Fedora 时刻保证你的安全。

了解怎样验证你下载的文件。

使用 CHECKSUM 验证你下载的文件。

一旦您完成了镜像的下载,请验证文件的安全性和完整性。 要验证您下载的镜像, 请将镜像文件所对应的 CHECKSUM 文件放置到与下载好的镜像文件相同的目录中, 然后照以下步骤操作。

首先,导入 Fedora 的 GPG 公钥:

$ curl -O https://getfedora.org/static/fedora.gpg
请注意你可以按下面的方法来验证这些密钥的详细信息。

现在,检查 CHECKSUM 文件是否有效:

$ gpgv --verify-fileskeyring ./fedora.gpg *-CHECKSUM
CHECKSUM 文件应该和以下描述的密钥有一致的签名。

最后,检查你下载的文件的 checksum 正确:

$ sha256sum -c *-CHECKSUM
如果输出提示文件有效,那么你就可以用这个文件继续了!

软件包签名密钥。

了解 Feodra 怎样通过软件包签名来保障您的安全。

每个 Fedora Project 发布的稳定版 RPM 软件包都配有一个 GPG 签名。默认情况下,dnf 和图形更新工具验证这些签名并拒绝安装任何没有签名或者签名损坏的软件包。您总是应该在安装软件包之前验证其签名。这些签名可确保您要安装的软件包出自 Fedora Project,且没有被提供该软件包的网页或者镜像修改(无意的或者恶意的)。


这是我们当前的公钥:

Fedora 37

id:
4096R/5323552A 2021-08-10
Fingerprint:
ACB5 EE4E 831C 74BB 7C16 8D27 F55A D3FB 5323 552A
DNS OpenPGPKey:
5dde64bce74cf052cba5361957e81b0fe47a044c63d2a7315cdac7cd._openpgpkey.fedoraproject.org

Fedora 36

id:
4096R/38AB71F4 2021-02-10
Fingerprint:
53DE D2CB 922D 8B8D 9E63 FD18 999F 7CBF 38AB 71F4
DNS OpenPGPKey:
6e5f831105b72f261abfc06974c08b4ed718c650447d0b309b8658dd._openpgpkey.fedoraproject.org

Fedora 35

id:
4096R/9867C58F 2021-02-04
Fingerprint:
787E A6AE 1147 EEE5 6C40 B30C DB46 3971 9867 C58F
DNS OpenPGPKey:
e27f1efe21ae589b7796e61af3ac4a4c1c2428615daca70d8f1c9e96._openpgpkey.fedoraproject.org

Fedora 34

id:
4096R/45719A39 2020-08-06
Fingerprint:
8C5B A699 0BDB 26E1 9F2A 1A80 1161 AE69 4571 9A39
DNS OpenPGPKey:
32ad6615edafd4beed53d0bd1ce26a32c38ef7192197ce96507ba1f1._openpgpkey.fedoraproject.org

Fedora 33

id:
4096R/9570FF31 2020-01-28
Fingerprint:
963A 2BEB 0200 9608 FE67 EA42 49FD 7749 9570 FF31
DNS OpenPGPKey:
c57a03fcb0ce3e355f68629319df46b263c794e6fe17aed3b112d19c._openpgpkey.fedoraproject.org

Fedora IOT

id:
4096R/DBBDCF7C 2018-11-13
Fingerprint:
C2A3 FA9D C67F 68B9 8BB5 43F4 7BB9 0722 DBBD CF7C
DNS OpenPGPKey:
8b6135462c1d8c1a927b1a9eb1f47c2c1cde3429ae60ccd630d057ac._openpgpkey.fedoraproject.org

EPEL 9

id:
4096R/3228467C 2021-09-07
Fingerprint:
FF8A D134 4597 106E CE81 3B91 8A38 72BF 3228 467C
DNS OpenPGPKey:
1a355c3f6ac5389917041321fdddee2c0ffc4a38f78adec159a015ec._openpgpkey.fedoraproject.org

EPEL 8

id:
4096R/2F86D6A1 2019-06-05
Fingerprint:
94E2 79EB 8D8F 25B2 1810 ADF1 21EA 45AB 2F86 D6A1
DNS OpenPGPKey:
1a355c3f6ac5389917041321fdddee2c0ffc4a38f78adec159a015ec._openpgpkey.fedoraproject.org

EPEL 7

id:
4096R/352C64E5 2013-12-16
Fingerprint:
91E9 7D7C 4A5E 96F1 7F3E 888F 6A2F AEA2 352C 64E5
DNS OpenPGPKey:
1a355c3f6ac5389917041321fdddee2c0ffc4a38f78adec159a015ec._openpgpkey.fedoraproject.org

这是我们废弃的密钥:

Fedora 9 and Under

id:
1024D/4F2A6FD2 2003-10-27
Fingerprint:
CAB4 4B99 6F27 744E 8612 7CDF B442 69D0 4F2A 6FD2

Fedora Testing (7 and up)

id:
1024D/30C9ECF8 2003-10-27
Fingerprint:
3166 C14A AE72 30D9 3B7A B2F6 DA84 CBD4 30C9 ECF8

Fedora 8 and 9

id:
1024D/6DF2196F 2008-08-27
Fingerprint:
4FFF 1F04 010D EDCA E203 591D 62AE C3DC 6DF2 196F

Fedora 8 and 9 Testing

id:
1024D/DF9B0AE9 2008-08-27
Fingerprint:
C0E7 128E 9072 96CA AE31 78A2 8E69 3B4D DF9B 0AE9

Fedora 10

id:
1024D/4EBFC273 2008-08-27
Fingerprint:
61A8 ABE0 91FF 9FBB F4B0 7709 BF22 6FCC 4EBF C273

Fedora 10 Testing

id:
1024D/0B86274E 2008-08-27
Fingerprint:
C561 3076 7487 7FDF A36D CA38 92A1 023D 0B86 274E

Fedora 11

id:
4096R/D22E77F2 2009-01-19
Fingerprint:
AEE4 0C04 E345 60A7 1F04 3D7C 1DC5 C758 D22E 77F2

Fedora 12

id:
4096R/57BBCCBA 2009-07-29
Fingerprint:
6BF1 78D2 8A78 9C74 AC0D C63B 9D1C C348 57BB CCBA

Fedora 13

id:
4096R/E8E40FDE 2010-01-19
Fingerprint:
8E5F 73FF 2A18 1765 4D35 8FCA 7EDC 6AD6 E8E4 0FDE

Fedora 14

id:
4096R/97A1071F 2010-07-23
Fingerprint:
235C 2936 B4B7 0E61 B373 A020 421C ADDB 97A1 071F

Fedora 14 s390x

id:
1024D/FDB36B03 2010-12-23
Fingerprint:
CAF6 47A6 9736 3AB6 D91F 68DF 3E72 9CA7 FDB3 6B03

Fedora 15

id:
4096R/069C8460 2011-02-07
Fingerprint:
25DB B54B DED7 0987 F4C1 0042 B4EB F579 069C 8460

Fedora 16

id:
4096R/A82BA4B7 2011-07-25
Fingerprint:
05A9 12AC 7045 7C3D BC82 D352 067F 00B6 A82B A4B7

Fedora 16 Secondary

id:
4096R/10D90A9E 2011-08-03
Fingerprint:
7EF8 DA0A F3C7 D285 C298 8375 77D3 A304 10D9 0A9E

Fedora 17

id:
4096R/1ACA3465 2012-01-10
Fingerprint:
CAC4 3FB7 74A4 A673 D81C 5DE7 50E9 4C99 1ACA 3465

Fedora 17 Secondary

id:
4096R/F8DF67E6 2012-01-10
Fingerprint:
2086 1F88 B77B EEC8 5CBC 1069 ED85 FCE3 F8DF 67E6

Fedora 18

id:
4096R/DE7F38BD 2012-08-06
Fingerprint:
7EFB 8811 DD11 E380 B679 FCED FF01 125C DE7F 38BD

Fedora 18 Secondary

id:
4096R/A4D647E9 2012-08-06
Fingerprint:
62D6 986A 2639 CF2E 3790 EE45 68DC D160 A4D6 47E9

Fedora 19

id:
4096R/FB4B18E6 2012-12-01
Fingerprint:
CA81 B2C8 5E4F 4D4A 1A3F 7234 0747 7E65 FB4B 18E6

Fedora 19 Secondary

id:
4096R/BA094068 2012-12-20
Fingerprint:
E6B0 488A 1773 8126 A310 7577 0562 EB6F BA09 4068

Fedora 20

id:
4096R/246110C1 2013-05-16
Fingerprint:
C7C9 A9C8 9153 F201 83CE 7CBA 2EB1 61FA 2461 10C1

Fedora 20 Secondary

id:
4096R/EFE550F5 2013-08-30
Fingerprint:
FF64 B402 53FA 5A58 B250 6827 DBEA E2E4 EFE5 50F5

Fedora 21

id:
4096R/95A43F54 2013-11-14
Fingerprint:
6596 B8FB ABDA 5227 A9C5 B59E 89AD 4E87 95A4 3F54

Fedora 21 Secondary

id:
4096R/A0A7BADB 2013-11-14
Fingerprint:
9996 E55F A5D4 18C8 6CEF F750 636D EA19 A0A7 BADB

Fedora 22

id:
4096R/8E1431D5 2014-07-09
Fingerprint:
C527 EA07 A934 9B58 9C35 E1BF 11AD C094 8E14 31D5

Fedora 22 Secondary

id:
4096R/A29CB19C 2014-07-09
Fingerprint:
B467 FA46 E2CE 5FAC 3499 10C2 D8D1 FA8C A29C B19C

Fedora 23

id:
4096R/34EC9CBA 2015-02-17
Fingerprint:
EF45 5106 80FB 0232 6B04 5AFB 3247 4CF8 34EC 9CBA

Fedora 23 Secondary

id:
4096R/873529B8 2015-02-17
Fingerprint:
0108 4DD8 8A5E 6224 F7A6 7B76 B4BB 871C 8735 29B8

Fedora 24

id:
4096R/81B46521 2015-07-25
Fingerprint:
5048 BDBB A5E7 76E5 47B0 9CCC 73BD E983 81B4 6521

Fedora 24 Secondary

id:
4096R/030D5AED 2015-07-27
Fingerprint:
8C6E 5A80 A399 BABE 7919 85BA B863 5EEB 030D 5AED

Fedora 25

id:
4096R/FDB19C98 2016-03-31
Fingerprint:
C437 DCCD 558A 66A3 7D6F 4372 4089 D8F2 FDB1 9C98

Fedora 25 Secondary

id:
4096R/E372E838 2016-03-31
Fingerprint:
838B D48E 1B70 069F 4111 BDE9 1A18 5CDD E372 E838

Fedora 26

id:
4096R/64DAB85D 2016-09-09
Fingerprint:
E641 850B 77DF 4353 78D1 D7E2 812A 6B4B 64DA B85D

Fedora 26 Secondary

id:
4096R/3B921D09 2016-08-08
Fingerprint:
19AA 0442 2491 9109 8B3D 8035 4560 FD4D 3B92 1D09

Fedora 27

id:
4096R/F5282EE4 2017-02-21
Fingerprint:
860E 19B0 AFA8 00A1 7518 81A6 F55E 7430 F528 2EE4

Fedora 28

id:
4096R/9DB62FB1 2017-08-14
Fingerprint:
128C F232 A937 1991 C8A6 5695 E08E 7E62 9DB6 2FB1

Fedora 29

id:
4096R/429476B4 2018-02-17
Fingerprint:
5A03 B4DD 8254 ECA0 2FDA 1637 A20A A56B 4294 76B4

Fedora 30

id:
4096R/CFC659B9 2018-08-11
Fingerprint:
F1D8 EC98 F241 AAF2 0DF6 9420 EF3C 111F CFC6 59B9

Fedora 31

id:
4096R/3C3359C4 2019-02-18
Fingerprint:
7D22 D586 7F2A 4236 474B F7B8 50CB 390B 3C33 59C4

Fedora 32

id:
4096R/12C944D0 2019-08-12
Fingerprint:
97A1 AE57 C3A2 372C CA3A 4ABA 6C13 026D 12C9 44D0

EPEL 6

id:
4096R/0608B895 2010-04-23
Fingerprint:
8C3B E96A F230 9184 DA5C 0DAE 3B49 DF2A 0608 B895

EPEL 5

id:
1024D/217521F6 2007-03-02 [expires: 2017-02-27]
Fingerprint:
B940 BE07 7D71 0A28 7D7F 2DD1 119C C036 2175 21F6

EPEL 4

id:
1024D/217521F6 2007-03-02 [expires: 2017-02-27]
Fingerprint:
B940 BE07 7D71 0A28 7D7F 2DD1 119C C036 2175 21F6

Fedora Extras

id:
1024D/1AC70CE6 2004-12-14
Fingerprint:
5389 DD00 C5BC 5168 12B4 3272 82ED 9504 1AC7 0CE6

Legacy

id:
1024D/731002FA 2004-01-19
Fingerprint:
D66D 121F 9784 5E7B 2757 8C46 108C 4512 7310 02FA

发现一个安全问题?

请花费一点时间来通知我们 在wiki上了解更多.