On Sat, Oct 05, 2024 at 08:21:24PM +0200, roger paranoia wrote: > Hello > > I am trying to verify the templates downloaded from: > > https://qubes.3isec.org/rpm/r4.2/templates/qubes-template-jammy-minimal-4.2.0-202405182317.noarch.rpm > https://qubes.3isec.org/rpm/r4.2/templates/qubes-template-noble-minimal-4.2.0-202405211137.noarch.rpm > > On a fedora-40 based template I use the following procedure: > > [aaa@bbb ~]$ gpg2 --keyserver keyserver.ubuntu.com --recv-keys > 8B3F30F9C8C0C2EF > [aaa@bbb ~]$ gpg2 --export --armor 8B3F30F9C8C0C2EF > unman.asc > [aaa@bbb ~]$ sudo mv unman.asc /etc/pki/rpm-gpg/unman.asc > [aaa@bbb Downloads]$ rpm -K > qubes-template-jammy-minimal-4.2.0-202405182317.noarch.rpm > > and I get: > > qubes-template-jammy-minimal-4.2.0-202405182317.noarch.rpm: digests > SIGNATURES NOT OK > > So that means it doesn't pass the verification check. I've used the same > procedure many times and it worked so I don't understand what happens. Does > anybody know what is the problem? > > Thank you in advance >
Hello Mr Paranoia You need to import the key in to the rpm keyring: rpmkeys --import unman.asc Then the verification with `rpm -K` will work. unman -- I never presume to speak for the Qubes team. When I comment in the mailing lists I speak for myself. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ZwKeRuAeqJlTfROk%40thirdeyesecurity.org.
