Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2024-12-13 01:44:34 -05:00
Code Issues Packages Projects Releases Wiki Activity

doc: verify tags pointing at checked out commit

Browse Source 
Avoid failing on commits that were created by contributors but has
signed tag created by the maintainer.

Fix: https://github.com/ben-grande/qusal/issues/106
This commit is contained in:
Ben Grande 2024-10-25 11:22:21 +02:00
parent 8fbd9a063c
commit ceb0d2f3ed
No known key found for this signature in database
GPG Key ID: 00C64E14F51F9E56
1 changed files with 22 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
docs/INSTALL.md
View File

@ -86,7 +86,23 @@ this procedure](https://www.qubes-os.org/doc/how-to-copy-from-dom0/#copying-to-d
```sh
git verify-commit HEAD
git submodule foreach git verify-commit HEAD
```
In case the commit verification failed, you can try to verify if any tag
pointing at that commit succeeds:
```sh
tag_list="$(git tag --points-at=HEAD)"
verification=0
for tag in ${tag_list}; do
if git verify-tag "${tag}"
verification=1
break
fi
done
if test "${verification}" = "0"; then
false
fi
```
6. Copy the project to the Salt directories:
@ -134,18 +150,12 @@ with the sys-git formula.
git -C ~/src/qusal submodule update --merge
```
4. Verify the commit or tag signature and expect a good signature, be
surprised otherwise (signature verification on submodules is skipped if
checking out but not merging):
```sh
git verify-commit HEAD
git submodule foreach git verify-commit HEAD
```
4. Verify the commit or tag signature as shown in
[Dom0 Installation](#dom0-installation).
5. Copy the project to the Salt directories:
```
```sh
~/src/qusal/scripts/setup.sh
```
@ -176,13 +186,8 @@ files from being tracked and signature verification won't catch it.
UPDATES_MAX_FILES=10000 qvm-copy-to-dom0 "${qube}" "${file}"
```
3. Verify the commit or tag signature and expect a good signature, be
surprised otherwise:
```sh
git verify-commit HEAD
git submodule foreach git verify-commit HEAD
```
3. Verify the commit or tag signature as shown in
[Dom0 Installation](#dom0-installation).
4. Copy the project to the Salt directories: