Your message dated Tue, 12 Dec 2023 21:49:05 +0000
with message-id <[email protected]>
and subject line Bug#1050387: fixed in devscripts 2.23.7
has caused the Debian Bug report #1050387,
regarding debsign: please run with --no-auto-check-trustdb (or allow it to be
set)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1050387: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1050387
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: devscripts
Version: 2.23.4
Severity: normal
Earlier this month I attempted to upload a security-related stable-pu;
however, "debsign foo.changes && dput foo.changes" never reached the
dput stage, because GPG decided that it was a good time to update the
trustdb. Updating the trustdb takes about five minutes on my system,
and it runs this before running pinentry to actually make the
signature. I ran out of free time while waiting.
An up-to-date trustdb isn't needed to sign a changes file, so I think
--no-auto-check-trustdb should be debsign's default. Alternatively, please
allow it to be set as a config option.
It looks like this would be a trivial patch, but I'd like to confirm with
others that this would be a good idea, and that I'm not just biased!
Thank you,
Nicholas
I consulted the changelog of 2.23.6 to confirm this bug is still outstanding.
-- Package-specific info:
--- /etc/devscripts.conf ---
DEBCHANGE_MULTIMAINT_MERGE=yes
DEBCHANGE_MAINTTRAILER=yes
DEBSIGN_KEYID=E2A6261E3900AED7CDC667085A8830475F7D1061
DPKGSIG_KEYID=E2A6261E3900AED7CDC667085A8830475F7D1061
NMUDIFF_DELAY=7
USCAN_DESTDIR=/home/sten/devel/tarballs
--- ~/.devscripts ---
Empty.
-- System Information:
Debian Release: 12.1
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable-debug'), (500,
'proposed-updates-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.1.0-11-rt-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8),
LANGUAGE=en_CA:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages devscripts depends on:
ii dpkg-dev 1.21.22
ii fakeroot 1.31-1.2
ii file 1:5.44-3
ii gnupg 2.2.40-1.1
ii gnupg2 2.2.40-1.1
ii gpgv 2.2.40-1.1
ii libc6 2.36-9+deb12u1
ii libfile-dirlist-perl 0.05-3
ii libfile-homedir-perl 1.006-2
ii libfile-touch-perl 0.12-2
ii libfile-which-perl 1.27-2
ii libipc-run-perl 20220807.0-1
ii libmoo-perl 2.005005-1
ii libwww-perl 6.68-1
ii patchutils 0.4.2-1
ii perl 5.36.0-7
ii python3 3.11.2-1+b1
ii sensible-utils 0.0.17+nmu1
ii wdiff 1.2.2-5
Versions of packages devscripts recommends:
ii apt 2.6.1
ii curl 7.88.1-10+deb12u1
ii dctrl-tools 2.24-3+b1
ii debian-keyring 2022.12.24
ii dput 1.1.3
ii equivs 2.3.1
ii libdistro-info-perl 1.5
ii libdpkg-perl 1.21.22
ii libencode-locale-perl 1.05-3
ii libgit-wrapper-perl 0.048-2
ii libgitlab-api-v4-perl 0.26-3
ii liblist-compare-perl 0.55-2
ii liblwp-protocol-https-perl 6.10-1
ii libsoap-lite-perl 1.27-3
ii libstring-shellquote-perl 1.04-3
ii libtry-tiny-perl 0.31-2
ii liburi-perl 5.17-1
ii licensecheck 3.3.5-1
ii lintian 2.116.3
ii man-db 2.11.2-2
ii patch 2.7.6-7
ii pristine-tar 1.50
ii python3-apt 2.6.0
ii python3-debian 0.1.49
ii python3-magic 2:0.4.26-3
ii python3-requests 2.28.1+dfsg-1
ii python3-unidiff 0.7.3-1
ii python3-xdg 0.28-2
ii strace 6.1-0.1
ii unzip 6.0-28
ii wget 1.21.3-1+b2
ii xz-utils 5.4.1-0.2
Versions of packages devscripts suggests:
ii adequate 0.15.7
ii at 3.2.5-1+b1
ii autopkgtest 5.28
pn bls-standalone <none>
ii build-essential 12.9
pn check-all-the-things <none>
pn cvs-buildpackage <none>
ii debhelper 13.11.4
ii diffoscope 240
pn disorderfs <none>
ii dose-extra 7.0.0-1+b2
pn duck <none>
ii elpa-devscripts 40.5
ii faketime 0.9.10-2.1
ii gnuplot 5.4.4+dfsg1-2
ii gnuplot-qt [gnuplot] 5.4.4+dfsg1-2+b2
ii how-can-i-help 17
ii libauthen-sasl-perl 2.1600-3
pn libdbd-pg-perl <none>
ii libfile-desktopentry-perl 0.22-3
pn libterm-size-perl <none>
ii libtimedate-perl 2.3300-2
ii libyaml-syck-perl 1.34-2+b1
ii mailutils [mailx] 1:3.15-4
pn mmdebstrap <none>
pn mozilla-devscripts <none>
ii mutt 2.2.9-1+b1
ii openssh-client [ssh-client] 1:9.2p1-2
ii piuparts 1.1.7
pn postgresql-client <none>
pn pristine-lfs <none>
ii quilt 0.67+really0.66-1
ii ratt 0.0~git20190123.9e77a6d-1+b6
pn reprotest <none>
ii svn-buildpackage 0.8.8
ii w3m 0.5.3+git20230121-2
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: devscripts
Source-Version: 2.23.7
Done: Benjamin Drung <[email protected]>
We believe that the bug you reported is fixed in the latest version of
devscripts, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Benjamin Drung <[email protected]> (supplier of updated devscripts package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 12 Dec 2023 21:54:20 +0100
Source: devscripts
Built-For-Profiles: noudeb
Architecture: source
Version: 2.23.7
Distribution: unstable
Urgency: medium
Maintainer: Devscripts Maintainers <[email protected]>
Changed-By: Benjamin Drung <[email protected]>
Closes: 931091 950880 1019696 1032396 1037173 1040314 1041150 1050387
Launchpad-Bugs-Fixed: 2046242
Changes:
devscripts (2.23.7) unstable; urgency=medium
.
[ Nicholas D Steeves ]
* debsign: Override the gpg2 default to update trustdb at what may be an
inconvenient time, because an up-to-date trustdb is not needed for this
operation (Closes: Bug#1050387)
.
[ Niels Thykier ]
* wrap-and-sort:
+ Add a --no-keep-first option
+ Make --keep-first the default
+ Support wrap-and-sort'ing d/control.in template files
+ Cope better with deb822 parse errors
* README:
+ Remove obsolete section about setuid wrappers
+ Remove `fakeroot` from `debclean` and `debuild` dependencies
* debuild.pl: Clarify that the `fakeroot` default comes from
dpkg-buildpackage
* dpkg-genbuilddeps.sh: Remove explicit `-rfakeroot` from error message
* d/control: Remove `fakeroot` from Depends. (Closes: #1041150)
.
[ g0t mi1k ]
* salsa:
+ Split edit_project -> edit_project_multipart
+ Only set avatar if told too
+ Check if project is public for remote avatar
+ Set user-agent when remotely checking md5
+ List members including inherited
+ Improve some salsa messages
+ Drop --request-acc, duplicate of --request-access
+ Update doc and comments
+ Add ENVIRONMENTS, FEATURE_FLAGS, INFRASTRUCTURE, MONITOR
and SECURITY_COMPLIANCE
+ Add ENABLE_SERVICE_DESK
.
[ Sean Whitton ]
* debchange: For --lts uploads, use urgency=high.
.
[ Damyan Ivanov ]
* new default KGB webhook URL (https)
.
[ Yadd ]
* Update French translation
.
[ Jochen Sprickerhof ]
* uscan: support zstd in more cases
.
[ Danilo Egea Gondolfo ]
* Move libgitlab-api-v4-perl to Suggests on Ubuntu (LP: #2046242)
.
[ Carlos Henrique Lima Melara ]
* uscan: add optional V prefix in @ANY_VERSION@ (Closes: #1037173)
.
[ Gioele Barabucci ]
* build-rdeps: Use all available distros by default. Restrict to unstable/sid
only if explicitly requested via the new parameter --only-devel.
(Closes: #1032396)
.
[ Diego Escalante Urrelo ]
* mk-build-deps: Actually use MKBUILDDEPS_ROOTCMD
.
[ Christian Göttsche ]
* MkOrigtargz.pm: dump newline to same output as messages
.
[ Benjamin Drung ]
* mk-origtargz/uscan: replace xpi-unpack by unzip to drop mozilla-devscripts
* uscan: Update GitHub documentation to use api.github.com
(Closes: #931091, #950880, #1019696, #1040314)
.
[ Athos Ribeiro ]
* uscan: remove duplicated example from docs
Checksums-Sha1:
ea727f00e9d6f07a5c16ac8e299bf45b6fbfc453 3340 devscripts_2.23.7.dsc
7d533cdfe9c1417e1acf997dd632e66d36a49e0d 999076 devscripts_2.23.7.tar.xz
484bdd4846efe255a2d62a65c235468d986a64bf 17562
devscripts_2.23.7_source.buildinfo
Checksums-Sha256:
e71a311476fbcae481b137a2eca7911c35c0df98f66e8a058849b1531c5104a5 3340
devscripts_2.23.7.dsc
9ce9e5135472d8647e2ffb56655e00391e8e99aa7a4a8ae605cf0e1ffd9f3609 999076
devscripts_2.23.7.tar.xz
a1af4bf2da659b5fa748501e02a5e1003b59d3ac39eec7d77a7091a490a5d522 17562
devscripts_2.23.7_source.buildinfo
Files:
7a7f1314bbc96b7f4c8724f7f2fb25ca 3340 devel optional devscripts_2.23.7.dsc
317055a6c78376e5ad4fd6cdea901c34 999076 devel optional devscripts_2.23.7.tar.xz
7145f46fa4b67f9e2c5f16355d826c69 17562 devel optional
devscripts_2.23.7_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=eUyc
-----END PGP SIGNATURE-----
--- End Message ---
