2021-04-23 05:35:39 -05:00
|
|
|
<!--
|
|
|
|
|
This template is used when a new main PGP public key needs to be added to the
|
|
|
|
|
distribution's keyring.
|
|
|
|
|
It is used by users with a valid packager key.
|
|
|
|
|
-->
|
|
|
|
|
/assign @allan @anthraxx @bluewind @dvzrv @pierre
|
|
|
|
|
/label ~"new main key"
|
2021-05-09 10:59:14 -05:00
|
|
|
/title New main key of <!-- MODIFY: Add new main key holder's username -->
|
2021-04-23 05:35:39 -05:00
|
|
|
<!--
|
|
|
|
|
Please do not remove the above quick actions, which automatically label the
|
|
|
|
|
issue and assign relevant users.
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
# Add a new main key
|
|
|
|
|
|
|
|
|
|
## Details
|
|
|
|
|
|
2021-05-09 10:59:14 -05:00
|
|
|
- Username: <!-- MODIFY: Add the @-prefixed username -->
|
|
|
|
|
- PGP key ID: <!-- MODIFY: Add the "long format" key ID of the new PGP public key here -->
|
|
|
|
|
- Revocation Certificate Holder: <!-- MODIFY: Add the @-prefixed username of the revocation certificate holder -->
|
2021-04-23 05:35:39 -05:00
|
|
|
|
|
|
|
|
<!--
|
|
|
|
|
NOTE: Attach the above information as a clearsigned document to this ticket
|
|
|
|
|
using a valid packager key of the user.
|
|
|
|
|
https://www.gnupg.org/gph/en/manual/x135.html
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
## Checks
|
|
|
|
|
|
2021-04-29 12:37:44 -05:00
|
|
|
### New key owner
|
|
|
|
|
|
2021-04-23 05:35:39 -05:00
|
|
|
- [ ] The [workflow for adding a new main
|
|
|
|
|
key](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/workflows/add-a-new-main-key)
|
|
|
|
|
has been followed
|
2021-04-29 12:37:44 -05:00
|
|
|
- [ ] The key pair has been validated according to the [best
|
|
|
|
|
practices](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/best-practices#validating-a-key-pair)
|
2021-04-23 05:35:39 -05:00
|
|
|
- [ ] The data in the [Details](#details) section is attached to this issue as
|
|
|
|
|
a clearsigned document
|
2021-04-29 12:37:44 -05:00
|
|
|
- [ ] The revocation certificate has been sent in an encrypted message to the
|
|
|
|
|
revocation certificate holder
|
2021-04-23 05:35:39 -05:00
|
|
|
- [ ] The public key has been uploaded to the SKS infrastructure
|
2021-04-29 12:37:44 -05:00
|
|
|
|
|
|
|
|
### Keyring maintainer
|
|
|
|
|
|
|
|
|
|
- [ ] The key pair has been validated according to the [best
|
|
|
|
|
practices](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/best-practices#validating-a-key-pair)
|
|
|
|
|
- [ ] The data in the [Details](#details) section is correct and signed with a
|
|
|
|
|
valid and trusted packager key, which is part of `pacman-key`
|
|
|
|
|
|
|
|
|
|
### Revocation Certificate Holder
|
|
|
|
|
|
|
|
|
|
- [ ] The revocation certificate has been [verified
|
|
|
|
|
as working](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/workflows/verify-a-revocation-certificate)
|
|
|
|
|
and confirmed in a comment to this issue
|
|
|
|
|
- [ ] The revocation certificate has been backed up in a dedicated encrypted backup storage
|
