Trevor Brown Stratus3D

Methods of Signing Git Commits on MacOS

Last updated March 13, 2024

This Gist explains how to sign commits using gpg in a step-by-step fashion. Previously, krypt.co was heavily mentioned, but I've only recently learned they were acquired by Akamai and no longer update their previous free products. Those mentions have been removed.

Additionally, 1Password now supports signing Git commits with SSH keys and makes it pretty easy-plus you can easily configure Git Tower to use it for both signing and ssh.

For using a GUI-based GIT tool such as Tower or Github Desktop, follow the steps here for signing your commits with GPG.

Kinesis Freestyle (Terrible key switches. Mushy and un-lovable)
Kinesis Freestyle Edge (Traditional layout with too many keys, mech switches, proably too big to be tented easily/properly)
Matias Ergo Pro (Looks pretty great. Have not tried.)
ErgoDox Kit (Currently, my everyday keyboard. Can buy pre-assembled on eBay.)
ErgoDox EZ (Prolly the best option for most people.)

You are trying to make a lot of simulataneous network connections to localhost. You get up to about 2000 HTTP requests per second, when your CPU usage goes up to 100% on all cores.

perf top reports the following:

 31.01%  [kernel]                    [k] inet_csk_bind_conflict
 20.60%  [kernel]                    [k] inet_csk_get_port
  9.82%  [kernel]                    [k] _raw_spin_lock
  4.62%  perf                        [.] 0x0000000000038ba1
 3.90% [kernel] [k] _raw_read_unlock_bh

If anyone is interested in setting up their system to automatically (or manually) sign their git commits with their GPG key, here are the steps:

Generate and add your key to GitHub
$ git config --global commit.gpgsign true ([OPTIONAL] every commit will now be signed)
$ git config --global user.signingkey ABCDEF01 (where ABCDEF01 is the fingerprint of the key to use)
$ git config --global alias.logs "log --show-signature" (now available as $ git logs)
$ git config --global alias.cis "commit -S" (optional if global signing is false)
$ echo "Some content" >> example.txt
$ git add example.txt
$ git cis -m "This commit is signed by a GPG key." (regular commit will work if global signing is enabled)

	Originally from: http://erlang.org/pipermail/erlang-questions/2017-August/093170.html

	For a safe and fast Erlang SSL server, there's a few
	configuration values you might want by default:

	[{ciphers, CipherList}, % see below
	{honor_cipher_order, true}, % pick the server-defined order of ciphers
	{secure_renegotiate, true}, % prevent renegotiation hijacks
	{client_renegotiation, false}, % prevent clients DoSing w/ renegs
	{versions, ['tlsv1.2', 'tlsv1.1']}, % add tlsv1 if you must

	describe('Get customer info', () => {

	it('should return a valid response', () => {
	response.should.have.status(200);
	response.should.be.json;
	response.body.should.not.be.empty;
	});

	it('should set the Location header', () => {
	response.should.have.header('Location');

	# first: mkdir user && cd user && cp /path/to/get_gists.py .
	# python3 get_gists.py user
	import requests
	import sys
	from subprocess import call

	user = sys.argv[1]

	r = requests.get('https://api.github.com/users/{0}/gists'.format(user))

	defmodule Config do
	@moduledoc """
	This module handles fetching values from the config with some additional niceties
	"""

	@doc """
	Fetches a value from the config, or from the environment if {:system, "VAR"}
	is provided.

	An optional default value can be provided if desired.

	#!/bin/bash

	SOURCE=/tmp/int.erl
	COMPILED=/tmp/int.beam

	test -e $SOURCE \|\| curl https://raw.githubusercontent.com/josevalim/otp/c7e82c6b406b632a191c791a1bd2162bde08f692/lib/debugger/src/int.erl > $SOURCE
	erlc -o ${COMPILED%int.beam} $SOURCE
	chmod 444 $COMPILED
	chgrp admin $COMPILED