[pkg-gnupg-maint] Changes for GnuPG in debian

[Bill Allombert]

On Thu, Aug 04, 2016 at 12:29:03PM -0400, Daniel Kahn Gillmor wrote:
> What does this mean for package maintainers?
> --------------------------------------------
> 
> If you maintain a package that depends on `gnupg`: be aware that the
> `gnupg` package in debian is going through this transition.
> 
> A few general thoughts:
> 
>  * If your package `Depends: gnupg` for signature verification only,
>    you might prefer to have it `Depends: gpgv` instead.  `gpgv` is a
>    much simpler tool that the full-blown GnuPG suite, and should be
>    easier to manage.  I'm happy to help with such a transition (we've
>    made it recently with `apt` already)

How will that work for popularity-contest ?
popularity-contest use gpg for encryption and not signature, and this
is not handled by gpgv.

Specifically in /etc/cron.daily/popularity-contest

  GPGHOME=`mktemp -d`
  $GPG --batch --no-options --no-default-keyring --trust-model=always \
       --homedir "$GPGHOME" --keyring $KEYRING --quiet \
       --armor -o "$POPCONGPG" -r $POPCONKEY --encrypt "$POPCON"
  rm -rf "$GPGHOME"

Cheers,
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here.