Re: HEADS UP: FreeBSD src repo transitioning to git this weekend

Brooks Davis wrote in
 <20201218175241.GA72552_at_spindle.one-eyed-alien.net>:
 |On Thu, Dec 17, 2020 at 05:53:20PM -0800, Thomas Mueller wrote:
 |>>> I hope we don't have to start signing all commits.  saltstack/salt has
 |>>> that policy, and it's extremely annoying.
 |> 
 |>> Have to? Not currently. As with all process changes, there will be
 |>> community discussion around the different points.
 |> 
 |>> Warner
 |> 
 |> I hope not!
 |> 
 |> Signatures, at least in email messages, are just an annoyance as \
 |> I see them.
 |> 
 |> I don't even know how do sign an email message or make use of a signatur\
 |> e in a message I receive.
 |> 
 |> I have never made a commit to a repository, so would not be familiar \
 |> with signatures there; imagine it would be a barrier.
 |
 |Signed commits have no practicl effect on users of a repo.

Well you can verify integrity of a repository regardless of how it
was distributed, this is why it is done, right.

  #?0$ git log --oneline --show-signature -1 v14.9.20.ar
  16a21755 (...)
  gpg: Signature made Sun 13 Dec 2020 12:43:44 AM CET
  gpg:                using RSA key DF082F6AEEC8C2FF
  gpg: Good signature from "Steffen Nurpmeso <steffen_at_sdaoden.eu>"
  Bump S-nail v14.9.20.ar ("Sombre Tit (Trauermeise)"), 2020-12-12

  #?0$ git tag -v v14.9.20.ar; echo $?
  object 16a21755fd1fade2b15fdb78a592f12169c3453f
  type commit
  tag v14.9.20.ar
  tagger Steffen Nurpmeso <steffen_at_sdaoden.eu> 1607816624 +0100
  
  Bump S-nail v14.9.20.ar ("Sombre Tit (Trauermeise)"), 2020-12-12
  gpg: Signature made Sun 13 Dec 2020 12:43:44 AM CET
  gpg:                using RSA key DF082F6AEEC8C2FF
  gpg: Good signature from "Steffen Nurpmeso <steffen_at_sdaoden.eu>"
  0

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)