[Qa-jenkins-scm] [Git][qa/jenkins.debian.net][master] reproducible Debian rebuilder 'thing': dget is mandatory, dscverify is optional (here)

[Holger Levsen]

Holger Levsen pushed to branch master at Debian QA / jenkins.debian.net


Commits:
191de640 by Holger Levsen at 2020-05-03T16:43:00+02:00
reproducible Debian rebuilder 'thing': dget is mandatory, dscverify is optional (here)

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


1 changed file:

- bin/reproducible_debian_rebuilder_prototype.sh


Changes:

=====================================
bin/reproducible_debian_rebuilder_prototype.sh
=====================================
@@ -130,9 +130,9 @@ cp $FILE $FILE.orig
 # FIXME: file another wishlist bug?
 output_echo "fetching source package $PKG ($VERSION)"
 # just download the source, don't verify it. (keys will expire and be removed from the keyrings)
-# FIXME: we should verify the downloaded source matches the ones described in .buildinfo file, thus indeed it would be cool if debrebuild would download and verify the source. -> file another wishlist bug.
-dget https://deb.debian.org/debian/pool/main/$POOLPATH/$PKG/${PKG}_$VERSION.dsc || echo "Warning: failed to verify signature, continueing anyway."
-
+# FIXME: debrebuild should download the source code too (--optionally) and verify it matches the one described in .buildinfo file. -> file another wishlist bug.
+dget --download-only --allow-unauthenticated https://deb.debian.org/debian/pool/main/$POOLPATH/$PKG/${PKG}_$VERSION.dsc
+dscverify ${PKG}_$VERSION.dsc || echo "Warning: failed to verify signature, continueing anyway."
 
 # prepare rebuild command
 DEBREBUILD=$(mktemp -t debrebuild-cmd.XXXXXXXX)



View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/191de640791a792c18a2165fbd1f1f7cd5f068b3

-- 
View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/191de640791a792c18a2165fbd1f1f7cd5f068b3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-scm/attachments/20200503/ecff8fd4/attachment.html>