I donwloaded unman’s template. Before I copy it to dom0. I want to sure the template is ok. I downloaded unman’s public key.

TLDR - rpmkeys --import PATH_TO_KEY rpm -K PATH_TO_PACKAGE If all is well, you will see “digests signatures ok” Verifying a package How do you verify any package? In Fedora, you can see which key signed a package using rpm -qi PATH_TO_PACKAGE For example if you have downloaded an rpm package t…

Thanks, the guide at Index of /Templates_4.1 had the wrong command with “qvm-template install --keyring /etc/pki/rpm-gpg/RPM-GPG-KEY-unman FULL_PATH_TO_DOWNLOADED_TEMPLATE”. Changing the install position fixed it.

Thanks. I’d fixed that in the Templates page, but missed that. I never presume to speak for the Qubes team. When I comment in the Forum I speak for myself.

No problem! And thank you so much for your templates! Without you QubesOS would be so much more frustrating to work with so I appreciate it at lot!

probably a silly question but how do you get a copy of the key to use the templates?

[image] Can unman public keys be verified using pgp web of trust? User Support That’s a good question. I don’t have a T shirt. frowning You can find the fingerprint in the Forum and on qubes-users, as well as at qubes.3isec.org , and GitHub. The GitHub page is signed wi…

i see the key on qubes.3isec.org but im confused how to make use of it in text form i guess…the key concept eludes me so im lost on how to procede. the rest of the guide seems straightforward i think but getting started involes the key stuff.

Alright, you need to look how “GPG” (or “PGP”) works. You can take a look at the Qubes OS documentation as an example: [image] Verifying signatures The Qubes OS Project uses digital signatures to guarantee the authenticity and integrity of certain important assets. This page explains ho…

welp, this is probably really really helpful…I have never been so confused lol. i have a signiture now as a .asc file. everytime i try the gpg commands it pretends its not there. qubes is truly humbling

I cant help because you dont say what gpg commands you are trying to use. If you have downloaded the key, you can check the fingerprint matches that on the website, or on GitHub, or on the mailing list. The instruction to do this is on qubes.3isec.org- gpg -n --import --import-options import-sh…

Qubes OS Forum

How to verify Unman's template

User Support

parulin April 1, 2026, 5:14pm 7

Can unman public keys be verified using pgp web of trust? User Support

That’s a good question. I don’t have a T shirt. You can find the fingerprint in the Forum and on qubes-users, as well as at qubes.3isec.org, and GitHub. The GitHub page is signed with another key, which is on the Qubes website, used for email. (But how to confirm that?) If you take different routes to those sources - to avoid someone controlling your network - like checking over Tor, you should have some confidence in the fingerprint, which is: rsa4096/4b1f400df25651b53c4141…

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled