bzr-buildpackage fails GPG signing

Bug #1328281 reported by Jeff Lane 
18
This bug affects 4 people
Affects Status Importance Assigned to Milestone
bzr-builddeb (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Something in 14.04 has changed with regards to GPG signing of packages.

I have a package I just tried to build locally that has a changelog timestamp like so:

-- Jeff Lane <email address hidden> Thu, 22 May 2014 12:15:56 -0400

Admittedly, it's been a while since I last tried or needed to build a package locally, but I don't recall ever seeing this issue.

I kept getting errors with GPG signing like this:

Now signing changes and any dsc files...
 signfile plainbox-provider-opencompute-testing_0.1.dsc Jeff Lane <email address hidden>
gpg: skipped "Jeff Lane <email address hidden>": secret key not available
gpg: /tmp/debsign.8leq9PBu/plainbox-provider-opencompute-testing_0.1.dsc: clearsign failed: secret key not available
debsign: gpg error occurred! Aborting....
debuild: fatal error at line 1283:
running debsign failed
bzr: ERROR: The build failed.

Inside my key, I have several addresses listed and nicknames for each like so:

uid Jeff Lane (Primary Canonical) <email address hidden>

After a bit of digging, it seems that I have to now include the nickname in teh control file to get gpg signing to work.

Like this:

 -- Jeff Lane (Primary Canonical) <email address hidden> Thu, 22 May 2014 12:15:56 -0400

This is unacceptable, the nick does NOT need to be preserved in debian/changelog.

This is the first time I've used bzr-buildpackage, I've typically just used debuild with -k to specify a key to use.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: bzr-builddeb 2.8.7ubuntu1
ProcVersionSignature: Ubuntu 3.13.0-26.48-generic 3.13.11
Uname: Linux 3.13.0-26-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
CurrentDesktop: Unity
Date: Mon Jun 9 17:33:06 2014
InstallationDate: Installed on 2012-03-15 (816 days ago)
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Alpha amd64 (20120307)
PackageArchitecture: all
SourcePackage: bzr-builddeb
UpgradeStatus: Upgraded to trusty on 2014-04-20 (50 days ago)

Revision history for this message
Jeff Lane  (bladernr) wrote :
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in bzr-builddeb (Ubuntu):
status: New → Confirmed
Revision history for this message
James Westby (james-w) wrote :

Hi,

Does signing succeed if you run

  bzr-buildpackage -- -k$KEYID

?

Thanks,

James

Revision history for this message
Néstor Acevedo (sainthyoga2003) wrote :

Hi, a little late from my part but that last one works for me.

Jeff Lane  (bladernr)
Changed in bzr-builddeb (Ubuntu):
status: Confirmed → Invalid
Revision history for this message
Igor Zinovyev (zinigor) wrote :

Sorry to revive this thread, but shouldn't builddeb honor the `DEBSIGN_KEYID` environment variable and use the provided ID?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.