From 967ca3cc529052525eb9475e20ff624082f2f8b6 Mon Sep 17 00:00:00 2001 From: Anthony Muller <57217388+anmull@users.noreply.github.com> Date: Fri, 25 Sep 2020 08:18:44 +0000 Subject: [PATCH 1/2] Change Debian ISO url to be generated from the contents of SHA512SUM. This removes the need to maintain the version number, which is currently out of date. --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index f84f660..b5130ae 100644 --- a/README.md +++ b/README.md @@ -101,11 +101,11 @@ This guide recommends using a bootable "live" Debian Linux image to provide such To use Debian Live, download the latest image: ```console -$ curl -LfO https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/debian-live-10.4.0-amd64-xfce.iso - $ curl -LfO https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA512SUMS $ curl -LfO https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/SHA512SUMS.sign + +$ curl -LfO https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/$(awk '/xfce.iso/ {print $2}' SHA512SUMS) ``` Verify the signature of the hashes file with GPG: From 70dc01467b182c2c88a7285cbd2fd88caaf414e8 Mon Sep 17 00:00:00 2001 From: Anthony Muller <57217388+anmull@users.noreply.github.com> Date: Fri, 25 Sep 2020 18:11:40 +0000 Subject: [PATCH 2/2] Update verification of Debian ISO to not hardcode the version. --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index b5130ae..afff133 100644 --- a/README.md +++ b/README.md @@ -139,8 +139,8 @@ $ gpg --keyserver hkps://keyserver.ubuntu.com:443 --recv DF9B9C49EAA9298432589D7 Ensure the SHA512 hash of the live image matches the one in the signed file. ```console -$ grep $(sha512sum debian-live-10.4.0-amd64-xfce.iso) SHA512SUMS -SHA512SUMS:2920f398c5e9036fcec8f71b2f28b0f2a85e3ab805e66088192dc56f679e5f59f26634e8bbde70badc3cf7ce353f54a2757b2017cbc3d3df9fb2b2065b3c1041 debian-live-10.4.0-amd64-xfce.iso +$ grep $(sha512sum debian-live-*-amd64-xfce.iso) SHA512SUMS +SHA512SUMS:799ec1fdb098caa7b60b71ed1fdb1f6390a1c6717b4314265e7042fa271c84f67fff0d0380297f60c4bcd0c1001e08623ab3d2a2ad64079d83d1795c40eb7a0a debian-live-10.5.0-amd64-xfce.iso ``` See [Verifying authenticity of Debian CDs](https://www.debian.org/CD/verify) for more information.