public inbox for gentoo-dev@lists.gentoo.org
 help / color / mirror / Atom feed
Search results ordered by [date|relevance]  view[summary|nested|Atom feed]
thread overview below | download: 
* [gentoo-dev] [RFC] Make manifest signatures mandatory for repoman commit
@ 2015-04-15  8:59 99% Andrew Savchenko
  0 siblings, 0 replies; 1+ results
From: Andrew Savchenko @ 2015-04-15  8:59 UTC (permalink / raw
  To: gentoo-dev

[-- Attachment #1: Type: text/plain, Size: 506 bytes --]

Hi,

why manifest signatures are still optional for repoman?

Repoman signatures are currently optional and this creates nasty
consequences: if signing errors occurs, repoman still proceeds :/

I just had a phone call during repoman commit and was not able to
type my password. Due to gpg-agent timeout repoman completed commit
without a signature :( Should signatures be mandatory, repoman will
bail out on such conditions and devs can recommit again safely.

Best regards,
Andrew Savchenko

[-- Attachment #2: Type: application/pgp-signature, Size: 819 bytes --]

^ permalink raw reply	[relevance 99%]

Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2015-04-15  8:59 99% [gentoo-dev] [RFC] Make manifest signatures mandatory for repoman commit Andrew Savchenko

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox