[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#954743: lintian: orig-tarball-missing-upstream-signature does not say how to add it to uploaded tarballs



On Wed, Mar 25, 2020 at 02:58:15PM +0100, Andreas Beckmann wrote:
> I haven't tried removing components (or .asc), yet ;-)

That would just work as well.  A source is tied to whatever is listed in
the .dsc, and you can replace bits of the sources in a subsequent debian
revision.  I've seen a series of uploads that would, for example:
 * upload -1 without .asc
 * upload -2 with .asc
 * upload -3 (that was done by another team member) without .asc
That works.  What's horrible about dak, is that at this point, you could
upload a -4 with a *different* .asc, as long as the -2 upload is already
gone from the archive (i.e., not in stable).  This is beacuse dak
doesn't record all files that he ever knew in the past, allowing for
overwriting sometimes…

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
More about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

Attachment: signature.asc
Description: PGP signature


Reply to: