Bug#1111611: tracker.debian.org: Signed by field is missing when sponsoring as DD non-uploading

[Jonathan McDowell <noodles@earth.li>]

On Wed, Aug 20, 2025 at 10:23:35AM +0200, Raphael Hertzog wrote:
> I don't understand this. How can you sponsor packages if you are
> non-uploading DD?

Non-uploading DDs can also be granted upload rights in the same way as a 
DM can be; the debian-nonupload.pgp (please switch from .gpg to .pgp, as 
we're transitioning) keyring is treated in the same manner as 
debian-maintainers.pgp by the FTP machinery.

> In any case, the diagnostic is relatively easy on my side. Your key
> is neither in /srv/keyring.debian.org/keyrings/debian-keyring.gpg
> nor in /srv/keyring.debian.org/keyrings/debian-maintainers.gpg and that's
> why tracker.debian.org doesn't recognize your sponsorship.
>
> I might be able to add /srv/keyring.debian.org/keyrings/debian-nonupload.gpg
> to the list of recognized keys but I'd like some confirmation that this is
> the right thing to do. Shouldn't a non-uploading DD that still has DM
> rights be listed in debian-maintainers.gpg too?
>
> Have a nice day.
>
> On Tue, 19 Aug 2025, Sérgio Cipriano wrote:
> > This upload was sponsored by me:
> > https://tracker.debian.org/news/1658019/accepted-typer-0160-1-source-into-unstable/
> >
> > However, tracker does not show the Signed-By field. This was my first
> > sponsor as a non-uploading DD. The other ones I did as a DM all showed
> > this field correctly.
> >
> > When my status changed, I also lost all the permissions I previously had.
> >
> > I received permission for uploading typer again, but this time with my
> > new email:
> >
> > Fingerprint: 4573E9D2AD27DB896BBF2F9EF15DCE5316051F27
> > Uid: cipriano@debian.org
> > Allowed: typer
> >
> > Interestingly, it also does not appear in this list:
> > https://ftp-master.debian.org/dm.txt
> >
> > I have not investigated further, but I am happy to provide more
> > information if needed.
> >
> > --
> > Thanks,
> > Sérgio Cipriano.
>
>
>
> --
>  ⢀⣴⠾⠻⢶⣦⠀   Raphaël Hertzog <hertzog@debian.org>
>  ⣾⠁⢠⠒⠀⣿⡁
>  ⢿⡄⠘⠷⠚⠋    The Debian Handbook: https://debian-handbook.info/get/
>  ⠈⠳⣄⠀⠀⠀⠀   Debian Long Term Support: https://deb.li/LTS

J.

--
In case of nuclear attack, delete this message.