Review swaps: perl-Parse-DebControl, devscripts, debian-keyring, ubuntu-keyring, jetring + question: where to install keyrings?

Sandro Mani manisandro at gmail.com
Sun Sep 22 22:14:29 UTC 2013


On 20.09.2013 06:37, Zbigniew Jędrzejewski-Szmek wrote:
> On Thu, Sep 19, 2013 at 06:41:03PM +0200, Sandro Mani wrote:
>> Hi,
>>
>> In the hope to continue the effort of getting pbuilder (and hence an
>> easy way to build deb packages from fedora) into the repos (review
>> here: [1]), I've packaged devscripts, debian-keyring, ubuntu-keyring
>> and jetring. Reviews are here:
>>
>> - jetring: https://bugzilla.redhat.com/show_bug.cgi?id=1009996
>> - debian-keyring: https://bugzilla.redhat.com/show_bug.cgi?id=1009997
>> - ubuntu-keyring: https://bugzilla.redhat.com/show_bug.cgi?id=1009998
>> - perl-Parse-DebControl: https://bugzilla.redhat.com/show_bug.cgi?id=1009999
>> - devscripts: https://bugzilla.redhat.com/show_bug.cgi?id=1010000
>>
>> A question concerning the keyrings: currently, the only other
>> package (afaics) containing distro keyrings is archlinux-keyring.
>> That package installs the keyrings in /usr/share/pacman/keyrings.
> Pacman installs the keyrings into /usr/share/pacman/keyrings
> because that's what Arch does. I guess that archlinux.gpg may
> move to /usr/share/keyrings, but there are other files (lists
> of trusted and revoked keys), which are specific to pacman's libalpm,
> so I think they deserve a directory on it's own. If archlinux.gpg
> moves, it can be symlinked into /usr/share/pacman/keyrings.
>
>> The debian-keyring and ubuntu-keyring packages I've posted for
>> review install the keyrings in /usr/share/keyrings. This directory
>> is however unowned. I see two options:
>> - install {debian,ubuntu} keyrings in
>> /usr/share/{ubuntu,debian}/keyrings, and have them own the
>> directories
>> - have gnupg own the directory /usr/share/keyrings (and possibly
>> have archlinux-keyring also install the keyrings there)
> This has the downside that it'll add the dependency on gnupg,
> which is not great. Maybe simply create a keyrings-filesystem
> package with this directory and have whoever installs keyrings
> depend on it.
>

Any other opinions on this? Or would it be appropriate to file a fpc 
ticket for this?

Thanks,
Sandro



More information about the devel mailing list