# Install page links (image, checksum, signature) wrong, give 404 for Raspberry Pi

**URL:** https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233
**Category:** Support
**Tags:** english
**Created:** [November 26, 2024, 10:28am UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233 "2024-11-26T10:28:38Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![pinohost](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/p/b782af/32.png) [@pinohost](https://forum.yunohost.org/u/pinohost)
#### Post date: [November 26, 2024, 10:28am UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233/1 "2024-11-26T10:28:38Z")

</div>

**What type of hardware are you using** : Raspberry Pi 3, 4+  
**What YunoHost version are you running** : 12.0  
**How are you able to access your server** : Other(?)  
**Are you in a special context or did you perform specific tweaking on your YunoHost instance ?** : n/a

### Describe your issue

The actual images etc in the repo are all yunohost-BOOKWORM-12.0-rpi, which looks good to me.

However, the installation instructions ([https://doc.yunohost.org/en/images](https://doc.yunohost.org/en/images)) links for Raspberry Pi (image, signature, checksum) all go to …/images/yunohost-BULLSEYE-12.0-… So all those links give a 404.

As far as I can see, links for other architectures look good.

### Share relevant logs or error messages

n/a

---

<div class="post-metadata">

### Author: ![pinohost](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/p/b782af/32.png) [@pinohost](https://forum.yunohost.org/u/pinohost)
#### Post date: [November 26, 2024, 12:22pm UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233/2 "2024-11-26T12:22:10Z")

</div>

Also, the checksum of the image is OK, but I can’t verify the signature as the public key seems missing from the downloaded yunohost.asc;

```auto
$ gpg --verify yunohost-bookworm-12.0-rpi-stable.img.zip.sig 
gpg: assuming signed data in 'yunohost-bookworm-12.0-rpi-stable.img.zip'
gpg: Signature made Mon Nov 25 17:23:18 2024 CET
gpg: using RSA key E05E79061221D737567D38875D09F2273DAC3BD5
gpg: Can't check signature: No public key

```

---

<div class="post-metadata">

### Author: ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)
#### Post date: [November 26, 2024, 3:34pm UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233/3 "2024-11-26T15:34:34Z")

</div>

Link is fixed, sorry about that!

> [@pinohost](#):
>
> I can’t verify the signature as the public key seems missing from the downloaded yunohost.asc;

Hmmmokay but did you really import the key in gpg etc ?

---

<div class="post-metadata">

### Author: ![pinohost](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/p/b782af/32.png) [@pinohost](https://forum.yunohost.org/u/pinohost)
#### Post date: [November 26, 2024, 3:54pm UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233/4 "2024-11-26T15:54:23Z")

</div>

Thanks!

> [@Aleks](#):
>
> but did you really import the key in gpg etc

Yup, from command history:

```auto
$ gpg --import yunohost2.asc 
gpg: key 360AAF3259A3E6FF: "YunoHost <build@yunohost.org>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1

```

Where the `yunohost2.asc` file was downloaded today. Also:’

```auto
$ gpg --verify yunohost-bullseye-11.2.8-rpi-stable.img.zip.sig 
gpg: assuming signed data in 'yunohost-bullseye-11.2.8-rpi-stable.img.zip'
gpg: Signature made Thu Dec 28 00:56:43 2023 CET
gpg: using RSA key 1904C5B42E4856DCD4E9CF96360AAF3259A3E6FF
gpg: Good signature from "YunoHost <build@yunohost.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 1904 C5B4 2E48 56DC D4E9 CF96 360A AF32 59A3 E6FF

```

---

<div class="post-metadata">

### Author: ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)
#### Post date: [November 26, 2024, 4:13pm UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233/5 "2024-11-26T16:13:33Z")

</div>

Sooooo… it does work ?

---

<div class="post-metadata">

### Author: ![pinohost](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/p/b782af/32.png) [@pinohost](https://forum.yunohost.org/u/pinohost)
#### Post date: [November 26, 2024, 4:17pm UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233/6 "2024-11-26T16:17:33Z")

</div>

Eh, no.

It _does_ work for the `bullseye` image, but for the `bookworm` image, it says

```auto
gpg: Can't check signature: No public key

```

as noted above.

_Edit to add:_

- I checked all `.asc` key files I have, including one I just downloaded, and they are identical.
- The signature for the `bullseye` image matches the key `1904...E6FF`, which is in the file(s)
- The signature for the `bookworm` image is made with a different key `E05E...3BD5`, not in the file(s)

Either the file I downloaded was signed by the project with a different key, or it was modified in transit 😬

---

<div class="post-metadata">

### Author: ![system](https://forum.yunohost.org/uploads/default/original/2X/f/f59fe8e3ee6b100b4f574d30d6e30479c68b89f0.png) [@system](https://forum.yunohost.org/u/system)
#### Post date: [December 26, 2024, 4:17pm UTC](https://forum.yunohost.org/t/install-page-links-image-checksum-signature-wrong-give-404-for-raspberry-pi/32233/7 "2024-12-26T16:17:53Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
