install_arch: verify bootstrap image signature

Fixes #458 (closed).

.gitlab/issue_templates/Offboarding.md

@@ -14,24 +14,24 @@ This template should be used for offboarding Arch Linux team members.
 ## All roles checklist
 
 - [ ] Remove user email by reverting instructions from `docs/email.md`.
-  - [ ] Setup forwarding if desired (please add the current date as a comment above the mail address in Postfix's `users` file).
-  - [ ] Inform the user of the conditions for forwarding.
-    - In most cases we only offer forwarding for 6 months.
-    - We will inform the user prior to disabling the forwarding.
-    - The forwarding can be extended if there are good reasons for doing so.
+  - [ ] Remove entry in `group_vars/all/archusers.yml`.
+  - [ ] Remove SSH pubkey from `pubkeys/<username>.pub`.
+  - [ ] Run `ansible-playbook -t archusers  $(git grep -l archusers playbooks/ | grep -v phrik)`.
+  - [ ] Setup forwarding if requested (please add the current date as a comment above the mail address in Postfix's `users` file).
+    - [ ] Inform the user of the conditions for forwarding.
+      - In most cases we only offer forwarding for 6 months.
+      - We will inform the user prior to disabling the forwarding.
+      - The forwarding can be extended if there are good reasons for doing so.
 - [ ] Set user to inactive in archweb: https://www.archlinux.org/admin/auth/user/
-- [ ] Remove member from [staff mailing list](https://lists.archlinux.org/admin/staff/members)
+- [ ] Remove member from [staff mailing list](https://lists.archlinux.org/mailman3/lists/staff.lists.archlinux.org/members/member/)
+- [ ] Moderate email address on [arch-dev-public](https://lists.archlinux.org/mailman3/lists/arch-dev-public.lists.archlinux.org/members/member/) (find member and moderate)
 - [ ] Ask the user to leave `#archlinux-staff` on Libera Chat and forget the password
 - [ ] Remove staff cloak on Libera Chat ([Group contacts](https://wiki.archlinux.org/title/Arch_IRC_channels#Libera_Chat_group_contacts))
+- [ ] Remove the user from relevant staff groups on Keycloak.
 
 ## TU/Developer offboarding checklist
 
-- [ ] Remove entry in `group_vars/all/archusers.yml`.
-- [ ] Remove SSH pubkey from `pubkeys/<username>.pub`.
-- [ ] Run `ansible-playbook -t archusers  $(git grep -l archusers playbooks/ | grep -v phrik)`.
-- [ ] Remove the user from the `Trusted Users`/`Developers` groups on Keycloak.
-- [ ] Moderate email address on [arch-dev-public](https://lists.archlinux.org/admin/arch-dev-public/members) (find member and moderate)
-- [ ] Remove member from [arch-tu](https://lists.archlinux.org/admin/arch-tu/members) and/or [arch-dev](https://lists.archlinux.org/admin/arch-dev/members) mailing lists
+- [ ] Remove member from [arch-tu](https://lists.archlinux.org/mailman3/lists/arch-tu.lists.archlinux.org/members/member/) and/or [arch-dev](https://lists.archlinux.org/mailman3/lists/arch-dev.lists.archlinux.org/members/member/) mailing lists
 - [ ] Create [issue in archlinux-keyring](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/issues/new) (choose *"Remove Packager Key"* and/or *"Remove Main Key"* template)
 
 ## DevOps offboarding checklist
@@ -39,11 +39,9 @@ This template should be used for offboarding Arch Linux team members.
 - [ ] Remove entries in `group_vars/all/root_access.yml`.
 - [ ] Run `ansible-playbook -t root_ssh playbooks/all-hosts-basic.yml`.
 - [ ] Run `ansible-playbook playbooks/hetzner_storagebox.yml playbooks/rsync.net.yml`.
-- [ ] Remove the user from the `DevOps` group on Keycloak.
-- [ ] Remove member from [arch-devops-private mailing lists](https://lists.archlinux.org/admin/arch-devops-private/members)
+- [ ] Remove member from [arch-devops-private mailing lists](https://lists.archlinux.org/mailman3/lists/arch-devops-private.lists.archlinux.org/members/member/)
 - [ ] Remove pubkey from [Hetzner's key management](https://robot.your-server.de/key/index)
 
 ## Wiki Administrator checklist
 
-- [ ] Remove the user from the `Wiki Admins` group on Keycloak.
-- [ ] Remove member from [arch-wiki-admins mailing list](https://lists.archlinux.org/admin/arch-wiki-admins/members).
+- [ ] Remove member from [arch-wiki-admins mailing list](https://lists.archlinux.org/mailman3/lists/arch-wiki-admins.lists.archlinux.org/members/member/).