PUBLIC/gpu-turnstile
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 3 Wiki Activity

Embed release public key; rename signing secret to RELEASE_SIGNING_KEY

Browse Source
This commit is contained in:
mram
2026-09-20 22:15:19 +02:00
parent d1e01f9b78
commit 08d02d8fa8
4 changed files with 11 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/update/pubkey.go
+7 -4
View File
@@ -1,13 +1,16 @@
package update
// publicKeyPEM is the PEM-encoded Ed25519 public key that matches the
// SIGNING_KEY secret used by CI to sign release binaries. Generate a
// RELEASE_SIGNING_KEY secret used by CI to sign release binaries. Generate a
// keypair once with:
//
// openssl genpkey -algorithm ed25519 -out private.pem
// openssl pkey -in private.pem -pubout -out public.pem
//
// Paste the contents of public.pem here and commit; store private.pem as
// the SIGNING_KEY repository secret. When empty, the updater refuses to
// update (e.g. development builds).
var publicKeyPEM = ""
// the RELEASE_SIGNING_KEY repository secret. When empty, the updater refuses
// to update (e.g. development builds).
var publicKeyPEM = `-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEA+gJbSvgeYX58woPQGbSC8x8Zw4OTDiiQ7/19seZKfSQ=
-----END PUBLIC KEY-----
`