From 3a8ad53a22fa8f6cf0b249c959b1eb4c978e0c64 Mon Sep 17 00:00:00 2001
From: David Runge <dvzrv@archlinux.org>
Date: Mon, 28 Aug 2023 12:41:05 +0200
Subject: [PATCH] docs: Update documentation on signing netboot artifacts.

The previous instructions did not properly expand the the artifacts, leading to no new or bad signatures, as gpg does not accept multiple files to sign that way.
---
 README.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index c7ebcf72..ce8002c2 100644
--- a/README.md
+++ b/README.md
@@ -155,7 +155,9 @@ key](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/home) is
 created for each file:
 
 ```
-gpg --sender "User Name <your@mail.address>" --detach-sign sitestatic/netboot/*.{efi,ipxe,lkrn}
+for artifact in sitestatic/netboot/*.{efi,pxe,lkrn}; do
+  gpg --sender "User Name <your@mail.address>" --detach-sign "$artifact"
+done
 ```
 
 # Production Installation