add some documentation to the user section about establishing trust
[monkeysphere.git] / website / download.mdwn
index 006654d0ca35400f38299f9519fe6628c9e8d437..3ba40f4e37440a8bb0c0247e1ff2a97eabfdf1ae 100644 (file)
@@ -1,36 +1,82 @@
-## Downloading and Installing ##
+[[meta title="Download"]]
+
+# Downloading and Installing #
 
 If you are running a Debian system, you can install Monkeysphere
 by following these directions:
 
 You can add this repo to your system by putting the following lines in
-/etc/apt/sources.list.d/monkeysphere.list:
+`/etc/apt/sources.list.d/monkeysphere.list`:
+
+       deb http://archive.monkeysphere.info/debian experimental monkeysphere
+       deb-src http://archive.monkeysphere.info/debian experimental monkeysphere
+
+The repository is currently signed by [The Monkeysphere archive
+signing key](/archive-key), key id EB8AF314 (fingerprint: `2E8D
+D26C 53F1 197D DF40 3E61 18E6 67F1 EB8A F314`).  To cryptographically
+verify the packages, you'll want to [add this key to your apt
+configuration after verifying its
+integrity](http://wiki.debian.org/SecureApt).
+
+Once you've installed the packages, you might want to read up on how
+to get started [as a regular user](/getting-started-user) or [as a
+systems administrator](/getting-started-admin).
+
+## Enhancements ##
+
+As of 2008-08-22, If you run debian lenny you're very close to being
+able to run a fully monkeysphere-enabled system.  One gap in the
+system is that lenny's GnuTLS can't support the `monkeysphere
+subkey-to-ssh-agent` subcommand.
+
+You can install a patched version of GnuTLS to enable this feature of
+the Monkeysphere by adjusting the monkeysphere `sources.list` lines to
+include the `gnutls` component.  So they'd look like this instead:
+
+       deb http://archive.monkeysphere.info/debian experimental monkeysphere gnutls
+       deb-src http://archive.monkeysphere.info/debian experimental monkeysphere gnutls
 
-       deb http://george.riseup.net/debian experimental monkeysphere
-       deb-src http://george.riseup.net/debian experimental monkeysphere
+You can [read more about this offering](/news/modified-gnutls-2.4.x-available).
 
-The repository is currently signed by [Daniel Kahn Gillmor's OpenPGP key](http://fifthhorseman.net/dkg.gpg "dkg's key"), key id D21739E9
-(fingerprint: `0EE5 BE97 9282 D80B 9F75 40F1 CCD2 ED94 D217 39E9`).
-To cryptographically verify the packages, you'll want to [add `dkg`'s key to your apt configuration](http://cmrg.fifthhorseman.net/wiki/apt/importing-keys "Instructions for adding dkg's key to apt")
+## Source ##
 
-## git repositories ##
+For people who can't use the debian package, or folks who just want to
+look at the source, we recommend [using git](/community).
 
-The Monkeysphere is attempting to use a completely distributed
-development model with [git](http://git.or.cz/).  Once you've
-[installed git](http://www.spheredev.org/wiki/Git_for_the_lazy), you
-can [git
-clone](http://www.kernel.org/pub/software/scm/git/docs/git-clone.html)
-any of the developer repositories, including:
+But if you want a tarball of the most recent release, we publish those
+too.  The [latest
+tarball](http://archive.monkeysphere.info/debian/pool/monkeysphere/m/monkeysphere/monkeysphere_0.14.orig.tar.gz)
+has these checksums:
 
-[Jameson Graef Rollins](mailto:jrollins@phys.columbia.edu):
+<pre>
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
 
-       git clone http://lair.fifthhorseman.net/~jrollins/git/monkeysphere.git monkeysphere
+checksums for the monkeysphere 0.15 release:
 
-[Daniel Kahn Gillmor](http://cmrg.fifthhorseman.net/wiki/dkg):
+MD5:
+8be275e5b5119921a536d8a67d3bfe24  monkeysphere_0.15.orig.tar.gz
 
-       git clone http://lair.fifthhorseman.net/~dkg/git/monkeysphere.git monkeysphere
+SHA1:
+65da0a047d935e856e2a0d7032dbbb339a3ce20a  monkeysphere_0.15.orig.tar.gz
 
-## Contact ##
+SHA256:
+44f3feb6e9f6921d2ed0406af4e3862f67da9261c8f00c7ea37cfea5031cbc77  monkeysphere_0.15.orig.tar.gz
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.9 (GNU/Linux)
 
-Please feel free to contact any of the Monkeysphere developers with
-any questions, comments, bug reports, requests, etc.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+=AmW6
+-----END PGP SIGNATURE-----
+</pre>