Skip to content

export-pkgbuild-keys: should not strip subkeys

export-pkgbuild-keys currently uses export-minimal which seems to be stripping all subkeys. This makes the exported file useless for packages with signatures signed by a subkey.

Example: https://github.com/archlinux/svntogit-packages/commit/03f6253282a6a424cfe3010628e8ebe1d331b361

$ gpg --show-keys --with-key-data wireless-regdb/trunk/keys/pgp/2ABCA7498D83E1D32D51D3B5AB4800A62DB9F73A.asc
pub:e:4096:1:AB4800A62DB9F73A:1315465719:1553774773::-:::sc::::::23::0:
fpr:::::::::2ABCA7498D83E1D32D51D3B5AB4800A62DB9F73A:
grp:::::::::9D83542D0F3B7BE8B9313258B14E84A02AAE3902:
pkd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
pkd:1:17:010001:
uid:e::::1522238773::A38DC204FE14CD848233E6030BFFC37802FACE4C::Seth Forshee <seth.forshee@canonical.com>::::::::::0:
uid:e::::1522238773::908E6CDDEBFA5C4ADD6623DC6D16B0021408304A::Seth Forshee <seth@forshee.me>::::::::::0:
uid:e::::1522238773::BA66E277EFD40C1D9CFDEAABABB070DD281EDB5D::Seth Forshee <seth.forshee@gmail.com>::::::::::0:

If the build machine didn't import the key earlier and only import it from this file, the PGP signature verification step will fail during packaging:

==> Verifying source file signatures with gpg...
    wireless-regdb-2022.08.12.tar ... FAILED (unknown public key 530399AEE5F431C9)
==> ERROR: One or more PGP signatures could not be verified!

In comparison, this is the key-data fetched from a living keyserver:

$ gpg --list-keys --with-key-data 0x530399AEE5F431C9
tru::1:1660576940:1665757142:3:1:5
pub:-:4096:1:AB4800A62DB9F73A:1315465719:1680465017::-:::scESCA::::::23::0:
fpr:::::::::2ABCA7498D83E1D32D51D3B5AB4800A62DB9F73A:
grp:::::::::9D83542D0F3B7BE8B9313258B14E84A02AAE3902:
pkd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
pkd:1:17:010001:
uid:-::::1648929017::A38DC204FE14CD848233E6030BFFC37802FACE4C::Seth Forshee <seth.forshee@canonical.com>::::::::::0:
uid:-::::1648929030::908E6CDDEBFA5C4ADD6623DC6D16B0021408304A::Seth Forshee <seth@forshee.me>::::::::::0:
uid:-::::1648929030::21DDB2DFC9960D6E2B38A931926256EE6C24DB44::Seth Forshee <sforshee@kernel.org>::::::::::0:
uid:-::::1648929030::BA66E277EFD40C1D9CFDEAABABB070DD281EDB5D::Seth Forshee <seth.forshee@gmail.com>::::::::::0:
sub:-:255:22:11A05E6AE80A171E:1630088771::::::a:::::ed25519::
fpr:::::::::D5A16D783AEF648D178F040E11A05E6AE80A171E:
grp:::::::::139CF0C603165A233291150A652055BD19D05A99:
pkd:0:80:092B06010401DA470F01:
pkd:1:263:40E09A4CDA2F8E96351FFBE5927C0F5D5A0AF9255065253B86905FDD445007A0B2:
sub:-:2048:1:530399AEE5F431C9:1525284513::::::s::::::23:
fpr:::::::::909EDFAB280BE7113CB81DCF530399AEE5F431C9:
grp:::::::::73D2DBF7D46A717025F51E78BFCFD5C3EAC130FC:
pkd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
pkd:1:17:010001:
sub:-:255:22:3B8C95EA1E741A92:1525099177::::::s:::::ed25519::
fpr:::::::::04FEA160CEA1499A7FDFA66D3B8C95EA1E741A92:
grp:::::::::FCB563D9EC153E1C9B19EF06EECC3871E4CAD997:
pkd:0:80:092B06010401DA470F01:
pkd:1:263:4052CBA5605B3A9E2CE26E80F7B0EA39C083E220E01033236406E8B96A18D8B1CF:
sub:-:4096:1:F73AAC4AD0122D83:1315465719::::::e::::::23:
fpr:::::::::3FC2B18F29DAE00C70559546F73AAC4AD0122D83:
grp:::::::::E631E0DF4B4847F16A66C186423265F0F4E2BD43:
pkd:0:4096:D39A9DB6BD3BDE2148048C9B6257FE2433FF4C81146A437EC050F2DE0688B0148691CDEE0525F1BFC2F051A7E17FA0D6C828D53D584CDC02D5FB5EB0D12BD778DF4319AA4DFE423F0E39CA946B13560B38F507DB9EA4159D7C004C342991917297048EA8D875C5B5A5285449E2BD7C634E2C65315D3E13BBAD0BB0892E63B94D22517AC9BFA371DA8876667AD191FBE06B04AF8298BDEC8C87B84F3293E7112C4C0A747CF2F11DB31BFD3C80B1D34FAA2127A6C8524EAC593E35714284736762D397172AA72DCDA12D1FC3C19743FB0D39639720E439E2E324EC10F7893E7CFF20B68E06031501233149AC46EC74901C13F19EB57E0C723460661890A56D8DAFC70D7A25424B89B174BADBFCB99970886910DC829121F2FB5AA0970E616B042CF7C1CDA75A3072CAEDE0B1C27FD109CE891D428B01A4AA8CC21144271A8B71E72D7DF308B1939E732CD78F6AF2609797C9B5646E6E6805C7C47016BF1B7420207832233C0D546E2E2A870F75951E24492D71322C62EE379DCAE8A7D6B191970568C1F3561E935E68F0496015FB6B358642C2B08EC37A36D37DE80BF0061960040A364C3D10390F1EB2F4F840B64A8001315D17E968C640AC04FDC96D866ABC100693AEA9342CAD383AC2AE07B296FA3603FBA6C5B14601A294317C9B3FDF634C1EB2A20B4B539B466D64886A5A577F8B705C6ECEB2A7F85D928B7C09B1867427:
pkd:1:17:010001:

Note that sub:-:2048:1:530399AEE5F431C9:1525284513::::::s::::::23: is present.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information