doc: tee: avoid the use of gpg cleartext signatures in an example

Cleartext signatures have many gotchas. Therefore, the use of detached
signatures is recommended where possible. See:
<https://gnupg.org/blog/20251226-cleartext-signatures.html>.

* doc/coreutils.texi (tee invocation): Adjust gpg invocation to produce
a detached signature.

diff --git a/doc/coreutils.texi b/doc/coreutils.texi
index aeb258b23107ffe5d5affc2952ee93ade95377a2..f3d8c81ca5d13ed41ee5e6f8ad2ca96f78c049b5 100644 (file)
--- a/doc/coreutils.texi
+++ b/doc/coreutils.texi
@@ -13984,7 +13984,8 @@ PIPE_BUF size at a time), that's possible with a construct like:
 tardir=your-pkg-M.N
 tar chof - "$tardir" \
   | tee >(cksum -a sha2 -l 256) > >(cksum -a sha3 -l 256) \
-  | sort | gpg --clearsign > your-pkg-M.N.tar.sig
+  | sort | tee your-pkg-M.N.checksums \
+  | gpg --detach-sign --armor -o your-pkg-M.N.checksums.sig
 @end example
 
 @exitstatus