suggestion: Install from kernel.org and verify GPG signatures

[docwhat]

Just a suggestion:

Install the source tarballs from kernel.org and verify not only the checksum (via sha256sums.asc but also verify the GPG signatures.

[nanolonny]

I second this suggestion. It was quite a hassle trying to figure out where the source packages were coming from and getting the checksum. Please use the official source tarballs that Git links to.

[github-actions]

Marking stale due to inactivity. Remove stale label or comment or this will be closed in 7 days. Alternatively drop by the #sous-chefs channel on the Chef Community Slack and we'll be happy to help! Thanks, Sous-Chefs.

[github-actions]

Closing due to inactivity. If this is still an issue please reopen or open another issue. Alternatively drop by the #sous-chefs channel on the Chef Community Slack and we'll be happy to help! Thanks, Sous-Chefs.