summaryrefslogtreecommitdiffstats
path: root/site/download
diff options
context:
space:
mode:
Diffstat (limited to 'site/download')
-rw-r--r--site/download/index.php17
1 files changed, 15 insertions, 2 deletions
diff --git a/site/download/index.php b/site/download/index.php
index e430346..86af57c 100644
--- a/site/download/index.php
+++ b/site/download/index.php
@@ -73,9 +73,22 @@
Download the key:<br/>
$ <b>gpg --recv-keys <?php echo $lbProjectGpgKeyID; ?></b>
</p>
+
+ <p>
+ Download the SHA512 manifest and it's corresponding GPG signature
+ for the release that you are using, and put them in a directory.
+ Put the src, util and docs archives in the root of that directory,
+ alongside the SHA512 manifest file.
+ Put your ROM image archives under <i>rom/</i> in that directory.
+ Put your crossgcc tarballs under <i>crossgcc/</i> in that directory.
+ </p>
+ <p>
+ After you've done this, verify the SHA512 checksums:<br/>
+ $ <b>sha512sum -c sha512sum.txt</b>
+ </p>
<p>
- You can verify the downloaded archives as follows:<br/>
- $ <b>for signature in $(ls *.sig); do gpg --verify $signature; done</b>
+ You can verify the downloaded SHA512 manifest as follows:<br/>
+ $ <b>gpg --verify sha512sum.txt.gpg</b>
</p>
</div>