On Wed, Jun 25, 2025 at 8:59 AM Z572 <z572@z572.online> wrote:
>
> Greg Hogan <c...@greghogan.com> writes:
>
> > My local guix and git repo validate the signature, but when pushing
> > the validated commit upstream to codeberg the commit is rejected as
> > unverified. The key is present in .guix-authorizations under username
> > "oom" (should we be updating these to our codeberg usernames?). We
> > don't even have a pre-receive hook in .git/hooks. Should this
> > committer workflow continue to work with codeberg?
>
> It still needs to be configured in codeberg
> see https://codeberg.org/user/settings/keys
> >
> > Greg
> >
> >
> > $ guix git authenticate
> > guix git: successfully authenticated commit
> > c0e728755dff98630951646cb46b78b6e538ad69
> >
> >
> > $ git log --show-signature
> > commit c0e728755dff98630951646cb46b78b6e538ad69 (HEAD -> master)
> > gpg: Signature made Wed 25 Jun 2025 11:29:36 AM UTC
> > gpg:                using RSA key 002AAAA34208F3F2BBD7CE14EF6EB27413CFEEF3
> > gpg:                issuer "c...@greghogan.com"
> > gpg: Good signature from "Greg Hogan <c...@greghogan.com>" [ultimate]
> > Author: Ashish SHUKLA <ashish...@lostca.se>
> > Date:   Tue Jun 10 00:28:56 2025 +0200
> >
> >     gnu: simdjson: Update to 3.13.0.
> >
> >     * gnu/packages/cpp.scm (simdjson): Update to 3.13.0.
> >
> >     Change-Id: Id8cd95bd5c95adfea95fcc83aadbe16e569e0438
> >     Signed-off-by: Greg Hogan <c...@greghogan.com>
> >
> >
> > $ git push upstream master
> > guix git: successfully authenticated commit
> > c0e728755dff98630951646cb46b78b6e538ad69
> > Compiling Scheme modules...
> > Compiling Scheme modules...
> > Compiling Scheme modules...
> > Compiling Scheme modules...
> > Compiling Scheme modules...
> > Compiling Scheme modules...
> > Compiling Scheme modules...
> > Compiling Scheme modules...
> > All 136 channel news entries are valid.
> > Enumerating objects: 9, done.
> > Counting objects: 100% (9/9), done.
> > Delta compression using up to 16 threads
> > Compressing objects: 100% (5/5), done.
> > Writing objects: 100% (5/5), 1.30 KiB | 0 bytes/s, done.
> > Total 5 (delta 4), reused 0 (delta 0), pack-reused 0 (from 0)
> > remote:
> > remote: Forgejo: branch master is protected from unverified commit
> > c0e728755dff98630951646cb46b78b6e538ad69
> > To ssh://codeberg.org/guix/guix.git
> >  ! [remote rejected]       master -> master (pre-receive hook declined)
> > error: failed to push some refs to 'ssh://codeberg.org/guix/guix.git'

My key is configured and I have previously pushed a new c++-team branch:

$ ssh -T g...@codeberg.org
Hi there, greghogan! You've successfully authenticated with the key named [...]


And I am able to push another rebase (noting that the guix
authenticate is against the current directory not the pushed ref):

$ git push -f upstream c++-team
guix git: successfully authenticated commit
a4a8387dd8ede243a2a70a03175e1da6756ed78c
Compiling Scheme modules...
Compiling Scheme modules...
Compiling Scheme modules...
Compiling Scheme modules...
Compiling Scheme modules...
Compiling Scheme modules...
Compiling Scheme modules...
Compiling Scheme modules...
;;; note: auto-compilation is enabled, set GUILE_AUTO_COMPILE=0
;;;       or pass the --no-auto-compile argument to disable.
;;; compiling 
/efs/devel/guix/core-packages-team/./build-aux/check-channel-news.scm
;;; compiled 
/home/ec2-user/.cache/guile/ccache/3.0-LE-8-4.6/efs/devel/guix/core-packages-team/build-aux/check-channel-news.scm.go
All 135 channel news entries are valid.
Enumerating objects: 482, done.
Counting objects: 100% (482/482), done.
Delta compression using up to 16 threads
Compressing objects: 100% (317/317), done.
Writing objects: 100% (363/363), 114.59 KiB | 31.00 KiB/s, done.
Total 363 (delta 318), reused 47 (delta 46), pack-reused 0 (from 0)
remote: Resolving deltas: 100% (318/318), completed with 119 local objects.
remote:
remote: Create a new pull request for 'c++-team':
remote:   https://codeberg.org/guix/guix/compare/master...c++-team
remote:
To ssh://codeberg.org/guix/guix.git
 + 0d0565286b...ab1e50add3 c++-team -> c++-team (forced update)

Reply via email to