A barrage of verification questions:
The only other question I saw was regarding a torrented
.iso. I got mine from https://www.ubuntu.com (Official Site)
Do I need truly need verify if it is from the official site? What's the risk?
gpgcommand on a mac; can I skip this step?
Did a 256 checksum of my
.isoand it did not match the one hosted @ https://www.ubuntu.com/download/how-to-verify... What!? - Re-Downloading to double check...
UPDATE / SOLVED:
This time my SHA256 and GPG verification came out clean.
Here's what I learned:
Download the SHA256 files, don't just copy and paste into a new text file (this will corrupt the output of
curl -O http://releases.ubuntu.com/16.04/SHA256SUMS to download via terminal.
All you need is the
SHA256SUMS.gpg not MD5 and SHA1 etc.
Then follow the steps outlined here: https://www.ubuntu.com/download/how-to-verify (and below if you don't have
gpg installed on mac get homebrew package manager and run
brew install gnupg