#!/bin/sh

# This hook script prevents the user from pushing to Savannah if any of the new
# commits' OpenPGP signatures cannot be verified.

# Called by "git push" after it has checked the remote status, but before
# anything has been pushed.  If this script exits with a non-zero status nothing
# will be pushed.
#
# This hook is called with the following parameters:
#
# $1 -- Name of the remote to which the push is being done
# $2 -- URL to which the push is being done
#
# If pushing without using a named remote those arguments will be equal.
#
# Information about the commits which are being pushed is supplied as lines to
# the standard input in the form:
#
#   <local ref> <local sha1> <remote ref> <remote sha1>

z40=0000000000000000000000000000000000000000

# Only use the hook when pushing to Savannah.
case "$2" in
*git.sv.gnu.org*)
	break
	;;
*)
	exit 0
	;;
esac

while read local_ref local_sha remote_ref remote_sha
do
	if [ "$local_sha" = $z40 ]
	then
		# Handle delete
		:
	else
		if [ "$remote_sha" = $z40 ]
		then
			# We are pushing a new branch. To prevent wasting too
			# much time for this relatively rare case, we examine
			# all commits since the first signed commit, rather than
			# the full history. This check *will* fail, and the user
			# will need to temporarily disable the hook to push the
			# new branch.
			range="e3d0fcbf7e55e8cbe8d0a1c5a24d73f341d7243b..$local_sha"
		else
			# Update to existing branch, examine new commits
			range="$remote_sha..$local_sha"
		fi

		# Verify the signatures of all commits being pushed.
		ret=0
		for commit in $(git rev-list $range)
		do
			if ! git verify-commit $commit >/dev/null 2>&1
			then
				printf "%s failed signature check\n" $commit
				ret=1
			fi
		done
		exit $ret
	fi
done

exit 0
ct name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=d4fbd1ab341de85c1e5c77e0f7adc5aae056be15'>root</a>/<a href='/guix/log/gnu?id=d4fbd1ab341de85c1e5c77e0f7adc5aae056be15'>gnu</a>/<a href='/guix/log/gnu/tests?id=d4fbd1ab341de85c1e5c77e0f7adc5aae056be15'>tests</a>/<a href='/guix/log/gnu/tests/singularity.scm?id=d4fbd1ab341de85c1e5c77e0f7adc5aae056be15'>singularity.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/tests/singularity.scm?id=d4fbd1ab341de85c1e5c77e0f7adc5aae056be15&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
ef='/guix/commit/gnu/system/images?id=6dbfe1a118dcded3a9d77f8321aa43fbdd255011'>system: hurd: Remove qemu networking from %base-services/hurd.</a><span class='msg-avail'>...<span class='msg-tooltip'>This allows us to use %base-services/hurd for services in a Hurd config for a
real machine without removing static-networking.

* gnu/system/hurd.scm (%base-services/hurd): Factor networking out to...
(%base-services+qemu-networking/hurd): ..this new variable.
* gnu/system/examples/bare-hurd.tmpl (%hurd-os): Use it.
* gnu/services/virtualization.scm (%hurd-vm-operating-system): Use it.
* gnu/system/images/hurd.scm (hurd-barebones-os): Use it.  Add comment about
QEMU and networking for a real machine.

Change-Id: I777a63410383b9bf8b5740e4513dbc1e9fb0fd41
</span></span></td><td>Janneke Nieuwenhuizen</td></tr>
<tr><td><span title='2024-09-08 02:00:00 +0200'>2024-09-08</span></td><td><a href='/guix/commit/gnu/system/images?id=7eddfea4a01e95a58a2c18f71bc4a345a1ad378f'>images: wsl2: Update comment.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/images/wsl2.scm (wsl-boot-program): Update privileged
program directory in a comment.

Change-Id: I65906cbfbcd17ff164837ad293dc4324314bfcf1
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2024-05-22 11:15:30 +0800'>2024-05-22</span></td><td><a href='/guix/commit/gnu/system/images?id=327a1f0779a5df8ebb57e39d4a44e040a5d0bdfe'>system: images: Add visionfive2 module.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/images/visionfive2.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.

Change-Id: I8831f1148bcddb0d604e1174034fca85cd2887a1
</span></span></td><td>Zheng Junjie</td></tr>
<tr><td><span title='2024-04-18 10:43:06 -0400'>2024-04-18</span></td><td><a href='/guix/commit/gnu/system/images?id=65e8472a4b6fc6f66871ba0dad518b7d4c63595e'>system: Remove nss-certs from OS templates, adjust doc.</a><span class='msg-avail'>...<span class='msg-tooltip'>This is a follow-up to commit 86afaadb51 ("system: Add 'nss-certs' to
%base-packages-networking.")

* doc/guix-cookbook.texi (Running Guix on a Linode Server): Remove nss-certs
from operating system's packages field.
(Running Guix on a Kimsufi Server): Likewise.
* doc/guix.texi (Using the Configuration System): Likewise.
(X.509 Certificates): Adjust to mention nss-certs *is* part of %base-packages.
* gnu/installer/services.scm (%system-services): Remove recommendation to
install nss-certs.
* gnu/system/examples/bare-bones.tmpl (host-name): Remove obsolete comments.
* gnu/system/examples/desktop.tmpl (packages): Remove nss-certs.
* gnu/system/examples/lightweight-desktop.tmpl (packages): Likewise.
* gnu/system/examples/plasma.tmpl (packages): Likewise.
* gnu/system/examples/raspberry-pi-64-nfs-root.tmpl (packages): Likewise.
* gnu/system/examples/raspberry-pi-64.tmpl (packages): Likewise.
* gnu/system/examples/vm-image.tmpl (packages): Likewise.
* gnu/system/images/orangepi-r1-plus-lts-rk3328.scm (packages): Likewise.
* gnu/system/images/pine64.scm (packages): Likewise.
* gnu/system/install.scm (installation-os) [packages]: Likewise.

Change-Id: If09123a69b987178bcb0aab61c4570c14fc1286f
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2023-12-22 16:06:15 -0800'>2023-12-22</span></td><td><a href='/guix/commit/gnu/system/images?id=ab1ff7ca40b0a2d935f715dcf64f0f3128632d3d'>images: Add orangepi-r1-plus-lts image.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/local.mk: Register image.
* gnu/system/images/orangepi-r1-plus-lts-rk3328.scm: New file.
* gnu/system/install.scm (orangepi-r1-plus-lts-rk3328-installation-os):
  New variable.

Signed-off-by: Vagrant Cascadian &lt;vagrant@debian.org&gt;
</span></span></td><td>Herman Rimm</td></tr>
<tr><td><span title='2023-06-14 14:52:21 +0300'>2023-06-14</span></td><td><a href='/guix/commit/gnu/system/images?id=f3114ac4f0f1ac20a85dcb20c44cb32e06c22a14'>system: images: Add unmatched module.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/images/unmatched.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2022-12-26 09:34:26 +0100'>2022-12-26</span></td><td><a href='/guix/commit/gnu/system/images?id=c50cd1bbece27097456242f246f89c053e7cc1a2'>images: wsl2: Create XDG_RUNTIME_DIR on first login.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/images/wsl2.scm (wsl-boot-program): Create XDG_RUNTIME_DIR on
first login and set it.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>dan</td></tr>