From 1ea31a2de8f44209277641bf6052aae8a34dd486 Mon Sep 17 00:00:00 2001 From: Hal Emmerich Date: Tue, 19 May 2020 18:06:38 -0500 Subject: [PATCH] start documenting the APT repo --- DOCUMENTATION.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/DOCUMENTATION.md b/DOCUMENTATION.md index c829ace..eeea285 100644 --- a/DOCUMENTATION.md +++ b/DOCUMENTATION.md @@ -121,4 +121,22 @@ You can do this with `cgpt add -i 1 -l RESCUESHELL /dev/sda` for example to labe This is the suggested method, as then debugging can be enabled/disabled by plugging in/removing the usb device. +### PrawnOS APT repo +http://deb.prawnos.com + +### Key management +apt repo holds a short life signing private key, and the long life master public key +the short life signing key is a sub key of the master key +This way we can safely keep the master key off of any distribution servers. +This also allows us to revoke the signing key and issue a new one all without users needing to +update their key store, as the master public key will be valid for all sub keys + +importing/exporting was done based off of https://www.debuntu.org/how-to-importexport-gpg-key-pair/ + +subkey creation instructions found here https://www.digitalocean.com/community/tutorials/how-to-use-reprepro-for-a-secure-package-repository-on-ubuntu-14-04 +under the "Generate a Subkey for Package Signing" section + +### Uploading packages to deb.prawnos.halemmerich.compression + +dput or dupload?