aboutsummaryrefslogtreecommitdiff
path: root/contrib/builder-keys/README.md
diff options
context:
space:
mode:
authorCarl Dong <contact@carldong.me>2021-07-02 14:55:51 -0400
committerCarl Dong <contact@carldong.me>2021-07-08 11:29:54 -0400
commit46ce6ce3782dfbd8f9d26dc2ba0f284755e75f2d (patch)
treedb0d9105fdb6c394fa275c47f90c0139fd46d073 /contrib/builder-keys/README.md
parentfc4f8449f34e32b0b9ac9d218d6c3264b02467ba (diff)
downloadbitcoin-46ce6ce3782dfbd8f9d26dc2ba0f284755e75f2d.tar.xz
tree-wide: Rename gitian-keys to builder-keys
Diffstat (limited to 'contrib/builder-keys/README.md')
-rw-r--r--contrib/builder-keys/README.md27
1 files changed, 27 insertions, 0 deletions
diff --git a/contrib/builder-keys/README.md b/contrib/builder-keys/README.md
new file mode 100644
index 0000000000..a7c1d5ae0a
--- /dev/null
+++ b/contrib/builder-keys/README.md
@@ -0,0 +1,27 @@
+## PGP keys of builders and Developers
+
+The file `keys.txt` contains fingerprints of the public keys of builders and
+active developers.
+
+The associated keys are mainly used to sign git commits or the build results
+of Guix builds.
+
+The most recent version of each pgp key can be found on most pgp key servers.
+
+Fetch the latest version from the key server to see if any key was revoked in
+the meantime.
+To fetch the latest version of all pgp keys in your gpg homedir,
+
+```sh
+gpg --refresh-keys
+```
+
+To fetch keys of builders and active developers, feed the list of fingerprints
+of the primary keys into gpg:
+
+```sh
+while read fingerprint keyholder_name; do gpg --keyserver hkp://subset.pool.sks-keyservers.net --recv-keys ${fingerprint}; done < ./keys.txt
+```
+
+Add your key to the list if you provided Guix attestations for two major or
+minor releases of Bitcoin Core.