[buildd-tools-devel] Bug#834898: propellor: problem with the new gpg2

[Johannes Schauer]

Hi Frederic,

On Sat, 20 Aug 2016 14:51:11 +0200 picca <picca at synchrotron-soleil.fr> wrote:
> when I run propellor_cronjob, I get this error now
> 
> mordor replace /var/cache/ccache-sbuild/sbuild-setup ... ok
> mordor /var/cache/ccache-sbuild/sbuild-setup mode 365 ... ok
> [2016-08-20 14:46:57 CEST] read: apt-cache ["policy","sbuild"]
> [2016-08-20 14:46:58 CEST] process done ExitSuccess
> [2016-08-20 14:46:58 CEST] call: sbuild-update ["--keygen"]
> Generating archive key.
> gpg: agent_genkey failed: Operation cancelled
> gpg: key generation failed: Operation cancelled
> Exiting from key generation with status 2.
> [2016-08-20 14:47:01 CEST] process done ExitFailure 1
> mordor piuparts schroot conf for System (Debian Linux Unstable) X86_32 ... failed
> 
> 
> Indeed the archive generation is an interactive process now.
> 
> The question is how do we have to deal with this  ?
> 
> Maybe it is possible to create the key non-interactivelly.  Or better provide
> a way to give the sbuild setup the gpg key to use in order to sign the
> archive.

another way would be to change propellor not to run $(sbuild-update --keygen)
anymore at all. Doing this is only required if you want to use sbuild for
chroots containing Debian squeeze or older. If you only build for newer Debian
releases, then signing the internal dummy repository will serve no purpose
other than making your builds slower and requiring lots of entropy during the
one-time setup...

You might want to open another bug against propellor to ask it not to generate
the key anymore if the propellor maintainers agree that that they don't want to
support squeeze chroots anymore.

Also note, that there is a possibility that I will mark this bug as wontfix.
For a reasoning, please refer to the thread on debian-devel starting at [1].

Nevertheless, as I pointed out in the thread, patches are welcome if people
care a lot about keeping squeeze support in sbuild!

Thanks!

cheers, josch

[1] http://lists.debian.org/147145469115.17176.12916309740145620869@localhost
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/buildd-tools-devel/attachments/20160820/528527b0/attachment.sig>