[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] pvops0 git tree signing?



So, any plans to start signing the pvops kernel commits? I'm really
reluctant to build and sign, and then distribute, an RPM with the
sources fetched from this repo, if I cannot verify they are authentic in
any way. I can easily imagine packagers from other distributions would
think similar.

It's really just a matter of signing Jeremy's key with the "Xen.org
master key" (0x79BAD9D8), and then typing git tag -s after every major
commit, no?

Thanks,
joanna.

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.