unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / code / Atom feed
* bug#22276: .sig
@ 2015-12-31  0:19 carl hansen
  2016-01-01 18:04 ` Ludovic Courtès
  0 siblings, 1 reply; 8+ messages in thread
From: carl hansen @ 2015-12-31  0:19 UTC (permalink / raw)
  To: 22276

[-- Attachment #1: Type: text/plain, Size: 1193 bytes --]

Manual says:
- "Download the binary tarball from ‘ftp://....’2
<http://www.gnu.org/software/guix/manual/html_node/Binary-Installation.html#FOOT2>
,Footnotes(2)
<http://www.gnu.org/software/guix/manual/html_node/Binary-Installation.html#DOCF2>

"As usual, make sure to download the associated .sig file and to verify the
authenticity of the tarball against it!"

For those who know what you mean by that, the footnote is superfluous, for
those who don't know, it is opaque. I do the usual investigation, come up
with

gpg --verify guix-binary-0.9.0.x86_64-linux.tar.xz.sig
gpg: armor header: Version: GnuPG v2
gpg: assuming signed data in `guix-binary-0.9.0.x86_64-linux.tar.xz'
gpg: Signature made Wed 04 Nov 2015 10:23:38 AM PST using RSA key ID
3D9AEBB5
gpg: Can't check signature: public key not found

after reading the gpg man page, with its multivarous options. So now I need

"gpg --import *.asc" is how you import it into the public keyring

But now I have to find the .asc file...

**UNIX, world's largest Adventure game** as we used to say 30 years ago.

Is there some reason the actual command line to verify the sig cannot be
put into the manual?

[-- Attachment #2: Type: text/html, Size: 1432 bytes --]

^ permalink raw reply	[flat|nested] 8+ messages in thread

end of thread, other threads:[~2016-01-04 10:04 UTC | newest]

Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-12-31  0:19 bug#22276: .sig carl hansen
2016-01-01 18:04 ` Ludovic Courtès
2016-01-03  9:20   ` Alex Kost
2016-01-03 11:10     ` Ludovic Courtès
2016-01-04  9:42       ` Alex Kost
2016-01-04 10:02         ` Ludovic Courtès
2016-01-03 11:22     ` Ludovic Courtès
2016-01-04  9:50       ` Alex Kost

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).