Arch Linux CondorCore repo PGP keyring
0d32d2f00a
keyringctl: Add `persist_basic_key()`, `persist_direct_keys()`, `persist_certifications()` and `persist_revocations()` to allow for dedicated writing of basic key material, direct key signatures, per UID certificates and per UID revocations (respectively). Change `convert_certificate()` to call the new dedicated write functions instead of implementing the functionality. Change `convert_certificate()` to raise on missing current_packet_key when trying to work on signature files (this is unlikely to occur, unless the input data is somehow broken, but it keeps the linter happy). Change `convert_certificate()` to handle direct_keys by issuer on a given root key (DirectKey signatures by the same issuer are combined). Change the argparse subparser for the 'convert' command to include a help text. |
||
---|---|---|
.gitlab | ||
master | ||
master-revoked | ||
packager | ||
packager-revoked | ||
.editorconfig | ||
.gitattributes | ||
.gitignore | ||
.gitlab-ci.yml | ||
archlinux-revoked | ||
archlinux-trusted | ||
archlinux.gpg | ||
keyringctl | ||
LICENSE | ||
Makefile | ||
master-keyids | ||
master-revoked-keyids | ||
packager-keyids | ||
packager-revoked-keyids | ||
README.md | ||
update-keys |
Arch Linux Keyring
Repository for the Arch Linux keyring package.
Addition/Removal/Update of a packaging key
- Get the keyid from the bugreport in the keyring project
- Add the keyid to
packager-keyids
in alphabetic order, following this format: full size keyid, a tab, nickname.
Revoking a packager key
- Create a key removal task in the keyring project.
- Remove the keyid of the revoked user from
packager-keyids
. - Add the removed keyid to
packager-revoked-keyids
, in alphabetic order, following this format: full size keyid, a tab, nickname, a tab and reason of revocation.
Keyring release
- bump the version in the Makefile
- Run update-keys
- git add the new .asc file in the packager directory.
- Commit everything as 'Update keyring'
- Create a new tag
git tag -s $(date +"%Y%m%d")
- Push changes
- Upload the source tarball with
make dist upload
- Update the package