commit 15f19e0cf88aab8c68d73ba4a03bcd86cb5bc3e3
parent 64d36873d780f5af6a2b9461f1f77014948cac97
Author: aabacchus <bvnfuller@gmail.com>
Date: Wed, 7 Apr 2021 03:40:13 +0100
gpg-signatures: new package (RFC)
Diffstat:
8 files changed, 138 insertions(+), 0 deletions(-)
diff --git a/gpg-signatures/build b/gpg-signatures/build
@@ -0,0 +1,30 @@
+#!/bin/sh -e
+
+# To export your public key, run
+# gpg --export --armor YOURKEYID > files/YOURNAME.txt
+
+# note that this installs all the keys as trusted
+# (change the trust level number below to something less than 5)
+# so this package should be carefully moderated and fingerprints verified.
+
+# also note this produces a lot of messy output. A cleaner way
+# (but less portable and less secure)
+# would be to replace the second invocation of gpg with
+# $ echo "trusted-key $keyid" >> ~/.gnupg/gpg.conf
+
+for sig in *.txt; do
+ keyid=$(
+ gpg --import \
+ --keyid-format long \
+ "$sig" 2>&1 \
+ | awk '/^gpg: key / {print substr($3, 1, length($3)-1)}')
+ gpg --command-fd 0 \
+ --quiet \
+ --expert \
+ --edit-key "$keyid" \
+ trust << EOF >/dev/null 2>&1
+5
+y
+q
+EOF
+done
diff --git a/gpg-signatures/checksums b/gpg-signatures/checksums
@@ -0,0 +1,2 @@
+ec27c5c3d378d449c3dfab4e7f9428f1135f6774860746473f37cd5af4167631
+2cc670c379abcc1e82aaf3b4c20c807e1951c1219b8c0717a450cb83f6dfde23
diff --git a/gpg-signatures/depends b/gpg-signatures/depends
@@ -0,0 +1 @@
+gnupg1
diff --git a/gpg-signatures/files/aabacchus.txt b/gpg-signatures/files/aabacchus.txt
@@ -0,0 +1,56 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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=
+=T8iq
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/gpg-signatures/files/dilyn-corner.txt b/gpg-signatures/files/dilyn-corner.txt
@@ -0,0 +1,40 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=j6ND
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/gpg-signatures/post-install b/gpg-signatures/post-install
@@ -0,0 +1,6 @@
+#!/bin/sh
+
+cat << EOF
+To enable signature verification, run
+$ git config merge.verifySignatures true
+in the repos you want.
diff --git a/gpg-signatures/sources b/gpg-signatures/sources
@@ -0,0 +1,2 @@
+files/aabacchus.txt
+files/dilyn-corner.txt
diff --git a/gpg-signatures/version b/gpg-signatures/version
@@ -0,0 +1 @@
+git 1