salt-bootstrap icon indicating copy to clipboard operation
salt-bootstrap copied to clipboard

Published 20 hours ago • verified publisher icon saltstack

Scripts should be signed

Open twangboy opened this issue 2 years ago • 1 comments

Description of Issue/Question

We should probably sign our scripts when we do a release.

On Windows this means we can set the Execution Policy to "RemoteSigned" to add some security while still allowing the bootstrap script to run. I'm assuming we would want to sign the Linux script as well.

For Windows this would need to be an OV Certificate. I'm assuming we could use the same for Linux.

twangboy avatar Feb 02 '23 16:02 twangboy

We GPG sign the releases now, just download <script-name>.<ext>.asc

Could this be used for windows?

s0undt3ch avatar Apr 28 '23 07:04 s0undt3ch