Nicolas Schodet writes ("Re: Bug#1127616: developers-reference: should document 
using git-debpush to upload"):
> On a separate topic, now I want to try to use dgit (and git-debrebase!),
> but I did not find how pushing to the dgit repo is done (I suppose it
> needs my ssh pubkey), maybe it’s not possible for a DM, or maybe
> git-debpush renders dgit push obsolete?

Pushing to the dgit git server is principally authorised by your PGP
signature on a git tag (made for you by dgit).  It has the same access
control as the legacy ftp archive.

But there is an additional level of defence of the service - the ssh
authorisation.  Unfortunately there is an additioal step for DMs,
because we still don't have a record of all DMs' ssh keys.

This is covered near the bottom of
  https://wiki.debian.org/DgitFAQ
You could email me your ssh public key, with your PGP signature on the
email, and I'll install it.  Or get your sponsor to make an MR against
  https://salsa.debian.org/dgit-team/extra-push-ssh-keys
(which is a private repository because it contains personal data).

Regards,
Ian.

-- 
Ian Jackson <[email protected]>   These opinions are my own.  

Pronouns: they/he.  If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.

Reply via email to