Bug 36124 - Remove debian-archive-keyring and emdebian-archive-keyring
Remove debian-archive-keyring and emdebian-archive-keyring
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: General
UCS 4.0
All Linux
: P5 normal (vote)
: UCS 4.0
Assigned To: Philipp Hahn
Stefan Gohmann
: interim-3
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-10-10 13:01 CEST by Philipp Hahn
Modified: 2014-11-26 06:53 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2014-10-10 13:01:59 CEST
Our UCS-4.0-0 scope currently contains the package "debian-archive-keyring" with priority "important", which makes it get picked up by "debootstrap" and installed on new UCS-4 system installations.

$ repo_stat.py debian-archive-keyring
Package statistics for debian-archive-keyring in buildsystem buildsystem/billy.knut.univention.de :
2007.02.19 imported on 1971-01-01 00:00:00 (auto import)
 Included in release tag 2.0-0-0 (4184)
 Included in release tag 2.1-0-0 (4184)
 Included in release tag 2.2-0-0 (4184)
2006.11.22~bpo.2 imported on 1971-01-01 00:00:00
 Included in release tag 1.9-0-0 (7396)
2009.01.31 imported on 2009-04-04 22:22:07.138399 (auto import)
 Included in release tag 2.3-0-0 (12325)
 Included in release tag 2.4-0-0 (12325)
2012.4 imported on 2014-01-07 05:23:16.388456
 Included in release tag 4.0-0-0 (53753)

$ repo_stat.py emdebian-archive-keyring
Package statistics for emdebian-archive-keyring in buildsystem buildsystem/billy.knut.univention.de :
2.0.1 imported on 2010-12-24 15:16:04.373105 (auto import)
 Included in release tag 3.0-0-0 (23315)
2.0.3 imported on 2014-01-07 12:30:58.490291
 Included in release tag 4.0-0-0 (54231)

$ apt-key list
...
/etc/apt/trusted.gpg.d/debian-archive-....gpg
...
/etc/apt/trusted.gpg.d/emdebian-archive-....gpg
...
Comment 1 Philipp Hahn univentionstaff 2014-10-10 14:49:33 CEST
repo_admin.py
 rm sr
  debian-archive-keyring
  53753
  add 4.0-0
  done
 rm sr
  emdebian-archive-keyring
  54231
  add 4.0-0
  done

Because of Bug #36126:
# rm /var/univention/buildsystem2/packages/ucs_4.0-0/all/emdebian-archive-keyring-udeb_2.0.3.4.201403212345_all.udeb.packages /var/univention/buildsystem2/packages/ucs_4.0-0/all/debian-archive-keyring-udeb_2012.4.9.201403191131_all.udeb.packages /var/univention/buildsystem2/apt/ucs_4.0-0/all/emdebian-archive-keyring-udeb_2.0.3.4.201403212345_all.udeb /var/univention/buildsystem2/apt/ucs_4.0-0/all/debian-archive-keyring-udeb_2012.4.9.201403191131_all.udeb
# repo-apt-ftparchive --release ucs_4.0-0 --arch all

$ isoinfo -f -R -i ucs_4.0-0-20141010-133246-dvd-amd64.iso | grep archive-key
/all/univention-archive-key_5.0.0-1.14.201407150728_all.deb

r54321 | Bug #36124 test: Check for APT key rings
 Added ucs-test case to ensure that only the UCS key ring is installed

Package: ucs-test
Version: 5.0.19-1.823.201410101442
Branch: ucs_4.0-0
Comment 2 Stefan Gohmann univentionstaff 2014-11-03 07:25:53 CET
I saw the following message in the dvd build log file:

03 Nov 2014 06:50:30 INFO     apt-get build-dep -y --force-yes debian-installer
03 Nov 2014 06:50:30 DEBUG    CMD: ['chroot', '/var/univention/buildsystem2/temp/build-dvd/tmp4H060S.pid-14637.20141103-064901.d-i', 'apt-get', 'build-dep', '-y', '--force-yes', 'debian-installer']
Reading package lists...
Building dependency tree...
Reading state information...
E: Build-Depends dependency for debian-installer cannot be satisfied because package debian-archive-keyring has no candidate version
03 Nov 2014 06:50:30 DEBUG    EXITCODE = 100

Log file: /var/univention/buildsystem2/isotests/ucs_4.0-0-20141103-064901-dvd-amd64.log
Comment 3 Philipp Hahn univentionstaff 2014-11-03 15:40:29 CET
r55270 | Bug #36124 DVD: Fix build-depends for debian-installer
 build-cd-ucs4 was using the unpatched .dsc file for resolving the build dependencies.
 Switch to directly using pbuilder-satisfydepends.

Package: repo-ng
Version: 2.0-93.1337.201411031336
Branch: ucs_3.2-0
Scope: internal

r13993 | Bug #36124: Remove debian-archive-keyring

BS2=/var/univention/buildsystem2/
$EDITOR $BS2/apt/source/debian-installer_*.dsc
md5sum $BS2/apt/source/debian-installer_*.dsc
sha1sum $BS2/apt/source/debian-installer_*.dsc
sha256sum $BS2/apt/source/debian-installer_*.dsc
$EDITOR $BS2/apt/source/debian-installer_*.changes
repo-apt-ftparchive --release ucs_4.0-0 --pkg-dir $BS2/packages --src-pkg debian-installer --arch source

debian-installer-images_20130613.147.20141103142853_amd64.tar.gz
ucs_4.0-0-20141103-151742-dvd-amd64.iso
Comment 4 Stefan Gohmann univentionstaff 2014-11-04 10:54:32 CET
OK, package is no longer part of UCS 4
Comment 5 Stefan Gohmann univentionstaff 2014-11-26 06:53:57 CET
UCS 4.0-0 has been released:
 http://docs.univention.de/release-notes-4.0-0-en.html
 http://docs.univention.de/release-notes-4.0-0-de.html

If this error occurs again, please use "Clone This Bug".