Thierry Laurion
f98553cec5
etc/distro/keys/tails.key: signing key changed again...
...
Repro notes per last update at https://github.com/linuxboot/heads/pull/1631#issue-2224043052
rm -rf /tmp/tails-signing/
wget -q https://tails.boum.org/tails-signing.key -O tails-signing.key
mkdir -p /tmp/tails-signing/
gpg --home /tmp/tails-signing/ --import tails-signing.key
gpg --home /tmp/tails-signing/ --export --armor --export-options export-minimal,export-clean tails@boum.org > ~/heads/initrd/etc/distro/keys/tails.key
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-10-16 18:33:02 -04:00
Jonathon Hall
a7fb7c83ab
keys: Remove PureOS signing key
...
PureOS ISOs still are not detach-signed and it is misleading that there
is a key here. Remove it, we'll add it when the ISOs are signed.
Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2024-08-06 09:07:53 -04:00
0xF4CED
f525b9337d
Update tails.key
...
Key expired: 2024-01-04
Replace with clean export of updated [Tails](https://tails.net/tails-signing.key ) signing key.
Signed-off-by: 0xF4CED <24809481+0xF4CED@users.noreply.github.com>
2024-04-04 02:42:02 +02:00
Thierry Laurion
576e2a8fff
qubes release signing keys: move qubes-4.key to qubes-4.1.key, add qubes-4.2.key
2023-10-18 13:37:22 -04:00
Thierry Laurion
2965cf69cc
Archlinux distro signing public key update to (expires 2037-10-27)
2023-08-08 12:55:08 -04:00
Jonathon Hall
4c8e445dcd
Merge remote-tracking branch 'github-heads/master' into pureboot-27-heads-upstream
...
Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-07-05 14:32:16 -04:00
Marcin Cieślak
fda88486ee
Do not start second scdaemon for /etc/distro
2023-06-27 11:39:52 -04:00
Jonathon Hall
b0e0a91c97
Add PureOS signing key
...
Add the PureOS archive signing key to the keys accepted for signed
ISOs.
Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-06-21 13:26:46 -04:00
Thierry Laurion
d917ca1c96
Qubes weekly signing key has changed. Removed testing and replaced.
...
Already minimized and cleaned upstream, taken from https://qubes.notset.fr/iso/ today
2023-05-24 12:13:07 -04:00
Thierry Laurion
268767d300
/etc/distro/keys/tails.key: Replace with updated and minimized one
2023-01-26 15:58:57 -05:00
Thierry Laurion
4b9757ceef
Remove fedora public key. They don't detach sign ISOs since before 2020.
2022-05-17 15:54:21 -04:00
Thierry Laurion
3e526aea27
distro key: addition of arch minimized public key
...
bin/kexec-parse-boot: test 2bb1f52bf5#584 or modify #762 ?
2022-03-07 19:02:29 -05:00
Thierry Laurion
7a324bbd29
tails.key : merging of new long-term signing key with old one so old ISOs can still be booting from Heads
...
Reproducibility notes at https://github.com/osresearch/heads/pull/1023#issuecomment-1018735659
Fixes #1023
2022-01-21 12:58:25 -05:00
Thierry Laurion
19d064ff96
Adding qubes-test distro public key to test QubesOS ISOs from https://qubes.notset.fr/iso/ . Fixes https://github.com/osresearch/heads/issues/1010
2021-07-26 10:21:36 -04:00
Francis Lam
c3213e150a
initrd: update distro keys
...
Update distro keys to the latest with updated expiration dates
2020-01-16 09:33:41 -08:00
Francis Lam
fd3d69cdac
update tails distro signing key
2018-11-18 10:49:37 -08:00
Francis Lam
c1be56c5ad
Separate trusted ISO signers from trusted config signers
2018-05-17 19:52:11 -07:00
