Check GPG signatures of Yunohost images
Yunohost provides .sig file for each image on their site (https://build.yunohost.org/)
We should check that the downloaded images are correctly signed by Yunohost.
Public key is : 0x360AAF3259A3E6FF
Available on keyserver keyserver.ubuntu.com
See also the install-sd.sh script for examples of signature checking.