[apt-build-devel] Bug#659015: apt-build disables apt's signature verification

[apt-build development list]

Control: tag -1 + pending

Hi,

Ansgar Burchardt wrote:
> Axel Beckert <abe at debian.org> writes:
> > I've though observed two possibly minor issues with it:
> >
> > * An existing /etc/apt/sources.list.d/apt-build.list is not updated to
> >   add "[trusted=yes]".
> 
> Could probably be added in postinst (apt-build.list is not a conffile),
> e.g. something like
> 
>   sed -i 's/^deb file:/deb [trusted=yes] file:/'
> 
> or something more strict to make sure it doesn't touch other
> repositories.

Thanks for that idea and note about not being a conffile.

> > * Upon purge and (re)installation, I had the "deb" line twice in
> >   /etc/apt/sources.list.d/apt-build.list and it's not clear to me why.
> 
> The filename is generated differently in postinst and postrm:

That wasn't the issue, but using grep without -F to search for the
whole line -- which now contains brackets and they have special
meanings in grep basic regular expressions. So adding -F to the
according grep call fixes that.

		Regards, Axel
-- 
 ,''`.  |  Axel Beckert <abe at debian.org>, http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-    |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE