signing binaries with Qubes OS support, docs

docs/development.rst

@@ -290,7 +290,9 @@ Checklist:
     scripts/sdist-sign X.Y.Z
     scripts/upload-pypi X.Y.Z test
     scripts/upload-pypi X.Y.Z
+- put binaries into dist/borg-OSNAME and sign them:
 
+    scripts/sign-binaries 201912312359
 - close release milestone on Github
 - announce on:
 

scripts/sign-binaries

@@ -1,9 +1,20 @@
 #!/bin/bash
-# usage: sign-binaries 201512312359
+
+D=$1
+
+if [ "$D" = "" ]; then
+    echo "Usage: sign-binaries 201912312359"
+    exit
+fi
+
+if [ "$QUBES_GPG_DOMAIN" = "" ]; then
+    GPG=gpg
+else
+    GPG=qubes-gpg-client-wrapper
+fi
 
 for file in dist/borg-*; do
-    gpg --armor --detach-sign $file
+    $GPG --local-user "Thomas Waldmann" --armor --detach-sign --output $file.asc $file
 done
 
-touch -t $1 dist/*
-
+touch -t $D dist/*