Install GPG and RSA keys

Lacework uses a combination of GPG and RSA keys to sign installation materials.

When operating system package managers are used, the appropriate signature verification method is supported.

Lacework supports the appropriate signature verification method if you are using operating system package managers. If you are not using a package manager, Lacework provides signed checksums of release artifacts.

GPG Public Key

You can retrieve the GPG key from various key servers with the following command:

gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 360D55D76727556814078E25FF3E1D4DEE0CC692

The exact armored GPG public key is:

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=nVRV
-----END PGP PUBLIC KEY BLOCK-----

A version of the same GPG public key suitable for RPM, yum, and Zypper (without subkeys):

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=YALP
-----END PGP PUBLIC KEY BLOCK-----

Alpine RSA key

Lacework uses an RSA key for signing Alpine packages, which you must install. The expected install location is:

/etc/apk/keys/support@lacework.net-73fd1289.rsa.pub

The exact RSA public key is:

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA08WVynHilaILnJhoKz
cdlFNGXB/GmTaP2m4g+atcKyGqX6JTHnviOs/1qoVUJOdjxvjEOAmG2Wf7G3Lcth
M88P3OXxkTA9qFXtrDhlGXhr51VVhyhlpxuDP/qoavGTBtyO0VUdcHXjbXBYRT+D
4gxf7U7QJZF1uO7cEag7UGIINDq58Rq7evTCmiUvUQcoae2ZiU0didXcK5ONs4KF
eJ4qMKy3cMTzg+ZmXsVHXoWsJTYzoekYewva0c7+g79CCNQiMRa+vzno0U6NkqKV
esw+ePLyyozWGOlPs3AhwuXeteN0bdq7TgvhN6VsJycJ4lqY9zLMrGE6XxCuxlgt
7wIDAQAB
-----END PUBLIC KEY-----

Cosign RSA Key

Lacework uses an RSA key for signing container images using the cosign tool.

The exact RSA public key is:

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----