CentOS 如何使用 GPG 密钥
CentOS 项目发布的每个稳定的 RPM 包都使用 GPG 签名进行签名。默认情况下，yum 和图形更新工具将验证这些签名并拒绝安装任何未签名或签名不正确的软件包。您应该在安装之前始终验证包的签名。这些签名确保您安装的软件包是由 CentOS 项目生成的，并且没有被提供软件包的任何镜像或网站更改。
导入密钥
Project GPG 密钥包含在 centos-release 软件包中，通常可以在 /etc/pki/rpm-gpg 中找到。请注意，并非此目录中的所有密钥都由 CentOS 项目使用。某些密钥可能会由第 3 方存储库放置在该目录中，以确保安全使用额外的软件包。CentOS 使用的密钥在 yum 存储库配置中启用，因此通常不需要手动导入它们。
如果您想验证系统上安装的密钥是否与此处列出的密钥匹配，可以使用 GnuPG 检查密钥指纹是否匹配。例如：
gpg --quiet --with-fingerprint /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
pub 4096R/F4A80EB5 2014-06-23 CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>
Key fingerprint = 6341 AB27 53D7 8A78 A7C2 7BB1 24C6 A8A7 F4A8 0EB5
项目键
CentOS 项目当前正在使用以下密钥。请注意，CentOS Linux 版本可能分配了多个 GPG 密钥（取决于版本和体系结构）。值得注意的是，对于 CentOS 8，只有一个密钥可用于所有架构以及后续版本。不过，SpecialInterestGroups (SIG) 仍将使用不同的密钥（见下文）
CentOS Project Keys (starting from CentOS 8)
CentOS Official Key
pub 4096R/8483C65D 2019-05-03 CentOS (CentOS Official Signing Key) <security@centos.org>
Key fingerprint = 99DB 70FA E1D7 CE22 7FB6 4882 05B5 55B3 8483 C65D
CentOS Testing Key
pub 4096R/5BA5FA8D 2019-05-03 CentOS Testing (CentOS Testing content) <security@centos.org>
Key fingerprint = 793D 9072 6BF0 22DA E868 2C36 762E 6585 5BA5 FA8D
CentOS-7 Keys
CentOS 7 Signing Key
pub 4096R/F4A80EB5 2014-06-23 CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>
Key fingerprint = 6341 AB27 53D7 8A78 A7C2 7BB1 24C6 A8A7 F4A8 0EB5
CentOS 7 Debug Key
pub 2048R/B6792C39 2014-07-15 CentOS-7 Debug (CentOS-7 Debuginfo RPMS) <security@centos.org>
Key fingerprint = 759D 690F 6099 2D52 6A35 8CBD D0F2 5A3C B679 2C39
CentOS 7 Testing Key
pub 4096R/8FAE34BD 2014-06-04 CentOS-7 Testing (CentOS 7 Testing content) <security@centos.org>
Key fingerprint = BA02 A5E6 AFF9 70F7 269D D972 C788 93AC 8FAE 34BD
CentOS 6 Keys
CentOS-6 Signing Key
pub 4096R/C105B9DE 2011-07-03 CentOS-6 Key (CentOS 6 Official Signing Key) <centos-6-key@centos.org>
Key fingerprint = C1DA C52D 1664 E8A4 386D BA43 0946 FCA2 C105 B9DE
CentOS-6 Debug Key
pub 4096R/D0FF3D16 2011-07-03 CentOS-6 Debuginfo Key (CentOS-6 Debuginfo Signing Key) <centos-6-debug-key@centos.org>
Key fingerprint = 69B3 0F26 BA2B 3AA4 C27C E4F5 3B75 CF79 D0FF 3D16
CentOS-6 Testing Key
pub 4096R/EF1D6DB8 2011-07-03 CentOS-6 Testing Key (CentOS-6 Test and Beta Signing Key) <centos-6-testing-key@centos.org>
Key fingerprint = 4233 9C29 8BC4 352C A4F9 7504 119C 1A87 EF1D 6DB8
CentOS-6 Security Key
pub 4096R/FE837F6F 2011-07-03 CentOS-6 Security Key (CentOS-6 Official Security Key) <centos-6-security-key@centos.org>
Key fingerprint = 0830 F43C 928A A5A8 A6F1 AF97 0B13 2C3F FE83 7F6F
CentOS 5 Keys
CentOS-5 Signing Key
pub 1024D/E8562897 2007-01-06 CentOS-5 Key (CentOS 5 Official Signing Key) <centos-5-key@centos.org>
Key fingerprint = 473D 66D5 2122 71FD 51CC 17B1 A8A4 47DC E856 2897
sub 1024g/1E9EA3B6 2007-01-06 [expires: 2017-01-03]
CentOS-5 Beta Key
pub 1024D/092D7B2B 2007-01-06 CentOS-5 Beta Key (CentOS 5 Beta Signing Key) <centos-5-beta-key@centos.org>
Key fingerprint = 5D82 2DFA 48B3 BE04 586C BD4D CFDA 6881 092D 7B2B
sub 1024g/DA743639 2007-01-06 [expires: 2017-01-03]
社区驱动项目密钥
以下密钥用于签署 CentOS 项目生态系统中社区主导的工作。
SIG Keys
Extras (meta repo for all SIGs)
pub 2048R/1D997668 2021-12-16 CentOS Extras SIG (https://wiki.centos.org/SpecialInterestGroup) <security@centos.org>
Key fingerprint = 363F C097 2F64 B699 AED3 968E 1FF6 A217 1D99 7668 sub 2048R/FCA5D0FF 2021-12-16
AltImages SIG
pub 2048R/B094B96D 2023-06-02 CentOS AltImages SIG (https://wiki.centos.org/SpecialInterestGroup/AltImages) <security@centos.org>
Key fingerprint = 2C77 CFEB 1F99 C559 E52B 3CDC 8DEF 9614 B094 B96D
Atomic SIG
pub 2048R/91BA8335 2015-06-10 CentOS Atomic SIG (http://wiki.centos.org/SpecialInterestGroup/Atomic) <security@centos.org>
Key fingerprint = 64E3 E755 8572 B59A 3194 52AA F17E 7456 91BA 8335
Automotive SIG
pub 2048R/68E964CA 2021-07-27 CentOS Automotive SIG (https://wiki.centos.org/SpecialInterestGroup/Automotive) <security@centos.org>
Key fingerprint = D8AC ED2D C7CE 8029 FEC7 7C08 4B41 1A90 68E9 64CA
Cloud SIG
pub 2048R/764429E6 2015-05-15 CentOS Cloud SIG (http://wiki.centos.org/SpecialInterestGroup/Cloud) <security@centos.org>
Key fingerprint = 736A F511 6D9C 40E2 AF6B 074B F9B9 FEE7 7644 29E6
ConfigManagement SIG
pub 2048R/6E8B7E8A 2018-03-21 CentOS Config Management SIG (https://wiki.centos.org/SpecialInterestGroup/ConfigManagementSIG) <security@centos.org>
Key fingerprint = C75A FB57 D5C0 F238 CB15 BEC8 1AE1 10FA 6E8B 7E8A
Core SIG
pub 2048R/15BACBD2 2021-10-06 CentOS Core SIG (https://wiki.centos.org/SpecialInterestGroup/Core) <security@centos.org>
Key fingerprint = E904 CACD 9EB8 3D8B 13BA B052 827F 178E 15BA CBD2
HyperScale SIG
pub 2048R/EB3DAC40 2021-01-18 CentOS HyperScale SIG (https://wiki.centos.org/SpecialInterestGroup/Hyperscale) <security@centos.org>
Key fingerprint = 9B04 530E 0ED6 ABC4 B2C3 58DD 2A01 FA2A EB3D AC40
Infra SIG
pub 2048R/F56D1621 2020-08-13 CentOS Infra SIG (https://wiki.centos.org/SpecialInterestGroup/Core) <security@centos.org>
Key fingerprint = 2F3B 7058 BCFA C3AB 0C72 B1BC 8B44 4FCE F56D 1621
ISA SIG
pub 2048R/DE702AB7 2023-05-26 CentOS ISA SIG (https://wiki.centos.org/SpecialInterestGroup/Isa) <security@centos.org>
Key fingerprint = D689 5EFF D4B1 2FC3 8569 C5A9 C114 980C DE70 2AB7
Kmods SIG
pub 2048R/7AE06D54 2021-06-22 CentOS Kmods SIG (https://wiki.centos.org/SpecialInterestGroup/Kmods) <security@centos.org>
Key fingerprint = 48EF 712E C5DD B68B 5280 BE45 5B8E 1A76 7AE0 6D54
Messaging SIG
pub 2048R/E16E0D12 2019-12-01 CentOS Messaging SIG (https://wiki.centos.org/SpecialInterestGroup/Messaging) <security@centos.org>
Key fingerprint = A926 5AE9 1718 68B8 2F91 5550 8301 4EBB E16E 0D12
sub 2048R/85F5BB32 2019-12-01
NFV SIG
pub 2048R/9D2A76A7 2018-02-20 CentOS NFV SIG (https://wiki.centos.org/SpecialInterestGroup/NFV) <security@centos.org>
Key fingerprint = 3515 4228 1749 01BE FA8E 69A6 2146 5E28 9D2A 76A7
OpsTools SIG
pub 2048R/51BC2A13 2017-02-20 CentOS OpsTools SIG (https://wiki.centos.org/SpecialInterestGroup/OpsTools) <security@centos.org>
Key fingerprint = 7872 8176 9AD7 3878 85EE A649 4FD9 5327 51BC 2A13
PaaS SIG
pub 2048R/2F297ECC 2016-05-18 CentOS PaaS SIG (https://wiki.centos.org/SpecialInterestGroup/PaaS) <security@centos.org>
Key fingerprint = C5E8 AB44 6FA7 893D 7490 51F1 C34C 5BD4 2F29 7ECC
Software Collections SIG
pub 2048R/F2EE9D55 2015-10-01 CentOS SoftwareCollections SIG (https://wiki.centos.org/SpecialInterestGroup/SCLo) <security@centos.org>
Key fingerprint = C4DB D535 B1FB BA14 F8BA 64A8 4EB8 4E71 F2EE 9D55
Storage SIG
pub 2048R/E451E5B5 2015-01-23 CentOS Storage SIG (http://wiki.centos.org/SpecialInterestGroup/Storage) <security@centos.org>
Key fingerprint = 7412 9C0B 173B 071A 3775 951A D4A2 E50B E451 E5B5
Virtualization SIG
pub 2048R/61E8806C 2015-06-17 CentOS Virtualization SIG (http://wiki.centos.org/SpecialInterestGroup/Virtualization) <security@centos.org>
Key fingerprint = A7C8 E761 309D 2F1C 92C5 0B62 7AEB BE82 61E8 806C
AltArch keys
社区驱动的 CentOS 到其他平台的移植。
AArch64 Key
pub 2048R/305D49D6 2015-07-28 CentOS AltArch SIG - AArch64 (http://wiki.centos.org/SpecialInterestGroup/AltArch/AArch64) <security@centos.org>
Key fingerprint = EF8F 3CA6 6EFD F32B 36CD ADF7 6C7C B6EF 305D 49D6
Arm32 Key
pub 2048R/62505FE6 2015-11-27 CentOS AltArch SIG - Arm32 (https://wiki.centos.org/SpecialInterestGroup/AltArch/Arm32) <security@centos.org>
Key fingerprint = 4D9E 39F1 499C A21D D289 77F8 CAFE F11B 6250 5FE6
PowerPC Key
pub 2048R/F533F4FA 2015-11-27 CentOS AltArch SIG - PowerPC (https://wiki.centos.org/SpecialInterestGroup/AltArch) <security@centos.org>
Key fingerprint = BAFA 3436 FC50 768E 3C3C 2E4E A963 BBDB F533 F4FA