From e0adee5362f949c741335bed8e3addd4aec6d37d Mon Sep 17 00:00:00 2001
From: ducoterra <git@ducoterra.net>
Date: Sun, 19 Oct 2025 21:36:09 -0400
Subject: [PATCH] add gpg notes and gpg public keys

---
 active/security_pgp/pgp.md   | 35 ++++++++++++++++++++++++++++
 keys/git_ducoterra_net.pub   | 14 +++++++++++
 keys/reese_ducoterra_net.pub | 45 ++++++++++++++++++++++++++++++++++++
 3 files changed, 94 insertions(+)
 create mode 100644 keys/git_ducoterra_net.pub
 create mode 100644 keys/reese_ducoterra_net.pub

diff --git a/active/security_pgp/pgp.md b/active/security_pgp/pgp.md
index 70c09de..8d73528 100644
--- a/active/security_pgp/pgp.md
+++ b/active/security_pgp/pgp.md
@@ -2,6 +2,9 @@
 
 - [PGP](#pgp)
   - [Searching for Keys](#searching-for-keys)
+  - [GPG](#gpg)
+    - [Generate with GPG](#generate-with-gpg)
+    - [GPG Key Servers](#gpg-key-servers)
   - [Fedora KDE](#fedora-kde)
     - [Seahorse](#seahorse)
     - [Evolution Email](#evolution-email)
@@ -13,6 +16,38 @@
 
 I publish all my keys to <https://keys.openpgp.org>
 
+## GPG
+
+### Generate with GPG
+
+```bash
+# Make sure you have pinentry installed
+dnf install pinentry
+
+# Generate the key. The defaults should be good enough.
+gpg --full-generate-key
+
+# Verify your key was created
+gpg --list-keys
+```
+
+### GPG Key Servers
+
+Edit `~/.gnupg/gpg.conf` and add `keyserver hkps://keys.openpgp.org`
+
+Sync keys with keyserver using `gpg --refresh-keys`
+
+Search for a user's key `gpg --auto-key-locate hkps://keys.openpgp.org --locate-keys git@ducoterra.net`
+
+Export your public key with `gpg --export -a 'git@ducoterra.net' > keys/git_ducoterra_net.pub`
+
+Inspect a public key with `gpg --show-key keys/git_ducoterra_net.pub`
+
+You can upload a key with `gpg --keyserver https://keys.openpgp.org --send-keys
+7FC1B2970...` but the email won't be associated with it. Use the [upload
+page](https://keys.openpgp.org/upload) and upload the key file generated above
+instaed. You'll need to verify your email after upload for it to be searchable.
+
 ## Fedora KDE
 
 ### Seahorse
diff --git a/keys/git_ducoterra_net.pub b/keys/git_ducoterra_net.pub
new file mode 100644
index 0000000..6a9227e
--- /dev/null
+++ b/keys/git_ducoterra_net.pub
@@ -0,0 +1,14 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEaPWJEBYJKwYBBAHaRw8BAQdAkbMCw8vlCTSyvxCnaWvFwvvlm7wW94Fgsj47
+3NeMC9a0MVJlZXNlIFdlbGxzIChHaXQgU2lnbmluZyBLZXkpIDxnaXRAZHVjb3Rl
+cnJhLm5ldD6IkwQTFgoAOxYhBC/zYZ+myipM+i01MoFuX+eCcWArBQJo9YkQAhsD
+BQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEIFuX+eCcWAr1uwA/jsW2Hdt
+pPZrBtWaXA8Re3XtoUjIiDFfKn3/kMDZAHhAAP9bLiHw2JbMLN87qQPVjOAh6lW/
+ZSVEfSxDvS8SLlFYCrg4BGj1iRASCisGAQQBl1UBBQEBB0B44N7uGs1kLXjefT4K
+82HrHQT1DEZEl+Mk83VYBXltawMBCAeIeAQYFgoAIBYhBC/zYZ+myipM+i01MoFu
+X+eCcWArBQJo9YkQAhsMAAoJEIFuX+eCcWAruRABAM6dJh7Rc7gfDtAACjZWE5Qe
+86OPhzZZKUu4iTIbifZfAQCd6zv3Dh5h4xSMjK1BYAIS/LhCg7tfYwtMqWJKpzgC
+Dw==
+=undb
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/keys/reese_ducoterra_net.pub b/keys/reese_ducoterra_net.pub
new file mode 100644
index 0000000..aa313ec
--- /dev/null
+++ b/keys/reese_ducoterra_net.pub
@@ -0,0 +1,45 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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zaVQ
+-----END PGP PUBLIC KEY BLOCK-----