mirror/ infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-05 14:06:04 +02:00
Code Issues

Add GPG master and signing key for arch-boxes 

The key is used for signing the releases, so the users can be sure the
images on the mirrors haven't been modified. arch-boxes has been tweaked
to use the key in this MR[1].

[1] https://gitlab.archlinux.org/archlinux/arch-boxes/-/merge_requests/176
This commit is contained in:
Kristian Klausen 2022-05-29 17:03:39 +02:00
parent 5d55253cd0
commit ecb032c53b
No known key found for this signature in database
GPG Key ID: E2BE346E410366C3
2 changed files with 66 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
misc/keys/README.md
View File

@ -1,8 +1,10 @@
# Keys
This directory contains the GPG master and signing key used by [Renovate](https://github.com/renovatebot/renovate) for signing its commits.
This directory contains the GPG master and signing keys used by the following projects:
- [Renovate](https://gitlab.archlinux.org/archlinux/renovate/renovate) for signing commits
- [arch-boxes](https://gitlab.archlinux.org/archlinux/arch-boxes) for signing releases
The keys were generated with the following commands:
The Renonvate keys were generated with the following commands:
```sh
$ export GNUPGHOME="$(mktemp -d)"
$ gpg --quick-generate-key 'renovate <renovate@archlinux.org>' rsa4096 cert never
@ -13,4 +15,15 @@ $ gpg --armor --export-secret-subkeys "${key_id}"
$ rm -r "${GNUPGHOME}"
```
The exported signing key has been added as a GitLab CI/CD variable to the [renovate project](https://gitlab.archlinux.org/archlinux/renovate/renovate). The master and and a copy of the signing key are stored in the [`renovate.asc`](renovate.asc) file.
The arch-boxes keys were generated with the following commands:
```sh
$ export GNUPGHOME="$(mktemp -d)"
$ gpg --quick-generate-key 'arch-boxes <arch-boxes@archlinux.org>' ed25519 cert never
$ key_id="$(gpg --with-colons --list-keys arch-boxes@archlinux.org | awk -F : '$1 == "fpr" {print $10;exit}')"
$ gpg --quick-add-key "${key_id}" ed25519 sign 5y
$ gpg --armor --export-secret-keys "${key_id}"
$ gpg --armor --export-secret-subkeys "${key_id}"
$ rm -r "${GNUPGHOME}"
```
The exported signing keys have been added as GitLab CI/CD variables to the projects. The master keys and a copy of the signing keys are stored in the [`renovate.asc`](renovate.asc) and [`arch-boxes.asc`](arch-boxes.asc) file.

50
misc/keys/arch-boxes.asc Normal file
View File

@ -0,0 +1,50 @@
$ANSIBLE_VAULT;1.1;AES256
39333233366635386430613034633236373062336331373666633166613032346564663631646562
6663316466643939623464613434646536663036663536330a323238613537333964356231626465
65343161313335343530303239363261633535323637303130623138306636653832643635386461
3264653765373461620a653032303063386263623433333432633938613965386565653136353365
66313632666132633962353962653464663164313166353431333864383432393664323030383832
35396535646561613765343766666262663738663266383236623830313839303431623861613531
35623565353761376134343065366533623262633133383834336662623233623630633264316664
66306137666236376262323863643938366139313737663066303138646264346663386236353934
32393738366635663861313938386134366238633630656130623461336333313238613934386463
39633465323866386335333266386464306234323565393436613737613664323939633665393130
33363464383634306466303862373339366463373962346464336134636334336265633762366562
65346266633835303234633064633463366432613037326366306436343064613139396661323631
63633131343431346637613462393939333030323530613230616139306236643930393666656363
36393163316131326566366464383334366238353361366433346235333738306165393235643565
65646565363539626562343164643261663430306465373334653832313033343337326632316461
31663636316133353832353832383639623161663930373164633563323933396163356434343731
34633162323334646532623562316631663237623731336333336164326330613035353762636134
34303631656639343239366434633737623132663935623630623836346665356236393134663764
30383565343338323739353261313662343163316133363563386232336633333039333632613265
31313731363537363966613233316462633639396562656261373438363835343031383365656331
63313635336162373138626130666565323039363437353562306138653232316335336438303361
30363130653637636532383939356563666232363731643631663938353364613566343865326366
64623865373136353536333732613037356332353433616138643332343430343539343738666566
34323536626362383438663034663637616462613764383665373263626237353461343061353030
38323263393962393530656137363834363337373739623438376535333036386333333065626639
65366531366164336132353335303265393038636237376133623133653364306663396431323435
33353261306439616633343461643231336532623132653134363737313566316365376230373163
62643561323161653766626265646663306363303363373066353063386264656362653036303237
39393333373430623764643231313238633763373537663961353361373466353463333331396333
61616330313866313065386635366565623831666334313539353066616233656338336237653863
33393332633033336133366364336161623534306161623132613932643866356537356464646566
31663836366536323666396233336563313965626131623261316631626638353761306433353961
35646634626335653832303364346566353266633735663732373730313433393037323663396635
38633832613264623538303130386362383665303038393265663262313031356139623765376466
64313562386637323661613366666438366338303065636436653865663965653066393234356236
66316538663464656432373462646531616566353566366135323635663062373962393664306439
34653937396438653036653339333334326633633234306134353437623632633731316462313565
30666431383365353532656332666466366530613863366537623837643931373563306534343739
39616666666437633839383635653834373035323137363961323234383934356465343835663265
37306433653131633539383638653362336332303936616263626639333135633463313730386334
34386136303834646531363330633331643230306239656236383235623137633863336664373731
30323866666166376266393333363230363636396233363434383363353637363763643532363962
61643861636361383763666434333064356638616130633430303637663563363066396536343061
65353738616264383838313534323134646161393764653165333439633533323663346464656534
65386632616665333732356536356564333937636631346338653262313832373032396162363333
31396136636462383438306330393632323733373832613639366438643365366534303931336566
64366335633633616564323836346433383964633839376436663461323235633730393365656366
37636537353339626637636232643935323636373436633561386333386463343632303561616333
65316365383065353966316565383734326464323637656337666361343262303338