>> - Accept subkey on guix pull if master key is in .guix-authorizations. > > Reported at . > >> - Add pre-push hook, which checks authorization on Savannah. > > That one is difficult: Guix is not installed on those machines. > > Another option would be to push to a different machine, one that we > control, and make Savannah a mirror of that one. It can work, but looks fragile. > > Thoughts? Let's ask savannah admins if it possible to install guix on those machines and add pre-receive/update hook? If not, we will look for other options. -- Best regards, Andrew Tropin