Fedora keeps you safe

Verify with CHECKSUM files

If your download comes with a CHECKSUM file, follow these easy steps to verify your image for both security and integrity.

• Import Fedora's GPG key(s)

  curl -O https://fedoraproject.org/fedora.gpg

• List Fedora's GPG key(s)

  gpg --with-fingerprint --show-keys --keyid-format long fedora.gpg

  You can verify the details of the GPG key(s) below.

• Verify the CHECKSUM file is valid

  for checksum in *-CHECKSUM; do gpgv --keyring ./fedora.gpg "$checksum"; done

• Verify the checksum matches

  sha256sum -c *-CHECKSUM

If the output states that the file is valid, then it's ready to use!