[PLUG] URL to download xubuntu live?

[Russell Senior]

On Fri, Jan 13, 2023 at 12:55 PM MC_Sequoia <mcsequoia at protonmail.com>
wrote:

> >
> http://mirror.us.leaseweb.net/ubuntu-cdimage/xubuntu/releases/22.04/release/xubuntu-22.04.1-desktop-amd64.iso
> >
>
> For what it's worth, FFOX balked at this link w. a message that it's
> insecure, non-https, and that the file may be tampered with or corrupted
> during download.
>

Distribution distributors tend to rely on cryptographic signatures over
https for validation. I just followed the xubuntu download link, and that
was the default URL. Manually adding an 's' works too, e.g.:

https://mirror.us.leaseweb.net/ubuntu-cdimage/xubuntu/releases/22.04/release/xubuntu-22.04.1-desktop-amd64.iso

Further, you can check the sha256sum against:

https://mirror.us.leaseweb.net/ubuntu-cdimage/xubuntu/releases/22.04/release/SHA256SUMS

$ sha256sum -c SHA256SUMS
xubuntu-22.04.1-desktop-amd64.iso: OK

and then the validity of that file with the detached signature:

https://mirror.us.leaseweb.net/ubuntu-cdimage/xubuntu/releases/22.04/release/SHA256SUMS.gpg

with something like:

$ gpg --verify SHA256SUMS.gpg SHA256SUMS
gpg: Signature made Thu 11 Aug 2022 03:33:54 AM PDT
gpg:                using RSA key 843938DF228D22F7B3742BC0D94AA3F0EFE21092
gpg: Good signature from "Ubuntu CD Image Automatic Signing Key (2012) <
cdimage at ubuntu.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the
owner.
Primary key fingerprint: 8439 38DF 228D 22F7 B374  2BC0 D94A A3F0 EFE2 1092

You might need to hunt down the Ubuntu CD signing public key and import it
to your local keychain if you are starting from a non-Ubuntu platform and
it's not already installed.



>
> This https link to Ubuntu's official site provides a good intro to Ubuntu,
> https://ubuntu.com/desktop and here's a link to the many flavors of the
> Ubuntu Desktop distro, of which there are now 8,
> https://ubuntu.com/desktop/flavours
>