How to verify the integrity of a Linux distribution iso image - LinuxConfig.org

When we decide to install an operating system based on the Linux kernel, the first thing we do is to download its installation image, or ISO, from the official distribution website. Before proceeding with the actual installation, however, it is crucial to verify the integrity of the image, to be sure it is what it claims to be, and nobody has compromised it.


This is a companion discussion topic for the original entry at https://linuxconfig.org/how-to-verify-the-integrity-of-a-linux-distribution-iso-image

Personally I use Transmission, which verifies the download when done downloading and then verify again with GtkHash.
I have not had any problems, since dial up days!

Hi
$ gpg --verify SHA256SUMS.gpg SHA256SUMS
but later it was
$ sha256sum -c SHA256SUM

SHA256SUMS & SHA256SUM these 2 files supposed to be the same file. right ?