Skip to content

Commit c112c85

Browse files
laurapaciliolaurapacilio
committed
Update commands on page to match rel eng guidance
1 parent d175076 commit c112c85

1 file changed

Lines changed: 13 additions & 10 deletions

File tree

‎website/docs/cli/install/apt.mdx‎

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -29,25 +29,28 @@ package repositories.
2929

3030
The Terraform packages are signed using a private key controlled by HashiCorp,
3131
so in most situations the first step would be to configure your system to trust
32-
that HashiCorp key for package authentication. For example:
32+
that HashiCorp key for package authentication.
33+
34+
The following example downloads the signing key to a new keyring.
3335

3436
```bash
35-
wget -qO - terraform.gpg https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/terraform-archive-keyring.gpg
37+
wget -O- https://apt.releases.hashicorp.com/gpg | gpg --dearmor | sudo tee /usr/share/keyrings/hashicorp-archive-keyring.gpg
3638
```
3739

38-
After registering the key, you can add the official HashiCorp repository to
39-
your system:
40+
Verify the key's fingerprint.
4041

4142
```bash
42-
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/terraform-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/terraform.list
43+
gpg --no-default-keyring --keyring /usr/share/keyrings/hashicorp-archive-keyring.gpg --fingerprint
4344
```
45+
The fingerprint must match `E8A0 32E0 94D8 EB4E A189 D270 DA41 8C88 A321 9F7B`. Yuo can also verify the key on [Security at HashiCorp](https://www.hashicorp.com/security) under **Linux Package Checksum Verification**.
46+
47+
Add the official HashiCorp repository to your system.
4448

45-
The above command line uses the following sub-shell commands:
49+
```bash
50+
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
51+
```
4652

47-
* `dpkg --print-architecture` to determine your system's primary APT
48-
architecture/ABI, such as `amd64`.
49-
* `lsb_release -cs` to find the distribution release codename for your current
50-
system, such as `buster`, `groovy`, or `sid`.
53+
The above command line uses the `lsb_release -cs` command to find the distribution release codename for your current system, such as `buster`, `groovy`, or `sid`.
5154

5255
To install Terraform from the new repository:
5356

0 commit comments

Comments
 (0)