GPG Sign git tags
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• mmodell
	Nov 14 2016, 9:04 PM

Description

We should sign release tags with the release engineer's gpg key.

Event Timeline

• mmodell created this task.Nov 14 2016, 9:04 PM

Restricted Application added subscribers: TerraCodes, Aklapper. · View Herald TranscriptNov 14 2016, 9:04 PM

• demon moved this task from Needs triage to Experiments on the Scap board.Dec 8 2016, 1:55 AM

I did this for 1 release and then haven't done it since. I think I need to update some gbp config to support requiring this as well.

Something like this?

keyid = <FOO>
sign-tags = 1

Question is what key do we sign this with? Should we have a shared key that deployers can access? I'm thinking something like keyholder but for gpg instead of ssh.

Paladox moved this task from To Triage to Misc on the Phabricator board.Feb 17 2017, 4:58 PM

I think signing with our individual keys is good enough.

GPG Sign git tagsClosed, ResolvedPublicActions

Description

Event Timeline

GPG Sign git tags
Closed, ResolvedPublic
Actions