diff --git a/roles/copr/keygen/tasks/main.yml b/roles/copr/keygen/tasks/main.yml
index 57d2d84699..1c6f5924bd 100644
--- a/roles/copr/keygen/tasks/main.yml
+++ b/roles/copr/keygen/tasks/main.yml
@@ -27,6 +27,9 @@
 - name: make sure there is gnupg2 2.0.x as temporary workaround till we add support of v4 to obs-sign
   dnf: name=https://kojipkgs.fedoraproject.org/work/tasks/164/12940164/gnupg2-2.0.29-1.fc22.x86_64.rpm state=present
 
+- name: exclude gnupg2 from upgrade
+  ini_file: dest=/etc/dnf/dnf.conf section=main option=exclude value=gnupg2
+
 - name: put keygen vhost for httpd
   copy: src="httpd/copr-keygen.conf" dest="/etc/httpd/conf.d/copr-keygen.conf"
   notify: