From: Collin Funk <collin.funk1@gmail.com>
Date: Sun, 22 Feb 2026 22:20:30 +0000 (-0800)
Subject: doc: tee: avoid the use of gpg cleartext signatures in an example
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7002e025deeef59228c509b26fbee4311df6be87;p=thirdparty%2Fcoreutils.git

doc: tee: avoid the use of gpg cleartext signatures in an example

Cleartext signatures have many gotchas. Therefore, the use of detached
signatures is recommended where possible. See:
<https://gnupg.org/blog/20251226-cleartext-signatures.html>.

* doc/coreutils.texi (tee invocation): Adjust gpg invocation to produce
a detached signature.
---

diff --git a/doc/coreutils.texi b/doc/coreutils.texi
index aeb258b231..f3d8c81ca5 100644
--- a/doc/coreutils.texi
+++ b/doc/coreutils.texi
@@ -13984,7 +13984,8 @@ PIPE_BUF size at a time), that's possible with a construct like:
 tardir=your-pkg-M.N
 tar chof - "$tardir" \
   | tee >(cksum -a sha2 -l 256) > >(cksum -a sha3 -l 256) \
-  | sort | gpg --clearsign > your-pkg-M.N.tar.sig
+  | sort | tee your-pkg-M.N.checksums \
+  | gpg --detach-sign --armor -o your-pkg-M.N.checksums.sig
 @end example
 
 @exitstatus