Skip to content
Snippets Groups Projects
Commit 5011b9f2e6d8 authored by Asmaa Hassan's avatar Asmaa Hassan
Browse files

Apply 2 suggestion(s) to 1 file(s)


Co-authored-by: default avatarRussell Dickenson <rdickenson@gitlab.com>
parent 40c48ddd9879
No related branches found
No related tags found
3 merge requests!165Merge upstream Omnibus GitLab into Omnibus Heptapod,!164Merge upstream Omnibus GitLab into Omnibus Heptapod,!163Merge upstream Omnibus GitLab into Omnibus Heptapod
......@@ -261,10 +261,10 @@
1. Download and import the package signing public key
```shell
curl -JLO "https://packages.gitlab.com/gitlab/gitlab-ce/gpgkey/gitlab-gitlab-ce-3D645A26AB9FBD22.pub.gpg"
gpg --import gitlab-gitlab-ce-3D645A26AB9FBD22.pub.gpg
curl -JLO "https://packages.gitlab.com/gitlab/gitlab-ee/gpgkey/gitlab-gitlab-ee-3D645A26AB9FBD22.pub.gpg"
gpg --import gitlab-gitlab-ee-3D645A26AB9FBD22.pub.gpg
```
1. Extract the signature file (`_gpgorigin`)
```shell
......@@ -266,9 +266,9 @@
```
1. Extract the signature file (`_gpgorigin`)
```shell
ar x gitlab-ce-xxx.deb _gpgorigin
ar x gitlab-xxx.deb _gpgorigin
```
1. Verify the signature matches the content
......@@ -289,6 +289,24 @@
Primary key fingerprint: DBEF 8977 4DDB 9EB3 7D9F C3A0 3CFC F9BA F27E AB47
```
If the verification fails with `gpg: BAD signature from "GitLab, Inc. <support@gitlab.com>" [unknown]`, ensure:
- The file names are written in correct order.
- The file names match the content of the archive.
Depending on what Linux distribution you use, the content of the archive might have a different suffix. This means you need to adjust the command accordingly.
To confirm the content of the archive, run `ar t gitlab-xxx.deb`.
For example, for Ubuntu Focal (20.04):
```shell
$ ar t gitlab-ee_17.4.2-ee.0_amd64.deb
debian-binary
control.tar.xz
data.tar.xz
_gpgorigin
```
##### Configuring debsigs
Configuring a policy and keyring for `debsigs` can be complicated, so GitLab provides `gitlab-debsigs.sh` as a scripted method of configuration.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment