CHECKMEDIA(1)

💿 checkmedia(1) — ok bestie, let's verify some media ✨

so you know that manual page checkmedia? yeah, that one. it lives in section 1, it's a User Command, and it's genuinely one of my faves because it just… checks your stuff. no drama, no cap. 🫶

---

✨ NAME ✨

checkmedia — check installation or Live media. that's it, that's the whole vibe check. 💅

---

🎀 SYNOPSIS 🎀

checkmedia [OPTIONS] IMAGE

like, options first (if you want), then your image. iconic behavior honestly.

---

🦋 DESCRIPTION 🦋

okay so here's the tea ☕ — installation/Live media carry some meta data stored in a reserved area in the ISO9660 file system. it's just sitting there, chillin', waiting for you.

checkmedia can use these data to verify the media integrity. literally its whole job. main character energy. 👑

IMAGE is an installation or Live medium; either ISO image or disk image. (yes, both. we love versatility.)

the meta data come in two flavors: SUSE (SLE, openSUSE) style and Red Hat (RHEL, Fedora, CentOS, AlmaLinux, Rocky, ...) style. both variants are supported. no favorites here, we stan both equally 💖

for a detailed technical view, see file:///usr/share/doc/packages/libmediacheck6/README.html — go read it, iykyk 📖

⭐ Options ⭐

• --key-file FILE — use public key in FILE for signature verification. like, if your image was signed with a different key, this is where you tell us about it 🔑
• --version — show checkmedia version. quick little flex, love that for you.
• -v, --verbose — show more detailed info (repeat for more). yes, you can stack it. more -v = more lore 🗣️
• -h, --help — write this help text. the classic. the icon. the moment. 🎀

---

🌸 NOTES 🌸

some important stuff, bestie, don't skip this part 🙈

if the meta data block contains several digests — for example, a digest over the entire ISO and, in case there is a partition table, also a digest over a partition — all digests are checked. not just one. all of them. thorough queen 💅

if a signature block is present, the signature is verified. periodt.

the default setting is to use keys installed in /usr/lib/rpm/gnupg/keys. pass an individual key file using the --key-file option if some other key was used to sign (for example, your own key). 🗝️

to verify an image built in the Open Build Service, extract the public project key with osc signkey. handy, right? 🫶

---

🌈 EXAMPLES 🌈

# check foo.iso
checkmedia foo.iso

# check foo.iso, verify signature using your personal key ring
checkmedia --key-file ~/.gnupg/pubring.gpg foo.iso

# check foo.iso, built in the OBS in Foo:Bar:Project using the OBS project key
osc signkey Foo:Bar:Project | sed -e 's/>-/>\n-/' | checkmedia --key-file - foo.iso

look at that third one — pipe goals honestly 😭🔥

---

👀 SEE ALSO 👀

checkisomd5(1), gpg(1), implantisomd5(1), osc(1), tagmedia(1).

(the whole squad 💜)

---

🔗 LINKS 🔗

• detailed doc: https://github.com/openSUSE/checkmedia/blob/master/README.adoc
• libmediacheck doc: https://github.com/openSUSE/checkmedia/blob/master/mediacheck.md
• checkmedia web site: https://github.com/openSUSE/checkmedia
• Open Build Service: https://openbuildservice.org
• openSUSE Build Service: https://build.opensuse.org

---

💀 quick reminder: this is checkmedia 6.5, dated 2023-06-02. that's the version, that's the date, and that's the page. slay, go verify your ISO bestie 💖✨🎀