From 171e7e21ad1b4e1688045640a35fcc049cb02ced Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kai=20L=C3=BCke?= Date: Thu, 6 Aug 2020 12:51:26 +0200 Subject: [PATCH] .github: Import second signing key The last cork release was signed with a different key. Import the key to verify the download. --- .../coreos-overlay/.github/workflows/setup-flatcar-sdk.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/sdk_container/src/third_party/coreos-overlay/.github/workflows/setup-flatcar-sdk.sh b/sdk_container/src/third_party/coreos-overlay/.github/workflows/setup-flatcar-sdk.sh index fed7db3457..290948bb21 100755 --- a/sdk_container/src/third_party/coreos-overlay/.github/workflows/setup-flatcar-sdk.sh +++ b/sdk_container/src/third_party/coreos-overlay/.github/workflows/setup-flatcar-sdk.sh @@ -6,8 +6,10 @@ CORK_VERSION=$(curl -s https://api.github.com/repos/flatcar-linux/mantle/release curl -L -o cork https://github.com/flatcar-linux/mantle/releases/download/v"${CORK_VERSION}"/cork-"${CORK_VERSION}"-amd64 curl -L -o cork.sig https://github.com/flatcar-linux/mantle/releases/download/v"${CORK_VERSION}"/cork-"${CORK_VERSION}"-amd64.sig gpg --keyserver keys.gnupg.net --receive-keys 84C8E771C0DF83DFBFCAAAF03ADA89DEC2507883 +curl -LO https://www.flatcar-linux.org/security/image-signing-key/Flatcar_Image_Signing_Key.asc +gpg --import Flatcar_Image_Signing_Key.asc gpg --verify cork.sig cork -rm -f cork.sig +rm -f cork.sig Flatcar_Image_Signing_Key.asc chmod +x cork mkdir -p ~/.local/bin mv cork ~/.local/bin