验证下载软件的真实性

在以下命令中，file替换为要验证的文件。例如 C:\PATH\TO\MY\DeadlineCloudSubmitter-windows-x64-installer.exe 。另外，signtool-sdk-version替换为已安装的 SignTool SDK 版本。例如 10.0.22000.0。

"C:\Program Files (x86)\Windows Kits\10\bin\signtool-sdk-version\x86\signtool.exe" verify /v file

例如，您可以通过运行以下命令来验证 Deadline Cloud 提交者安装程序文件：

"C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x86\signtool.exe" verify /v DeadlineCloudSubmitter-windows-x64-installer.exe

确认输出包含Successfully verified: DeadlineCloudSubmitter-windows-x64-installer.exe。成功验证意味着您可以运行安装程序。

通过运行以下命令导入OpenPGP密钥：

 gpg --import --armor <<EOF
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=rY5l
-----END PGP PUBLIC KEY BLOCK-----
EOF

确定是否信任OpenPGP密钥。在做出决定时，请考虑 AWS 已采取措施保护此页面上OpenPGP公钥的托管，并且您从 Deadline Cloud 官方文档中获得了该密钥。

如果您决定信任OpenPGP密钥，请使用与以下示例gpg类似的方法编辑密钥：

$ gpg --edit-key 0xC83BD4DD7C6E1B63

    gpg (GnuPG) 2.3.7; Copyright (C) 2021 Free Software Foundation, Inc.
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.


    pub  rsa4096/C83BD4DD7C6E1B63  created: 2025-12-15  expires: 2027-12-15  usage: SCEA
                         trust: unknown       validity: unknown
    [ unknown] (1). AWS Deadline Cloud <aws-deadline@amazon.com>

    gpg> trust
    pub  rsa4096/C83BD4DD7C6E1B63  created: 2025-12-15  expires: 2027-12-15  usage: SCEA
                         trust: unknown       validity: unknown
    [ unknown] (1). AWS Deadline Cloud <aws-deadline@amazon.com>

    Please decide how far you trust this user to correctly verify other users' keys
    (by looking at passports, checking fingerprints from different sources, etc.)

      1 = I don't know or won't say
      2 = I do NOT trust
      3 = I trust marginally
      4 = I trust fully
      5 = I trust ultimately
      m = back to the main menu

    Your decision? 5
    Do you really want to set this key to ultimate trust? (y/N) y

    pub  rsa4096/C83BD4DD7C6E1B63  created: 2025-12-15  expires: 2027-12-15  usage: SCEA
                         trust: ultimate      validity: unknown
    [ unknown] (1). AWS Deadline Cloud <aws-deadline@amazon.com>
    Please note that the shown key validity is not necessarily correct
    unless you restart the program.

    gpg> quit

验证 Deadline Cloud 提交者安装程序

要验证 Deadline Cloud 提交者安装程序，请完成以下步骤：

1. 下载 Deadline Cloud 提交者安装程序的签名文件。

   下载签名文件 (.sig)

2. 运行以下命令验证 Deadline Cloud 提交者安装程序的签名：

   gpg --verify ./DeadlineCloudSubmitter-linux-x64-installer.run.sig ./DeadlineCloudSubmitter-linux-x64-installer.run

验证截止日期云监视器

要使用签名文件验证 Deadline 云监控器桌面应用程序，请完成以下步骤：

1. 为 Deadline 云监视器安装程序下载相应的签名文件：

   • 下载 .deb 签名文件

   • 下载 .rpm 签名文件

   • 下载。AppImage 签名文件

2. 验证签名：

   对于 .deb：

   gpg --verify ./deadline-cloud-monitor_amd64.deb.sig ./deadline-cloud-monitor_amd64.deb

   对于 .rpm：

   gpg --verify ./deadline-cloud-monitor.x86_64.rpm.sig ./deadline-cloud-monitor.x86_64.rpm

   对于。AppImage:

   gpg --verify ./deadline-cloud-monitor_amd64.AppImage.sig ./deadline-cloud-monitor_amd64.AppImage

3. 确认输出与以下内容类似：

   gpg: Signature made Mon Jan 5 21:10:14 2026 UTC

   gpg: using RSA key C83BD4DD7C6E1B63

   如果输出包含该短语Good signature from "AWS Deadline Cloud"，则表示签名已成功验证，您可以运行 Deadline Cloud 监视器安装脚本。

从中的 AppImageUpdate GitHub页面下载 validate-x86_64。AppImage文件。

下载文件后，要添加执行权限，请运行以下命令。

chmod a+x ./validate-x86_64.AppImage

要添加执行权限，请运行以下命令。

chmod a+x ./deadline-cloud-monitor_<APP_VERSION>_amd64.AppImage

要验证截止日期云监控器签名，请运行以下命令。

./validate-x86_64.AppImage ./deadline-cloud-monitor_<APP_VERSION>_amd64.AppImage

如果输出包含该短语Validation successful，则表示签名已成功验证，您可以安全地运行 Deadline Cloud 监视器安装脚本。

下载 Deadline 云监控器 .deb 文件：

下载截止日期云监视器 (.deb)

验证 .deb 文件：

dpkg-sig --verify deadline-cloud-monitor_amd64.deb

输出将类似于：

Processing deadline-cloud-monitor_amd64.deb...
GOODSIG _gpgbuilder C83BD4DD7C6E1B63 1765815349

要验证 .deb 文件，请确认输出中GOODSIG存在该文件。

下载 Deadline 云监控器 .rpm 文件：

下载截止日期云监视器 (.rpm)

验证 .rpm 文件：

gpg --export --armor "Deadline Cloud" > key.pub
sudo rpm --import key.pub
rpm -K deadline-cloud-monitor.x86_64.rpm

输出将类似于：

deadline-cloud-monitor.x86_64.rpm: digests signatures OK

要验证 .rpm 文件，请确认digests signatures OK该文件在输出中。