Install of 2.x on almalinux 10

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):2.19 (required as the version that magento 2.4.6 supports)

Describe the issue:instructions on RPM - OpenSearch Documentation do not work. repo given only holds versions 3 so you have to know/guess the old repo file. thereafter it fails to install with gpg issues. checked and found that there is a different key for older verions, but that seems to be installed correctly so no idea what to do at this point

Configuration:yum install opensearch

Relevant Logs or Screenshots:

[SKIPPED] opensearch-2.19.3-linux-x64.rpm: Already downloaded
OpenSearch 2.x 64 kB/s | 4.2 kB 00:00
Importing GPG key 0x9310D3FC:
Userid : “”
Fingerprint: C5B7 4989 65EF D1C2 924B A9D5 39D3 1987 9310 D3FC
From : https ://artifacts.opensearch.org/publickeys/opensearch.pgp
Is this ok [y/N]: y
error: Certificate 39D319879310D3FC:
Policy rejects 39D319879310D3FC: No binding signature at time 2025-09-25T14:48:26Z
Key import failed (code 2). Failing package is: opensearch-2.19.3-1.x86_64
GPG Keys are configured as: https ://artifacts.opensearch.org/publickeys/opensearch.pgp

Hey @danielpugh ,

Could you please share all the commands ran before error.

Leeroy.

Hi @Leeroy

ok here you go, sorry its quite a bit

80 sudo curl -SL https ://artifacts.opensearch.org/releases/bundle/opensearch/2.x/opensearch-2.x.repo -o /etc/yum.repos.d/opensearch-2.x.repo
81 yum update
82 yum --showduplicates list opensearch
83 cd /etc
84 cd yum.repos.d/
85 ls
86 rm opensearch-3.x.repo
87 yum update
88 yum --showduplicates list opensearch
89 yum install opensearch
90 wget -o opensearchkey https ://artifacts.opensearch.org/publickeys/opensearch.pgp
91 yum install wget
92 cd ~
93 wget -o opensearchkey https ://artifacts.opensearch.org/publickeys/opensearch.pgp
94 gpg --import opensearchkey
95 wget -o opensearchkey https://artifacts.opensearch.org/publickeys/opensearch.pgp
96 vi opensearchkey
97 vi opensearch.pgp
98 gpg --import opensearch.pgp
99 yum install opensearch
100 cd /etc
101 cd yum.repos.d/
102 ls
103 vi opensearch-2.x.repo
104 dnf clean all
105 rm -r /var/cache/dnf
106 dnf upgrade
107 yum install opensearch
108 rm -r /var/cache/dnf
109 rm -rf /var/cache/dnf
110 dnf clean all
111 dnf upgrade
112 yum install opensearch
113 history | grep wget
114 cd ~
115 wget https ://artifacts.opensearch.org/publickeys/opensearch.pgp?ajs_aid=46448985-401b-4ce2-975d-4c28af0f6c9b
116 mv opensearch.pgp?ajs_aid=46448985-401b-4ce2-975d-4c28af0f6c9b opensearch-2.pgp
117 history | grep php
118 history | grep pgp
119 gpg --import opensearch-2.pgp
120 yum install opensearch
121 gpg --showkeys
122 gpg --show-keys
123 gpg --show-keys ./opensearch-2.pgp
124 gpg -v
125 d /etc
126 cd /etc
127 cd yum.repos.d/
128 ls
129 rm opensearch-2.x.repo

note uninstalled in the last command to effectively be left with the same system as at the start

also note that the urls in all my posts are deliberately broken as im a new user and cannot post more than 2 links

Hi @danielpugh ,

Are you using RPM or yum? It looks like you’re mixing these.

From checking it looks like yum is listing the correct versions.

ddd

sudo curl -SL https://artifacts.opensearch.org/releases/bundle/opensearch/2.x/opensearch-2.x.repo -o /etc/yum.repos.d/opensearch-2.x.repo
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   242  100   242    0     0    613      0 --:--:-- --:--:-- --:--:--   614
yum clean all
0 files removed
yum repolist
repo id                                                               repo name
appstream                                                             AlmaLinux 10 - AppStream
baseos                                                                AlmaLinux 10 - BaseOS
extras                                                                AlmaLinux 10 - Extras
opensearch-2.x                                                        OpenSearch 2.x
yum list opensearch --showduplicates 
AlmaLinux 10 - AppStream                                                                                              4.2 MB/s | 2.2 MB     00:00    
AlmaLinux 10 - BaseOS                                                                                                  10 MB/s |  15 MB     00:01    
AlmaLinux 10 - Extras                                                                                                  28 kB/s |  11 kB     00:00    
OpenSearch 2.x                                                                                                        7.2 kB/s | 498  B     00:00    
OpenSearch 2.x                                                                                                        132 kB/s | 4.2 kB     00:00    
Importing GPG key 0x9310D3FC:
 Userid     : ""
 Fingerprint: C5B7 4989 65EF D1C2 924B A9D5 39D3 1987 9310 D3FC
 From       : https://artifacts.opensearch.org/publickeys/opensearch.pgp
Is this ok [y/N]: y
OpenSearch 2.x                                                                                                         98 kB/s |  11 kB     00:00    
Available Packages
opensearch.aarch64                                                       2.0.0-1                                                        opensearch-2.x
opensearch.x86_64                                                        2.0.0-1                                                        opensearch-2.x
opensearch.aarch64                                                       2.0.1-1                                                        opensearch-2.x
opensearch.x86_64                                                        2.0.1-1                                                        opensearch-2.x
opensearch.aarch64                                                       2.1.0-1                                                        opensearch-2.x
opensearch.x86_64                                                        2.1.0-1                                                        opensearch-2.x
opensearch.aarch64                                                       2.2.0-1  

You can see here - RPM - OpenSearch Documentation

Also if using 3.X make sure you’re using the correct keys for 3.X.

Leeroy.

Hi,

Im using yum
yes, as mentioned i was able to get the right versions by changing the repo file on the default install page. It wasnt obvious to me that there is a separate install guide for the old version

anyway - as mentioned i need 2.19 and when following the instructions it fails with the error i posted before.

i just went through the entire process again as you can see below - same problem:

[root@db elasticsearch]#

env OPENSEARCH_INITIAL_ADMIN_PASSWORD=temp yum install opensearch
Last metadata expiration check: 0:00:51 ago on Thu Sep 25 17:57:04 2025.
Dependencies resolved.

Package Architecture Version Repository Size

Installing:
opensearch x86_64 2.19.3-1 opensearch-2.x 865 M

Transaction Summary

Install 1 Package

Total download size: 865 M

Installed size: 1.2 G
Is this ok [y/N]: y
Downloading Packages:
opensearch-2.19.3-linux-x64.rpm 256 MB/s | 865 MB 00:03

Total 256 MB/s | 865 MB 00:03
OpenSearch 2.x 321 kB/s | 4.2 kB 00:00
Importing GPG key 0x9310D3FC:
Userid : “”
Fingerprint: C5B7 4989 65EF D1C2 924B A9D5 39D3 1987 9310 D3FC
From : https ://artifacts.opensearch.org/publickeys/opensearch.pgp
Is this ok [y/N]: y
error: Certificate 39D319879310D3FC:
Policy rejects 39D319879310D3FC: No binding signature at time 2025-09-25T16:58:05Z
Key import failed (code 2). Failing package is: opensearch-2.19.3-1.x86_64
GPG Keys are configured as: https ://artifacts.opensearch.org/publickeys/opensearch.pgp
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing ‘yum clean packages’.
Error: GPG check FAILED

ok for anyone with the same issue - to get it to install you have to relax the security using the command “update-crypto-policies --set LEGACY”

1 Like

Nice @danielpugh ,

All is working now? no other issues in install?

Leeroy.

Hi @Leeroy ,

Mostly ok although a lot of messing about re.tls only to find out that it’s not supported by Magento followed by disabling SSL and to be honest security.

It would be a big step forward for Magento to support more recent versions and specifically importing the TLS cert (or alternative) so that the default isn’t having to disable everything.

Anyway other than that all good :wink:

Thank you!

Dan

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.