github/asdf-nodejs
github/asdf-nodejs
3
0
Fork 0
mirror of https://github.com/asdf-vm/asdf-nodejs.git synced 2024-10-06 07:42:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix CI testing of signatures/checksums checking

Browse Source 
Fixes: #25
This commit is contained in:
Robin Schneider 2017-02-20 19:21:05 +01:00
parent cf582889e7
commit 2d0a443ad2
No known key found for this signature in database
GPG Key ID: 489A4D5EC353C98A
4 changed files with 25 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.travis.yml
View File

@ -3,6 +3,7 @@ script: asdf plugin-test nodejs https://github.com/asdf-vm/asdf-nodejs.git
before_script:
- git clone https://github.com/asdf-vm/asdf.git
- . asdf/asdf.sh
- ./bin/import-release-team-keyring
os:
- linux
- osx

2
README.md
View File

@ -20,7 +20,7 @@ If you decided to do the later, prepare the dedicated keyring and make it tempor
export GNUPGHOME="$HOME/.asdf/keyrings/nodejs" && mkdir -p "$GNUPGHOME" && chmod 0700 "$GNUPGHOME"
```
Then import the OpenPGP public keys of the [Release Team](https://github.com/nodejs/node/#release-team).
Then import the OpenPGP public keys of the [Release Team](https://github.com/nodejs/node/#release-team) as documented on the linked page or run the `import-release-team-keyring` script which is bundled with this plugin.
For more details, refer to [Verifying Node.js Binaries](https://blog.continuation.io/verifying-node-js-binaries/).
Note that only versions greater or equal to 0.10.0 are checked. Before that version, signatures for SHA2-256 hashes might not be provided (and can not be installed with the `strict` setting for that reason).

10
bin/import-previous-release-team-keyring Executable file
View File

@ -0,0 +1,10 @@
#!/usr/bin/env bash
set -o nounset -o pipefail -o errexit
## https://github.com/nodejs/node/#release-team
gpg --keyserver pool.sks-keyservers.net --recv-keys 9554F04D7259F04124DE6B476D5A82AC7E37093B
gpg --keyserver pool.sks-keyservers.net --recv-keys 93C7E9E91B49E432C2F75674B0A78B0A6C481CF6
gpg --keyserver pool.sks-keyservers.net --recv-keys 114F43EE0176B71C7BC219DD50A3051F888C628D
gpg --keyserver pool.sks-keyservers.net --recv-keys 7937DFD2AB06298B2293C3187D33FF9D0246406D

13
bin/import-release-team-keyring Executable file
View File

@ -0,0 +1,13 @@
#!/usr/bin/env bash
set -o nounset -o pipefail -o errexit
## https://github.com/nodejs/node/#release-team
gpg --keyserver pool.sks-keyservers.net --recv-keys 94AE36675C464D64BAFA68DD7434390BDBE9B9C5
gpg --keyserver pool.sks-keyservers.net --recv-keys FD3A5288F042B6850C66B31F09FE44734EB7990E
gpg --keyserver pool.sks-keyservers.net --recv-keys 71DCFD284A79C3B38668286BC97EC7A07EDE3FC1
gpg --keyserver pool.sks-keyservers.net --recv-keys DD8F2338BAE7501E3DD5AC78C273792F7D83545D
gpg --keyserver pool.sks-keyservers.net --recv-keys C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8
gpg --keyserver pool.sks-keyservers.net --recv-keys B9AE9905FFD7803F25714661B63B535A4C206CA9
gpg --keyserver pool.sks-keyservers.net --recv-keys 56730D5401028683275BD23C23EFEFE93C4CFFFE