Skip to content

Sign .changes files on the worker with a worker key

SHOULD: Implement signature of .changes on the worker with a worker key

  • Requires to change the Sbuild task

This is a variant of #403 (closed), using a worker key rather than a central Debusine server key. There may not be much security advantage in going down this path, it's worth further discussion.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information