No AppStream data for some apps

Alexander Larsson alexl at redhat.com
Fri Mar 10 10:42:22 UTC 2017


On Fri, 2017-03-10 at 11:37 +0100, Mathieu Bridon wrote:
> On Fri, 2017-03-10 at 11:12 +0100, Alexander Larsson wrote:
> > On Wed, 2017-03-08 at 13:55 +0100, Mathieu Bridon wrote:
> > > On Wed, 2017-03-08 at 12:50 +0000, Richard Hughes wrote:
> > > > 
> > > > While pulling appstream/x86_64 from remote org.blender.Blender-
> > > > origin:
> > > > Commit
> > > > 3aed16d42931db4d04baba1d9bb5a4c0657eb41843b1112ec28f1fedeca82f9
> > > > 2:
> > > > GPG verification enabled, but no signatures found (use
> > > > gpg-verify=false in remote config to disable)
> > > 
> > > Since the two mentioned above are mine, any idea what I could be
> > > doing wrong?
> > > 
> > > I build the apps with this command:
> > > 
> > >   $ flatpak-builder --ccache --force-clean --gpg-
> > > sign=$(GPG_KEYID) --repo=$(REPO) $(BUILD_DIR) $(MANIFEST)
> > > 
> > > Then I run:
> > > 
> > >   $ flatpak build-update-repo --title="Flatpaks by Bochecha" --
> > > prune --prune-depth=4 --gpg-sign=$(GPG_KEYID) --generate-static-
> > > deltas $(REPO)
> > > 
> > > And then I just rsync the repo over to the host.
> > > 
> > > What am I missing for the appstream branch to be signed
> > > correctly?
> > 
> > That should work. Can you verify that you have a commitmeta for the
> > appdata stream commit?
> 
> 
> But no corresponding .commitmeta

On your build machine, could you do something like:

 flatpak build-update-repo --gpg-sign=$(GPG_KEYID) repo

And see if one is created?

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Alexander Larsson                                            Red Hat, Inc 
       alexl at redhat.com            alexander.larsson at gmail.com 
He's a witless devious Green Beret who must take medication to keep him 
sane. She's an artistic gypsy bodyguard with a flame-thrower. They fight 
crime! 



More information about the xdg-app mailing list