[SCM] gmtk/master: debian/gbp.conf: sign tags
siretart at tauware.de
Wed Jan 4 20:21:15 UTC 2012
On Mi, Jan 04, 2012 at 19:56:07 (CET), Jonas Smedegaard wrote:
> On 12-01-04 at 07:45pm, Reinhard Tartler wrote:
>> On Mi, Jan 04, 2012 at 18:50:54 (CET), sramacher-guest at users.alioth.debian.org wrote:
>> > The following commit has been merged in the master branch:
>> > commit c0d1407dd7f38a1e66ff7500a2fe71da972fee3d
>> > Author: Sebastian Ramacher <s.ramacher at gmx.at>
>> > Date: Wed Jan 4 18:49:07 2012 +0100
>> > debian/gbp.conf: sign tags
>> > diff --git a/debian/gbp.conf b/debian/gbp.conf
>> > index cec628c..5474c60 100644
>> > --- a/debian/gbp.conf
>> > +++ b/debian/gbp.conf
>> > @@ -1,2 +1,3 @@
>> > [DEFAULT]
>> > pristine-tar = True
>> > +sign-tags = True
>> Please don't. Not everyone has his GPG keys on the machine were the
>> package is (test) built. I use 'debsign -r' to sign package via SSH.
> I believe it will only _attemt_ to sign - so won't fail the build, just
> fail the tagging.
You believe wrong, git-buildpackage signals an error when debsign fails
to find a gpg key. And this is very annoying
> You can then do "git-buildpackage --git-sign-only" on
> that other host afterwards.
That's what I also do.
> There are benefits to signed tags (like the ability to override if
> accidentally tagging too early), so I very much appreciate having them
You can also override unsigned tags, just use '--git-tag --git-retag',
that works for me just fine.
Reinhard Tartler, KeyID 945348A4
More information about the pkg-multimedia-maintainers