From d688a2a7f505095131a3b09f70d2f0213ea7e810 Mon Sep 17 00:00:00 2001 From: Oliver Gugger Date: Tue, 5 Oct 2021 10:06:40 +0200 Subject: [PATCH] GitHub: download key from git repo, update Roasbeef's key With this commit we update the release template to download Roasbeef's key from the git repository via GitHub. We also update the key mentioned in the template to the new signing key. [skip ci] --- .github/workflows/release.yaml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 54fec93e5..40bc65253 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -58,8 +58,7 @@ jobs: In order to verify the release, you'll need to have `gpg` or `gpg2` installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys that have signed this release if you haven't done so already: ``` - curl https://keybase.io/bitconner/pgp_keys.asc | gpg --import - curl https://keybase.io/roasbeef/pgp_keys.asc | gpg --import + curl https://raw.githubusercontent.com/lightningnetwork/lnd/master/scripts/keys/roasbeef.asc | gpg --import ``` Once you have the required PGP keys, you can verify the release (assuming `manifest-roasbeef-${{ env.RELEASE_VERSION }}.sig` and `manifest-${{ env.RELEASE_VERSION }}.txt` are in the current directory) with: @@ -72,7 +71,7 @@ jobs: ``` gpg: Signature made Wed Sep 30 17:35:20 2020 PDT - gpg: using RSA key 4AB7F8DA6FAEBB3B70B1F903BC13F65E2DC84465 + gpg: using RSA key 60A1FA7DA5BFF08BDCBBE7903BBD59E99B280306 gpg: Good signature from "Olaoluwa Osuntokun " [ultimate] ``` @@ -104,7 +103,7 @@ jobs: ``` $ git verify-tag ${{ env.RELEASE_VERSION }} gpg: Signature made Tue Sep 15 18:55:00 2020 PDT - gpg: using RSA key 4AB7F8DA6FAEBB3B70B1F903BC13F65E2DC84465 + gpg: using RSA key 60A1FA7DA5BFF08BDCBBE7903BBD59E99B280306 gpg: Good signature from "Olaoluwa Osuntokun " [ultimate] ```