git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH] rebase: add --verify-signatures

From
Alexander 'z33ky' Hirsch <1zeeky@gmail.com>
Date
Dec 22, 2015, 23:12 UTC
Message-ID
<20151222231237.GA10408@blarch>
In-Reply-To
<xmqqvb7re55d.fsf@gitster.mtv.corp.google.com>
Sorry, I didn't do a group-reply in my last mail.
On Mon, Dec 21, 2015 at 03:46:54PM -0800, Junio C Hamano wrote:
Show 27 quoted lines
> Alexander 'z33ky' Hirsch <1zeeky@gmail.com> writes:
> 
> > On Thu, Dec 17, 2015 at 10:22:20AM -0800, Junio C Hamano wrote:
> >> I suspect that you are missing the bigger workflow issues, if you
> >> think this and merge are the same.
> >> 
> >> git-merge will check the other history on the side branch that you
> >> are merging _into_ the trunk, to give you an opportunity to reject
> >> what does not pass and keep the trunk sane without doing anything
> >> else.  How you (or others who asked you to pull) clean up the side
> >> branch is outside the scope of its verification.
> >> 
> >> Your change to "git pull --rebase" checks the other way---the
> >> history, which is already the trunk, onto which your work will be
> >> rebased.  There is nothing you can do without messing with the trunk
> >> if the validation did not pass, be it with a rewind-and-rebuild or a
> >> sealing empty commit which is pointless.
> >
> > It would still make sense for long-lived development branches that
> > contain experimental or controversial features, or for forks/private
> > copies that add a couple of commits onto a branch. Merging is certainly
> > an option, but I don't see why rebasing would be a wrong alternative.
> 
> Nobody says rebase is a wrong alternative.
> 
> It is just the time you decide to rebase is a wrong time to check,
> iow, too late, for the validation of the tip.

In that case I would like to submit a patch that warns or even errors in case both --rebase and --verify-signatures is passed to git-pull. I think an error would be appropriate, but in theory this could break scripts that have done that, albeit it probably didn't do what the user expected, and I don't know git's policy about breaking something like this.

Previous: Junio C Hamano
Message 8 of 8 in “rebase: add --verify-signatures”
  1. rebase: add --verify-signaturesAlexander 'z33ky' Hirsch, Dec 10, 2015
  2. Junio C HamanoDec 10, 2015
  3. Junio C HamanoDec 10, 2015
  4. Alexander 'z33ky' HirschDec 16, 2015
  5. Junio C HamanoDec 16, 2015
  6. Alexander 'z33ky' HirschDec 17, 2015
  7. Junio C HamanoDec 17, 2015
  8. Alexander 'z33ky' HirschDec 22, 2015

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.