The SIYNET release key
Every SIY release is signed with this key. The installers check the signature before they write anything, and stop if it doesn’t match.
minisign public keyNot published yet. It arrives with the first release, in the installers and here.
Check a download yourself
Get the release’s checksums and their signature
SHA256SUMS and SHA256SUMS.minisig sit next to the downloads, under siy.sh/releases/<version>.
Check the signature
$ minisign -Vm SHA256SUMS -P <key>Check the download against it
$ shasum -a 256 -c SHA256SUMS --ignore-missing
If it doesn’t match
The download was changed somewhere on its way here. Nothing was installed. Try again from another network:
$ curl -fsSL siy.sh | sh