search

nakamochi / sysupdates

nakamochi live system updates
https://nakamochi.io
MIT License
2 stars 1 forks source link

automate trusted keys management #4

Open x1ddos opened 5 months ago

x1ddos commented 5 months ago

at the moment, changes are verified with git pull --verify-signatures in https://github.com/nakamochi/sysupdates/blob/2290644e/update.sh#L40 which runs gpg-verify.

but the keys which sign commits must first be marked as trusted in the gpg keychain.

x1ddos commented 5 months ago

@kristapsk you'll need this first, to be able to push updates to devices. otherwise, they'll refuse when seeing a new commit signed by an unknown key (yours).