Hi there,

today I have created Debian/Ubuntu keyring packages for diverse
projects. Once I had the template package ready it didn't take much
time to create also a package for x2go:

x2go-keyring

When creating the package I realized a non-standard situation with
x2go packages. As I understand it with Debian, you have maintainer
keys and keyring keys.

The package maintainers sign .deb packages with their private gpg keys
(e.g. my key for m.gabriel@das-netzwerkteam.de). If you have several
maintainers within a project then---depending on the changelog
entries---the maintainer who has modified a package signs it with his
key. That's what's the maintainer keys are for.

For uploading packages to a repository a shared generic key for
signing repository files (Release.gpg etc.) is used (e.g.
debian@das-netzwerkteam.de). (Maybe someone can confirm if this key is
indeed shared...)

However, the x2go repository files are also signed by Alex's
maintainer key as are the package files. To my understanding they
optimally should be signed by some generic key instead. If people will
share their work on one repository site replacing this key by a
generic key some time might be useful.

Temporarily, in the x2go-keyring package I placed Alex's key as
maintainer key as well as keyring key. On install the package will
place two files on your system:

/usr/share/keyrings/x2go-keyring.gpg
/usr/share/keyrings/x2go-maintainers.gpg

The key in the x2go-keyring.gpg file are then added to the APT keyring: apt-key add /usr/share/keyrings/x2go-keyring.gpg

On package removal the keys in x2go-keyring.gpg are removed from the
APT keyring again.

I will send a tar.gz to Alex, maybe Heinz and Alex will find a Debian
keyring for x2go packages useful and will place it on their server.

@Alex: if you send me a generic x2go keyring key (e.g.
debian@obviously-nice.de) I can add it to the package and send you the
updated version.

Best, Mike

--

DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419

eMail-LeseSchreibStunde: wochentags 8h-10h mail: m.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...