From f0b4ebe87d66076f39ac07766a6e25090d59e5b5 Mon Sep 17 00:00:00 2001 From: andrewdavidwong Date: Wed, 5 Nov 2025 20:09:36 -0800 Subject: [PATCH] Fix statement about RSKs in domUs This directory exists only in Fedora templates, not Debian templates. See https://github.com/QubesOS/qubes-issues/issues/9044#issuecomment-2016547954. --- project-security/verifying-signatures.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project-security/verifying-signatures.rst b/project-security/verifying-signatures.rst index b03ec0b5..353238cc 100644 --- a/project-security/verifying-signatures.rst +++ b/project-security/verifying-signatures.rst @@ -240,7 +240,7 @@ Before we proceed, you must first complete the following prerequisite steps: After you have completed these two prerequisite steps, the next step is to obtain the correct RSK. The filename pattern for RSKs is ``qubes-release-X-signing-key.asc``, where ``X`` is either a major or minor Qubes release number, such as ``4`` or ``4.2``. There are several ways to get the RSK for your Qubes release. -- If you have access to an existing Qubes installation, the release keys are available in dom0 in ``/etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-*``. These can be :ref:`copied ` into other qubes for further use. In addition, every other qube contains the release key corresponding to that installation’s release in ``/etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-*``. If you wish to use one of these keys, make sure to import it into your keyring, e.g.: +- If you have access to an existing Qubes installation, the release keys are available in dom0 in ``/etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-*``. These can be :ref:`copied ` into other qubes for further use. In addition, the official Fedora templates (and qubes based on them) contain the release key corresponding to that installation’s release in ``/etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-*``. If you wish to use one of these keys, make sure to import it into your keyring, e.g.: .. code:: console