From e5c522c4a2d5c17147636a89086679c26a58685f Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Wed, 14 Feb 2024 10:50:28 -0500 Subject: [PATCH] document signature verification via macOS OpenSSH --- static/install/cli.html | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/static/install/cli.html b/static/install/cli.html index 0816df6e..b70975ec 100644 --- a/static/install/cli.html +++ b/static/install/cli.html @@ -431,9 +431,7 @@ signify -V -m allowed_signers -x allowed_signers.sig -p factory.pub
curl -O https://releases.grapheneos.org/DEVICE_NAME-factory-2021110122.zip
 curl -O https://releases.grapheneos.org/DEVICE_NAME-factory-2021110122.zip.sig
-

Verify the factory images using the signature if you were able to obtain OpenSSH - from trusted package repositories (see above), otherwise continue on to the next - section without this:

+

On Linux and macOS, verify the factory images using the signature:

ssh-keygen -Y verify -f allowed_signers -I contact@grapheneos.org -n "factory images" -s DEVICE_NAME-factory-2021110122.zip.sig < DEVICE_NAME-factory-2021110122.zip