1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-03-09 15:40:17 +00:00

Clarify bogus PGP signing of Gitea binary downloads

This commit is contained in:
root 2023-07-16 18:38:54 -04:00
parent 831fdad5dd
commit 89148e8214

View file

@ -61,7 +61,7 @@
dest: "{{ gitea_checksum_path }}"
timeout: "{{ download_timeout }}"
- name: Verify Gitea binary with GPG signature
- name: Verify Gitea binary with GPG signature ("BAD signature" FALSE ALARMS continue as of 2023-07-16, despite their claims at https://docs.gitea.com/installation/install-from-binary#verify-gpg-signature)
shell: |
gpg --keyserver keys.openpgp.org --recv {{ gitea_gpg_key }}
gpg --verify {{ gitea_checksum_path }} {{ gitea_install_path }}