Jan Malakhovski

(read the bottom of the message first) > The solution to this is to modularize (split) Nixpkgs. For example, most NixOS modules should be maintained in separate repositories (== "flakes")....

I got a bit tired regenerating keys by hand while continuing this branch. Added 0f816f83b9adb2049ccf3e274ae9b59883eb2bea in the middle of history here and changed later commits to respect it. >> rewriting...

Added another test that shows that my fourth zero day didn't work out. Give this another 24h before merging just in case but I think this is now LGTM.

Refactored tests, rebased to make the order beautiful, added two more failing tests and a fix. Judging by GPG's docs there are two more non-tested cases: BADSIG and EXPSIG (EXPKEYSIG...

> What is the reasoning for breaking out test to have its own makefile? Tradition, simplicity, I guess. I made the tests directory mostly self-sufficient and it became easier to...

@lrvick @Ekleog > JSON I'm not like super-biased against JSON, I am a bit biased. But my thinking here goes like this: when in Rome do like Romans. git objects...

I pushed the best complete working state I have to this branch (I managed to produce a BADSIG, yay!), now I'll have to take a break from full-time hacking till...

@Ekleog I see. I'm also in favor of signing the commit hash, obviously. IMHO timestamps should be rounded, if not set to 0. I don't want to leak timestamps of...

@lrvick > I will be making a follow up PR to make signatures be base64(gpgsign({"commit_id":"...",tree_id:"...","date":"..."})) Please document you reasoning for these decisions here publicly, not in IRC logs. Why tree-id...

> $ xxd .git/objects/94/00242* Yes, git stores everything compressed (but without the gzip header, so you can't just ungzip). cat-file only decompresses it in the use case above, so the...