Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rework grml-keyring package #21

Merged
merged 5 commits into from
Mar 10, 2025
Merged

Rework grml-keyring package #21

merged 5 commits into from
Mar 10, 2025

Conversation

mika
Copy link
Member

@mika mika commented Mar 10, 2025

  • depend on base-files package newer than jessie
  • d/rules: drop gzip workaround for older releases
  • Provide debian/README.Debian to document grml.sources situation
  • Provide debian/NEWS to announce grml.sources change
  • Drop /etc/apt/sources.list.d/grml.sources

As discussed in issues and at Grml online meeting

mika added 4 commits March 10, 2025 09:57
As requested by users, we no longer want to ship
/etc/apt/sources.list.d/grml.sources by default,

It caused problems on existing systems, as
/etc/grml/apt/sources.list.d/grml.sources might be present next to
/etc/grml/apt/sources.list.d/grml.list:

| E: Conflicting values set for option Signed-By regarding source http://deb.grml.org/ grml-stable: /etc/apt/keyrings/grml.gpg != /usr/share/keyrings/grml-archive-keyring.pgp
| E: The list of sources could not be read.

On the other side, it prevents users from controlling their own
sources.list setup, if they don't want to go with our defaults.

Also see #18
xz support is present since at least Debian/jessie, so drop the `-Zgzip`
workaround, which should no longer be relevant for us.
@mika mika requested review from zeha and jkirk March 10, 2025 09:46
As of Debian stretch the deb822 syntax for APT's sources.list
configuration is supported, as used by our grml.sources file.
But even with the older APT syntax, on Debian/jessie systems the usage
of our new repository key (40CC7451383EE22A512C95D6C86CE754CF55033A in
ed25519 format) fails:

  # cat /etc/apt/sources.list.d/grml.list
  deb     [signed-by=/usr/share/keyrings/grml-archive-keyring.gpg] http://deb.grml.org/ grml-testing main

  # apt-key add /usr/share/keyrings/grml-archive-keyring.gpg
  gpg: key CF55033A: no valid user IDs

  # apt-key add /usr/share/keyrings/grml-archive-keyring.pgp
  gpg: [don't know]: invalid packet (ctb=2d)
  gpg: keydb_get_keyblock failed: eof
  gpg: key CF55033A: no valid user IDs

So let's depend on base-files as of Debian stretch (v9) or newer, to
avoid someone trying to use our current grml-keyring package on jessie
or older.
@mika mika merged commit 9db338d into master Mar 10, 2025
2 checks passed
@mika mika deleted the mika/apt-sources branch March 10, 2025 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants