diff options
| author | Joshua M. Boniface <joshua@boniface.me> | 2024-05-01 13:32:47 -0400 |
|---|---|---|
| committer | Joshua M. Boniface <joshua@boniface.me> | 2024-05-01 15:52:28 -0400 |
| commit | 3ddb375a9032fc62f4c1aec39b8d7773997e862a (patch) | |
| tree | a40f1b0b0ba85fa11dbfafaed9d87d2eb9e75e27 /README.md | |
| parent | Correct to the actual value (diff) | |
| download | jellyfin-packaging-3ddb375a9032fc62f4c1aec39b8d7773997e862a.tar.gz jellyfin-packaging-3ddb375a9032fc62f4c1aec39b8d7773997e862a.tar.bz2 jellyfin-packaging-3ddb375a9032fc62f4c1aec39b8d7773997e862a.zip | |
Add Debian package and dsc signing with repo key
Allows for the verification of the integrity and ownership of the
resulting .deb, .dsc, .changes, and .buildinfo files for both Debian and
Ubuntu using `debsig-verify` and the standard Apt toolkits.
Closes #14
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -188,6 +188,10 @@ Inside this repository are 7 major components: This simplifies our builds as we do not need to then track many 9-month-only releases of Ubuntu, and also reduces the build burden. Users of non-LTS Ubuntu releases can use either the closest Ubuntu LTS version or use Docker containers instead. +* Signing of Debian packages with `debsigs`. + + This was suggested in https://github.com/jellyfin/jellyfin-packaging/issues/14 and was not something we had ever done, but has become trivial with this CI. This alows for the end-user verification of the ownership and integrity of the binary `.deb` files obtained from the repository with the `debsigs-verify` command and the policy detailed in that issue. We can also integrate this automatically into our installer script and documented process. + ### Docker * Single unified Docker build: the entirety of our Docker images are built as one container from one Dockerfile. |