On Sat, Oct 01, 2011 at 03:06:08PM +0100, Neil Williams wrote: > > So the secret key to sign the .changes file lives on the buildd, just > outside the chroots normally used? My question really comes down to how > that secret key is managed - does DSA have to have access to the > machine where that secret key is kept? How is that managed currently? > (Does DSA just have normal user access or sudo?) Does the wb team need > access? > > Currently, the machine in question is accessible by me, zumbi & wookey. > > > We need to generate the keys on the buildd and then add them to > > a file on ftp-master, which then gets added to a special keyring. > > ftp-master has rules on which machines are allowed to have such keys, > > and things like that.
You might want to read: http://lists.debian.org/debian-wb-team/2011/03/msg00041.html Kurt -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
