Qubes Installation Verification

User Support General
1

Is the Media Verification step in the installation source section of the first installation menu test the authenticity and integrity of the ISO? Like how, you can do all the gpg2 commands to check QMSK and RSK?

Or is that separate, I Wanted to know as well where I could find the RSK for the weekly build on this site?
https://qubes.notset.fr/iso/Qubes-4.1.20221224-kernel-latest-x86_64.iso

I am trying to verify the authenticity of the install however it keeps saying wrong RSK, I have downloaded all the relevent other keys like digests and etc.

Is there anything I have done wrong?

Any help would be appreciated.

Thank you! :slight_smile:

2

This guide explains how to verify the iso

3

Thanks for the reply, I have followed that however I can’t find the release signing keys for that exact iso I downloaded. Could you point me to it? It’s release 4.1
2

4

I don’t think there are any keys for the minor releases, they all use the 4.0 keys

5

I think this is the key you need to use for the weekly builds

https://qubes.notset.fr/repo/notset/RPM-GPG-KEY-notset

6

Okay, thank you, I am going to give this a go. Is there any steps that need to be adjusted to work according to the weekly builds?