image signature problem

Support
1

so i downloaded manjaros plasma desktop version 24.0 iso image and wanted to check the authenticity of the file and downloaded the .sig file from sourceforge but when i try to open the file it says that there was a problem opening the file

removed useless screenshot

im a total newbie so if you could tell me how to fix it in a more simple way i will be thankfull

2

the sig file is a binary file

you would use gpg on the commandline to verify the ISO using the signature

Place both sig and iso in same folder.

Open a terminal and navigate to the folder e.g. Downloads

cd Downloads
gpg --verify iso-file-name.iso.sig
3

Try the terminal:

sha256sum -c manjaro-kde...................iso.sha256

You should be in the download folder where the 2 files - iso and sig are.

4

nope im stupid and cant get it
i put everything in the temp folder i enter it run gpg --verify manjaro-kde-24.0-240513-linux69.iso.sig
gpg says no signed data
cant hash data file: no data

5

come on…it is not that hard…here is an example

[teo@teo-lenovo-v15 ~]$ touch blah.txt
[teo@teo-lenovo-v15 ~]$ touch blah.txt.sig
[teo@teo-lenovo-v15 ~]$ sha256sum -c blah.txt.sig 
sha256sum: blah.txt.sig: no properly formatted checksum lines found
[teo@teo-lenovo-v15 ~]$ sha256sum  blah.txt 
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  blah.txt
[teo@teo-lenovo-v15 ~]$ sha256sum  blah.txt >blah.txt.sig
[teo@teo-lenovo-v15 ~]$ sha256sum -c blah.txt.sig 
blah.txt: OK
1 Like
6

alright so what does the OK mean?

7

That they match, so the file is not corrupt :slight_smile:
So you can happily install. I have to warn you though, manjaro is not the first choice for absolute beginners.

1 Like