Installation • Verifying authenticity of Debian images

We just can't get the key to verify the iso; since this is the most important verification i don't feel comfortable with that.

For shasum i know how:
SHA512SUMS.txt
SHA512SUMS.sign
debian-12.5.0-amd64-netinst.iso
Open terminal in that same folder:
sha256sum debian-12.5.0-amd64-netinst.iso
sha512sum debian-12.5.0-amd64-netinst.iso
check the outcome with the file (select/copy/find/paste)

Can someone give clear instructions for how to verify with key? Get stuck here:
https://www.debian.org/CD/verify
The keys used for these signatures are all in the Debian OpenPGP keyring and the best way to check them is to use that keyring to validate via the web of trust. To make life easier ... (?)
doesn't clearify. We are on linux.

$ gpg --keyserver keyring.debian.org --recv-keys 0x2404C9546E145360
gpg: key 2404C9546E145360: public key "Gunnar Eyal Wolf Iszaevich <gwolf@iiec.unam.mx>" imported
gpg: Total number processed: 1
gpg: imported: 1

Statistics: Posted by Waldo Jeffers — 2024-06-28 23:37 — Replies 1 — Views 42

---