[X2go-dev] x2go-keyring

[Mike Gabriel]

Hi there,

today I have created Debian/Ubuntu keyring packages for diverse  
projects. Once I had the template package ready it didn't take much  
time to create also a package for x2go:

  x2go-keyring

When creating the package I realized a non-standard situation with  
x2go packages. As I understand it with Debian, you have maintainer  
keys and keyring keys.

The package maintainers sign .deb packages with their private gpg keys  
(e.g. my key for m.gabriel at das-netzwerkteam.de). If you have several  
maintainers within a project then---depending on the changelog  
entries---the maintainer who has modified a package signs it with his  
key. That's what's the maintainer keys are for.

For uploading packages to a repository a shared generic key for  
signing repository files (Release.gpg etc.) is used (e.g.  
debian at das-netzwerkteam.de). (Maybe someone can confirm if this key is  
indeed shared...)

However, the x2go repository files are also signed by Alex's  
maintainer key as are the package files. To my understanding they  
optimally should be signed by some generic key instead. If people will  
share their work on one repository site replacing this key by a  
generic key some time might be useful.

Temporarily, in the x2go-keyring package I placed Alex's key as  
maintainer key as well as keyring key. On install the package will  
place two files on your system:

    /usr/share/keyrings/x2go-keyring.gpg
    /usr/share/keyrings/x2go-maintainers.gpg

The key in the x2go-keyring.gpg file are then added to the APT keyring:
apt-key add /usr/share/keyrings/x2go-keyring.gpg

On package removal the keys in x2go-keyring.gpg are removed from the  
APT keyring again.

I will send a tar.gz to Alex, maybe Heinz and Alex will find a Debian  
keyring for x2go packages useful and will place it on their server.

@Alex: if you send me a generic x2go keyring key (e.g.  
debian at obviously-nice.de) I can add it to the package and send you the  
updated version.

Best,
Mike



-- 

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

eMail-LeseSchreibStunde: wochentags 8h-10h
mail: m.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb