grub: distrust
16.3.23 distrust
----------------
-- Command: distrust pubkey_id
Remove public key PUBKEY_ID from GRUB's keyring of trusted keys.
PUBKEY_ID is the last four bytes (eight hexadecimal digits) of the
GPG v4 key id, which is also the output of 'list_trusted' (⇒
list_trusted). Outside of GRUB, the key id can be obtained using
'gpg --fingerprint'). These keys are used to validate signatures
when environment variable 'check_signatures' is set to 'enforce'
(⇒check_signatures), and by some invocations of
DONTPRINTYET 'verify_detached' (⇒verify_detached). *NoteUsing digital
DONTPRINTYET 'verify_detached' (⇒verify_detached). ⇒Using digital
signatures, for more information.