info > DEBRSIGN

man perldoc info pydoc3 ri search

📛 NAME

debrsign — remotely sign a Debian .changes and .dsc file pair using SSH

🚀 Quick Reference

Use Case	Command	Description
Sign .changes/.dsc on remote host	debrsign [user@]remotehost [changes-file|dsc-file]	Copy unsigned files to remote machine, sign via ssh, retrieve signed files
Sign source-only .changes	debrsign -S [user@]remotehost	Look for a source-only .changes file instead of binary-build
Specify remote GPG binary path	debrsign --path /path/to/gpg [user@]remotehost	Use a custom GPG path on the remote host
Multiarch .changes mode	debrsign --multi [user@]remotehost	Use most recent package_version_*+*.changes file (for dpkg-cross)
Override architecture	debrsign -a<arch> -t<gnu-type> [user@]remotehost	Set architecture and GNU system type for .changes file search

📜 SYNOPSIS

debrsign [options] [user@]remotehost [changes-file|dsc-file]

📖 DESCRIPTION

debrsign takes either an unsigned .dsc file or an unsigned .changes file and the associated unsigned .dsc file (found by replacing the architecture name and .changes by .dsc) if it appears in the .changes file and signs them by copying them to the remote machine using ssh(1) and remotely running debsign(1) on that machine. All options not listed below are passed to the debsign program on the remote machine.

If a .changes or .dsc file is specified, it is signed, otherwise, debian/changelog is parsed to determine the name of the .changes file to look for in the parent directory.

This utility is useful if a developer must build a package on one machine where it is unsafe to sign it; they need then only transfer the small .dsc and .changes files to a safe machine and then use the debsign program to sign them before transferring them back. This program automates this process.

To do it the other way round, that is to connect to an unsafe machine to download the .dsc and .changes files, to sign them locally and then to transfer them back, see the debsign(1) program, which can do this task.

⚙️ OPTIONS

🔹 Source-only mode

• -S — Look for a source-only .changes file instead of a binary-build .changes file.

🔹 Architecture options

• -a<debian-architecture>, -t<GNU-system-type> — See dpkg-architecture(1) for a description of these options. They affect the search for the .changes file. They are provided to mimic the behaviour of dpkg-buildpackage when determining the name of the .changes file.

🔹 Multiarch mode

• --multi — Multiarch .changes mode: This signifies that debrsign should use the most recent file with the name pattern package_version_*+*.changes as the .changes file, allowing for the .changes files produced by dpkg-cross.

🔹 Remote GPG path

• --path <remote-path> — Specify a path to the GPG binary on the remote host.

🔹 Help and version

• --help, --version — Show help message and version information respectively.

🔹 Other options

• All other options are passed on to debsign on the remote machine.

⚙️ CONFIGURATION VARIABLES

The two configuration files /etc/devscripts.conf and ~/.devscripts are sourced in that order to set configuration variables. Command line options can be used to override configuration file settings. Environment variable settings are ignored for this purpose. The currently recognised variables are:

• DEBRSIGN_PGP_PATH — Equivalent to passing --path on the command line (see above.)

📚 SEE ALSO

• debsign(1)
• dpkg-architecture(1)
• ssh(1)

👤 AUTHOR

This program was written by Julian Gilbey <jdg AT debian.org> and is copyright under the GPL, version 2 or later.

📛 NAME 🚀 Quick Reference 📜 SYNOPSIS 📖 DESCRIPTION ⚙️ OPTIONS ⚙️ CONFIGURATION VARIABLES 📚 SEE ALSO 👤 AUTHOR