Skip to content

Commit

Permalink
Add public keys and source tarball creation script
Browse files Browse the repository at this point in the history
  • Loading branch information
ewanas committed Sep 13, 2022
1 parent d62062f commit 119386e
Show file tree
Hide file tree
Showing 4 changed files with 136 additions and 0 deletions.
22 changes: 22 additions & 0 deletions doc/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,3 +11,25 @@ NOTARIZATION_USERNAME="<your-apple-id>" NOTARIZATION_PASSWORD='<app-specific-pas
create-dmg --app-drop-link 0 0 build/macos/Build/Products/Release/Destiny.dmg build/macos/Build/Products/Release/Destiny.app
NOTARIZATION_USERNAME="<your-apple-id>" NOTARIZATION_PASSWORD='<app-specific-password>' ./scripts/notarize.py dmg
```

## Source tarball

The script at `scripts/create-source-tarball.sh` should create a tarball.

## Creating a detached signature

Examples:
```bash
gpg2 -b -u FEFCF3E1A6D29483A90C4FAD14431C152E30A826 destiny-v0.24.1-src.tar.gz
```

```bash
gpg2 -b -u 7E1D9E7CEB26F3EA0E746B6031634243DCDBDED7 destiny-v0.24.1-src.tar.gz
```

## Verifying a download

Import all public keys under `doc/signing_keys`

To verify a download, download the `.sig` file corresponding to your download
and run `gpg2 --verify <path of the sig file>`
52 changes: 52 additions & 0 deletions doc/signing_keys/donatas_la.pub
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=9N08
-----END PGP PUBLIC KEY BLOCK-----
52 changes: 52 additions & 0 deletions doc/signing_keys/ewanas_la.pub
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=tv9r
-----END PGP PUBLIC KEY BLOCK-----
10 changes: 10 additions & 0 deletions scripts/create-source-tarball.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
#!/usr/bin/env bash

workdir=destiny-$(git describe)-src

# This is a workaround until dart_wormhole_william is removed as a submodule
# Once dart_wormhole_william is no longer a submodule, `git archive` should suffice
(rm -rfv $workdir; mkdir $workdir; cd $workdir; git clone .. . --recursive; find . -name .git -exec rm -rf {} \+)

tar -cf $workdir{.tar,}
gzip $workdir.tar

0 comments on commit 119386e

Please sign in to comment.