Starting December 1, 2026, CloudLinux will sign all new packages for CloudLinux 7, 8, and 9 exclusively with the new GPG key.

If your cloudlinux-release package is current, nothing changes for you and no action is needed.

Who Needs to Act

Only servers running an outdated cloudlinux-release. The new key ships inside that package, so any server that has been receiving updates already has it.

To check the installed version, run:

rpm -q cloudlinux-release

The new key is present from these versions onward:

CloudLinux Minimum version containing the new key
CloudLinux 9 cloudlinux-release-9.6-2
CloudLinux 8 cloudlinux-release-8.10-8
CloudLinux 7 cloudlinux-release-7.9-2.12

If the installed version is lower than the one listed for your CloudLinux version, update it before December 1.

What to Do

Update the release package:

yum update cloudlinux-release

Then confirm the new key is installed:

rpm -q gpg-pubkey --qf '%{SUMMARY}\n' | grep 'CloudLinux Extension Signer'

A line comes back → the key is in place and the server is ready.

Nothing comes back → the key is not installed yet.

One package update per server is all it takes.

After the Switch Date

A server without the new key will fail signature verification on CloudLinux packages, so it stops receiving updates. Running the update above restores it.

Questions?

If you have questions or run into issues, contact our support team.