[Git-commits] [grml/grml-keyring] 84f7d1: Add a debian/.gitignore file

[Chris Hofstaedtler]

  Branch: refs/heads/master
  Home:   https://github.com/grml/grml-keyring
  Commit: 84f7d16e9833290592f2540a998de13772963ce9
      https://github.com/grml/grml-keyring/commit/84f7d16e9833290592f2540a998de13772963ce9
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-07 (Fri, 07 Feb 2025)

  Changed paths:
    A debian/.gitignore

  Log Message:
  -----------
  Add a debian/.gitignore file


  Commit: bdb67f9444038d6c79b25e5553de1d40c299e9de
      https://github.com/grml/grml-keyring/commit/bdb67f9444038d6c79b25e5553de1d40c299e9de
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-07 (Fri, 07 Feb 2025)

  Changed paths:
    R debian/grml-debian-keyring.postinst

  Log Message:
  -----------
  Remove obsolete postinst script for ancient Debian releases

This was now inert, after the binary package had been renamed from
grml-debian-keyring to grml-keyring.


  Commit: 504e5c73bbd3dc3380038309307a7fb3e54d0031
      https://github.com/grml/grml-keyring/commit/504e5c73bbd3dc3380038309307a7fb3e54d0031
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-07 (Fri, 07 Feb 2025)

  Changed paths:
    R debian/dirs
    A debian/grml-keyring.dirs
    A debian/grml-keyring.install
    R debian/install

  Log Message:
  -----------
  Namespace debhelper fragment files with binary package name

Naming these fragment files without namespacing them with their binary
package name is deprecated in future debhelper compat levels, and makes
adding new binary package potentially an error prone action.


  Commit: ba8ba313da3f9aff0b3f90edfad55a948d72e969
      https://github.com/grml/grml-keyring/commit/ba8ba313da3f9aff0b3f90edfad55a948d72e969
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-07 (Fri, 07 Feb 2025)

  Changed paths:
    R debian/compat
    M debian/control

  Log Message:
  -----------
  Switch to debhelper compat level 13

Move from the deprecated debian/compat to the debhelper-compat
Build-Depends.


  Commit: 7cbc5b6b4ceadbc942aa7f45e82cb01d9e952614
      https://github.com/grml/grml-keyring/commit/7cbc5b6b4ceadbc942aa7f45e82cb01d9e952614
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-10 (Mon, 10 Feb 2025)

  Changed paths:
    M debian/copyright

  Log Message:
  -----------
  Convert debian/copyright file to machine readable format

This clarifies the copyrights, the license for the code and the
keyrings in a machine readable format. Avoids the odd and not relevant
«Debian GNU» reference, the debian-archive-keyring reference, and the
GnuPG term when we should be talking about OpenPGP.


  Commit: 28ffc961887b171dbec1b51bd57edcd901c6a8c7
      https://github.com/grml/grml-keyring/commit/28ffc961887b171dbec1b51bd57edcd901c6a8c7
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-10 (Mon, 10 Feb 2025)

  Changed paths:
    M debian/control

  Log Message:
  -----------
  Use OpenPGP instead of GnuPG when referring to the specification

The name of specification is OpenPGP, and while GnuPG is currently
a widespread implementation, using a specific vendor as if was a
synonym for the specification is a disservice to the whole ecosystem,
more so now that GnuPG upstream has decided to get out of the IETF
working group and not follow the just released OpenPGP RFC.

Use OpenPGP to refer both to the specification and its artifacts.


  Commit: 04652830d27ffb54fc1708eccfd94e50c5a360b8
      https://github.com/grml/grml-keyring/commit/04652830d27ffb54fc1708eccfd94e50c5a360b8
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-10 (Mon, 10 Feb 2025)

  Changed paths:
    A keyrings/grml-archive-automatic-2015.pgp

  Log Message:
  -----------
  Split the keyring into individual certificates

The current keyring only contains a single certificate, but splitting it
into individual files should make it easier to handle these (add, remove
and modify) in the future.

To reproduce the output, the commands used were:

  $ sq keyring split --prefix grml-archive-automatic- \
       grml-archive-keyring.gpg
  $ sq packet dearmor grml-archive-automatic-1-* \
       >grml-archive-automatic-2015.pgp


  Commit: 53b4adf6e6e95fbadc9a6f9b60437c5dab1beb72
      https://github.com/grml/grml-keyring/commit/53b4adf6e6e95fbadc9a6f9b60437c5dab1beb72
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-10 (Mon, 10 Feb 2025)

  Changed paths:
    A .gitignore
    M debian/control
    M debian/rules
    A keyrings/grml-archive-automatic-2015.pgp.asc
    R keyrings/grml-archive-keyring.gpg
    R md5sums.txt

  Log Message:
  -----------
  Rework archive keyring generation and verification

We generate the archive keyring from all the individual certificates,
to make extending them easier.

We switch from signing an md5sums file to simply signing the individual
certificate files, so that this permits renames without invalidating
the signatures, and where the signature will be based on a safer digest
function anyway.

To perform the verification of the individual certificates, we use the
Stateless OpenPGP (SOP) CLI which is a draft specification proposed for
adoption by the OpenPGP work group at the IETF, that intends to create
a unified interface that multiple implementations provide so that
consumers can use any of those implementations interchangeably.


  Commit: a3ee588ce3306a0c93cadfa4843d50d15d055aff
      https://github.com/grml/grml-keyring/commit/a3ee588ce3306a0c93cadfa4843d50d15d055aff
  Author: Guillem Jover <guillem at debian.org>
  Date:   2025-02-10 (Mon, 10 Feb 2025)

  Changed paths:
    M .gitignore
    M debian/grml-keyring.install
    A debian/grml-keyring.links
    M debian/rules

  Log Message:
  -----------
  Rename keyring from .gpg to .pgp

This keyring contains OpenPGP certificates, and is not vendor
specific, so naming it with an extension after GnuPG in detriment
to the other multiple OpenPGP implementations does not promote
the interoperability one would expect from that ecosystem.

Given that these files are API, and will have external references,
we add a backwards compatibility symlink for now, but which should
be considered deprecated and should eventually (in the future) be
obsoleted and removed.


  Commit: 5d9b4738b241e10adbb175693a6238f1c13308b1
      https://github.com/grml/grml-keyring/commit/5d9b4738b241e10adbb175693a6238f1c13308b1
  Author: Chris Hofstaedtler <zeha at users.noreply.github.com>
  Date:   2025-02-12 (Wed, 12 Feb 2025)

  Changed paths:
    A .gitignore
    A debian/.gitignore
    R debian/compat
    M debian/control
    M debian/copyright
    R debian/dirs
    R debian/grml-debian-keyring.postinst
    A debian/grml-keyring.dirs
    A debian/grml-keyring.install
    A debian/grml-keyring.links
    R debian/install
    M debian/rules
    A keyrings/grml-archive-automatic-2015.pgp
    A keyrings/grml-archive-automatic-2015.pgp.asc
    R keyrings/grml-archive-keyring.gpg
    R md5sums.txt

  Log Message:
  -----------
  Merge pull request #13 from guillemj/pu/openpgp

OpenPGP and packaging rework


Compare: https://github.com/grml/grml-keyring/compare/4f2531092350...5d9b4738b241

To unsubscribe from these emails, change your notification settings at https://github.com/grml/grml-keyring/settings/notifications