Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-06-04 21:08:49 -04:00
Code Issues Projects Releases Packages Wiki Activity

doc: project signature verification in dom0

Browse source
This commit is contained in:
Ben Grande 2024-01-22 18:49:17 +01:00
parent 5afa96ea51
commit 2fabf8a6ec
No known key found for this signature in database
GPG key ID: 00C64E14F51F9E56
1 changed files with 11 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

22
README.md
View file

@ -63,8 +63,8 @@ You current setup needs to fulfill the following requisites:
### DomU Installation ### DomU Installation
1. Install `git` in the downloader qube, if it is an AppVM, install it it's 1. Install `git` in the qube, if it is an AppVM, install it it's the
the TemplateVM. TemplateVM and restart the AppVM.
2. Clone this repository: 2. Clone this repository:
```sh ```sh
@ -73,13 +73,6 @@ You current setup needs to fulfill the following requisites:
If you made a fork, fork the submodule(s) before clone and use your remote If you made a fork, fork the submodule(s) before clone and use your remote
repository instead, the submodules will also be from your fork. repository instead, the submodules will also be from your fork.
3. Acquire the maintainer signing key by other means and import it.
4. Verify the [commit or tag signature](https://www.qubes-os.org/security/verifying-signatures/#how-to-verify-signatures-on-git-repository-tags-and-commits) and expect a good signature, be surprised otherwise:
```sh
git verify-commit HEAD
```
### Dom0 Installation ### Dom0 Installation
Before copying anything to Dom0, read [Qubes OS warning about consequences of Before copying anything to Dom0, read [Qubes OS warning about consequences of
@ -95,9 +88,16 @@ this procedure](https://www.qubes-os.org/doc/how-to-copy-from-dom0/#copying-to-d
"${qube}" /usr/lib/qubes/qfile-agent "${file}" "${qube}" /usr/lib/qubes/qfile-agent "${file}"
``` ```
2. Copy the project to the Salt directories: 2. Acquire the maintainer signing key by other means and copy it to Dom0.
3. Verify the [commit or tag signature](https://www.qubes-os.org/security/verifying-signatures/#how-to-verify-signatures-on-git-repository-tags-and-commits) and expect a good signature, be surprised otherwise:
```sh ```sh
~/QubesIncoming/<QUBE>/qusal/scripts/setup.sh git verify-commit HEAD
```
4. Copy the project to the Salt directories:
```sh
~/QubesIncoming/"${qube}"/qusal/scripts/setup.sh
``` ```
## Update ## Update