Hi, I added a couple mementos at https://wiki.debian.org/LTS/Development about building and testing security uploads. Let me know if this can be improved :)
Copy/paste: - pbuilder usage: # Init (note: jessie->jessie buggy https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806377) sudo pbuilder --create --basetgz /var/cache/pbuilder/base-jessie.tgz \ --distribution jessie \ --othermirror 'deb http://security.debian.org/ jessie/updates main contrib' sudo pbuilder --update --basetgz /var/cache/pbuilder/base-jessie.tgz # Rebuild source and binary packages from Jessie (in extracted source) pdebuild --use-pdebuild-internal --buildresult .. -- --basetgz /var/cache/pbuilder/base-jessie.tgz # Rebuild binary packages from Jessie sudo pbuilder --build --basetgz /var/cache/pbuilder/base-jessie.tgz --debbuildopts '-sa' package+deb8u1.dsc sudo pbuilder --build --basetgz /var/cache/pbuilder/base-jessie.tgz package+deb8u2.dsc - testing: # check for common packaging issues in last build # from extracted source after build, jessie host (only check new errors) lintian -i # inspect source changes debdiff package+deb8u3.dsc package+deb8u4.dsc # inspect binary changes debdiff --from deb8u3/*.deb --to deb8u4/*.deb # test package upgrade sudo piuparts -d jessie \ --extra-repo='deb http://security.debian.org/ jessie/updates main contrib' \ -l piuparts-package.log \ -I :etc/buggy-dep \ package+deb8u4_amd64.changes \ | grep -P '(INFO|ERROR):' Cheers! Sylvain