[arch-dev-public] Finalizing the package signing process
schiv at archlinux.org
Sun Oct 30 20:29:00 EDT 2011
On 31 October 2011 01:56, Daniel Isenmann <daniel.isenmann at gmx.de> wrote:
> I'm building my packages exclusive on pkgbuild.com and there I can't
> sign packages. If we do the switch in dbscripts then pkgbuild.com
> should be ready to generate signed packages. As far as I know it isn't
> possible yet, am I right?
> Otherwise I would say +1, but for now -1.
I normally only download and test packages that I use and/or are
important/popular, other updates are merely minor version bumps, and
sometimes I am bandwidth-constrained to download anything more than a
But I hope I'm right that most of my packages are lean, in which case
downloading the packages and uploading only the sigs then won't be
much of a problem. And anyway, there was a time when there was no
pkgbuild.com and I had to build packages locally and on slow networks,
so I think I can manage.
In general, +1.
GPG/PGP ID: 8AADBB10
More information about the arch-dev-public