[quickstart.sh] Hotfix: don't clean up files we instruct users to use
Specifically: when we skip GPG signature checks, we instruct users to
import the BinTray signing key, then manually execute GPG commands to
verify the signatures. This doesn't work well (at all, really) if we
first clean up the signature and checksum files.
diff --git a/quickstart.sh b/quickstart.sh
index 7e3408c..e9d4cc2 100755
--- a/quickstart.sh
+++ b/quickstart.sh
@@ -2,6 +2,11 @@
set -euo pipefail
+# This will be set to 1 if we instruct the user to manually verify signatures,
+# when they have GPG but don't have the BinTray public key. Would be super confusing
+# to tell the user to use files that we've cleaned up.
+DO_CLEANUP=0
+
usage() {
cat <<EOF
$0
@@ -52,7 +57,9 @@
local status=$?
local base_filename="$1"; shift
if [ $status -eq 0 ]; then
- rm -f "$base_filename"{.asc,.md5,.md5.asc}
+ if [ "$DO_CLEANUP" -eq 0 ]; then
+ rm -f "$base_filename"{.md5,.asc,.md5.asc}
+ fi
else
cat <<EOF
@@ -136,6 +143,7 @@
gpg --verify $filename.asc $filename
EOF
+ DO_CLEANUP=1
fi
else
echo "gpg not found on path, skipping checksum verification"
