Cloudflared repo unresolvable for RHEL distros

The will probably be fixed in a few hours. As for the 7 people that actually use cloudflared (like me :P) here’s a quick fix.

Public key rollover

I recently tried upgrading the cloudflared package on my Fedora 42 system. But received a warning about invalid signature due to an expired key. Official documentation about a Public Key Rollover on 30th October 2025. Quick fix, just update the GPG keys right? Wrong.

Unresolved hostname

Okay, this is strange. The official repo https://pkg.cloudflare.com/cloudflared.repo for CentOS, Amazon Linux, and RHEL Generic systems like Fedora, all have a new baseurl. A hostname called pkg-beta.tun.cfdata.org.

When trying to install or upgrade the cloudflared package we get this:

The root domain cfdata.org IS registered, and belongs to CloudFlare from public Whois records. But for some reason, the sub-domain doesn’t have a DNS record pointing to an IP address or CNAME.

I was a bit confused and thought it might be my local DNS settings. Nope.

Using dig +short a pkg-beta.tun.cfdata.org @1.1.1.1 also returned a NX (Non-Existent record).

Easy fix

Update your /etc/yum.repos.d/cloudflare.repo file, and replace the baseurl= with:

# Remove this baseurl=https://pkg-beta.tun.cfdata.org/cloudflared/rpm # Replace with baseurl=https://pkg.cloudflare.com/cloudflared/rpm

After that, you can update your repo and install/upgrade the cloudflared package like before.