* Re: [gentoo-dev] [RFC] Make manifest signatures mandatory for repoman commit
@ 2015-04-15 9:06 99% ` Michał Górny
0 siblings, 0 replies; 1+ results
From: Michał Górny @ 2015-04-15 9:06 UTC (permalink / raw
To: Andrew Savchenko; +Cc: gentoo-dev
[-- Attachment #1: Type: text/plain, Size: 902 bytes --]
Dnia 2015-04-15, o godz. 11:59:12
Andrew Savchenko <bircoph@gentoo.org> napisał(a):
> Hi,
>
> why manifest signatures are still optional for repoman?
>
> Repoman signatures are currently optional and this creates nasty
> consequences: if signing errors occurs, repoman still proceeds :/
>
> I just had a phone call during repoman commit and was not able to
> type my password. Due to gpg-agent timeout repoman completed commit
> without a signature :( Should signatures be mandatory, repoman will
> bail out on such conditions and devs can recommit again safely.
This is problem with the CVS two-commit procedure. The only solution is
to stop using CVS keywords which people don't want to do because THEY
ARE SO VERY USEFUL.
Or make repoman do first commit without Manifest, so instead of
unsigned Manifest you'd have Manifest failure.
--
Best regards,
Michał Górny
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 949 bytes --]
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2015-04-15 8:59 [gentoo-dev] [RFC] Make manifest signatures mandatory for repoman commit Andrew Savchenko
2015-04-15 9:06 99% ` Michał Górny
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox