On Sun, 2019-07-07 at 16:56 +0100, Roy Bamford wrote:
> 
> The master ballot file is attached to this e-mail. Please use the ID
> that will be sent to  you in the confirmation email to verify that your 
> vote was included in the  master ballot file. If you don't get your 
> ID or you can't find your vote inside the ballot file, please contact the
> election officials (elections@g.o or #gentoo-elections on freenode).
> 

Hope you don't mind me hijacking this thread but I'd like to try to
encourage developers to not only implicitly verify their votes but also
participate in the explicit verification process via app-misc/votrify.

First of all, please note that this tool does not invade your privacy. 
The resulted confirmations do not contain your votes, or even indicate
whether you voted at all.  They only say 'yes, I did verify the vote
and got the following result...'.

Secondly, devs who did not vote (but were eligible) also count towards
improving the reliability of vote.  So even if you hadn't voted, please
consider participating.

If you're interested in some background, you can read my today's blog
post [1].  If you want to help, here are almost-copy-paste instructions.
Start by installing votrify; it will also pull election data in:

  emerge -nv app-misc/votrify

If you voted in the election, get your vote file from woodpecker,
and find your confirmation ID in mail:

  scp dev.gentoo.org:.ballot-council-201906-submitted .

Then run the tool like this, substituting XXXX for your confirmation ID,
and changing your vote path if necessary:

  votrify-make-confirmation -v .ballot-council-201906-submitted \
    -c XXXX \
    -b /usr/lib/gentoo-elections/completed/council-201906/ballot-council-201906 \
    -m /usr/lib/gentoo-elections/completed/council-201906/master-council-201906 |
    tee ${USER}.gpg

If you have *not* voted, use '-n' instead of '-v' + '-b':

  votrify-make-confirmation -n \
    -b /usr/lib/gentoo-elections/completed/council-201906/ballot-council-201906 \
    -m /usr/lib/gentoo-elections/completed/council-201906/master-council-201906 |
    tee ${USER}.gpg

('tee' so you see what gets produced)

If everything verifies fine, a file named "${USER}.gpg" should be
written.  If your username is not reasonably unique, please rename it. 
Afterwards, scp the file to woodpecker:

  scp ${USER}.gpg dev.gentoo.org:/space/votrify-council201906/

When more files are uploaded there, anyone will be able to fetch them
and verify the results:

  scp dev.gentoo.org:/space/votrify-council201906/*.gpg .
  votrify-verify-confirmations \
    -v /usr/lib/gentoo-elections/completed/council-201906/voters-
council-201906 \
    *.gpg

TIA.

[1] https://blogs.gentoo.org/mgorny/2019/07/09/verifying-gentoo-election-results-via-votrify/

-- 
Best regards,
Michał Górny