Chicken and Egg setting public keys about nerves_hub

[danielspofford]

With respect to CI:

I supply NERVES_HUB_FW_PRIVATE_KEY and NERVES_HUB_FW_PUBLIC_KEY which will satisfy https://github.com/nerves-hub/nerves_hub_cli/blob/master/lib/mix/nerves_hub/shell.ex#L53 but not https://github.com/nerves-hub/nerves_hub/blob/master/lib/nerves_hub/certificate.ex#L2

Edit: Trying to dodge it right now by wrapping the config with a CI check:

unless System.get_env("CI") do
  config :nerves_hub,
    public_keys: [:devkey]

  # Was already doing it for this stuff anyway
  key = Path.join(System.user_home!(), ".ssh/id_rsa.pub")
  unless File.exists?(key), do: Mix.raise("No SSH Keys found. Please generate an ssh key")

  config :nerves_firmware_ssh,
    authorized_keys: [
      File.read!(key)
    ]
end

[fhunleth]

Some of our private keys are kept offline, so we solve this by not using the shortcut:

config :nerves_hub,
  fwup_public_keys: [
    # devkey
    "bM/O9+ykZhCWx8uZVgx0sU3f0JJX7mqnAVU9VGeuHr4="
  ]

I added this to the README.md. I'm not sold that using the shortcut is a good idea except for development since it requires that you copy the signing private keys to the build machine even if they're not used. This configuration item is only for the fwup public keys to use when verifying downloaded firmware images. Signing is handled elsewhere.

[Closing since I don't think there's an action-item here or at least there's not one anymore]