The PGP key of Debian repository expired a few days ago. I've updated
its expiration date and re-uploaded it at
https://mirror.sr.ht/debian/key.asc
you need to add it back to your /etc/apt/trusted.gpg.d in order the
repository to be usable again.
Besides, I maintain this repository and Debian packages for Sourcehut
alone for about two years now and I'd appreciate some help on this task.
It'd make sense since I'm not using the packages myself anymore. If
you're interested, please get in touch. Thanks.
> What kind of help do you need?
I'm looking for someone to share the maintenance of packaging and
repository infrastructure with.
Basically, this requires reasonable knowledge of Debian packaging (and
sourcehut) and the will to support the initiative until this can be
handed over to the Debian project (which could occur during the beta
phase). (If you're self-hosting a sourcehut instance installed with
Debian packages, you're probably a good candidate also.)
For now, and in general, there's not so much work to do because
everything is already set up and automated through CI.
Nevertheless, there are some practical tasks for someone willing to
help: package janitoring (like bumping debhelper versions, etc.), make
sure all go binaries are shipped, package missing bits (e.g.
pages.sr.ht), etc.
Hello Denis,
On Thu 24 Jun 2021 at 08:43AM +02, Denis Laxalde wrote:
>> What kind of help do you need?>> I'm looking for someone to share the maintenance of packaging and> repository infrastructure with.>> Basically, this requires reasonable knowledge of Debian packaging (and> sourcehut) and the will to support the initiative until this can be> handed over to the Debian project (which could occur during the beta> phase). (If you're self-hosting a sourcehut instance installed with> Debian packages, you're probably a good candidate also.)
Official Debian packages will happen a lot faster if those maintaining
the current unofficial packages help form a packaging team within Debian
dedicated to packaging sourcehut -- would take a lot longer for people
starting from scratch.
I agree that the beta period would be an appropriate time to upload
packages to our experimental repository. Exciting!
Thanks for your work.
--
Sean Whitton
I just stupidly posted in the sr.ht-packages list.
The key at https://mirror.sr.ht/debian/key.asc is still expired.
$ wget https://mirror.sr.ht/debian/key.asc -q -O - | gpg
pub rsa2048/0585B50AC6A4914D 2019-06-20 [SC] [expired: 2021-06-19]
6B1296C65B24472674E7B6520585B50AC6A4914D
uid SourceHut Debian <debian@sr.ht>
sub rsa2048/C2BB553216B5079B 2019-06-20 [E] [expired: 2021-06-19]
> The key at https://mirror.sr.ht/debian/key.asc is still expired.
I just re-uploaded it.
For some reason, it seems that the old key sometimes comes back on the
mirror without me doing anything. (This is the fourth time, since June,
that I have to do this.)
On Sun Aug 22, 2021 at 2:11 PM CEST, Denis Laxalde wrote:
> For some reason, it seems that the old key sometimes comes back on the> mirror without me doing anything. (This is the fourth time, since June,> that I have to do this.)
I don't know of anything on our end which would keep booting it back.
Something in your automation scripts?
Does anyone know if sr.ht is ineligible for main or contrib? (Debian
policy problems, etc?) Getting it into Debian would at least mean build
and distribution would be handled by Debian infrastructure. (Though
would not help much with finding a maintainer.) There's been an open
request-for-package [1] since at least 2019.
I've never touched Debian packaging but I might be willing to give it a
try (that's a might, not a will; my brain chemistry means I will
probably lose all interest in a week unfortunately). I'll have to read a
lot of policy documents though. Having the packages already existing
means it should be a less immense task (a thousand thanks to Denis).
[1]
Debian bug #920873
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920873>
(and its friends)
...
I'm very sorry for not reading. I have now read the other posts in the
thread.
With the caveats I gave above, I may be willing to lend some help
with getting Sourcehut into Debian when that becomes a prospect.
Personally I would suggest it could be good to start at least preparing
some of the Debian-side stuff for doing that now rather than waiting
for beta. I don't currently know what exactly needs to be done for that
but I can read and follow instructions, usually.
Perhaps I'll go look at getting some of the dependencies in.