On 9/13/19 1:03 PM, Marek Marczykowski-Górecki wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On Fri, Sep 13, 2019 at 06:08:39PM +0200, Achim Patzner wrote: >> Hi! >> >> Is the setup script for builder.conf in qubes-builder still maintained? >> If so, adding fc30 > > In fact, setup script gets it from example-config/templates.conf. Added.
Thanks for requesting clarification here, Achim. I've often been confused about which config files are the appropriate ones to modify when building Qubes templates. Great to have clarity. > >> and getting rid of the forced use of the MIT PGP key >> server might be necessary. > > That's a bit trickier. We need some key server, and recently the whole > WoT basically got broken... From what I understand, we are supposed to > use keys.openpgp.org now. But it looks like there is email verification > to upload the whole key (gpg2 doesn't like keys without any UID). > So, I see two options: > - switch to keys.openpgp.org and ask everyone mentioned in > qubes-builder (Patrick in practice) to upload keys there > - distribute keys as files For what it's worth, we're undergoing a similar transition, encouraging team members to to use the "hagrid" keyserver at keys.openpgp.org, including the verification workflow. The transition introduces a bit of friction, sure, but given the reliability concerns with the old architecture, it's by far the best option available. -Conor > > Patrick, any opinion? > > - -- > Best Regards, > Marek Marczykowski-Górecki > Invisible Things Lab > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad thing? > -----BEGIN PGP SIGNATURE----- > > iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAl179g0ACgkQ24/THMrX > 1yyEzwf7Bhushm0vMa1aaJ4l/KoTfCgKlaPPrBmJYHokp4gF212avdND2A7D7Z+5 > tQgiGjaotZeYMz1GgvnFHCEjaCJbl5iHwj1Ru88GaeVXfYOHCS68h6wbueWUw5DJ > oGRCyi2a2P99AWCIv/nYJTLx1Uo8L/rwJwxB+FWwJIr4ZTLjs3PTQYXjEqUCPp3S > 9bOThlTfuo/ok8YO5GyvGalMe5dJ1wV6sbe2QFa4RN0u43gJ9nK0SHNPILVzYpYt > M0BwFW+mBcuedIga0vHNYaonrrVkjO/tKb152SiuybRrSvwiByg274cY5NP6M8rZ > kERFd02FU9fYDfoGABCtK6gNGuuZzA== > =N7gE > -----END PGP SIGNATURE----- > -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/a1fbaa7a-07a7-b60c-f92d-99c3bcdf4073%40freedom.press.
