]] Ian Jackson > > Once this was agreed and various corner cases ironed out, we started > > implementing the signing service, and the necessary changes in the > > Linux kernel package, dak, fwupdate, shim and grub. The source for the > > signing service can be found at > > https://salsa.debian.org/ftp-team/code-signing. > > One small point: Do you think tht the source for the signing service > is part of the source for the signed output ? If so it probably needs > to be in the Debian archive, not just on salsa. Sorry if this is > inconvenient.
Not any more than sbuild, buildd and wanna-build is part of the source for buildd-signed packages in the archive, so my initial answer is no. That said, it would be trivial to package, so somebody could easily upload it to the archive. -- Tollef Fog Heen UNIX is user friendly, it's just picky about who its friends are
