flathub: update on infra / new repo/GPG key coming

[Robert McQueen]

Hi all,

Over the past few weeks I've been busy getting the new Flathub servers
set up. It's looking pretty good now - we've got the VMs set up with
Cent OS 7, buildbot master, repo and frontend servers up and running,
and a nice SSL set-up with Lets Encrypt and the Mozilla best practices.

I'm waiting on the ARM builders to be connected in to the new
infrastructure (thanks to Codethink for sponsoring the ARM builders!),
and then I'm going to re-initialise the new repo and rebuild everything
that's in Flathub at the moment.

There is a new GPG signing key for the new repo, stored in a Yubikey
connected to the new infrastructure, so although the server can sign the
repo with it, it can't be taken offline and used elsewhere. I've
attached the public key here just for completeness - however we've added
it to the trusted keyring of the existing repo, so existing systems that
have updated in the past month or so should already have the key.

Hopefully this will all be done this week and we'll be able to switch
over to the new infrastructure in time for GUADEC at the end of the
week. It should be a smooth switch-over (essentially the history will
disappear, and every app will see an update available corresponding to
the latest build), but if there you see any oddities please let us know.

Thanks to all of our contributors to the fundraiser and to Mythic Beasts
(www.mythic-beasts.com) for supporting Flathub with the server,
bandwidth and patience with my never-ending series of questions about
getting everything set up nicely. :)

Hope to see some of you in Manchester!

Cheers,
Rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: flathub.key
Type: application/x-iwork-keynote-sffkey
Size: 3931 bytes
Desc: not available
URL: <https://lists.freedesktop.org/archives/flatpak/attachments/20170725/b3086f63/attachment.bin>