[meta-issue] Push OEMs to maintain+ detach sign their ISOs and inlude their distro public key in tree
Open
Nobody has claimed this yet.
- Dominant language
- Makefile
- Stars
- 1.6k
- Forks
- 211
- Avg merge
- 4d 21h
- Merged PRs (30d)
- 6
Description
- [ ] https://github.com/Nitrokey/qubes-oem/issues/20
- [ ] https://github.com/Nitrokey/ubuntu-oem/issues/11
- [ ] ~@JonathonHall-Purism pureos key in tree but no detached signatures~ Removed in PR https://github.com/linuxboot/heads/pull/1746
- [ ] others?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the linked Nitrokey issues and the referenced PureOS pull request first to determine which OEM signatures and public keys are still missing. Done means each tracked OEM maintains detached ISO signatures and its distro public key is present in the tree, with the checklist updated.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100