Conversation

Notices

1. Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 22-Feb-2023 06:23:53 JST Aral Balkan

   So today I realised that I forgot to add the global setting to make me automatically sign my git commits:

   git config --global commit.gpgsign true

   (Just setting up your user.signingkey isn’t enough.)

   Also, you can go rebase your whole history to sign all your commits using:

   git rebase --signoff --root

   (However, you’ll end up with a linear history and lose any branch/merge history, etc.)

   #git #commit #gpg #signatures #signedCommits #rebase #signoff

   • Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 22-Feb-2023 06:47:44 JST Aral Balkan

     in reply to

     • Kevin

     @ikke Ooh, thanks, I’ll have a play tomorrow :)

   • Kevin (ikke@ipv6.social)'s status on Wednesday, 22-Feb-2023 06:47:45 JST Kevin

     in reply to

     @aral git rebase --rebase-merges is a thing

   • samir, headphones on (samir@mastodon.functional.computer)'s status on Wednesday, 22-Feb-2023 17:56:40 JST samir, headphones on

     in reply to

     @aral If I were looking at your history over time, rather than seeing a total rewrite (including rewriting hashes), I would prefer for you to add a single, signed, empty commit with a message along the following lines:

     > I hereby assert that the current state of the code is as I expect. Signed, Aral.

     That preserves history and tells the truth: you didn't sign each commit, but you are happy to sign the current state and will keep on doing so moving forward.

   • Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 22-Feb-2023 17:56:40 JST Aral Balkan

     in reply to

     • samir, headphones on

     @samir Good shout, thanks.

     I guess signing commits after a certain commit also implicitly makes that point.

     (Also related: https://pleroma.marussy.com/objects/70b52bfb-d403-4109-a552-6dec5a6d68f6)

   • Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 22-Feb-2023 17:59:45 JST Aral Balkan

     in reply to

     • Julia :verified_trans:
     • lewdum of the void

     @lewdum @julia Ah, good use case :)

   • lewdum of the void (lewdum@snowdin.town)'s status on Wednesday, 22-Feb-2023 18:00:22 JST lewdum of the void

     in reply to

     • Julia :verified_trans:
     @julia @aral you can even change the author/email too if you're a mad lass, for example if they contain a deadname
   • Julia :verified_trans: (julia@snug.moe)'s status on Wednesday, 22-Feb-2023 18:00:24 JST Julia :verified_trans:

     in reply to

     @aral@mastodon.ar.al I didn't know you could go back and sign your old commits!

   • Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 22-Feb-2023 18:01:23 JST Aral Balkan

     in reply to

     • Julia :verified_trans:
     • lewdum of the void

     @lewdum @julia Yep, any rewriting of history requires a force push.

   • Aral Balkan (aral@mastodon.ar.al)'s status on Wednesday, 22-Feb-2023 18:02:57 JST Aral Balkan

     in reply to

     • Julia :verified_trans:
     • lewdum of the void

     @lewdum @julia (I just realised that sounds far more profound than it is.) :)