• Bug#1109607: devscripts: GPG part of tests starting to fail

    From Yadd@21:1/5 to All on Sun Jul 20 20:50:01 2025
    Package: devscripts
    Version: 2.25.15
    Severity: serious
    Tags: ftbfs
    Justification: FTBFS
    X-Debbugs-Cc: [email protected]

    Starting from today, test_mkorigtargz, test_debsign and some test_uscan*
    fail due to some gpg errors:
    - short keyid looks forbidden now
    - $GPGHOME should be chmod 700
    - even after this 2 fixes, tests continue to fail with "invalid
    signature" or other unclear messages

    I did my best for 3 hours without finding what is different between
    testing an unstable (test pass locally on testing).

    Hope someone will find what happened and succeed to fix the test.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From James McCoy@21:1/5 to Yadd on Tue Jul 22 03:10:01 2025
    Control: retitle -1 devscripts: test_debsign fails when aspcud resolver is used to determine build dependencies

    On Mon, Jul 21, 2025 at 11:16:53PM +0200, Yadd wrote:
    On 7/21/25 23:03, James McCoy wrote:
    On Mon, Jul 21, 2025 at 02:43:21AM +0200, Yadd wrote:
    On 7/21/25 02:20, Yadd wrote:
    On 7/20/25 20:47, Yadd wrote:
    Starting from today, test_mkorigtargz, test_debsign and some >>>>>test_uscan*
    fail due to some gpg errors:
    - short keyid looks forbidden now
    - $GPGHOME should be chmod 700
    - even after this 2 fixes, tests continue to fail with "invalid
       signature" or other unclear messages

    I did my best for 3 hours without finding what is different between >>>>>testing an unstable (test pass locally on testing).

    Hope someone will find what happened and succeed to fix the test.

    This isn't showing up in ci.debian.net, but it is showing up in Salsa.
    That suggests there's something specific about the Salsa environment
    that's causing this.

    Found why: the package "gpg-from-sq" is declared as "Provides:
    gpg (= 2.2.46)" but is unusable here. When installing the real
    gpg and drop gpg-sq, the test pass...

    So the fix is easy: replace "gpg" by "gnupg" in (build-)?dependencies. >>>Since I pushed 2.25.16 into experimental with uscan changes, I
    think the way to fix Trixie is to push a 2.25.15+deb13u1 (or
    2.25.15.1 ?).

    That reverts an explicit decision to move away from Depending on gnupg
    in 1ffd7004b913ab2f898cdc91215ac7db17d41ead (and MR !492).

    Maybe for Trixie we could use gnupg as build-dependency and keep gpg
    virtual package in dependencies? This will fix the issue.

    Then after we could fix tests to use gpg.

    Looking a bit closer, the only pipeline failures I see are when the
    build is against experimental and the aspcud resolver is being used.

    In that case, we have this change in dependencies getting installed

    - gpg gpg-agent gpgconf gpgv
    + gpg-agent gpg-from-sq gpg-sq gpgconf gpgv

    I don't know enough about the differences in how aspcud and apt resolve dependencies.

    This might be related to what was being discussed in #1107155.

    Cheers,
    --
    James (he/him)
    GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7 2D23 DFE6 91AE 331B A3DB

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Tue Jul 22 03:10:01 2025
    Processing control commands:

    retitle -1 devscripts: test_debsign fails when aspcud resolver is used to determine build dependencies
    Bug #1109607 [devscripts] devscripts: GPG part of tests starting to fail Changed Bug title to 'devscripts: test_debsign fails when aspcud resolver is used to determine build dependencies' from 'devscripts: GPG part of tests starting to fail'.

    --
    1109607: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109607
    Debian Bug Tracking System
    Contact [email protected] with problems

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Tue Jul 22 13:10:01 2025
    Processing control commands:

    severity -1 important
    Bug #1109607 [devscripts] devscripts: test_debsign fails when aspcud resolver is used to determine build dependencies
    Severity set to 'important' from 'serious'

    --
    1109607: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109607
    Debian Bug Tracking System
    Contact [email protected] with problems

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)