gpg verify iso download

Edit

download dvd dvdrom file fingerprint gpg iso verify

# fetch keys from keyserver
gpg --keyserver keyring.debian.org --recv-keys $keyid
# Get key fingerprint
fp=$(gpg --list-keys --fingerprint $keyid | sed -n '/=/ { s/ //g; s/.*=//g; p }')
# edit trust
gpg --edit-key $keyid trust quit
# edit trust -- trust value hat offset of 1, compared to above
gpg --import-ownertrust <<EOF
$fp:$trustlevel:
EOF
# verify iso
sha512sum -c --ignore-missing SHA512SUMS.txt
# verify signature
gpg --verify SHA512SUMS.sign SHA512SUMS.txt