[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1035089: marked as done (bookworm: gpgv must be installed for successful upgrades)

Your message dated Tue, 23 May 2023 12:14:31 +0200
with message-id <9e941ed0-5130-61f3-4486-bdcb7a5d8b1f@debian.org>
and subject line Re: Bug#1035089: bookworm: gpgv must be installed for successful upgrades
has caused the Debian Bug report #1035089,
regarding bookworm: gpgv must be installed for successful upgrades
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1035089: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035089
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release-notes
Severity: normal
Tags: patch
X-Debbugs-Cc: jmw@debian.org

Hi,

Attached patch adds a section in the upgrade guide to ensure gpgv is
installed. Most users will have this if they have followed previous
upgrade guidance not to skip releases. However, without it they will not
be able to upgrade at all because the release signing key is not
validated correctly.

diff --git a/en/upgrading.dbk b/en/upgrading.dbk
index 8f176d80..cdd14a45 100644
--- a/en/upgrading.dbk
+++ b/en/upgrading.dbk
@@ -451,6 +451,16 @@ $ apt-forktracer | sort
     </para>
   </section>
 
+  <section id="install-gpgv">
+    <title>Check gpgv is installed</title>
+    <para>
+      APT needs <command>gpgv</command> version 2 or greater to verify the keys used
+      to sign releases of &newreleasename;. Ensure it is installed with:
+    </para>
+    <screen>
+$ apt install gpgv
+    </screen>
+  </section>
   <section id="package-status">
     <title>Check package status</title>
     <para>

--- End Message ---
--- Begin Message --- 
Hi,

On 29-04-2023 15:51, Justin B Rye wrote:

Maybe something like:
	APT needs <command>gpgv</command> version 2 or greater to verify the keys used
	to sign releases of &newreleasename;. Since gpgv1 technically satisfies the
	dependency but is useful only in specialized circumstances, users may wish to
	ensure the correct version is installed with:


Pushed, thanks.

Paul

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


--- End Message ---
Reply to: