diff options
| -rw-r--r-- | docs/install.rst | 35 |
1 files changed, 19 insertions, 16 deletions
diff --git a/docs/install.rst b/docs/install.rst index 6b5d35bf..26d7c7c8 100644 --- a/docs/install.rst +++ b/docs/install.rst @@ -58,26 +58,29 @@ https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso Download Verification --------------------- -This subsection and the following one applies to downloaded LTS images, for -other versions please jump to :ref:`live_installation`. +LTS images are signed by VyOS lead package-maintainer private key. With +the official public key, the authenticity of the package can be +verified. :abbr:`GPG (GNU Privacy Guard)` is used for verification. -LTS images are signed by VyOS lead package-maintainer private key. With the -official public key, the authenticity of the package can be verified. -:abbr:`GPG (GNU Privacy Guard)` is used for verification. +.. note:: This subsection only applies e applies to LTS images, for + Rolling images please jump to :ref:`live_installation`. + +Preparing for the verification +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ First, install GPG or another OpenPGP implementation. On most GNU+Linux -distributions it is installed by default as package managers use it to verify -package signatures. If not pre-installed, it will need to be downloaded and -installed. +distributions it is installed by default as package managers use it to +verify package signatures. If not pre-installed, it will need to be +downloaded and installed. -The official VyOS public key can be retrieved in a number of ways. Skip to -:ref:`gpg-verification` if the key is already present. +The official VyOS public key can be retrieved in a number of ways. Skip +to :ref:`gpg-verification` if the key is already present. -It can also be retrieved directly from a key server: +It can be retrieved directly from a key server: ``gpg --recv-keys FD220285A0FE6D7E`` -Or it can be accessed from a key server via a web browser: +Or it can be accessed via a web browser: https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E @@ -154,11 +157,11 @@ The import can be verified with: .. _gpg-verification: -GPG ---- +GPG verification +^^^^^^^^^^^^^^^^ -With the public key imported, the signature for the desired image needs to be -downloaded. +With the public key imported, the signature for the desired image needs +to be downloaded. .. note:: The signature can be downloaded by appending `.asc` to the URL of the downloaded VyOS image. That small *.asc* file is the signature for the |