Fedora 30 System-Wide Change Proposal: GnuPG2 as default GPG implementation

[Ben Cotton]

https://fedoraproject.org/wiki/Changes/GnuPG2_as_default_GPG_implementation

== Summary ==
The /usr/bin/gpg path representing the main GPG implementation will
now use GnuPG 2 instead of GnuPG 1.

== Owner ==
* Name: [[User:ignatenkobrain|Igor Gnatenko]], [[User:till|Till
Maas]], [[User:ngompa|Neal Gompa]]
* Email: ignatenkobrain(a)fedoraproject.org, opensource(a)till.name,
ngompa13(a)gmail.com

== Detailed Description ==
For long time, GnuPG 2 is de-facto standard and it is unfortunate to
have /usr/bin/gpg to point to GnuPG 1 given that all major
repositories already have it that way.
Some of them don't even have GnuPG 1 shipped (RHEL is one example).

== Benefit to Fedora ==
This change will bring Fedora in line with other major distributions,
users will get consistent experience between distributions and the
naive expectation that "gpg" binary is the latest and greatest
implementation of GnuPG.

== Scope ==
* Proposal owners:
** Rename gnupg package to gnupg1
** Rename gpg binary to gpg1
** Rename gpg2 binary to gpg
** Create gpg2 → gpg symlink
** Check and fix if needed existing packages which require /usr/bin/gpg
* Other developers: Everything can be handled by change owners.
* Release engineering: [https://pagure.io/releng/issue/7920 #7920]
* Policies and guidelines: No changes are needed.
* Trademark approval: N/A (not needed for this Change)

== Upgrade/compatibility impact ==
Users will have to adapt to change that gpg is now called gpg1 if
their usage is not compatible with both 1.x and 2.x.

== How To Test ==
Before change is implemented, owners will prepare COPR repository. You
will need to enable it and update and ensure that your
applications/scripts still work.

== User Experience ==
* /usr/bin/gpg is pointing to latest release of GnuPG 2 which makes
consistent user experience between distributions

== Dependencies ==
What can't be adopted to this change will be patched to use gpg1
explicitly, no action is needed from any developers.

== Contingency Plan ==
* Contingency mechanism: Owners will revert changes and postpone
change to next release.
* Contingency deadline: Beta Freeze.
* Blocks release? No
* Blocks product? No

== Documentation ==
Both gpg1 and gpg2 have their own documentation shipped with them.

-- 
Ben Cotton
Fedora Program Manager
TZ=America/Indiana/Indianapolis

[Tomas Mraz]

On Mon, 2018-11-26 at 09:59 -0500, Ben Cotton wrote:
> https://fedoraproject.org/wiki/Changes/GnuPG2_as_default_GPG_implemen
>  tation
>  
>  == Summary ==
>  The /usr/bin/gpg path representing the main GPG implementation will
>  now use GnuPG 2 instead of GnuPG 1. 
I, as the primary maintainer of the gnupg2 package, welcome this change
and I will cooperate on its implementation if it is acked by FESCo.

-- 
Tomáš Mráz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb
[You'll know whether the road is wrong if you carefully listen to your
conscience.]

[Brian C. Lane]

On Mon, Nov 26, 2018 at 04:30:21PM +0100, Tomas Mraz wrote:
>  On Mon, 2018-11-26 at 09:59 -0500, Ben Cotton wrote:
>  > https://fedoraproject.org/wiki/Changes/GnuPG2_as_default_GPG_implemen
>  > tation
>  > 
>  > == Summary ==
>  > The /usr/bin/gpg path representing the main GPG implementation will
>  > now use GnuPG 2 instead of GnuPG 1.
>  
>  I, as the primary maintainer of the gnupg2 package, welcome this change
>  and I will cooperate on its implementation if it is acked by FESCo. 

As the maintainer of gnupg (1) I also agree. This has been proposed by
upstream and I've been meaning to slip a rename and symlink into rawhide
but just haven't gotten around to it yet.

To be clear, gnupg v1.4.x will not be going away, I plan to maintain it
for as long as upstream supports it.

-- 
Brian C. Lane (PST8PDT)

[Christopher]

On Mon, Nov 26, 2018 at 10:02 AM Ben Cotton <bcotton(a)redhat.com&gt; wrote:
>  https://fedoraproject.org/wiki/Changes/GnuPG2_as_default_GPG_implementation
>
>  == Summary ==
>  The /usr/bin/gpg path representing the main GPG implementation will
>  now use GnuPG 2 instead of GnuPG 1.
>  
This is great. This is a change I've been looking forward to for quite
some time now.

[Zbigniew Jędrzejewski-Szmek]

On Mon, Nov 26, 2018 at 09:59:26AM -0500, Ben Cotton wrote:
>  == Upgrade/compatibility impact ==
>  Users will have to adapt to change that gpg is now called gpg1 if
>  their usage is not compatible with both 1.x and 2.x. 
What are the actual incompatibilities? I'm in particular interested
about command line uses that will be get broken.

Zbyszek

[Björn Persson]

>  ** Rename gnupg package to gnupg1
>  ** Rename gpg binary to gpg1
>  ** Rename gpg2 binary to gpg
>  ** Create gpg2 → gpg symlink 
Just for clarity, and in the context of the proposed source file
verification policy (https://pagure.io/packaging-committee/issue/610):

The gnupg2 package will keep that name, right? So if we tell packagers
to write "BuildRequires: gnupg2" in their spec files, that dependency
will remain valid forever?

Björn Persson

[Igor Gnatenko]

Yes, that is the plan.
On Wed, Dec 5, 2018 at 4:45 PM Björn Persson <Bjorn(a)xn--rombobjrn-67a.se&gt; wrote:
>
> > ** Rename gnupg package to gnupg1
> > ** Rename gpg binary to gpg1
> > ** Rename gpg2 binary to gpg
> > ** Create gpg2 → gpg symlink
>
> Just for clarity, and in the context of the proposed source file
> verification policy (https://pagure.io/packaging-committee/issue/610):
>
> The gnupg2 package will keep that name, right? So if we tell packagers
> to write "BuildRequires: gnupg2" in their spec files, that dependency
> will remain valid forever?
>
> Björn Persson
> _______________________________________________
> devel mailing list -- devel(a)lists.fedoraproject.org
> To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedoraproject.org/archives/list/[e-mail]