From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arun Isaac Subject: Packaging packages with GPG signed source archives Date: Wed, 31 Aug 2016 11:07:47 +0530 Message-ID: Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:44797) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1beynI-0001Vb-7Y for help-guix@gnu.org; Wed, 31 Aug 2016 02:14:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1beynD-0002yH-28 for help-guix@gnu.org; Wed, 31 Aug 2016 02:14:39 -0400 Received: from [117.218.232.8] (port=46016 helo=systemreboot.net) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1beynC-0002y3-ES for help-guix@gnu.org; Wed, 31 Aug 2016 02:14:34 -0400 Received: from [117.192.124.144] (helo=steel) by systemreboot.net with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.87) (envelope-from ) id 1beyDc-0002Lo-W9 for help-guix@gnu.org; Wed, 31 Aug 2016 11:07:49 +0530 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: help-guix I am trying to package a package that provides a GPG signed source archive. Is there any way to get Guix to verify this signature, by say, specifying it in the 'origin' object of the 'source' field of the package? What is the standard way this is done in Guix? Thanks, Arun Isaac.