Installation • Re: Checking checksums strongly discouraged by Debian developers?

Make use of the resources at:

https://www.debian.org/CD/verify

Navigate the directory for files as appropriate from:
https://cdimage.debian.org/cdimage/

Ex:
https://cdimage.debian.org/cdimage/rele ... 64/iso-cd/

Acquire the necessary files and signatures (Particularly SHA512SUMS and SHA512SUMS.sign but 256 is also okay):Get the Debian signing keys:Verify the signature of the SHA sum (you may need to first install gpg):Make sure output reports a good signature with a valid date, and compare the key fingerprint against https://www.debian.org/CD/verify:

pub rsa4096/988021A964E6EA7D 2009-10-03
Key fingerprint = 1046 0DAD 7616 5AD8 1FBC 0CE9 9880 21A9 64E6 EA7D
uid Debian CD signing key <debian-cd@lists.debian.org>

pub rsa4096/DA87E80D6294BE9B 2011-01-05 [SC]
Key fingerprint = DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B
uid Debian CD signing key <debian-cd@lists.debian.org>

pub rsa4096/42468F4009EA8AC3 2014-04-15 [SC]
Key fingerprint = F41D 3034 2F35 4669 5F65 C669 4246 8F40 09EA 8AC3
uid

It's going to be one of those three key fingerprints. Usually the one starting in DF9B ..., in my experience.

Finally, check the sum against the installation image you downloaded (--ignore-missing will skip checking all images that you didn't download):The output should post OK if all the hashes match.

Statistics: Posted by Uptorn — 2024-12-05 14:41

---