propellor

propellor config for hosts.
git clone git://git.ricketyspace.net/propellor.git
Log | Files | Refs | LICENSE

comment_8_ba9fabe0096cd8808c4a50ea3ebe543c._comment (476B)


      1 [[!comment format=mdwn
      2  username="spwhitton"
      3  avatar="http://cdn.libravatar.org/avatar/9c3f08f80e67733fd506c353239569eb"
      4  subject="comment 8"
      5  date="2019-06-08T20:21:57Z"
      6  content="""
      7 The `git://` protocol is unencrypted and unauthenticated and you're not verifying Joey's PGP signature on the tag that you merge, so this approach is dangerous.
      8 
      9 I would insert a `git verify-tag` step in there.  You'd want to make a record of (and perhaps locally sign) Joey's PGP key.
     10 """]]