Good afternoon,
I am not sure, this is the right forum and the right question at all, but I'll assume it is, and take my chances - if it turns out to be a wrong assumption, I do apologise in advance. ;)
I bumped into a piece of software I needed on my server(s) and I figured I'd rather package it up instead of compiling it in place to avoid having a complier installed. Coincidentally it's been on the ITP/RFP list for ages, so I figured if I jump through all the hoops and learn how to create .deb packages, I might as well be a nice person and get it all the way into Debian.
The package builds fine locally using pbuilder for several architectures. I do believe all the other niceties are included (man page, etc.). I am at the stage where it says: "sign and upload the package to
mentors.debian.org".
I thought, I'll create a separate subkey for signing the package (and keep my master key off-line, and the others keys separate from this debian-signing-subkey). Would that be considered good practice? Or is there something I can't see here?
Regards,
Daniel