PINE64
What is wrong with the Mobian signature key? - Printable Version

+- PINE64 (https://forum.pine64.org)
+-- Forum: PinePhone (https://forum.pine64.org/forumdisplay.php?fid=120)
+--- Forum: General Discussion on PinePhone (https://forum.pine64.org/forumdisplay.php?fid=127)
+--- Thread: What is wrong with the Mobian signature key? (/showthread.php?tid=20070)



What is wrong with the Mobian signature key? - Mahgue - 11-08-2025

I downloaded mobian-sunxi-plasma-mobile-13.0.[img.bmap|img.xz|sha256sums|sha256sums.sig] from https://images.mobian.org/sunxi/ and failed to verify the signature.


Code:
LANGUAGE=en gpg --verify mobian-sunxi-plasma-mobile-13.0.sha256sums.sig mobian-sunxi-plasma-mobile-13.0.sha256sums
gpg: Signature made Mo 13 Okt 2025 10:55:36 CEST
gpg:                using RSA key 782C6C58B583FE966CEE44EBF8BDAB78BEE246C2
gpg:                issuer "admin+images@mobian.org"
gpg: Can't check signature: No public key
It seems to be signed with a key as mentioned in https://blog.mobian.org/posts/2025/10/new-stable-rotating-keys/ but I can not get this key from any server.

https://wiki.debian.org/Mobian/Verify still mentions:

Code:
gpg --keyserver pgp.mit.edu ...
which seems to be down since 2023. But trying keyring.debian.org, keys.openpgp.org, keyserver.ubuntu.com, pool.sks-keyservers.net fails too.

Where do I get the key to verify the latest Mobian images for PinePhone (sunxi)?