Exit Zen
1
English type: Plain text
[[!meta title="Install Tails from Debian or Ubuntu using the command line and GnuPG"]]
0/870 · 87
6
English type: Plain text
[[!meta stylesheet="inc/stylesheets/expert" rel="stylesheet" title=""]]
0/720 · 72
9
English type: Plain text
<h1 id="verify-key" class="step">Verify the Tails signing key</h1>
0/670 · 67
11
English type: Plain text
<p>If you already certified the Tails signing key with your own key, you
can skip this step and start [[downloading and verifying the USB
image|expert#download]].</p>
0/1670 · 167
13
English type: Plain text
In this step, you will download and verify the *Tails signing key* which is the OpenPGP key that is used to cryptographically sign the Tails USB image.
0/1510 · 151
15
English type: Plain text
<p>To follow these instructions you need to have your own OpenPGP
key.</p>
0/750 · 75
16
English type: Plain text
<p>To learn how to create yourself an OpenPGP key, see
<a href="https://riseup.net/en/security/message-security/openpgp/gpg-keys">Managing
OpenPGP Keys</a> by <em>Riseup</em>.</p>
0/1800 · 180
17
English type: Plain text
This verification technique uses the OpenPGP Web of Trust and the certification made by official Debian developers on the Tails signing key.
0/1400 · 140
18
English type: Bullet: '1. '
Import the Tails signing key in your <span class="application">GnuPG</span> keyring:
0/840 · 84
19
English type: Plain text
<p class="command">wget https://tails.net/tails-signing.key</p>
0/670 · 67
20
English type: Plain text
<p class="command">gpg --import < tails-signing.key</p>
0/590 · 59
21
English type: Bullet: '1. '
Install the Debian keyring. It contains the OpenPGP keys of all Debian developers:
0/820 · 82
22
English type: Plain text
<p class="command">sudo apt update && sudo apt install debian-keyring</p>
0/770 · 77
23
English type: Bullet: '1. '
Import the OpenPGP key of [[!wikipedia Chris_Lamb_(software_developer) desc="Chris Lamb"]], a former Debian Project Leader, from the Debian keyring into your keyring:
0/1660 · 166
24
English type: Plain text
<p class="command">gpg --keyring=/usr/share/keyrings/debian-keyring.gpg --export chris@chris-lamb.co.uk | gpg --import</p>
0/1260 · 126
25
English type: Bullet: '1. '
Verify the certifications made on the Tails signing key:
0/560 · 56
26
English type: Plain text
<p class="command">gpg --keyid-format 0xlong --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F</p>
0/1060 · 106
27
English type: Plain text
In the output of this command, look for the following line:
0/630 · 63
28
English type: Plain text
sig!2 0x1E953E27D4311E58 2020-03-19 Chris Lamb <chris@chris-lamb.co.uk>
87/870 · 87
29
English type: Plain text
Here, `sig!2` means that Chris
Lamb verified and certified the Tails signing key with his key and a level 2 check.
0/1210 · 121