github-personal/matchbox
1
0
Fork 0
mirror of https://github.com/outbackdingo/matchbox.git synced 2026-01-27 10:19:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

scripts/get-coreos: Make gpg binary customisable

Browse Source 
Distributions like Debian 8 ship a `gpg` (1.4.x) and a `gpg2` (2.1.x) binary,
 which both use the same config files, and thus cannot be used at the same
 time, due to incompatible options. Thus we allow the user to specify which
 gpg binary they want to use.
This commit is contained in:
Dennis Schridde
2016-08-30 14:43:13 +02:00
committed by Dalton Hubble
parent 3b389cc524
commit d56bf78e58
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
scripts/get-coreos
View File

@@ -3,6 +3,8 @@
# USAGE: ./scripts/get-coreos channel version dest
set -eou pipefail
GPG=${GPG:-/usr/bin/gpg}
CHANNEL=${1:-"alpha"}
VERSION=${2:-"1153.0.0"}
DEST_DIR=${3:-"$PWD/examples/assets"}
@@ -24,7 +26,7 @@ echo "Downloading CoreOS $CHANNEL $VERSION images and sigs to $DEST"
echo "CoreOS Image Signing Key"
curl -# https://coreos.com/security/image-signing-key/CoreOS_Image_Signing_Key.asc -o $DEST/CoreOS_Image_Signing_Key.asc
gpg --import < "$DEST/CoreOS_Image_Signing_Key.asc" || true
$GPG --import < "$DEST/CoreOS_Image_Signing_Key.asc" || true
# PXE kernel and sig
echo "coreos_production_pxe.vmlinuz..."
@@ -45,6 +47,6 @@ echo "coreos_production_image.bin.bz2.sig"
curl -# $BASE_URL/coreos_production_image.bin.bz2.sig -o $DEST/coreos_production_image.bin.bz2.sig
# verify signatures
gpg --verify $DEST/coreos_production_pxe.vmlinuz.sig
gpg --verify $DEST/coreos_production_pxe_image.cpio.gz.sig
gpg --verify $DEST/coreos_production_image.bin.bz2.sig
$GPG --verify $DEST/coreos_production_pxe.vmlinuz.sig
$GPG --verify $DEST/coreos_production_pxe_image.cpio.gz.sig
$GPG --verify $DEST/coreos_production_image.bin.bz2.sig