keybase / keybase/keybase-issues

Installation instructions for Linux are missing the command to check the package signature

Open
#3,131 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

The documentation for [Installation on Linux](https://keybase.io/docs/the_app/install_linux) gives the necessary links to check the code signing key, but the subsequent installation instructions do _not_ show how to check that key.

In order to educate users, it would be better to add a section to the doc explaining how to check the package signature:

----

## Check the package signature
To ensure the package you've downloaded was not subverted and is the genuine one provided by Keybase, we encourage you to check its signature prior to installation:

```
# download the detached signature
$ curl -O https://prerelease.keybase.io/keybase_amd64.deb.sig

# Import the keybase public key
# /!\ DOUBLE CHECK the value below here(https://keybase.io/docs/server_security/our_code_signing_key) and here(https://github.com/keybase/client/blob/master/packaging/linux/code_signing_fingerprint)
# If they are not all the same, something odd is happening
$ gpg --recv 222B85B0F90BE2D24CFEB93F47484E50656D16C7

# check the package signature is valid
$ gpg --verify keybase_amd64.deb{.sig,}
gpg: Signature made Tue 05 Dec 2017 07:01:08 PM CET
gpg: using RSA key 222B85B0F90BE2D24CFEB93F47484E50656D16C7
gpg: Good signature from "Keybase.io Code Signing (v1) " [unknown]
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Open the linked Installation on Linux documentation and review the existing key-signing instructions. Add the requested package-signature section with the provided commands, then verify that the rendered page explains how to check the downloaded package before installation.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux, shell
Domain
documentation
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
40/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.