Verified Commit 65c25e92 authored by noplanman's avatar noplanman

Add PGP public key and instructions on how to verify the signed binaries.

parent 68d6eb52
......@@ -64,6 +64,20 @@ The `extract.sh` script extracts the built binary from the image created using `
This basically starts a container from the built image for your selected architecture and writes the binary out to the file path you passed as a parameter.
## Verify PGP Signature
All automated binary builds can be found on Bintray:
- https://bintray.com/borg-binary-builder/borg-binaries/borg-binaries
Using version `1.1.8` for `armv7` as an example:
1. Simply download the desired binary (`borg-1.1.8-armv7`) and it's corresponding signature file (`borg-1.1.8-armv7.asc`).
2. Next we have to import the official PGP public key needed for verification (which you can find in this repo):
- `gpg --import borg-binary-builder.public.asc`
3. Then verify the downloaded binary with it's signature file:
- `gpg --verify borg-1.1.8-armv7.asc borg-1.1.8-armv7`
4. Whoop!
## License
Borg Binary Builder is licensed under the terms of the [WTFPL]. See the [LICENSE] file.
......
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBFwXF+sBEAC5qmR2Lw8gz3oUvC9heSJq6FcsVF7UpUMri6B3XdWovz+xeHw8
8HOr4FduhM568G//lqbLSMbDR5LnGvpWTjYxZkZKpI1znzh0ASRbaZcpb8xac+j4
6jL0uMlL3mF4zxGHhd8MluHFEr+NQpyz9TQqmFMEXJuTPcXmYRQWXLvIzZaUBZc2
Bthh192OAAQDry1v3wvqumnXMXh0dO1qAklFzWwJB9Iinw4q8M4q/xPfXEzwNZ9Y
5pfHT7iWL8gfJUMJQb6DhKOOQFEf5RJ+7JX0NQYlOYdVNWr1/GhtRTGn0qQqvxg7
M3g0Odske2SNqVqd4zxyz77J9q5J0NuyfkQ4fpJ2QK8T9RAAdwfklw4r7jxvB4xs
L9l6ZbjZx4TOUF4Q22GjgmZr+W/hnqGBICosAqYSHzZIkBXVZlKhio7aK7ey9Jzt
gKZHAKiZYRPOUJiiqpsirQEfAXDNae+ZVtVMNqE1Abk66IRE1TCQwr7S7XHGZWfn
mHfEuJbGZZGNEpdwXd1G1+leEC3aTnHG+jxlurJr5NP74zHjA8CGbGPPunzsCmcA
ZLfGAtpGT/acXY5f8OnQUisutgaoypWAbeDelNeMedNOfhcCI/MmK45jXZA5foXP
JAXiELTnPNoLMyHMUPodYDoBLPL15yPTJSVsIGWcOSjUrZIw4ktmPGEUowARAQAB
tDZCb3JnIEJpbmFyeSBCdWlsZGVyIDxib3JnLWJpbmFyeS1idWlsZGVyQG5vcGxh
bm1hbi5jaD6JAk4EEwEKADgWIQTGnOhh36S9776cJAEQr8vJqWpFyQUCXBcX6wIb
AwULCQgHAwUVCgkICwUWAwIBAAIeAQIXgAAKCRAQr8vJqWpFyVFwEACdL6ynwkyy
5Tg1xEE+yVpbeZf2tkLdD+7ufs99nFGWgP/Q/8YKM1bNc+Aun1pLx00aRnlNo25D
jsJ3/uJ56638uUfB6Dtw3bRbqOkD5YW8K94G9pTnmWRmWlsvOTWoiCF8RIRDFhvR
6jfvFV2eHGfDG41heGF6BLMpohPbiRJ9g5gsehT7Tw5ocQDsW6zyhd80oOpNeoJb
/izexr2db6pFTNp8lXOHFoKobVlhKeoQ3FMvF0ay/sAVfe/WyRkfcS+lnMI4YEsp
zPoKQvRVEmQG3Y1vEbh3hYxIe2hVHBAzR7XCW9dbc0W/J8ADwSxHpZIYmw5FEKXC
giflt428Rli5n8pBLI7wlp+0bEye6+ub2sFkTm23CcbZYtMLEqobTswdpAmcQD5z
VqSE5T8PqvJoqps8l14sds0WFdXIC5TdDjsFSy7kILKOWSZC4dUr0iduhxT2iNzi
m7eRPwq7da0m1OPS0khtyujRXI0aBIar1Vb3Wpvw8nyDSK+qq7GKDY7k+mSw3K1z
sdZhP26BRktRqAAUdgvEklyOt6aZTBd27yEGG0ZVdzwRYR+1F2olXQjfHkg0hkH8
vdioNEJmMrZv189vbOHz6q1F/O27rIkYYhfK/OT0tLc6Lu93X6O31IakSe6UTWQP
UmqAZmCXFolkzzIyAUf7/mJrI6mVxLsTFQ==
=/qdu
-----END PGP PUBLIC KEY BLOCK-----
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment