Re: Changes in fwupd and signing...
Steve McIntyre writes:
> However, I'm more worried about the effects on our SB signing
> setup. We'll be moving from the fwupd source package making the
> fwupd-ARCH-signed-template template package to a new setup. We're
> planning for the new fwupd-efi source package to take over the
> fwupd-ARCH-signed-template template package (and so on down the
> chain). However, I'm not sure that will work OK. Looking at
> config/debian/external-signatures.conf in DAK, will we be able to have
> two different source packages building the same binary like this
> (obviously targeting different releases!) ?
I think that should be fine. dak checks that the pair (source, binary)
is whitelisted; having multiple entries for the same binary by different
source packages should work as is.
The code is question is [1].
Ansgar
[1]: https://salsa.debian.org/ftp-team/dak/-/blob/52d3a94db87a278af6f75e6d8687e312109385b3/daklib/externalsignature.py#L77
Reply to: