Review swaps: perl-Parse-DebControl, devscripts, debian-keyring, ubuntu-keyring, jetring + question: where to install keyrings?

Zbigniew Jędrzejewski-Szmek zbyszek at in.waw.pl
Fri Sep 20 04:37:01 UTC 2013


On Thu, Sep 19, 2013 at 06:41:03PM +0200, Sandro Mani wrote:
> Hi,
> 
> In the hope to continue the effort of getting pbuilder (and hence an
> easy way to build deb packages from fedora) into the repos (review
> here: [1]), I've packaged devscripts, debian-keyring, ubuntu-keyring
> and jetring. Reviews are here:
> 
> - jetring: https://bugzilla.redhat.com/show_bug.cgi?id=1009996
> - debian-keyring: https://bugzilla.redhat.com/show_bug.cgi?id=1009997
> - ubuntu-keyring: https://bugzilla.redhat.com/show_bug.cgi?id=1009998
> - perl-Parse-DebControl: https://bugzilla.redhat.com/show_bug.cgi?id=1009999
> - devscripts: https://bugzilla.redhat.com/show_bug.cgi?id=1010000
> 
> A question concerning the keyrings: currently, the only other
> package (afaics) containing distro keyrings is archlinux-keyring.
> That package installs the keyrings in /usr/share/pacman/keyrings.
Pacman installs the keyrings into /usr/share/pacman/keyrings
because that's what Arch does. I guess that archlinux.gpg may
move to /usr/share/keyrings, but there are other files (lists
of trusted and revoked keys), which are specific to pacman's libalpm,
so I think they deserve a directory on it's own. If archlinux.gpg
moves, it can be symlinked into /usr/share/pacman/keyrings.

> The debian-keyring and ubuntu-keyring packages I've posted for
> review install the keyrings in /usr/share/keyrings. This directory
> is however unowned. I see two options:
> - install {debian,ubuntu} keyrings in
> /usr/share/{ubuntu,debian}/keyrings, and have them own the
> directories
> - have gnupg own the directory /usr/share/keyrings (and possibly
> have archlinux-keyring also install the keyrings there)
This has the downside that it'll add the dependency on gnupg,
which is not great. Maybe simply create a keyrings-filesystem
package with this directory and have whoever installs keyrings
depend on it.

Zbyszek

> [1] https://bugzilla.redhat.com/show_bug.cgi?id=969718


More information about the devel mailing list