blob: 3ab1b58bf962ee82729b3a68bf36d3f7c12713db (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
#!/bin/bash
# Import key updates from Keyservers
#
# TODO:
# - Turn off export in this script
OUTPUT_DIR=${1:-.}
BASEDIR="$(dirname "$0")"
source "${BASEDIR}"/keyrings.inc.bash
set -e
export_ldap_data_to_env
export KEYSERVERS=( "${KS_SKS}" "${KS_OPENPGP}" "${KS_GENTOO}" )
export KEYSERVER_TIMEOUT=20m
grab_keys "${SYSTEM_KEYS[@]}"
export_keys "${OUTPUT_DIR}"/service-keys.gpg \
"${SYSTEM_KEYS[@]}"
grab_keys "${INFRA_SYSTEM_KEYS[@]}"
export_keys "${OUTPUT_DIR}"/infra-service-keys.gpg \
"${INFRA_SYSTEM_KEYS[@]}"
grab_keys "${COMMITTING_DEVS[@]}"
export_keys "${OUTPUT_DIR}"/committing-devs.gpg \
"${COMMITTING_DEVS[@]}"
grab_keys "${NONCOMMITTING_DEVS[@]}"
export_keys "${OUTPUT_DIR}"/active-devs.gpg \
"${COMMITTING_DEVS[@]}" \
"${NONCOMMITTING_DEVS[@]}"
grab_keys "${INFRA_DEVS[@]}"
export_keys "${OUTPUT_DIR}"/infra-devs.gpg \
"${INFRA_DEVS[@]}"
# -- not all are on keyservers
# -- and are unlikely to turn up now
# -- this needs to fetch from some archive instead
#grab_keys "${RETIRED_DEVS[@]}"
export_keys "${OUTPUT_DIR}"/retired-devs.gpg \
"${RETIRED_DEVS[@]}"
# Everybody together now
export_keys "${OUTPUT_DIR}"/all-devs.gpg \
"${SYSTEM_KEYS[@]}" \
"${COMMITTING_DEVS[@]}" \
"${NONCOMMITTING_DEVS[@]}" \
"${INFRA_DEVS[@]}" \
"${RETIRED_DEVS[@]}"
# Populate keys.gentoo.org with the keys we have, since they might have come from SKS
export KEYSERVERS=( "${KS_GENTOO}" )
export KEYSERVER_TIMEOUT=20m
push_keys "${SYSTEM_KEYS[@]}"
push_keys "${COMMITTING_DEVS[@]}"
push_keys "${NONCOMMITTING_DEVS[@]}"
push_keys "${INFRA_DEVS[@]}"
push_keys "${RETIRED_DEVS[@]}"
|
GitWeb
