Once you have downloaded an image, verify it for security and integrity. To verify your image, start by downloading the proper CHECKSUM file into the same directory as the image you downloaded. Then follow three easy steps.
First, import Fedora's GPG key(s):
$ curl https://getfedora.org/static/fedora.gpg | gpg --import
Note that you can verify the details of these keys below. Now, verify that the CHECKSUM file is valid:
$ gpg --verify-files *-CHECKSUM
The CHECKSUM file should have a good signature from one of the keys described below. Lastly, check that your download's checksum matches:
$ sha256sum -c *-CHECKSUM
If the output states that the file is valid, then it's ready to use!
Comments
Post a Comment
https://gengwg.blogspot.com/