gpg signing extension for hg the principle is almost the same as how tags work: .hgsigs stores signatures, localsigs stores local signatures the format of the signatures is: nodeid sigversion base64_detached_sig sigversion 0 signs simply the nodeid (maybe we would like to sign other things in the future). you can associate fingerprints with roles in hgrc like: [gpg] fingerprint_of_a_key_without_spaces = release fingerprint_of_a_key_without_spaces = contributor, testing the key used for signing can be specified on the command line or via hgrc (key =) thanks to Eric Hopper for testing and bugfixing

#!/bin/sh

mkdir a
cd a
hg init
echo a > a
hg add a
hg commit -m test -d '0 0'

# Default operation
hg clone . ../b
cd ../b
cat a
hg verify

# No update
hg clone -U . ../c
cd ../c
cat a
hg verify

# Default destination
mkdir ../d
cd ../d
hg clone ../a
cd a
hg cat a