Interest in other signature libs/tools?

Jeremy Huntwork jeremy at merelinux.org
Wed Dec 22 14:18:44 UTC 2021


Hello,

I've been using pacman for a little while in Mere Linux
(https://github.com/jhuntwork/merelinux). In trying to keep things
simple, I sidestepped support for digital signatures for a while, but
I'm now at a point where I'd like to include it. However, I'd prefer
not to use gpgme and friends. I'd rather use a more modern and simpler
library. I've been looking at things like minisign and signify.
Recently I found https://github.com/vstakhov/asignify which snapped
into pacman pretty easily and is pretty much exactly what I'm looking
for.

At the moment I only have a pretty hacky patch to make it work, so
nothing that is ready to share here. But I wanted to gauge if there is
any interest in supporting different libraries/tools, or if I would
need to maintain my own patch downstream.

Thanks much for your good work and any feedback you may have.

JH


More information about the pacman-dev mailing list