Package: debomatic Version: 0.22-1 Severity: normal First of all, thank you for writing and maintaing this package; it's a great piece of software.
Until now, I've been using pbuilder to test rdeps for library transitions and it's painfully slow. Yesterday I decided to give debomatic a try. Everything was going on smoothly until I reached the next dependency level and had to rebuild a package which was also depending on a library involved in the transition. The first problem I found out is that the Repository module is generating bogus signatures to Release files because it attempts to use gpg's option --secret-keyring (Repository.py:136). With the gnupg version in stretch this option does nothing. When I generated the signing key as root, this problem was solved. My distributions file contains: [experimental] ... extramirrors: deb [trusted=yes] file:/home/yavor/incoming/experimental experimental main However, the local repository is not taken into account and /etc/apt/sources.list in the chroot contains only this: deb http://aneto:9999/debian unstable main contrib non-free deb-src http://aneto:9999/debian unstable main contrib non-free deb http://aneto:9999/debian/ experimental main contrib non-free The pubring as specified in the repository section in the configuration file is also not copied to the chroot's /etc/apt/trusted.gpg.d as it should be. If I add the line deb [trusted=yes] file:/home/yavor/incoming/experimental experimental main to my /etc/apt/sources.list it works as expected: # LC_ALL=C apt-get update Get:1 file:/home/yavor/incoming/experimental experimental InRelease [1988 B] Get:1 file:/home/yavor/incoming/experimental experimental InRelease [1988 B] Hit:2 http://security.debian.org/debian-security stretch/updates InRelease Ign:3 http://aneto:9999/debian stretch InRelease Ign:1 file:/home/yavor/incoming/experimental experimental InRelease Hit:4 http://aneto:9999/debian stretch-updates InRelease Hit:5 http://aneto:9999/debian stretch Release Reading package lists... Done W: GPG error: file:/home/yavor/incoming/experimental experimental InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY A87A9D94AB493D50 W: Invalid 'Date' entry in Release file /var/lib/apt/lists/partial/_home_yavor_incoming_experimental_dists_experimental_Release (The second warning appears to be fixed in the debomatic Git repository.) The commands file I use is: builddep viewpdf.app_1:0.2dfsg1-6 experimental libgnustep-gui-dev (>= 0.26) Please find my debomatic.conf and distributions files attached. I also attach the compressed buildlog of the failed build. Note that the local repository contains version -8 of popplerkit.framework which was already rebuilt against gnustep-gui/0.26. I expect the problem to be somewhere after build.py:460 but I don't understand the language and already lost a lot of time in fruitless attempts to solve this. (Enough that I decided a bug report would be justified.) I also tried copying the .debs and creating a local repository myself, as I do with semi-automatically with pbuilder. This repository is also ignored if I add it to extramirrors under the experimental distribution. P.S. Note that gpg was initially set to False, I switched to True as a last resort after reading debomatic's archived bugs. Nothing changed, I just had to sign the commands file with the same key. -- System Information: Debian Release: 9.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-5-amd64 (SMP w/2 CPU cores) Locale: LANG=bg_BG.UTF-8, LC_CTYPE=bg_BG.UTF-8 (charmap=UTF-8), LANGUAGE=bg_BG.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages debomatic depends on: ii debootstrap 1.0.89 ii init-system-helpers 1.48 ii lsb-base 9.20161125 ii python3 3.5.3-1 ii python3-toposort 1.5-1 ii sbuild 0.73.0-4 ii schroot 1.6.10-3+deb9u1 Versions of packages debomatic recommends: ii gpgv 2.1.18-8~deb9u1 ii python3-pyinotify 0.9.6-1 Versions of packages debomatic suggests: ii apt-utils 1.4.8 ii autopkgtest 4.4 pn blhc <none> ii debian-archive-keyring 2017.5 ii devscripts 2.17.6+deb9u1 ii gnupg 2.1.18-8~deb9u1 ii lintian 2.5.50.4 pn piuparts <none> pn ubuntu-keyring <none> -- no debconf information
[debomatic]
incoming: /home/yavor/incoming
debootstrap: debootstrap
architecture: system
threads: 2
inotify: True
sleep: 60
logfile: /var/log/debomatic.log
loglevel: info
[distributions]
list: /home/yavor/debomatic/distributions
blacklist:
mapper: {'sid': 'unstable',
'stretch': 'testing',
'jessie': 'stable'}
[chroots]
profile: debomatic
commands: /usr/share/debomatic/sbuildcommands
[crossbuild]
crossbuild: False
hostarchitecture: None
[gpg]
gpg: True
keyring: /home/yavor/debomatic/pubring.gpg
[modules]
modules: True
path: /usr/share/debomatic/modules
threads: 5
blacklist: AutoPkgTest Blhc Lintian Mailer Piuparts
[repository]
gpgkey: 0xAB493D50
pubring: /home/yavor/debomatic/pubring.gpg
secring: /home/yavor/debomatic/secring.gpg
[unstable] suite: unstable mirror: http://aneto:9999/debian components: main contrib non-free [experimental] suite: unstable mirror: http://aneto:9999/debian components: main contrib non-free extramirrors: deb [trusted=yes] file:/home/yavor/incoming/experimental experimental main deb http://aneto:9999/debian/ experimental main contrib non-free [testing] suite: testing mirror: http://aneto:9999/debian components: main contrib non-free [stable] suite: stable mirror: http://aneto:9999/debian components: main contrib non-free extramirrors: deb http://security.debian.org/ stable/updates main contrib non-free deb http://httpredir.debian.org/debian stable-updates main contrib non-free [oldstable] suite: oldstable mirror: http://httpredir.debian.org/debian components: main contrib non-free extramirrors: deb http://security.debian.org/ oldstable/updates main contrib non-free deb http://httpredir.debian.org/debian oldstable-updates main contrib non-free
viewpdf.app_0.2dfsg1-6.buildlog.gz
Description: application/gzip
