Your message dated Wed, 08 Oct 2025 09:05:06 +0000
with message-id <[email protected]>
and subject line Bug#1117400: fixed in gitsign 0.13.0-3
has caused the Debian Bug report #1117400,
regarding gitsign: FTBFS: help2man: can't get `--help' info from
/<<PKGBUILDDIR>>/debian/tmp/usr/bin/gitsign-credential-cache
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1117400: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117400
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:gitsign
Version: 0.13.0-2
Severity: serious
Tags: ftbfs forky sid
Dear maintainer:
During a rebuild of all packages in unstable, this package failed to build.
Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:
https://people.debian.org/~sanvila/build-logs/202510/
About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.
If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.
If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:gitsign, so that this is still
visible in the BTS web page for this package.
Thanks.
--------------------------------------------------------------------------------
[...]
debian/rules clean
dh clean --builddirectory=_build --buildsystem=golang
dh_auto_clean -O--builddirectory=_build -O--buildsystem=golang
dh_autoreconf_clean -O--builddirectory=_build -O--buildsystem=golang
dh_clean -O--builddirectory=_build -O--buildsystem=golang
debian/rules binary
dh binary --builddirectory=_build --buildsystem=golang
dh_update_autotools_config -O--builddirectory=_build -O--buildsystem=golang
dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
cd _build && go install -trimpath -v -p 2 github.com/sigsto
[too-long-redacted] om/sigstore/gitsign/pkg/version
internal/unsafeheader
internal/goarch
internal/cpu
[... snipped ...]
go.step.sm/crypto/x25519
go.step.sm/crypto/keyutil
go.step.sm/crypto/randutil
go.step.sm/crypto/pemutil
github.com/sigstore/gitsign/pkg/version
github.com/aws/aws-sdk-go/service/kms/kmsiface
github.com/sigstore/gitsign/internal/commands/version
github.com/sigstore/gitsign/internal/cache/api
net/rpc
github.com/tink-crypto/tink-go-awskms/integration/awskms
github.com/sigstore/rekor/pkg/signer
github.com/sigstore/rekor/pkg/sharding
github.com/sigstore/gitsign/pkg/rekor
github.com/sigstore/gitsign/internal/cache
github.com/sigstore/gitsign/internal/rekor
github.com/sigstore/gitsign/pkg/git
github.com/sigstore/gitsign/internal/signerverifier
github.com/sigstore/gitsign/pkg/fulcio
github.com/sigstore/gitsign/internal/gitsign
github.com/sigstore/gitsign/internal/fulcio
github.com/sigstore/gitsign/internal/signature
github.com/sigstore/gitsign/internal/git
github.com/sigstore/gitsign/internal/gpg
github.com/sigstore/gitsign/internal/commands/verify
os/signal
github.com/mattn/go-tty
github.com/sigstore/gitsign/internal/commands/verify-tag
github.com/sigstore/gitsign/internal/io
github.com/coreos/go-systemd/activation
github.com/sigstore/gitsign/internal/commands/root
github.com/patrickmn/go-cache
github.com/sigstore/gitsign
github.com/sigstore/gitsign/internal/cache/service
github.com/sigstore/gitsign/cmd/gitsign-credential-cache
github.com/russross/blackfriday/v2
github.com/cpuguy83/go-md2man/v2/md2man
github.com/spf13/cobra/doc
github.com/sigstore/gitsign/docs/cli
github.com/sigstore/gitsign/internal/git/gittest
github.com/sigstore/gitsign/pkg/gitsign
dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
cd _build && go test -vet=off -v -p 2 github.com/sigstore/g
[too-long-redacted] om/sigstore/gitsign/pkg/version
? github.com/sigstore/gitsign [no test files]
? github.com/sigstore/gitsign/cmd/gitsign-credential-cache [no
test files]
? github.com/sigstore/gitsign/docs/cli [no test files]
=== RUN TestStripUrl
--- PASS: TestStripUrl (0.00s)
PASS
ok github.com/sigstore/gitsign/internal 0.002s
=== RUN TestAttestCommitRef
=== RUN TestAttestCommitRef/base
LogEntry ID foo 1
=== RUN TestAttestCommitRef/noop
LogEntry ID foo 1
=== RUN TestAttestCommitRef/new_commit
LogEntry ID foo 1
--- PASS: TestAttestCommitRef (0.03s)
--- PASS: TestAttestCommitRef/base (0.00s)
--- PASS: TestAttestCommitRef/noop (0.00s)
--- PASS: TestAttestCommitRef/new_commit (0.00s)
=== RUN TestAttestTreeRef
=== RUN TestAttestTreeRef/base
LogEntry ID foo 1
=== RUN TestAttestTreeRef/noop
LogEntry ID foo 1
=== RUN TestAttestTreeRef/new_commit_same_tree
LogEntry ID foo 1
=== RUN TestAttestTreeRef/new_commit_new_tree
LogEntry ID foo 1
--- PASS: TestAttestTreeRef (0.01s)
--- PASS: TestAttestTreeRef/base (0.00s)
--- PASS: TestAttestTreeRef/noop (0.00s)
--- PASS: TestAttestTreeRef/new_commit_same_tree (0.00s)
--- PASS: TestAttestTreeRef/new_commit_new_tree (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/attest 0.053s
=== RUN TestCache
Get
sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache
Store
sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache
Get
sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache
gitsign-credential-cache: found credential!
Get
sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache
gitsign-credential-cache: found credential!
--- PASS: TestCache (0.16s)
PASS
ok github.com/sigstore/gitsign/internal/cache 0.159s
? github.com/sigstore/gitsign/internal/cache/api [no test files]
? github.com/sigstore/gitsign/internal/cache/service [no test files]
? github.com/sigstore/gitsign/internal/cert [no test files]
? github.com/sigstore/gitsign/internal/commands/attest [no test files]
? github.com/sigstore/gitsign/internal/commands/initialize [no
test files]
? github.com/sigstore/gitsign/internal/commands/root [no test files]
=== RUN TestShow
=== RUN TestShow/fulcio-cert
=== RUN TestShow/gpg
--- PASS: TestShow (0.00s)
--- PASS: TestShow/fulcio-cert (0.00s)
--- PASS: TestShow/gpg (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/commands/show 0.011s
? github.com/sigstore/gitsign/internal/commands/verify [no test files]
? github.com/sigstore/gitsign/internal/commands/verify-tag [no
test files]
? github.com/sigstore/gitsign/internal/commands/version [no test files]
=== RUN TestGet
--- PASS: TestGet (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/config 0.010s
=== RUN TestSign
--- PASS: TestSign (0.00s)
=== RUN TestSignDetached
--- PASS: TestSignDetached (0.00s)
=== RUN TestSignDetachedWithOpenSSL
--- PASS: TestSignDetachedWithOpenSSL (0.03s)
=== RUN TestSignRemoveHeaders
--- PASS: TestSignRemoveHeaders (0.00s)
=== RUN TestAddTimestamps
--- PASS: TestAddTimestamps (0.02s)
=== RUN TestTimestampsVerifications
--- PASS: TestTimestampsVerifications (0.23s)
=== RUN TestVerify
--- PASS: TestVerify (0.00s)
=== RUN TestVerifyGPGSMAttached
--- PASS: TestVerifyGPGSMAttached (0.00s)
=== RUN TestVerifyGPGSMDetached
--- PASS: TestVerifyGPGSMDetached (0.00s)
=== RUN TestVerifyGPGSMNoCerts
--- PASS: TestVerifyGPGSMNoCerts (0.00s)
=== RUN TestVerifyOpenSSLAttached
--- PASS: TestVerifyOpenSSLAttached (0.00s)
=== RUN TestVerifyOpenSSLDetached
--- PASS: TestVerifyOpenSSLDetached (0.00s)
=== RUN TestVerifyChain
--- PASS: TestVerifyChain (0.03s)
=== RUN TestVerifyDSAWithSHA1
--- PASS: TestVerifyDSAWithSHA1 (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/fork/ietf-cms 1.247s
=== RUN TestRequestDo
--- PASS: TestRequestDo (0.00s)
=== RUN TestRequestMatches
--- PASS: TestRequestMatches (0.00s)
=== RUN TestGenerateNonce
--- PASS: TestGenerateNonce (0.00s)
=== RUN TestMessageImprint
--- PASS: TestMessageImprint (0.00s)
=== RUN TestErrorResponse
--- PASS: TestErrorResponse (0.00s)
=== RUN TestPKIFreeText
--- PASS: TestPKIFreeText (0.00s)
=== RUN TestTSTInfo
--- PASS: TestTSTInfo (0.00s)
=== RUN TestParseTimestampSymantec
--- PASS: TestParseTimestampSymantec (0.00s)
=== RUN TestParseTimestampSymantecWithCerts
--- PASS: TestParseTimestampSymantecWithCerts (0.00s)
=== RUN TestParseTimestampDigicert
--- PASS: TestParseTimestampDigicert (0.00s)
=== RUN TestParseTimestampComodo
--- PASS: TestParseTimestampComodo (0.00s)
=== RUN TestParseTimestampGlobalSign
--- PASS: TestParseTimestampGlobalSign (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp 0.005s
? github.com/sigstore/gitsign/internal/fulcio [no test files]
=== RUN TestNew
=== RUN TestNew/FromFile
=== RUN TestNew/Static
=== RUN TestNew/None
--- PASS: TestNew (0.06s)
--- PASS: TestNew/FromFile (0.00s)
--- PASS: TestNew/Static (0.00s)
--- PASS: TestNew/None (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/fulcio/fulcioroots 0.058s
? github.com/sigstore/gitsign/internal/git [no test files]
? github.com/sigstore/gitsign/internal/git/gittest [no test files]
=== RUN TestVerify
--- PASS: TestVerify (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/gitsign 0.032s
? github.com/sigstore/gitsign/internal/gpg [no test files]
? github.com/sigstore/gitsign/internal/io [no test files]
? github.com/sigstore/gitsign/internal/rekor [no test files]
=== RUN TestOID
--- PASS: TestOID (0.00s)
=== RUN TestConvert
--- PASS: TestConvert (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/rekor/oid 0.007s
=== RUN TestMatchSAN
=== RUN TestMatchSAN/email_match
=== RUN TestMatchSAN/uri_match
=== RUN TestMatchSAN/no_match
--- PASS: TestMatchSAN (0.00s)
--- PASS: TestMatchSAN/email_match (0.00s)
--- PASS: TestMatchSAN/uri_match (0.00s)
--- PASS: TestMatchSAN/no_match (0.00s)
PASS
ok github.com/sigstore/gitsign/internal/signature 0.010s
? github.com/sigstore/gitsign/internal/signerverifier [no test files]
=== RUN TestKeyAlgorithm
=== RUN TestKeyAlgorithm/ecdsa
=== RUN TestKeyAlgorithm/fulcio
=== RUN TestKeyAlgorithm/#00
--- PASS: TestKeyAlgorithm (0.00s)
--- PASS: TestKeyAlgorithm/ecdsa (0.00s)
--- PASS: TestKeyAlgorithm/fulcio (0.00s)
--- PASS: TestKeyAlgorithm/#00 (0.00s)
=== RUN TestGetCert
--- PASS: TestGetCert (0.00s)
PASS
ok github.com/sigstore/gitsign/pkg/fulcio 0.004s
=== RUN TestObjectHash
=== RUN TestObjectHash/tag
=== RUN TestObjectHash/commit
--- PASS: TestObjectHash (0.00s)
--- PASS: TestObjectHash/tag (0.00s)
--- PASS: TestObjectHash/commit (0.00s)
=== RUN TestSignVerify
=== RUN TestSignVerify/detached(true)
=== RUN TestSignVerify/detached(true)/VerifySignature
=== RUN TestSignVerify/detached(true)/CertVerifier.Verify
=== RUN TestSignVerify/detached(false)
=== RUN TestSignVerify/detached(false)/VerifySignature
=== RUN TestSignVerify/detached(false)/CertVerifier.Verify
--- PASS: TestSignVerify (0.22s)
--- PASS: TestSignVerify/detached(true) (0.00s)
--- PASS: TestSignVerify/detached(true)/VerifySignature (0.00s)
--- PASS: TestSignVerify/detached(true)/CertVerifier.Verify (0.00s)
--- PASS: TestSignVerify/detached(false) (0.00s)
--- PASS: TestSignVerify/detached(false)/VerifySignature (0.00s)
--- PASS: TestSignVerify/detached(false)/CertVerifier.Verify (0.00s)
PASS
ok github.com/sigstore/gitsign/pkg/git 0.227s
? github.com/sigstore/gitsign/pkg/gitsign [no test files]
? github.com/sigstore/gitsign/pkg/predicate [no test files]
? github.com/sigstore/gitsign/pkg/rekor [no test files]
=== RUN TestVersionText
--- PASS: TestVersionText (0.00s)
=== RUN TestEnv
--- PASS: TestEnv (0.00s)
PASS
ok github.com/sigstore/gitsign/pkg/version 0.002s
create-stamp debian/debhelper-build-stamp
dh_testroot -O--builddirectory=_build -O--buildsystem=golang
dh_prep -O--builddirectory=_build -O--buildsystem=golang
dh_auto_install -O--builddirectory=_build -O--buildsystem=golang
cd _build && mkdir -p /<<PKGBUILDDIR>>/debian/tmp/usr
cd _build && cp -r bin /<<PKGBUILDDIR>>/debian/tmp/usr
dh_install -O--builddirectory=_build -O--buildsystem=golang
debian/rules execute_after_dh_install
make[1]: Entering directory '/<<PKGBUILDDIR>>'
rm -fv /<<PKGBUILDDIR>>/debian/gitsign/usr/bin/cli
removed '/<<PKGBUILDDIR>>/debian/gitsign/usr/bin/cli'
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
dh_installdocs -O--builddirectory=_build -O--buildsystem=golang
dh_installchangelogs -O--builddirectory=_build -O--buildsystem=golang
debian/rules execute_before_dh_installman-arch
make[1]: Entering directory '/<<PKGBUILDDIR>>'
mkdir -pv /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1
mkdir: created directory '/<<PKGBUILDDIR>>/debian/tmp/usr/share/man'
mkdir: created directory '/<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1'
help2man --version-string="0.13.0-2" \
--no-info \
--name="Keyless Git signing using Sigstore" \
--output /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1/gitsign.1 \
/<<PKGBUILDDIR>>/debian/tmp/usr/bin/gitsign
help2man --version-string="0.13.0-2" \
--no-info \
--name="Gitsign(1) credential caching helper" \
--output
/<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1/gitsign-credential-cache.1 \
/<<PKGBUILDDIR>>/debian/tmp/usr/bin/gitsign-credential-cache
help2man: can't get `--help' info from
/<<PKGBUILDDIR>>/debian/tmp/usr/bin/gitsign-credential-cache
Try `--no-discard-stderr' if option outputs to stderr
make[1]: *** [debian/rules:18: execute_before_dh_installman-arch] Error 255
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
make: *** [debian/rules:6: binary] Error 2
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2
--------------------------------------------------------------------------------
--- End Message ---
--- Begin Message ---
Source: gitsign
Source-Version: 0.13.0-3
Done: Simon Josefsson <[email protected]>
We believe that the bug you reported is fixed in the latest version of
gitsign, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon Josefsson <[email protected]> (supplier of updated gitsign package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 08 Oct 2025 08:40:12 +0200
Source: gitsign
Architecture: source
Version: 0.13.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Simon Josefsson <[email protected]>
Closes: 1117400
Changes:
gitsign (0.13.0-3) unstable; urgency=medium
.
* Invoke help2man with --no-discard-stderr. Closes: #1117400.
* Modernize Salsa CI.
* Drop Rules-Requires-Root: no.
* Use watch v5.
* Drop unused lintian override.
* Fix paths in manpage.
Checksums-Sha1:
70391c8ca81ce6bc744b6a836e32fe9da23e49e1 2803 gitsign_0.13.0-3.dsc
4beb113d2fb791029e4ed039c305337d108da38b 4328 gitsign_0.13.0-3.debian.tar.xz
112eed1cd0d96ba56ccb87c194745580c7395730 463596 gitsign_0.13.0-3.git.tar.xz
fe1e9ef3fa4433f8d2aa22ab0f1dafbefb5154f6 18222
gitsign_0.13.0-3_source.buildinfo
Checksums-Sha256:
7450af0a5efc1fadfd3839b6903c975f42611bad96bc2c8905e2999732598233 2803
gitsign_0.13.0-3.dsc
379d6147d74244f874d03698ed2df93cb8a0a619359a6625ba2b7092ad01b3a9 4328
gitsign_0.13.0-3.debian.tar.xz
c23e0c5f4afea95ed08890746d0bea76ec8ceaa9e9f2afefb06c78d115f93003 463596
gitsign_0.13.0-3.git.tar.xz
2f59f86a382a1af892aaf3af30037207742b8784c14592f2d67b2106f7c28f11 18222
gitsign_0.13.0-3_source.buildinfo
Files:
52126ff388c6b2ad065075f1b4d9bb55 2803 vcs optional gitsign_0.13.0-3.dsc
963cc62fa05897511ba352dc19de8e9a 4328 vcs optional
gitsign_0.13.0-3.debian.tar.xz
1b17dbe5e33e35fdde575db98f794ac9 463596 vcs optional
gitsign_0.13.0-3.git.tar.xz
be02ce9060a866a3b8e368e086b92929 18222 vcs optional
gitsign_0.13.0-3_source.buildinfo
Git-Tag-Info: tag=386946eb5ec081fc55f2bb3eb37baf70f13a78e5
fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <[email protected]>
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmjmErwACgkQYG0ITkaD
wHlPzRAApTfq2Y1M9zsxptabC/nO39cJD0SXPTL6S/wbwQplt11i5jYHn8AKK5LR
2yKOcMAOs03OCuNztGSl0Nnhrz4Qfm4/YCoWAmO6yVqC3/wh7jeI3mvbev2JmGs0
nAfDn9U8E1mTaQByNE2iOzoqbcdvlZpxZtIBEymCeuNpzSYIslMJeCnzjoIwbcMF
WD3qC3WmNMzOJJQFI3QrRciZLEFBXAl64alM2GloTn5Wy617YS6tK5l/sJbYSdsT
YsoGP1mSO9OEMgQs/P62CVPld3RC1ty4sobif6yTQNiEOjAIWSlWN5UFnv1iVSXd
8vyvIFZK1mck+XCAXeFeb62DFaqYG+hsrEQK+8pmzQ2PZ5VjLCfQvuwC16UiTLcG
QkKJq688BPhvCCZ7vUAy7hxgy7cAPWkzSBdtRS+E3VqNPxUTT3xVbbNKDnITJe8v
hm8vT+klrj7rYOWs/FqOikJQQ7nYQnh/0+Gz+Y4vVlVkwFwi9lMiFRNkCnrzcCy1
Oui/ljDXMs/Ey/hrhFnvgHutaTBlYMdrJQWuhB0gXpnjuJ1uE7lBC47Dh4iUtBNz
lWl0dM32N3a7YKeuRxRR3DN3w/Q03XTRD+xOTJrJCaIa2tn2DuW8RXk6Gys2aUeG
T3EC4BVyM6JsdHeh23C+4vpatxUWfDRcFp9ia8QlQKhY21I0Vog=
=Zfg5
-----END PGP SIGNATURE-----
pgpk6th34gKFd.pgp
Description: PGP signature
--- End Message ---