diff options
| author | David Runge <dvzrv@archlinux.org> | 2021-03-29 21:27:44 +0200 |
|---|---|---|
| committer | David Runge <dvzrv@archlinux.org> | 2021-03-29 23:16:04 +0200 |
| commit | bc007ca5f36861b603f2850f0a77a6ed5dcc1f98 (patch) | |
| tree | 7e4a85aa5e02497b84db71446b4ebbd7ea1de088 | |
| parent | d178183c2ed35b297eb9b4592ebfd3999419f082 (diff) | |
| download | archiso-bc007ca5f36861b603f2850f0a77a6ed5dcc1f98.tar.gz archiso-bc007ca5f36861b603f2850f0a77a6ed5dcc1f98.tar.bz2 | |
Add releases section with PGP information
README.rst:
Add a "Releases" section that specifies who is creating releases and which PGP key ID is used to sign tags.
Additionally, information about how to retrieve the relevant public key and how to verify a tag in the repository is
added.
Fixes #114
| -rw-r--r-- | README.rst | 20 |
1 files changed, 20 insertions, 0 deletions
@@ -148,6 +148,26 @@ Discussion around archiso takes place on the `arch-releng mailing list All past and present authors of archiso are listed in `AUTHORS <AUTHORS.rst>`_. +Releases +======== + +`Releases of archiso <https://gitlab.archlinux.org/archlinux/archiso/-/tags>`_ are created by its current maintainer +`David Runge <https://gitlab.archlinux.org/dvzrv>`_. Tags are signed using the PGP key with the ID +`C7E7849466FE2358343588377258734B41C31549`. + +To verify a tag, first import the relevant PGP key: + + .. code:: bash + + gpg --auto-key-locate wkd --search-keys dvzrv@archlinux.org + + +Afterwards a tag can be verified from a clone of this repository: + + .. code:: bash + + git verify-tag <tag> + License ======= |