-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On Thu, Mar 23, 2017 at 11:31:42AM +0100, Marek Marczykowski-Górecki wrote:
> On Thu, Mar 23, 2017 at 11:07:12AM +0100, Wojtek Porczyk wrote:
> > On Thu, Mar 23, 2017 at 02:01:34AM -0400, Jean-Philippe Ouellet wrote:
> > > Hello,
> >
> > Hello, Jean-Philippe,
> >
> > > QubesOS/*/core3-devel branches sometimes have unsigned commits (from
> > > woju) at HEAD. [1] These also get merged into marmarek's remotes [2],
> > > still without signature.
> > >
> > > I assume this is because there are other remotes / branches actually
> > > being used instead and tags are not propagating. Or does the automated
> > > signature verification workflow somehow break down in practice? Woju?
> > > Marmarek?
> >
> > This is because I actually don't have my signing key in the same VM as the
> > development. Instead I use this [1] to sign my tags. I didn't write an
> > equivalent for making signed commits. Marek keeps his signing keys in the
> > same
> > VM as IDE, so he signs his commits using the usual git tools.
>
> Actually, this is not true. I use standard split-gpg and have
> gpg.program = qubes-gpg-client in .gitconfig.
> This combination didn't work before because of some deadlock, but it was
> fixed about 2 years ago :P
Nope, the deadlock you write about was related to mutt. I wrote it about
1 year ago, and I had a purpose for that. I think the real reason was that git
had some expectations about --switches, which splitgpg didn't fulfill.
And I have an audit log for all commits I signed.
- --
pozdrawiam / best regards _.-._
Wojtek Porczyk .-^' '^-.
Invisible Things Lab |'-.-^-.-'|
| | | |
I do not fear computers, | '-.-' |
I fear lack of them. '-._ : ,-'
-- Isaac Asimov `^-^-_>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=RB1E
-----END PGP SIGNATURE-----
--
You received this message because you are subscribed to the Google Groups
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-devel/20170323110424.GO31684%40invisiblethingslab.com.
For more options, visit https://groups.google.com/d/optout.
