From 7d0f17d60801dc580201ed705a433893e419104f Mon Sep 17 00:00:00 2001
From: CJ van den Berg <cj@vdbonline.com>
Date: Tue, 11 Feb 2025 20:18:06 +0100
Subject: [PATCH] add gpg verification

---
 content/index.smd |   5 +++++
 install           |  31 +++++++++++++++++++++++++++++++
 public.gpg        | Bin 0 -> 1837 bytes
 3 files changed, 36 insertions(+)
 create mode 100644 public.gpg

diff --git a/content/index.smd b/content/index.smd
index 66bfdd0..5962d74 100644
--- a/content/index.smd
+++ b/content/index.smd
@@ -41,6 +41,11 @@ Install latest nightly build and specify the install prefix:
 
 ``` curl -fsSL https://flow-control.dev/install | sh -s -- --nightly --prefix ~/.local/bin ```
 
+Install latest nightly build and verify against gpg signature:
+
+``` curl -fsSL https://flow-control.dev/install | sh -s -- --nightly --verify ```
+
+
 ### Prebuilt Binaries
 - Stable: [Releases](https://github.com/neurocyte/flow/releases)
 - Nightly: [Nightly Builds](https://github.com/neurocyte/flow-nightly/releases)
diff --git a/install b/install
index e3803a4..a680b1b 100644
--- a/install
+++ b/install
@@ -4,6 +4,8 @@ set -e
 install_dir="/usr/local/bin"
 add_alias=0
 nightly=0
+verify=0
+local=0
 
 while true; do
     case "${1}" in
@@ -19,6 +21,14 @@ while true; do
         install_dir=/$2
         shift 2
         ;;
+    -V | --verify)
+        verify=1
+        shift 1
+        ;;
+    -l | --local)
+        local=1
+        shift 1
+        ;;
     --)
         shift 1
         break
@@ -87,6 +97,27 @@ if [ "$filesize" -lt 100 ]; then
     exit 1
 fi
 
+if [ "$verify" -eq 0 ] && [ -t 0 ]; then
+    printf "do you want to download and verify the gpg signature? [y/N]: "
+    read -r answer_verify
+    if [ "$answer_verify" = "y" ] || [ "$answer_verify" = "Y" ]; then
+        verify=1
+    fi
+fi
+
+if [ "$verify" -eq 1 ]; then
+    curl -fL "$url.sig" -o "/tmp/$filename.$ext.sig"
+    curl -fL 'https://flow-control.dev/public.gpg' -o /tmp/flow-control-public.gpg
+    gpg --no-default-keyring --keyring /tmp/flow-control-public.gpg --verify "/tmp/$filename.$ext.sig" "/tmp/$filename.$ext"
+
+    if [ "$local" -eq 1 ]; then
+        gpg --verify "/tmp/$filename.$ext.sig" "/tmp/$filename.$ext"
+    fi
+
+    rm /tmp/flow-control-public.gpg
+    rm "/tmp/$filename.$ext.sig"
+fi
+
 echo "installing $([ "$nightly" -eq 1 ] && echo 'NIGHTLY build' || echo 'flow')..."
 if [ "$ext" = "tar.gz" ]; then
     tar -xzf "/tmp/$filename.$ext" -C "$install_dir"
diff --git a/public.gpg b/public.gpg
new file mode 100644
index 0000000000000000000000000000000000000000..f199e027ab8ad1f6ccb322d6ff40a64eae4ef786
GIT binary patch
literal 1837
zcmajecQ_je1IO_sf(UKZ7JJlIqe2^7RP7Pf*k{B_2$c|mqV_qXW<!nBqGy#*Gw!I-
z>YY(k&DJ{OqOrHOcYUAdp7;Il{rC6${`)>33NQog$(=(3asV1Tg!A8GlMWV3ib{R!
z1?nN>Ie7{gcJx||7gmDmwO=0gNKb`;+t<Icr1yrNPLn&$27sw0+&wdL=i(@-dgWVg
zz6mS}m<h)7G$`T?PYk^_DpL8RWYKA^r@|!OVu^)uNwOE`H&z!mV5I2LR6${An{<4w
zHGBRsB31e9rOKqXvC^(Tv1O;(dYg#KchTY3N_oPvFh{*eUVoElmRKDZa%9K{Fjw8j
z$4V3_Mq^sYhJYZ#zFFekV0|Spmrad<)uaqQpQ<v``<YJt1`l52E0J%TX41r?rU)0E
zSlBz7oVtR33#eu1PD7C>v_R49TjfqNa2;gt=WeKo_mP;4V3ND1bcJ6uCEYOuE2KFB
z+y^2ga-@gJx2M*`xG00ME1VIUQqaA*>?fNz+i<OgxwugixW<ZxxJbOCSSVxbzDh=R
zo5Deg6VwI*73*c|kN*)-nRQ@AyP%oimb|N!9U%0%aPm78Pl~Uu!*ZZT6>&s_kyg;%
z1h@(W09z!H=HlU=cyWvmUfjqh)K6T;8*31b@e0NV2H<_Jdj|*Ur2$94+&~E6CZ7b@
zI`CM^=E9oCo|AZ**|gN<ds)AO8T7p<NQjA<oejdu#LNq2gRnF6ftY{*kSGwu9|wT4
zasGRjZ{+~gM;6?TV3&rW>h4!-eM2&u;L~j0{xgcfs9%b$y){y#QIv{#!O7LPW)wL^
zEgW`l_nDEP!&p=<DC4k_N`Z@gv6XXJ*@_#e-{BX)!|LzpxO+yD5DKa1#<rE4*)?#R
zGSw@|Ej@=sQ_ExycH3r>BJIFv*iJ$2(9o4sN_Z?iakU~_Ba>3#&P28nR6Vu{4tEld
zdUBBL<mKq`l4kO>-M=mb{B}%KCeXUKrpYz}Vc7|!l_;u3v~FKQmZ8o)>A&*pvABaq
zl{Zdx@)Hm{h6LdyuNwphF&|1jl~H6OuH~1vNE*zX<Y{x^9+R$+#a**oU3YG{y!XJM
zEw$$h2Zx{N_zzfaCc<{s9gjcIg#%V<Gk?xxp9wVy4}<#kZX+~pkGG=3EaFCk$ABVg
z7D}zyYkBWo`_@8cdFVAWxX(I>SL5@24;^Wx9;c=(<pt&#?5h)h-_4Un{7~scW>OeW
zwR>5nlId&YVwiZgCwxBlHPRm}ne(tMCe;nhc@+W>`KRa4Llf=C4D@rFds$E+*~#sM
z2nqe(Ggs<+w11Zm!GQ817Rf^3ne>ACT^qko%RG%4w@Y#XWq#*IGg7=L=M0)ReQci8
zxX0NV)bU^Az1&lU>8&uhXBh0I#5p6%vStjdPjO0{d1PG7<J;R##aj&@I!`$7EIFgG
z4}@Br9fhNRW3^{N*_)H?!nBj$S<P4NCEj=wU|n~NF_X}gAg;;7WQ4_zjD7R&f<N02
zSJYH}+PvOi9+MU2r~i8Y7&)Ctm%Wrm2-(<^hjvX>4cHlz+!ErvMASo!`7E_WZY&|_
zDnT!+Yvt2RDU8w(A0xrH)F~3d#qH~nWU<D>Mmleyi3|8t|4;{p@eR(t3I#Kf`<!Hs
zs;Yl1&LgfqX|#y?*c0|M+85LCLAQKYXi-&^xeB7_sv^rI@Nr_G=>07hxc#uu`au$3
z&;U5A6;!`rbP&)Ox2fBq_j!Dskvb1G@u2ad=V09lZS{l#LJkwG$f;bt3mfa*Oj<ZA
z+t5IfygP*NSg274y~;R9w$8YCi&015v}LY0bF-7}#!n%QQ{|klcmRzM{fwa5%Xb^y
z07)bUL^R5fgpk{q%BZ;r&b+mV97&?#e~hOATfqYV_!a*@emVZv>EmYhuZjv+6c8=B
zKcKmOcP%MJr(LLYF5Qdl`m*|A;8vPNd@(B46Zg=Qf>>tnhgBd~I<Z%b^<N~W|8_aY
zrjcc5QV#dHbZ0W*CS1)lzJq#)Hyl*kfBA*LOi%L-SKk*FTFOm*Y_@ao*{3H)>uuwz
z3LL>Hr~`+nKPp4Dc@fB^j^)SiQ`M4LwI5MCm%68$YwUyuXZuX~1}I5co{yf*7VSb0
z>1I$txrJS&Yii6K+~*|)CUQez@PK%?HekPLkhwjV5?Trk7~EprYA|TkJF{$C@z~z)
z`)mFzwy*rxyq_%Qzana`Ya6@Wo5wp4TiM9Gu9bQ1wf8X?gZqZ-)Na<vjTi$Q0vFzG
z$R7Tw9Z4>bR??R3g6Qi?>)lL3E}o5eRDX>7omHs4p(wRAZ0ewCsChPSO+8xI6t+=X
zkZN;D*}$Z`7s@_uzKS2UGxw%}0x7386iQIcgSx-wv-5f1ti-?iw)cLfiA!^Qgs~uP
SEQ@xDjI&iPE!5|FD)=|z3rgYu

literal 0
HcmV?d00001