On Sat, 15 Nov 2014 15:25, Dimstar / Dominique Leuenberger wrote:
Hi geeko packagers,
Please note that we are receiving a new version of gpg (2.1.0) in Factory probably rather soon...
One thing to note is that the current version of %gpg_verify passes --gpg2 to the command, which is no longer understood.
There are obviously two ways to fix it: - Fix %gpg_verify to no longer pass --gpg; surely simple, but I don't prefer the solution - Remove the gpg_verify commands from the .spec files;
In fact, usage of gpg_verify has been deprecated in favor of the obs service source_validator (which runs at each osc ci call or you can call it using osc service lr source_validator).
As we already have implicit verification of the signatures there, it is of no use to verify the signature during build again. Which is also the reason why option one is not that appealing.
Can I please ask the package maintainers to work with us and eliminate this wherever it is still used in Factory?
Thanks a lot!
Hi Dominique, please include the information since which version (%suse_version) source_validator is valid to use in spec-file [sample-code] if %suse_version > [last_non_source_validator_version] use_of_source_validator else use_of_gpg_verify fi [/sample-code] Thanks - Yamaban. -- "Sane? What is that? Can you eat it?" -- a student after a night of coding for a semester-project. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org