calltheory/public-keys
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update README.md

Browse source
This commit is contained in:
Patrick Labbett 2026-04-29 22:10:15 +00:00
parent 576a0a27dd
commit 6a0d25e09c
1 changed files with 17 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
README.md
View file

@ -4,21 +4,30 @@ Call Theory public keys for verification of signed containers from our container
## Call Theory SSH Public Key ## Call Theory SSH Public Key
Add to your `authorized_keys` file for the SSH user Call Theory uses to access your server(s).
- [calltheory.pub](calltheory.pub) - [calltheory.pub](calltheory.pub)
> Add to your `authorized_keys` file for the ---
## Verifying Calltheory container images ## Call Theory Container Registry
All images published to `cr.calltheory.com/orbital/*` are signed with Cosign. All images published to `cr.calltheory.com/orbital/*` are signed with [cosign](https://github.com/sigstore/cosign).
### Install cosign ### Install cosign
```bash > You will need to install `cosign` first to validate our signed containers. More information can be found [here](https://github.com/sigstore/cosign).
curl -sSL -o /usr/local/bin/cosign \
https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64 ### Login to the Call Theory container registery
chmod +x /usr/local/bin/cosign
``` Run `podman login cr.calltheory.com` (or `docker login cr.calltheory.com`) before trying to verify the signature on our containers.
We will create and share a *"robot"* account with you for access:
- Container registery username: `calltheory$orbital+yourcompany`
- Container registery password: `<redacted>`
Once you have logged in, you can verify signatures using [cosign.pub](cosign.pub), our public key.
### Get the public key ### Get the public key