Require signed agent releases (Refs #64)

2026-10-09 20:36:18 -04:00
parent df0d395138
commit 6f71822d41
24 changed files with 984 additions and 107 deletions
@@ -52,6 +52,12 @@
            <p role="status">
                {name} created. Run this command with administrator access on that machine.
            </p>
+            <p>
+                First copy the reviewed installer from your release publisher to
+                <code>electric-cherry-install.sh</code> and provision the publisher's public signing
+                key at <code>/etc/electric-cherry/release-signing.gpg</code>. Obtain both through a
+                trusted channel independent of this controller.
+            </p>
            <textarea
                readonly
                aria-label="Host installation command"