[Dev] Fwd: [arch-dev-public] Finalizing the package signing process

Nicolás Reynolds fauno at kiwwwi.com.ar
Sun Oct 30 23:34:00 GMT 2011



----- Forwarded message from Pierre Schmitz <pierre at archlinux.de> -----

> Date: Sun, 30 Oct 2011 14:12:20 +0100
> From: Pierre Schmitz <pierre at archlinux.de>
> To: Public mailing list for Arch Linux development
> 	<arch-dev-public at archlinux.org>
> Subject: [arch-dev-public] Finalizing the package signing process
> User-Agent: telnet
> 
> Hi all,
> 
> it's about time to finalize our signing policy to get all our packages
> properly signed as soon as possible. Note that this is just about
> signing the package itself. How we will manage our keyring and sign that
> one using master keys is a different story.
> 
> At first please have a look at
> https://wiki.archlinux.org/index.php/DeveloperWiki:Signing_Packages and
> let me know if there is anything wrong or unclear. I would like to
> present this little Howto to the TU so that community packages can be
> signed as well.
> 
> To speed things up I'd like to let dbscripts enforce signed packages.
> This means that from now on no new packages can be uploaded that don't
> have a signature. We may give the TU a ew days mroe time as this will be
> new to them.
> 
> If you just agree with all this send a +1.
> 
> Greetings,
> 
> Pierre
> 
> -- 
> Pierre Schmitz, http://pierre-schmitz.com
> 

----- End forwarded message -----

-- 
Salud!
Nicolás Reynolds,
xmpp:fauno at kiwwwi.com.ar
omb:http://identi.ca/fauno

OTR: C0CB1F0F 01DB5E18 2D634C2A A4626858 E7C7C3A2

http://parabolagnulinux.org
http://endefensadelsl.org

"Freedom [...] is messy" ~ Eben Moglen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20111030/c57a94c0/attachment.sig>


More information about the Dev mailing list