unofficial mirror of guix-devel@gnu.org 
 help / color / mirror / code / Atom feed
* Re: 03/03: doc: Update to cover for an additional OpenPGP signing key.
       [not found] ` <20210504033513.A0CFA20D0E@vcs0.savannah.gnu.org>
@ 2021-05-04  9:08   ` Ludovic Courtès
  2021-05-04 10:57     ` Julien Lepiller
  0 siblings, 1 reply; 5+ messages in thread
From: Ludovic Courtès @ 2021-05-04  9:08 UTC (permalink / raw)
  To: guix-devel, Maxim Cournoyer

Hi!

guix-commits@gnu.org skribis:

> commit 0f583f60f882d74f4cf2332c85343a2db67410c7
> Author: Maxim Cournoyer <maxim.cournoyer@gmail.com>
> AuthorDate: Sat May 1 22:35:09 2021 -0400
>
>     doc: Update to cover for an additional OpenPGP signing key.
>     
>     The upcoming 1.3.0 release will be signed with my OpenPGP key; subsequent
>     releases may also be.
>     
>     * doc/guix.texi (OPENPGP-SIGNING-KEY-ID, OPENPGP-SIGNING-KEY-URL): Rename to...
>     (OPENPGP-SIGNING-KEY-ID-1, OPENPGP-SIGNING-KEY-URL-1): ... these,
>     respectively.
>     (OPENPGP-SIGNING-KEY-ID-2, OPENPGP-SIGNING-KEY-URL-2): New variables.
>     (Binary Installation): Adjust to cover for the new key.
>     (USB Stick and DVD Installation): Likewise.
>     (Invoking guix refresh): Adjust accordingly.

No big deal but perhaps it would be enough to keep a single key in the
manual since we know which key is going to be used for this release.

That would avoid extra work for our translation maester, and it would
make sure we don’t endlessly accumulate keys in there as release
responsibilities rotate.  WDYT?

Thanks,
Ludo’.


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: 03/03: doc: Update to cover for an additional OpenPGP signing key.
  2021-05-04  9:08   ` 03/03: doc: Update to cover for an additional OpenPGP signing key Ludovic Courtès
@ 2021-05-04 10:57     ` Julien Lepiller
  2021-05-04 12:17       ` Maxim Cournoyer
  0 siblings, 1 reply; 5+ messages in thread
From: Julien Lepiller @ 2021-05-04 10:57 UTC (permalink / raw)
  To: guix-devel, Ludovic Courtès, Maxim Cournoyer

[-- Attachment #1: Type: text/plain, Size: 1279 bytes --]

Agreed :)

Le 4 mai 2021 05:08:24 GMT-04:00, "Ludovic Courtès" <ludo@gnu.org> a écrit :
>Hi!
>
>guix-commits@gnu.org skribis:
>
>> commit 0f583f60f882d74f4cf2332c85343a2db67410c7
>> Author: Maxim Cournoyer <maxim.cournoyer@gmail.com>
>> AuthorDate: Sat May 1 22:35:09 2021 -0400
>>
>>     doc: Update to cover for an additional OpenPGP signing key.
>>     
>>     The upcoming 1.3.0 release will be signed with my OpenPGP key;
>subsequent
>>     releases may also be.
>>     
>>     * doc/guix.texi (OPENPGP-SIGNING-KEY-ID,
>OPENPGP-SIGNING-KEY-URL): Rename to...
>>     (OPENPGP-SIGNING-KEY-ID-1, OPENPGP-SIGNING-KEY-URL-1): ... these,
>>     respectively.
>>     (OPENPGP-SIGNING-KEY-ID-2, OPENPGP-SIGNING-KEY-URL-2): New
>variables.
>>     (Binary Installation): Adjust to cover for the new key.
>>     (USB Stick and DVD Installation): Likewise.
>>     (Invoking guix refresh): Adjust accordingly.
>
>No big deal but perhaps it would be enough to keep a single key in the
>manual since we know which key is going to be used for this release.
>
>That would avoid extra work for our translation maester, and it would
>make sure we don’t endlessly accumulate keys in there as release
>responsibilities rotate.  WDYT?
>
>Thanks,
>Ludo’.

[-- Attachment #2: Type: text/html, Size: 1676 bytes --]

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: 03/03: doc: Update to cover for an additional OpenPGP signing key.
  2021-05-04 10:57     ` Julien Lepiller
@ 2021-05-04 12:17       ` Maxim Cournoyer
  2021-05-04 15:29         ` Ludovic Courtès
  0 siblings, 1 reply; 5+ messages in thread
From: Maxim Cournoyer @ 2021-05-04 12:17 UTC (permalink / raw)
  To: Julien Lepiller; +Cc: guix-devel

Hi!

Julien Lepiller <julien@lepiller.eu> writes:

> Agreed :)
>
> Le 4 mai 2021 05:08:24 GMT-04:00, "Ludovic Courtès" <ludo@gnu.org> a écrit :
>>Hi!
>>
>>guix-commits@gnu.org skribis:
>>
>>> commit 0f583f60f882d74f4cf2332c85343a2db67410c7
>>> Author: Maxim Cournoyer <maxim.cournoyer@gmail.com>
>>> AuthorDate: Sat May 1 22:35:09 2021 -0400
>>>
>>>     doc: Update to cover for an additional OpenPGP signing key.
>>>     
>>>     The upcoming 1.3.0 release will be signed with my OpenPGP key;
>>subsequent
>>>     releases may also be.
>>>     
>>>     * doc/guix.texi (OPENPGP-SIGNING-KEY-ID,
>>OPENPGP-SIGNING-KEY-URL): Rename to...
>>>     (OPENPGP-SIGNING-KEY-ID-1, OPENPGP-SIGNING-KEY-URL-1): ... these,
>>>     respectively.
>>>     (OPENPGP-SIGNING-KEY-ID-2, OPENPGP-SIGNING-KEY-URL-2): New
>>variables.
>>>     (Binary Installation): Adjust to cover for the new key.
>>>     (USB Stick and DVD Installation): Likewise.
>>>     (Invoking guix refresh): Adjust accordingly.
>>
>>No big deal but perhaps it would be enough to keep a single key in the
>>manual since we know which key is going to be used for this release.
>>
>>That would avoid extra work for our translation maester, and it would
>>make sure we don’t endlessly accumulate keys in there as release
>>responsibilities rotate.  WDYT?

Oh, it didn't strike me as an option, as it'd not cover past releases.
Perhaps not a common use case, but the past releases are still available
for download, so someone could want to install them, perhaps just to
compare what changed or decide if some problem is regression.

I don't mind making the change otherwise; what do you think?

Thank you!

Maxim


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: 03/03: doc: Update to cover for an additional OpenPGP signing key.
  2021-05-04 12:17       ` Maxim Cournoyer
@ 2021-05-04 15:29         ` Ludovic Courtès
  2021-05-05 15:39           ` Maxim Cournoyer
  0 siblings, 1 reply; 5+ messages in thread
From: Ludovic Courtès @ 2021-05-04 15:29 UTC (permalink / raw)
  To: Maxim Cournoyer; +Cc: guix-devel

Hello!

Maxim Cournoyer <maxim.cournoyer@gmail.com> skribis:

> Oh, it didn't strike me as an option, as it'd not cover past releases.
> Perhaps not a common use case, but the past releases are still available
> for download, so someone could want to install them, perhaps just to
> compare what changed or decide if some problem is regression.

IMO that’s OK, that’s the same as with other releases at ftp.gnu.org.
It’s the user’s responsibility to fetch the right key.

I think it’s enough for the instructions in the manual to apply only to
the latest release.  So I’d suggest reverting and setting
OPENPGP-SIGNING-KEY-ID and OPENPGP-SIGNING-KEY-URL to your key.

WDYT?

(Conversely, it’s good for guix-install.sh to suggest both keys since it
can be used to install both 1.2.0 and 1.3.0rc1 right now.)

Thanks,
Ludo’.


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: 03/03: doc: Update to cover for an additional OpenPGP signing key.
  2021-05-04 15:29         ` Ludovic Courtès
@ 2021-05-05 15:39           ` Maxim Cournoyer
  0 siblings, 0 replies; 5+ messages in thread
From: Maxim Cournoyer @ 2021-05-05 15:39 UTC (permalink / raw)
  To: Ludovic Courtès; +Cc: guix-devel

Ludovic Courtès <ludo@gnu.org> writes:

> Hello!
>
> Maxim Cournoyer <maxim.cournoyer@gmail.com> skribis:
>
>> Oh, it didn't strike me as an option, as it'd not cover past releases.
>> Perhaps not a common use case, but the past releases are still available
>> for download, so someone could want to install them, perhaps just to
>> compare what changed or decide if some problem is regression.
>
> IMO that’s OK, that’s the same as with other releases at ftp.gnu.org.
> It’s the user’s responsibility to fetch the right key.
>
> I think it’s enough for the instructions in the manual to apply only to
> the latest release.  So I’d suggest reverting and setting
> OPENPGP-SIGNING-KEY-ID and OPENPGP-SIGNING-KEY-URL to your key.
>
> WDYT?

Alright, done on both the version-1.3.0 and master branches.

Thanks for the feedback!

Maxim


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2021-05-05 15:50 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <20210504033511.24042.17383@vcs0.savannah.gnu.org>
     [not found] ` <20210504033513.A0CFA20D0E@vcs0.savannah.gnu.org>
2021-05-04  9:08   ` 03/03: doc: Update to cover for an additional OpenPGP signing key Ludovic Courtès
2021-05-04 10:57     ` Julien Lepiller
2021-05-04 12:17       ` Maxim Cournoyer
2021-05-04 15:29         ` Ludovic Courtès
2021-05-05 15:39           ` Maxim Cournoyer

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).