The PGP key of Debian repository expired a few days ago. I've updated
its expiration date and re-uploaded it at

  https://mirror.sr.ht/debian/key.asc

you need to add it back to your /etc/apt/trusted.gpg.d in order the
repository to be usable again.


Besides, I maintain this repository and Debian packages for Sourcehut
alone for about two years now and I'd appreciate some help on this task.
It'd make sense since I'm not using the packages myself anymore. If
you're interested, please get in touch. Thanks.

Added "help wanted" to the packages page:

https://man.sr.ht/packages.md#debian

You've done a wonderful job, thanks for all of your hard work :)

Hi Denis,

What kind of help do you need?


Cheers, Salman

> What kind of help do you need?

I'm looking for someone to share the maintenance of packaging and 
repository infrastructure with.

Basically, this requires reasonable knowledge of Debian packaging (and 
sourcehut) and the will to support the initiative until this can be 
handed over to the Debian project (which could occur during the beta 
phase). (If you're self-hosting a sourcehut instance installed with 
Debian packages, you're probably a good candidate also.)

For now, and in general, there's not so much work to do because 
everything is already set up and automated through CI.

Nevertheless, there are some practical tasks for someone willing to 
help: package janitoring (like bumping debhelper versions, etc.), make 
sure all go binaries are shipped, package missing bits (e.g. 
pages.sr.ht), etc.

Hello Denis,

On Thu 24 Jun 2021 at 08:43AM +02, Denis Laxalde wrote:

>> What kind of help do you need?
>
> I'm looking for someone to share the maintenance of packaging and
> repository infrastructure with.
>
> Basically, this requires reasonable knowledge of Debian packaging (and
> sourcehut) and the will to support the initiative until this can be
> handed over to the Debian project (which could occur during the beta
> phase). (If you're self-hosting a sourcehut instance installed with
> Debian packages, you're probably a good candidate also.)

Official Debian packages will happen a lot faster if those maintaining
the current unofficial packages help form a packaging team within Debian
dedicated to packaging sourcehut -- would take a lot longer for people
starting from scratch.

I agree that the beta period would be an appropriate time to upload
packages to our experimental repository.  Exciting!

Thanks for your work.

-- 
Sean Whitton

I just stupidly posted in the sr.ht-packages list.

The key at https://mirror.sr.ht/debian/key.asc is still expired.

$ wget https://mirror.sr.ht/debian/key.asc -q -O - | gpg
pub   rsa2048/0585B50AC6A4914D 2019-06-20 [SC] [expired: 2021-06-19]
      6B1296C65B24472674E7B6520585B50AC6A4914D
uid                           SourceHut Debian <debian@sr.ht>
sub   rsa2048/C2BB553216B5079B 2019-06-20 [E] [expired: 2021-06-19]

> The key at https://mirror.sr.ht/debian/key.asc is still expired.

I just re-uploaded it.

For some reason, it seems that the old key sometimes comes back on the
mirror without me doing anything. (This is the fourth time, since June,
that I have to do this.)

On Sun Aug 22, 2021 at 2:11 PM CEST, Denis Laxalde wrote:
> For some reason, it seems that the old key sometimes comes back on the
> mirror without me doing anything. (This is the fourth time, since June,
> that I have to do this.)

I don't know of anything on our end which would keep booting it back.
Something in your automation scripts?

> Something in your automation scripts?

Yes. Quite likely because the old key was stored in git and I forgot
about that. Thanks Armin for fixing this.