Missing signature for 2.8.0 release #1410

Activity

1. jimklimov

   added

   CIEntries related to continuous integration infrastructure (here CI = tools + scripts + recipes)Entries related to continuous integration infrastructure (here CI = tools + scripts + recipes)

   on May 10, 2022
2. jimklimov

   added this to the 2.8.1 milestone on May 10, 2022
3. jimklimov

   self-assigned this

   on May 10, 2022
4. jimklimov commented on May 10, 2022

   

   jimklimov

   on May 10, 2022

   Member

   More actions

   Yes, that is now a "known oversight" since change of maintainer some time back; nobody in the current team has jumped through the loops recommended for a GPG key yet, and GitHub commit validation was deemed similar enough in practice when the ritual keys were handed over.

   But still, thanks for the reminder and I hope to get around to this. Got some reading to do first:

   • https://www.kernel.org/doc/html/latest/process/maintainer-pgp-guide.html
   • https://docs.fedoraproject.org/en-US/quick-docs/create-gpg-keys/
   • https://github.com/lfit/itpol/blob/master/protecting-code-integrity.md
5. atsampson commented on May 10, 2022

   

   atsampson

   on May 10, 2022

   Author

   More actions

   Great - thanks, Jim!
6. jimklimov commented on May 31, 2023

   

   jimklimov

   on May 31, 2023

   Last edited by jimklimov

   Member

   More actions

   So... it took a while to get feet wet, but now I have a GPG key pushed out to some registries like openpgp, debian and ubuntu. Wondering what the next part is, if some distros or their keychains should include me in packages? Just spread the word on NUT website and in the NEWS file? :)
7. jimklimov commented on May 31, 2023

   

   jimklimov

   on May 31, 2023

   Member

   More actions

   FWIW, my fancy new GPG key ID is below:

   $ gpg --recv-key DE0184DA7043DCF7
   gpg: key DE0184DA7043DCF7: public key "Jim Klimov (Doing FOSS since last millennium) <jimklimov@gmail.com>" imported
   gpg: Total number processed: 1
   gpg:               imported: 1
   
8. jimklimov commented on May 31, 2023

   

   jimklimov

   on May 31, 2023

   Member

   More actions

   Tagged https://github.com/networkupstools/nut/releases/tag/v2.8.0-signed and posted the signature file (nut-website "source" repo and github release attachment).
9. jimklimov

   added a commit that references this issue on Jun 1, 2023

   NEWS: published new maintainer GPG key DE0184DA7043DCF7 [#1410]

   f236b5e
10. jimklimov commented on Jun 1, 2023

    

    jimklimov

    on Jun 1, 2023

    Member

    More actions

    networkupstools/networkupstools.github.io@dc3665a
11. jimklimov commented on Jun 1, 2023

    

    jimklimov

    on Jun 1, 2023

    Member

    More actions

    SIG file finally got made and published, this issue is resolved :)

    (There is another related issue of Download page offering a non-release tag currently; however it is possible to get through the "You can also browse the stable source directory" link for verification).
12. jimklimov

    added a commit that references this issue on Jun 1, 2023

    docs/nut.dict: update with OpenPGP [#1410]

    855e8ac
13. jimklimov

    closed this as completedon Jun 1, 2023
14. jimklimov

    added a commit that references this issue on Jun 30, 2023

    nut-key*.gpg: add "Jim Klimov ..." DE0184DA7043DCF7

    ...

    4d3692b
15. jimklimov

    added a commit that references this issue on Apr 3, 2024

    nut-key*.gpg: add "Jim Klimov ..." DE0184DA7043DCF7

    ...

    e1cfbf7
16. jimklimov

    added

    GPG/PGP/GnuPGKnow-how about use of signingKnow-how about use of signing

    on Apr 6, 2024