With the gpg issue, log in as root and do:
killall fwupd gpg2 --list-sigs
if you see the LVFS key, "gpg2 --delete-keys 4538BAC2" -- then remove or change /etc/pki/fwupd-metadata/GPG-KEY-Linux-Vendor-Firmware-Service
then restart fwupd and try a "fwupdmgr refresh" -- this should report:
failed to update metadata: Could not check signature '48A6D80E4538BAC2' as no public key
I can't get your reproducer to work on Fedora, as I'm using gpg2 throughout rather than gpg.
With the gpg issue, log in as root and do:
killall fwupd
gpg2 --list-sigs
if you see the LVFS key, "gpg2 --delete-keys 4538BAC2" -- then remove or change /etc/pki/ fwupd-metadata/ GPG-KEY- Linux-Vendor- Firmware- Service
then restart fwupd and try a "fwupdmgr refresh" -- this should report:
failed to update metadata: Could not check signature '48A6D80E4538BAC2' as no public key
I can't get your reproducer to work on Fedora, as I'm using gpg2 throughout rather than gpg.