Re: [libvirt PATCH] downloads.html: Add a link to GPG key used signing releases

[Andrea Bolognani <abologna@xxxxxxxxxx>]

On Thu, 2021-04-01 at 17:36 +0200, Jiri Denemark wrote:
> While the key is available on public GPG key servers, having it locally
> at https://libvirt.org/sources/gpg_key.asc is even better.
> 
> Signed-off-by: Jiri Denemark <jdenemar@xxxxxxxxxx>
> ---
>  docs/downloads.html.in | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)

I love the idea, but I would like to suggest a slightly alternative
implementation of it:

diff --git a/docs/downloads.html.in b/docs/downloads.html.in
index ca14b3ecba..0187062cef 100644
--- a/docs/downloads.html.in
+++ b/docs/downloads.html.in
@@ -615,6 +615,12 @@ pub  4096R/10084C9C 2020-07-20 Jiří Denemark &lt;jdenemar@xxxxxxxxxx&gt;
 Fingerprint=453B 6531 0595 5628 5547  1199 CA68 BE80 1008 4C9C
 </pre>

+    <p>
+      It can be downloaded from
+      <a href="https://libvirt.org/sources/gpg_key.asc";>this site</a> or from
+      public GPG key servers.
+    </p>
+
     <p>
       Releases prior to libvirt-6.6 were signed with the following GPG key:
     </p>

What do you think?

-- 
Andrea Bolognani / Red Hat / Virtualization