Re: How to verify install iso?

[Ralf Mardorf <ralf.mardorf@alice-dsl.net>]

On Fri, 2013-12-13 at 14:02 +1100, Zenaan Harkness wrote:
> Loopback mount the .iso file, and do a gpg signature check on the
> .../Release.gpg file.

[rocketmouse@archlinux downloads]$ sudo mount -o loop debian-7.2.0-i386-netinst.iso iso/
[sudo] password for rocketmouse: 
mount: /dev/loop0 is write-protected, mounting read-only
[rocketmouse@archlinux downloads]$ cd iso/ ; ls -a
.            debian  firmware   install.386  pool                 README.source  win32-loader.ini
..           .disk   g2ldr      isolinux     README.html          README.txt
autorun.inf  dists   g2ldr.mbr  md5sum.txt   README.mirrors.html  setup.exe
css          doc     install    pics         README.mirrors.txt   tools
[rocketmouse@archlinux iso]$ cd dists/wheezy/ ;ls -a
.  ..  contrib  main  Release

Where can I find the Release.gpg file?

[rocketmouse@archlinux wheezy]$ find . -name Release.gpg
[rocketmouse@archlinux wheezy]$ cd ../..
[rocketmouse@archlinux iso]$ find . -name Release.gpg

Regards,
Ralf