Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1264211

Bug#1116659: git-debpush: Please depend on gpg instead of gnupg

Show all headers | View raw

On 2025-09-29 23.34, Sean Whitton wrote:
> Hello,
> 
> On Mon 29 Sep 2025 at 10:55pm +02, Paride Legovini wrote:
> 
>> Package: git-debpush
>> Version: 13.15
>> Severity: normal
>> X-Debbugs-Cc: paride@debian.org
>>
>> Dear Maintainer,
>>
>> Please consider replacing the dependency on the gnupg metapackage
>> (Depends: gnupg) with a dependency on individual GnuPG tools (gpg
>> and possibly others, if needed). This will allow using git-debpush
>> with gpg-from-sq, which does not (and should not) provide gnupg.
> 
> Interesting!
> 
> I don't think we don't invoke gpg directly, but only via git.
> 
> The description of bin:gpg says that bin:gpg won't be enough, because we
> need to make signatures, which is a secret key-involving operation.
> 
> There are a large number of binary packages built by src:gnupg2.
> I'm not sure which we need to depend on, and I'm not sure how good a job
> our CI will do at telling us which are needed, because there are such a
> variety of user configurations.

For signing, gpg and gpg-agent are enough. Note that having gpg-agent
does not defeat the purpose of gpg-from-sq: actually gpg-agent is
*needed* for secret key operations like signing: gpg-from-sq will
interface to it.

Thanks,

Paride

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Paride Legovini <paride@debian.org> - 2025-09-29 23:00 +0200
  Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Sean Whitton <spwhitton@spwhitton.name> - 2025-09-29 23:40 +0200
    Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Paride Legovini <paride@debian.org> - 2025-09-30 22:10 +0200
      Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-09-30 23:10 +0200
        Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Sean Whitton <spwhitton@spwhitton.name> - 2025-10-01 12:40 +0200
          Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Paride Legovini <paride@debian.org> - 2025-10-01 19:00 +0200
            Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Sean Whitton <spwhitton@spwhitton.name> - 2025-10-02 19:30 +0200
              Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-10-02 20:10 +0200
        Bug#1116659: git-debpush: Please depend on gpg instead of gnupg Sean Whitton <spwhitton@spwhitton.name> - 2025-10-02 13:50 +0200

csiph-web