Upgrade to 15.3 fails: missing GPG key(s)

English Install/Boot/Login
#1

I followed exactly this guide:

https://en.opensuse.org/SDB:System_upgrade

to upgrade from 15.2 to 15.3

But, after invoking
zypper --releasever=15.3 dup --download-in-advance

I get these errors:


Do you agree with the terms of the license? [yes/no] (no): yes
In cache AdobeICCProfiles-2.0-lp153.1.46.noarch.rpm                                                                             (1/7213),   2.5 MiB (  5.4 MiB unpacked)
In cache GeoIP-data-1.6.12-6.3.1.noarch.rpm                                                                                     (2/7213),  13.9 KiB (    0   B unpacked)
In cache Mesa-KHR-devel-20.2.4-57.13.x86_64.rpm                                                                                 (3/7213), 141.7 KiB ( 10.2 KiB unpacked)
In cache MozillaFirefox-branding-openSUSE-68-lp153.4.22.x86_64.rpm                                                              (4/7213),  14.5 KiB (  8.4 KiB unpacked)
In cache akonadi-mime-20.04.2-bp153.1.34.x86_64.rpm                                                                             (5/7213),  35.0 KiB ( 46.7 KiB unpacked)
In cache alsa-ucm-conf-1.2.4-4.13.noarch.rpm                                                                                    (6/7213),  75.0 KiB (154.9 KiB unpacked)
In cache apparmor-docs-2.13.6-1.31.noarch.rpm                                                                                   (7/7213), 292.5 KiB (358.6 KiB unpacked)
Retrieving package attica-qt5-5.76.0-bp153.1.15.x86_64                                                                          (8/7213),  36.5 KiB ( 58.3 KiB unpacked)
Retrieving: attica-qt5-5.76.0-bp153.1.15.x86_64.rpm ..............................................................................................................[done]
attica-qt5-5.76.0-bp153.1.15.x86_64.rpm:
    Header V3 RSA/SHA256 Signature, key ID 65176565: NOKEY

Looking for **gpg key ID 65176565** in cache /var/cache/zypp/pubkeys.
Repository Haupt-Repository (OSS) does not define additional 'gpgkey=' URLs.
attica-qt5-5.76.0-bp153.1.15.x86_64 (Haupt-Repository (OSS)): Signature verification failed [4-Signatures public key is not available]
Abort, retry, ignore? [a/r/i] (a):

Why is there a gpg key missing!?
I did a zypper up with the old 15.2 repos before upgrade.

How can that happen that gpg keys is missing!?

These are my repos now when trying the upgrade:


Repository priorities are without effect. All enabled repositories share the same priority.

#  | Alias                           | Name                                                    | Enabled | GPG Check | Refresh | URI
---+---------------------------------+---------------------------------------------------------+---------+-----------+---------+----------------------------------------------------------------------------------------------------------
 1 | KDE:Extra                       | KDE:Extra                                               | No      | ----      | ----    | https://download.opensuse.org/repositories/KDE:/Extra/openSUSE_Leap_15.2/
 2 | Kernel:stable                   | Kernel:stable                                           | No      | ----      | ----    | https://download.opensuse.org/repositories/Kernel:/stable/standard/
 3 | Kernel_Tools                    | Kernel Tools                                            | No      | ----      | ----    | https://download.opensuse.org/repositories/Kernel:/tools/openSUSE_Leap_15.2/
 4 | Packman_Essentials              | Packman Essentials                                      | No      | ----      | ----    | https://ftp.gwdg.de/pub/linux/packman/suse/openSUSE_Leap_15.2/Essentials/
 5 | Packman_Extra                   | Packman Extra                                           | No      | ----      | ----    | https://ftp.gwdg.de/pub/linux/packman/suse/openSUSE_Leap_15.2/Extra/
 6 | Packman_Multimedia              | Packman Multimedia                                      | No      | ----      | ----    | https://ftp.gwdg.de/pub/linux/packman/suse/openSUSE_Leap_15.2/Multimedia/
 7 | Security                        | Security                                                | No      | ----      | ----    | https://download.opensuse.org/repositories/security/openSUSE_Leap_15.2/
 8 | X11:Utilities                   | X11:Utilities                                           | No      | ----      | ----    | https://download.opensuse.org/repositories/X11:/Utilities/openSUSE_Leap_15.2/
 9 | XOrg                            | XOrg                                                    | No      | ----      | ----    | https://download.opensuse.org/repositories/X11:/XOrg/openSUSE_Leap_15.2/
10 | download.opensuse.org-non-oss   | Haupt-Repository (NON-OSS)                              | Yes     | (rp) Yes  | Yes     | https://download.opensuse.org/distribution/leap/15.2/repo/non-oss/
11 | download.opensuse.org-non-oss_1 | Aktualisierungs-Repository (Nicht-Open-Source-Software) | Yes     | (rp) Yes  | Yes     | https://download.opensuse.org/update/leap/15.2/non-oss/
12 | download.opensuse.org-oss       | Haupt-Repository (OSS)                                  | Yes     | (rp) Yes  | Yes     | https://download.opensuse.org/distribution/leap/15.2/repo/oss/
13 | download.opensuse.org-oss_1     | Hauptaktualisierungs-Repository                         | Yes     | (rp) Yes  | Yes     | https://download.opensuse.org/update/leap/15.2/oss
14 | openSUSE_Leap_${releasever}     | Emulators                                               | No      | ----      | ----    | https://download.opensuse.org/repositories/Emulators/openSUSE_Leap_15.2/
15 | openSUSE_Leap_${releasever}_1   | Hardware                                                | No      | ----      | ----    | https://download.opensuse.org/repositories/hardware/openSUSE_Leap_15.2/
16 | openSUSE_Leap_${releasever}_2   | Sauerland-RRouter                                       | No      | ----      | ----    | https://download.opensuse.org/repositories/home:/Sauerland:/branches:/home:/Sauerland/openSUSE_Leap_15.2/
17 | openSUSE_Leap_${releasever}_3   | Graphics                                                | No      | ----      | ----    | https://download.opensuse.org/repositories/graphics/openSUSE_Leap_15.2/
18 | openSUSE_Leap_${releasever}_4   | Publishing_gscan                                        | No      | ----      | ----    | https://download.opensuse.org/repositories/Publishing/openSUSE_Leap_15.2/
19 | openSUSE_Leap_${releasever}_5   | Sauerland                                               | No      | ----      | ----    | https://download.opensuse.org/repositories/home:/Sauerland/openSUSE_Leap_15.2/
20 | openSUSE_Leap_${releasever}_6   | multimedia_pulseaudio                                   | No      | ----      | ----    | https://download.opensuse.org/repositories/multimedia:/libs/openSUSE_Leap_15.2/
21 | openSUSE_Leap_${releasever}_7   | tiwai_PA-bluez-upgrade                                  | No      | ----      | ----    | https://download.opensuse.org/repositories/home:/tiwai:/leap-15.2:/update/openSUSE_Leap_15.2/
22 | openSUSE_Leap_${releasever}_8   | ecsos:fritzbox:RogerRouter                              | No      | ----      | ----    | https://download.opensuse.org/repositories/home:/ecsos:/fritzbox:/RogerRouter/openSUSE_Leap_15.2/
23 | openSUSE_Tumbleweed             | efitools (secureboot Tools)                             | No      | ----      | ----    | https://download.opensuse.org/repositories/home:/jejb1:/UEFI/openSUSE_Tumbleweed/
24 | repo-debug                      | openSUSE-Leap-15.2-Debug                                | No      | ----      | ----    | https://download.opensuse.org/debug/distribution/leap/15.2/repo/oss/
25 | repo-debug-non-oss              | openSUSE-Leap-15.2-Debug-Non-Oss                        | No      | ----      | ----    | https://download.opensuse.org/debug/distribution/leap/15.2/repo/non-oss/
26 | repo-debug-update               | openSUSE-Leap-15.2-Update-Debug                         | No      | ----      | ----    | https://download.opensuse.org/debug/update/leap/15.2/oss/
27 | repo-debug-update-non-oss       | openSUSE-Leap-15.2-Update-Debug-Non-Oss                 | No      | ----      | ----    | https://download.opensuse.org/debug/update/leap/15.2/non-oss/
28 | repo-source                     | openSUSE-Leap-15.2-Source                               | Yes     | (rp) Yes  | Yes     | https://download.opensuse.org/source/distribution/leap/15.2/repo/oss/
29 | repo-source-non-oss             | openSUSE-Leap-15.2-Source-Non-Oss                       | Yes     | (rp) Yes  | Yes     | https://download.opensuse.org/source/distribution/leap/15.2/repo/non-oss/
#2

https://bugzilla.suse.com/show_bug.cgi?id=1184326

#3 
Looking for gpg key ID 65176565 in cache /var/cache/zypp/pubkeys.

Thats the key of:

gpg-pubkey-65176565-5d94a381    gpg(openSUSE:Backports OBS Project <openSUSE:Backports@build.opensuse.org>)

Its a new Repo.

I had the same errors but after Installation and a :

zypper up

the key was added…

But you should remove some Repos from your Repo list…

#4

WTF…
Why didn´t they just supply an updated build key rpm for Leap 15.2!? That would supply Leap 15.2 with all keys before upgrading, it´s that easy to fix.

#5

The problem is, you need them before starting the upgrade…
BTW, Debian has it´s own dedicated keyring / keystore website where one can fetch needed/missing keys.
This is not only highly useful, but a great web of trust for their keys.
It wouldn´t add much more strain to the security guys to maintain such a useful thing.

Housekeeping not yet finished. As you know, some(many) are still needed to get a really productive system…

#6

As root:

rpm --import http://download.opensuse.org/distribution/leap/15.3/repo/oss/gpg-pubkey-65176565-59787af5.asc