From: "Uwe Kleine-König" <u.kleine-koenig@baylibre.com>
To: keys@linux.kernel.org
Subject: [PATCH 0/3] b4 keyring maintenance
Date: Tue, 3 Feb 2026 19:19:23 +0100 [thread overview]
Message-ID: <cover.1770141846.git.u.kleine-koenig@baylibre.com> (raw)
Hello,
last week I noticed that there are several symlinks in .keyring (i.e.
the directory that can be used with b4) that are not up to date. This
patch set cleans up a part of the issues.
patch #1 just adds --gen-b4-keyring to the example script as this is
what Konstantin seems to use.
patch #2 removes all data for removed keys. patch #3 removes all data
for revoked UIDs.
What is still open and ugly:
- The scripts don't cope for these cases, so unless some manual care is
applied, the keyring will become outdated again.
- There are quite some email addresses that are part of two keys
(`iconv -f latin1 keys/*.asc | sed -nr 's/^uid[^<]*<([^>]*)>/\1/p' | sort | uniq -d`
produces some false positives)
For these the cert that is linked to is not chosen deterministically.
Uwe Kleine-König (3):
korg-update-pgpkeys: Pass --gen-b4-keyring to wotmate's
export-keyring.py
Drop broken symlinks from b4 keyring
Drop revoked UIDs from b4 keyring
.keyring/openpgp/FreeBSD.org/bwidawsk/default | 1 -
.keyring/openpgp/alumni.ku.dk/dbk763/default | 1 -
.keyring/openpgp/amd.com/oded.gabbay/default | 1 -
.keyring/openpgp/archlinuxcn.org/fixme/default | 1 -
.keyring/openpgp/arm.com/ard.biesheuvel/default | 1 -
.keyring/openpgp/baylibre.com/mkorpershoek/default | 1 -
.keyring/openpgp/baylibre.com/narmstrong/default | 1 -
.keyring/openpgp/bingham.xyz/kieran/default | 1 -
.keyring/openpgp/bootlin.com/boris.brezillon/default | 1 -
.keyring/openpgp/brown.name/neil/default | 1 -
.keyring/openpgp/bwidawsk.net/ben/default | 1 -
.keyring/openpgp/canonical.com/joseph.salisbury/default | 1 -
.keyring/openpgp/canonical.com/krzysztof.kozlowski/default | 1 -
.keyring/openpgp/cerno.tech/maxime/default | 1 -
.keyring/openpgp/chromium.org/acourbot/default | 1 -
.keyring/openpgp/codeaurora.org/galak/default | 1 -
.keyring/openpgp/codeaurora.org/kvalo/default | 1 -
.keyring/openpgp/collabora.com/boris.brezillon/default | 1 -
.keyring/openpgp/collabora.com/krisman/default | 1 -
.keyring/openpgp/deeprootsystems.com/khilman/default | 1 -
.keyring/openpgp/dell.com/mario.limonciello/default | 1 -
.keyring/openpgp/denx.de/lukma/default | 1 -
.keyring/openpgp/free-electrons.com/boris.brezillon/default | 1 -
.keyring/openpgp/gmail.com/b.brezillon.dev/default | 1 -
.keyring/openpgp/gmail.com/daeinki/default | 1 -
.keyring/openpgp/gmail.com/dagmcr/default | 1 -
.keyring/openpgp/gmail.com/delicious.quinoa/default | 1 -
.keyring/openpgp/gmail.com/eric.dumazet/default | 1 -
.keyring/openpgp/gmail.com/kieranbingham/default | 1 -
.keyring/openpgp/gmx.de-mail.de/oleksij.rempel/default | 1 -
.keyring/openpgp/google.com/acourbot/default | 1 -
.keyring/openpgp/google.com/edumazet/default | 1 -
.keyring/openpgp/google.com/msturner/default | 1 -
.keyring/openpgp/google.com/palmerdabbelt/default | 1 -
.keyring/openpgp/groveronline.com/andy/default | 1 -
.keyring/openpgp/iki.fi/penberg/default | 1 -
.keyring/openpgp/infradead.org/willy/default | 1 -
.keyring/openpgp/intel.com/alexander.shishkin/default | 1 -
.keyring/openpgp/intel.com/ben.widawsky/default | 1 -
.keyring/openpgp/intel.com/hao.wu/default | 1 -
.keyring/openpgp/intel.com/jani.nikula/default | 1 -
.keyring/openpgp/intel.com/jesse.brandeburg/default | 1 -
.keyring/openpgp/intel.com/peter.waskiewicz.jr/default | 1 -
.keyring/openpgp/intel.com/shiraz.saleem/default | 1 -
.keyring/openpgp/intel.com/yilun.xu/default | 1 -
.keyring/openpgp/ishicorp.com/wbg/default | 1 -
.keyring/openpgp/jabber.de/olerem/default | 1 -
.keyring/openpgp/kbingham.co.uk/kieran/default | 1 -
.keyring/openpgp/kernel.crashing.org/galak/default | 1 -
.keyring/openpgp/kernel.org/atull/default | 1 -
.keyring/openpgp/kernel.org/bbrezillon/default | 1 -
.keyring/openpgp/kernel.org/bwidawsk/default | 1 -
.keyring/openpgp/kernel.org/daeinki/default | 1 -
.keyring/openpgp/kernel.org/edumazet/default | 1 -
.keyring/openpgp/koowaldah.org/ash/default | 1 -
.keyring/openpgp/linaro.org/ard.biesheuvel/default | 1 -
.keyring/openpgp/linaro.org/kumar.gala/default | 1 -
.keyring/openpgp/linaro.org/mathieu.poirier/default | 1 -
.keyring/openpgp/linaro.org/nico/default | 1 -
.keyring/openpgp/linaro.org/nicolas.pitre/default | 1 -
.keyring/openpgp/linux.ibm.com/rppt/default | 1 -
.keyring/openpgp/linux.intel.com/alexander.shishkin/default | 1 -
.keyring/openpgp/linux.intel.com/jarkko.sakkinen/default | 1 -
.keyring/openpgp/linux.intel.com/mathew.j.martineau/default | 1 -
.keyring/openpgp/linux.vnet.ibm.com/boqun.feng/default | 1 -
.keyring/openpgp/majess.pl/l.majewski/default | 1 -
.keyring/openpgp/netapp.com/Trond.Myklebust/default | 1 -
.keyring/openpgp/netapp.com/pj.waskiewicz/default | 1 -
.keyring/openpgp/netapp.com/pjw/default | 1 -
.keyring/openpgp/nicira.com/pshelar/default | 1 -
.keyring/openpgp/nvidia.com/swarren/default | 1 -
.keyring/openpgp/nxp.com/abel.vesa/default | 1 -
.keyring/openpgp/opensource.altera.com/atull/default | 1 -
.keyring/openpgp/parity.io/jarkko/default | 1 -
.keyring/openpgp/pengutronix.de/u.kleine-koenig/default | 1 -
.keyring/openpgp/pobox.com/jgarzik/default | 1 -
.keyring/openpgp/primarydata.com/trond.myklebust/default | 1 -
.keyring/openpgp/profian.com/jarkko/default | 1 -
.keyring/openpgp/profusion.mobi/lucas.demarchi/default | 1 -
.keyring/openpgp/qtec.com/ricardo/default | 1 -
.keyring/openpgp/redhat.com/brouer/default | 1 -
.keyring/openpgp/redhat.com/hsiangkao/default | 1 -
.keyring/openpgp/redhat.com/jbrouer/default | 1 -
.keyring/openpgp/redhat.com/krzysztof.wilczynski/default | 1 -
.keyring/openpgp/redhat.com/kwilczyn/default | 1 -
.keyring/openpgp/redhat.com/kwilczynski/default | 1 -
.keyring/openpgp/rivosinc.com/palmer/default | 1 -
.keyring/openpgp/samsung.com/inki.dae/default | 1 -
.keyring/openpgp/slind.org/virtuoso/default | 1 -
.keyring/openpgp/somainline.org/konrad.dybcio/default | 1 -
.keyring/openpgp/suse.com/jthumshirn/default | 1 -
.keyring/openpgp/suse.com/neilb/default | 1 -
.keyring/openpgp/suse.com/nfbrown/default | 1 -
.keyring/openpgp/suse.com/nsaenzjulienne/default | 1 -
.keyring/openpgp/suse.de/jthumshirn/default | 1 -
.keyring/openpgp/suse.de/neilb/default | 1 -
.keyring/openpgp/suse.de/nsaenzjulienne/default | 1 -
.keyring/openpgp/synopsys.com/vgupta/default | 1 -
.keyring/openpgp/synopsys.com/vineet.gupta1/default | 1 -
.keyring/openpgp/tessares.net/matthieu.baerts/default | 1 -
.keyring/openpgp/ti.com/j-keerthy/default | 1 -
.keyring/openpgp/ti.com/kishon/default | 1 -
.keyring/openpgp/ti.com/p.yadav/default | 1 -
.keyring/openpgp/tuni.fi/jarkko.sakkinen/default | 1 -
.keyring/openpgp/ubuntu.com/joseph.salisbury/default | 1 -
.keyring/openpgp/ugcs.caltech.edu/ido/default | 1 -
.keyring/openpgp/vmware.com/dvhart/default | 1 -
.keyring/openpgp/wdc.com/chaitanya.kulkarni/default | 1 -
.keyring/openpgp/wil.cx/matthew/default | 1 -
.keyring/openpgp/wwwdotorg.org/swarren/default | 1 -
.keyring/openpgp/zankel.net/chris/default | 1 -
scripts/korg-update-pgpkeys | 2 +-
112 files changed, 1 insertion(+), 112 deletions(-)
delete mode 120000 .keyring/openpgp/FreeBSD.org/bwidawsk/default
delete mode 120000 .keyring/openpgp/alumni.ku.dk/dbk763/default
delete mode 120000 .keyring/openpgp/amd.com/oded.gabbay/default
delete mode 120000 .keyring/openpgp/archlinuxcn.org/fixme/default
delete mode 120000 .keyring/openpgp/arm.com/ard.biesheuvel/default
delete mode 120000 .keyring/openpgp/baylibre.com/mkorpershoek/default
delete mode 120000 .keyring/openpgp/baylibre.com/narmstrong/default
delete mode 120000 .keyring/openpgp/bingham.xyz/kieran/default
delete mode 120000 .keyring/openpgp/bootlin.com/boris.brezillon/default
delete mode 120000 .keyring/openpgp/brown.name/neil/default
delete mode 120000 .keyring/openpgp/bwidawsk.net/ben/default
delete mode 120000 .keyring/openpgp/canonical.com/joseph.salisbury/default
delete mode 120000 .keyring/openpgp/canonical.com/krzysztof.kozlowski/default
delete mode 120000 .keyring/openpgp/cerno.tech/maxime/default
delete mode 120000 .keyring/openpgp/chromium.org/acourbot/default
delete mode 120000 .keyring/openpgp/codeaurora.org/galak/default
delete mode 120000 .keyring/openpgp/codeaurora.org/kvalo/default
delete mode 120000 .keyring/openpgp/collabora.com/boris.brezillon/default
delete mode 120000 .keyring/openpgp/collabora.com/krisman/default
delete mode 120000 .keyring/openpgp/deeprootsystems.com/khilman/default
delete mode 120000 .keyring/openpgp/dell.com/mario.limonciello/default
delete mode 120000 .keyring/openpgp/denx.de/lukma/default
delete mode 120000 .keyring/openpgp/free-electrons.com/boris.brezillon/default
delete mode 120000 .keyring/openpgp/gmail.com/b.brezillon.dev/default
delete mode 120000 .keyring/openpgp/gmail.com/daeinki/default
delete mode 120000 .keyring/openpgp/gmail.com/dagmcr/default
delete mode 120000 .keyring/openpgp/gmail.com/delicious.quinoa/default
delete mode 120000 .keyring/openpgp/gmail.com/eric.dumazet/default
delete mode 120000 .keyring/openpgp/gmail.com/kieranbingham/default
delete mode 120000 .keyring/openpgp/gmx.de-mail.de/oleksij.rempel/default
delete mode 120000 .keyring/openpgp/google.com/acourbot/default
delete mode 120000 .keyring/openpgp/google.com/edumazet/default
delete mode 120000 .keyring/openpgp/google.com/msturner/default
delete mode 120000 .keyring/openpgp/google.com/palmerdabbelt/default
delete mode 120000 .keyring/openpgp/groveronline.com/andy/default
delete mode 120000 .keyring/openpgp/iki.fi/penberg/default
delete mode 120000 .keyring/openpgp/infradead.org/willy/default
delete mode 120000 .keyring/openpgp/intel.com/alexander.shishkin/default
delete mode 120000 .keyring/openpgp/intel.com/ben.widawsky/default
delete mode 120000 .keyring/openpgp/intel.com/hao.wu/default
delete mode 120000 .keyring/openpgp/intel.com/jani.nikula/default
delete mode 120000 .keyring/openpgp/intel.com/jesse.brandeburg/default
delete mode 120000 .keyring/openpgp/intel.com/peter.waskiewicz.jr/default
delete mode 120000 .keyring/openpgp/intel.com/shiraz.saleem/default
delete mode 120000 .keyring/openpgp/intel.com/yilun.xu/default
delete mode 120000 .keyring/openpgp/ishicorp.com/wbg/default
delete mode 120000 .keyring/openpgp/jabber.de/olerem/default
delete mode 120000 .keyring/openpgp/kbingham.co.uk/kieran/default
delete mode 120000 .keyring/openpgp/kernel.crashing.org/galak/default
delete mode 120000 .keyring/openpgp/kernel.org/atull/default
delete mode 120000 .keyring/openpgp/kernel.org/bbrezillon/default
delete mode 120000 .keyring/openpgp/kernel.org/bwidawsk/default
delete mode 120000 .keyring/openpgp/kernel.org/daeinki/default
delete mode 120000 .keyring/openpgp/kernel.org/edumazet/default
delete mode 120000 .keyring/openpgp/koowaldah.org/ash/default
delete mode 120000 .keyring/openpgp/linaro.org/ard.biesheuvel/default
delete mode 120000 .keyring/openpgp/linaro.org/kumar.gala/default
delete mode 120000 .keyring/openpgp/linaro.org/mathieu.poirier/default
delete mode 120000 .keyring/openpgp/linaro.org/nico/default
delete mode 120000 .keyring/openpgp/linaro.org/nicolas.pitre/default
delete mode 120000 .keyring/openpgp/linux.ibm.com/rppt/default
delete mode 120000 .keyring/openpgp/linux.intel.com/alexander.shishkin/default
delete mode 120000 .keyring/openpgp/linux.intel.com/jarkko.sakkinen/default
delete mode 120000 .keyring/openpgp/linux.intel.com/mathew.j.martineau/default
delete mode 120000 .keyring/openpgp/linux.vnet.ibm.com/boqun.feng/default
delete mode 120000 .keyring/openpgp/majess.pl/l.majewski/default
delete mode 120000 .keyring/openpgp/netapp.com/Trond.Myklebust/default
delete mode 120000 .keyring/openpgp/netapp.com/pj.waskiewicz/default
delete mode 120000 .keyring/openpgp/netapp.com/pjw/default
delete mode 120000 .keyring/openpgp/nicira.com/pshelar/default
delete mode 120000 .keyring/openpgp/nvidia.com/swarren/default
delete mode 120000 .keyring/openpgp/nxp.com/abel.vesa/default
delete mode 120000 .keyring/openpgp/opensource.altera.com/atull/default
delete mode 120000 .keyring/openpgp/parity.io/jarkko/default
delete mode 120000 .keyring/openpgp/pengutronix.de/u.kleine-koenig/default
delete mode 120000 .keyring/openpgp/pobox.com/jgarzik/default
delete mode 120000 .keyring/openpgp/primarydata.com/trond.myklebust/default
delete mode 120000 .keyring/openpgp/profian.com/jarkko/default
delete mode 120000 .keyring/openpgp/profusion.mobi/lucas.demarchi/default
delete mode 120000 .keyring/openpgp/qtec.com/ricardo/default
delete mode 120000 .keyring/openpgp/redhat.com/brouer/default
delete mode 120000 .keyring/openpgp/redhat.com/hsiangkao/default
delete mode 120000 .keyring/openpgp/redhat.com/jbrouer/default
delete mode 120000 .keyring/openpgp/redhat.com/krzysztof.wilczynski/default
delete mode 120000 .keyring/openpgp/redhat.com/kwilczyn/default
delete mode 120000 .keyring/openpgp/redhat.com/kwilczynski/default
delete mode 120000 .keyring/openpgp/rivosinc.com/palmer/default
delete mode 120000 .keyring/openpgp/samsung.com/inki.dae/default
delete mode 120000 .keyring/openpgp/slind.org/virtuoso/default
delete mode 120000 .keyring/openpgp/somainline.org/konrad.dybcio/default
delete mode 120000 .keyring/openpgp/suse.com/jthumshirn/default
delete mode 120000 .keyring/openpgp/suse.com/neilb/default
delete mode 120000 .keyring/openpgp/suse.com/nfbrown/default
delete mode 120000 .keyring/openpgp/suse.com/nsaenzjulienne/default
delete mode 120000 .keyring/openpgp/suse.de/jthumshirn/default
delete mode 120000 .keyring/openpgp/suse.de/neilb/default
delete mode 120000 .keyring/openpgp/suse.de/nsaenzjulienne/default
delete mode 120000 .keyring/openpgp/synopsys.com/vgupta/default
delete mode 120000 .keyring/openpgp/synopsys.com/vineet.gupta1/default
delete mode 120000 .keyring/openpgp/tessares.net/matthieu.baerts/default
delete mode 120000 .keyring/openpgp/ti.com/j-keerthy/default
delete mode 120000 .keyring/openpgp/ti.com/kishon/default
delete mode 120000 .keyring/openpgp/ti.com/p.yadav/default
delete mode 120000 .keyring/openpgp/tuni.fi/jarkko.sakkinen/default
delete mode 120000 .keyring/openpgp/ubuntu.com/joseph.salisbury/default
delete mode 120000 .keyring/openpgp/ugcs.caltech.edu/ido/default
delete mode 120000 .keyring/openpgp/vmware.com/dvhart/default
delete mode 120000 .keyring/openpgp/wdc.com/chaitanya.kulkarni/default
delete mode 120000 .keyring/openpgp/wil.cx/matthew/default
delete mode 120000 .keyring/openpgp/wwwdotorg.org/swarren/default
delete mode 120000 .keyring/openpgp/zankel.net/chris/default
base-commit: 94cea2f43ac3ca5132f7285c43a88797db9b75b5
--
2.47.3
next reply other threads:[~2026-02-03 18:19 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-02-03 18:19 Uwe Kleine-König [this message]
2026-02-03 18:19 ` [PATCH 1/3] korg-update-pgpkeys: Pass --gen-b4-keyring to wotmate's export-keyring.py Uwe Kleine-König
2026-02-03 18:19 ` [PATCH 2/3] Drop broken symlinks from b4 keyring Uwe Kleine-König
2026-02-03 18:19 ` [PATCH 3/3] Drop revoked UIDs " Uwe Kleine-König
2026-02-13 21:47 ` [PATCH 0/3] b4 keyring maintenance Konstantin Ryabitsev
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1770141846.git.u.kleine-koenig@baylibre.com \
--to=u.kleine-koenig@baylibre.com \
--cc=keys@linux.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox