commit: Add `--sign-from-file`
authorColin Walters <walters@verbum.org>
Fri, 14 Jul 2023 23:20:45 +0000 (19:20 -0400)
committerColin Walters <walters@verbum.org>
Sat, 15 Jul 2023 13:50:40 +0000 (09:50 -0400)
commit82d934916b6ececb8f9e5f975723bbf487b894cb
treedbdd32342fa3987b3182f24aa9f36a81ba58a757
parent18d6f5979331e8f890bf4b12473384b63754c450
commit: Add `--sign-from-file`

Passing the private key via a direct command line argument
is just a bad idea because it's highly likely to get logged
or appear in `ps`.
Spotted in review of work for composefs signatures.
man/ostree-commit.xml
src/ostree/ot-builtin-commit.c
tests/test-signed-pull.sh