• Bug#1108267: git-debpush should allow selecting the key to sign with

    From Ian Jackson@21:1/5 to Ian Jackson on Thu Jul 17 13:50:01 2025
    Ian Jackson writes ("Re: Bug#1108267: git-debpush should allow selecting the key to sign with"):
    I suggest that we change git-debpush to honour DEBSIGN_KEYID in the environment (as debsign does) and call this bug done. It would
    override git config and the default, but be overridden by -u.

    I misread the debsign docs. I mean DEB_SIGN_KEYID in the envirionment
    as dpkg-buildpackage does. (DEBSIGN_KEYID is only in ~/.devscripts.)

    Ian.

    --
    Ian Jackson <[email protected]> These opinions are my own.

    Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
    that is a private address which bypasses my fierce spamfilter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Jackson@21:1/5 to All on Thu Jul 17 13:50:01 2025
    What is blocking us here is the fact that we don't really know other
    people's use cases, and we've got hung up on DEBEMAIL etc. We think
    we know Andrej's use case. (I spoke to Andrej about this irl.)

    I suggest that we change git-debpush to honour DEBSIGN_KEYID in the
    environment (as debsign does) and call this bug done. It would
    override git config and the default, but be overridden by -u.

    I think this doesn't prevent us possiby honouring DEBEMAIL and
    DEBFULLNAME later (for tagger field, or key selectdion).

    Sean, does this SGTY?

    Ian.

    --
    Ian Jackson <[email protected]> These opinions are my own.

    Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
    that is a private address which bypasses my fierce spamfilter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sean Whitton@21:1/5 to Ian Jackson on Fri Jul 18 11:10:01 2025
    Hello,

    On Thu 17 Jul 2025 at 10:43am +01, Ian Jackson wrote:

    What is blocking us here is the fact that we don't really know other
    people's use cases, and we've got hung up on DEBEMAIL etc. We think
    we know Andrej's use case. (I spoke to Andrej about this irl.)

    I suggest that we change git-debpush to honour DEBSIGN_KEYID in the environment (as debsign does) and call this bug done. It would
    override git config and the default, but be overridden by -u.

    I think this doesn't prevent us possiby honouring DEBEMAIL and
    DEBFULLNAME later (for tagger field, or key selectdion).

    Sean, does this SGTY?

    Yes, I think this is okay. We should probably be willing to change our
    mind with an incompatible change if it turns out this is the wrong
    default for large numbers of people.

    --
    Sean Whitton

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmh6Cy4ZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQMD1D/9iiV/7SNbRgwW+mpbtMWTl h6H9N9hEXx0TtH2AKvAYxFA5SndM5Y9W9rO2/MGes3l/0tEkre99r2iDAiMNyAUO gHxO+UlKEu7VqklgxNTE2ClU9XIu+GKfzSXLyDJGeWFk3A6+QdYCQIRgRukhvOeI 5QBynCDVVU8Sp86J9RfFJsM2l4LFyUsnOFh5+VJLcjyVGX786Drksqpel5w24KZx bf0xEnYDXiB06D5vB/IxloidzU7QlQP5D5tkwB37RNGRJwSgllCBfGeCM51EfDis VNx8yq7FGHkwRUtN6KMC/Ocu+0DWm3D9qmwLeHhu5tqfZXX3UQFrAeiNnKQ7A4ac mZX1QgHoSUuu1QKT7E3FWh4eGD4oEafPkPDXBr7v7dvWwahr30At+DyVV1zCM/ht qmXHOOk9tgpYCgIjluS4S6YX3TmVbjGSrmSrSVVx/CY5YGkoc1oNpMCM1Aul40T7 SSczXyZ/pIkmaodQBtOreuoFUX5A3hNlalSH/MsEW1nW8ypIirCH6EIHmSNroAkc SdPXZWTIK+SmyCfKSsrBXLjXeT6q7629BSL8gnZU2hZb7deHu3QXsJe1I96ae3MJ qV8s3AFuinDf9qdUukBFKhXdT6g6WZCPHFOJ2vz4eFuY3UMftU1fHFOQnldNceeO dNv17ps6rNk+VeoiGmJeFg==EJNa
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Us