{{ $filename := .Inner }}

Verify the integrity of the file

The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the asc signature file for the relevant distribution. Then verify the signatures using:

$ pgpk -a KEYS
$ gpgv {{ $filename }}.asc
or
$ pgp -ka KEYS
$ gpg {{ $filename }}.asc {{ $filename }}
or
$ gpg --import KEYS
$ gpg --verify {{ $filename }}.asc {{ $filename }}

 

Alternatively, you can verify the checksums of the files (see the How to verify downloaded files page).