• Bug#1107229: missing --keyring option for dpkg-source?

    From Harald Dunkel@1:229/2 to All on Tue Jun 3 13:30:01 2025
    XPost: linux.debian.bugs.dist
    From: harri@afaics.de

    Package: dpkg-dev
    Version: 1.22.19

    Trying to extract a private source package (signed by my private
    "office" key) dpkg-source forwarded a weird error message of sqv
    1.3.0-3 about a missing --keyring option:

    % dpkg-source -x fvwm3_1.1.3-1~xgo130+1.dsc
    error: the following required arguments were not provided:
    --keyring <FILE>

    Usage: sqv --keyring <FILE> --cleartext --output <FILE> <FILE>

    For more information, try '--help'.
    dpkg-source: warning: cannot verify inline signature for ./fvwm3_1.1.3-1~xgo130+1.dsc: no acceptable signature found
    dpkg-source: info: extracting fvwm3 in fvwm3-1.1.3
    dpkg-source: info: unpacking fvwm3_1.1.3.orig.tar.gz
    dpkg-source: info: unpacking fvwm3_1.1.3-1~xgo130+1.debian.tar.xz


    I did not define the sqv command line, nor is there a keyring
    option for dpkg-source, AFAIK. Maybe this could be improved.


    Regards
    Harri

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)
  • From Holger Levsen@1:229/2 to Harald Dunkel on Tue Jun 3 14:10:01 2025
    XPost: linux.debian.bugs.dist
    From: holger@layer-acht.org

    hi,

    On Tue, Jun 03, 2025 at 12:59:07PM +0200, Harald Dunkel wrote:
    Package: dpkg-dev
    Version: 1.22.19

    Trying to extract a private source package (signed by my private
    "office" key) dpkg-source forwarded a weird error message of sqv
    1.3.0-3 about a missing --keyring option:

    see #1106148 for background, this is probably a duplicate.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    I’ve said it once, and I’ll say it a thousand times: If the penalty for breaking a law is a fine, then that law only exists for the poor.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmg+4v8ACgkQCRq4Vgaa qhyycxAAlOhk/ruAcyIJBUslVK3+xIBU7hLA6U0DCXBivEm0RCI0L+QjTFY2BVw1 6VyctWpNQvxkIvnoLOLmlDNd/fXqwZQCmZkWOQP17Cffb7OJwzr7nKH1hWJLbT8M DuFBfMufCgbAr57TQy97uO3Kn+5xOwNkZCZrjkAldXAUP+Gz0zn97vG5ikybITz1 hoyvALv9aFWS76wyWJssuuM7zc6vlkTWNRp3D4LgbndUN+/GI0W0LJlHHYvKvGHY 84z77TCKdRHx92UxqacJ/bTvYlzn/Y9pz0nLCtTTddpA7BJg6bELmX2Ns3nXf7jA nOjEkrj1fSIltYxoaUoMZAiwGZ/akbvcORclMzZJ04EfhSzkfD86x6SyhWCcUrcc Ix5KKofwRGYQHwfcrKFKfteP3zm5NbREVWzGbqne8bIU69gExx5xDek6DP1Z8Vqj hzXCX9h4NACKedu9GhCHM55zRIhm4nU7Rr+xjicrbnKKnI9fzDbKuEZc5DZnxgOR lqHOS6d3NimxbHYgl1SW4QAr0HCWpV/L2twF
  • From Guillem Jover@1:229/2 to Holger Levsen on Tue Jun 3 14:20:02 2025
    XPost: linux.debian.bugs.dist
    From: guillem@debian.org

    Control: reassign 1106148 dpkg-dev/1.22.19
    Control: forcemerge 1106148 -1

    Hi!

    On Tue, 2025-06-03 at 11:56:47 +0000, Holger Levsen wrote:
    On Tue, Jun 03, 2025 at 12:59:07PM +0200, Harald Dunkel wrote:
    Package: dpkg-dev
    Version: 1.22.19

    Trying to extract a private source package (signed by my private
    "office" key) dpkg-source forwarded a weird error message of sqv
    1.3.0-3 about a missing --keyring option:

    see #1106148 for background, this is probably a duplicate.

    Indeed! This is fixed in git main, but for Debian trixie, I need to
    finish the 1.22.20 release in the 1.22.x branch, and ask for a
    pre-approval to the release team. I was planning on doing that last
    week, but had to divert my attention (due to uncalled for pressure
    to deal with something else…).

    I've got everything almost wrapped up, hopefully I can send the
    pre-approval later today.

    Thanks,
    Guillem

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)