readme file extended with fingerprint and description
This commit is contained in:
34
README.md
34
README.md
@ -2,36 +2,18 @@
|
||||
|
||||
LX Tools Installer is a GUI for simple install, update, and remove Apps from ilunix.de
|
||||
|
||||
## Build
|
||||
# Fingererprint
|
||||
|
||||
Create a compatible AppImage:
|
||||
```bash
|
||||
./build_compatible.sh
|
||||
```
|
||||
743745087C6414E00F1EF84D4CCF06B6CE2A4C7F
|
||||
|
||||
This creates:
|
||||
- `lxtools_installer{VERSION}-x86_64.AppImage` - The executable
|
||||
- `lxtools_installer{VERSION}-x86_64.AppImage.sha256` - SHA256 checksum
|
||||
- `lxtools_installer{VERSION}-x86_64.AppImage.asc` - GPG signature (if configured)
|
||||
add to your gpg keyring:
|
||||
wget https://git.ilunix.de/punix/lxtools_installer/raw/branch/main/public_key.asc -O - | gpg --import
|
||||
or
|
||||
wget https://keys.openpgp.org/vks/v1/by-fingerprint/743745087C6414E00F1EF84D4CCF06B6CE2A4C7F -O - | gpg --import
|
||||
|
||||
## GPG Setup
|
||||
The Appimage automatically checks whether the public_key has already been imported, and if not it is downloaded from both sources and only imported when all the keys match.
|
||||
|
||||
To enable GPG signing:
|
||||
```bash
|
||||
./gpg_setup.sh
|
||||
```
|
||||
|
||||
## Verification
|
||||
|
||||
Verify the downloaded AppImage:
|
||||
```bash
|
||||
# Check SHA256
|
||||
sha256sum -c lxtools_installer{VERSION}-x86_64.AppImage.sha256
|
||||
|
||||
# Verify GPG signature (requires public key)
|
||||
gpg --import public_key.asc
|
||||
gpg --verify lxtools_installer{VERSION}-x86_64.AppImage.asc lxtools_installer{VERSION}-x86_64.AppImage
|
||||
```
|
||||
This is to ensure that no manipulated software is used.
|
||||
|
||||
# Screenshots
|
||||
[](https://fb.ilunix.de/share/ZnfG9gxv)
|
Reference in New Issue
Block a user