GNU bug report logs - #71678
Support git commits signed with ssh keys in guix git authenticate

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 71678 in the body.
You can then email your comments to 71678 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: MSavoritias <email <at> msavoritias.me>
To: bug-guix <at> gnu.org
Subject: Support git commits signed with ssh keys in guix git authenticate
Date: Thu, 20 Jun 2024 17:00:44 +0300

Hey,

I sign all my commits and tags and such in git with SSH keys and I
would like to be able to use `guix git authenticate` to have a secure
channel pull mechanism.

After doing some testing myself and reading the guide here
https://guix.gnu.org/manual/devel/en/html_node/Specifying-Channel-Authorizations.html
it seems Guix doesn't support git commits that have been signed with
SSH keys.

Personally for security reasons mainly I do not use gpnupg and ssh
support has been in git for a while. Namely November 2021.
https://lore.kernel.org/git/xmqq8rxpgwki.fsf <at> gitster.g/

Reading libgit2 issues it seems it is not supported yet
https://github.com/libgit2/libgit2/issues/6397
So lets circle back to this when it actually merges support :D

Regards,
MSavoritias

Message #10 received at 71678-done <at> debbugs.gnu.org (full text, mbox):

From: jgart <jgart <at> dismail.de>
To: 71678-done <at> debbugs.gnu.org
Cc: MSavoritias <email <at> msavoritias.me>
Subject: Re: Support git commits signed with ssh keys in guix git authenticate
Date: Mon, 01 Jul 2024 09:21:02 -0500

Hi MSavoritias,

Feel free to send a patch when libgit2 gets support so we can discuss
this addition further amongst the Guix community. Additionally, I would
send your idea to the guix-devel mailing list before sending patches to
see what people think there.

I am going to close this issue for now to keep the backlog of open issues down
since this will probably be a while.

-- 
all the best,
jgart

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.