Re: Suggest another way of importing GNU Guix GPG key

Le 18 juillet 2019 10:03:18 GMT+02:00, Ricardo Wurmus a écrit : > >dftxb...@free.fr writes: > >> https://guix.gnu.org/manual/en/html_node/Binary-Installation.html >> still recommends to download using keyservers. > >This is the manual corresponding to the latest release, which did not >include th

Re: Suggest another way of importing GNU Guix GPG key

dftxb...@free.fr writes: > https://guix.gnu.org/manual/en/html_node/Binary-Installation.html > still recommends to download using keyservers. This is the manual corresponding to the latest release, which did not include the change. I think it would be warranted to change this even though the o

Re: Suggest another way of importing GNU Guix GPG key

Le 2019-07-13 20:29, Leo Famulari a écrit : On Wed, Jul 03, 2019 at 02:13:12PM -0400, Leo Famulari wrote: An update on this: The initial plan is to add the Guix signing key to the new abuse-resistant keyserver at . Once that has been done we can update the manual and HACKING to point at this.

Re: Suggest another way of importing GNU Guix GPG key

On Wed, Jul 03, 2019 at 02:13:12PM -0400, Leo Famulari wrote: > An update on this: > > The initial plan is to add the Guix signing key to the new > abuse-resistant keyserver at . Once that has been done > we can update the manual and HACKING to point at this. This didn't happen, but the instructi

Re: Suggest another way of importing GNU Guix GPG key

On Tue, Jul 02, 2019 at 11:54:17AM -0400, Leo Famulari wrote: > This is also being discussed privately with the Guix maintainers. I > expect to push an update for the manual and HACKING today. An update on this: The initial plan is to add the Guix signing key to the new abuse-resistant keyserver

Re: Suggest another way of importing GNU Guix GPG key

On Sun, Jun 30, 2019 at 11:44:04AM +0200, Giovanni Biscuolo wrote: > This means we should quckly patch Guix manual: I've no time to propose a > patch today, I'll work on this tomorrow > > We also nees to address this for **all** guix contributors: we require a > GPG signed commit, so each and ever

Re: Suggest another way of importing GNU Guix GPG key

Hello Guix! Alex Vong writes: > One solution would be to download the keyring from > and verify the signature in > the following way: > > $ gpg --keyring ./gnu-keyring.gpg --verify guix-1.0.1.tar.gz.sig > guix-1.0.1.tar.gz > Correct, the quick and "d

Re: Suggest another way of importing GNU Guix GPG key

That's probably the right way to do it for now. Alex Vong writes: > Hello, > > One solution would be to download the keyring from > and verify the signature in > the following way: > > $ gpg --keyring ./gnu-keyring.gpg --verify guix-1.0.1.tar.gz.sig >

Re: Suggest another way of importing GNU Guix GPG key

Hello, One solution would be to download the keyring from and verify the signature in the following way: $ gpg --keyring ./gnu-keyring.gpg --verify guix-1.0.1.tar.gz.sig guix-1.0.1.tar.gz Cheers, Alex dftxb...@free.fr writes: > Hello, > > SKS keyser

Suggest another way of importing GNU Guix GPG key

Hello, SKS keyservers are currently under attack (https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f) - the attack can cause a GPG client to freeze completely and mess the GPG installation completely. I suggest GNU Guix proposes another way of importing the GPG keys so that u