crtxcr/cgitsb
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

cgitrc.5: add local tar signature example

Browse Source 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
This commit is contained in:
Jason A. Donenfeld 2018-07-05 02:38:33 +02:00
parent 08a2b1b8f8
commit 22583c4992
1 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
cgitrc.5.txt
View File

@ -775,14 +775,25 @@ through use of git notes. For example, the following command may be used to
add a signature to a .tar.xz archive: add a signature to a .tar.xz archive:
git notes --ref=refs/notes/signatures/tar.xz add -C "$( git notes --ref=refs/notes/signatures/tar.xz add -C "$(
gpg --output - --armor --detach-sign cgit-1.1.tar.xz | gpg --output - --armor --detach-sign cgit-1.1.tar.xz |
git hash-object -w --stdin git hash-object -w --stdin
)" v1.1 )" v1.1
If it is instead desirable to attach a signature of the underlying .tar, this If it is instead desirable to attach a signature of the underlying .tar, this
will be linked, as a special case, beside a .tar.* link that does not have its will be linked, as a special case, beside a .tar.* link that does not have its
own signature. own signature. For example, a signature of a tarball of the latest tag might
be added with a similar command:
tag="$(git describe --abbrev=0)"
git notes --ref=refs/notes/signatures/tar add -C "$(
git archive --format tar --prefix "cgit-${tag#v}/" "$tag" |
gpg --output - --armor --detach-sign |
git hash-object -w --stdin
)" "$tag"
Since git-archive(1) is expected to produce stable output between versions,
this allows one to generate a long-term signature of the contents of a given
tag.
EXAMPLE CGITRC FILE EXAMPLE CGITRC FILE
------------------- -------------------