From 286a2b5f37f3ada5cd8758c4a04030ac61249c13 Mon Sep 17 00:00:00 2001
From: "Lance R. Vick" <lance@lrvick.net>
Date: Sat, 3 Aug 2024 09:17:35 -0700
Subject: [PATCH] add docs for writing media

---
 README.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/README.md b/README.md
index ac14337..81295e9 100644
--- a/README.md
+++ b/README.md
@@ -66,6 +66,18 @@ make attest
 make sign
 ```
 
+## Provisioning ##
+
+1. Write airgap.iso to CD-ROM or SD Card
+  a. `dd if=out/airgap.iso of=/dev/sda bs=1M conv=sync status=progress`
+  b. `cdrecord out/airgap.iso`
+
+2. Verify media still produces expected hash
+  ```
+  sha256sum out/airgap.iso
+  head -c $(stat -c '%s' airgap.iso) /dev/sda | sha256sum
+  ```
+
 ## Setup ##
 
 Assumes target is running Pureboot or Coreboot/heads