Well, the signature proves nobody messed with the download in transit, but someone could have uploaded a malicious binary to the official download page itself.
That's why I'm verifying the signatures. Because, the developers' public keys are outside the download page. An attacker needs to compromise both keys.ubuntu.com and bitcoincore.org.
Correct!
If you also verify PGP, you can know that a trusted developer built and uploaded the binary, but a developer can also become malicious.
But, there's this trust whether I build the source code myself or not, unless I check every single line. Even if I do, I have to trust my coding skills. If we reach to the point where we don't trust the developers, then it's a dead end.
No, if you're building yourself you have less trust involved. Even if you don't read the source code.
Building: Trust the source code is fine.
Downloading: Trust the source code is fine + Trust the person who built & uploaded it didn't mess with the code before building.
That's where the concept of verifiable / reproducible builds come in. It allows to prove a certain binary was built from a certain codebase (without modifications to the codebase); I don't think that verifying Core builds is commonly done (or possible?) though.
Seems like this is 32-bit Linux.
Is it the ArmV7 that made you conclude so? Damn, I haven't used to use Linux yet.
Yes, ARMv7 is 32-bit
https://en.wikipedia.org/wiki/ARM_architecture#32-bit_architectureSo maybe just try installing the 32-bit version of the software.
As I said, I did. I downloaded
bitcoin-22.0-arm-linux-gnueabihf.tar.gz (which is 32-bit) and it prompt the same error.
Okay, that's odd.
Did you follow the normal Bitcoin Core guide?
https://bitcoin.org/en/full-node#linux-instructionstar xzf bitcoin-22.0-arm-linux-gnueabihf.tar.gz
bitcoin-22.0/bin/bitcoind
I'm also not 100% sure if it runs directly out of the download directory or for whatever reason needs to be installed with the
sudo install... (don't think that's the issue based on that error message though).
Regarding port bindings, probably your existing Bitcoin Core is still running. Even if you shut it down using
bitcoin-cli stop, it will come back up. You will need to locate the service name (e.g.
bitcoin-service, then stop it with
sudo service bitcoin-service stop). After stopping the service, install the new version.