identifying which builds are signed

[Michael Stone]

On Thu, Jul 31, 2008 at 09:01:24AM -0400, Mikus Grinbergs wrote:
> You wrote, regarding "nominated" 8.2 builds:
>> In a few weeks, once we're more confident in the
>> sustainability and security of the build, then we'll publish an official
>> candidate build with cryptographic signatures that mark it as "suitable
>> for mass installation".
>
> I have a general question.  I'm going to be helping some Ship.2 G1G1  
> users (without developer keys) to perform off-line-upgrades of their  
> systems.  Currently I have to "data mine" through the wiki to verify  
> which builds are "signed" (and can be "applied" from an USB stick).

Things in 

http://download.laptop.org/xo-1/os/official/
http://download.laptop.org/xo-1/os/candidate/

can be installed on locked machines.

When we sign candidates or make candidates official, we send
announcements and publish the signed build in the appropriate directory.

Michael