g/PrawnOS-nonfree
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

start documenting the APT repo

Browse Source
This commit is contained in:
Hal Emmerich 2020-05-19 18:06:38 -05:00
parent c1d0a3e621
commit 1ea31a2de8
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
DOCUMENTATION.md
View File

@ -121,4 +121,22 @@ You can do this with `cgpt add -i 1 -l RESCUESHELL /dev/sda` for example to labe
This is the suggested method, as then debugging can be enabled/disabled by plugging in/removing the usb device. This is the suggested method, as then debugging can be enabled/disabled by plugging in/removing the usb device.
### PrawnOS APT repo
http://deb.prawnos.com
### Key management
apt repo holds a short life signing private key, and the long life master public key
the short life signing key is a sub key of the master key
This way we can safely keep the master key off of any distribution servers.
This also allows us to revoke the signing key and issue a new one all without users needing to
update their key store, as the master public key will be valid for all sub keys
importing/exporting was done based off of https://www.debuntu.org/how-to-importexport-gpg-key-pair/
subkey creation instructions found here https://www.digitalocean.com/community/tutorials/how-to-use-reprepro-for-a-secure-package-repository-on-ubuntu-14-04
under the "Generate a Subkey for Package Signing" section
### Uploading packages to deb.prawnos.halemmerich.compression
dput or dupload?