The will probably be fixed in a few hours. As for the 7 people that actually use cloudflared (like me :P) here’s a quick fix.

Public key rollover

I recently tried upgrading the cloudflared package on my Fedora 42 system. But received a warning about invalid signature due to an expired key. Official documentation about a Public Key Rollover on 30th October 2025. Quick fix, just update the GPG keys right? Wrong.

Unresolved hostname

Okay, this is strange. The official repo https://pkg.cloudflare.com/cloudflared.repo for CentOS, Amazon Linux, and RHEL Generic systems like Fedora, all have a new baseurl. A hostname called pkg-beta.tun.cfdata.org.

When trying to install or upgrade the cloudflared package we get this:

sudo dnf install cloudflared
...
Updating and loading repositories:
 cloudflared-stable                                                                                                                                                                                 ???% |   0.0   B/s |   0.0   B |  00m00s
>>> Curl error (6): Could not resolve hostname for https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.xml [Could not resolve host: pkg-beta.tun.cfdata.org] - https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.x
>>> Curl error (6): Could not resolve hostname for https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.xml [Could not resolve host: pkg-beta.tun.cfdata.org] - https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.x
>>> Curl error (6): Could not resolve hostname for https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.xml [Could not resolve host: pkg-beta.tun.cfdata.org] - https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.x
>>> Curl error (6): Could not resolve hostname for https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.xml [Could not resolve host: pkg-beta.tun.cfdata.org] - https://pkg-beta.tun.cfdata.org/cloudflared/rpm/repodata/repomd.x
>>> Usable URL not found
Repositories loaded.
Failed to resolve the transaction:
No match for argument: cloudflared
You can try to add to command line:
  --skip-unavailable to skip unavailable packages

The root domain cfdata.org IS registered, and belongs to CloudFlare from public Whois records. But for some reason, the sub-domain doesn’t have a DNS record pointing to an IP address or CNAME.

I was a bit confused and thought it might be my local DNS settings. Nope.

Using dig +short a pkg-beta.tun.cfdata.org @1.1.1.1 also returned a NX (Non-Existent record).

Easy fix

Update your /etc/yum.repos.d/cloudflare.repo file, and replace the baseurl= with:

# Remove this
baseurl=https://pkg-beta.tun.cfdata.org/cloudflared/rpm
# Replace with
baseurl=https://pkg.cloudflare.com/cloudflared/rpm

After that, you can update your repo and install/upgrade the cloudflared package like before.

...
[2/2] Total                                                                                                                                                                                         100% |  21.1 MiB/s |  19.2 MiB |  00m01s
Importing OpenPGP key 0x8D4E5E73:
 UserID     : "CloudFlare Software Packaging 2025 <[email protected]>"
 Fingerprint: CC94B39C77AE7342A68B89628A682D308D4E5E73
 From       : https://pkg.cloudflare.com/cloudflare-public-v2.gpg
Is this ok [y/N]: y
The key was successfully imported.
[1/3] Verify package files                                                                                                                                                                          100% |  23.0   B/s |   1.0   B |  00m00s
[2/3] Prepare transaction                                                                                                                                                                           100% |   3.0   B/s |   1.0   B |  00m00s
[3/3] Installing cloudflared-0:2025.10.1-1.x86_64                                                                                                                                                   100% |  57.1 MiB/s |  39.3 MiB |  00m01s
Complete!