This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2go-keyring. commit ee5600ccd643743cfc3b485467119544dcc9ecfe Author: Mihai Moldovan <ionic@ionic.de> Date: Sun Aug 4 15:12:09 2019 +0200 Add README.maintainer file, copied from debian-archive-keyring and adapted. --- README.maintainer | 61 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ debian/changelog | 2 ++ 2 files changed, 63 insertions(+) diff --git a/README.maintainer b/README.maintainer new file mode 100644 index 0000000..999838a --- /dev/null +++ b/README.maintainer @@ -0,0 +1,61 @@ +Maintainer notes +================ + +Adding a new team member key +---------------------------- + +make keyrings/x2go-maintainers-keyring.gpg +gpg --no-default-keyring --keyring keyrings/x2go-maintainers-keyring.gpg \ + --no-auto-check-trustdb --import $KEYFILE +jetring-gen keyrings/x2go-maintainers-keyring.gpg~ keyrings/x2go-maintainers-keyring.gpg \ + "add adsb (ID: C5CE5DC2C542CD59)" +jetring-accept x2go-maintainers/ add-C5CE5DC2C542CD59 + +Adding a new archive key +------------------------ + +make keyrings/x2go-archive-keyring.gpg +gpg --no-default-keyring --keyring keyrings/x2go-archive-keyring.gpg \ + --no-auto-check-trustdb --import $KEYFILE +jetring-gen keyrings/x2go-archive-keyring.gpg~ \ + keyrings/x2go-archive-keyring.gpg \ + "add jessie automatic key (security)" +mv add-9D6D8F6BC857C906 add-jessie-security-automatic +jetring-accept active-keys/ add-jessie-security-automatic + +Note that the filenames used for the changeset filenames must never be +subsets of another changeset filename, or the keyring build will +over-eagerly remove them and then fail. + +Removing an archive key +----------------------- + +[There should be a better way of doing this] + +Copy the corresponding entry from active-keys/index to removed-keys/index +Move active-keys/add-$foo to removed-keys/ +gpg --detach-sign --output removed-keys/index.gpg --armor --sign \ + removed-keys/index +Remove the relevant entry from active-keys/index +gpg --detach-sign --output active-keys/index.gpg --armor --sign \ + active-keys/index + +Confirm that the result was as expected by: + +make clean +make keyrings/x2go-archive-keyring.gpg +make keyrings/x2go-archive-removed-keys.gpg + +and checking the contents of each keyring + +Add an entry to debian/x2go-archive-keyring.maintscript: + +rm_conffile /etc/apt/trusted.gpg.d/x2go-archive-${foo}.gpg ${version}~~ + +Pre-build +--------- + +gpg --armor --detach-sign keyrings/x2go-archive-keyring.gpg + +If any keys were removed: +gpg --armor --detach-sign keyrings/x2go-archive-removed-keys.gpg diff --git a/debian/changelog b/debian/changelog index 6b3fca2..b7a3fbb 100644 --- a/debian/changelog +++ b/debian/changelog @@ -44,6 +44,8 @@ x2go-keyring (2019.08.04) UNRELEASED; urgency=medium - Add empty index file. * x2go-maintainers-removed-keys/: - Add empty index file. + * Add README.maintainer file, copied from debian-archive-keyring and + adapted. * debian/control: - Change maintainer to the mailing list. - Add the old package maintainer to the Uploaders field and myself. -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/x2go-keyring.git