-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 30/01/10 2:52 PM, Todd Zullinger wrote:
> James Turnbull wrote:
>> On 30/01/10 3:54 AM, Nigel Kersten wrote:
>>>> James, it looks to me like the 0.25.4 tag was applied to the commit
>>>> before the 0.25.4 CHANGELOG update.
>>>
>>>> ie to 0025e13792b6a8e010ce1fd1dc20a17e7ba8af53 rather than
>>>>  c5eef045781ee0d8a50e4661b56da051e686cf13 ?
>>
>> Fixed.
> 
> While you can fix this in the main repo, such a changed tag will not
> be updated in existing clones via git pull, as git will not overwrite
> tags.  The git-tag manpage talks a bit about this:
> 

Yes - you need to do:

git tag -d X
git fetch origin tag X

> While on the subject of tags, any reason that you don't use annotated
> tags?  Doing so would let you gpg sign the tags (with your key or the
> RL release key).  Then folks using git could easily and securely
> verify their clone via:
> 
> $ git tag -v 0.25.4
> 

I don't know - I did look at while ago but had issues with
GNUPGHOME.  I'll configure it and starting doing it now.

I'll start by recreating the 0.25.4 tag and signing it with the RL
release key.  We'll sign tags from now on and I'll update the
release instructions to reflect that.

If anyone is interested - and RL guys you might want to formalise -
this is the current list of release tasks:

http://www.rememberthemilk.com/home/james.turnbull/6636271/

Regards

James Turnbull

- -- 
Author of:
* Pro Linux System Administration (http://tinyurl.com/linuxadmin)
* Pulling Strings with Puppet (http://tinyurl.com/pupbook)
* Pro Nagios 2.0 (http://tinyurl.com/pronagios)
* Hardening Linux (http://tinyurl.com/hardeninglinux)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBS2PMPiFa/lDkFHAyAQKKvgf7BzBFJSHOxnh3V8s8nYgpE5CXwfrwWbLl
5Yam5dmWXQ8W9pA+Ft82pdXuZjkZqh6nMaMhGboLe97IJ3oVEATbnqetWBq/XcKd
j7eHkVVE/m9P9BOMp2CbdTwGEet7F7l4FHLUR6y9bzq+F36rZPDPLXWRysWaVyqT
C7p45JpANvYpu3uBpNfmb/5vZFIL/9nC94Yk4lqOYVxm0Q/yOHc2VkICZgztwDXt
7fr1cbp/v+AedUHoNSQtcV2lapAcZslUCQFgFL7IRHX82eekXIj24kTiQepQwKGP
krW1MSpu2dBm1VjXWzVfyeYY9rExK9de3ktxQ1MlOwPZS2hDGQbHEw==
=spvG
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-dev?hl=en.

Reply via email to