From 305efb5b01447fd9c320c6eac6cdf155d7922280 Mon Sep 17 00:00:00 2001
From: Thomas Waldmann <tw@waldmann-edv.de>
Date: Mon, 11 Feb 2019 02:41:35 +0100
Subject: [PATCH] signing binaries with Qubes OS support, docs

---
 docs/development.rst  |  2 ++
 scripts/sign-binaries | 19 +++++++++++++++----
 2 files changed, 17 insertions(+), 4 deletions(-)

diff --git a/docs/development.rst b/docs/development.rst
index a20b61c05..247269487 100644
--- a/docs/development.rst
+++ b/docs/development.rst
@@ -338,7 +338,9 @@ Checklist:
     scripts/sdist-sign X.Y.Z
     scripts/upload-pypi X.Y.Z test
     scripts/upload-pypi X.Y.Z
+- put binaries into dist/borg-OSNAME and sign them:
 
+    scripts/sign-binaries 201912312359
 - close the release milestone on GitHub
 - announce on:
 
diff --git a/scripts/sign-binaries b/scripts/sign-binaries
index e7ae657e7..4f145be75 100755
--- a/scripts/sign-binaries
+++ b/scripts/sign-binaries
@@ -1,9 +1,20 @@
 #!/bin/bash
-# usage: sign-binaries 201512312359
+
+D=$1
+
+if [ "$D" = "" ]; then
+    echo "Usage: sign-binaries 201912312359"
+    exit
+fi
+
+if [ "$QUBES_GPG_DOMAIN" = "" ]; then
+    GPG=gpg
+else
+    GPG=qubes-gpg-client-wrapper
+fi
 
 for file in dist/borg-*; do
-    gpg --armor --detach-sign $file
+    $GPG --local-user "Thomas Waldmann" --armor --detach-sign --output $file.asc $file
 done
 
-touch -t $1 dist/*
-
+touch -t $D dist/*