#!/bin/sh

# This hook script prevents the user from pushing to Savannah if any of the new
# commits' OpenPGP signatures cannot be verified.

# Called by "git push" after it has checked the remote status, but before
# anything has been pushed.  If this script exits with a non-zero status nothing
# will be pushed.
#
# This hook is called with the following parameters:
#
# $1 -- Name of the remote to which the push is being done
# $2 -- URL to which the push is being done
#
# If pushing without using a named remote those arguments will be equal.
#
# Information about the commits which are being pushed is supplied as lines to
# the standard input in the form:
#
#   <local ref> <local sha1> <remote ref> <remote sha1>

z40=0000000000000000000000000000000000000000

# Only use the hook when pushing to Savannah.
case "$2" in
*git.sv.gnu.org*)
	break
	;;
*)
	exit 0
	;;
esac

while read local_ref local_sha remote_ref remote_sha
do
	if [ "$local_sha" = $z40 ]
	then
		# Handle delete
		:
	else
		if [ "$remote_sha" = $z40 ]
		then
			# We are pushing a new branch. To prevent wasting too
			# much time for this relatively rare case, we examine
			# all commits since the first signed commit, rather than
			# the full history. This check *will* fail, and the user
			# will need to temporarily disable the hook to push the
			# new branch.
			range="e3d0fcbf7e55e8cbe8d0a1c5a24d73f341d7243b..$local_sha"
		else
			# Update to existing branch, examine new commits
			range="$remote_sha..$local_sha"
		fi

		# Verify the signatures of all commits being pushed.
		ret=0
		for commit in $(git rev-list $range)
		do
			if ! git verify-commit $commit >/dev/null 2>&1
			then
				printf "%s failed signature check\n" $commit
				ret=1
			fi
		done
		exit $ret
	fi
done

exit 0
 value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=f91ad0b13d8d3d5b1ae92e209b1be6e8473385ba'>root</a>/<a href='/guix/log/gnu?id=f91ad0b13d8d3d5b1ae92e209b1be6e8473385ba'>gnu</a>/<a href='/guix/log/gnu/build?id=f91ad0b13d8d3d5b1ae92e209b1be6e8473385ba'>build</a>/<a href='/guix/log/gnu/build/accounts.scm?id=f91ad0b13d8d3d5b1ae92e209b1be6e8473385ba'>accounts.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/accounts.scm?id=f91ad0b13d8d3d5b1ae92e209b1be6e8473385ba&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2019-08-28 00:27:14 +0200'>2019-08-28</span></td><td><a href='/guix/commit/gnu/build/accounts.scm?id=dd4e46edda6c255ca170a6650c6f92b16ff50a3f'>accounts: Delete duplicate entries.</a><span class='msg-avail'>...<span class='msg-tooltip'>When adding multiple instances of a service requiring some user
account/group, we could end up with multiple entries for that account or
group in /etc/passwd or /etc/group.

* gnu/build/accounts.scm (database-writer)[write-entries]: Add call to
'delete-duplicates'.
* tests/accounts.scm ("write-passwd with duplicate entry"): New test.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-06-27 11:14:40 +0200'>2019-06-27</span></td><td><a href='/guix/commit/gnu/build/accounts.scm?id=c25b44d640f709599e3c484a458ae452d99108e1'>accounts: Use 'fsync' instead of 'fdatasync'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/accounts.scm (catch-ENOSYS): Remove.
(database-writer): Use 'fsync' instead of 'fdatasync'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-06-05 23:10:37 +0200'>2019-06-05</span></td><td><a href='/guix/commit/gnu/build/accounts.scm?id=d088d5c4848f08bd62e722789132f9345659c52c'>accounts: Call 'fdatasync' when writing databases.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/accounts.scm (catch-ENOSYS): New macro.
(database-writer): Call 'fdatasync'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-06-05 23:10:37 +0200'>2019-06-05</span></td><td><a href='/guix/commit/gnu/build/accounts.scm?id=ed8570dce3683b73bdf668b3ad0f529a1cea30c5'>accounts: Close database before renaming it.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://bugs.gnu.org/35996&gt;.
Reported by Florian Pelz &lt;pelzflorian@pelzflorian.de&gt;.

* gnu/build/accounts.scm (database-writer): Move 'close-port' call
before 'rename-file'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-06-05 23:10:36 +0200'>2019-06-05</span></td><td><a href='/guix/commit/gnu/build/accounts.scm?id=d497b6ab397273cd250003b6266f22ad74f4c20d'>activation: Lock /etc/.pwd.lock before accessing databases.</a><span class='msg-avail'>...<span class='msg-tooltip'>Suggested by Florian Pelz &lt;pelzflorian@pelzflorian.de&gt;
in &lt;http://bugs.gnu.org/35996&gt;.

* gnu/build/accounts.scm (%password-lock-file): New variable.
* gnu/build/activation.scm (activate-users+groups): Wrap calls to
'user+group-databases', 'write-group', etc. into 'with-file-lock'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-26 14:19:36 +0200'>2019-04-26</span></td><td><a href='/guix/commit/gnu/build/accounts.scm?id=504a0fc636ec591e65b4a229a37e522e425d8a0c'>accounts: Always honor the configured user account shell.</a><span class='msg-avail'>...<span class='msg-tooltip'>Starting from commit 0ae735bcc8ff7fdc89d67b492bdee9091ee19e86, Guix
System would preserve the user shell across reconfigure and reboot.
This was done so as to allow for the use of 'chsh'.

This proved to be a misguided decision.  This commit goes back to
considering user shells as config and not "state."

* gnu/build/accounts.scm (allocate-passwd): Do not use shell from
PREVIOUS.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-03-07 20:05:09 +0100'>2019-03-07</span></td><td><a href='/guix/commit/gnu/build/accounts.scm?id=ec600e4544729f1aaf46fa5162bba334515d0de5'>Add (gnu build accounts).</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/accounts.scm, tests/accounts.scm: New files.
* Makefile.am (SCM_TESTS): Add tests/accounts.scm.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add build/accounts.scm.
</span></span></td><td>Ludovic Courtès</td></tr>