fix OpenPGP verifications confusion ova vs libvirt.xz

[phabricator-migrator]

Information

ID: 556
PHID: PHID-TASK-d3p3pbvjx467hoxrwhb7
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

https://www.reddit.com/r/Whonix/comments/531v0l/verifying_whonix_image_why_is_it_so_complicated/

TODO:

1. Remove ( sha512, sig) from download tables.

(They are a relic from a time where I (@Patrick) tried making everyone happy. Implemented the feature request to also provide signed sha512 files. Either I say no to them or I mess up usability of the download table and confuse more users. I got better at saying no to non-contributing minorities of minorities that demand signed sha512 files in the download table.) (The links to these files will still be available download.whonix.org.)

2. Create wiki templates for the following two guides:

• Verify Virtual Machine Images on Linux and
• Verify Virtual Machine Images on Linux

Then create KVM and VirtualBox specific instructions. ova or libvirt.xz passed as wiki template variable.

Comments

---

HulaHoop

2016-09-22 02:45:55 UTC

Can you please link to the mediawiki variables instructions? I keep seeing math formula pages but that’s not what we want

---

Patrick

2016-09-22 03:19:49 UTC

This:
Help:Templates - MediaWiki

But you may be able to skip that, created an example here:

• https://www.whonix.org/wiki/Template:Example
• https://www.whonix.org/wiki/Example

---

HulaHoop

2016-10-01 06:06:38 UTC

I can apply simple variables successfully with

{{Verify_the_virtual_machine_images_using_Linux|livbirt.xz}} or .ova. However linking to a template (with variables in its name) instead of showing it from within another template is not allowed

I wanted to call {{Verify the Whonix images|livbirt.xz}} from the KVM page which then changes

{{tl|Verify the virtual machine images using Linux|{{{1}}}}} → {{tl|Verify the virtual machine images using Linux|livbirt.xz}} on its own page to fetch a KVM specific set of instructions.

---

I think it will be easier to create a brief set of commandline instructions and forget about this.

---

Patrick

2016-10-01 15:50:51 UTC

Looking into it now.

---

Patrick

2016-10-01 16:12:07 UTC

Partially done. Now the most important parts of Verify_the_virtual_machine_images_using_the_command_line are still shared.

• Verify Virtual Machine Images on Linux
• VirtualBox/Verify the virtual machine images using Linux - Whonix
• KVM/Verify the virtual machine images using Linux - Whonix
• https://www.whonix.org/wiki/Template:Verify_the_virtual_machine_images_using_the_command_line
• Whonix for KVM
• Verify Whonix Images Software Signatures

Does this help?

---

HulaHoop

2016-10-02 00:24:55 UTC

Awesome. Done.

Should I bother with Mac/Windows instructions when KVM is Linux only?

---

Patrick

2016-10-02 18:15:28 UTC

Dunno if it happens that users download KVM on a Windows computer, than
install on a Linux computer. Perhaps take a shortcut and tell them to
start doing it right everything on a Linux computer for better security.

---

HulaHoop

2016-10-03 01:11:16 UTC

I hope they will be smart enough to understand that KVM is Linux only.

Removed irrelevant guides. Considered done.