fix git commit signing

[aleeusgr]

I need to sign my commits:
IntersectMBO/cardano-node#5959

How to do this?

1. install gnupg
2. create a key
3. tell git about the key
4. set up commit signing
5. git log --format=raw to see if the commits are signed.

[aleeusgr]

on nixOS these settings may be managed with home-manager

https://nix-community.github.io/home-manager/options.xhtml#opt-programs.git.signing

[aleeusgr]

here I forgot to -S my commits, fix by running git rebase --signoff HEAD~2 but getting the error

suggested fix:

git config --global gpg.ssh.allowedSignersFile
"~/.config/git/allowed_signers"

[aleeusgr]

Still the commits are listed as unverified:

I signed with ssh key:

But I need to sign with GPG:

[aleeusgr]

Maybe the key here is wrong?

nix-things/home.nix

Lines 79 to 93 in 8700390

	git = {
	enable = true;
	userName = "Alex";
	userEmail = "alexeusgr@gmail.com";
	extraConfig = {
	# Sign all commits using ssh key
	commit.gpgsign = true;
	gpg.format = "ssh";
	# gpg.ssh.allowedSignersFile = "~/.ssh/allowed_signers";
	user.signingkey = "~/.ssh/id_ed25519.pub";
	};
	};
	gpg = {
	enable = true;
	};

[aleeusgr]

Try steps listed here:

https://docs.github.com/en/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key

[aleeusgr]

Should I resign the commits or just wait for approval, then scratch this branch and open another PR?

https://stackoverflow.com/questions/62701112/is-there-a-way-to-remove-gpg-sign-of-all-previous-commits-or-resign-it-with-anot