From b9838e5459cd9189c8e232aa57666fff7cbf9dd8 Mon Sep 17 00:00:00 2001 From: Thierry Laurion Date: Fri, 19 Jul 2024 15:17:27 -0400 Subject: [PATCH] Update install-os.md Clarify instructions from matrix chat input at - https://matrix.to/#/!pAlHOfxQNPXOgFGTmo:matrix.org/$rj0H2OeKUCwIhq-pWX94bwK1ViWrTG02EUthty4OIZg?via=matrix.org&via=nitro.chat&via=envs.net - https://matrix.to/#/!pAlHOfxQNPXOgFGTmo:matrix.org/$vYrLlKnzEG1TI4o3-cMrB7DzrYbcIZAZPxRTFjYtrvU?via=matrix.org&via=nitro.chat&via=envs.net --- Installing-and-Configuring/install-os.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/Installing-and-Configuring/install-os.md b/Installing-and-Configuring/install-os.md index f67702b..7a8b79d 100644 --- a/Installing-and-Configuring/install-os.md +++ b/Installing-and-Configuring/install-os.md @@ -43,12 +43,18 @@ For supported OSes, on a EXT3/EXT4/ExFat formatted partition on USB drive, you c Each ISO file is verified for integrity and authenticity before booting so that you can be sure Live distros and installation media are not tampered with or corrupted, so this route is preferred when - available. You can also sign the ISO with your own key from Heads recovery shell - menu option : + available. You can also sign the ISO with your own key **from Heads Recovery Shell + menu option (Options-> Exit to recovery shell)** : ```shell -gpg --output .sig --detach-sig +mount-usb --mode rw #Loads USB controller kernel modules, scan for partitions, ask which one to mount under /media +cd /media # Change directory to /media to do the detach-sign operation +gpg --detach-sign # You can use TAB keyboard's key for autocompletion of file names here. This requires a provisioned USB security dongle: Factory Reset/Re-Ownership +reboot # Will remount everything in Read Only and sync changes to block devices automatically. ``` +Then boot from detached signed ISO after having rebooted your machine. + To do so, from main menu, select: Options-> Boot Options-> USB boot + Select your ISO from list, see detached signature validation succeeding, then select GRUB parsed options with label and main boot parameters from the options provided to you. Compatibility ===