Re: [gentoo-portage-dev] Enforced OpenPGP signatures

[Brian Dolbec]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Tue, 14 Jun 2016 10:41:38 +0200
Alexander Berntsen  wrote:

> Friends,
> 
> I saw Brian asking Michał to OpenPGP-sign his commits in IRC, to which
> Michał quipped that we would have if it were enforced. So perhaps we
> should just enforce it. Most of us do it -- but I see Zac not doing it
> sometimes, seemingly at random. In any event, I don't think there's a
> good reason *not* to sign things.
> 
> What do you think? And what's the procedure/who do we talk to, to get
> a pre-push hook set up to enforce it?
> - -- 
> Alexander
> berna...@gentoo.org
> https://secure.plaimi.net/~alexander

I think it is a good idea to enforce signed commits.

We could even enforce signed pushes like we do the tree.

I think it is important that the primary package manager for Gentoo
have the same rules for committing as the tree does.

signed commits, signed pushes

- -- 
Brian Dolbec 

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.1

iQJ8BAEBCgBmBQJXYWniXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBNUQ3Qzc0RTA4MUNDNzBEQjRBNEFBRjVG
QkJEMDg3Mjc1ODIwRUQ4AAoJEPu9CHJ1gg7YAX0P/30gmLrU3AT9Q9EfnCp8eVTT
a5T7FbtUF72YZTkklXQMRQMI3Ye+JEYlXSvYyzuXem80xk5nbVWWjemmAdqfkS31
F0i7hLegTVNSCQV1OAtX8h4JqK+niXZBCktdr0hdOYaNWDsKHQVRfVvN/5c2Py8U
mAvKbglBfKNAbC8vnv7cu1UkIgjiBNV8b8ka1OEK1/fgW7tw8Fb+0BE2t2Lw6P3z
0cAeo/jxhi0+tywh/U+vqyeeVN6ryV1ILURk0DoRnzulN7nkdgZ99Gf8LzVd4vmP
BQEo8UoTHSYd6QpR+8hdZjpHOFA2x0vEgJXUjpYqOXogcXsKV5JA7XfQb3hXKjZ3
MIdvrzuZn+HccJbSMYVdITDlSdlda+ogASYxqse4u9NCJKSOCLADb8RI36M/pnoR
IgWF5a4Lox9vQaLjPz7cdyE5QdWxVDG+c3FiutCNnu8GZWoPoIiHbIgaRxP+RCIL
1lNugcIzdOgcvsyTdqb7d+YEiZ1X2RPzNynDfdscQv3IfjsnrfppPRu4I4q13GYw
x8Wd3CyzPcn1RNgeJ2+V18co8N3zOcFFpZ7B7eNEcWA+NJdQNb28Xehp1p2kM8yt
pV013QZK7/FzBe6YvUkGWyG+g9oMYkQV48FrMn96m9W3OdpSixDr3yN16N78cZ3U
0ttul2AwqwlIrtApR920
=+jZT
-END PGP SIGNATURE-

Re: [gentoo-portage-dev] Enforced OpenPGP signatures

[Alexander Berntsen]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 14/06/16 20:48, Robin H. Johnson wrote:
> Please file a bug to have infra turn it on for the repos you want 
> (specify them in the bug).
Thank you, Robin. Will do once I have some sort of ACK, or at least a
long enough period without NACKs.

- -- 
Alexander
berna...@gentoo.org
https://secure.plaimi.net/~alexander
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=5mOi
-END PGP SIGNATURE-