Instructions for OpenPGP and Signify Verification of Kicksecure ISO, VirtualBox and KVM on the Command Line

url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Digital signatures are a tool enhancing download security. They are commonly used across the internet and nothing special to worry about.
Optional, not required: Digital signatures are optional and not mandatory for using Kicksecure, but an extra security measure for advanced users. If you've never used them before, it might be overwhelming to look into them at this stage. Just ignore them for now.
Learn more: Curious? If you are interested in becoming more familiar with advanced computer security concepts, you can learn more about digital signatures here digital software signatures.

OpenPGP Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#OpenPGP Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#OpenPGP|OpenPGP]]
Copy as Wikitext Click = Copy Copied to clipboard! [OpenPGP](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#OpenPGP)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [OpenPGP](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#OpenPGP)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#OpenPGP]OpenPGP[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

In order to verify the Kicksecure image, GnuPG must be installed. GnuPG is the common OpenPGP implementation for Linux: it is installed by default in Debian, Ubuntu, Kicksecure and many other distributions.

1. Choose your platform.

Kicksecure ISO Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-iso|Kicksecure ISO]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso]Kicksecure ISO[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

2. Import the signing key.

Refer to the more secure, detailed Kicksecure Signing Key instructions.

Download Kicksecure OpenPGP Key

3. Download the cryptographic (OpenPGP) signature corresponding to the image you want to verify.

4. Save the signature in the same folder as the image.

ISO image

ISO signature

VirtualBox Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#virtualbox|VirtualBox]]
Copy as Wikitext Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox]VirtualBox[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Refer to the more secure, detailed Kicksecure Signing Key instructions.

Download Kicksecure OpenPGP Key

3. Download the cryptographic (OpenPGP) signature corresponding to the image you want to verify.

4. Save the signature in the same folder as the image.

Select Xfce or CLI version.

Kicksecure VirtualBox Xfce Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-xfce Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-virtualbox-xfce|Kicksecure VirtualBox Xfce]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure VirtualBox Xfce](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-xfce)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure VirtualBox Xfce](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-xfce)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-xfce]Kicksecure VirtualBox Xfce[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

VirtualBox Xfce image

VirtualBox Xfce signature

Kicksecure VirtualBox CLI Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-cli Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-virtualbox-cli|Kicksecure VirtualBox CLI]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure VirtualBox CLI](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-cli)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure VirtualBox CLI](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-cli)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-virtualbox-cli]Kicksecure VirtualBox CLI[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

VirtualBox CLI image

VirtualBox CLI signature

KVM Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kvm|KVM]]
Copy as Wikitext Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm]KVM[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Refer to the more secure, detailed Kicksecure Signing Key instructions.

Download Kicksecure OpenPGP Key

3. Download the cryptographic (OpenPGP) signature corresponding to the image you want to verify.

4. Save the signature in the same folder as the image.

Select Xfce or CLI version.

Kicksecure KVM Xfce Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-xfce Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-kvm-xfce|Kicksecure KVM Xfce]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure KVM Xfce](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-xfce)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure KVM Xfce](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-xfce)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-xfce]Kicksecure KVM Xfce[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

KVM Xfce image

KVM Xfce signature

Kicksecure KVM CLI Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-cli Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-kvm-cli|Kicksecure KVM CLI]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure KVM CLI](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-cli)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure KVM CLI](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-cli)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-kvm-cli]Kicksecure KVM CLI[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

KVM CLI image

KVM CLI signature

5. Change directory.

cd [the directory in which you downloaded the image and the signature]

6. Start the cryptographic verification.

This process can take several minutes.

Kicksecure ISO Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-iso|Kicksecure ISO]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso]Kicksecure ISO[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Click = Copy Copied to clipboard! gpg --verify-options show-notations --verify Kicksecure-*.Intel_AMD64.iso.asc Kicksecure-*.Intel_AMD64.iso

VirtualBox Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#virtualbox|VirtualBox]]
Copy as Wikitext Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox]VirtualBox[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Click = Copy Copied to clipboard! gpg --verify-options show-notations --verify Kicksecure-*.ova.asc Kicksecure-*.ova

KVM Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kvm|KVM]]
Copy as Wikitext Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm]KVM[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Click = Copy Copied to clipboard! gpg --verify-options show-notations --verify Kicksecure-*.libvirt.xz.asc Kicksecure-*.libvirt.xz

7. Check the output of the verification step.

If the file is verified successfully, the output will include Good signature, which is the most important thing to check.

Kicksecure ISO Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-iso|Kicksecure ISO]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso]Kicksecure ISO[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

gpg: Good signature

VirtualBox Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#virtualbox|VirtualBox]]
Copy as Wikitext Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox]VirtualBox[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

gpg: Good signature

KVM Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kvm|KVM]]
Copy as Wikitext Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm]KVM[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

gpg: Good signature

This output might be followed by a warning as follows.

gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.

This message does not alter the validity of the signature related to the downloaded key. Rather, this warning refers to the level of trust placed in the Kicksecure signing key and the web of trust. To remove this warning, the Kicksecure signing key must be personally signed with your own key.

Remember to check the GPG signature timestamp. For instance, if you previously saw a signature from 2023 and now see one from 2022, this could indicate a potential rollback (downgrade) or indefinite freeze attack.^[1]

Example of signature creation timestamp; see below.

gpg: Signature made Mon 19 Jan 2023 11:45:41 PM CET using RSA key ID ...

Remember: OpenPGP signatures sign the contents of files, not the file names themselves. ^[2]

The file@name OpenPGP notation in Kicksecure release signatures describes the file name. This helps to confirm that the file name has not been tampered with; see the example below.

Kicksecure ISO Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-iso|Kicksecure ISO]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure ISO](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso]Kicksecure ISO[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

gpg: Signature notation: file@name=Kicksecure-17.2.8.5.Intel_AMD64.iso

VirtualBox Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#virtualbox|VirtualBox]]
Copy as Wikitext Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [VirtualBox](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox]VirtualBox[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

gpg: Signature notation: file@name=Kicksecure-17.2.8.5.Intel_AMD64.ova

KVM Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kvm|KVM]]
Copy as Wikitext Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [KVM](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm]KVM[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

gpg: Signature notation: file@name=Kicksecure-17.2.8.5.libvirt.xz

If the digital software signature verification failed, the output will inform that the signature is bad:

gpg: BAD signature

Do not continue if verification fails! This risks using infected or erroneous files! The whole point of verification is to confirm file integrity. This page is strongly related to the pages Placing Trust in Kicksecure and Verifying Software Signatures.

8. Done.

Digital software signature verification using OpenPGP has been completed.

Troubleshooting[edit] Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Troubleshooting Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#Troubleshooting|Troubleshooting]]
Copy as Wikitext Click = Copy Copied to clipboard! [Troubleshooting](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Troubleshooting)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Troubleshooting](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Troubleshooting)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Troubleshooting]Troubleshooting[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Try using ls instead of gpg first to confirm existence of the files before using gpg.

When a GPG error is encountered, first try a web search for the relevant error. The security stackexchange website can also help to resolve GPG problems. Describe the problem thoroughly, but be sure it is GPG-related and not specific to Kicksecure.

More help resources are available on the Support page.

Signify Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Signify Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#Signify|Signify]]
Copy as Wikitext Click = Copy Copied to clipboard! [Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Signify)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Signify)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Signify]Signify[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Advanced users only!

1. Choose your platform.

Kicksecure ISO Signify Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso-signify Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kicksecure-iso-signify|Kicksecure ISO Signify]]
Copy as Wikitext Click = Copy Copied to clipboard! [Kicksecure ISO Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso-signify)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Kicksecure ISO Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso-signify)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kicksecure-iso-signify]Kicksecure ISO Signify[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

2. Download the signify Key and save it as derivative.pub.

Download Kicksecure signify Key

VirtualBox Signify Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox-signify Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#virtualbox-signify|VirtualBox Signify]]
Copy as Wikitext Click = Copy Copied to clipboard! [VirtualBox Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox-signify)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [VirtualBox Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox-signify)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#virtualbox-signify]VirtualBox Signify[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

2. Download the signify Key and save it as derivative.pub.

Download Kicksecure signify Key

KVM Signify Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm-signify Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#kvm-signify|KVM Signify]]
Copy as Wikitext Click = Copy Copied to clipboard! [KVM Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm-signify)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [KVM Signify](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm-signify)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#kvm-signify]KVM Signify[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

2. Download the signify Key and save it as derivative.pub.

Download Kicksecure signify Key

3. Install signify-openbsd.

Install package(s) signify-openbsd following these instructions

Platform specific notice.

Kicksecure: No special notice.
Kicksecure-Qubes: In Template.

Update the package lists and upgrade the system .

Click = Copy Copied to clipboard! sudo apt update && sudo apt full-upgrade

Install the signify-openbsd package(s).

Using apt command line --no-install-recommends option is in most cases optional.

Click = Copy Copied to clipboard! sudo apt install --no-install-recommends signify-openbsd

Platform specific notice.

Kicksecure: No special notice.
Kicksecure-Qubes: Shut down Template and restart App Qubes based on it as per Qubes Template Modification .

Done.

The procedure of installing package(s) signify-openbsd is complete.

4. Note.

It is impossible to signify sign images (.ova / libvirt.tar.xz) directly. You can only verify the .sha512sums hash sum file using signify-openbsd and then verify the image against the sha512 sum.

5. Download the .sha512sums and .sha512sums.sig files.

6. Verify the .sha512sums file with signify-openbsd.

Click = Copy Copied to clipboard! signify-openbsd -Vp derivative.pub -m Kicksecure-*.sha512sums

If the signature is valid, it will output:

Signature Verified

If the signature is invalid, it will output an error.

7. Compare the hash of the image file with the hash in the .sha512sums file.

Click = Copy Copied to clipboard! sha512sum --strict --check Kicksecure-*.sha512sums

If the hash is correct, it will output:

Kicksecure-Xfce-17.2.8.5.ova: OK

Do not continue if verification fails! This risks using infected or erroneous files! The whole point of verification is to confirm file integrity. This page is strongly related to the pages Placing Trust in Kicksecure and Verifying Software Signatures.

8. Done.

Digital signature verification using signify has been completed.

If you are using signify for software signature verification, please consider making a report in the signify-openbsd forum thread. This will help developers decide whether to continue supporting this method or deprecate it.

Forum discussion: signify-openbsd.

Footnotes[edit] Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Footnotes Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#Footnotes|Footnotes]]
Copy as Wikitext Click = Copy Copied to clipboard! [Footnotes](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Footnotes)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [Footnotes](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Footnotes)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#Footnotes]Footnotes[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

↑
As defined by TUF: Attacks and Weaknesses:
- https://theupdateframework.io/security/
↑ https://lists.gnupg.org/pipermail/gnupg-users/2015-January/052185.html

License[edit] Copy or share this direct link! Click = Copy Copied to clipboard! https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#License Click below ↴ = Copy to Clipboard Click = Copy Copied to clipboard! [[Verify_the_images_using_Linux#License|License]]
Copy as Wikitext Click = Copy Copied to clipboard! [License](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#License)
for Discourse, reddit, GitHub Click = Copy Copied to clipboard! [License](https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#License)
Copy as Markdown Click = Copy Copied to clipboard! [url=https://www.kicksecure.com/wiki/KVM/Verify_the_virtual_machine_images_using_Linux#License]License[/url]
Copy as phpBB Click below ↴ = Open social URL with share data We don't use embedded scripts This share button is completely self-hosted by this webserver. No scripts from any of the social networks are embedded on this webserver. See also Social Share Button.

Kicksecure Verify the images using Linux wiki page Copyright (C) Amnesia <amnesia at boum dot org>
Kicksecure Verify the images using Linux wiki page Copyright (C) 2012 - 2025 ENCRYPTED SUPPORT LLC <adrelanos(at)kicksecure.com (Replace (at) with @.)Please DO NOT use e-mail for one of the following reasons: Private Contact: Please avoid e-mail whenever possible. (Private Communications Policy) User Support Questions: No. (See Support.) Leaks Submissions: No. (No Leaks Policy) Sponsored posts: No. Paid links: No. SEO reviews: No. >
This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code.
This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.

Kicksecure

A secure by default operating system with the latest security research in place.

Dark mode

Supported by Power Up Privacy

Kicksecure is proudly supported until 2025 by Power Up Privacy, a privacy advocacy group that seeks to supercharge privacy projects with resources so they can complete their mission of making our world a better place. (Strictly subject to our sponsorship policy.)

At Kicksecure we value freedom and trust, supporting Open Source and Freedom Software

By using this website, you acknowledge you have read, understood, and agree to be bound by these agreements: Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint

2012- 2025 ENCRYPTED SUPPORT LLC

Your support makes
all the difference!

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!

[1] As defined by TUF: Attacks and Weaknesses:
https://theupdateframework.io/security/

[2] ttps://theupdateframework.io/security/

[2] ttps://lists.gnupg.org/pipermail/gnupg-users/2015-January/052185.html

[1]

[2]

Verify Virtual Machine Images on Linux

Contents

Navigation menu

Verify Virtual Machine Images on Linux

Navigation menu

Search

Disable server cache for this browser

Debug vis URL