How to gpg verify my bitcoin core download step by step on ubuntu server?

Question

I am a newbie when it comes to setting up a bitcoin node but I am trying to gpg verify my bitcoin core download the pub keys to do so are no longer available. I have tried doing my own research but I can't seem to find someone to explain in Layman's terms how to do so now.

I have downloaded all three files needed to do so:

bitcoin-24.0.1-x86_64-linux-gnu.tar.gz
SHA256SUMS 
SHA256SUMS.asc

I have verified the checksum of the release file

sha256sum --ignore-missing --check SHA256SUMS

Now I am totally lost on what to do from here because the txt file is not on GitHub anymore. I have been trying to figure this out for a while now but can't seem to do so. Any help is much appreciated.

Answer 1

The builder keys file has moved to a different repository but the website instructions haven't been updated yet. The new location for the builder keys is at https://github.com/bitcoin-core/guix.sigs/tree/main/builder-keys.

You can then proceed to import and verify the SHA256SUMS.asc file using any of the keys there, as detailed in @user140327's answer.

Answer 2

gpg --list-keys

wget https://raw.githubusercontent.com/bitcoin-core/guix.sigs/main/builder-keys/achow101.gpg

wget https://raw.githubusercontent.com/bitcoin-core/guix.sigs/main/builder-keys/benthecarman.gpg

wget https://raw.githubusercontent.com/bitcoin-core/guix.sigs/main/builder-keys/fanquake.gpg

gpg --import achow101.gpg

gpg --import benthecarman.gpg

gpg --import fanquake.gpg

gpg --verify SHA256SUMS.asc

Answer 3

You'll just have to follow the steps listed at

https://bitcoincore.org/en/download/

But essentially, you're doing it right, downloading those three files and then running sha256sum returns the following:

$ sha256sum --ignore-missing --check SHA256SUMS
bitcoin-24.0.1-x86_64-linux-gnu.tar.gz: OK