On 31 October 2016 at 18:32, Adrián Pérez de Castro <ape...@igalia.com> wrote: > Quoting Hisham (2016-10-26 22:57:04) >> >> On Oct 22, 2016 4:37 PM, "Adrián Pérez de Castro" <ape...@igalia.com> >> >> wrote: >> >> > > > I have an idea [1] a possible workaround when using Rockz (a Zsh >> >> plugin >> >> > > > which provides a virtualenv-alike tool), but it would still be a >> >> > > > good >> >> > > > thing that releases would be provided with an accompanying PGP >> >> > > > signature. This would be as easy as running: >> >> > > > >> >> > > > % gpg --detach-sign --armor luarocks-X.Y.Z.tar.gz >> >> I tried running this but got this error: >> >> gpg: no default secret key: No secret key >> gpg: signing failed: No secret key >> >> Any hints? > > Oh, I forgot to mention: You need to create a PGP key, if you didn't > have on already. I assumed that you already had one, sorry! > > This page explains step-by-step how to create one, and even has a > configuration snippet ready to copy-paste into “gpg.conf” that ensures > that strong crypto is used: > > https://keyring.debian.org/creating-key.html > > If you have never used PGP before, it's a good introduction with > concrete steps on how to do it :-)
Thank you for linking the tutorial page! It really sped things up. Here you go, I signed all packages: https://keplerproject.github.io/luarocks/releases/ -- Hisham ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today. http://sdm.link/xeonphi _______________________________________________ Luarocks-developers mailing list Luarocks-developers@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/luarocks-developers
