debcrafters-packages team mailing list archive

[Heinrich Schuchardt <2127964@xxxxxxxxxxxxxxxxxx>]

Thanks Julian for reviewing.

I now have installed package ubuntu-dbgsym-keyring and
/usr/share/keyrings/ubuntu-dbgsym-keyring.gpg works. So setting the bug
to invalid for ubuntu-keyring is correct.

But Why shouldn't we improve of the user experience of add-apt-
repository?

Add-apt-repository creates a "modern" sources file for PPAs including adding the key.
Why doesn't it do the same for any archive?

Here is an example:
sudo add-apt-repository --ppa xypron/qemu gives me:

$ cat /etc/apt/sources.list.d/xypron-ubuntu-qemu-questing.sources 
Types: deb
URIs: https://ppa.launchpadcontent.net/xypron/qemu/ubuntu/
Suites: questing
Components: main
Signed-By: 
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 .
 mQINBGD43z0BEADRRK0wGSDIb1YKqePS4UA7eBIosOmtyYK/+0l1i0YelFiKTL6z
 QlSdRHKyeWdkQuetKajJlZukuEoV5q86txByGBTK5ACycLbOWID0kswqMD17PTL9
 CHiKeH/MGgBZbKc/JA/lD9DS1uLvbCtzHlHRhJkfgoFI901QqFECrhkTlU+3kazx
 d7yz4d2Aiv5Gq0xTS1ZwIoCiGi560MkiOZC6byLyK8Pih7NVxkzZJPgf88EBjDON
 zj2hqlNNqbaWkkN1aRxPlc0DH62qkKoNKlg4QiwtI01TCFyVuKQ6SNpsuJagOOvI
 jH8h3xAthNDfabOcI3krUC8N+mSGEu95U6Ws+QwQ1WCciWzq55WAkm2P4ZMGBgmf
 Gqxq75syVYKnhPEH8QKFbdjWOIfGWIO46UhkUxgDnq83xBQ672i5+t6ubsEVjp06
 qVXdvPmoeHa5mSKTJqsTc5JvoOeyanDtyNmd6WBBIWcHzVX5z6hSdnZ+sYeu3W5p
 14a3bZf4rLkyBS0Pyr72wZ1x6Etd0hMcx9dD9PDKitBUJWmKf1+ajyTr9dRMNW88
 1jfTOQ1KIUDY3wDgJRHt4vYtep96c+Hh7edRjdWvMx1hzUZgVJDkV4NazpTXli5T
 hlbKgkOcxibqhfj23B+bCFnusCQ2JKK3IeWGYUYOaq0O5N1ZWoYm0433SwARAQAB
 tCVMYXVuY2hwYWQgUFBBIGZvciBIZWlucmljaCBTY2h1Y2hhcmR0iQJOBBMBCgA4
 FiEEe7bv/cf9G01sBcaepxSs8Yn+yKoFAmD43z0CGwMFCwkIBwIGFQoJCAsCBBYC
 AwECHgECF4AACgkQpxSs8Yn+yKoH1RAAqYnBu+qSQ/n6xgTHObi8CUMUNl4WgNGK
 mcj8Mm2CKZHlqYTXeoKq0cLY9+jZPbaVC3fo2YFJT9REb4+6nZlALT5vy5ETMbR7
 Kaxn1496kPa8XMPMkjqJrL8QF0C37pVhDMeqUekA6Qo9bfauHvjw/6A4gyKKe4NM
 WIvq9FCxx6L9T1dZyHauPbtGG0t0+BJNTjOmTc4gLLyVWy5xgsmwOxx1vQRNb7FY
 OPNf0FPk715QW5wRi5vk4fYQStQ60tigd3dF1elchqyixcz5ncfmZQQ77YCkPoGT
 c1hyG5NG3HpXQ3uu9F8s00lG6NZ/wYvJe0NlQv3WAsPvbxRcJG26e1xQSvJvqJq3
 JMVAu954sqnyQkuX5QOaQ4O2oUVLm33ZOli78hiVdIFxks/7kxm2eJxo2teqj9ED
 Cr0d5UkHyy/JXEEmp/6dnMzuc4P4Bil/wad4xEXMykHhsd7Q4hJwAiNkoCzkLNAI
 UwcjdiuZ2+tPEUjii+XXXwWf8QMI/4k6tmPMmqY8pT7NoX4PLs6jMb7HIPM+M/2f
 x/KXbO+UBw7zTIn1OWSxF5smowSbUnEqIq3awKUUJPs9PmbdnjTYqErWgWLG5B2s
 RPn0AJgSwbifshpszDR+EJ0RpjmXfiE4eDAPWeT8TO5Vc0mrQKew6xI3qPVRk2ce
 h0PpbELFE3s=
 =x1H2
 -----END PGP PUBLIC KEY BLOCK-----


** Changed in: software-properties (Ubuntu)
       Status: Invalid => New

** Changed in: software-properties (Ubuntu)
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to ubuntu-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/2127964

Title:
  C8CAB6595FDFF622 used by http://ddebs.ubuntu.com/ is missing in
  ubuntu-keyring

Status in software-properties package in Ubuntu:
  New
Status in ubuntu-keyring package in Ubuntu:
  Invalid

Bug description:
  http://ddebs.ubuntu.com/ uses key C8CAB6595FDFF622 but it is not in
  /usr/share/keyrings/ubuntu-archive-keyring.gpg.

  To reproduce:

  sudo add-apt-repository http://ddebs.ubuntu.com/

  Err:8 http://ddebs.ubuntu.com questing InRelease          
    The following signatures couldn't be verified because the public key is not available: NO_PUBKEY C8CAB6595FDFF622
  Fetched 47,1 kB in 1s (79,4 kB/s)

  After running

  sudo apt modernize-sources

  you will get

  /etc/apt/sources.list.d/archive_uri-http_ddebs_ubuntu_com_-
  questing.sources

  Types: deb
  URIs: http://ddebs.ubuntu.com/
  Suites: questing
  Components: main 
  Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

  I think here are two bugs:

  * ubuntu-keys lacks the expected key.
  * add-apt-repository should have created a *.sources file and downloaded any missing key

  Best regards

  Heinrich

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/2127964/+subscriptions