Hi,

my development platform is Fedora Core 5. In order for me to upload a package to maemo repo, I have to sign it [1] with

$ debsign -k<key_id> <i386>.changes
$ debsign -k<key_id> <armel>.changes

according to step 5. of [1]. The wiki also warns not to do it from the scratchbox.

But, I use FC5, and there is no 'debsign' in sight. Searching the web reveals that debsign belongs to the 'devscripts' package, to which there is no equivalent for FC5.

So, what would be the equivalent procedure for signing .changes/.dsc file under Fedora Core?

[1] https://maemo.org/maemowiki/ExtrasRepository
[2] This message has been cross-posted to maemo-dev mailing list.

thanks for any tips,
--Vlad

I use Gentoo Linux. Although the instructions say not to run debsign from scratchbox, it doesn't say anything about not running the scratchbox debsign outside of scratchbox. So that's what I do; I use the binary in /opt/scratchbox, but I make sure to run it from a regular (non-scratchbox) shell.

It uses other debian development tools, though, which you might have to download and install separately. You'll also need dput, which is not in Fedora Core. Fortunately, these tools are mostly shell-based, so they're cross-platform and relatively easy to use in any linux distro.

It's still a pain in the butt for non-Debian users, though...

gnuite,

thanks for the reply - I'll give it a shot - sounds like you and I are the only two non-debian developers in the entire n770 universe :-)

Well, I'm not out of the woods yet -

'dput' gives me a headache:

--------------------------------------
> dput mistral-extras granule_1.2.4-3_armel.changes

Checking Signature on .changes
gpg: Signature made Wed 17 Jan 2007 11:08:03 PM EST using DSA key ID
95FC1731
gpg: Good signature from "Vladislav Grinchenko <3rdshift@comcast.net>"
Good signature
on /scratchbox/users/vlg/home/vlg/Granule/granule_1.2.4-3_armel.changes.

Checking Signature on .dsc
gpg: Signature made Tue 16 Jan 2007 10:16:33 PM EST using DSA key ID
95FC1731
gpg: Good signature from "Vladislav Grinchenko <3rdshift@comcast.net>"
Good signature
on /scratchbox/users/vlg/home/vlg/Granule/granule_1.2.4-3.dsc.

Checksum doesn't match
for /scratchbox/users/vlg/home/vlg/Granule/granule_1.2.4-3.tar.gz
--------------------------------------

It chokes on checking the md5sum, but .dsc file has the correct sum:

--------------------------------------
> md5sum granule_1.2.4-3.tar.gz
909bf3852d8d68e351d484df59250961 granule_1.2.4-3.tar.gz
^^^^^^^^^^^^^^^^^^^^^^^^^

> cat

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.0
Source: granule
Version: 1.2.4-3
Binary: granule
Maintainer: Vladislav Grinchenko <vlg@users.sourceforge.net>
Architecture: any
Standards-Version: 3.6.1
Build-Depends: debhelper (>= 4.0.0), libgtk2.0-dev, libxml2-dev
Files:
909bf3852d8d68e351d484df59250961 404125 granule_1.2.4-3.tar.gz
^^^^^^^^^^^^^^^^^^^^^^^^
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFrZUR8HpAJpX8FzERAgcrAJsFySyVmOEDT0uea6BczO aSMZOhIQCgiTva
/T6fLXNLZhnqEaOz6ONgc+4=
=CDKL
-----END PGP SIGNATURE-----

--------------------------------------

Any ideas where the problem might be?

I have 'dput' v. 0.9.2.27 installed on my machine (from a tarball),
and I used 'debsing' from /scratchbox/devkits/debian/bin to sign
the .changes files.

thanks in advance

Ok, I finally figured it all out:

MaemoExtra uploads from Fedora Core.