From the course: Linux: Package Management for CentOS

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Validate package integrity

Validate package integrity - Linux Tutorial

From the course: Linux: Package Management for CentOS

Start my 1-month free trial

Validate package integrity

- [Instructor] A package may be checked for integrity and credibility after it has been copied to our local disk. We can check the MD5 checksum to verify the integrity of the package. We can use the GPG public key signature to ensure the credibility of the package creator. This will ensure that we are using an uncorrupted and authentic package. The CD /tmp/packages directory that we created in a previous video. Type in CD /tmp/packages/ and hit enter. Now type in ls. Inside this directory we should still have software packages, tuned D, wget, xz and xz-libs. Now let's check the MD5 checksum of the wget package. Type in rpm -K --nosignature wget, and then hit the tab key to complete your line. The okay in the output confirms our package is free from corruption. Now let's take a look at the GPG key signature. Checking the GPG key signature ensures the credibility of the package. Type in rpm -K wget and hit tab to complete the line. You can see that we have PGP, space MD5, space OK. This…

Contents