Re: [gentoo-dev] Git Migration: go-live!

["Daniel Campbell (zlg)" <zlg@gentoo.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 08/08/2015 10:36 PM, Robin H. Johnson wrote:
> On Sat, Aug 08, 2015 at 05:47:14PM +0000, Robin H. Johnson wrote:
>> On Thu, Jul 02, 2015 at 09:39:52PM +0000, Robin H. Johnson
>> wrote:
>>> 2015/08/08 15:00 UTC - Freeze 2015/08/08 19:00 UTC - Git
>>> commits open for developers
> This is going live in a few minutes. There was a lot of delays and
> snags that were hit. QA has a lot of reviewing to do of in-tree
> patches with long-standing CVS keyword damage. gkeys is also not
> sufficiently baked, so we're using some scripting for now instead
> [1].
> 
> The new setup DOES enforce that commits AND pushes are signed.
> 
> I'm only 90% sure that everything works, but I've spent almost the 
> entire day on it, and there's more to go tomorrow.
> 
> Other old CVS repos are still closed for the moment, they will
> re-open tomorrow.
> 
>>> 2015/08/09 01:00 UTC - Rsync live again (with lagged
>>> changelog) 2015/08/11           - History repo available to
>>> graft 2015/08/12           - rsync mirrors carry up-to-date
>>> changelogs again
> These parts are still pending.
> 
> Quick instructions: Set PORTAGE_GPG_KEY="0xLONG-GPG-KEY" in your
> make.conf $ git config user.signingkey 0xLONG-GPG-KEY $ git clone
> git+ssh://git@git.gentoo.org/repo/gentoo.git $ vim ... $ repoman
> commit -m '...' [2] $ git push --signed
> 
> (some time later, when you have local unpushed commits you want to 
> rebase instead of merging) $ git pull --rebase -S $ vim ... $
> repoman commit -m '...' $ git push --signed
> 
> (some time later, when you have a local branch you want to merge) $
> git merge -S some-branch $ git push --signed
> 
> [1] The keys as they are in LDAP right now have been used. If you
> need to change your key, please ping infra as well, so I can update
> the temporary setup. $ ldapsearch 'gentooStatus=active'
> gpgfingerprint -Z -LLL \ |grep gpgfingerprint |cut -d: -f2- |tr -d
> ' '  \ |grep -v 'undefined'  | xargs gpg --recv
> 
> [2] If you commit directly with "git commit" you MUST pass -S (and
> ideally -s).
> 

I'd like to thank you and anyone else who's worked on the Git
migration. It's not a trivial undertaking and I look forward to
working on ebuilds with Git! The workflow wiki page is very helpful;
I've added it to my Watchlist so I can stay up to date on changes.

Thanks again for your efforts! If you'd like any assistance in setting
up hooks, I'd be glad to help.

- -- 
Daniel Campbell - Gentoo Developer
OpenPGP Key: 0x1EA055D6 @ hkp://keys.gnupg.net
fpr: AE03 9064 AE00 053C 270C  1DE4 6F7A 9091 1EA0 55D6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=2eg6
-----END PGP SIGNATURE-----