Apparently, no GPG-signature or public key is offered.
Maybe Uruk developers can offer this in the future.Nevertheless, I think I'm gonna give it a try - at least start a live session to get an impression.
I'm a bit concerned about the fact that all one can do to verify the download
of Uruk is checking MD5/SHA256 sums.
