diff options
author | Cem Keylan <cem@ckyln.com> | 2021-04-07 10:32:09 +0300 |
---|---|---|
committer | Cem Keylan <cem@ckyln.com> | 2021-04-07 10:32:09 +0300 |
commit | 7f93e6102a3720b21cdaee1278437382b2900857 (patch) | |
tree | e3498551173c5e1c7ba26fe28d5866bb1e93fac8 /install.txt | |
parent | 7e3da9a496f64a231265f8ac07619183552ffd10 (diff) | |
download | docs-7f93e6102a3720b21cdaee1278437382b2900857.tar.gz |
update installation manual
Diffstat (limited to 'install.txt')
-rw-r--r-- | install.txt | 42 |
1 files changed, 39 insertions, 3 deletions
diff --git a/install.txt b/install.txt index bfe8cae..59e892e 100644 --- a/install.txt +++ b/install.txt @@ -82,14 +82,50 @@ can be acquired as plain-text to be viewed offline with a pager from ~~~~~~~~~~~~~~~~~~~~~~~~~~ It is highly recommended to verify the signature of the tarball. You - will need GPG for this. + will need the OpenBSD tool `signify(1)' for this. Many distributions + provide a package for it, if you are using a Carbs Linux host, you can + also install the package `otools' which provides `signify'. Download + the signature first. ,---- | wget $URL/carbs-rootfs.tar.xz.sig - | gpg --recv-keys FF484BDFEFCEF8FF - | gpg --verify carbs-rootfs.tar.xz.sig `---- + The signature file should say something similar to + + ,---- + | untrusted comment: verify with carbslinux-2021.04.pub + | RWTBBPDVQ+aHB3dme2Kerf8XY+vWkIISp7Za2ufKghtlnRXPyObAQQyvEJYrwMVTaCBlPEnSWcnHQz8Nka06YVOIeextNKZY3AQ= + `---- + + + Grab the key (which probably should be the latest one) that is written + on the file from <https://dl.carbslinux.org/keys/> so you can verify + the signature. The latest Signify public key is also available on the + [package repository], so you can check the validity of the public key + from multiple locations, or just copy paste that portion to a file and + use that instead. + + ,---- + | PUBKEY=carbslinux-2021.04.pub + | wget https://dl.carbslinux.org/keys/$PUBKEY + `---- + + You can now verify the distribution tarball with signify. + + ,---- + | signify -V -m carbs-rootfs.tar.xz -p $PUBKEY + `---- + + If everything went alright, this should output: + + ,---- + | Signature Verified + `---- + + +[package repository] <https://git.carbslinux.org/repository> + 1.3 Extracting the tarball ~~~~~~~~~~~~~~~~~~~~~~~~~~ |