github-personal/matchbox
1
0
Fork 0
mirror of https://github.com/outbackdingo/matchbox.git synced 2026-01-27 10:19:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

scripts: Add and trust CoreOS gpg signing key automatically

Browse Source
This commit is contained in:
Spencer Brown
2015-12-29 14:06:08 -06:00
committed by Dalton Hubble
parent 5c8a8b2179
commit 75cc427554
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.gitignore vendored
View File

@@ -11,6 +11,9 @@ _test
*.[568vq]
[568vq].out
# JetBrains IDE project directory
.idea/
*.cgo1.go
*.cgo2.c
_cgo_defun.c

5
scripts/get-coreos
View File

@@ -19,6 +19,9 @@ curl $BASE_URL/coreos_production_pxe_image.cpio.gz -o $DEST/coreos_production_px
curl $BASE_URL/coreos_production_pxe_image.cpio.gz.sig -o $DEST/coreos_production_pxe_image.cpio.gz.sig
# verify signatures
# https://coreos.com/security/image-signing-key/
curl https://coreos.com/security/image-signing-key/CoreOS_Image_Signing_Key.asc -o $DEST/CoreOS_Image_Signing_Key.asc
gpg --import < "$DEST/CoreOS_Image_Signing_Key.asc"
echo "Adding trust for CoreOS signing key:"
echo "04127D0BFABEC8871FFB2CCE50E0885593D2DCB4:6:" | gpg --import-ownertrust
gpg --verify $DEST/coreos_production_pxe.vmlinuz.sig
gpg --verify $DEST/coreos_production_pxe_image.cpio.gz.sig