Cannot install rpm-fusion packages due to missing gpg key

[sstendahl]

Hey,

I was trying to get VirtualBox to work on my install (universal blue base image with nvidia), however it seems like I'm running into issues with anything that has to do with rpm-fusion. I need VirtualBox specifically as part of a course I'm following through my employer (there's set-up images available in the course which we ought to use), so going with some KVM tool is not an option.

In short, when I try to install virtualbox, I'm getting:

sstendahl@zenobia:~$ rpm-ostree install virtualbox
Checking out tree e3e5932... done
Enabled rpm-md repositories: copr:copr.fedorainfracloud.org:ublue-os:akmods updates fedora fedora-multimedia copr:copr.fedorainfracloud.org:phracek:PyCharm google-chrome rpmfusion-nonfree-nvidia-driver rpmfusion-nonfree-steam updates-testing rpmfusion-free-updates-testing rpmfusion-nonfree-updates-testing updates-archive
Updating metadata for 'rpmfusion-nonfree-steam'... done
Updating metadata for 'updates-testing'... done
Updating metadata for 'rpmfusion-free-updates-testing'... done
error: Updating rpm-md repo 'rpmfusion-free-updates-testing': Failed to download gpg key for repo 'rpmfusion-free-updates-testing': Curl error (37): Could not read a file:// file for file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-41 [Couldn't open file /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-41]

As far as I understood (and these logs seem to kinda confirm this), rpmfusion is enabled by default in ublue. But after this error, I wanted to check what happens if I try to add them manually, maybe that would shake things into place and go through the proper procedues with regard to signing these keys:

sstendahl@zenobia:~$  sudo rpm-ostree install https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm
[sudo] password for sstendahl: 
Sorry, try again.
[sudo] password for sstendahl: 
Downloading https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-41.noarch.rpm...done
Downloading https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-41.noarch.rpm...done
Checking out tree e3e5932... done
Enabled rpm-md repositories: copr:copr.fedorainfracloud.org:ublue-os:akmods updates fedora fedora-multimedia copr:copr.fedorainfracloud.org:phracek:PyCharm google-chrome rpmfusion-nonfree-nvidia-driver rpmfusion-nonfree-steam updates-testing rpmfusion-free-updates-testing rpmfusion-nonfree-updates-testing updates-archive
Updating metadata for 'rpmfusion-free-updates-testing'... done
error: Updating rpm-md repo 'rpmfusion-free-updates-testing': Failed to download gpg key for repo 'rpmfusion-free-updates-testing': Curl error (37): Could not read a file:// file for file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-41 [Couldn't open file /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-41]

But the same issue occurs. As this seems to be coupled to the repo setup, and this is an immutable distro, I think this is the proper place to file this issue as it looks like a misconfiguration. However, I don't rule out this being an upstream issue at rpm-fusion or even just Fedora Silverblue, so feel free to close this issue if that is the case.

Edit: Seems like VirtualBox might be somewhat problematic due to requiring out-of-tree kernel modules, but that seems to be unrelated to the issue here. I'm getting the same result with rpm-ostree install google-chrome for instance.

[sstendahl]

Almost forgot to add explictly, but I'm running the silverblue-nvidia:latest images:

sstendahl@zenobia:~$ rpm-ostree status
State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-nvidia:latest
                   Digest: sha256:737348c1a71df938fc3d5cae6ed3b7a1e94be4adb04f237b3cda60de61e9445f
                  Version: 41.20250115.0 (2025-01-16T04:08:54Z)

  ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-nvidia:latest
                   Digest: sha256:9365ee285c9887e5256658a0a5fe866cab19dfb3169bfcd7f902ec607aab856c
                  Version: 41.20250114.0 (2025-01-15T04:09:58Z)

I know the base images are strictly not recommended, but I am really uninterested in the other tweaks that are done in Bluefin and the likes (even though they are fantastic projects, not discounting that!).

[KyleGospo]

You'll want to use qemu instead, virtualbox modules won't work here.

For other things you need from rpmfusion, use distrobox.

[m2Giles]

We strongly recommend qemu over virtualbox.

That said if it is absolutely a requirement, you can install the kmod as part of a custom image.

Since you are using a base image, I'm assuming that you have quite a few things layered already. Moving to a custom image would allow you to have those be apart of the image directly.