Skip to content

Commit eb6d435

Browse files
authored
Add release signature verification guide (#323)
1 parent a684332 commit eb6d435

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

docs/get-started/installing-nethermind.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,22 @@ Standalone downloads give users more flexibility by allowing them to install a s
9797

9898
Standalone downloads are available on [GitHub Releases](https://github.com/NethermindEth/nethermind/releases) as ZIP archives for x86-64 and AArch64 (ARM64) CPU architectures for Linux, Windows, and macOS.
9999

100+
### Signatures
101+
102+
For security guarantees, Nethermind provides an OpenPGP signature for each package as a separate .asc file (detached signature), signed with the following key: [`AD12 7976 5093 C675 9CD8 A400 24A7 7461 6F1E 617E`](https://keyserver.ubuntu.com/pks/lookup?search=24A774616F1E617E&fingerprint=on&op=index)
103+
104+
To begin with verification, import the above signing key as follows:
105+
106+
```bash
107+
gpg --keyserver keyserver.ubuntu.com --recv-keys 24A774616F1E617E
108+
```
109+
110+
Then, download the corresponding .asc file to verify the package of your choice. For instance:
111+
112+
```bash
113+
gpg --verify nethermind-1.37.0-0048e77d-linux-x64.zip.asc nethermind-1.37.0-0048e77d-linux-x64.zip
114+
```
115+
100116
### Configuring as a Linux service
101117

102118
Installing Nethermind as a Linux `systemd` service takes just a few simple steps:

0 commit comments

Comments
 (0)