release_signscript = ~/bin/sign-release.sh
2. <small>(/me likes this)</small> use some script to sign the Release
- file remotely and send the resulting deatched sig back to people.d.o
- just after the mini-dinstall pulse. To achieve that, the most
- elegant way would be to fix debsign wishlist
+ file remotely and send the resulting deatched signature back to
+ people.d.o just after the mini-dinstall pulse; that way you can sign
+ with your own private key, which will be reasonably felt as more
+ trustworthy, being part of the Debian keyring.
+
+ To achieve that, the most elegant way would be to fix debsign
+ wishlist
[#465240](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465240)
(volunteers? :-) ). As I'm lazy, I'm using my own [[sign-remote]]
script, which is a bit more generic.
- Unfortunately, to hook into dput post upload hook mechanism, you
- need an indirection script because I failed to make dput like
- ";"-separated shell commands. All in all, here is my actual
- `~/.dput.cf` stanza:
+ Unfortunately, to hook into dput post upload mechanism, you need an
+ indirection script because I failed to make dput like ";"-separated
+ shell commands. All in all, here is my actual `~/.dput.cf` stanza:
[people.debian.org]
fqdn = people.debian.org
incoming = /home/zack/public_html/debian/mini-dinstall/incoming
post_upload_command = /home/zack/bin/dinstall-people.d.o
- with [[dinstall-people.d.o]] being rather trivial.
+ with [[dinstall-people.d.o]] being rather trivial: it first invokes
+ mini-dinstall remotely and then sign with [[sign-remote]].
+
+Enjoy!
[[!tag lang/english planet/debian howto debian]]