AL2 Limitations - Amazon Linux 2
yum cannot verify GPG signatures made with GPG subkeys
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AL2 Limitations

The following topics cover various limitations of AL2, and if they have been resolved in a newer version of Amazon Linux.

yum cannot verify GPG signatures made with GPG subkeys

The version of the rpm package manager in AL2 is from before rpm added support for verifying package signatures made with GPG subkeys. If you are creating packages to be compatible with AL2, you will need to ensure you use GPG signing keys which are compatible with the rpm which is part of AL2

In order to ensure backwards compatibility for existing users, the version of rpm in AL2 receives only security backports.

The version of rpm in AL2023 includes support for verifying package signatures made with GPG subkeys.