When the Elastic Agent download a binary we also download the PGP key and verify the downloaded artifact with it. Instead of downloading the artifact we should bake the PGP in the elastic agent binary and use it to verify the artifact.
Things that I think we need to do:
- Allow the Elastic Agent to use that PGP key instead of file.
- Disable downloading of the PGP key.
- Maybe special case for testing?
When the Elastic Agent download a binary we also download the PGP key and verify the downloaded artifact with it. Instead of downloading the artifact we should bake the PGP in the elastic agent binary and use it to verify the artifact.
Things that I think we need to do: