On Sun, Jul 13, 2014 at 8:59 PM, T o n g <[email protected]> wrote:

> Hi,
>
> Is it possible to separate gpg signing from package building?
>
> As I'm still trying to learn Debian package building, I've found myself
> fallen into this silly loop many times -- Thinking that the package would
> be fine, I build it with gpg signing, but only to find out minutes later
> that I need fix something and rebuild, and the cycle goes on and on.
>
> Now I'm thinking, wouldn't it be nice I always build the package without
> gpg signing, and when finally I tested everything working fine, I sign
> it. Would it be possible? Detailed steps (instead of a mere yes)
> appreciated.
>

Hi T o n g,

I agree with you!

I like to use pbuilder-dist for this, from the ubuntu-dev-tools package,
which I believe doesn't sign the package, and lets you do that after the
fact if you're happy with it.

See https://wiki.ubuntu.com/PbuilderHowto for more info about that. (Some
of the info there is Ubuntu-specific, but much is applicable for Debian,
too.)

Cheers,

Asheesh.

Reply via email to