On Fri, 2017-08-18 at 21:30 +0100, Adam D. Barratt wrote: > 1. Have the rules that generate the keyrings clean them afterwards. For > example, changing: > > keyrings/debian-archive-keyring.gpg: active-keys/index > jetring-build -I $@ active-keys > > to > > keyrings/debian-archive-keyring.gpg: active-keys/index > jetring-build -I $@ active-keys > gpg --import-options import-export --import < $@ > $@.tmp > mv -f $@.tmp $@ > > and similarly for the removed keyring. (and maybe for the trusted.gpg.d > files as well?)
Hmmm. Do you know which version of gpg added support for the "import-export" option? It doesn't appear to be supported by jessie's gpg1 or gpg2, which would make this option more awkward if one ever wanted to backport d-a-k to jessie in future. Regards, Adam