Luke <[email protected]> writes:
> 3) Sign the PKGBUILD with GPG:
> gpg --default-key [YOURKEYID] -b PKGBUILD
>
> 4) Enable GPG signing in your gitconfig so that our commits are also
> signed. I've added this one-liner to the wiki already and fauno is also
> using it.
> Then simply: git add -f PKGBUILD PKGBUILD.sig; git commit -m "pushing my
> signed package with signed commit"; git push (same as before)

i don't see why signing the pkgbuild is required when signing the whole
commit achieves the same thing and is easily verifiable with: git pull
--rebase --verify-signatures

i'm ok with the other points

-- 
http://partidopirata.com.ar

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Dev mailing list
[email protected]
https://lists.parabola.nu/mailman/listinfo/dev

Reply via email to