#1110242 dscverify: no file spec lines in dpkg_1.22.21.dsc

Package:
devscripts
Source:
devscripts
Description:
scripts to make the life of a Debian Package maintainer easier
Submitter:
Thorsten Glaser
Date:
2025-08-09 10:19:01 UTC
Severity:
normal
Tags:
#1110242#5
Date:
2025-08-01 19:10:15 UTC
From:
To:
tg@tgb1:/tmp $ dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  3449  100  3449    0     0  17626      0 --:--:-- --:--:-- --:--:-- 17687
dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 5609k  100 5609k    0     0   662k      0  0:00:08  0:00:08 --:--:--  683k
dpkg_1.22.21.dsc:
      Good signature found
dscverify: no file spec lines in dpkg_1.22.21.dsc
Validation FAILED!!
tg@tgb1:/tmp $ dscverify dpkg_1.22.21.dsc
dpkg_1.22.21.dsc:
      Good signature found
dscverify: no file spec lines in dpkg_1.22.21.dsc
Validation FAILED!!
1|tg@tgb1:/tmp $ dscverify --nosigcheck dpkg_1.22.21.dsc
dpkg_1.22.21.dsc:
   validating dpkg_1.22.21.tar.xz
All files validated successfully.


This is… quite hindering.
--- /etc/devscripts.conf ---
Empty.

--- ~/.devscripts ---
DEBCHANGE_AUTO_NMU=no
DEBCHANGE_MAINTTRAILER=no
DEBCHANGE_MULTIMAINT_MERGE=yes
RMADISON_URL_MAP_uddall=https://qa.debian.org/cgi-bin/madison.cgi?table=all
RMADISON_URL_MAP_uddnew=https://qa.debian.org/cgi-bin/madison.cgi?table=new
RMADISON_URL_MAP_udddebian=https://qa.debian.org/cgi-bin/madison.cgi?table=debian
RMADISON_URL_MAP_uddderivs=https://qa.debian.org/cgi-bin/madison.cgi?table=derivatives
RMADISON_URL_MAP_uddubuntu=https://qa.debian.org/cgi-bin/madison.cgi?table=ubuntu
RMADISON_URL_MAP_archive=https://qa.debian.org/cgi-bin/madison.cgi?table=archived
RMADISON_URL_MAP_ports=https://qa.debian.org/cgi-bin/madison.cgi?table=ports
#1110242#10
Date:
2025-08-01 19:56:52 UTC
From:
To:
Control: tags -1 + moreinfo

mmdebstrap --include=devscripts,curl,debian-keyring --chrooted-customize-hook='dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc' testing /dev/null

I: running --chrooted-customize-hook in shell: sh -c 'dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc'
dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  3449  100  3449    0     0  12721      0 --:--:-- --:--:-- --:--:-- 12726
dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 5609k  100 5609k    0     0  3026k      0  0:00:01  0:00:01 --:--:-- 3025k
dpkg_1.22.21.dsc:
      Good signature found
   validating dpkg_1.22.21.tar.xz
All files validated successfully.
dpkg-source: info: extracting dpkg in dpkg-1.22.21
dpkg-source: info: unpacking dpkg_1.22.21.tar.xz
dpkg_1.22.21.dsc:
      Good signature found
   validating dpkg_1.22.21.tar.xz
All files validated successfully.


dscverify supposedly calls gpg to verify the signatures, and then uses the
output as the .dsc contents. Maybe gpg is broken on your system.

Chris
#1110242#17
Date:
2025-08-08 01:09:07 UTC
From:
To:
Erm.

Could you please check for the presence of gpg2 before gpg?

I know that’s not a normal Debian setup, but… it would help.

Thanks.
#1110242#22
Date:
2025-08-08 09:17:08 UTC
From:
To:
and then what?

help how?

$ ls -la /usr/bin/gpg2
lrwxrwxrwx 1 root root 3  1. Jun 06:45 /usr/bin/gpg2 -> gpg
#1110242#27
Date:
2025-08-08 23:35:17 UTC
From:
To:
my $havegpg              = first { find_command($_) } qw(gpg2 gpg);

Yeswell… I deviate from Debian here on my systems.

lrwxrwxrwx 1 root root       4 15. Jun 05:09 /usr/bin/gpg -> gpg1*
-rwxr-xr-x 1 root root  967624 25. Dez 2024  /usr/bin/gpg1*
lrwxrwxrwx 1 root root      12 15. Jun 05:09 /usr/bin/gpg2 -> gpg2.distrib*
-rwxr-xr-x 1 root root 1230016 30. Jul 21:32 /usr/bin/gpg2.distrib*

For Reasons™.

I don’t expect support, but this is a five-octet change that
won’t hurt anything else. Sure I can also patch that locally.

(I hadn’t realised that this could have been the cause, as it
worked just fine for the last… five or so releases.)

bye,
//mirabilos
#1110242#32
Date:
2025-08-09 10:17:18 UTC
From:
To:
oh well :)

can you provide a patch then, please? tested on your system setup
and on the default please.