Bug#870281: uscan: symlink/rename detached upstream signature files when symlinking/renaming the orig file
On Mon 2017-07-31 16:33:44 +0200, Maximiliano Curia wrote: > uscan checks the detached upstream signature with the > debian/upstream/signing-key.asc keyring when downloading a new version, which > is great. But the file is then not renamed/symlinked so dpkg-source can't use > this signature file, so it's then not included in the .changes files. > > Please, when renaming/symlinking the downloaded file, do the same with the > downloaded detached upstream signature. just chiming in to say that i think this is the right change to make -- we should make it as easy as possible to include the upstream package signatures in the debian archive. ideally debian developers won't even have to think about it :) --dkg signature.asc Description: PGP signature
Bug#870281: uscan: symlink/rename detached upstream signature files when symlinking/renaming the orig file
On Fri, Aug 04, 2017 at 07:03:53PM +0200, Maximiliano Curia wrote:
> ¡Hola Osamu!
>
> dpkg-source -b is called by dpkg-buildpackage to generate the source
> package. dpkg-source would pick the orig files in the target directory and
> it's corresponding orig*.{pgp,asc} files.
OK. I got your point. Is this new feature? Good.
Regards,
Osamu
Bug#870281: uscan: symlink/rename detached upstream signature files when symlinking/renaming the orig file
¡Hola Osamu!
El 2017-08-05 a las 01:18 +0900, Osamu Aoki escribió:
On Mon, Jul 31, 2017 at 04:33:44PM +0200, Maximiliano Curia wrote:
Package: devscripts
Version: 2.17.9
Severity: normal
uscan checks the detached upstream signature with the
debian/upstream/signing-key.asc keyring when downloading a new version,
which is great. But the file is then not renamed/symlinked so dpkg-source
can't use this signature file, so it's then not included in the .changes
files.
Please, when renaming/symlinking the downloaded file, do the same with the
downloaded detached upstream signature.
Excuse me .. I don't get what you are after.
dpkg-source - Debian source package (.dsc) manipulation tool
dpkg-source -x ***.dsc extracts the source from the tarball which is
signed by the packager (not upstream). Why you are using dpkg-source on
the upstream source tarball?
dpkg-source -b is called by dpkg-buildpackage to generate the source package.
dpkg-source would pick the orig files in the target directory and it's
corresponding orig*.{pgp,asc} files.
Happy hacking,
--
"People get lost in thought because it is unfamiliar territory."
-- Fix's Principle
Saludos /\/\ /\ >< `/
signature.asc
Description: PGP signature
Bug#870281: uscan: symlink/rename detached upstream signature files when symlinking/renaming the orig file
Hi, On Mon, Jul 31, 2017 at 04:33:44PM +0200, Maximiliano Curia wrote: > Package: devscripts > Version: 2.17.9 > Severity: normal > > Hi, > > uscan checks the detached upstream signature with the > debian/upstream/signing-key.asc keyring when downloading a new version, > which is great. But the file is then not renamed/symlinked so dpkg-source > can't use this signature file, so it's then not included in the .changes > files. > > Please, when renaming/symlinking the downloaded file, do the same with the > downloaded detached upstream signature. Excuse me .. I don't get what you are after. dpkg-source - Debian source package (.dsc) manipulation tool dpkg-source -x ***.dsc extracts the source from the tarball which is signed by the packager (not upstream). Why you are using dpkg-source on the upstream source tarball? Regards, Osamu
Bug#870281: uscan: symlink/rename detached upstream signature files when symlinking/renaming the orig file
Package: devscripts Version: 2.17.9 Severity: normal Hi, uscan checks the detached upstream signature with the debian/upstream/signing-key.asc keyring when downloading a new version, which is great. But the file is then not renamed/symlinked so dpkg-source can't use this signature file, so it's then not included in the .changes files. Please, when renaming/symlinking the downloaded file, do the same with the downloaded detached upstream signature. Happy hacking, -- Package-specific info: --- /etc/devscripts.conf --- --- ~/.devscripts --- BTS_CACHE_MODE=full DEBSIGN_KEYID=B29B232A DEBUILD_PREPEND_PATH=/usr/lib/ccache DEBCHANGE_RELEASE_HEURISTIC=changelog DEBCHANGE_MULTIMAINT_MERGE=yes DEBCHANGE_MAINTTRAILER=yes -- System Information: Debian Release: 9.1 APT prefers stable-debug APT policy: (600, 'stable-debug'), (600, 'proposed-updates'), (600, 'stable'), (60, 'testing-debug'), (60, 'testing'), (50, 'unstable-debug'), (50, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages devscripts depends on: ii dpkg-dev 1.18.24 ii libc6 2.24-11+deb9u1 ii libfile-homedir-perl 1.00-1 ii perl 5.24.1-3+deb9u1 ii python3 3.5.3-1 Versions of packages devscripts recommends: ii apt 1.4.7 ii at 3.1.20-3 ii curl7.52.1-5 ii dctrl-tools 2.24-2+b1 ii debian-keyring 2017.05.28 ii dput0.12.1 ii dupload 2.8.4 ii equivs 2.0.9+nmu1 ii fakeroot1.21-3.1 ii file1:5.30-1 ii gnupg 2.1.18-6 ii gnupg2 2.1.18-6 ii libdistro-info-perl 0.14 ii libdpkg-perl1.18.24 ii libencode-locale-perl 1.05-1 ii libgit-wrapper-perl 0.047-1 ii liblist-compare-perl0.53-1 ii liblwp-protocol-https-perl 6.06-2 ii libsoap-lite-perl 1.20-1 ii liburi-perl 1.71-1 ii libwww-perl 6.15-1 ii licensecheck3.0.29-1 ii lintian 2.5.50.4 ii man-db 2.7.6.1-2 ii patch 2.7.5-1+b2 ii patchutils 0.3.4-2 ii python3-debian 0.1.30 ii python3-magic 1:5.30-1 ii python3-unidiff 0.5.2-1 ii sensible-utils 0.0.9 ii strace 4.15-2 ii unzip 6.0-21 ii wdiff 1.2.2-2 ii wget1.19.1-3 ii xz-utils5.2.2-1.2+b1 Versions of packages devscripts suggests: ii adequate 0.15.1 ii autopkgtest 4.4 pn bls-standalone ii bsd-mailx [mailx]8.1.2-0.20160123cvs-4 ii build-essential 12.3 pn check-all-the-things pn cvs-buildpackage pn devscripts-el pn diffoscope pn disorderfs pn dose-extra pn duck pn faketime ii gnuplot 5.0.5+dfsg1-6+deb9u1 ii gpgv 2.1.18-6 pn how-can-i-help ii libauthen-sasl-perl 2.1600-1 ii libfile-desktopentry-perl0.22-1 pn libnet-smtps-perl pn libterm-size-perl ii libtimedate-perl 2.3000-2 pn libyaml-syck-perl pn mozilla-devscripts ii mutt 1.8.0-1 ii openssh-client [ssh-client] 1:7.4p1-10+deb9u1 ii piuparts 0.77 ii quilt0.63-8 pn ratt pn reprotest ii svn-buildpackage 0.8.6 ii w3m 0.5.3-34 -- no debconf information -- "The most important thing in the programming language is the name. A language will not succeed without a good name. I have recently invented a very good name and now I am looking for a suitable language." -- Donald Knuth Saludos /\/\ /\ >< `/ signature.asc Description: PGP signature
