Since templates are not network connected, you may think you can't use gpg to get keys.
But there's a proxy listening on :8082: normally used to pull down packages using qrexec.
This is a standard "using gpg behind firewall" problem, and the solution is to use that proxy.
Here's a script:
Save it as get_key
```
#!/usr/bin/sh
if [ $# != 1 ]
then
echo "need a search term"
exit
fi
#wget "https://hkps.pool.sks-keyservers.net/pks/lookup?op=vindex&search=$1" -e use_proxy=on -e https_proxy=127.0.0.1:8082 -O $1 --ca-certificate=./sks-keyservers.netCA.pem
wget "https://keyserver.ubuntu.com/pks/lookup?op=get&search=$1" -e use_proxy=on -e https_proxy=127.0.0.1:8082 -O $1
```
An advantage of using a keyserver like keyserver.ubuntu.com is that you can use a search term and it will return *all* keys using that term.
This file has been truncated. show original