#!/bin/sh

# This hook script prevents the user from pushing to Savannah if any of the new
# commits' OpenPGP signatures cannot be verified.

# Called by "git push" after it has checked the remote status, but before
# anything has been pushed.  If this script exits with a non-zero status nothing
# will be pushed.
#
# This hook is called with the following parameters:
#
# $1 -- Name of the remote to which the push is being done
# $2 -- URL to which the push is being done
#
# If pushing without using a named remote those arguments will be equal.
#
# Information about the commits which are being pushed is supplied as lines to
# the standard input in the form:
#
#   <local ref> <local sha1> <remote ref> <remote sha1>

z40=0000000000000000000000000000000000000000

# Only use the hook when pushing to Savannah.
case "$2" in
*git.sv.gnu.org*)
	break
	;;
*)
	exit 0
	;;
esac

while read local_ref local_sha remote_ref remote_sha
do
	if [ "$local_sha" = $z40 ]
	then
		# Handle delete
		:
	else
		if [ "$remote_sha" = $z40 ]
		then
			# We are pushing a new branch. To prevent wasting too
			# much time for this relatively rare case, we examine
			# all commits since the first signed commit, rather than
			# the full history. This check *will* fail, and the user
			# will need to temporarily disable the hook to push the
			# new branch.
			range="e3d0fcbf7e55e8cbe8d0a1c5a24d73f341d7243b..$local_sha"
		else
			# Update to existing branch, examine new commits
			range="$remote_sha..$local_sha"
		fi

		# Verify the signatures of all commits being pushed.
		ret=0
		for commit in $(git rev-list $range)
		do
			if ! git verify-commit $commit >/dev/null 2>&1
			then
				printf "%s failed signature check\n" $commit
				ret=1
			fi
		done
		exit $ret
	fi
done

exit 0
 value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=96c90474c0cbfe88d1dccb9cb52a0f1b3a1505e7'>root</a>/<a href='/guix/log/gnu?id=96c90474c0cbfe88d1dccb9cb52a0f1b3a1505e7'>gnu</a>/<a href='/guix/log/gnu/packages?id=96c90474c0cbfe88d1dccb9cb52a0f1b3a1505e7'>packages</a>/<a href='/guix/log/gnu/packages/groff.scm?id=96c90474c0cbfe88d1dccb9cb52a0f1b3a1505e7'>groff.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/groff.scm?id=96c90474c0cbfe88d1dccb9cb52a0f1b3a1505e7&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2019-01-17 10:07:07 +0100'>2019-01-17</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=73b2ce87956b0d9168dcfa234128b91e0e41a4c7'>gnu: groff-minimal: Disable relocatability.</a><span class='msg-avail'>...</span></td><td>Danny Milosavljevic</td></tr>
<tr><td><span title='2019-01-16 18:31:27 +0200'>2019-01-16</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=96733e941754759d4a1f45ef8fb05dc9ff6db7b3'>Revert "gnu: groff: Disable relocatability."</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2019-01-16 15:15:30 +0100'>2019-01-16</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=f57693e17c7905d2f11e46d04cb558fe0b0fc39b'>gnu: groff: Disable relocatability.</a><span class='msg-avail'>...</span></td><td>Danny Milosavljevic</td></tr>
<tr><td><span title='2018-05-06 15:47:20 +0200'>2018-05-06</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=06fc895f29735d6cae482522ba433165611b55c1'>gnu: groff-minimal: Preserve 'preconv' executable.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2017-12-06 17:25:23 +0100'>2017-12-06</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=2ced84fbaee2f224cf2ef493ef6b0dc9839a1b13'>gnu: groff-minimal: Inherit phases from groff.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2017-12-05 23:41:30 +0100'>2017-12-05</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=77181815ae70cf573b6fa390a4400b718835aa8a'>Merge branch 'master' into core-updates</a></td><td>Marius Bakke</td></tr>
<tr><td><span title='2017-12-02 15:06:02 +0100'>2017-12-02</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=3c97322a6e44cfb5aadf6dadfbed65170786a913'>gnu: Add groff-minimal.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-08-31 15:05:10 +0200'>2017-08-31</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=e9e6d40b2292c4a3fbc86bee6a7146eaba59c075'>gnu: groff: Make build reproducible.</a><span class='msg-avail'>...</span></td><td>Danny Milosavljevic</td></tr>
<tr><td><span title='2017-07-10 12:37:03 +0200'>2017-07-10</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=9146543f8dce997c194aea93bf4c7a7a4144c8c9'>gnu: groff: Remove timestamps.</a><span class='msg-avail'>...</span></td><td>Danny Milosavljevic</td></tr>
<tr><td><span title='2017-07-07 17:07:16 +0200'>2017-07-07</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=0b6e4f82fcc906c431a575ab68183ed3c1eaa220'>gnu: groff: Remove dependency on netpbm.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-03-30 01:30:16 +0200'>2017-03-30</span></td><td><a href='/guix/commit/gnu/packages/groff.scm?id=6fd52309b8f52c9bb59fccffac53e029ce94b698'>gnu: Use HTTPS for almost all gnu.org HOME-PAGEs.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>