diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-04-14 06:27:07 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-04-14 06:55:06 -0400 |
| commit | 7d96731cd98d52105ed441ce429bcf4781983d3c (patch) | |
| tree | c7030f3fde06e989c841aa0f79174ebef97e69a6 | |
| parent | 47ec894b68d38f8c5a520b06966b3e1033c54777 (diff) | |
stable release manifests now use revision hashes
| -rw-r--r-- | static/build.html | 11 |
1 files changed, 4 insertions, 7 deletions
diff --git a/static/build.html b/static/build.html index 6483fe3c..624ce0cf 100644 --- a/static/build.html +++ b/static/build.html @@ -246,7 +246,6 @@ repo init -u https://github.com/GrapheneOS/platform_manifest.git -b refs/tags/TA <p>Verify the manifest:</p> <pre>gpg --recv-keys 65EEFE022108E2B708CBFCF7F9E712E59AF5F22A -gpg --recv-keys 4340D13570EF945E83810964E8AD3F819AB10E78 cd .repo/manifests git verify-tag --raw $(git describe) cd ../..</pre> @@ -255,12 +254,10 @@ cd ../..</pre> <pre>repo sync -j32</pre> - <p>Verify the source tree:</p> - - <pre>repo forall -c 'git verify-tag --raw $(git describe)' || echo Verification failed!</pre> - - <p>These instructions will be extended in the future to check the verify-tag - output.</p> + <p>The manifest for the latest stable release refers to the revisions in other + repositories via commit hashes rather than tag names. This avoids the need to use a + script to verify tag signatures across all the repositories, since they simply point + to the same commits with the same hashes.</p> <p>Note that the repo command itself takes care of updating itself and uses gpg to verify by default.</p> |