From d55e2a982b985cb3e67a25b18f51cdf7e369fbf4 Mon Sep 17 00:00:00 2001 From: Nicholas D Steeves Date: Mon, 20 Jun 2016 15:38:01 -0400 Subject: * debian/watch: add cryptographic signature verification of tarball. Signed-off-by: Nicholas D Steeves --- debian/changelog | 3 +- debian/upstream/signing-key.asc | 90 +++++++++++++++++++++++++++++++++++++++++ debian/watch | 2 +- 3 files changed, 93 insertions(+), 2 deletions(-) create mode 100644 debian/upstream/signing-key.asc (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 5a9a6943..370abf36 100644 --- a/debian/changelog +++ b/debian/changelog @@ -7,7 +7,8 @@ btrfs-progs (4.5.2-2) UNRELEASED; urgency=high #824894) [ Nicholas D Steeves ] - * debian/watch: add mangling rules to prefer non-rcN versions. + * debian/watch: add mangling rules to prefer non-rcN versions; add + cryptographic signature verification of tarball. -- Dimitri John Ledkov Tue, 26 Jul 2016 12:43:42 +0100 diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc new file mode 100644 index 00000000..bbc871ad --- /dev/null +++ b/debian/upstream/signing-key.asc @@ -0,0 +1,90 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v1 + +mQINBFP+JjYBEACsCYhtglls8Ig6GqpBrbqZwKWyTJf0KzSJdbCoOu0RuJV56N0Q +thQBVHFzkZvYhWoasXfE7T1kfQIsJbuB+8SnJpceaGsN7kP2pw+0seBaI5lrhP+J +FZ2WxVDT96pUS5boa+JB92EgqWU6sTbuYCdDm3N/hVCiuZHjnRL68uIcQrmGQquq +tU7aXxaWiEsAEsXPLeH2j6R0HogHRl45nuMD9Cs4ySAw1GynZsChxoSfk7TtJgBK +IjrBciVtw8w8ndlLcy6BEtgY4yYMRKfxUHbITB7OPUcWAFC7ZrTGsGzQSCvQ2QOq +kiZfEQQRYOBlBhqukWqjnTwg3t1/74FrrL25eGVcgXrw9ILUsl3CWlGIL7y4j+98 +jUosnlgXMxggum7bIeal8Coc9vwveHp0+pydaMlVUGAvaaEy4zb4zGOdC2toaQEc +ZqTi0ElgVEJD/p447yRgWc4HVxjCGfv7IjgvD+Npnhmc1s0d1m/rY6pUBvrrGYFe +qyfQJbd/jJ4BErq9GCJNpIKoAcyZYWNCQWwvQRFr9r6i0CMKQbuY2H6bfGVrS5oL +vWlKdnIxuYsLtQz8uABX4oDFTSo9/csgxW1XOdxmQQU8shVBDYXy0WhHA4AGZ6YJ +A+RjP5tGTCNO4R6gHeRFVs5DM4yekebPS2aNriu8k+Du8tvc2hStOxLzaQARAQAB +tBxEYXZpZCBTdGVyYmEgPGRhdmVAamlrb3MuY3o+iQI9BBMBCgAnAhsDBQkSzAMA +Ah4BAheABQJT/mhABQsJCAcDBRUKCQgLBRYCAwEAAAoJEMVl1fnXbVg7O4oQAJ/c +3NaGBx6EoqbM0E8ZBUdZ5E2D21QQz4Jz/OmFqAxTD8Tm8YymVmG7shKmjnnO+eaJ +mh/bH1CQK6mOdiu/oa0Zjlr7+nKCUTyodlqVpVQHyb81WewMP+2xT9nbOwjBLHRL +PMJ6EJL58jBmStWB6xFLaZSEltTTQC+rmi3nZuUjQdVlMrykmxl0Ow5ALHqyLfPY +rrc6T2qnexEqaLds/HVn5/RXeaGOEvzPYSWUxZn3W3Rf4plzUx3cto7Ntt9EVg80 +aA6nDZBmVPPTOcGQJ/ZWKvNR+z/9XCkPmiMZ/mNLpxANURKkyZTc58bpcdTCTD1k +VffpAxecZVCJQROltI6NPim9zg/sv7uC/3LtvJh8irD/VFjWSIWXV3DP/HXmZBP0 +/G+uEvVoLHhWMgxYz2cf1MQVhDHonQTLBpB/zCXfZMurpa0PKqYKeib4iIWiFkEj +L0SP2uV0T1nhZqAdKZ2bYtnw87z478OAnGlSKLG1dYDu0PTmfIP6AQ3bX7kz4cZt +WXpjGRC+7H4HIuPXMTpa9PUqRcGyOWOX8wRJ3UwtelQZM0HmA/vDRVRC265CQUJ0 +5gwz7H/PwqTd1zJxadjRhSEZ1e05/esz/7oHkTICiCt2ks+OVJIuFZGNayvdCujy +eLPeMkHGRHfAD6TgssI8O1G8JPfjdnoUQ6USwa7qtB5EYXZpZCBTdGVyYmEgPGRz +dGVyYmFAc3VzZS5jej6JAkAEEwEKACoCGwMFCRLMAwACHgECF4ACGQEFAlP+aDYF +CwkIBwMFFQoJCAsFFgIDAQAACgkQxWXV+ddtWDsomw//WtbbQfLy/qerhsoWVjd+ +AyNei8twA2SZ2DUUPODZSshb1mNXD6A2zq6PnN91pYX4Upa5dqiFC3GyZ2cfvGDi +Mx4FFrJFv+CT8dimTR/yONSMhMYcxO/4Zd/04rp5gUN+r7Kf0MstLhsDxDaUxrcg +WaLMz4UTJyrA8NubT9CLJWLLNlH1Miw68SpUuCYY+RIHXrLILJJ1bPzl/TLIvUJg +PP5m+zYSecC6DecpQJKHtN9ZqEaTJwbfmr85g+pBxDUT/ZksELCQnzoNgiApE2zf +/wP/zORzxJpnT/IdGERuA1py/lK6XUCbJRzbftioknxdyEBqLfw2yBqK28Ch2TQp +v6y2Y8eItzgMNuN4VXRHq1H1dVTeg2iNKVDhRMyVyxYwgkIduJnZRpXV0ulbBaRE +VQH1kv3hTmVpmDWMjwysx32VJVwrvYqnZA3HrdLSfCb10F4k3t5dGhL3asaFAQ2J +MJpSmgEYFMWMzTV6jCsvhJzVKwNEu8YqrWYuJWn3r8hNUFjgf+nhCy2SKxTAFimU +IBUO0uYxFVNfbkudvBmexMv/fFaKMeR84/5sLeSDBE7V+KQ5g5BX/e2X/Bixg0t2 +FAXUdrFXpXj5fS40dzR8b+UULPWc/y6DXxz7Nf9tCGDNUn/DanfZlM9x/8Z82s/+ +XrCglWyJxuEJoAdrUezX5c60H0RhdmlkIFN0ZXJiYSA8ZHN0ZXJiYUBzdXNlLmNv +bT6JAj0EEwEKACcCGwMFCRLMAwACHgECF4AFAlP+aEAFCwkIBwMFFQoJCAsFFgID +AQAACgkQxWXV+ddtWDso1w/8CKUuRdSHX8qfLn/+1yiUU0S+Lki+hUNc4xRodGFp +dJQ9xtfi/oDkdHjIZ5q/mFgVv3u+sGXLiNCsRSa1X8cfNdMqfHxlG1LWjeyF0NbK +fk4VKeVGHtdAo7Az4qix6eluHoKFaYXN5zlsW/KChCVGvEzHctrZ+LpetpRRmKO2 +8mmvOFqr/xw3JS/L+N8Gks3KZv9cbIsl5mF1JO6Lj9VAS+qg9ApR3VWKYxjWKmCU +AxRcQo2hROvn8JxxEBJJ8Qz59ADoGCyZSDGyIlrqit0iDIczo4j936I305zo1YH1 +IUeDgnkNfYLMJ9Ic45/euWSHFE6NgwMblF5OVFDB7x9fpfcNI2GuUT5CPePJEpK4 +oo1k7B6gOSw+aopvUoIhKS0kGc4l/lNoLKioUGr7Jf/sgZcwAIUNfSQgNQ0vC+FG +YJXhSUKJ0wwT1MIrOkOzQePzfpe1hTesAp3oXa8mBpGbsZ3b0Fs6EpVrqp7hUxzr +uojz7eUMjqUMdAg/dDj+zHiKfayNO3qd7ki9rIiZ3fsWwL0hB6IZ6QqlMQRjW4yU +/2Fw/h/L6EXTWJ14XnkGbcPvy4l0cHl6hIphHZQu5HVJHTRelRy8dRbmNLMgPDL1 +TYHVTxEnaaWxO1R8GIDWbxgQSISkOnPt1PDcYK746J4uxolU3ueL1XcdptvbPp+3 +Zvu0H0RhdmlkIFN0ZXJiYSA8a2RhdmVAa2VybmVsLm9yZz6JAj0EEwEKACcFAlQT +Am4CGwMFCRLMAwAFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AACgkQxWXV+ddtWDuW +zA//TJEs/CfPPtf8GOPfUB6a2q/moIENPHs8p16Kk0ZjhttwHlOxZT4tpDnn0k3+ +NUvxyIV5nJxZEQ7OThkRkjbvVFiibLQNOcid68RnwN+jASBJXodzKK+cpA6GYshK +uQk43nH4bjVUuJrnwp6HZYalxb2VzDHRSwduDrwOtUYOpMbkGHYMW3lrEhS1dDiS +ZNKMk+OOdeHGPVBOybPZHM3+fPbBjEADDHKb5TnJP2YxA++FgNyfRMVbMGVT+T6n +DSzqT5dtf8aOzYfs2uHsRheyqYzMnPh0Rx/BbeQWIq6pHsCv8j0O8R5uDC87RaET +hO+8CzG3XB72zEAqpAVzMml2HUQLvw55KgQM2ImmG169mLL1cNBVQaTaXvDLT80G +Zfy3D5LFNYj1VklpQNGckV/AjCgvoZf0IJCl387kPhd6ZeuQTL6TDBtsrIzU3Myc +4txpNjK45lZhgqIBpEi/wPAPkKNnt8poeXGCpnJBcnbVBQmdlF3NjeaWP+weXzvR +z1ux7CXI0v/W6TQNuNvSkw/8aabBUJZZ08PKrtGYTZNvrHSgQZjGuOtOax0BNklT +7DPQuIfVEPaOmVxymeitbbGBKeZcjvBhciejA1UyJVRBb1+0RRODmYbNCnbOAPTs +gf0ylb7lww5A4J1KR9V/smZ2WPvMB/O6l4W71frpI/uqUkG5Ag0EU/4rgQEQAOQp +rytaixPANNAAwun96smaKfjdvnLjWwFOplTs2cnWqw1BOR78/XH772zmfiJvLvCu +CVD9ZLP6Kv45Ay8AP3HJXtnHSdYngAkoO8mI9ERuqybe+tXn8myK4MHigiK9Mg+3 +MMDwTM2ihwMRbOCNYhDg8Yhd7h6iZr70l37AxfZBZsQFvph/M+4mL3pFX09F0wUe +cF8QKX/43FSgHyewLwwqvTdKuRV0SC5PRBmbSiYTtIDsT9DihhUI3enpZrigTD2b +LF8o/2lXs7C0CghsXH6MQKlSbPLT2CA3JxIvin9RVj3/rTmNKLkBaSPFznx/2GZf +n6hsGdMqqC2RIyiGLrkNOaA6fYv/ssZ1aPLMk3TKr2W2KgHgmgIbX0ZvcXfgw69v +PzDo+L3ln94JpOXYxuqcOn3duEO44u087yhaFW5zbaEdbumq4JIFWVHCANdYLZKo +y/E0zSwLfWna9D/KioHU6nGWvJ1MkQh1cMWwQFKLKRN6gPRIfJFLHdrldg42+eFa +aDPUQ8T9CNm8/aEIE+Rq/tteQ8gFFTIYFbO2+MQpbFUMYGJ+ebSaz4q+TxO0KUrg +2gw/7QFYOK5iEb/SiTIpA+AkyBS3zoK9iNtk4feX5ICv0tQcf40ntHcbenEO/ngr +1GWTPx+0JbVeeIEbZfpG4KiuBts+9u7RFx8SH9XNABEBAAGJAh8EGAEIAAkFAlP+ +K4ECGwwACgkQxWXV+ddtWDvg4g//X2zZa5eHr8tweruwCIfSQD+pctfWLH76lhiZ +9IhTw3SlgFLVQVDk6OpO1qSZjqNSESSKPLFrtHVTk2pwFy+dPYFpD3OT1THC/67d +CXelB0A8AJlCPhGEkNoL1XBt0LuzXem1mt9vIWRqEPOntcGyc0FoLNSU1L9BHjl8 +lMIAPdoyTwRcjmdUeY2WiHopoXEilfxeflRf9gCMWBQcJwHebboJx394QKT4ai3L +5CdKuBmRgMiZitDIfsPz17TBlmGY3KZQ1wCZ0Xjy4rXj2dRu9Q/XEgy69gCzmKW4 +JTm+kPLy33+uF+ozWDzZTifi1uvFepRaHbm9qKnIIcrIL36B4nZ9I9lEwasNoQyc +3jiq1UFMEWmTzDgTFh0/XXgukOih1AyPCeYbqJ0RVtbofNlcrjNqR7hk3dBkNQEq +yVBGs9YeKb7z0FnsCpStQeL3OSLCXXjEtpfZzsjHCfV3aGWUAglkErqJrVDfr/8O +tqBCZoggyCycRcsxhI5TTT7lBZkS3wsJ9PB80CdzczxojijqYMmO68fMiWtW0r6X +SnXUHvB0UbKBNlHfGQMhIjeb4NjOj84WHcwY5RBIr/f9VtC3wembYhxMd5g0FbW7 +5uUIzes43FbI5bvCzkghTMK5iGYIlaxrZbHFK5cFvFrC7i+7dGkMrBjyO1zZnHzk +IkRHe2A= +=i/Ji +-----END PGP PUBLIC KEY BLOCK----- diff --git a/debian/watch b/debian/watch index 9eb46f49..ab6a7caa 100644 --- a/debian/watch +++ b/debian/watch @@ -1,3 +1,3 @@ version=3 -opts="uversionmangle=s/(\d)[_\.\-\+]?(rc\d*)$/$1~$2/" \ +opts="uversionmangle=s/(\d)[_\.\-\+]?(rc\d*)$/$1~$2/,pgpsigurlmangle=s/\.tar.*$/\.tar.sign/,decompress" \ https://www.kernel.org/pub/linux/kernel/people/kdave/btrfs-progs/btrfs-progs-v(.+)\.tar\.xz -- cgit v1.2.3