Re: RM: fwupd-ARCH-signed-template -- ROM; moving to new source package

[Steve McIntyre <steve@einval.com>]

On Tue, Nov 09, 2021 at 12:50:22AM +0000, Steve McIntyre wrote:
>Package: ftp.debian.org
>Severity: normal
>
>Hey folks,
>
>This is a little complicated, sorry... :-/
>
>In upstream fwupd, the EFI pieces have been moved to a new fwupd-efi
>source package and we're ready to take that change in Debian. The new
>fwupd-efi source package will now provide the
>fwupd-ARCH-signed-template binary packages.
>
>*However*, for added complication we also want to keep the fwupd
>source package around. There's a new version coming which *won't*
>produce the fwupd-ARCH-signed-template packages, but it's not going to
>be buildable until we have fwupd-efi in the archive due to a build-dep
>on it.
>
>So: I'm hoping that removing those existing binary packages from
>unstable will be enough to allow fwupd-efi into the archive. Does that
>sound reasonable?
>
>(Patch for dak signing-config coming soon)

Here it is attached to this message (fwupd-efi.diff)

I'm thinking that we may as well use the same signing keys for the new
signed fwupd binaries as we used for the existing ones? I'm not sure -
does the second patch work for that? (signing.diff) ?

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
< sladen> I actually stayed in a hotel and arrived to find a post-it
          note stuck to the mini-bar saying "Paul: This fridge and
          fittings are the correct way around and do not need altering"

diff --git a/config/debian/external-signatures.conf b/config/debian/external-signatures.conf
index b061974c..a455d4fc 100644
--- a/config/debian/external-signatures.conf
+++ b/config/debian/external-signatures.conf
@@ -11,6 +11,17 @@ External-Signature-Requests {
         "amd64"; "arm64"; "armhf"; "i386";
       };
     };
+    fwupd-efi {
+      Packages {
+        "fwupd-amd64-signed-template";
+        "fwupd-arm64-signed-template";
+        "fwupd-armhf-signed-template";
+        "fwupd-i386-signed-template";
+      };
+      Architectures {
+        "amd64"; "arm64"; "armhf"; "i386";
+      };
+    };
     fwupdate {
       Packages {
         "fwupdate-amd64-signed-template";

diff --git a/etc/debian-prod.yaml b/etc/debian-prod.yaml
index d00a59c..3445d87 100644
--- a/etc/debian-prod.yaml
+++ b/etc/debian-prod.yaml
@@ -56,6 +56,7 @@ keys:
 
 package-keys:
   fwupd: debian-2021-fwupd
+  fwupd-efi: debian-2021-fwupd
   fwupdate: debian-2021-fwupdate
   grub2: debian-2021-grub2
   linux: debian-2021-linux