summaryrefslogtreecommitdiff
path: root/static/build.html
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2023-01-05 00:55:05 -0500
committerDaniel Micay <danielmicay@gmail.com>2023-01-05 02:04:19 -0500
commit6280211cc5b5de9e08c1664a5ac584bae9a2d3f4 (patch)
treebb97b307fbf6ea5a3f101d1b6047f04eec73029f /static/build.html
parent1ff2719b37fb4bbcd48821f4742c120846085463 (diff)
SSH commit signing will be used going forward
Diffstat (limited to 'static/build.html')
-rw-r--r--static/build.html12
1 files changed, 10 insertions, 2 deletions
diff --git a/static/build.html b/static/build.html
index a56bb14e..752b2934 100644
--- a/static/build.html
+++ b/static/build.html
@@ -351,10 +351,18 @@ repo sync -j16</pre>
cd grapheneos-<var>TAG_NAME</var>
repo init -u https://github.com/GrapheneOS/platform_manifest.git -b refs/tags/<var>TAG_NAME</var></pre>
+ <p>Obtain GPG public key for verifying tags before 2023-01-05:</p>
+
+ <pre>gpg --recv-keys 65EEFE022108E2B708CBFCF7F9E712E59AF5F22A</pre>
+
+ <p>Obtain SSH public key for verifying tags after 2023-01-05:</p>
+
+ <pre>curl https://grapheneos.org/allowed_signers &gt; ~/.ssh/grapheneos_allowed_signers</pre>
+
<p>Verify the manifest:</p>
- <pre>gpg --recv-keys 65EEFE022108E2B708CBFCF7F9E712E59AF5F22A
-cd .repo/manifests
+<pre>cd .repo/manifests
+git config gpg.ssh.allowedSignersFile ~/.ssh/grapheneos_allowed_signers
git verify-tag $(git describe)
cd ../..</pre>