From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 3BAD8138D0A for ; Fri, 3 Jul 2015 21:20:03 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 26B3C14014; Fri, 3 Jul 2015 21:19:51 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 36631E086F for ; Fri, 3 Jul 2015 21:19:50 +0000 (UTC) Received: from localhost (gril218.jinr.ru [159.93.172.218]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: bircoph) by smtp.gentoo.org (Postfix) with ESMTPSA id A1FE6340875 for ; Fri, 3 Jul 2015 21:19:47 +0000 (UTC) Date: Sat, 4 Jul 2015 00:19:41 +0300 From: Andrew Savchenko To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Git Migration: launch plan & schedule (2015/Aug/08-09) Message-Id: <20150704001941.ed4c1c2aeb9ec2f23086e1d1@gentoo.org> In-Reply-To: <20150703161913.GA1379@linux1> References: <5595E96A.9050803@gentoo.org> <20150703161913.GA1379@linux1> X-Mailer: Sylpheed 3.4.1 (GTK+ 2.24.20; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="PGP-SHA512"; boundary="Signature=_Sat__4_Jul_2015_00_19_41_+0300_oRvB6ZJ6wQFUjS6i" X-Archives-Salt: 42944b1e-68ec-4255-8f61-1f0dce60a1bf X-Archives-Hash: baac650a7493c57d5d79d3b9e8842305 --Signature=_Sat__4_Jul_2015_00_19_41_+0300_oRvB6ZJ6wQFUjS6i Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, On Fri, 3 Jul 2015 11:19:13 -0500 William Hubbs wrote: > On Fri, Jul 03, 2015 at 06:34:41AM +0000, Robin H. Johnson wrote: > > On Thu, Jul 02, 2015 at 09:46:18PM -0400, Brian Evans wrote: > > > Does this mean that https://wiki.gentoo.org/wiki/Gentoo_git_workflow > > > is no longer draft or needs work or another document is meant to > > > display the new flow? > > It does cover most of the things needed. > >=20 > > It could use some revision regarding gkeys, and I'd like to also mandate > > signed pushes in addition to signed commits. >=20 > A push doesn't create any data, it just uploads it to the repo, so how > do you sign a push? As I see from git docs only commits and tags may be signed. There is no way to sign a push. Moreover there is no need to sign each commit, see what Linux says on that: http://git.661346.n2.nabble.com/GPG-signing-for-git-commit-td2582986.html '' Btw, there's a final reason, and probably the really real one. Signing each commit is totally stupid. It just means that you automate it, and you make the signature worth less. It also doesn't add any real value, since the way the git DAG-chain of SHA1's work, you only ever need _one_ signature to make all the commits reachable from that one be effectively covered by that one. So signing each commit is simply missing the point. '' Best regards, Andrew Savchenko --Signature=_Sat__4_Jul_2015_00_19_41_+0300_oRvB6ZJ6wQFUjS6i Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBCgAGBQJVlvxtAAoJEPZTWjO6HuSNj9QP/0WeSIykLdUclP1bdVmfd6H/ 5Bd4X/218aj264qj/8i2IzExc7FouNkXQk1d6fDozsnOpxwC8z5S7yvb9Q08ri6g wUUG3GAb3kO0WuGVhIJDEe9l11rD06UwxWcwLQi2grdq+ISYB3A+JwYZjhR+Y80/ oJIkOHJoD1GiXMCSejOUt7F6NPAeHNnQ4633RdA5UjUVF/ynrPtZEXmh4qmT/nCP yMOsc9Z6Sqgv0EHFcmaXnrykG4HyKaPaPwX8Z2PYSHuq8etDpoYGOeDaoSKeeOgR WKCFcb7m4CGlgxkB50oQus5Z2I8QrEPKfXpIao6ecDJSuptCMZlveVOS1aX+KlY4 xz+Z30HqhY5DwI7SqXJI7gnZjMU0mTnIIG3r1DmjKxIa6usriBtyWfE1S9jARnL6 1EiYmcKVt3pvNaXN8lFETzZYGw9nKAhznY0hOXT3urdl+FSsC8NXmNpaYIRkwHUH g4pxoDU46INvH8RXYEXcAzchw6FxoFaiqmPANvcl/XXZg5NJCHLwrXfQbog1ItHv b4O9QMZXqpiQ4AdaRb5NYOqxWHXhn6L2lWYwrpSUth2m3HbLWFw8kUzPWgfO9NRV dm9l7aSlK5Z5zYvJVK/J0GYZL6MtQxH8ovZCHplZcT8A/6yTpdvFyKsmPe/MAkMc 2Z0Fxz6R7xQjiDIYp+RI =AUm2 -----END PGP SIGNATURE----- --Signature=_Sat__4_Jul_2015_00_19_41_+0300_oRvB6ZJ6wQFUjS6i--