I have a question about setting [repository.signing] i app.ini.
On my account I have GPG set and working - I can sign commits and push it to gitea and they are marked as signed. But Im more intrested of signing merges from PR and other actions made from gitea level.
My app.ini conf looks like this:
[repository.signing] SIGNING_KEY = default INITIAL_COMMIT = pubkey CRUD_ACTIONS = pubkey WIKI = never MERGES = pubkey
After setting this, it shows
As it is said here click this configuration should
defaultoption will interrogate
commit.gpgsignoption - if this is set, then it will use the results of the
So, I edited config file inside selected repository in /gitea-repositories/ and added:
[commit] gpgsign = true [user] signingkey = D8CC0A720BA8380B
This signkey matches my GPG user key, that works with commits. After this, there is information:
If I select Merge PR, I get error 500 and nothing happens.
I can’t edit files inside this repo too, as I get
I made some changes in another Test repo (where I didnt change any configuration) and there I can add and edit files from gitea, ofc. they wont be signed. I cloned it and checked
git log --show-signature and commits from gitea have author with my user name (correct) and email set as email@example.com. I assume, that this is because I have my email address set as private. But there is NO WAY to add GPG signature containing @noreply address, as Gitea says that this email address is not connected with my profile!
So, I set my email as visible. Now, commits from gitea are marked with my correct username and email. Still, wont get signed. I’ve set up everything as mentioned above and then I cant add file, or merge PR as some kind of GPG error.
What am I doing wrong? There must be something wrong with GPG key, but instructions provided are unclear to me. I thought that Gitea would use my user GPG key attached to my accound from which I try to do some action and signature from repo config matches my key. But it doesnt work that way.
I’ve seen here github com/go-gitea/gitea/pull/9784 that he uses email address as key(?) but I have no idea how to set that.
Sorry for links, but Im not allowed to use more than one image and one link.