From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:c151::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id eF//NyRTSWB8RAAA0tVLHw (envelope-from ) for ; Wed, 10 Mar 2021 23:15:48 +0000 Received: from aspmx2.migadu.com ([2001:41d0:2:c151::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id eKW4MyRTSWDGbgAAB5/wlQ (envelope-from ) for ; Wed, 10 Mar 2021 23:15:48 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx2.migadu.com (Postfix) with ESMTPS id 7F5548094 for ; Thu, 11 Mar 2021 00:15:48 +0100 (CET) Received: from localhost ([::1]:58068 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lK83P-0005kP-Fe for larch@yhetil.org; Wed, 10 Mar 2021 18:15:47 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:32834) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lK838-0005jQ-Dc for guix-devel@gnu.org; Wed, 10 Mar 2021 18:15:30 -0500 Received: from mail-ej1-x62d.google.com ([2a00:1450:4864:20::62d]:39073) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lK832-0003YQ-6w for guix-devel@gnu.org; Wed, 10 Mar 2021 18:15:30 -0500 Received: by mail-ej1-x62d.google.com with SMTP id p7so30857614eju.6 for ; Wed, 10 Mar 2021 15:15:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=6yoQV1kIyGpkObQ0keA6YF+IT3Ys++7pQTSXzoNLlwg=; b=QcKMePxI8HaNP4BsVSYZF59d10Yh2cpD+qRvkTqRJhVABgvbVzClzjSoCXve8X942/ zmZX6Hy3Y7iWmHelSqySZCdVf6xxgDY8h3jUu4d8uwxJxuXqcMMDh2lB0dhfhft8MOeH uWI0/JZd1jY409DJGYep6TUnDH03bC8wdedeqqlmzBShzO/h61SfTZYrCIcTz9KDNLyx r+Ggf3Pnt9XJpx8Hmj0W6ln3cQv+OedHxpmLNPbL6xZekKNsORRD7WDdXaTMVfLP3e+f wfv5TuZveQotS6YdJg+iPUGTcnF056aDDW7CHi737PcAdnGOxBGbvXiE0kLNDh54ICqF J9nA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=6yoQV1kIyGpkObQ0keA6YF+IT3Ys++7pQTSXzoNLlwg=; b=PwKH8f6Vrs+9i/57mWnxlufdSDjKDXW6LjvYwsCFZ5+dbFRnnysR5udiO1TwRPpASo ejWO348g/t5vAdMqRB/FAcJVuOjzl16ymk+4tk/2EXPSiO0Wr0QxM2pvVlDVHQkF0VIX NmSe8hQgwmvGzWVigZ63qDguW2SqDpaLFkJiphK+v2dL7DBSFtdEgwaafhxHANXi8xgQ JpzM3syb3ErpNKscdDpNwBYiBxN83MDKenU4UvP7aOi7Q3V7730dS0gWWVK1Bz+Hda3k NplVDsaGGBwEHv883RaZcoWdHlK952CFL9SFOa7qznVpjYAE8dB7KXQltgF5MhPu+5rQ Rhzg== X-Gm-Message-State: AOAM530o2WFvcb+n273gLZkIoHyrRhsaB8YuTLj+nsca/vIWaZvHG89V PB42tmscaMJc/hg7ry8Vhi74QAsrsCXNbwMY X-Google-Smtp-Source: ABdhPJyvQCgctubJ9J3ojsEdtCSd/Mz7XFlLcJNLEqaAJaWP7/VoLMs6LiBkDDzbRI9G5bVqJksFbQ== X-Received: by 2002:a17:906:1759:: with SMTP id d25mr263432eje.524.1615418121656; Wed, 10 Mar 2021 15:15:21 -0800 (PST) Received: from [192.168.178.20] ([109.90.125.150]) by smtp.gmail.com with ESMTPSA id be27sm353246edb.47.2021.03.10.15.15.21 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 10 Mar 2021 15:15:21 -0800 (PST) Subject: Re: Commit pushed to master with unauthorised signature To: Tobias Geerinckx-Rice , guix-devel@gnu.org References: <87h7lid7qn.fsf@nckx> From: Taylan Kammer Message-ID: <8f198b1a-9e31-bc29-922f-2c1dd404390c@gmail.com> Date: Thu, 11 Mar 2021 00:15:19 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.8.1 MIME-Version: 1.0 In-Reply-To: <87h7lid7qn.fsf@nckx> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a00:1450:4864:20::62d; envelope-from=taylan.kammer@gmail.com; helo=mail-ej1-x62d.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1615418148; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=6yoQV1kIyGpkObQ0keA6YF+IT3Ys++7pQTSXzoNLlwg=; b=Ui5AGo9s7q604PoCHMMGFlzalcTJL53PeF4GAe3wS0heLa5jKEJYCQIqcRQiPZfUCIg0LK nYr0nqe/b2PcKmu3KD+Tga4cCCMOktkmcSO4zLxySPJx3Ik41vgEeJpQ1n+OigrC8VDDW+ 1HMHZWYLgH/xrEna5hgyTp7YAC7laaBUDZ76Vg6h/N0jX+ogKAIvLT3xAh/6hkR3iZmgks Z0hp79WPetpZXQ3bwo6penqdZAHAO9KyP7PFjF12UkQHcv/Rn1udOCPoiVV8uC8qMchSRg 5h29BBB+WyKBTUTKTVtDjZjFhrkvvCVDSNwzy6XKum87XBAZc2OEbbPJV0NqbA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1615418148; a=rsa-sha256; cv=none; b=CGKz1V/GrctY1rUs/Kr7EXzc/uXrQJspK+LQKWtXbC3xHPpNKRWLZikefbpYMnxDD0OPG4 6Q+iL1W2e6FCXghsE87YFm7y93OxH2DVtBEqo/C9LL/f68G06eKk3jrMFOaMesymfp/Piw kw4o3LBFRLIRG9NnRXwcMCG1BDnjD19H4XzdpeyF6AQfTxfLySO8Ln6Z7m0WeeRJxWos+c N/wIvQp1r7FmFOiVn5ICitsOl9FFZSHl8eMCNO0zxIabaUCtSzu5x+ymQWHaRs0a3HcVsS 4CDNveGZxSHJs42uJhJn4GECV2z9SzrjTXgi4E87zFOLEXZfCBHzgVzK4ucvPg== ARC-Authentication-Results: i=1; aspmx2.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b=QcKMePxI; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx2.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -3.09 Authentication-Results: aspmx2.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b=QcKMePxI; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx2.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 7F5548094 X-Spam-Score: -3.09 X-Migadu-Scanner: scn1.migadu.com X-TUID: ERLYluK7uJJW On 10.03.2021 22:22, Tobias Geerinckx-Rice wrote: > Earlier today the following commit was pushed to master: > > --8<---------------cut here---------------start------------->8--- > commit 15092548804b6c50ea276d098f76a79bd0042398 > gpg: Signature made Wed Mar 10 19:55:39 2021 CET > gpg:                using RSA key 51A0982A58B64622464833085EEB3986CB2F65ED > gpg: Good signature from "Taylan Kammer (Debian10VM) > " [unknown] > Primary key fingerprint: 51A0 982A 58B6 4622 4648  3308 5EEB 3986 CB2F 65ED > Author: Taylan Kammer > >    gnu: guile-bytestructures: Update to 1.0.10. > >    * gnu/packages/guile.scm (guile-bytestructures): Update to    1.0.10. > --8<---------------cut here---------------end--------------->8--- > > The key with fingerprint 51A0 982A 58B6 4622 4648  3308 5EEB 3986 CB2F > 65ED is not present in .guix-authorizations, nor in the ‘keyring’ > branch.  This broke ‘guix pull’ for all users[0]: > > --8<---------------cut here---------------start------------->8--- > guix pull: error: could not authenticate commit > 15092548804b6c50ea276d098f76a79bd0042398: key 51A0 982A 58B6 4622 4648 > 3308 5EEB 3986 CB2F 65ED is missing > --8<---------------cut here---------------end--------------->8--- Damn, sorry about that. I assumed of course that an improperly signed commit would not be accepted, so I didn't pay any special mind. However, I also assumed that adding a new GPG key to my savannah.gnu.org account would be sufficient. I did that via the web interface, and ensured that the encryption test is successful. The commit is signed with that new GPG key. Are the GPG keys added to one's Savannah account unrelated to commit signing in the Guix repo, or are they not automatically synced, or is this a further bug?.. - Taylan