/security/ Recent content in Security on Flatcar Container Linux Hugo en-us Copyright © The Flatcar Project Contributors. Copyright © Flatcar a Series of LF Projects, LLC. For website terms of use, trademark policy and other project policies please see <a href="https://lfprojects.org/policies/">lfprojects.org/policies</a>. Tue, 17 Apr 2018 19:00:09 +0200 /security/image-signing-key/ Tue, 17 Apr 2018 19:00:09 +0200 /security/image-signing-key/ <p>Images hosted at <a href="https://stable.release.flatcar-linux.net" target="_blank" rel="noopener">https://stable.release.flatcar-linux.net</a> , <a href="https://beta.release.flatcar-linux.net" target="_blank" rel="noopener">https://beta.release.flatcar-linux.net</a> and <a href="https://alpha.release.flatcar-linux.net" target="_blank" rel="noopener">https://alpha.release.flatcar-linux.net</a> are signed with a GPG key with an ID of E25D9AED0593B34A. The key can be downloaded below.</p> <p><strong> <a href="/security/image-signing-key/Flatcar_Image_Signing_Key.asc">Download the Image Signing Key</a> </strong></p> <h2 id="usage">Usage</h2> <p>Download the key and import it into your local GPG key ring:</p> <div class="highlight"><pre tabindex="0" style="background-color:#fff;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>$ cd /tmp </span></span><span style="display:flex;"><span>$ curl -LO https://www.flatcar-linux.org/security/image-signing-key/Flatcar_Image_Signing_Key.asc </span></span><span style="display:flex;"><span>$ gpg --import Flatcar_Image_Signing_Key.asc </span></span><span style="display:flex;"><span>gpg: key 0xE25D9AED0593B34A: public key <span style="color:#a31515">&#34;Flatcar Buildbot (Official Builds) &lt;buildbot@flatcar-linux.org&gt;&#34;</span> imported </span></span><span style="display:flex;"><span>gpg: Total number processed: 1 </span></span><span style="display:flex;"><span>gpg: imported: 1 </span></span></code></pre></div><p>To verify the integrity of a file, you can now use GPG&rsquo;s <code>--verify</code> command.</p>