Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Combined keys #696

Closed
kroese opened this issue May 15, 2023 · 2 comments
Closed

Combined keys #696

kroese opened this issue May 15, 2023 · 2 comments

Comments

@kroese
Copy link

kroese commented May 15, 2023

Currently I import the keys by running:

 KEY_URL=https://raw.githubusercontent.com/bitcoin-core/guix.sigs/main/builder-keys

 curl -sSL ${KEY_URL}/CoinForensics.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/Emzy.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/Sjors.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/TheCharlatan.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/achow101.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/benthecarman.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/cfields.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/darosior.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/dunxen.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/fanquake.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/glozow.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/guggero.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/hebasto.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/jackielove4u.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/josibake.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/laanwj.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/satsie.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/sipa.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/svanstaa.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/theStack.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/vertiond.gpg | gpg --import - \
 && curl -sSL ${KEY_URL}/willyko.gpg | gpg --import -

But as soon as new signers will be added or removed in the future, the script will break.

So why is there not a single file that bundles all the current keys so that I dont have to download them all individually?

Or otherwise at least a file that contains all the names of the signers, so that I can parse that instead of hardcoding the names in my code?
@TheCharlatan
Copy link
Contributor

How about:

curl -s "https://api.github.com/repos/bitcoin-core/guix.sigs/contents/builder-keys" | jq -r '.[].download_url'

@kroese
Copy link
Author

kroese commented May 15, 2023

Thanks, that is a good solution!

@kroese kroese closed this as completed May 15, 2023
@kroese kroese mentioned this issue May 16, 2023
Closed
@bitcoin-core bitcoin-core locked and limited conversation to collaborators May 14, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@kroese @TheCharlatan