RoninDojo
Verify Operating System
Page Contents
Verifying RoninOS
Linux + Mac
Windows
Building RoninOS
Additional Info
Tags
verify
Last edited by
Editor
08/19/2025

Verifying RoninOS

Verifying the Operating System you download is important to protect you from malicious actors. The steps below will verify that the RoninOS image you download was produced by the developer you think produced it, and will also ensure the contents of the file you download match exactly the contents of the file produced by the developer.

The RoninDojo Master Administrator Key is always used to sign and verify RoninOS images.


Linux + Mac

  1. Go to the RoninOS Downloads Page and choose to download the RoninOS Image File, SHA256 Hash File, Verification File, and ensure they are in the same folder.
  • RoninOS Image File (ending in .img.gz)
  • SHA256 Hash File (ending in .img.gz.sha256)
  • Verification File (ending in .img.gz.sha256.asc)

  1. The SHA256 Hash File is signed using the RoninDojo Master Administrator Key. Open a terminal window and run the following command to obtain the key.
gpg --refresh-keys && gpg --auto-key-locate keyserver --locate-keys pgp@ronindojo.io

  1. If errors are present, edit gpg.conf file to configure GnuPG to use keys.openpgp.org as a keyserver.
keyserver hkps://keys.openpgp.org

  1. Run the following command to verify the SHA256 Hash File is authentic by using the Hash Verification File. Amend this command as necessary to match the file name you have downloaded.
cd /$HOME/Downloads && gpg --verify RoninOS_v2.2.1.img.gz.sha256.asc

  1. If you get BAD signature do not proceed and post about it in the RoninDojo Chatroom.

Example Successful Signature ✅:

gpg: Assuming signed data in 'RoninOS_v2.2.1.img.gz.sha256'
gpg: Signature made Mon 16 Jun 2025 07:52:32 AM UTC
gpg: Using RSA key 4D8CCBBEFAE5AC5B8BC1130B116573F87BD3EDF7
gpg: Good signature from "RoninDojo Master Key <pgp@ronindojo.io>"

Example Failure Signature ❌:

gpg: Assuming signed data in 'RoninOS_v2.2.1.img.gz.sha256'
gpg: Signature made Mon 16 Jun 2025 07:52:32 AM UTC
gpg: Using RSA key 4D8CCBBEFAE5AC5B8BC1130B116573F87BD3EDF7
gpg: BAD signature from "RoninDojo Master Key <pgp@ronindojo.io>"

  1. Run the following command to calculate the SHA256 hash of the RoninOS Image File and show the output of the SHA256 Hash File. Amend this command as necessary to match the file names you have downloaded.
sha256sum RoninOS_v2.2.1.img.gz && cat RoninOS_v2.2.1.img.gz.sha256

  1. If you get a MISMATCH do not proceed and post about it in the RoninDojo Chatroom.

Example Successful Match ✅:

60fb14c7fc4dff4e3276d9b4188e71e2893f250afd1a200a8df3c8ed0f23431a  RoninOS_v2.2.1.img.gz
60fb14c7fc4dff4e3276d9b4188e71e2893f250afd1a200a8df3c8ed0f23431a  RoninOS_v2.2.1.img.gz

Example Failure Mismatch ❌:

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  RoninOS_v2.2.1.img.gz
60fb14c7fc4dff4e3276d9b4188e71e2893f250afd1a200a8df3c8ed0f23431a  RoninOS_v2.2.1.img.gz

  1. If the hashes match, you have sucessfully verified the RoninOS Image File has not been tampered with. You can now proceed safely with the knowledge that the software you have downloaded is an exact match to the one produced by the RoninDojo developer team.

Windows

  1. Go to the RoninOS Downloads Page and choose to download the RoninOS Image File, SHA256 Hash File, Verification File, and ensure they are in the same folder.
  • RoninOS Image File (ending in .img.gz)
  • SHA256 Hash File (ending in .img.gz.sha256)
  • Verification File (ending in .img.gz.sha256.asc)

  1. Download GPG4Win and run the install, then open the command prompt.

  2. The SHA256 Hash File is signed using the RoninDojo Master Administrator Key. Open a terminal window and run the following command to obtain the key.

gpg --refresh-keys && gpg --auto-key-locate keyserver --locate-keys pgp@ronindojo.io

  1. Run the following command to verify the SHA256 Hash File is authentic by using the Hash Verification File. Amend this command as necessary to match the file name you have downloaded.
cd C:\Users\%USERNAME%\Downloads && gpg --verify RoninOS_v2.2.1.img.gz.sha256.asc

  1. If you get BAD signature do not proceed and post about it in the RoninDojo Chatroom.

Example Successful Signature ✅:

gpg: Assuming signed data in 'RoninOS_v2.2.1.img.gz.sha256'
gpg: Signature made Mon 16 Jun 2025 07:52:32 AM UTC
gpg: Using RSA key 4D8CCBBEFAE5AC5B8BC1130B116573F87BD3EDF7
gpg: Good signature from "RoninDojo Master Key <pgp@ronindojo.io>"

Example Failure Signature ❌:

gpg: Assuming signed data in 'RoninOS_v2.2.1.img.gz.sha256'
gpg: Signature made Mon 16 Jun 2025 07:52:32 AM UTC
gpg: Using RSA key 4D8CCBBEFAE5AC5B8BC1130B116573F87BD3EDF7
gpg: BAD signature from "RoninDojo Master Key <pgp@ronindojo.io>"

  1. Run the following command to calculate the SHA256 hash of the RoninOS Image File and show the output of the SHA256 Hash File. Amend this command as necessary to match the file names you have downloaded.
certutil -hashfile RoninOS_2.2.0.img.gz && cat RoninOS_v2.2.1.img.gz.sha256

  1. If you get a MISMATCH do not proceed and post about it in the RoninDojo Chatroom.

Example Successful Match ✅:

60fb14c7fc4dff4e3276d9b4188e71e2893f250afd1a200a8df3c8ed0f23431a  RoninOS_v2.2.1.img.gz
60fb14c7fc4dff4e3276d9b4188e71e2893f250afd1a200a8df3c8ed0f23431a  RoninOS_v2.2.1.img.gz

Example Failure Mismatch ❌:

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  RoninOS_v2.2.1.img.gz
60fb14c7fc4dff4e3276d9b4188e71e2893f250afd1a200a8df3c8ed0f23431a  RoninOS_v2.2.1.img.gz

  1. If the hashes match, you have sucessfully verified the RoninOS Image File has not been tampered with. You can now proceed safely with the knowledge that the software you have downloaded is an exact match to the one produced by the RoninDojo developer team.

Building RoninOS

Don't want to use a pre-built image? Go to the Building RoninOS guide to get started building your own image.

Requirements:

  • Basic command line knowledge
  • ARM or x86/x64 machine running any Debian based OS; at least 4G RAM, SSD, quad core (recommended)
  • VirtualBox or similar virtualization software (highly recommended with a minimum of 25GB hard disk space for the virtual disk image)

Additional Info

Check out the Troubleshooting page for more info.

Join the RoninDojo Chatroom and engage the community.