Hi there, I just tried to add a gpg signature to my lxc-2.0.x package. When running the source_validator locally, as suggested on [1], I get this:
LANG=C osc service localrun source_validator (E) error: mentioned in spec file is not tracked. (E) Macro mentioned in spec file is not tracked. (E) %beta_rel mentioned in spec file is not tracked. (E) has mentioned in spec file is not tracked. (E) empty mentioned in spec file is not tracked. (E) body mentioned in spec file is not tracked. gpg: assuming signed data in '/home/Buildservice/LXC/LXC_Vanilla_stable-2.0/lxc/lxc-2.0.7.tar.gz' gpg: Signature made Mon Jan 23 18:49:45 2017 CET gpg: using RSA key 0xC638974D64792D67 gpg: Good signature from "St�phane Graber <stgraber@stgraber.org>" [unknown] gpg: aka "St�phane Graber <stgraber@ubuntu.com>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 602F 5676 63E5 93BC BD14 F338 C638 974D 6479 2D67 Aborting: service call failed: /usr/lib/obs/service/source_validator --outdir /home/Buildservice/LXC/LXC_Vanilla_stable-2.0/lxc/tmp4dXLu7.source_validator.service
I am not sure what the source_validator actually does not like (apart from the beta_rel variable, but it seems to fail. The signature is verified ok, but some other errors apparently are a problem for the source_validator. But I can check in the package and it builds without problems. home:ojkastl_buildservice:LXC_Vanilla_stable-2.0 Misconfiguration on my local machine? Tumbleweed (with the openSUSE Tools repo) osc-0.156.0-200.3.noarch obs-service-source_validator-0.6+git20170111.82ea590-99.1.noarch Any ideas? Johannes [1]
https://en.opensuse.org/openSUSE:Package_source_verification#Validating_sign...