-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Thu, Mar 23, 2017 at 12:04:24PM +0100, Wojtek Porczyk wrote: > On Thu, Mar 23, 2017 at 11:31:42AM +0100, Marek Marczykowski-Górecki wrote: > > On Thu, Mar 23, 2017 at 11:07:12AM +0100, Wojtek Porczyk wrote: > > > On Thu, Mar 23, 2017 at 02:01:34AM -0400, Jean-Philippe Ouellet wrote: > > > > Hello, > > > > > > Hello, Jean-Philippe, > > > > > > > QubesOS/*/core3-devel branches sometimes have unsigned commits (from > > > > woju) at HEAD. [1] These also get merged into marmarek's remotes [2], > > > > still without signature. > > > > > > > > I assume this is because there are other remotes / branches actually > > > > being used instead and tags are not propagating. Or does the automated > > > > signature verification workflow somehow break down in practice? Woju? > > > > Marmarek? > > > > > > This is because I actually don't have my signing key in the same VM as the > > > development. Instead I use this [1] to sign my tags. I didn't write an > > > equivalent for making signed commits. Marek keeps his signing keys in the > > > same > > > VM as IDE, so he signs his commits using the usual git tools. > > > > Actually, this is not true. I use standard split-gpg and have > > gpg.program = qubes-gpg-client in .gitconfig. > > This combination didn't work before because of some deadlock, but it was > > fixed about 2 years ago :P > > Nope, the deadlock you write about was related to mutt. I wrote it about > 1 year ago, and I had a purpose for that. I think the real reason was that git > had some expectations about --switches, which splitgpg didn't fulfill. > > And I have an audit log for all commits I signed.
The tool went live on Thursday, 14.01.2016 15:28:40 CET (+0100). Just checked from the log. :) - -- pozdrawiam / best regards _.-._ Wojtek Porczyk .-^' '^-. Invisible Things Lab |'-.-^-.-'| | | | | I do not fear computers, | '-.-' | I fear lack of them. '-._ : ,-' -- Isaac Asimov `^-^-_> -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJY06ypAAoJEL9r2TIQOiNRogoQAK2vNQk3vcqcwIP4Wov5H3BX GpqF+JlIJIxRrFlNIrmi9BBeIfwShduivczBMmSQRL0lzzd8ZPn1SymsZEbqbKam ROL5Bb/Z/BmhXJySibM8Z2e1lFEUxBU7MAHsSh19cx2B6TX18soSOkeWF1OpnfjG 9vpVMkQrxNRZh9Brf2/vapCyVrG0NYdg8uTYHTOfAr/aIBFi7vSori8Xsm4B5vwX QqL6H2XEvBskEaK2XVnnhsSojw43oo6iEdDwtKrTev/hMA3ZxPDdOR9AuTw6GbS0 RRxTBS8ZB8BHm5tg5SaUC8Cj+hGI3x3NOv32uL+taPJpqUPyBQDQc90rC483Jk5e RiEF/CHK7F5xVEFt4ZUnl4bxYGGGLuZElW0j6lz6W1QJGXSplUuOTL+dXKSsnj8o x1kNU0iPoiJqdcaAx/N5F9XWslUQlwLoEEdfa4TK7DP88NcvX5bOw3n/RDZLv9Ai 7e6P/JJQ1kL46RF+2EqOrFnnJL80C1M/rRxDtGIp0XDlVjz5OusSeLnGSmfekERZ 80EWT7QyTbJQThY5dJLz8+3zBTC2qLF2HIKKCEvWprFxhWaKzbE2I3QhXE3ocqkw CjWJwMQJljwDm0SZ919oCCtfhZy9RMtnDBo9ezVi7qoWaqvnGNMm6tBHrYn4w5T+ x35YzBld7imhSg6DHgcL =ngHS -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-devel@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/20170323110824.GP31684%40invisiblethingslab.com. For more options, visit https://groups.google.com/d/optout.