On Sun, 30 Oct 2011 19:04:51 +0100 Giovanni Scafora <giovanni@archlinux.org> wrote:
Il 30/10/2011 18:56, Daniel Isenmann ha scritto:
I'm building my packages exclusive on pkgbuild.com and there I can't sign packages. If we do the switch in dbscripts then pkgbuild.com should be ready to generate signed packages. As far as I know it isn't possible yet, am I right?
You can build your packages on pkgbuild.com, then download them locally and sign them with gpg --detach-sign package. After, you have to send .sig files (i686 and x86_64) on pkgbuild, then execute extrapkg or similar command.
Downloading them locally isn't really a solution. Too low bandwidth and most of the time I don't build the packages from home. If dbscripts get updated without pkgbuild.com supports signing, then I can't build packages.