From: benh@debian.org   
      
   Reminder to self, don't send emails at 2 a.m.  I now need to add a few   
   clarifications:   
      
   On Sat, 2026-01-03 at 02:16 +0100, Ben Hutchings wrote:   
   [...]   
   > 4. The code signing service creates detached signatures for the code and   
   > adds them to the source package template.  It then builds, signs, and   
   > uploads the complete source package (linux-signed-*).   
      
   Note that this "build" is a source-build.  The binary packages are later   
   built in the usual way.   
      
   [...]   
   > > 3.) Given the somewhat special situation for the linux kernel, is there   
   > > anything you want me to focus on when reviewing such changes in the   
   > > linux-signed-* packages in the BACKPORTS-NEW queue?   
   >    
   > If you can find a way to s/\+deb14/+deb13/ on both file names and   
   > contents before comparing them, you should then be able to see any   
   > actually interesting changes.  (But there should not be any after that.)   
      
   On some backports branches I have made minor changes to maintain   
   compatibility with stable user-space, dropping a Breaks, but this has   
   not yet happened for trixie-backports.   
      
   > Unfortunately I don't think debdiff can do that.   
   [...]   
      
   This will produce something closer to a reasonable diff:   
      
      VERSION=6.17.13+1   
      dpkg-source -x linux-signed-amd64_${VERSION}.dsc   
      dpkg-source -x linux-signed-amd64_${VERSION}~bpo13+1.dsc   
      find linux-signed-amd64-${VERSION} -type f -print0 | xargs -0 sed -i   
   's/+deb14/+deb13/g'   
      find linux-signed-amd64-${VERSION} -depth -name '*+deb14*' -print0 | xargs   
   -0 rename -d 's/\+deb14/+deb13/g'   
      diff -urN linux-signed-amd64-${VERSION}{,~bpo13+1}   
      
   However I also see many instances of the linux source version and the   
   compiler version differing.  The linux source version doesn't really   
   need to be repeated multiple times in rules.gen and the compiler is not   
   needed at this point, so possibly we could eliminate some of that with   
   changes to the generation process.   
      
   Ben.   
      
   --    
   Ben Hutchings - Debian developer, member of kernel, installer and LTS   
   teams   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmlaojMACgkQ57/I7JWG   
   EQmfnA/+I/vlDSFBft+AtxeSMgDHgFlgMDaUaY1HPmQx9808Q2nkoBbpXEqz/Rso   
   PZfP91WHO/xiMHnAjPX4bp/03yzA+otXRH+Xko96QFZc7S9xljy/mdC/4/nVrUkT   
   I7J8MrXnkJDCQL41Xy91q2gTrjqMZJZzQWuNThB7g6CnGmIOB7Ontl4dD3vj4tJZ   
   2/rlOAR+iPGULkfTUHVUi5AhHhx1ROfsjqhh2FyMBEpFjSTlCVmLZjtElFcuY1us   
   fqgimSlOacp/R1Nt1Pa78GYao0zRPfY2yqTXKZlnyrUvOOJxN/QDyF5/oE3k3tTS   
   /V3iH2OUK+8vk/QI6TqdPN5/fOc5vuRZDAZvsjVd6r5vvRMSmPMc+SaAyrF9H+vV   
   bT6l1MV/ZCqhCwSbIINGrZ4k1FJl9RBs80vdo8u3KEBzpx3utwOD4Fq6exsdbpSo   
   U9uBGlHLwAN6b4iQrcWe13VSKWqIQ8fcGys6ubt2kTgI8r6fBR+6SKS6LzZ0EFE0   
   cSf2YgrU9+0+zi3EUdc4Zl+WWjkW5RhV8Pkfi4gfo6rc766m4TzcTZOY8Fk39gIl   
   pOkCiheNozpjk1yhRMf6Er3HtlnuMRqQk9++rqXaA51B8sjleWoTL/AZ0pwYgEYN   
   BDjTHRyLdggjyZTsDL1ClUjLb4EzuYp37iylTIEEVps5vEc7yeM=   
   =G33j   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)