Percy Wegmann 26f31f73f4 cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key ...

QNAP now requires builds to be signed with an HSM.

This removes support for signing with a local keypair.

This adds support for signing with a Google Cloud hosted key.

The key should be an RSA key with protection level `HSM` and that uses PSS padding and a SHA256 digest.

The GCloud project, keyring and key name are passed in as command-line arguments.

The GCloud credentials and the PEM signing certificate are passed in as Base64-encoded command-line arguments.

Updates tailscale/corp#23528

Signed-off-by: Percy Wegmann <percy@tailscale.com>

2025-04-17 08:39:31 -05:00

..

scripts

cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key

2025-04-17 08:39:31 -05:00

Tailscale

release/dist/qnap: use tmp file directory for qpkg building

2024-04-23 21:34:45 -04:00