where to obtain gpg pubkey used to sign deb and rpm?

ubccr / mokey

FreeIPA self-service account management portal

BSD 3-Clause "New" or "Revised" License

194 stars 46 forks source link

where to obtain gpg pubkey used to sign deb and rpm? #135

Open pcfe opened 9 months ago

pcfe commented 9 months ago

I am having difficulties finding the gpg pubkey needed to verify the signed .deb and .rpm package (https://github.com/ubccr/mokey/blob/main/.goreleaser.yaml#L46-L51).

From where can I download that public key (in my case because I would like to verify the .rpm)?

FWIW, I looked in all of

a checkout of this repo
the list of assests of each release at https://github.com/ubccr/mokey/releases
http://pgp.mit.edu/, searching for 20b36175d1134b65
gpg2 --recv-keys 20b36175d1134b65

aebruno commented 9 months ago

@pcfe We have not yet published our public GPG signing key. Thanks for bringing this to our attention. We'll update this ticket once we get it published to a public key server.

geektoor commented 4 months ago

Hey @aebruno,

is there any kind of time frame when to expect this to happen? This is actually a kind of an enabler for actually deploying mokey in non homelab environments :) So would be really appreciated if the key would be available for validation of packages.

Thanks and cheers, Sven