Bug#812860: /usr/bin/uscan: [uscan] failure to download and verify package.tar.xz with package.sign

Osamu Aoki osamu at debian.org
Sun Jan 31 08:41:52 UTC 2016


Hi,

Excuseme I was a bit confused with #812417.  This is #812860.

I think I have fix for this bug report.

On Sun, Jan 31, 2016 at 08:03:22AM +0900, Osamu Aoki wrote:
> On Wed, Jan 27, 2016 at 10:26:49PM -0500, James McCoy wrote:

Your comment on --force-download is correct.

> > Thanks for the report.  There are a few things going on here.
> > 
> > On Wed, Jan 27, 2016 at 11:36:52AM +0100, Uwe Kleine-König wrote:
> > > now running

[snip]
 
> > > 	uscan: Successfully downloaded package rt-tests-0.96.tar.xz
> > > 	Could not read ../rt-tests-0.96.tar.xz: No such file or directory at /usr/bin/mk-origtargz line 361.
> > > 	uscan: error: mk-origtargz --package rt-tests --version 0.96 --compression gzip --directory .. --copyright-file debian/copyright ../rt-tests-0.96.tar.xz gave error exit status 2
> > > 
> > > where the problem seems to be that uscan decompresses the archive but in
> > > the same go removes the tar.xz for mk-origtargz.
> > 
> > Actually, it keeps the tar.xz when it should be passing the filename as
> > rt-tests-0.96.tar, if the current verification behavior isn't changed.

uscan keeps filename for tar.xz in its internal variable but
gunzip/unxz/bunzip2 were invoked without --keep in uscan

> > > Is this just me using uscan in a wrong way, or is there something fishy
> > > with uscan? In the first case an example would be great.
> > 
> > There are some issues to work out from the major rework of uscan, but
> > hopefully some of the above helps.

I added --keep and now works fine.

(Found another bug as "$options{'pgpsigurlmangle'}=ARRAY(0x2ddfb88)")

Here is my log:

Script started on Sun 31 Jan 2016 05:23:24 PM JST
osamu at goofy: ~/ssd/rt-tests$ debcheckout rt-tests
declared git repository at git://git.pengutronix.de/git/ukl/rt-tests.git
git clone git://git.pengutronix.de/git/ukl/rt-tests.git rt-tests ...
Cloning into 'rt-tests'...
Checking connectivity... done.
/home/osamu/ssd/rt-tests/rt-tests
/home/osamu/ssd/rt-tests/rt-tests
osamu at goofy: ~/ssd/rt-tests$ cd rt-tests
/home/osamu/ssd/rt-tests/rt-tests
osamu at goofy: ~/ssd/rt-tests/rt-tests$ echo  > debian/watch 'version=4'
osamu at goofy: ~/ssd/rt-tests/rt-tests$ echo >> debian/watch
osamu at goofy: ~/ssd/rt-tests/rt-tests$ echo >> debian/watch 'opts="pgpsigurlmangle=s%.xz$%.sign%, decompress" \'
osamu at goofy: ~/ssd/rt-tests/rt-tests$
osamu at goofy: ~/ssd/rt-tests/rt-tests$ echo >> debian/watch 'http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-(.*)\.tar\.xz'
osamu at goofy: ~/ssd/rt-tests/rt-tests$ uscan --debug --force-download
uscan info: uscan (version 2.16.1) See uscan(1) for help
uscan info: Scan watch files in .
uscan debug: Found ./debian
uscan info: Check debian/watch and debian/changelog in .
uscan info: package="rt-tests" version="0.96-1" (as seen in debian/changelog)
uscan info: package="rt-tests" version="0.96" (no epoch/revision)
uscan info: ./debian/changelog sets package="rt-tests" version="0.96"
uscan info: Process ./debian/watch (package=rt-tests version=0.96)
uscan info: Found upstream signing keyring: debian/upstream/signing-key.asc
uscan info: opts: pgpsigurlmangle=s%.xz$%.sign%, decompress
uscan info: line: http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-(.*)\.tar\.xz
uscan info: Parsing pgpsigurlmangle=s%.xz$%.sign%
uscan info: Parsing  decompress
uscan info: line: http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-(.*)\.tar\.xz
uscan debug: $options{'pgpmode'}=mangle, $options{'pgpsigurlmangle'}=ARRAY(0x2ddfb88)
uscan info: Last orig.tar.* tarball version (from debian/changelog): 0.96
uscan info: Last orig.tar.* tarball version (dversionmangled): 0.96
uscan info: Requesting URL:
   http://www.kernel.org/pub/linux/utils/rt-tests/
uscan info: redirections: https://www.kernel.org/pub/linux/utils/rt-tests/
uscan debug: received content:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html>
 <head>
  <title>Index of /pub/linux/utils/rt-tests</title>
 </head>
 <body>
<h1>Index of /pub/linux/utils/rt-tests</h1>
<pre><a href="?C=N;O=D">Name</a>		    <a href="?C=M;O=A">Last modified</a>      <a href="?C=S;O=A">Size</a>  <hr><a href="/pub/linux/utils/">Parent Directory</a> 			    -
<a href="older/">older/</a>		     22-Oct-2015 10:44	  -
<a href="rt-tests-0.96.tar.gz">rt-tests-0.96.tar.gz</a>    22-Oct-2015 10:43  112K
<a href="rt-tests-0.96.tar.sign">rt-tests-0.96.tar.sign</a>  22-Oct-2015 10:43	819
<a href="rt-tests-0.96.tar.xz">rt-tests-0.96.tar.xz</a>    22-Oct-2015 10:43   83K
<a href="sha256sums.asc">sha256sums.asc</a>	     22-Oct-2015 11:01	1.0K
<hr></pre>
</body></html>

[End of received content] by HTTP
uscan debug: processed content:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html>
 <head>
  <title>Index of /pub/linux/utils/rt-tests</title>
 </head>
 <body>
<h1>Index of /pub/linux/utils/rt-tests</h1>
<pre><a href="?C=N;O=D">Name</a>		    <a href="?C=M;O=A">Last modified</a>      <a href="?C=S;O=A">Size</a>  <hr><a href="/pub/linux/utils/">Parent Directory</a> 			    -
<a href="older/">older/</a>		     22-Oct-2015 10:44	  -
<a href="rt-tests-0.96.tar.gz">rt-tests-0.96.tar.gz</a>    22-Oct-2015 10:43  112K
<a href="rt-tests-0.96.tar.sign">rt-tests-0.96.tar.sign</a>  22-Oct-2015 10:43	819
<a href="rt-tests-0.96.tar.xz">rt-tests-0.96.tar.xz</a>    22-Oct-2015 10:43   83K
<a href="sha256sums.asc">sha256sums.asc</a>	     22-Oct-2015 11:01	1.0K
<hr></pre>
</body></html>

[End of processed content] by fix bad HTML code
uscan info: Matching pattern:
   (?:(?:http://www.kernel.org)?\/pub\/linux\/utils\/rt\-tests\/)?rt-tests-(.*)\.tar\.xz (?:(?:https://www.kernel.org)?\/pub\/linux\/utils\/rt\-tests\/)?rt-tests-(.*)\.tar\.xz
uscan info: Found the following matching hrefs on the web page (newest first):
   rt-tests-0.96.tar.xz (0.96) index=0.96-4
   rt-tests-0.96.tar.xz (0.96) index=0.96-4
uscan info: Matching target for downloadurlmangle: http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-0.96.tar.xz
uscan info: Upstream URL (downloadurlmangled):
   http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-0.96.tar.xz
uscan info: Newest upstream tarball version selected for download (uversionmangled): 0.96
uscan info: Download filename (filenamemangled): rt-tests-0.96.tar.xz
uscan: Newest version of rt-tests on remote site is 0.96, local version is 0.96
uscan info:    => Package is up to date for from
      http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-0.96.tar.xz
uscan info:    => Forcing download as requested
uscan info: Downloading upstream package: rt-tests-0.96.tar.xz
uscan info: Requesting URL:
   http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-0.96.tar.xz
uscan debug: http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-0.96.tar.sign by pgpsigurlmangle rule: s%.xz$%.sign%
uscan info: Downloading OpenPGP signature from
   http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-0.96.tar.sign (pgpsigurlmangled)
   as rt-tests-0.96.tar.pgp
uscan info: Requesting URL:
   http://www.kernel.org/pub/linux/utils/rt-tests/rt-tests-0.96.tar.sign
uscan info: Verifying OpenPGP signature rt-tests-0.96.tar.pgp for rt-tests-0.96.tar
gpgv: Signature made Thu 22 Oct 2015 07:41:14 PM JST using RSA key ID 639D2D16
gpgv: Good signature from "John Kacur <jkacur at gmail.com>"
gpgv:		      aka "John Kacur <jkacur at redhat.com>"
uscan info: New orig.tar.* tarball version (oversionmangled): 0.96
uscan: Successfully downloaded package rt-tests-0.96.tar.xz
uscan info: Executing internal command:
   mk-origtargz --package rt-tests --version 0.96 --compression gzip --directory .. --copyright-file debian/copyright ../rt-tests-0.96.tar.xz
uscan info: New orig.tar.* tarball version (after mk-origtargz): 0.96
uscan: Successfully symlinked ../rt-tests-0.96.tar.xz to ../rt-tests_0.96.orig.tar.xz.
uscan info: Scan finished

Osamu



More information about the devscripts-devel mailing list