Package: dgit
Version: 2.11
Severity: normal

In the attached log, Mattia's attempt to perform a dgit push failed
because he pressed the wrong button on his YubiKey.  dgit told him that
he needed a new version number to try another push, but this seems
wrong.  Why couldn't he just call `debsign` and then `dput`?

An alternative way of fixing this would be to have both the git tag
signing and the debsign attempt happen before the push to dgit-repos.
If either failed, dgit could delete the unpublished git tag it just
made, and tell the user to try again.

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.5.0-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dgit depends on:
ii  apt                               1.3.1
ii  ca-certificates                   20160104
ii  coreutils                         8.25-2
ii  curl                              7.50.1-1
ii  devscripts                        2.16.8
ii  dpkg-dev                          1.18.10
ii  dput                              0.10.3
ii  git [git-core]                    1:2.9.3-1
ii  git-buildpackage                  0.8.6
ii  libdpkg-perl                      1.18.10
ii  libjson-perl                      2.90-1
ii  liblist-moreutils-perl            0.416-1+b1
ii  libperl5.24 [libdigest-sha-perl]  5.24.1~rc3-3
ii  libtext-glob-perl                 0.10-1
ii  libtext-iconv-perl                1.7-5+b4
ii  libwww-perl                       6.15-1
ii  perl                              5.24.1~rc3-3

Versions of packages dgit recommends:
ii  openssh-client [ssh-client]  1:7.3p1-1

Versions of packages dgit suggests:
ii  sbuild  0.72.0-2

-- no debconf information

-- 
Sean Whitton
129 mattia@chase ~/devel/RFS/ocrmypdf/ocrmypdf (git)-[dgit/sid] % git config 
--global dgit.default.keyid $GPGKEY                                             
        :(
mattia@chase ~/devel/RFS/ocrmypdf/ocrmypdf (git)-[dgit/sid] % tail ~/.gitconfig 
    insteadOf = https://anonscm.debian.org/cgit/
[url "git+ssh://git.debian.org/git/collab-maint/"]
    insteadOf = cm:
[url "git+ssh://git.debian.org/git/python-modules/packages/"]
    insteadOf = dpmt:
[url "g...@github.com:"]
    insteadOf = "https://github.com/";
    insteadOf = "git://github.com/"
[dgit "default"]
        keyid = 66AE2B4AFCCF3F52DA184D184B043FCDB9444540
mattia@chase ~/devel/RFS/ocrmypdf/ocrmypdf (git)-[dgit/sid] % dgit -C 
~/pbuilder/result/sid/amd64/ocrmypdf_4.3.2-1_amd64.changes push
canonical suite name for unstable is sid
downloading 
http://ftp.debian.org/debian//pool/main/o/ocrmypdf/ocrmypdf_4.2.5-1.dsc...
last upload to archive specified git hash
using existing ocrmypdf_4.2.5.orig.tar.xz
Format `3.0 (quilt)', need to check/update patch stack
nothing quilty to commit, ok.
checking that ocrmypdf_4.3.2-1.dsc corresponds to HEAD
dpkg-source: warning: extracting unsigned source package 
(/home/mattia/pbuilder/result/sid/amd64/ocrmypdf_4.3.2-1.dsc)
dpkg-source: info: extracting ocrmypdf in ocrmypdf-4.3.2
dpkg-source: info: unpacking ocrmypdf_4.3.2.orig.tar.xz
dpkg-source: info: unpacking ocrmypdf_4.3.2-1.debian.tar.xz
dpkg-source: info: applying patch-docs-for-Debian.patch
dpkg-source: info: applying path-to-docs-for-Debian.patch
dpkg-source: info: applying pip-to-apt-get.patch
/home/mattia/pbuilder/result/sid/amd64/ocrmypdf_4.3.2-1_amd64.changes already 
has appropriate .orig(s) (if any)
gpg: Signature made Sat 12 Nov 2016 05:21:57 PM UTC
gpg:                using RSA key 8B7868786C33E5C64C4D0A480816B9E18C762BAD
gpg: Good signature from "Mattia Rizzolo <mat...@mapreri.org>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mapr...@ubuntu.com>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mapr...@ubuntu-it.org>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mapr...@gmail.com>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mat...@debian.org>" [ultimate]
gpg:                 aka "[jpeg image of size 4218]" [ultimate]
gpg:                 aka "[jpeg image of size 4456]" [ultimate]
Counting objects: 438, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (135/135), done.
Writing objects: 100% (438/438), 211.20 KiB | 0 bytes/s, done.
Total 438 (delta 318), reused 417 (delta 298)
remote: gpgv: Signature made Sat 12 Nov 2016 05:21:57 PM UTC using RSA key ID 
8C762BAD
remote: gpgv: Good signature from "Mattia Rizzolo <mat...@mapreri.org>"
remote: gpgv:                 aka "Mattia Rizzolo <mapr...@gmail.com>"
remote: gpgv:                 aka "Mattia Rizzolo <mapr...@ubuntu.com>"
remote: gpgv:                 aka "Mattia Rizzolo <mapr...@ubuntu-it.org>"
remote: gpgv:                 aka "Mattia Rizzolo <mat...@debian.org>"
remote: To /srv/dgit.debian.org/dispatch-dir/distro=debian/repos/ocrmypdf.git
remote:    45fa639..80c5a87  80c5a87b087f56b90cbd10be3bc14dd066b9fae1 -> 
refs/dgit/sid
remote:  * [new tag]         34ad9db20ddb96a97a77d5a8868c91f911bf33be -> 
archive/debian/4.3.2-1
remote: To /srv/dgit.debian.org/dispatch-dir/distro=debian/repos/ocrmypdf.git
remote:    45fa639..80c5a87  80c5a87b087f56b90cbd10be3bc14dd066b9fae1 -> master
To git+ssh://push.dgit.debian.org/dgit/debian/repos/ocrmypdf.git
   45fa639..80c5a87  80c5a87b087f56b90cbd10be3bc14dd066b9fae1 -> refs/dgit/sid
 * [new tag]         archive/debian/4.3.2-1 -> archive/debian/4.3.2-1
 signfile /home/mattia/pbuilder/result/sid/amd64/ocrmypdf_4.3.2-1.dsc 
66AE2B4AFCCF3F52DA184D184B043FCDB9444540
gpg: signing failed: Bad PIN
gpg: /tmp/debsign.SvZVtoDF/ocrmypdf_4.3.2-1.dsc: clearsign failed: Bad PIN
debsign: gpg error occurred!  Aborting....
dgit: failed command: debsign -k66AE2B4AFCCF3F52DA184D184B043FCDB9444540 
/home/mattia/pbuilder/result/sid/amd64/ocrmypdf_4.3.2-1_amd64.changes
dgit: subprocess failed with error exit status 2
! Push failed, after updating the remote git repository.
! If you want to try again, you must use a new version number.
2 mattia@chase ~/devel/RFS/ocrmypdf/ocrmypdf (git)-[dgit/sid] % git verify-tag 
archive/debian/4.3.2-1                                                          
      :(
gpg: Signature made Sat 12 Nov 2016 05:21:57 PM UTC
gpg:                using RSA key 8B7868786C33E5C64C4D0A480816B9E18C762BAD
gpg: Good signature from "Mattia Rizzolo <mat...@mapreri.org>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mapr...@ubuntu.com>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mapr...@ubuntu-it.org>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mapr...@gmail.com>" [ultimate]
gpg:                 aka "Mattia Rizzolo <mat...@debian.org>" [ultimate]
gpg:                 aka "[jpeg image of size 4218]" [ultimate]
gpg:                 aka "[jpeg image of size 4456]" [ultimate]
mattia@chase ~/devel/RFS/ocrmypdf/ocrmypdf (git)-[dgit/sid] % 

Attachment: signature.asc
Description: PGP signature

Reply via email to