aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* create-dev-keyrings: correct export_keys callJohn Helmert III2022-07-161-1/+2
| | | | Signed-off-by: John Helmert III <ajak@gentoo.org>
* create-dev-keyrings: also export infra service keysJohn Helmert III2022-07-151-0/+3
| | | | | | Needed for glsamaker. Signed-off-by: John Helmert III <ajak@gentoo.org>
* keyrings: add infra keyringRobin H. Johnson2022-02-271-0/+6
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* keyrings: enable OpenPGP Hagrid serverRobin H. Johnson2019-06-281-1/+1
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* keyrings: prepare to flip to new scriptsRobin H. Johnson2019-05-031-0/+5
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* keyrings: prepare to split out keyring export for faster cyclesRobin H. Johnson2019-05-031-83/+7
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: use hkps://keys.gentoo.org/ for securityRobin H. Johnson2019-04-131-2/+1
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: only send keys we haveRobin H. Johnson2019-04-091-1/+2
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings.bash: push keys back to keys.gentoo.org, take 2, missing ↵Robin H. Johnson2019-04-081-0/+1
| | | | | | a line Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings.bash: push keys back to keys.gentoo.orgRobin H. Johnson2019-04-081-5/+18
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: try keys.gentoo.org as wellRobin H. Johnson2019-04-011-1/+5
| | | | | | | | | | Try the new keys.gentoo.org rotation, prior to the general SKS rotation, mostly because it's local and MUCH faster than the SKS network. keys.g.o does NOT sync with SKS at this time, and does not yet offer HKPS. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: service-keys not underscoredRobin H. Johnson2018-11-121-1/+1
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: fix thinko in chmod targetRobin H. Johnson2018-11-121-1/+1
| | | | Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: export improvementsRobin H. Johnson2018-11-121-7/+48
| | | | | | | - Place new keyrings atomicly. - Export system/committing/active/retired/all in seperate batches Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: always exportRobin H. Johnson2018-11-121-1/+1
| | | | | | | | | | If fetching any changes fails, then the export phase does not run. If there are multiple unrelated key changes, any one of them can be held up by missing on the keyserver. Always run the export, so that we get at least some of the changes out. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* create-dev-keyrings: Increase gpg refresh timeoutMichał Górny2018-07-291-1/+1
|
* create-dev-keyrings: release -> service keysMichał Górny2018-07-211-1/+1
|
* create-dev-keyrings: Include separate group for system usersMichał Górny2018-07-211-5/+10
|
* create-dev-keyrings: Add timeout for gpg callMichał Górny2018-07-181-1/+1
|
* create-dev-keyrings: Do not dispose GNUPGHOMEMichał Górny2018-07-181-3/+0
| | | | | | Instead of disposing GNUPGHOME and fetching fresh, just keep updating the current keyring. Since we export only part of it, stale keys should not cause any trouble.
* create-dev-keyrings: Use a single 'gpg --recv-keys' callMichał Górny2018-07-181-4/+3
|
* Add a script to fetch OpenPGP keysMichał Górny2018-07-181-0/+61