Review swaps: perl-Parse-DebControl, devscripts, debian-keyring, ubuntu-keyring, jetring + question: where to install keyrings?

[Zbigniew Jędrzejewski-Szmek]

On Mon, Sep 23, 2013 at 12:14:29AM +0200, Sandro Mani wrote:
> 
> On 20.09.2013 06:37, Zbigniew Jędrzejewski-Szmek wrote:
> >On Thu, Sep 19, 2013 at 06:41:03PM +0200, Sandro Mani wrote:
> >>Hi,
> >>
> >>In the hope to continue the effort of getting pbuilder (and hence an
> >>easy way to build deb packages from fedora) into the repos (review
> >>here: [1]), I've packaged devscripts, debian-keyring, ubuntu-keyring
> >>and jetring. Reviews are here:
> >>
> >>- jetring: https://bugzilla.redhat.com/show_bug.cgi?id=1009996
> >>- debian-keyring: https://bugzilla.redhat.com/show_bug.cgi?id=1009997
> >>- ubuntu-keyring: https://bugzilla.redhat.com/show_bug.cgi?id=1009998
> >>- perl-Parse-DebControl: https://bugzilla.redhat.com/show_bug.cgi?id=1009999
> >>- devscripts: https://bugzilla.redhat.com/show_bug.cgi?id=1010000
> >>
> >>A question concerning the keyrings: currently, the only other
> >>package (afaics) containing distro keyrings is archlinux-keyring.
> >>That package installs the keyrings in /usr/share/pacman/keyrings.
> >Pacman installs the keyrings into /usr/share/pacman/keyrings
> >because that's what Arch does. I guess that archlinux.gpg may
> >move to /usr/share/keyrings, but there are other files (lists
> >of trusted and revoked keys), which are specific to pacman's libalpm,
> >so I think they deserve a directory on it's own. If archlinux.gpg
> >moves, it can be symlinked into /usr/share/pacman/keyrings.
> >
> >>The debian-keyring and ubuntu-keyring packages I've posted for
> >>review install the keyrings in /usr/share/keyrings. This directory
> >>is however unowned. I see two options:
> >>- install {debian,ubuntu} keyrings in
> >>/usr/share/{ubuntu,debian}/keyrings, and have them own the
> >>directories
> >>- have gnupg own the directory /usr/share/keyrings (and possibly
> >>have archlinux-keyring also install the keyrings there)
> >This has the downside that it'll add the dependency on gnupg,
> >which is not great. Maybe simply create a keyrings-filesystem
> >package with this directory and have whoever installs keyrings
> >depend on it.
> >
> 
> Any other opinions on this?
> Or would it be appropriate to file a fpc
> ticket for this?

I guess that we two are currently the only interested parties. I'm
sure we can agree on a solution without involing the FPC. An FPC
ticket means probably a month delay, and I don't think there's
anything controversial here.

Please see https://bugzilla.redhat.com/show_bug.cgi?id=998690#c3,
for some rationale for a -filesystem package.

I'll try to do some reviews of the remaining packages tomorrow. This
should help to finish this faster.

Zbyszek