Mailing List Archive: gpg signing in portage. Can we use it yet?

gpg signing in portage. Can we use it yet?

Nov 8, 2004, 5:41 AM

Post #1 of 7 (2143 views)

This http://www.gentoo.org/news/20041021-portage51.xml tells us all about the gpg signing working it's way into portage.

It tells us what to add to make.conf to have the sigs checked.

Doing so gives the error

PORTAGE_GPG_DIR is invalid. Removing gpg from FEATURES.

Two questions.

1) What do I, as a user have to do now to start testing/playing with gpg signed manifests?

2) Why were partial, incompleate instructions put in the newsletter?

There seem to be a lot of signed manifests now, a grep of the portage tree gave me a 60K file with just the package names. Seems like a good time to start using them.

Re: gpg signing in portage. Can we use it yet? [ In reply to ]

moixa at gmx

Nov 8, 2004, 5:51 AM

Post #2 of 7 (2097 views)

Permalink

On 08.11.2004 13:41 Anthony Metcalf wrote:
> 1) What do I, as a user have to do now to start testing/playing with gpg signed manifests?

http://bugs.gentoo.org/show_bug.cgi?id=68371#c2

> 2) Why were partial, incompleate instructions put in the newsletter?

That's what I asked myself too..

Cheers
Tobias

--
GPG-Key: 0xEF37FF28 (1024/4096 - DSA/ELG-E)
Fingerprint: 3C4B 155F 2621 CEAF D3A6 0CCB 937C 9597 EF37 FF28

Re: gpg signing in portage. Can we use it yet? [ In reply to ]

anthony.metcalf at anferny

Nov 8, 2004, 6:32 AM

Post #3 of 7 (2092 views)

Permalink

For those interested, after some playing and reading error messages:

1) add "gpg strict" to "features" in make.conf
2) add PORTAGE_GPG_DIR=~/.gnupg/
3) make sure ~/.gnupg exits (this can be done by running gpg and pressing ctrl-c)
4) Go to http://dev.gentoo.org/~carpaski/gpg/ and put gentoo.gpg in ~/.gnupg.

Then it works.

Re: gpg signing in portage. Can we use it yet? [ In reply to ]

scout at hyperspace-travel

Nov 8, 2004, 9:23 AM

Post #4 of 7 (2091 views)

Permalink

>
>
>> I additionally had to run:
>>> gpg --import gentoo.gpg
>
>

> Hmmm I did do a
>
> gpg --keyring gentoo.gpg --list-keys
>
> before anything else to see what the keyring had in it. That must have imported it > for me I asume.

Argh, forgot to reply to the list as well...
Anyway, thanks for finding the right procedure and sharing it.

Re: gpg signing in portage. Can we use it yet? [ In reply to ]

anthony.metcalf at anferny

Nov 8, 2004, 9:26 AM

Post #5 of 7 (2091 views)

Permalink

On Mon, 08 Nov 2004 17:23:50 +0100
helge preuss <scout@hyperspace-travel.de> wrote:

> Anyway, thanks for finding the right procedure and sharing it.
>
>

That's what lunchtimes are for. :)

Re: gpg signing in portage. Can we use it yet? [ In reply to ]

tradergt at smelser

Nov 8, 2004, 9:42 AM

Post #6 of 7 (2099 views)

Permalink

On Monday 08 November 2004 10:26 am, Anthony Metcalf wrote:
> On Mon, 08 Nov 2004 17:23:50 +0100
>
> helge preuss <scout@hyperspace-travel.de> wrote:
> > Anyway, thanks for finding the right procedure and sharing it.
>
> That's what lunchtimes are for. :)

There some reason your signature is always bad? Can you fix it plz?

Jeff

Re: gpg signing in portage. Can we use it yet? [ In reply to ]

anthony.metcalf at anferny

Nov 8, 2004, 10:10 AM

Post #7 of 7 (2083 views)

Permalink

On Mon, 8 Nov 2004 10:42:41 -0600
Jeff Smelser <tradergt@smelser.org> wrote:

> There some reason your signature is always bad? Can you fix it plz?
>
> Jeff
>

That would be because the key has expired :)

I thought I'd fixed that.

I will sort it tonight/tomorrow.

Thanks

Mailing List Archive

Mailing List Archive

Attached Files: