diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-02-14 06:42:12 -0500 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2024-02-14 09:34:07 -0500 |
| commit | 4f3bee20cda71458d60985b3713028a7d6460b9e (patch) | |
| tree | ec7ca78a0ccab4735936e17e221b6c961c79dd27 /static/build.html | |
| parent | d7db6a7ece03ec76a7acfec40d6655b8bb22f9cd (diff) | |
move to OpenSSH signing for factory images
Diffstat (limited to 'static/build.html')
| -rw-r--r-- | static/build.html | 17 |
1 files changed, 8 insertions, 9 deletions
diff --git a/static/build.html b/static/build.html index 9dbc2518..99f07b9e 100644 --- a/static/build.html +++ b/static/build.html @@ -261,8 +261,11 @@ <li>32-bit gcc runtime library</li> </ul> - <p>The <code>signify</code> tool (with the proper naming) is also required for signing - factory images zips.</p> + <p>Additional dependencies for signing factory images releases:</p> + + <ul> + <li>ssh-keygen (OpenSSH)</li> + </ul> </section> <section id="downloading-source-code"> @@ -537,14 +540,10 @@ cd ../..</pre> <p>Generate a signify key for signing factory images:</p> - <pre>signify -G -n -p keys/raven/factory.pub -s keys/raven/factory.sec</pre> + <pre>ssh-keygen -t ed25519 -f keys/raven/id_ed25519</pre> - <p>Remove the <code>-n</code> switch to set a passphrase. The <code>signify</code> - tool doesn't provide a way to change the passphrase without generating a new key, so - this is currently handled separately from encrypting the other keys and there will be - a separate prompt for the passphrase. In the future, expect this to be handled by the - same scripts along with the expectation of it using the same passphrase as the other - keys.</p> + <p>The passphrase for the SSH key should also match the other keys, although we + don't currently handle it automatically in the encrypt/decrypt scripts.</p> <section id="encrypting-keys"> <h4><a href="#encrypting-keys">Encrypting keys</a></h4> |