpg-pubkey-ba07f4fb-5ac168db

回看之前安装过程中导入的key与rpm的并不相附,应该是还有key没有导入;
查看repo文件

[root@k8s-node-b pki]# cat /etc/yum.repos.d/kubernetes.repo 
[kubernetes]
name=Kubernetes
baseurl=http://yum.kubernetes.io/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg
https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg

应该是写入repo文件时换行了,导入没有导入正确的key文件
修复repo文件,也可手工导入相应的key文件

[root@k8s-node-b pki]# rpm --import https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
[root@k8s-node-b pki]# rpm -q gpg-pubkey-*
gpg-pubkey-f4a80eb5-53a7ff4b
gpg-pubkey-ba07f4fb-5ac168db
gpg-pubkey-3e1ba8d5-558ab6a8

删除key使用下面的命令

1	[root@k8s-node-b pki]# rpm -e --allmatches gpg-pubkey-3e1ba8d5-558ab6a8

重新执行安装

Downloading packages:
warning: /var/cache/yum/x86_64/7/kubernetes/packages/571c54a5e4049647541a24d77337898fb4243f6b39c7f3df5d92ab180055bd87-kubectl-1.10.3-0.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 3e1ba8d5: NOKEY
Retrieving key from https://packages.cloud.google.com/yum/doc/yum-key.gpg
Importing GPG key 0xA7317B0F:
 Userid     : "Google Cloud Packages Automatic Signing Key <gc-team@google.com>"
 Fingerprint: d0bc 747f d8ca f711 7500 d6fa 3746 c208 a731 7b0f
 From       : https://packages.cloud.google.com/yum/doc/yum-key.gpg
Is this ok [y/N]: y
Retrieving key from https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
Importing GPG key 0x3E1BA8D5:
 Userid     : "Google Cloud Packages RPM Signing Key <gc-team@google.com>"
 Fingerprint: 3749 e1ba 95a8 6ce0 5454 6ed2 f09c 394c 3e1b a8d5
 From       : https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
Is this ok [y/N]: y
Running transaction check
Running transaction test
Transaction test succeeded