#!/bin/sh

# This hook script prevents the user from pushing to Savannah if any of the new
# commits' OpenPGP signatures cannot be verified.

# Called by "git push" after it has checked the remote status, but before
# anything has been pushed.  If this script exits with a non-zero status nothing
# will be pushed.
#
# This hook is called with the following parameters:
#
# $1 -- Name of the remote to which the push is being done
# $2 -- URL to which the push is being done
#
# If pushing without using a named remote those arguments will be equal.
#
# Information about the commits which are being pushed is supplied as lines to
# the standard input in the form:
#
#   <local ref> <local sha1> <remote ref> <remote sha1>

z40=0000000000000000000000000000000000000000

# Only use the hook when pushing to Savannah.
case "$2" in
*git.sv.gnu.org*)
	break
	;;
*)
	exit 0
	;;
esac

while read local_ref local_sha remote_ref remote_sha
do
	if [ "$local_sha" = $z40 ]
	then
		# Handle delete
		:
	else
		if [ "$remote_sha" = $z40 ]
		then
			# We are pushing a new branch. To prevent wasting too
			# much time for this relatively rare case, we examine
			# all commits since the first signed commit, rather than
			# the full history. This check *will* fail, and the user
			# will need to temporarily disable the hook to push the
			# new branch.
			range="e3d0fcbf7e55e8cbe8d0a1c5a24d73f341d7243b..$local_sha"
		else
			# Update to existing branch, examine new commits
			range="$remote_sha..$local_sha"
		fi

		# Verify the signatures of all commits being pushed.
		ret=0
		for commit in $(git rev-list $range)
		do
			if ! git verify-commit $commit >/dev/null 2>&1
			then
				printf "%s failed signature check\n" $commit
				ret=1
			fi
		done
		exit $ret
	fi
done

exit 0
ion value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=c111a501f64fc1e00b4efeea7a408a410cf43f61'>root</a>/<a href='/guix/log/gnu?id=c111a501f64fc1e00b4efeea7a408a410cf43f61'>gnu</a>/<a href='/guix/log/gnu/tests?id=c111a501f64fc1e00b4efeea7a408a410cf43f61'>tests</a>/<a href='/guix/log/gnu/tests/web.scm?id=c111a501f64fc1e00b4efeea7a408a410cf43f61'>web.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/tests/web.scm?id=c111a501f64fc1e00b4efeea7a408a410cf43f61&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2021-06-01 14:33:27 +0200'>2021-06-01</span></td><td><a href='/guix/commit/gnu/tests/web.scm?id=0b76b25a0eff7a422f8ebcc8c095d7ede82c8863'>tests: hpcguix-web: Fix it.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/tests/web.scm (run-hpcguix-web-server-test): Increase the VM memory size
and add retries for the http-get test.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2021-04-18 09:52:18 +0200'>2021-04-18</span></td><td><a href='/guix/commit/gnu/tests/web.scm?id=89af95313d031e1a8a57c6a10f20a636884872b5'>tests: Increase VM memory size.</a><span class='msg-avail'>...<span class='msg-tooltip'>The patchwork test sometimes fail because there's not enough available RAM in
the marionette. Increase the VM memory size to 1024MiB.

* gnu/tests/web.scm (run-patchwork-test): Increase VM memory size to 1024MiB.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2021-04-18 09:52:18 +0200'>2021-04-18</span></td><td><a href='/guix/commit/gnu/tests/web.scm?id=3b5c4e6fb285e29a6d348732852e0407c28e30f4'>tests: patchwork: Fix it.</a><span class='msg-avail'>...<span class='msg-tooltip'>The "http-get" test is sometimes failing because the Web server is not yet
initialized and returns the 500 error code.

Use the retry-or-error procedure, like in the tailon test to do a few retries.

* gnu/tests/web.scm (run-tailon-test): Move "retry-or-error" procedure to the
top level and adapt its call.
(run-patchwork-test): Use it.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2021-04-12 19:12:46 -0400'>2021-04-12</span></td><td><a href='/guix/commit/gnu/tests/web.scm?id=c311147bd16aa0e5746d9cbf31502f5fd61e470c'>services: postgresql: Change service default socket directory.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://bugs.gnu.org/46737&gt;.

PostgreSQL running with a different socket directory to the default one in the
package itself breaks some services, this commit restores the previous
behaviour where PostgreSQL by default will run with a socket directory that
matches the default used by PostgreSQL packaged for Guix.

Switching to a different default value can happen, but only alongside changing
the PostgreSQL package.

* gnu/services/databases.scm (&lt;postgresql-config-file&gt;)[socket-directory]:
Change default to #false.
* doc/guix.texi (Database Services): Update documentation, and specify a
different value for disabling connections via sockets.
* gnu/tests/guix.scm (%guix-data-service-os): Use default PostgreSQL
behaviour.
* gnu/tests/monitoring.scm (%zabbix-os): Likewise.
* gnu/tests/web.scm (patchwork-os): Likewise.

Signed-off-by: Leo Famulari &lt;leo@famulari.name&gt;
</span></span></td><td>Christopher Baines</td></tr>