Bug#850299: libgnupg-perl: FTBFS randomly (not enough entropy)
gregor herrmann
gregoa at debian.org
Sat Jan 21 13:10:55 UTC 2017
On Sat, 21 Jan 2017 14:01:20 +0100, Santiago Vila wrote:
> I wonder if we can really assume that an autobuilder will always have
> enough "entropy", like we do for memory.
Yup, that's a good question ...
> Apparently we implicitly assume such thing, but I still think we should not.
> For example: Does this package really need to generate a key at build
> time? It may not be pregenerated and used during the build, like other
> packages do? (mini-buildd comes to mind).
The package has support for various gpg operations, and tests them.
This involves key generation, and signing/verifying,
encrypting/decrypting.
When I looked at this issue after you filed the bug, I tried to just
disable the key generation test, which is easy but not helpful
because some other tests then fail because of the missing key.
So yeah, maybe a pre-generated key would be a compromise ...
Cheers,
gregor
--
.''`. https://info.comodo.priv.at/ - Debian Developer https://www.debian.org
: :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
`. `' Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
`- NP: Bob Dylan: Drifter's Escape
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20170121/e163b9d1/attachment.sig>
More information about the pkg-perl-maintainers
mailing list