code: def sign(config, s_filename):
      
      gpg_home = config.get('gpg_dir', '/var/lib/sachannelupdate/gnupg')
      gpg_pass = config.get('gpg_passphrase')
      gpg_keyid = config.get('gpg_keyid')
      gpg = GPG(gnupghome=gpg_home)
      try:
          plaintext = open(s_filename, 'rb')
          signature = gpg.sign_file(
              plaintext, keyid=gpg_keyid, passphrase=gpg_pass, detach=True)
          with open('%s.asc' % s_filename, 'wb') as handle:
              handle.write(str(signature))
      finally:
          if 'plaintext' in locals():
              plaintext.close()
docs: sign the package