[Dev] peculiar entries in the repo-lint report

Andreas Grapentin andreas at grapentin.org
Tue Aug 13 09:45:49 GMT 2019


On Fri, Aug 09, 2019 at 06:05:26AM -0400, bill-auger wrote:
> could you explain the entries in the sections "repo.db entries
> with mismatched signing keys:" and "packages with invalid
> signatures:" - it looks like a bug with the lint script - the
> keyring package is on those lists - that is signed by the
> autobuilder - that signature is surely valid
> 
> the entries referring to 'C3F4FFCF3EAE8697' are correct; but
> the ones with 'GPG-EXIT 33554433' look fishy
> 
> libre/armv7h/parabola-keyring:
>   GPG-EXIT 33554433 != A170D6A0B669E21A
> libre/armv7h/parabola-keyring-20190719-1-any.pkg.tar.xz:
>   no public key: gpg-exit 33554433

Yes, this is a probably a bug.

> BTW - where is the code for the linter? - i have some checks i
> could add to it

I've pushed it to git.parabola.nu here:
https://git.parabola.nu/~oaken-source/parabola-repolint.git/

and there's also a mirror on github.

Best,
Andreas

> _______________________________________________
> Dev mailing list
> Dev at lists.parabola.nu
> https://lists.parabola.nu/mailman/listinfo/dev

-- 

------------------------------------------------------------------------------
my GPG Public Key:                 https://files.grapentin.org/.gpg/public.key
------------------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20190813/9b5cb922/attachment.sig>


More information about the Dev mailing list