Difference between revisions of "How-to verify GPG key of official .ISO images"

How-to verify GPG key of official .ISO images (view source)

Revision as of 01:03, 27 July 2021

50 bytes removed , 3 years ago

m

Improvements

Yochanan

Bureaucrats, Interface administrators, Moderators, Administrators, translator

51

edits

@@ Line 1: / Line 1: @@
 '''1.''' Download an ISO file and the corresponding .sig file from the official sources (see Download Manjaro below).
-Install GPG and wget using a Manjaro package manager (pamac or pacman):
+'''2.''' Install GPG and wget using a Manjaro package manager (pamac or pacman):
- pamac install gnupg wget
+   pamac install gnupg wget
 '''3.''' Next, you have 2 possible ways to import Manjaro's keys. Choose one of them:
-.1 Download all keys from the Manjaro Developers from GitLab:
+Download all keys from the Manjaro Developers from GitLab:
   wget gitlab.manjaro.org/packages/core/manjaro-keyring/-/raw/master/manjaro.gpg
 Next, import all the keys in the downloaded .gpg file into your gnupg keyring:
   gpg --import manjaro.gpg
-.2 If you do not trust GitLab, import Manjaro Build Server's GPG key to your system (afterwards, select the key by entering its number and pressing ENTER):
+If you do not trust GitLab, import the Manjaro Build Server's GPG key to your system (afterwards, select the key by entering its number and pressing ENTER):
-  gpg --keyserver keyserver.ubuntu.com --search-keys 279E7CF5D8D56EC8
+  gpg --keyserver keyserver.ubuntu.com --search-keys Manjaro Build Server
-'''4.''' Finally, verify if the .iso image file was built by the Manjaro Build Server, one of the Manjaro’s Developers, or Philip Müller:
+'''4.''' Finally, verify if the .iso image file was built by the Manjaro Build Server, Philip Müller or one of the other Manjaro Developers, or :
-  gpg --verify manjaro-xfce-21.0.7-210614-linux510.iso
+  gpg --verify manjaro-ISO-image.iso
-Compare the key, which was used to sign the .iso file to the key
+Compare the key which was used to sign the .iso file with the corresponding developer key.
-Check, whether the .ISO was verified by Manjaro Build Server's GPG key ("279E7CF5D8D56EC8"), another Manjaro Developer's key, or the Philip Müller's key which you have imported to your system.
+Check whether the .ISO was verified by Philip Müller's GPG key, another Manjaro Developer's key, or the Manjaro Build Server key which you have imported to your system.
-If this is the case, you can be sure that your .iso file was built by Philip Müller or another Manjaro Developer.
+If this is the case, you can be sure that your .iso is official.
 =Links=