diff --git a/roles/repos/tasks/debian.yml b/roles/repos/tasks/debian.yml
index 8225be05..463d940b 100644
--- a/roles/repos/tasks/debian.yml
+++ b/roles/repos/tasks/debian.yml
@@ -1,4 +1,9 @@
 ---
+- name: Ensure gpg exists, for signing keys
+  ansible.builtin.apt:
+    name: gpg
+    state: present
+
 - name: Ensure Elastic Stack key is available (Debian)
   ansible.builtin.apt_key:
     url: https://artifacts.elastic.co/GPG-KEY-elasticsearch
diff --git a/roles/repos/tasks/redhat.yml b/roles/repos/tasks/redhat.yml
index 141a13be..84255e86 100644
--- a/roles/repos/tasks/redhat.yml
+++ b/roles/repos/tasks/redhat.yml
@@ -3,6 +3,11 @@
 # See https://github.com/elastic/elasticsearch/issues/85876
 # for more information why this is needed
 
+- name: Ensure gpg exists, for signing keys
+  ansible.builtin.yum:
+    name: gnupg
+    state: present
+
 - name: Workaround for EL > 8
   when:
     - ansible_distribution_major_version >= "9"
diff --git a/roles/repos/tasks/suse.yml b/roles/repos/tasks/suse.yml
index e907e3a2..ae9d1ead 100644
--- a/roles/repos/tasks/suse.yml
+++ b/roles/repos/tasks/suse.yml
@@ -1,5 +1,10 @@
 ---
 
+- name: Ensure gpg exists, for signing keys
+  community.general.zypper:
+    name: gpg2
+    state: present
+
 - name: Ensure Elastic Stack yum repository is configured (SuSE)
   community.general.zypper_repository:
     name: elastic-{{ elasticstack_release }}.x