XPost: linux.debian.devel.release

This is a multi-part message in MIME format.
Package: release.debian.org
User: release.debian.org@packages.debian.org
Usertags: unblock

Hi,

tl;dr: debian-archive-keyring 2025.1 did change some file content
arround, this needs an update in open-infrastructure-compute-tools and
the new version contains only this exact fix (debdiff attached).

please unblock open-infrastructure-compute-tools 20250604-1.

long story:

* o-i-compute-tools creates containers by (de)bootstrapping them
during which it also populates apt sources.lists.

* with (almost) making Signed-by mandatory for apt sources in trixie
(I like that, thanks!), the keyrings need to be referenced in
sources.lists.

* debian-archive-keyring contains each keys in individual files,
as well as one file containing all keys.

* from a theoretical point of view, it could be argued, that
using the exact individual key for each of debians suite
repositories in sources.list entry is more "secure" than using the
whole keyring for all debian repositories indiscriminately.

* the current version of o-i-compute-tools uses individual keys
for each debian suite, this works fine with anything upto and
including bookworm as well as with trixie/sid for anything with
debian-archive-keyring < 2025.1.

* for trixie/sid and debian-archive-keyring >= 2025.1 this doesn't
work anymore.

* debian, on official media, uses the whole keyring and doesn't
distinguish matching individual suite repos and keys. therefore,
I've changed this in o-i-compute-tools to do the same and that's
what's in the debdiff.

* with the updated package, containers for all currently supported
debian releases, including trixie, can be created (again). without
it, trixie containers cannot be build successfully.

Regards,
Daniel
H4sICI/fP2gAA2RlYmRpZmYA5Vf7b9pIEP7Z/itGXKQ2Z9bYDlDiPERCaMvpEiIePVXVXeXY i1kV1pZ33Wsu8L/f7gLBPEJ5nE49HUK22N35ZnbmmwcB6fUA3SUpRDGmiNBe4jGepD5PE4z8 aBinHCMeRQOGHMspWbZTLtTeX929q//afGfyb3xbwbJVXBTUEUJ7a9XkMrJs5JTBsVzbcZ2K ac0+YFi2ZemGYext3VRBGVlFsN64JcstlRcUOEJBtQrIzp+AYedtG6pV3ZhLaTceJXgA1146 9CiF80D9Nh8mv6trDDMp5pe6oRvaz9DCA+wxQkP4ihNGIgpzaFOd+QRLGn5Xgt048LiUiz3e h16UwBf8mMiFHhlgplYo/hMnEOAH4lHkJX6ffMVodiz2/C9eKE4SKo/4Ee2BeHCPUCH0kJJB gJifkJibSuEtoWRI/pKi4njFcabAwKI08bfE0WEe0L09Bzps8JyENvVgH8J/qLfajebdrnTP iO1K9ozoMtUtt1g+lOqr8M9Et13LXk90QXPJ8WcjJ2yXePt5dUKTgt/3aIgHUbjLBZZld/Xv svyykyvie6iTX9Dx7GnHtU82lZRTVVG+qxBezzQi+xgYCc4gTUJM/ceLIQ5IOpTVAkAkKk5C mRZpLJCwN1zIDymv6goIR65PwOrkQmaUhJcAv+EgD+Imv6QTgOcrTS8iUnpb00VAXjJdpLQ0 vRsPIi+QxvNIntszj1nfS3AhW3pYYVaadgjsBphdebgBaomS1qlbtA6l5PfVzdhZdNzienaW rJO8/QYM+VYUhXZKOGYuHD3dX7Xqd53PN412Z6xDTRgRUUx5dk88r8Te/Y0IoFinkW60SUhx gK4fXSikLJlaOe1HrLC+T5lxGOtQb74VHEEa6cEnQBhyR083jVa91mm2Po63AFs0GTHuPQyw GcZhTrRTpPE+pjrSke9xuLxcQsfcL3gxL0z7nDkgjJvBVIM5Xc3B+bmyEu12yxcN05FCE8b1 iHiB5ntM3fu2eVMf50S3FWtanERhghlDA0LTb8fCRyp0ldP8iYhlqSIGlpKKnZYJy0Xu6DX2 +1E2WLX3jQ91tdsewwgYDqSbX7FRfgSj8NVxbg4hLV2FkKutxnW3I/rNIgJ6EJNGHCWcjUYK aOrnw9z8E2wnIV3YeYwlb8WGjrqtRpamt41Wq9kai7CtJzfaQG6UIfdztP7HDL3qdpq3V51G 7XO72+jU2xc5FWxNjqJTjFb9vikHxWXmtcdixtx0TilfJwZaEMlMmKVHBmCSJYamaYswx2pt jblHT8tr4yULchPRszPZ91aAUSqHcsyO1d5eCmYQuQmEUCQTunxSyjui45ZtR9ZkldCKEbBW yyw1V5Vl8/IPWMzHw1hlHJ7TxtY5LcaFTE7DCzmdaVgrnvhXu9Y/VRS8lEdD8a/Pn9eFH6cw LBg3rw2yOIB6iFe7XhOx6nzMFAhF74qVt8uC3iV746iBGPbThPDH/2T0Zsb/2GFcb+UL8Vyd Sf4GmmUYvmkSAAA=

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)