diff --git a/templates/public/download.html b/templates/public/download.html index f6770f25..a7d22f9d 100644 --- a/templates/public/download.html +++ b/templates/public/download.html @@ -117,27 +117,28 @@

Checksums and signatures

  • PGP signature
  • - {% if release.sha256_sum %}
  • sha256sums.txt
  • {% endif %} - {% if release.b2_sum %}
  • b2sums.txt
  • {% endif %} - {% if release.sha1_sum %}
  • sha1sums.txt
  • {% endif %} - {% if release.md5_sum %}
  • md5sums.txt
  • {% endif %} + {% if release.sha256_sum %}
  • sha256sums.txt
  • {% endif %} + {% if release.b2_sum %}
  • b2sums.txt
  • {% endif %} + {% if release.sha1_sum %}
  • sha1sums.txt
  • {% endif %} + {% if release.md5_sum %}
  • md5sums.txt
  • {% endif %}
    Download verification
    -

    Verify the BLAKE2b checksums as follows:

    $ b2sum -c b2sums.txt

    + Verify the BLAKE2b checksums as follows: +
    $ b2sum -c b2sums.txt
    -

    To verify the PGP signature using Sequoia, first download the release signing key from WKD:
    + To verify the PGP signature using Sequoia, first download the release signing key from WKD:

    $ sq network wkd fetch {{ release.wkd_email }} -o release-key.pgp
    With this signing key, verify the signature: -
    $ sq verify --signer-file release-key.pgp --detached archlinux-{{ release.version }}-x86_64.iso.sig archlinux-{{ release.version }}-x86_64.iso

    +
    $ sq verify --signer-file release-key.pgp --detached archlinux-{{ release.version }}-x86_64.iso.sig archlinux-{{ release.version }}-x86_64.iso
    -

    Alternatively, using GnuPG, download the signing key from WKD: + Alternatively, using GnuPG, download the signing key from WKD:

    $ gpg --auto-key-locate clear,wkd -v --locate-external-key {{ release.wkd_email }}
    Verify the signature: -
    $ gpg --keyserver-options auto-key-retrieve --verify archlinux-{{ release.version }}-x86_64.iso.sig archlinux-{{ release.version }}-x86_64.iso

    +
    $ gpg --keyserver-options auto-key-retrieve --verify archlinux-{{ release.version }}-x86_64.iso.sig archlinux-{{ release.version }}-x86_64.iso
    {% cache 600 download-mirrors %}