No AppStream data for some apps

[Alexander Larsson]

On Wed, 2017-03-08 at 13:55 +0100, Mathieu Bridon wrote:
> On Wed, 2017-03-08 at 12:50 +0000, Richard Hughes wrote:
> > 
> > While pulling appstream/x86_64 from remote org.blender.Blender-
> > origin:
> > Commit
> > 3aed16d42931db4d04baba1d9bb5a4c0657eb41843b1112ec28f1fedeca82f92:
> > GPG verification enabled, but no signatures found (use
> > gpg-verify=false in remote config to disable)
> 
> Since the two mentioned above are mine, any idea what I could be
> doing
> wrong?
> 
> I build the apps with this command:
> 
>   $ flatpak-builder --ccache --force-clean --gpg-sign=$(GPG_KEYID) --
> repo=$(REPO) $(BUILD_DIR) $(MANIFEST)
> 
> Then I run:
> 
>   $ flatpak build-update-repo --title="Flatpaks by Bochecha" --prune
> --prune-depth=4 --gpg-sign=$(GPG_KEYID) --generate-static-deltas
> $(REPO)
> 
> And then I just rsync the repo over to the host.
> 
> What am I missing for the appstream branch to be signed correctly?

That should work. Can you verify that you have a commitmeta for the
appdata stream commit?

For example, in the spotify repo:

[jhbuild spotify-app] cat repo/refs/heads/appstream/x86_64 
9086b5840f980b75e5d35ff827fcb8678a53f7d189637b8c9fad874bcd14de25
[jhbuild spotify-app] ls -l repo/objects/90/86b5840f980b75e5d35ff827fcb8678a53f7d189637b8c9fad874bcd14de25.commit*
-rw-r--r--. 1 alex wheel  86 20 okt 15.16 repo/objects/90/86b5840f980b75e5d35ff827fcb8678a53f7d189637b8c9fad874bcd14de25.commit
-rw-r--r--. 1 alex wheel 313 20 okt 15.16 repo/objects/90/86b5840f980b75e5d35ff827fcb8678a53f7d189637b8c9fad874bcd14de25.commitmeta


The .commitmeta has the signature.

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Alexander Larsson                                            Red Hat, Inc 
       alexl at redhat.com            alexander.larsson at gmail.com 
He's a witless overambitious photographer who hides his scarred face 
behind a mask. She's a blind out-of-work femme fatale with someone else's 
memories. They fight crime!