Mailinglist Archive: opensuse-buildservice (63 mails)

< Previous Next >
[opensuse-buildservice] source_validator and the gpg signature
Hi there,

I just tried to add a gpg signature to my lxc-2.0.x package. When
running the source_validator locally, as suggested on [1], I get this:

LANG=C osc service localrun source_validator
(E) error: mentioned in spec file is not tracked.
(E) Macro mentioned in spec file is not tracked.
(E) %beta_rel mentioned in spec file is not tracked.
(E) has mentioned in spec file is not tracked.
(E) empty mentioned in spec file is not tracked.
(E) body mentioned in spec file is not tracked.
gpg: assuming signed data in
'/home/Buildservice/LXC/LXC_Vanilla_stable-2.0/lxc/lxc-2.0.7.tar.gz'
gpg: Signature made Mon Jan 23 18:49:45 2017 CET
gpg: using RSA key 0xC638974D64792D67
gpg: Good signature from "St�phane Graber <stgraber@xxxxxxxxxxxx>"
[unknown]
gpg: aka "St�phane Graber <stgraber@xxxxxxxxxx>"
[unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to
the owner.
Primary key fingerprint: 602F 5676 63E5 93BC BD14 F338 C638 974D
6479 2D67
Aborting: service call failed:
/usr/lib/obs/service/source_validator --outdir
/home/Buildservice/LXC/LXC_Vanilla_stable-2.0/lxc/tmp4dXLu7.source_validator.service

I am not sure what the source_validator actually does not like (apart
from the beta_rel variable, but it seems to fail. The signature is
verified ok, but some other errors apparently are a problem for the
source_validator.

But I can check in the package and it builds without problems.
home:ojkastl_buildservice:LXC_Vanilla_stable-2.0

Misconfiguration on my local machine?

Tumbleweed (with the openSUSE Tools repo)
osc-0.156.0-200.3.noarch
obs-service-source_validator-0.6+git20170111.82ea590-99.1.noarch

Any ideas?

Johannes

[1]
https://en.opensuse.org/openSUSE:Package_source_verification#Validating_signature_in_source_tag_.28recommended.29



< Previous Next >
Follow Ups