s83/YubiKey-Guide
1
0
Fork 0
mirror of https://github.com/drduh/YubiKey-Guide.git synced 2025-05-31 02:37:14 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update instructions for installing offline packages from removable storage after booting into the secure environment

Browse source
This commit is contained in:
Matt Borja 2025-05-19 02:24:13 +00:00
parent bd96779276
commit 0d709dd9ba
No known key found for this signature in database
GPG key ID: C3F69D1BE6BCBD16
1 changed files with 12 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

15
SECENV.md
View file

@ -79,14 +79,23 @@ Additional setup requirements within the secure environment may include:
- Importing keys - Importing keys
### 2.1 Installing Offline Packages ### 2.1 Installing Offline Packages
After booting into the secure environment, the user proceeds to verify the SHA256 checksums of the previously GPG-verified APK packages stored in the boot partition. Once verified, the user issues the following command within the package subdirectory to install them: After booting into the secure environment, the user proceeds to verify the SHA256 checksums of the previously GPG-verified APK packages download to removable storage:
```shell ```shell
$ apk --allow-untrusted --force-non-repository add *.apk root@host:~$ date -s 'YYYY-MM-DD hh:mm:ss'
root@host:~$ mount -t exfat /dev/sda1 /mnt
root@host:~$ cp /mnt/gpg-bundle.* .
root@host:~$ umount /mnt
root@host:~$ sha256sum -c gpg-bundle.tar.gz.sha256 && tar -xzvf gpg-bundle-tar-gz
```
Once verified and extracted from the tarball, the user issues the following command within the package subdirectory to install them:
```shell
root@host:~$ apk --allow-untrusted --force-non-repository add *.apk
``` ```
### 2.2 GPG Environment ### 2.2 GPG Environment
The user can now begin [working with GPG](https://github.com/drduh/YubiKey-Guide?tab=readme-ov-file#prepare-gnupg) and smart cards in their new environment: At this point, the user can now begin [working with GPG](https://github.com/drduh/YubiKey-Guide?tab=readme-ov-file#prepare-gnupg) and smart cards in their new environment:
```shell ```shell
$ gpg --import yubikey.pub $ gpg --import yubikey.pub