Re: Please help verify signature within Dockerfile

2025-02-03 Thread Werner Koch via Gnupg-users
On Sun, 2 Feb 2025 09:22, Josef Wolf said: >> Does it really need to be that hard to verify signature with a given pubkey? That is for what gpgv was created for. Use it. Or use the newer gpg option --assert-signer fpr_or_file This option checks whether at least one valid signa

Re: Please help verify signature within Dockerfile

2025-02-02 Thread Andreas Metzler
On 2025-02-02 Josef Wolf wrote: > Although I got a solution for the initial problem to use gpgv, I am still > curious why all the other methods fail. > Any ideas? See below: > On Fri, Jan 31, 2025 at 12:15:18AM +0100, Josef Wolf wrote: > > Hello all, > > > > I am trying to verify signature of

Re: Please help verify signature within Dockerfile

2025-02-02 Thread Josef Wolf
Although I got a solution for the initial problem to use gpgv, I am still curious why all the other methods fail. Any ideas? On Fri, Jan 31, 2025 at 12:15:18AM +0100, Josef Wolf wrote: > Hello all, > > I am trying to verify signature of downloaded files when creating a docker > container. This i

Re: Please help verify signature within Dockerfile

2025-01-31 Thread Todd Zullinger via Gnupg-users
Josef Wolf wrote: > On Fri, Jan 31, 2025 at 09:57:24AM +, Andrew Gallagher wrote: >> On 30 Jan 2025, at 23:15, Josef Wolf wrote: >>> >>> I am trying to verify signature of downloaded files when creating a docker >>> container. This is what I am trying to do within the Dockerfile: >> >> Perhap

Re: Please help verify signature within Dockerfile

2025-01-31 Thread Josef Wolf
On Fri, Jan 31, 2025 at 09:57:24AM +, Andrew Gallagher wrote: > On 30 Jan 2025, at 23:15, Josef Wolf wrote: > > > > I am trying to verify signature of downloaded files when creating a docker > > container. This is what I am trying to do within the Dockerfile: > > Perhaps it would be easier to

Re: Please help verify signature within Dockerfile

2025-01-31 Thread Andrew Gallagher via Gnupg-users
On 30 Jan 2025, at 23:15, Josef Wolf wrote: > > I am trying to verify signature of downloaded files when creating a docker > container. This is what I am trying to do within the Dockerfile: Hi, Josef. Perhaps it would be easier to use gpgv? https://www.gnupg.org/documentation/manuals/gnupg/gpg