Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Add Page for Keys of Rocky Linux & Team members

See original GitHub issue

Is your feature request related to a problem? Please describe.

We would like to add a new page that details and mostly mirrors https://centos.org/keys/ but for our downstream project. Essentially, a place to store the fingerprints and download links for the signing, debug, and testing keys for each major version of Rocky, any SIGs, and whatever future use may exist. Possibly including Security/Infrastructure team Keys and/or information regarding Keybase as a contact method for security vulnerabilities.

Describe the solution you’d like

Add some copy and (at least) the keys from https://dl.rockylinux.org/pub/rocky/ .

For Rocky Linux 8 Project Keys, these are the fingerprints, exported from my keyring.

Rocky Linux Official Key

pub   rsa4096/0x15AF5DAC6D745A60 2021-02-14 Rocky Linux (Rocky Linux Official Signing Key) <releng@rockylinux.org>
      Key Fingerprint = 7051 C470 A929 F454 CEBE 37B7 15AF 5DAC 6D74 5A60

Rocky Linux Testing Key

pub   rsa4096/0x5489E42BBBE2C108 2021-02-14 Rocky Linux Testing (Rocky Linux Testing Key) <releng@rockylinux.org>
      Key fingerprint = 091A 4404 7C3D 8B7A 331F  5E18 5489 E42B BBE2 C108

Rocky Linux Infrastructure Key

sec   ed25519/0xAA650F52D6C094FA 2021-05-17 Core Infrastructure (Compose Signing Key) <infrastructure@rockylinux.org>
      Key fingerprint = BFC3 D8F2 0D15 F4FD 4628  1D7F AA65 0F52 D6C0 94FA

Describe alternatives you’ve considered

N/A

Additional context

Had been brought up before in the community, and more recently an email to the contact address requesting it!

Issue Analytics

State:
Created 2 years ago
Reactions:1
Comments:15 (15 by maintainers)

Top GitHub Comments

1reaction

NeilHanloncommented, Nov 18, 2021

The --with-fingerprint should print the 'Key fingerprint` information. Lets use that one in the section here

Below, where you display the keys, that looks great. The format is a little weird and might change in the future so that it is just the output of a command. One the page is up there we can play around with it!

Regarding where it should be linked to from: I have no strong preference. It seems it belongs somewhere under security, probably. We’ll likely link into it from elsewhere, as well.

@ressonix & @brianclemens any ideas?

0reactions

NebraskaCodercommented, Nov 29, 2021

Will do. Thanks!