Bug#925048: debootstrap: --keyring= Release signed by unknown key (key id EF0F382A1A7B6500)

[Hideki Yamane <henrich@iijmio-mail.jp>]

control: tags -1 +unreproducible +moreinfo

On Tue, 19 Mar 2019 21:08:42 +0530 "Veek.M" <vek.m1234@gmail.com> wrote:
>    * What led up to the situation?
> dpkg-deb -R debian-archive-keyring_2017.5_all.deb /tmp/
> ls *.gpg|xargs -I{} debootstrap --download-only --force-check-gpg --keyring={} --variant minbase --arch amd64 --make-tarball=debian_amd64 stable /root/dbs_debian_amd64 https://debian.ethz.ch/debian
> 
>    * What exactly did you do (or not do) that was effective (or
>      ineffective)?
> E: Release signed by unknown key (key id EF0F382A1A7B6500)
> but
> debootstrap --download-only --force-check-gpg  --variant minbase --arch amd64 --make-tarball=debian_amd64 stable /root/dbs_debian_amd64 https://debian.ethz.ch/debian
> works
> 
> There's a problem with using --keyring=whatever.gpg

 I cannot reproduce it

$ sudo debootstrap --version
debootstrap 1.0.89
$ sudo debootstrap --download-only --force-check-gpg --variant minbase --arch amd64 --make-tarball=debian_amd64 --keyring=/usr/share/keyrings/debian-archive-keyring.gpg stable stretch
I: Retrieving InRelease 
I: Retrieving Release 
I: Checking Release signature
I: Valid Release signature (key id 067E3C456BAE240ACEE88F6FEF0F382A1A7B6500)
I: Retrieving Packages 
^CE: Interrupt caught ... exiting

 It seems that your procedure of specifying gpg key is bit strange.

> dpkg-deb -R debian-archive-keyring_2017.5_all.deb /tmp/
> ls *.gpg|xargs -I{} debootstrap --download-only --force-check-gpg --keyring={} --variant minbase --arch amd64 --make-tarball=debian_amd64 stable /root/dbs_debian_amd64 https://debian.ethz.ch/debian



-- 
Regards,

 Hideki Yamane     henrich @ debian.org/iijmio-mail.jp