From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id AA81143D81 for ; Tue, 9 Aug 2022 19:39:08 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id F0D0A68B7F3; Tue, 9 Aug 2022 22:39:05 +0300 (EEST) Received: from mail-vk1-f175.google.com (mail-vk1-f175.google.com [209.85.221.175]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 98DF668B411 for ; Tue, 9 Aug 2022 22:38:59 +0300 (EEST) Received: by mail-vk1-f175.google.com with SMTP id c22so6377539vko.7 for ; Tue, 09 Aug 2022 12:38:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc; bh=WFFVQR9dfW1vxbcjMYMaglQO7SkzAf7FtHRoa41xf38=; b=hYPsBpC0Vqi0NwlqVijBCgzOouvFMI48Rzmk2C3y7Xiujj3IoRnVn7B0vVOhCB7Ipy qWqaxhDhn/S77EWT5MCaK5r1jx1yzKrM5/qYxABDi89IgfD3vofk3XMOvnlIdHpHoVlD CBTbLzf6y116YZk62KY2XWsRJlOb4FDratcMKPSIChjw/tZuXDnr8oD3GQRpZs/ej17k 3c2GY8erNZKopTvL0C72/DOgT+WIaea5lnXBZTemWPFGP2GLUz4r5bZ+rb2EQpvpdgpE 66JqLPDgvfSpl1/IJkxrYliWzezpDi1Nzd/Bo9oJ6bbyruya9GG6jQ9s/8Ubt1aICvET E9/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc; bh=WFFVQR9dfW1vxbcjMYMaglQO7SkzAf7FtHRoa41xf38=; b=QgK+psA2Bv9f7x3KDugaDJCNS3TcaaZ6o1O+PD3064VFTyqf4YM4YXEbYa0BG5br1g VIVhiyMbTg7I7zoqZGGeNfnC/svbH2SLeJrnHwhlRgNjReDh8YBjSUOK1dGWZbN4a7tA GZFUP52JAJoEf7mafLdsEMi+OU3myoFlkabAc9dppFFnt66pXb5zhcKU/Louz1qY2J2L aA+qJFT8x0Kp4ha/d4Otgc1l5T76QWE34k00Y/rUCoV8fDEtQ3Sl2c1HNFD0Hu55vwNW u5CF2ijjUMLDhCmUPlU2vHY+ba96LuzTgT7zCCOinkyPZw4A+H2s1ivHg47FdFt3SmXC nm2g== X-Gm-Message-State: ACgBeo1X96d49bNMStLLFrpAp8PLl5KM9LXGJhJGGCtOcGWP8EWRtt3+ hS3SsZNV1A6/AesG+/ZmGIOG76dF4M0= X-Google-Smtp-Source: AA6agR4Jz/v25cJMGqk6ap+v4ENIOqpR80qvkQ+xahr8obipEbM56bAVEK9PHDIcUfs8Ebd7g9l1UQ== X-Received: by 2002:a1f:1bd1:0:b0:377:b693:bb39 with SMTP id b200-20020a1f1bd1000000b00377b693bb39mr10288116vkb.22.1660073937679; Tue, 09 Aug 2022 12:38:57 -0700 (PDT) Received: from [192.168.0.11] ([186.136.131.204]) by smtp.gmail.com with ESMTPSA id t2-20020a0561020a0200b00385d88375f4sm10283554vsa.32.2022.08.09.12.38.56 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 09 Aug 2022 12:38:56 -0700 (PDT) Message-ID: <836171e4-28e8-8341-205f-ef9eb598b964@gmail.com> Date: Tue, 9 Aug 2022 16:38:56 -0300 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.12.0 Content-Language: en-US To: ffmpeg-devel@ffmpeg.org References: <20220809193439.13308-1-michael@niedermayer.cc> From: James Almer In-Reply-To: <20220809193439.13308-1-michael@niedermayer.cc> Subject: Re: [FFmpeg-devel] [PATCH v2] doc/git-howto.texi: Document commit signing X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: On 8/9/2022 4:34 PM, Michael Niedermayer wrote: > From: Michael Niedermayer > > Signed-off-by: Michael Niedermayer > --- > doc/git-howto.texi | 22 +++++++++++++++++++++- > 1 file changed, 21 insertions(+), 1 deletion(-) > > diff --git a/doc/git-howto.texi b/doc/git-howto.texi > index 874afabbbc..48389751a4 100644 > --- a/doc/git-howto.texi > +++ b/doc/git-howto.texi > @@ -187,11 +187,18 @@ to make sure you don't have untracked files or deletions. > git add [-i|-p|-A] > @end example > > -Make sure you have told Git your name and email address > +Make sure you have told Git your name, email address and GPG key > > @example > git config --global user.name "My Name" > git config --global user.email my@@email.invalid > +git config --global user.signingkey ABCDEF0123245 > +@end example > + > +Enable signing all commits or use -S > + > +@example > +git config --global commit.gpgsign true > @end example > > Use @option{--global} to set the global configuration for all your Git checkouts. > @@ -423,6 +430,19 @@ git checkout -b svn_23456 $SHA1 > where @var{$SHA1} is the commit hash from the @command{git log} output. > > > +@chapter gpg key generation > + > +If you have no gpg key yet, we recommand that you create a ed25519 based key as it Recommend. > +is small, fast and secure. Especially it results in small signatures in git. > + > +@example > +gpg --default-new-key-algo "ed25519/cert,sign+cv25519/encr" --quick-generate-key "human@server.com" > +@end example > + > +When genarting a key, make sure the email specified matches the email used in git as some sites like Generating > +github consider mismatches a reason to declare such commits unverified. After generating a key you > +can add it to the MAINTAINER file and upload it to a keyserver. Maybe link some external documentation about gpg keys, explaining the difference between public and private keys, how to encrypt the private one with a passphrase, etc. Sites like gitlab tell you to not attempt to upload private keys, so i imagine quite a lot of people have mistakenly done so in the past. > + > @chapter Pre-push checklist > > Once you have a set of commits that you feel are ready for pushing, _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".