diff --git a/README.md b/README.md index 79af0ea1a..9ac7e773a 100644 --- a/README.md +++ b/README.md @@ -36,6 +36,7 @@ For the full documentation see https://box-project.github.io/box. 1. [Phive](doc/installation.md#phive) 1. [Composer](doc/installation.md#composer) 1. [Homebrew](doc/installation.md#homebrew) + 1. [GitHub](doc/installation.md#github) 1. [Usage](#usage) 1. [Configuration][the configuration documentation] 1. [Base path (`base-path`)](doc/configuration.md#base-path-base-path) diff --git a/doc/installation.md b/doc/installation.md index 222d8c4c0..eb3df7991 100644 --- a/doc/installation.md +++ b/doc/installation.md @@ -4,6 +4,7 @@ 1. [Phive](#phive) 1. [Composer](#composer) 1. [Homebrew](#homebrew) +1. [GitHub](#github) ## PHAR @@ -66,6 +67,28 @@ To upgrade `box` use the following command: $ brew upgrade box ``` +## GitHub + +You may download the Box PHAR directly from the [GitHub release][github-release] directly. +You should however beware that it is not as secure as downloading it from the other mediums. +Hence, it is recommended to check the signature when doing so: + +``` +# Do adjust the URL based on the latest release +wget -O box.phar "https://github.com/box-project/box/releases/download/4.4.0/box.phar" +wget -O box.phar.asc "https://github.com/box-project/box/releases/download/4.4.0/box.phar.asc" + +# Check that the signature matches +gpg --verify box.phar.asc box.phar + +# Check the issuer (the ID can also be found from the previous command) +gpg --keyserver hkps://keys.openpgp.org --recv-keys 41539BBD4020945DB378F98B2DF45277AEF09A2F + +rm box.phar.asc +chmod +x box.phar +``` + +