blob: eea2c2aad122df10d4b5b84a902c168a5db9bb81 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
#|/usr/bin/env sh
set -e
script_dir=$(dirname -- "$(readlink -f "$0")")
root_dir=$script_dir/..
cwd=$(pwd)
cd "$root_dir"
version=$(head -n 1 docs/CHANGELOG.md | cut -f 1 -d ' ')
sed '/^$/q' docs/CHANGELOG.md
printf 'Verifying the release
---------------------
0. Import my gpg public key into your keyring (you only need to do this once, not for every release):
```bash
gpg --auto-key-locate clear,wkd --locate-keys sommerfeld@sommerfeld.dev
```
1. Download `sentrum-v%s-manifest.txt` and `sentrum-v%s-manifest.txt.asc` to the same directory where you are downloading the binary.
2. Verify the gpg signature is mine (should ouput `Good signature`)`:
```bash
gpg --verify sentrum-v%s-manifest.txt.asc
```
3. Verify the checksums of the binaries (should output `OK`):
```bash
sha256sum --check --ignore-missing sentrum-v%s-manifest.txt
```
' "$version" "$version" "$version" "$version"
cd "$cwd"
|
