Verifying Lubuntu ISO, process result questions

Tagiga · 01-24-2019, 12:48 PM

Hello!

So, having followed this link:
https://help.ubuntu.com/community/VerifyIsoHowto

Having files:
lubuntu-18.04.1-desktop-amd64.iso
SHA256SUMS
SHA256SUMS.gpg
------------------------------------------------
I results different than guide is telling.
------------------------------------------------
I copy pasted the commands.
--------------------------------------------
At step 2. Obtain the public key from the Ubuntu key server
I get texts:

Code:

gpg: key D94AA3F0EFE21092: 53 signatures not checked due to missing keys
gpg: key 46181433FBB75451: 99 signatures not checked due to missing keys
....
gpg: Total number processed: 2
gpg:               imported: 2

So quite different than the guide? Why these something not checked, and no RSA text?

In the end i how ever get similar result as the guide:

Code:

gpg: Good signature from "Ubuntu CD Image Automatic Signing Key <cdimage@ubuntu.com>" [unknown]

AND

Code:

$ sha256sum -c <(grep lubuntu-18.04.1-desktop-amd64.iso SHA256SUMS)
lubuntu-18.04.1-desktop-amd64.iso: OK

But even in this there's this text [unknown]?
---------------------------------------------------

So, can i trust this ISO file was ok?

I had earlier similar question but this is different case now (and the earlier wasn't actually much solved)
This has been done on Lubuntu live media.

Rickkkk · 01-24-2019, 03:02 PM

Hi Tagiga,

Looks good from my point of view.

You imported the 2 keys successfully and your hash checks out. I'd say you're good to go.

I'm not sure what Ubuntu is reporting when saying " .. ## signatures not checked due to missing keys", but I don't feel it is relevant to your objective.

Cheers.