Now signing release assets. fix #54

This commit is contained in:
ppom 2024-01-04 12:00:00 +01:00
parent 592b60172a
commit 9ce589b07d
3 changed files with 16 additions and 1 deletions

1
.gitignore vendored
View File

@ -6,3 +6,4 @@
/wiki
/deb
*.deb
*.minisig

View File

@ -1,7 +1,7 @@
all: reaction ip46tables
clean:
rm -f reaction ip46tables reaction.deb deb
rm -f reaction ip46tables reaction.deb deb reaction.minisig ip46tables.minisig reaction.deb.minisig
ip46tables: ip46tables.d/ip46tables.c
gcc -static ip46tables.d/ip46tables.c -o ip46tables
@ -20,3 +20,7 @@ reaction.deb: reaction ip46tables
cd deb && dpkg-deb --root-owner-group --build reaction
mv deb/reaction.deb reaction.deb
rm -rf deb/
signatures: reaction.deb reaction ip46tables
minisign -Sm ip46tables reaction reaction.deb

View File

@ -152,6 +152,16 @@ Executables are provided [here](https://framagit.org/ppom/reaction/-/releases/),
A standard place to put such executables is `/usr/local/bin/`.
#### Signature verification
Starting at v1.0.3, all binaries are signed with public key `RWSpLTPfbvllNqRrXUgZzM7mFjLUA7PQioAItz80ag8uU4A2wtoT2DzX`. You can check their authenticity with minisign:
```bash
minisign -VP RWSpLTPfbvllNqRrXUgZzM7mFjLUA7PQioAItz80ag8uU4A2wtoT2DzX -m ip46tables
minisign -VP RWSpLTPfbvllNqRrXUgZzM7mFjLUA7PQioAItz80ag8uU4A2wtoT2DzX -m reaction
# or
minisign -VP RWSpLTPfbvllNqRrXUgZzM7mFjLUA7PQioAItz80ag8uU4A2wtoT2DzX -m reaction.deb
```
#### Debian
The releases also contain a `reaction.deb` file, which packages reaction & ip46tables.