From e63edbcf5981f659bff1458b6a4f3f4c8130adbb Mon Sep 17 00:00:00 2001 From: Lukas Puehringer Date: Wed, 27 Jan 2021 14:36:57 +0100 Subject: [PATCH 1/3] Fix link in README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 48979af..dde8cbd 100644 --- a/README.md +++ b/README.md @@ -33,7 +33,7 @@ chmod 755 /usr/lib/apt/methods/intoto **NOTE:** *Once this transport is available as Debian package, default configuration and installation of required metadata may be performed automatically on installation of the package -(see [#11](https://github.com/in-toto/apt-transport-in-toto/issues/1)).* +(see [#11](https://github.com/in-toto/apt-transport-in-toto/issues/11)).* --- From 130739082c9f171acfc43618f6578ace3299f15c Mon Sep 17 00:00:00 2001 From: Lukas Puehringer Date: Wed, 27 Jan 2021 14:33:29 +0100 Subject: [PATCH 2/3] Update installation instructions in README.md You can now use apt. --- README.md | 40 ++++++++++------------------------------ 1 file changed, 10 insertions(+), 30 deletions(-) diff --git a/README.md b/README.md index dde8cbd..e0b63ef 100644 --- a/README.md +++ b/README.md @@ -8,34 +8,13 @@ from public [*rebuilders*](https://salsa.debian.org/reproducible-builds/debian-r ### Installation -The transport method must be an executable in `/usr/lib/apt/methods/` and its -dependencies must be installed. +The transport and its dependencies are available via `apt`. Below command +installs the transport to `/usr/lib/apt/methods/intoto`, as well as a default +config file and layout (see below). ---- -**NOTE:** *This is a temporary solution until this transport is available as -Debian package (see #11).* - ---- - -```shell -# Get sources -git clone https://github.com/in-toto/apt-transport-in-toto.git -# Install requirements -pip install -r apt-transport-in-toto/requirements.txt -# Install transport -ln -s apt-transport-in-toto/intoto.py /usr/lib/apt/methods/intoto -chmod 755 /usr/lib/apt/methods/intoto ``` - - -### Configuration ---- -**NOTE:** *Once this transport is available as Debian package, default -configuration and installation of required metadata may be performed -automatically on installation of the package -(see [#11](https://github.com/in-toto/apt-transport-in-toto/issues/11)).* - ---- +sudo apt install apt-transport-in-toto +``` #### Layout To define the requirement of reproducibility for a package, an in-toto layout @@ -43,10 +22,11 @@ must be available on the client at verification time and its path must be specified in the apt configuration file (see [*Options*](https://github.com/in-toto/apt-transport-in-toto#options) below). -A generic rebuild layout can be found in [`data/root.layout`](data/root.layout) -and may be used to verify any package. It contains public keys to verify the -authenticity and integrity of rebuilder link metadata and a threshold that -specifies how many authorized rebuilders need to agree on their result. +A generic rebuild layout ([`data/root.layout`](data/root.layout)) is made +available in `/etc/intoto/root.layout` upon installation. It contains public +keys to verify the authenticity and integrity of rebuilder link metadata +generated by currently available rebuilders, and a threshold that specifies how many +authorized rebuilders need to agree on their result. --- **NOTE:** *Update the layout to add or revoke rebuilder authorizations. From 205ea18f84c8cdcfc208ee09f531fc2544336ccc Mon Sep 17 00:00:00 2001 From: Lukas Puehringer Date: Wed, 27 Jan 2021 14:37:36 +0100 Subject: [PATCH 3/3] Add CHANGELOG.md with initial entries --- CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 CHANGELOG.md diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..3eec5c2 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,8 @@ +# Changelog + +## v0.1.1 +- Update installation instructions in README.md +- Add this CHANGELOG.md + +## v0.1.0 +Initial release.