mirror of
https://git.in.rschanz.org/ryan77627/guix.git
synced 2025-01-13 06:36:37 -05:00
doc: Mention the channel keyring branch.
Reported by Pierre Neidhardt <mail@ambrevar.xyz>. * doc/guix.texi (Channels): Mention the keyring branch and the 'keyring-reference' bit in '.guix-channel'.
This commit is contained in:
parent
9c7581a127
commit
cb3bae900f
1 changed files with 19 additions and 1 deletions
|
@ -4245,10 +4245,28 @@ time-machine}, the command looks up the introductory commit and verifies
|
||||||
that it is signed by the specified OpenPGP key. From then on, it
|
that it is signed by the specified OpenPGP key. From then on, it
|
||||||
authenticates commits according to the rule above.
|
authenticates commits according to the rule above.
|
||||||
|
|
||||||
To summarize, as the author of a channel, there are two things you have
|
Additionally, your channel must provide all the OpenPGP keys that were
|
||||||
|
ever mentioned in @file{.guix-authorizations}, stored as @file{.key}
|
||||||
|
files, which can be either binary or ``ASCII-armored''. By default,
|
||||||
|
those @file{.key} files are searched for in the branch named
|
||||||
|
@code{keyring} but you can specify a different branch name in
|
||||||
|
@code{.guix-channel} like so:
|
||||||
|
|
||||||
|
@lisp
|
||||||
|
(channel
|
||||||
|
(version 0)
|
||||||
|
(keyring-reference "my-keyring-branch"))
|
||||||
|
@end lisp
|
||||||
|
|
||||||
|
To summarize, as the author of a channel, there are three things you have
|
||||||
to do to allow users to authenticate your code:
|
to do to allow users to authenticate your code:
|
||||||
|
|
||||||
@enumerate
|
@enumerate
|
||||||
|
@item
|
||||||
|
Export the OpenPGP keys of past and present committers with @command{gpg
|
||||||
|
--export} and store them in @file{.key} files, by default in a branch
|
||||||
|
named @code{keyring} (we recommend making it an @dfn{orphan branch}).
|
||||||
|
|
||||||
@item
|
@item
|
||||||
Introduce an initial @file{.guix-authorizations} in the channel's
|
Introduce an initial @file{.guix-authorizations} in the channel's
|
||||||
repository. Do that in a signed commit (@pxref{Commit Access}, for
|
repository. Do that in a signed commit (@pxref{Commit Access}, for
|
||||||
|
|
Loading…
Reference in a new issue