On 2022.01.07 10:14, Fabian Stelzer wrote:
To test for a key that is completely unknown to the keyring we need one
to sign the commit with. This was done by generating a new key and not
add it into the keyring. To avoid the key generation overhead and
problems where GPG did hang in CI during it, switch GNUPGHOME to an
empty directory instead, therefore making all used keys unknown for this
single `verify-commit` call.
Reported-by: Ævar Arnfjörð Bjarmason <redacted>
Signed-off-by: Fabian Stelzer <redacted>
---
This was reported by Ævar in [ref].
Just using an empty keyring / gpg homedir should achieve the same effect and
keeps the stress of generating a gpg key out of the CI.
Looks good to me.
Reviewed-by: Josh Steadmon <redacted>