Arch Linux CondorCore repo PGP keyring
a77b334859
keyringctl: Rename `persist_direct_keys()` to `persist_direct_sigs()` as it is now not only handling the persistence of DirectKeys but also *Certifications directly on a root key (those without an explicit User ID). Add inline function `add_packet_to_direct_sigs()` to `convert_certificate()` to generically add direct signatures on a root key, grouped by issuer. Change `convert_certificate()` to add Certifications on a root key (without a specified User ID) to the list of direct_sigs, so that they are persisted alongside any existing DirectKeys. Remove breakpoints from `persist_certifications()` as they are no longer reached. The function is now solely used for Certifications on User IDs. |
||
---|---|---|
.gitlab | ||
master | ||
master-revoked | ||
packager | ||
packager-revoked | ||
.editorconfig | ||
.gitattributes | ||
.gitignore | ||
.gitlab-ci.yml | ||
archlinux-revoked | ||
archlinux-trusted | ||
archlinux.gpg | ||
keyringctl | ||
LICENSE | ||
Makefile | ||
master-keyids | ||
master-revoked-keyids | ||
packager-keyids | ||
packager-revoked-keyids | ||
README.md | ||
update-keys |
Arch Linux Keyring
Repository for the Arch Linux keyring package.
Addition/Removal/Update of a packaging key
- Get the keyid from the bugreport in the keyring project
- Add the keyid to
packager-keyids
in alphabetic order, following this format: full size keyid, a tab, nickname.
Revoking a packager key
- Create a key removal task in the keyring project.
- Remove the keyid of the revoked user from
packager-keyids
. - Add the removed keyid to
packager-revoked-keyids
, in alphabetic order, following this format: full size keyid, a tab, nickname, a tab and reason of revocation.
Keyring release
- bump the version in the Makefile
- Run update-keys
- git add the new .asc file in the packager directory.
- Commit everything as 'Update keyring'
- Create a new tag
git tag -s $(date +"%Y%m%d")
- Push changes
- Upload the source tarball with
make dist upload
- Update the package