diff --git a/docs/verifying-signs.md b/docs/verifying-signs.md new file mode 100644 index 000000000000..1ae01d0386d0 --- /dev/null +++ b/docs/verifying-signs.md @@ -0,0 +1,12 @@ +# Verifying Signed Binaries + +K0smotron team provides signed binaries for k0s. The signatures are created using [cosign](https://docs.sigstore.dev/signing/quickstart/). +Public key and signature files are available for download from the [releases page](https://github.com/k0sproject/k0s/releases/latest). +Binaries can be verified using the `cosign` tool, for example: + +```shell +cosign verify-blob \ + --key https://github.com/k0sproject/k0s/releases/download/v1.28.2%2Bk0s.0/cosign.pub \ + --signature https://github.com/k0sproject/k0s/releases/download/v1.28.2%2Bk0s.0/k0s-v1.28.2+k0s.0-amd64.sig \ + --payload k0s-v1.28.2+k0s.0-amd64 +``` diff --git a/mkdocs.yml b/mkdocs.yml index 2f123cb0cfda..0871158b8427 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -24,6 +24,7 @@ nav: - Using custom CA certificate (advanced): custom-ca.md - System Requirements: system-requirements.md - External runtime dependencies: external-runtime-deps.md + - Verifying Signed Binaries: verifying-signs.md - Maintenance: - Upgrade: upgrade.md - Backup/Restore: backup.md