Issue with in-place Template upgrade from Fedora-40-Xfce to Fedora-41-Xfce

Hello,

Recently I was following documentation at How to upgrade a Fedora template in-place | Qubes OS for upgrading Fedora-40-xfce to Fedora-41-xfce, and encountered the error below at the end.

How do I address and fix this issue? Please help.

[user@fedora-41-xfce ~]$ sudo dnf update
Updating and loading repositories:
 Audirvana                              100% |   4.4 KiB/s |   2.5 KiB |  00m01s
 Fedora 41 openh264 (From Cisco) - x86_ 100% |   4.0 KiB/s |   4.8 KiB |  00m01s
 Fedora 41 - x86_64                     100% |   6.4 MiB/s |  35.4 MiB |  00m06s
 Fedora 41 - x86_64 - Updates           100% |   1.4 MiB/s |  11.7 MiB |  00m08s
 Qubes OS Repository for VM (updates)   100% |   2.1 KiB/s |   2.8 KiB |  00m01s
>>> Librepo error: repomd.xml GPG signature verification error: Signing key not 
Failed to download metadata (baseurl: "https://yum.qubes-os.org/r4.2/current/vm/fc41") for repository "qubes-vm-r4.2-current"
 Librepo error: repomd.xml GPG signature verification error: Signing key not found

Thanks.

2 Likes

Hmm… It does not work for my case… The same error seems to persist.

[user@fedora-41-xfce ~]$ sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-748bf44daa
Updating and loading repositories:
 Fedora 41 openh264 (From Cisco) - x86_ 100% |   1.2 KiB/s | 989.0   B |  00m01s
 Fedora 41 - x86_64 - Updates           100% | 118.9 KiB/s |  27.8 KiB |  00m00s
 Audirvana                              100% |   5.7 KiB/s |   3.0 KiB |  00m01s
 Fedora 41 - x86_64                     100% | 126.5 KiB/s |  30.5 KiB |  00m00s
 Fedora 41 - x86_64 - Test Updates      100% | 628.4 KiB/s |   2.3 MiB |  00m04s
 Qubes OS Repository for VM (updates)   100% |   2.8 KiB/s |   2.8 KiB |  00m01s
>>> Librepo error: repomd.xml GPG signature verification error: Signing key not 
Failed to download metadata (baseurl: "https://yum.qubes-os.org/r4.2/current/vm/fc41") for repository "qubes-vm-r4.2-current"
 Librepo error: repomd.xml GPG signature verification error: Signing key not found

I looked the FEDORA-2025-748bf44daa release fix and I read “Updates may require up to 24 hours to propagate to mirrors”, so please retry later…

As it’s a Fedora issue, you could add a comment/question to the #2352958 Fedora issue and/or the FEDORA-2025-748bf44daa release fix.

As an alternative, remember that the preferred way to upgrade a template is to download the new one. So I advice that you download the fedora-41-xfce template with qvm-template-gui, see the related fedora-40-approaching-end-of-life announce.

Hello,

I have confirmed that fresh download and installation of fedora-41-xfce does work without DNF issue. But the amount of modifications that are in place with fedora-40-xfce on the running system, I would like to get in-place option to work out.

It seems that I am going to play a game of time, if the fix gets propagated into downstream earlier or fedora-40-xfce end-of-life arrives earlier…

I need to keep eyes on DNF version (currently 5.2.11.0) of the fresh fedora-41-xfce template frequently, I guess.

Thanks.

Hello!

I have done the in-place upgrade again, and it went fine today.

[user@fedora-41-xfce ~]$ sudo dnf upgrade
Updating and loading repositories:
Repositories loaded.
Nothing to do.