Package: devscripts Version: 2.23.4 Severity: normal Earlier this month I attempted to upload a security-related stable-pu; however, "debsign foo.changes && dput foo.changes" never reached the dput stage, because GPG decided that it was a good time to update the trustdb. Updating the trustdb takes about five minutes on my system, and it runs this before running pinentry to actually make the signature. I ran out of free time while waiting.
An up-to-date trustdb isn't needed to sign a changes file, so I think --no-auto-check-trustdb should be debsign's default. Alternatively, please allow it to be set as a config option. It looks like this would be a trivial patch, but I'd like to confirm with others that this would be a good idea, and that I'm not just biased! Thank you, Nicholas I consulted the changelog of 2.23.6 to confirm this bug is still outstanding. -- Package-specific info: --- /etc/devscripts.conf --- DEBCHANGE_MULTIMAINT_MERGE=yes DEBCHANGE_MAINTTRAILER=yes DEBSIGN_KEYID=E2A6261E3900AED7CDC667085A8830475F7D1061 DPKGSIG_KEYID=E2A6261E3900AED7CDC667085A8830475F7D1061 NMUDIFF_DELAY=7 USCAN_DESTDIR=/home/sten/devel/tarballs --- ~/.devscripts --- Empty. -- System Information: Debian Release: 12.1 APT prefers stable-security APT policy: (500, 'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-11-rt-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages devscripts depends on: ii dpkg-dev 1.21.22 ii fakeroot 1.31-1.2 ii file 1:5.44-3 ii gnupg 2.2.40-1.1 ii gnupg2 2.2.40-1.1 ii gpgv 2.2.40-1.1 ii libc6 2.36-9+deb12u1 ii libfile-dirlist-perl 0.05-3 ii libfile-homedir-perl 1.006-2 ii libfile-touch-perl 0.12-2 ii libfile-which-perl 1.27-2 ii libipc-run-perl 20220807.0-1 ii libmoo-perl 2.005005-1 ii libwww-perl 6.68-1 ii patchutils 0.4.2-1 ii perl 5.36.0-7 ii python3 3.11.2-1+b1 ii sensible-utils 0.0.17+nmu1 ii wdiff 1.2.2-5 Versions of packages devscripts recommends: ii apt 2.6.1 ii curl 7.88.1-10+deb12u1 ii dctrl-tools 2.24-3+b1 ii debian-keyring 2022.12.24 ii dput 1.1.3 ii equivs 2.3.1 ii libdistro-info-perl 1.5 ii libdpkg-perl 1.21.22 ii libencode-locale-perl 1.05-3 ii libgit-wrapper-perl 0.048-2 ii libgitlab-api-v4-perl 0.26-3 ii liblist-compare-perl 0.55-2 ii liblwp-protocol-https-perl 6.10-1 ii libsoap-lite-perl 1.27-3 ii libstring-shellquote-perl 1.04-3 ii libtry-tiny-perl 0.31-2 ii liburi-perl 5.17-1 ii licensecheck 3.3.5-1 ii lintian 2.116.3 ii man-db 2.11.2-2 ii patch 2.7.6-7 ii pristine-tar 1.50 ii python3-apt 2.6.0 ii python3-debian 0.1.49 ii python3-magic 2:0.4.26-3 ii python3-requests 2.28.1+dfsg-1 ii python3-unidiff 0.7.3-1 ii python3-xdg 0.28-2 ii strace 6.1-0.1 ii unzip 6.0-28 ii wget 1.21.3-1+b2 ii xz-utils 5.4.1-0.2 Versions of packages devscripts suggests: ii adequate 0.15.7 ii at 3.2.5-1+b1 ii autopkgtest 5.28 pn bls-standalone <none> ii build-essential 12.9 pn check-all-the-things <none> pn cvs-buildpackage <none> ii debhelper 13.11.4 ii diffoscope 240 pn disorderfs <none> ii dose-extra 7.0.0-1+b2 pn duck <none> ii elpa-devscripts 40.5 ii faketime 0.9.10-2.1 ii gnuplot 5.4.4+dfsg1-2 ii gnuplot-qt [gnuplot] 5.4.4+dfsg1-2+b2 ii how-can-i-help 17 ii libauthen-sasl-perl 2.1600-3 pn libdbd-pg-perl <none> ii libfile-desktopentry-perl 0.22-3 pn libterm-size-perl <none> ii libtimedate-perl 2.3300-2 ii libyaml-syck-perl 1.34-2+b1 ii mailutils [mailx] 1:3.15-4 pn mmdebstrap <none> pn mozilla-devscripts <none> ii mutt 2.2.9-1+b1 ii openssh-client [ssh-client] 1:9.2p1-2 ii piuparts 1.1.7 pn postgresql-client <none> pn pristine-lfs <none> ii quilt 0.67+really0.66-1 ii ratt 0.0~git20190123.9e77a6d-1+b6 pn reprotest <none> ii svn-buildpackage 0.8.8 ii w3m 0.5.3+git20230121-2 -- no debconf information
