I am new to the forum here - “hello everyone” - because I think about installing Endeavour on a new laptop, which hopefully will arrive soon. My old laptop is running Arch for several years now. I like it and want to stay with Arch somehow - but the community is … strange. So I would like to give Endeavour a try this time.
So, I downloaded the ISO from the web-site - worked well. But when I follow the instructions to verify the download, I want to fetch the GPG-key of Johannes Kamprad (joekamprad@endeavouros.com)
I get the following:
╰─>$ gpg --recv CDF595A1
gpg: Empfangen vom Schlüsselserver fehlgeschlagen: Keine Daten
I have found another key of him
╰─>$ gpg --list-key Johannes Kamprad
[...]
pub rsa2048 2021-02-03 [SC]
8F43FC374CD4CEEA19CEE323E3D8752ACDF595A1
uid [ unbekannt ] Johannes Kamprad (joekamprad development key) <joekamprad@endeavouros.com>
sub rsa2048 2021-02-03 [E]
So, my question: is this a suitable key? Or do I do something wrong using GPG here? Do I need the (correct) key for something else?
Ciao,
Photor
PS: the SHA512 sum of the downloaded ISO file matches with the one mentioned on the web page.
This means the key server you are connected to doesn’t have the key. The key servers aren’t terribly healthy and it is common for some of them to be missing keys.
That is the same key. If you look at the end of the longer string you should see it is exactly the same as the short key you are looking for.
Ah! It was the end of the key! I was looking at the front part (Sorry, but using GPG was quite normal 6 to 10 years ago; and I knew that in that times, I am sure).
So, all is ok with the key and with the file and with your Web-Site.
But I will warn you: a.t.m. I am waiting for my new laptop and so I am reading a lot and doing one installation after the other - in my mind. And of course, questions are popping up. Some of them will most likely end here.
