On 12/19/07, Tom spot Callaway <tcallawa(a)redhat.com> wrote:
On Wed, 2007-12-19 at 11:52 -0800, Bryan O'Sullivan wrote:
> Is the package signing step done by hand? That's been my understanding,
> but maybe I'm missing something. It reminds me of Sigourney Weaver's
> role in "Galaxy Quest": a seemingly needless insertion of people into
> the process.
>
> If so, why? Can we switch to an automated process?
It is currently a manual process, and Jesse Keating has been working for
some time to make an open source signing server that will work for
Fedora's infrastructure needs but also be useful for anyone.
This is his cue to give us a status report. ;)
Some Fedora Hosted project space was set up today for the signing server code:
https://fedorahosted.org/sigul/
The code isn't there yet but I'm sure it will soon be.
Jeff