antiX-22_386 verify signature failure by newbie [Solved]

[Member bcd]

Dear Forum
I am a low level linux newbie. I am trying to change LMDE 4 to AntiX_22_386 on an old 32 bit chip laptop.
I managed to download the iso, sha256, md5 and sig files. from Sourceforge. The checksums matched. I tried to verify the signature by using the example, on the download page for the x64 -full iso, as a template but got the following result:
brian@brian-desktop:~/Downloads/AntiX/AntiX 22 full$ gpgv –keyring pubring.kbx antiX-22_386-full.iso.sig antiX-22_386-full.iso
gpgv: can’t allocate lock for ‘/home/brian/.gnupg/pubring.kbx’
gpgv: Signature made Tue 18 Oct 2022 21:32:21 BST
gpgv: using RSA key 30AA418A0C723D937B50A986A80582E000067FDD
gpgv: Can’t check signature: No public key

I assume I am doing something wrong as I really have limited knowledge and experience. I do not know why it reports “No Public Key” rather than the good signature from “anticapitalista”.
Please could someone walk me through the signature verification process for AntiX-22_386-full.iso?
Thank you

[Member PPC]

Helpful

Up

0

::

Hi and welcome!

Please try the procedure specified in our wiki: https://antixlinuxfan.miraheze.org/wiki/How_to_install/en#Verification_of_signature (use “gpg” and not “gpgv”)

P.

• This reply was modified 4 months ago by PPC.

[Member marcelocripe]

Helpful

Up

0

::

Hello bcd.

Welcome to antiX Linux and the forum.

I don’t know how to write in English and I send my texts translated by the internet translator. I hope you can understand everything, if your native language is not English, please translate my original Brazilian Portuguese text directly into your language with the help of internet translators.

Regardless of your level of knowledge about GNU/Linux, I recommend you to read these excellent tutorials created by @PPC:

What is antiX and how to try it out or install it.
Short essential how-to list for the complete Linux newbie.
How-to install applications – 2020 version.
How to: correctly use antiX forum.

When I first started using antiX, I read the tutorials that PPC created, these readings saved me a lot of time and I think it saves time for any new antiX user. Your time will not be wasted with these readings, everything will seem to be much easier than you could imagine. You will not waste your time searching the internet or even creating new topics, on the contrary, you will gain a lot of time with these readings. I recommend you try desktops that have “zzz” in their name. I usually use zzz-IceWM or zzz-JWM or zzz-Fluxbox (each of these workspaces has its own characteristics and consumes more or less resources). zzzFM will be the default file manager on your desktop, it is very similar to other file managers in other GNU/Linux distributions and Windows XP. To access other antiX workspaces, click on Menu, Desktop, Other Desktops and click on the workspace name, instantly the workspace will be loaded.

Whenever you need to request help or technical support in this forum, explain in detail what is happening, do not mince words, be thorough when writing, inform the characteristics of your computer, such as brand and model. If possible, post the result of the command $ inxi -zv7 from the terminal, copy and paste it here in the message of the topic you are going to create in this forum.

When you start a topic or participate with a post, remember to check the option “Notify me of follow-up replies via email”, by checking this option, you will receive a message in your email box whenever there are replies from topic in question.

marcelocripe
(Original text in Brazilian Portuguese language)

– – – – –

Olá bcd.

Seja bem-vindo(a) ao antiX Linux e ao fórum.

Eu não sei escrever em idioma Inglês e envio os meus textos traduzidos pelo tradutor da internet. Eu espero que você consiga compreender tudo, caso o seu idioma nativo não seja o Inglês, por favor, traduza o meu texto original em idioma Português do Brasil diretamente para o seu idioma com a ajuda dos tradutores da internet.
Independentemente do seu nível de conhecimento sobre o GNU/Linux, eu recomendo você ler estes excelentes tutoriais criados pelo @PPC:

What is antiX and how to try it out or install it.
Short essential how-to list for the complete Linux newbie.
How-to install applications – 2020 version.
How to: correctly use antiX forum.

Quando eu comecei a utilizar o antiX, eu li os tutoriais que o PPC criou, estas leituras me pouparam muito do meu tempo e acho que poupa o tempo de qualquer novo usuário do antiX. O seu tempo não será perdido com estas leituras, tudo parecerá ser muito mais fácil do que você poderia imaginar. Você não perderá o seu tempo com pesquisas na internet ou até mesmo em criar novos tópicos, ao contrário, você ganhará muito tempo com estas leituras. Eu recomendo você experimentar as áreas de trabalho que possuem “zzz” em seu nome. Eu costumo utilizar o zzz-IceWM ou zzz-JWM ou zzz-Fluxbox (cada uma destas áreas de trabalho possuem características próprias e consomem mais ou menos recursos). O zzzFM será o gerenciador de arquivos padrão da sua área de trabalho, ele é muito semelhante aos outros gerenciadores de arquivos das outras distribuições GNU/Linux e do Windows XP. Para acessar as outras áreas de trabalho do antiX, clique no Menu, Área de Trabalho, Alternar Entre as Áreas de Trabalho e clique sobre o nome da área de trabalho, instantaneamente a área de trabalho será carregada.

Sempre que você precisar solicitar ajuda ou suporte técnico neste fórum, explique com detalhes o que está acontecendo, não economize as palavras, seja minucioso ao escrever, informe as características do seu computador, como a marca e o modelo. Se for possível, poste o resultado do comando $ inxi -zv7 do terminal, copie e cole aqui na mensagem do tópico que você for criar neste fórum.

Quando você iniciar algum tópico ou participar com alguma postagem, lembre-se de marcar a opção “Notify me of follow-up replies via email”, marcando esta opção, você receberá uma mensagem na sua caixa de e-mail sempre que houver respostas do tópico em questão.

marcelocripe
(Texto original em idioma Português do Brasil)

[Moderator Brian Masinick]

Helpful

Up

0

::

Welcome to the antiX forum bcd.

Please let us know if the guide that PPC shared with you is helpful. If there is anything you do not understand, please indicate which step or steps you do not understand and what specific words need clarification (if any).

Alternatively, if the guide helped to solve your problem, we would appreciate knowing that too; we try to mark questions and issues SOLVED once completed.

Thanks for the follow up and enjoy antiX along with us!

--
Brian Masinick

[Member bcd]

Helpful

Up

0

::

Thank you to all on forum who have replied offering greetings and help.
I followed the steps on, the link given by PPC to, the “How to install” page of antiX Linux fan but got the following result:
root@brian-desktop:~# gpg –keyserver hkp://keys.gnupg.net –recv-keys 4A0C4F9C
gpg: keyserver receive failed: No name
root@brian-desktop:~# gpg –keyserver hkp://keys.gnupg.net –recv-keys B9B6375C 0679EE98 892C32F1
gpg: keyserver receive failed: Server indicated a failure
I do not really know what “keyserver receive failed” means. Is it a failure at my end or with the server where the information is kept?
I am grateful to anyone who can enlighten me.
Happy New Year to all too.

[Forum Admin anticapitalista]

Helpful

Up

0

::

Do it as user not root

Philosophers have interpreted the world in many ways; the point is to change it.

antiX with runit - leaner and meaner.

[Member bcd]

Helpful

Up

0

::

Thank you for the suggestion to try as user, not root.
I did so and seem to have got the same result:
brian@brian-desktop:~/Downloads/AntiX/AntiX 22 full$ gpg –keyserver hkp://keys.gnupg.net –recv-keys 4A0C4F9C
gpg: keyserver receive failed: No name
brian@brian-desktop:~/Downloads/AntiX/AntiX 22 full$ gpg –keyserver hkp://keys.gnupg.net –recv-keys B9B6375C 0679EE98 892C32F1
gpg: keyserver receive failed: Server indicated a failure

I am grateful for the suggestion though.

[Moderator Brian Masinick]

Helpful

Up

0

::

Please note that the PPC link containing the antiX wiki: https://antixlinuxfan.miraheze.org/wiki/How_to_install/en#Verification_of_signature also states this:
“Verification of the integrity of the ISO file

Verifying, any one of the md5sum or sha256sum will be enough. ”

So even though the gpg stuff isn’t working to your satisfaction, you did say “I managed to download the iso, sha256, md5 and sig files. from Sourceforge. The checksums matched.”

Since the comments above say that verifying any one… will be enough, I think you are OK.
To be honest with you, these days I rarely even do any of the checksums; most of them are usually fine; IF an image doesn’t work, THEN I go back and figure out why, and typically either download it again or if it’s not one of my “usual distros” and it’s having problems, after a couple of tries, I move on.

I’m not saying that my blatant sidestep of ignoring checksums is wise; I have often checked them over the years, I just think that if TWO of the checksums, for instance, the sha256 and/or the md5, I’m going out on a limb and guessing that you’ll be OK; In any case, it won’t be a horrible thing to create a USB image here, and get into what’s going on with the signature file after you’ve had some fun experimenting with the USB image.

As an aside, I downloaded a ISO image of another distribution today that was over 2GB in size. I had no intention to install it; I was merely checking it out. The download was fast, on a generally reliable network, so I copied the bootable image onto a USB using our Live USB Maker; no checksums done, booted it and ran it live for a while; worked fine.
Now if this image had any problems I would have most certainly checked it out; if I was doing something important with it, I would have also checked it out. If I was installing Enterprise software for a company, I’d follow every best practice. Nevertheless, a single sha256 verification would be sufficient to verify if the image matched the correct size. It’d only be if I had any reason to be suspicious of the image that I would perform every possible verification, but in that case, I’d be investigating the site of the download BEFORE doing anything else. There have been a few hacks of download sites over the years so it’s reasonable to desire some assurance that the images are what they claim to be; nevertheless two checks does seem to be more than adequate. In years past when most downloads went over analog lines, there were more reasons for concern. Today the main concern is that the images are what they are claimed to be and not a scam; if you’re satisfied with the source of the image, then it’s OK.

Let us know how things progress, and also let us know if you have created a USB image and attempted to boot from it yet. Best wishes!

--
Brian Masinick

[Moderator caprea]

Helpful

Up

2

::

This works for me (the above doesnt)
In terminal
gpg --no-default-keyring --keyring gnupg-ring:trustedkeys.gpg --keyserver hkps://keys.openpgp.org --recv-keys A80582E000067FDD

Then in the direction (folder) where you have both downloaded,the iso and the iso.sig file
open a terminal and

gpgv --keyring trustedkeys.gpg antiX-22-runit_x64-full.iso.sig antiX-22-runit_x64-full.iso

You have to change antiX-22-runit_x64-full against what you have dowloaded of course.

[Moderator Brian Masinick]

Helpful

Up

0

::

I ran: gpg –no-default-keyring –keyring gnupg-ring:trustedkeys.gpg –keyserver hkps://keys.openpgp.org –recv-keys A80582E000067FDD
and it worked fine.

I did not try the other command, but I believe that it will work, given the appropriate image.

--
Brian Masinick

[Member bcd]

Helpful

Up

0

::

THANK YOU, THANK YOU, THANK YOU!
I followed the instructions from “caprea”and it worked as follows (for other newbies like me to know what the result looks like):
Terminal in home folder (not root):
brian@brian-desktop:~$ gpg –no-default-keyring –keyring gnupg-ring:trustedkeys.gpg –keyserver hkps://keys.openpgp.org –recv-keys A80582E000067FDD
gpg: keyring ‘/home/brian/.gnupg/trustedkeys.gpg’ created
gpg: key A80582E000067FDD: public key “anticapitalista (change of address) <anticapitalista@riseup.net>” imported
gpg: Total number processed: 1
gpg: imported: 1

Terminal (not root) in antix 22 full folder:
brian@brian-desktop:~/Downloads/AntiX/AntiX 22 full$ gpgv –keyring trustedkeys.gpg antiX-22_386-full.iso.sig antiX-22_386-full.iso
gpgv: Signature made Tue 18 Oct 2022 21:32:21 BST
gpgv: using RSA key 30AA418A0C723D937B50A986A80582E000067FDD
gpgv: Good signature from “anticapitalista (change of address) <anticapitalista@riseup.net>”

I am very grateful to all of you who gave your suggestions and help.
I do not know the etiquette of suggesting alteration/addition to formal advice resources such as websites or wiki pages. Would it be a good idea for the advice from “caprea” to be added to the antiX download page and the How to install page by antiX Linux fan? Perhaps those of you with more knowledge and experience could suggest what to do?
Once more: THANK YOU!
bcd

• This reply was modified 4 months ago by bcd.
• This reply was modified 4 months ago by bcd. Reason: error made with copy and paste of downloading keyring

[Member bcd]

Helpful

Up

0

::

Hello Forum,
Brian, The Mas, asked me to let him know how I got on with the USB live attempts.
I have successfully switched to antiX 22_386 from LMDE 4 on my old dual boot Windows Xp 32 bit laptop. It took me a day to work out connecting to the web because I confused ConMan by filling in both a passphrase and a pin at the same screen. When I tried with just the passphrase it works. Happy days.
Next project is to dismantle my modern (10 year old) laptop to try and fit an SSD and then make it dual boot with Windows 10 home and a Linux distro. If it all goes pear shaped at least I now have another laptop to surf the web with antiX.
Thanks once again to everyone who gave advice with the signature verification problem.
bcd

[Moderator Brian Masinick]

Helpful

Up

0

::

Thanks for your follow up bcd. I’m glad that the problem is resolved and I also appreciate the inclusion of the details so others can potentially benefit from what you’ve been able to successfully fix.

--
Brian Masinick

[Moderator caprea]

Helpful

Up

0

::

bcd and Brian, I changed the instructions on the main side of the antiX wiki
https://antixlinuxfan.miraheze.org/wiki/How_to_install#Verification_of_the_integrity_of_the_ISO_file

On the side to which PPC gave the link, I just can’t figure it out.It always says “This is a translation.This page cannot be updated manually. This page is a translation of the page How to install and the translation can be updated using the translation tool.” But on the translation tool it says “this side is already in english”
Someone experienced with the wiki sure can manage that.

I guess for the download side it has to be done by anticapitalista, which I now politely ask for it.

[Moderator Brian Masinick]

Helpful

Up

0

::

Thank you for your efforts Caprea.

Your attention to this has without question been a useful change.

It’ll get in the proper location as long as we keep this in the TODO list.

--
Brian Masinick

[Author]

Posts