<!-- This template is used when a new packager PGP public key needs to be added to the distribution's keyring. It is either used by the sponsor of a new packager or by an existing packager when adding a new key for themself. --> <!-- Please do not remove the above quick actions, which automatically label the issue and assign relevant users. --> # Add a new packager key ## Details - Username: @muflone - PGP key ID: CAA1D2323A05219AA2F01AA4E642299183ED727E - Sponsors: @bgyorgy Fabio Castelli (Muflone) wish to add a new gpg key to transition from the old existing GPG key C521846436D75A3294795B27B4360204B250F0D3 to a new GPG key CAA1D2323A05219AA2F01AA4E642299183ED727E Both keys are cross signed to authenticate them. I was not able to publish the key in SKS as the server seems gone down, after the recent issues. It was published in: - keyserver.ubuntu.com - pgp.mit.edu - keys.openpgp.org A copy of the new key was uploaded in my Github profile https://github.com/muflone.gpg ## Checks ### New key owner - [X] The [workflow for adding a new packager key](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/workflows/add-a-new-packager-key) has been followed - [X] The key pair contains one user ID with a valid `<username>@archlinux.org` email address used for signing - [X] The key pair has been validated according to the [best practices](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/best-practices#validating-a-key-pair) - [x] The data in the [Details](#details) section is attached to this issue as a clearsigned document - [ ] The public key has been uploaded to the SKS infrastructure ### Main key holders - [x] The public key has been validated according to the [best practices](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/best-practices#validating-a-key-pair) - [ ] The public key has been signed by all main key holders - [x] @anthraxx - [x] @bluewind - [x] @dvzrv - [ ] @grazzolini - [x] @pierre ### Keyring maintainer - [ ] The public key contains one user ID with a valid `<username>@archlinux.org` email address used for signing - [ ] The public key has been validated according to the [best practices](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/wikis/best-practices#validating-a-key-pair) - [ ] The data in the [Details](#details) section is correct and signed with a valid and trusted packager key, which is part of `pacman-key`