Package: fasttrack-archive-keyring Version: 2025.01.13 Severity: wishlist Tags: patch
Hi! The attached patches cleans up the OpenPGP nomenclature usage, in package documentation and in the keyring filenames, while providing backward compatibility symlinks for the old names so that people can transition easily. Also a NEWS entry to explain all this. This should fix multiple pedantic lintian tags. :D (Remember that the version in the debian/NEWS entry will need to be updated once you open a new debian/changelog entry.) Thanks, Guillem
From 8fde42d221380eabb09761f0b4731f49c52dc191 Mon Sep 17 00:00:00 2001 From: Guillem Jover <[email protected]> Date: Wed, 14 Jan 2026 01:09:55 +0100 Subject: [PATCH 1/3] Use OpenPGP instead of GnuPG when referring to the specification The name of specification is OpenPGP, and while GnuPG is currently a widespread implementation, using a specific vendor as if was a synonym for the specification is a disservice to the whole ecosystem, more so now that GnuPG upstream has decided to get out of the IETF working group and not follow the just released OpenPGP RFC. Use OpenPGP to refer both to the specification and its artifacts. --- debian/control | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/debian/control b/debian/control index a77b2fd..5134ce0 100644 --- a/debian/control +++ b/debian/control @@ -13,8 +13,8 @@ Package: fasttrack-archive-keyring Architecture: all Depends: ${misc:Depends} Multi-Arch: foreign -Description: GnuPG archive key for Debian FastTrack Repository +Description: OpenPGP archive certificates for the Debian FastTrack Repository The Debian Fast Track repository digitally signs its Release files. - This package contains the current archive public key used for that. + This package contains the current archive certificates used for that. . You can read more information about the repository from the homepage. -- 2.51.0
From 677a7bcb2c767c0d2dc2b2ae74b8270deae24a44 Mon Sep 17 00:00:00 2001 From: Guillem Jover <[email protected]> Date: Wed, 14 Jan 2026 03:48:35 +0100 Subject: [PATCH 2/3] Pass --no-options to gpg to avoid loading the user configuration To guarantee that no user specific settings affect our invocation, we should pass --no-options so that the configuration file is not loaded. --- debian/rules | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/rules b/debian/rules index d4f38c6..5c8b289 100755 --- a/debian/rules +++ b/debian/rules @@ -11,7 +11,7 @@ override_dh_auto_build: gpg --batch --output $(CURDIR)/$(KEYRING) --dearmor $(KEYRING:.gpg=.asc) override_dh_auto_test: - gpg --no-default-keyring --keyring $(CURDIR)/$(KEYRING) --list-keys + gpg --no-options --no-default-keyring --keyring $(CURDIR)/$(KEYRING) --list-keys override_dh_install: dh_install $(KEYRING) $(KEYRING_TARGET_DIR)/ -- 2.51.0
From f81fa132dbd7ae09cf8d4fc54b65a7f6f948ea39 Mon Sep 17 00:00:00 2001 From: Guillem Jover <[email protected]> Date: Wed, 14 Jan 2026 03:47:40 +0100 Subject: [PATCH 3/3] Rename keyrings from .gpg to .pgp These keyrings contain OpenPGP certificates, and are not vendor specific, so naming them with an extension after GnuPG in detriment to the other multiple OpenPGP implementations does not promote the interoperability one would expect from that ecosystem. Given that these files are API, and will have external references, we add backwards compatibility symlinks for now, but which should be considered deprecated and should eventually (in the future) be obsoleted and removed. Add a NEWS entry explaining the transition and timeline. --- debian/NEWS | 7 +++++++ debian/rules | 11 +++++++---- 2 files changed, 14 insertions(+), 4 deletions(-) create mode 100644 debian/NEWS diff --git a/debian/NEWS b/debian/NEWS new file mode 100644 index 0000000..47b0756 --- /dev/null +++ b/debian/NEWS @@ -0,0 +1,7 @@ +fasttrack-archive-keyring (2025.01.13) unstable; urgency=medium + + Certificate (keyring) files in /usr/share/keyrings now have the + file extension .pgp, rather than .gpg. Compatibility links are + provided and will be removed after Debian 14 'forky'. + + -- Guillem Jover <[email protected]> Wed, 14 Jan 2026 03:43:46 +0100 diff --git a/debian/rules b/debian/rules index 5c8b289..bcf5513 100755 --- a/debian/rules +++ b/debian/rules @@ -2,19 +2,22 @@ # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 -KEYRING = fasttrack-archive-keyring.gpg + +KEYRING = fasttrack-archive-keyring.pgp KEYRING_TARGET_DIR = usr/share/keyrings %: dh $@ + override_dh_auto_build: - gpg --batch --output $(CURDIR)/$(KEYRING) --dearmor $(KEYRING:.gpg=.asc) + gpg --batch --output $(CURDIR)/$(KEYRING) --dearmor $(KEYRING:.pgp=.asc) + ln -s $(KEYRING) $(KEYRING:.pgp=.gpg) override_dh_auto_test: gpg --no-options --no-default-keyring --keyring $(CURDIR)/$(KEYRING) --list-keys override_dh_install: - dh_install $(KEYRING) $(KEYRING_TARGET_DIR)/ + dh_install $(KEYRING) $(KEYRING:.pgp=.gpg) $(KEYRING_TARGET_DIR)/ override_dh_clean: - dh_clean *.gpg *.gpg~ + dh_clean *.pgp *.pgp* *.gpg -- 2.51.0
