Comment 22 for bug 1305839

On 04/14/2014 08:45 AM, Adam Conrad wrote:
> The whole point of having the key is to give you a trusty path to the
> (u)debs, surely?

Yes - we need it for the udebs, and for setting up the repository in the
installed system. I'm still trying to work out the details on how to
verify the udebs given the public key. The installer initrd includes
gpgv to verify files/sigs against a keyring; I have a public key and
need to turn that into a keyring. The public key is ascii armored and
so it's easy to include it in a shell script. gpgv seems to expect a non
ascii armored keyring, which can't be easily included in a shell script.
There are no text->binary decoders included in the installer image,
afaict (cjwatson agrees).

Jason