From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Bad signature on commit 6a34f4ccc8a5d (gnu: python-prompt-toolkit: Update to 1.0.9.) Date: Thu, 29 Dec 2016 02:38:09 -0500 Message-ID: <20161229073809.GA32137@jasmine> References: <20161229021015.GA16162@jasmine> <3cd2cda0-e1c7-9b6d-b04c-b31302a0fe45@tobias.gr> <20161229060818.GA29613@jocasta.intra> <20161229064459.GA27432@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="UugvWAfsgieZRqgk" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:57782) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cMVI0-0004en-Fc for guix-devel@gnu.org; Thu, 29 Dec 2016 02:38:17 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cMVHx-0006aK-CB for guix-devel@gnu.org; Thu, 29 Dec 2016 02:38:16 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:60504) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cMVHx-0006a9-3y for guix-devel@gnu.org; Thu, 29 Dec 2016 02:38:13 -0500 Content-Disposition: inline In-Reply-To: <20161229064459.GA27432@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: John Darrington Cc: guix-devel@gnu.org --UugvWAfsgieZRqgk Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Dec 29, 2016 at 01:44:59AM -0500, Leo Famulari wrote: > Here's a pre-push Git hook that should prevent unsigned commits from > being pushed to any remote. I'd like to improve it to be applied > selectively per-remote. The hook will only apply when pushing to Savannah if you put this test at the beginning of the hook: case "$2" in *git.sv.gnu.org*) break ;; =20 *) exit 0 ;; =20 esac Commit signatures will be verified before pushing to Savannah, but it doesn't interfere when pushing to another repository. I think this is right balance between safety and convenience. If people think the hook is correct, we could recommend it in HACKING. > #!/gnu/store/b1yqjimbdh5bf9jnizd4h7yf110744j2-bash-4.3.42/bin/sh Oops! It should all work with #!/bin/sh. --UugvWAfsgieZRqgk Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlhkvVwACgkQJkb6MLrK fwgnVRAAjI8QqE62LB+/tNczkKnMYhCQRptcaHLHllf9BOiniCsGPFKJw9pTMR6V XqmMWczR9C003OKgBLS/fdnTAt8aOJ7i6Sd5Y2xi6JfizwOVL3lsMYBet/PWtG/P 9CU77/cf8zfzlIWj8/hzd6p4Dg4cGk+HqxVuXb6grlxnZOLQH+BQahO5DHwqHhIQ 2IIrpTmAuusxb8+mE5e7vcjK5nPaPDHIn6wsR/9Vd4IHRNT6jI5UkMwEdD6au3Jo ZsFg5GaT5MTxxqQfJCO8jFQ7ytVMz6dpG/+t9vsJYTLtVb5vSn0TbwGjDf2RQ929 vBkxmPyHYkQbDqr3hj62q6R36veAGVVprANvSi93mmqFNcJJxtNuszPgd7Kahbct iDM1QK63oEs8eSL3R8nAYRrAZc1KbXmvBCjCsoppaHsXxs0nCBAvGJmHx5v1DLsi NbCVaBWYfOjr1tfh7bkeUZMqirKcDxPBO/V88GjfY3HT0GHpKbUVa34FMO62TkQE VE9lcavxJjhtgXg0NeTCDrKwVZoWvvCmsaqe1us0hcI0/nkH0CU0qWmGs15SaoYX E7alJHoUyAUC7y4W0SS2cAXgsBB/+O1M2bBZnwHXL6DyLgBg3ln/lyyvrLgPhCzj 7NE+bUeJ4dwGSpCkA5b6sj9azc5cgPNbisLKjg0wFagdoc6QRDg= =jn3R -----END PGP SIGNATURE----- --UugvWAfsgieZRqgk--