5
0
mirror of https://github.com/cwinfo/yggdrasil-network.github.io.git synced 2024-11-10 07:50:26 +00:00

platform-linux: rewrite key verification

Apparently the previous instructions weren't as secure as I thought. See
for example https://bitbucket.org/skskeyserver/sks-keyserver/issues/41/web-app-displays-uids-on-keys-that-have
This commit is contained in:
Mikaela Suomalainen 2019-02-13 20:45:09 +02:00
parent e1c5e92613
commit e1e49585ea
No known key found for this signature in database
GPG Key ID: 0C207F07B2F32B67

View File

@ -37,9 +37,12 @@ installed into systemd and started.
### From an Internet repository ### From an Internet repository
To start with, add the repository key to your apt keyring: To start with, import the repository key to your gpg keyring and export it
to your apt keyring:
``` ```
sudo apt-key adv --keyserver pool.sks-keyservers.net --recv-keys 569130E8CA20FBC4CB3FDE555898470A764B32C9 gpg --fetch-keys https://neilalexander.s3.eu-west-2.amazonaws.com/deb/key.txt
gpg --export 569130E8CA20FBC4CB3FDE555898470A764B32C9 | sudo apt-key add -
``` ```
Add the repository: Add the repository:
@ -79,7 +82,8 @@ installed into systemd and started.
To start with, download the repository key: To start with, download the repository key:
``` ```
sudo rpm --define="%_hkp_keyserver http://pool.sks-keyservers.net" --import 0x5898470A764B32C9 gpg --fetch-keys https://neilalexander.s3.eu-west-2.amazonaws.com/deb/key.txt
gpg --armor --no-comment --export-options export-minimal --export 569130E8CA20FBC4CB3FDE555898470A764B32C9 | sudo tee /etc/pki/rpm-gpg/RPM-GPG-KEY-yggdrasil
``` ```
Add the repository: Add the repository:
@ -89,6 +93,7 @@ sudo cat > /etc/yum.repos.d/yggdrasil.repo << EOF
name = Yggdrasil name = Yggdrasil
baseurl = https://neilalexander.s3.eu-west-2.amazonaws.com/rpm/ baseurl = https://neilalexander.s3.eu-west-2.amazonaws.com/rpm/
gpgcheck=1 gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-yggdrasil
EOF EOF
``` ```