@@ -17,7 +17,7 @@ must obtain that key for your local GPG installation.
17
17
You can obtain these keys by
18
18
- through a browser using a key server (e.g. keyserver.ubuntu.com),
19
19
- manually using the ` gpg --keyserver <url> --recv-keys <key> ` command, or
20
- - you can run the packaged ` verifybinaries .py ... --import-keys` script to
20
+ - you can run the packaged ` verify .py ... --import-keys` script to
21
21
have it automatically retrieve unrecognized keys.
22
22
23
23
#### Usage
@@ -52,13 +52,12 @@ Get JSON output and don't prompt for user input (no auto key import):
52
52
./contrib/verifybinaries/verify.py --json pub 22.0-x86
53
53
```
54
54
55
- Don't trust builder-keys by default, and rely only on local GPG state and manually
56
- specified keys, while requiring a threshold of at least 10 trusted signatures:
55
+ Rely only on local GPG state and manually specified keys, while requiring a
56
+ threshold of at least 10 trusted signatures:
57
57
``` sh
58
58
./contrib/verifybinaries/verify.py \
59
- --no-trust-builder-keys \
60
59
--trusted-keys 74E2DEF5D77260B98BC19438099BAD163C70FBFA,9D3CC86A72F8494342EA5FD10A41BDC3F4FAFF1C \
61
- --min-trusted -sigs 10 pub 22.0-x86
60
+ --min-good -sigs 10 pub 22.0-x86
62
61
```
63
62
64
63
If you only want to download the binaries of certain platform, add the corresponding suffix, e.g.:
@@ -68,8 +67,22 @@ If you only want to download the binaries of certain platform, add the correspon
68
67
./contrib/verifybinaries/verify.py pub 22.0-rc2-win64
69
68
```
70
69
71
- If you do not want to keep the downloaded binaries, specify anything as the second parameter .
70
+ If you do not want to keep the downloaded binaries, specify the cleanup option .
72
71
73
72
``` sh
74
- ./contrib/verifybinaries/verify.py pub 22.0 delete
73
+ ./contrib/verifybinaries/verify.py pub --cleanup 22.0
74
+ ```
75
+
76
+ Use the bin subcommand to verify all files listed in a local checksum file
77
+
78
+ ``` sh
79
+ ./contrib/verifybinaries/verify.py bin SHA256SUMS
80
+ ```
81
+
82
+ Verify only a subset of the files listed in a local checksum file
83
+
84
+ ``` sh
85
+ ./contrib/verifybinaries/verify.py bin ~ /Downloads/SHA256SUMS \
86
+ ~ /Downloads/bitcoin-24.0.1-x86_64-linux-gnu.tar.gz \
87
+ ~ /Downloads/bitcoin-24.0.1-arm-linux-gnueabihf.tar.gz
75
88
```
0 commit comments