[Pkg-rust-maintainers] Bug#1105027: sqv: since yesterday's trickle to Testing, fails to verify Debian archive key

[Holger Levsen]

control: tags -1 + moreinfo
thanks

On Sat, May 10, 2025 at 11:02:55AM +0300, Martin-Éric Racine wrote:
> Since the above sqv bin-NMU trickled down to Trixie, APT systematically fails to verify Debian archive keys:
[...]
> W: Some index files failed to download. They have been ignored, or old ones used instead.

> $ dpkg -l | grep archive-keyring
> ii  debian-archive-keyring         2025.1                         all          OpenPGP archive certificates of the Debian archive
> ii  debian-ports-archive-keyring   2025.04.05                     all          OpenPGP archive certificates of the debian-ports archive

what are your versions of apt and sqv installed?
 
> This only happens on one of my Trixie hosts, so this could be a Rust issue.

how strange, though I dont understand why you think this would be a Rust issue?

> Architecture: i386 (i686)

ok, maybe this ^ hints at an Rust on i386 issue...

do you have several i386 hosts or only one? what CPU models do they have?

fwiw:

root at psi:~# apt update
Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://deb.debian.org/debian trixie-updates InRelease
Hit:3 http://deb.debian.org/debian trixie-backports InRelease
Hit:4 http://security.debian.org trixie-security InRelease
All packages are up to date.                  
Notice: Some sources can be modernized. Run 'apt modernize-sources' to do so.
root at psi:~# dpkg -l apt sqv gnupg2 debian-archive-keyring debian-ports-archive-keyring
dpkg-query: no packages found matching debian-ports-archive-keyring
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                   Version      Architecture Description
+++-======================-============-============-======================================>
ii  apt                    3.0.1        amd64        commandline package manager
ii  debian-archive-keyring 2025.1       all          OpenPGP archive certificates of the De>
un  gnupg2                 <none>       <none>       (no description available)
ii  sqv                    1.3.0-1+b1   amd64        Simple OpenPGP signature verification >
root at psi:~# 


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

We are not moving into a 1.5C world, we are briefly passing through it in 2024.
(James Hansen)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20250510/12a8bec0/attachment.sig>