6 ms·
For anyone pulling the kernel tree from github - here is how you can verify it. linux-2.6 $ git pull git://github.com/torvalds/linux.git linux-2.6 $ git fetch
by blinkingled 15y ago
For anyone pulling the kernel tree from github - here is how you can verify it.
linux-2.6 $ git pull git://github.com/torvalds/linux.git
linux-2.6 $ git fetch --tags git://github.com/torvalds/linux.git
linux-2.6 $ gpg --keyserver pgp.mit.edu --recv-keys 76E21CBB
linux-2.6 $ git verify-tag v3.1-rc5
gpg: Signature made Sun 04 Sep 2011 06:45:37 PM EDT using DSA key ID 76E21CBB
gpg: Good signature from "Linus Torvalds (tag signing key) <torvalds@osdl.org>"
- elmindreda 15y agoSo how to we verify 76E21CBB?
- BCM43 15y agogpg --check-sigs 76E21CBB If you don't trust the key of anyone that has verified his key (which is true in my case), attend more signings.
- blinkingled 15y agopgp.mit.edu has a web interface which allows you to search based on email addresses. But more easily - since we can trust older commits - doing a git tag -v v3.0 will show you the key fingerprint which matches 76E21CBB.