aboutsummaryrefslogtreecommitdiffstats
path: root/docs/content/doc/installation
diff options
context:
space:
mode:
authorNorwin <noerw@users.noreply.github.com>2021-07-01 14:14:09 +0000
committerGitHub <noreply@github.com>2021-07-01 16:14:09 +0200
commitfc1d9629c61a6beb4afc92aee2c34292a919a1c3 (patch)
tree2a6c8bc15b7e70dddf09d91cc488a3ef67a640a0 /docs/content/doc/installation
parentdfa18a8b1c8614f0827d6d2b91171a540a2ca3be (diff)
downloadgitea-fc1d9629c61a6beb4afc92aee2c34292a919a1c3.tar.gz
gitea-fc1d9629c61a6beb4afc92aee2c34292a919a1c3.zip
Clarify GPG binary check (#14832)
fixes #14817 Co-authored-by: techknowlogick <techknowlogick@gitea.io>
Diffstat (limited to 'docs/content/doc/installation')
-rw-r--r--docs/content/doc/installation/from-binary.en-us.md6
1 files changed, 5 insertions, 1 deletions
diff --git a/docs/content/doc/installation/from-binary.en-us.md b/docs/content/doc/installation/from-binary.en-us.md
index 9d8864956b..aa075bb239 100644
--- a/docs/content/doc/installation/from-binary.en-us.md
+++ b/docs/content/doc/installation/from-binary.en-us.md
@@ -32,13 +32,17 @@ chmod +x gitea
```
## Verify GPG signature
-Gitea signs all binaries with a [GPG key](https://keys.openpgp.org/search?q=teabot%40gitea.io) to prevent against unwanted modification of binaries. To validate the binary, download the signature file which ends in `.asc` for the binary you downloaded and use the gpg command line tool.
+Gitea signs all binaries with a [GPG key](https://keys.openpgp.org/search?q=teabot%40gitea.io) to prevent against unwanted modification of binaries.
+To validate the binary, download the signature file which ends in `.asc` for the binary you downloaded and use the gpg command line tool.
```sh
gpg --keyserver keys.openpgp.org --recv 7C9E68152594688862D62AF62D9AE806EC1592E2
gpg --verify gitea-{{< version >}}-linux-amd64.asc gitea-{{< version >}}-linux-amd64
```
+Look for the text `Good signature from "Teabot <teabot@gitea.io>"` to assert a good binary,
+despite warnings like `This key is not certified with a trusted signature!`.
+
## Recommended server configuration
**NOTE:** Many of the following directories can be configured using [Environment Variables]({{< relref "doc/advanced/environment-variables.en-us.md" >}}) as well!