[Simple-cdd-devel] extrafiles signed with deprecated squeeze key

Vagrant Cascadian vagrant at debian.org
Fri Jun 16 17:52:57 UTC 2017


On 2017-06-16, Vagrant Cascadian wrote:
> For simple-cdd, you can work around the issue by specifying both old and
> new keyrings:
>
>   simple-cdd --keyring=/usr/share/keyrings/debian-archive-keyring.gpg,/usr/share/keyrings/debian-archive-removed-keys.gpg

Apparently, this isn't sufficient for simple-cdd, as the removed-keys
contains expired keys as well, and reprepro balks at that... so you need
to export the individual key to a separate keyring first:

  keyring=$(pwd)/keyring
  gpg --no-default-keyring \
    --keyring=/usr/share/keyrings/debian-archive-removed-keys.gpg \
    --export AED4B06F473041FA > $keyring
  simple-cdd \
    --keyring=/usr/share/keyrings/debian-archive-keyring.gpg,$keyring


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/simple-cdd-devel/attachments/20170616/6833cb71/attachment.sig>


More information about the Simple-cdd-devel mailing list