Dnf can download keys now?

The last time I added a package repository to a template with dnf I had to manually download and import the key. Now dnf seems to handle that automatically. Does that sound correct?

Yes. It is a dnf5 plugin. You can disable it if you like:

https://dnf5.readthedocs.io/en/latest/libdnf5_plugins/expired-pgp-keys.8.html

For background, it was conceived very recently (around February 2025).

2 Likes
Off-topic comment on dnf

I hate how ā€œdnfā€ is going the Python way and introduces changes that are not backwards compatible… Paint me disappointed :grimacing:

2 Likes
Off-topic comment on dnf

As someone who had maybe 10 casual contributions to DNF5 in its last release, I can take some of the blame :wink:

But seriously talking, it is getting better. It is still in heavy development.

1 Like
Off-topic comment on dnf

I really appreciate your work :clap:
And… we end up with the need for different instructions for dnf5 as seen on the Brave browser install page.
My point is that if there was a new command, ā€œdnf5ā€, with a new syntax, it would be OK.

1 Like
Unrelated off-topic comment on dnf

I think it’s necessary to forget any expectations of former behaviour… this ā€˜low priority rfe’ blew me away: https://github.com/rpm-software-management/dnf5/issues/1985

It seems that ā€œAssume nothingā€ is the only policy. Full marks to the reporter for having such a careful, security-oriented workflow.

1 Like