Setup Keybase.io, GPG and Git to sign commits on GitHub • Hacker News Board

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#11

Post by ryanmaynard » Mon, Aug 15, 2016, 11:59 AM UTC

ithkuil wrote: post #5

Anybody here got invitation codes for keybase ?

I think I have 20 or so left.

Send a note to hi at myusername [dot] co

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#12

Post by akerro » Mon, Aug 15, 2016, 11:59 AM UTC

ithkuil wrote: post #5

Anybody here got invitation codes for keybase ?

You don't need keybase to sign your commits. Any standard and key-exchange compatible pgp/gpg client will do. By using keybase you're just adding more work for everyone.

https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#13

Post by pvinis » Mon, Aug 15, 2016, 12:04 PM UTC

ithkuil wrote: post #5

Anybody here got invitation codes for keybase ?

I also have a few. I would be happy to share. myusername at gmail

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#14

Post by poorman » Mon, Aug 15, 2016, 12:08 PM UTC

ithkuil wrote: post #5

Anybody here got invitation codes for keybase ?

I've got about 25 left. Feel free to contact me at one of the places listed on my keybase: https://keybase.io/nickpoorman

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#15

Post by Rafert » Mon, Aug 15, 2016, 12:28 PM UTC

Dowwie wrote: post #9

This is timely, considering Ken's recent hack attempt on his github account. Does anyone know what happens when commit signatures don't match?

For those out of the loop: http://www.kennethreitz.org/essays/on-cybersecurity-and-bein...

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#16

Post by jbondo » Mon, Aug 15, 2016, 12:28 PM UTC

This setup seems a little simpler (doesn’t require Homebrew, for example): https://gist.github.com/danieleggert/b029d44d4a54b328c0bac65...

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#17

Post by sndean » Mon, Aug 15, 2016, 12:29 PM UTC

ithkuil wrote: post #5

Anybody here got invitation codes for keybase ?

I have 10 that I'd like to get rid of.

If anyone wants an invitation: username at protonmail.ch.

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#18

Post by pstadler » Mon, Aug 15, 2016, 12:29 PM UTC

Thanks for posting this here.

Please note that this was initially written as a reference for myself, being relatively inexperienced with the keybase client and gpg tooling in general. There are certainly different ways to accomplish the same and you don't have to use keybase, but I wanted to. Please keep this in mind.

Ironically, only the first commit is signed.

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#19

Post by underyx » Mon, Aug 15, 2016, 12:33 PM UTC

pstadler wrote: post #18

Thanks for posting this here. Please note that this was initially written as a reference for myself, being relatively inexperienced with the keybase client and gpg tooling in general. There are certainly different ways to accomplish the same and you don't have to use keybase, but I wanted to. Please keep this in mind. Ironically, only the first commit is signed.

>Ironically, only the first commit is signed.

Yeah, and even though I had set this up myself just a few minutes before I submitted PR #3, I ended up committing on the web UI as well, with no signature :D

Re: Setup Keybase.io, GPG and Git to sign commits on GitHub

#20

Post by lil1729 » Mon, Aug 15, 2016, 12:33 PM UTC

matt4077 wrote: post #6

Note that you don't need keybase.io to sign your commits: https://help.github.com/articles/signing-commits-using-gpg/

Thanks for saying this. Or in other words, there are two steps:

1. Make git aware of your signing key

git config user.signingkey "..."

2. Sign the commit

git commit -S ...

That's it.