App Control: Linux agent upgrades from the console fails when gpg checks are enabled on RHEL

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Agent install log shows messages similar to:

Transaction Summary
================================================================================
Upgrade 1 Package

Total size: 19 M
Downloading packages:
Package b9agentRedhat8.rpm is not signed
Error: GPG check FAILED
ERROR: Failed to install b9agent, rolling back install

 

Environment

• App Control Agent: 7.4.x - 8.5.x
• Linux: All Supported Versions

Cause

Yum repo file is configured to enforce GPG checking:

$ grep -i gpgcheck /etc/yum.conf
gpgcheck=1
localpkg_gpgcheck=1
repo_gpgcheck=1

Resolution

A code change (EP-11349) beginning with Linux Agent 8.6.0 allowed for the Agent to be upgraded with GPG Checking enabled.