Hello,
I want to do something extremly simple:
Download an ArchLinuxARM iso in a script.
I'm literally multiple hours in the gpg documentation and I can't do it.
How are you normally supposed to download it? Please don't tell me that "wget http://os.archlinuxarm.org/os/ArchLinux ... est.tar.gz" ist the recommended way, it uses http not https (why?).
UPDATE:
The following works. But I'm sure it is not the official recommended way, because it is so overly complicated. I'm still searching for the "recommended" way to do it.
(xonsh code):
$this->bbcode_second_pass_code('', '
$RAISE_SUBPROC_ERROR = True
def downloadAndVerfiyKeyID(keyID, signature, payload):
paypath = $HOME+"/Downloads/DownVerfiy/"+payload.split("/")[-1]
sigpath = $HOME+"/Downloads/DownVerfiy/"+signature.split("/")[-1]
if not os.path.exists($HOME+"/Downloads/DownVerfiy"):
os.mkdir($HOME+"/Downloads/DownVerfiy")
if not os.path.exists(paypath):
wget @(payload) -O @(paypath)
if not os.path.exists(sigpath):
wget @(signature) -O @(sigpath)
gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys @(keyID)
gpg --trusted-key @(keyID[-16:]) --verify @(sigpath) @(paypath)
gpg --batch --yes --delete-key @(keyID)
downloadAndVerfiyKeyID("68B3537F39A313B3E574D06777193F152BDBE6A6",
"http://de5.mirror.archlinuxarm.org/os/ArchLinuxARM-rpi-4-latest.tar.gz.sig",
"http://os.archlinuxarm.org/os/ArchLinuxARM-rpi-4-latest.tar.gz")')