[SCM] gmtk/master: debian/gbp.conf: sign tags

[Jonas Smedegaard]

On 12-01-04 at 09:21pm, Reinhard Tartler wrote:
> On Mi, Jan 04, 2012 at 19:56:07 (CET), Jonas Smedegaard wrote:
> 
> > On 12-01-04 at 07:45pm, Reinhard Tartler wrote:
> >> On Mi, Jan 04, 2012 at 18:50:54 (CET), sramacher-guest at users.alioth.debian.org wrote:
> >> 
> >> > The following commit has been merged in the master branch:
> >> > commit c0d1407dd7f38a1e66ff7500a2fe71da972fee3d
> >> > Author: Sebastian Ramacher <s.ramacher at gmx.at>
> >> > Date:   Wed Jan 4 18:49:07 2012 +0100
> >> >
> >> >     debian/gbp.conf: sign tags
> >> >
> >> > diff --git a/debian/gbp.conf b/debian/gbp.conf
> >> > index cec628c..5474c60 100644
> >> > --- a/debian/gbp.conf
> >> > +++ b/debian/gbp.conf
> >> > @@ -1,2 +1,3 @@
> >> >  [DEFAULT]
> >> >  pristine-tar = True
> >> > +sign-tags = True
> >> 
> >> Please don't. Not everyone has his GPG keys on the machine were the
> >> package is (test) built. I use 'debsign -r' to sign package via SSH.
> >
> > I believe it will only _attemt_ to sign - so won't fail the build, just 
> > fail the tagging.
> 
> You believe wrong, git-buildpackage signals an error when debsign fails
> to find a gpg key. And this is very annoying

...and demolishes the built packages?  ...or preserves them just fine?


> >  You can then do "git-buildpackage --git-sign-only" on 
> > that other host afterwards.
> 
> That's what I also do.
> 
> > There are benefits to signed tags (like the ability to override if 
> > accidentally tagging too early), so I very much appreciate having them 
> > signed.
> 
> You can also override unsigned tags, just use '--git-tag --git-retag',
> that works for me just fine.

...and you (singular, as I suspect compiling on host without GPG is the 
odd case) can use --git-no-sign-tags.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20120105/221b60ba/attachment.pgp>