[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#845507: marked as done (having gnupg as Recommends instead of Depends breaks apt-key and tools that use apt-key)



Your message dated Thu, 24 Nov 2016 07:51:27 +0100
with message-id <20161124073840.GA21844@debian.org>
and subject line Re: Bug#845507: having gnupg as Recommends instead of Depends breaks apt-key and tools that use apt-key
has caused the Debian Bug report #845507,
regarding having gnupg as Recommends instead of Depends breaks apt-key and tools that use apt-key
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
845507: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845507
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: apt
Version: 1.3.1

In apt (1.3~exp1), the following change was made:

  * move gnupg|gnupg2 from apt Depends to Recommends


This breaks the apt-key command, which is part of the apt package.

Example:

$ apt-key list
Error: gnupg, gnupg2 and gnupg1 do not seem to be installed,
Error: but apt-key requires gnupg, gnupg2 or gnupg1 for this operation.


This also breaks tools like pbuilder which uses apt-key to add keyrings.

Example:

$ pbuilder <args>
Creating /home/david/pbuilder-ev3dev/debian/base-stretch-armhf.tgz
...
I: adding apt key file /usr/share/keyrings/ev3dev-archive-keyring.gpg.
Error: gnupg, gnupg2 and gnupg1 do not seem to be installed,
Error: but apt-key requires gnupg, gnupg2 or gnupg1 for this operation.


Please change gnupg|gnupg2 back to Depends

--- End Message ---
--- Begin Message ---
On Wed, Nov 23, 2016 at 10:49:55PM -0600, David Lechner wrote:
> Package: apt
> Version: 1.3.1
> 
> In apt (1.3~exp1), the following change was made:
> 
>   * move gnupg|gnupg2 from apt Depends to Recommends
> 
> 
> This breaks the apt-key command, which is part of the apt package.
> 
> Example:
> 
> $ apt-key list
> Error: gnupg, gnupg2 and gnupg1 do not seem to be installed,
> Error: but apt-key requires gnupg, gnupg2 or gnupg1 for this operation.

So install it, if you need to do that.

> 
> 
> This also breaks tools like pbuilder which uses apt-key to add keyrings.
> 
> Example:
> 
> $ pbuilder <args>
> Creating /home/david/pbuilder-ev3dev/debian/base-stretch-armhf.tgz
> ...
> I: adding apt key file /usr/share/keyrings/ev3dev-archive-keyring.gpg.
> Error: gnupg, gnupg2 and gnupg1 do not seem to be installed,
> Error: but apt-key requires gnupg, gnupg2 or gnupg1 for this operation.

Report it to them. They are the ones doing it wrong. There has been
a better replacement for years.

> Please change gnupg|gnupg2 back to Depends

No.

The Recommends was a compromise already to reduce the impact of the
whole thing. After stretch, we will move it to Suggests. gpg2 is a
beast we don't want to force anyone to have on their system.

This change had to be made at some point, and it will always break
stuff. We did this in May, it was already successfully part of Ubuntu
16.10, and you are only complaining about it 6 months later - that
train has left the station a few months ago (a few months ago we'd
likely have said No as well, though...).

-- 
Debian Developer - deb.li/jak | jak-linux.org - free software dev
                  |  Ubuntu Core Developer |
When replying, only quote what is necessary, and write each reply
directly below the part(s) it pertains to ('inline').  Thank you.

--- End Message ---

Reply to: