aboutsummaryrefslogtreecommitdiff
path: root/contrib/builder-keys/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'contrib/builder-keys/README.md')
-rw-r--r--contrib/builder-keys/README.md27
1 files changed, 27 insertions, 0 deletions
diff --git a/contrib/builder-keys/README.md b/contrib/builder-keys/README.md
new file mode 100644
index 0000000000..a7c1d5ae0a
--- /dev/null
+++ b/contrib/builder-keys/README.md
@@ -0,0 +1,27 @@
+## PGP keys of builders and Developers
+
+The file `keys.txt` contains fingerprints of the public keys of builders and
+active developers.
+
+The associated keys are mainly used to sign git commits or the build results
+of Guix builds.
+
+The most recent version of each pgp key can be found on most pgp key servers.
+
+Fetch the latest version from the key server to see if any key was revoked in
+the meantime.
+To fetch the latest version of all pgp keys in your gpg homedir,
+
+```sh
+gpg --refresh-keys
+```
+
+To fetch keys of builders and active developers, feed the list of fingerprints
+of the primary keys into gpg:
+
+```sh
+while read fingerprint keyholder_name; do gpg --keyserver hkp://subset.pool.sks-keyservers.net --recv-keys ${fingerprint}; done < ./keys.txt
+```
+
+Add your key to the list if you provided Guix attestations for two major or
+minor releases of Bitcoin Core.