Re: Call for volunteers and GR draft: tag2upload key installation

[Tollef Fog Heen <tfheen@err.no>]

]] Ian Jackson

> Sean Whitton writes ("Re: Call for volunteers and GR draft: 
> tag2upload key installation"):
> > On Mon 07 Apr 2025 at 05:23pm +0530, Micha Lenk wrote:
> > > When did it get backported to oldstable for use on 
> > > fasolo.debian.org?
> > > I haven't seen it in the oldbackports-new queue yet.
> >
> > src:debian-tag2upload-keyring was unblocked by the release 
> > team,
> > migrated to trixie today, and I just uploaded it to 
> > backports-NEW.
>
> I wasn't aware that the intent was to provide this key to dak 
> via this
> .deb.  Our intent with the package was to provide it to programs 
> like
> dscverify on end-user systems.  But, OK.

No, not ok.  We already have a keyring distribution mechanism for
keyrings that live on keyring.d.o.  Please use that one. 
Installing
packages from backports from the wrong distribution (relative to 
what
the host is running) will not fill us with joy.

I believe the setup for that syncing is managed by keyring-maint, 
but I
could be wrong about that.

> Note that debian-tag2upload-keyring_1.1_all.deb from trixie is
> directly installable on buster.  So if DSA is able to organise 
> it,
> that might be a simpler approach than going via oldbackports.

There's no way to get a package into oldstable-backports now.

--
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are