Gentoo Archives: gentoo-portage-dev

From: Brian Dolbec <dolsen@g.o>
To: gentoo-portage-dev@l.g.o
Subject: Re: [gentoo-portage-dev] GPG signed commits
Date: Sun, 02 Nov 2014 17:24:59
Message-Id: 20141102092326.1c476ef0.dolsen@gentoo.org
In Reply to: [gentoo-portage-dev] GPG signed commits by Alexander Berntsen
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA512
3
4 On Fri, 24 Oct 2014 10:59:15 +0200
5 Alexander Berntsen <bernalex@g.o> wrote:
6
7 > -----BEGIN PGP SIGNED MESSAGE-----
8 > Hash: SHA256
9 >
10 > Friends,
11 >
12 > I accidentally pushed a GPG signed commit. This isn't a problem;
13 > merely pointless at this stage, as it won't be used.
14 >
15 > But following this accident I thought I should ask, is it OK to just
16 > start GPG signing commits now? It's default in my git now, and I do it
17 > for almost all other projects anyway, and it doesn't exactly hurt
18 > anyone. And, hey, in the future, maybe we'll start using the
19 > signatures too.
20 >
21 > Note that I'm not suggesting we start *requiring* GPG signed commits
22 > as of yet. :-]
23 >
24 > Brian, what do you think?
25 > - --
26 > Alexander
27 > bernalex@g.o
28 > https://secure.plaimi.net/~alexander
29 > -----BEGIN PGP SIGNATURE-----
30 > Version: GnuPG v2
31 > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
32 >
33 > iF4EAREIAAYFAlRKFOMACgkQRtClrXBQc7V5jQD/eOkGG94+bbLpsVhs7iwXEAsI
34 > amzCJ5MiEiWoVSrySQcA/0TAyIySo360k0KZmDEhXBEylyunZl4oSMfcc7U5VGi6
35 > =TVRR
36 > -----END PGP SIGNATURE-----
37 >
38
39 Yes, it is fine. In fact we are almost ready for an alpha release of
40 gentoo-keys.
41
42 Doing this will give us some to test ggp signed commits for a git
43 commit hook :)
44
45
46 - --
47 Brian Dolbec <dolsen>
48
49 -----BEGIN PGP SIGNATURE-----
50 Version: GnuPG v2.0
51
52 iQJ8BAEBCgBmBQJUVmi1XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
53 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2OUZEQTI0MjY5QzhCNUE3RTlFMjMxRTkw
54 MTg2ODIyMzFCOTI2RTRGAAoJEAGGgiMbkm5PndIQAKlVOLZ1ES07oTE398IugBHA
55 +DUEo/52dWNgmDmg+zfrnasEdG6GECP4AqZHRZjtP4L6I1L+RdtGc1+xzo1aCTls
56 Gj+dcIu6TCT6qXrChqW1Qz5zszpy1WdSlqcP7lY0neI5Is6vfse3Vmu6MBuRnhyV
57 ZeP9Q2+JX6q0/mC/1Rogj39z3XygzjKJsgFEESFfZv0HdrrStgcv8t6vXqnh2Fyh
58 gURV7ZSfTntLow69k2PT+eOaPbX5XghsmRpyGBpFz+F/06PipBblwXL98HXp9gah
59 OZ1wBqo+MNbwzzYllRv9LoOaqr9SNOL+tGXH0RTfdUpRMNUwAxCDrrzLs/JMayL9
60 b/crAnqV/61lASHCZd3Kk6cqqo/NMKtX5HQiYSZivPRYf8fb/xbcb9v0cRvME/Y/
61 x9HeAnbA8+QhZJ6vY9AftJiazLSdpVO+qXm7WeETA+lPvfLWWzunH7NbkVc7IdXh
62 Jp69hv5o1o5i3vb5a/idsDaEkdf2qv6NyWkUgm6ceUPvWH5OghooQvj+mlmZBRXU
63 kldJThHUyCtRbH80gHmzobHCJ6oWuHLPERYhpQft1w9J+Mt/4H8ILZZv3qXyzAS6
64 9QxuCMvelSdgk9jSH5IAATyyE82knfRmSr4G+4p2KqU0tRgnTYIwhm4/GuTfSejz
65 NrV3ZbNiGmjgoEej8NxJ
66 =9PYw
67 -----END PGP SIGNATURE-----