Control: tags -1 + moreinfo On Fri, Aug 01, 2025 at 09:10:15PM +0200, Thorsten Glaser wrote: > Version: 2.25.15 > > tg@tgb1:/tmp $ dget > http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc > > dget: retrieving > http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc > % Total % Received % Xferd Average Speed Time Time Time > Current > Dload Upload Total Spent Left Speed > 100 3449 100 3449 0 0 17626 0 --:--:-- --:--:-- --:--:-- 17687 > dget: retrieving > http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz > % Total % Received % Xferd Average Speed Time Time Time > Current > Dload Upload Total Spent Left Speed > 100 5609k 100 5609k 0 0 662k 0 0:00:08 0:00:08 --:--:-- 683k > dpkg_1.22.21.dsc: > Good signature found > dscverify: no file spec lines in dpkg_1.22.21.dsc > Validation FAILED!! > tg@tgb1:/tmp $ dscverify dpkg_1.22.21.dsc > dpkg_1.22.21.dsc: > Good signature found > dscverify: no file spec lines in dpkg_1.22.21.dsc > Validation FAILED!!
I cannot reproduce this. A minimal working example: mmdebstrap --include=devscripts,curl,debian-keyring --chrooted-customize-hook='dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc' testing /dev/null I: running --chrooted-customize-hook in shell: sh -c 'dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc' dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 3449 100 3449 0 0 12721 0 --:--:-- --:--:-- --:--:-- 12726 dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 5609k 100 5609k 0 0 3026k 0 0:00:01 0:00:01 --:--:-- 3025k dpkg_1.22.21.dsc: Good signature found validating dpkg_1.22.21.tar.xz All files validated successfully. dpkg-source: info: extracting dpkg in dpkg-1.22.21 dpkg-source: info: unpacking dpkg_1.22.21.tar.xz dpkg_1.22.21.dsc: Good signature found validating dpkg_1.22.21.tar.xz All files validated successfully. dscverify supposedly calls gpg to verify the signatures, and then uses the output as the .dsc contents. Maybe gpg is broken on your system. Chris
