How to get and verify Debian Live image

gistfile1.txt

## How to get and verify Debian Live image

by Ertugrul Harman 

26 December 2020

Get the files from: https://cdimage.debian.org/debian-cd/current-live/amd64/bt-hybrid/

To verify debian image with GPG4Win:
gpg --keyserver pool.sks-keyservers.net --recv-keys 10460DAD76165AD81FBC0CE9988021A964E6EA7D

Output:
gpg: key 988021A964E6EA7D: public key "Debian CD signing key <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1


gpg --keyserver pool.sks-keyservers.net --recv-keys DF9B9C49EAA9298432589D76DA87E80D6294BE9B

gpg: key DA87E80D6294BE9B: public key "Debian CD signing key <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1


>gpg --verify SHA256SUMS.sign SHA256SUMS
gpg: Signature made 12/5/2020 7:46:48 PM Central Standard Time
gpg:                using RSA key DF9B9C49EAA9298432589D76DA87E80D6294BE9B
gpg: Good signature from "Debian CD signing key <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: DF9B 9C49 EAA9 2984 3258  9D76 DA87 E80D 6294 BE9B


Then check the SHA checksum using any method you prefer.

Source: https://www.debian.org/CD/verify