Bug#1101850: intel-mkl: FTBFS: rpm/intel-comp-l-all-vars-19.1.3-304-19.1.3-304.noarch.rpm: digests SIGNATURES NOT OK

[Santiago Vila]

Package: src:intel-mkl
Version: 2020.4.304-5
Severity: serious
Tags: ftbfs trixie sid

Dear maintainer:

During a rebuild of all packages in unstable, your package failed to build:

--------------------------------------------------------------------------------
[...]
 debian/rules clean
dh clean
   debian/rules override_dh_auto_clean
make[1]: Entering directory '/<<PKGBUILDDIR>>'
debconf-updatepo
rm -f debian/*.install  # auto-generated install files
rm -f debian/*.lintian-overrides  # auto-generated lintian files
rm -f  debian/libmkl-dev.config  debian/libmkl-dev.postinst  debian/libmkl-dev.prerm  debian/libmkl-rt.config  debian/libmkl-rt.postinst  debian/libmkl-rt.prerm  debian/pkgconfig/mkl-static-ilp64-iomp.pc  debian/pkgconfig/mkl-static-ilp64-seq.pc  debian/pkgconfig/mkl-static-lp64-iomp.pc  debian/pkgconfig/mkl-static-lp64-seq.pc
rm -f -rf debian/__pycache__
rm -f -rf opt  # extracted from upstream rpm packages
rm -f -r debian/rpmdb
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
   dh_clean
 debian/rules binary
dh binary
   dh_update_autotools_config
   dh_autoreconf
   debian/rules override_dh_auto_configure
make[1]: Entering directory '/<<PKGBUILDDIR>>'
../intel-mkl_2020.4.304.orig.tar.gz: OK
rpm --dbpath=/<<PKGBUILDDIR>>/debian/rpmdb --rebuilddb
rpm --dbpath=/<<PKGBUILDDIR>>/debian/rpmdb --import PUBLIC_KEY.PUB
warning: Certificate ACFA9FC57E6C5DBE:
  The certificate is expired: The primary key is not live
  Subkey ACFA9FC57E6C5DBE is expired: The primary key is not live
  Certificate does not have any usable signing keys
rpm --dbpath=/<<PKGBUILDDIR>>/debian/rpmdb -qa
gpg-pubkey-7e6c5dbe-5d91bb57
rpm --dbpath=/<<PKGBUILDDIR>>/debian/rpmdb -qi gpg-pubkey-7e6c5dbe-5d91bb57
Name        : gpg-pubkey
Version     : 7e6c5dbe
Release     : 5d91bb57
Architecture: (none)
Install Date: Wed Jun 12 10:08:56 2024
Group       : Public Keys
Size        : 0
License     : pubkey
Signature   : (none)
Source RPM  : (none)
Build Date  : Mon Sep 30 08:22:47 2019
Build Host  : localhost
Packager    : Intel(R) Software Development Products
Summary     : Intel(R) Software Development Products public key
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=aXpT
-----END PGP PUBLIC KEY BLOCK-----

set -e -x; for rpmfile in $(find rpm -type f -name '*.rpm' | sort); do \
	rpm --dbpath=/<<PKGBUILDDIR>>/debian/rpmdb -K $rpmfile; \
	rpm2cpio $rpmfile | cpio -idmv; \
	done
+ find rpm -type f -name *.rpm
+ sort
+ rpm --dbpath=/<<PKGBUILDDIR>>/debian/rpmdb -K rpm/intel-comp-l-all-vars-19.1.3-304-19.1.3-304.noarch.rpm
rpm/intel-comp-l-all-vars-19.1.3-304-19.1.3-304.noarch.rpm: digests SIGNATURES NOT OK
make[1]: *** [debian/rules:41: extract-rpms] Error 1
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
make: *** [debian/rules:27: binary] Error 2
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2
--------------------------------------------------------------------------------

The above is just how the build ends and not necessarily the most relevant part.
If required, the full build log is available here:

https://people.debian.org/~sanvila/build-logs/202504/

About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.

If you could not reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.

If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:intel-mkl, so that this is still
visible in the BTS web page for this package.

Thanks.