Added missing dependiencies `devscripts` `dpkg-dev`

Missing debootstrap dependency.

Add updated package, with fixed race condition on window listing.

It has been updated.
This reverts commit 2646575c539c2a90e1822471eabb364f047e8439.

* origin/pr/179:
build: check if exported rpm db is not empty
doc: add ISO_* variables info
...

Prevents analogous issue QubesOS/qubes-issues#6651

* origin/pr/177:
example-configs: update for latest Fedora and CentOS

* origin/pr/176:
Provide python3-xcffib for buster builds

* origin/pr/126:
check-release-status: set no version tag if not to keep structure
check-rel...

That is what happens when code has no tests whatsoever.

Otherwise we expose way too much attack surface.

Fixes: e8bde3a7d7a6365f53208258c477a8d67611bbb6

* origin/pr/171:
Add a global FETCH_CMD variable

instead of each sub-makefile having to handle fetching itself.

Instead of failing with an error about a target that cannot be made, use
an explicity $(error) c...

It isn’t installed by default in recent container images, and we don’t
actually need it. Just u...

* origin/pr/169:
Add Labels and Aliases for Ubuntu+standard templates

* origin/pr/168:
update signing key 916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA.asc

https://github.com/QubesOS/qubes-issues/issues/6535

* origin/pr/165:
Export proxy environment variables

It is much better to centralize their handling in the top-level
Makefile, rather than having to ...

The move of linux-dom0-updates, is to rebuild packages linked with rpm
earlier.

QubesOS/qubes-issues#5980

Those were needed for bullseye, but are already available in standard
Debian repositories.

Qube...

It is known to be broken and it needs update.

Related: QubesOS/qubes-issues#6418

QubesOS/qubes-issues#6364

With metadata signed now, the repo update step requires signing key
access too. Upload log of op...

A package with templates repositories definition, for qvm-template tool.

QubesOS/qubes-issues#6356

Package newer driver "version" (snapshot actually).

QubesOS/qubes-issues#6356

The 'show-current' option was introduced in git 2.22. As the standard Fedora
template in Qubes ...

Fedora 33’s dialog handles ‘--file’ incorrectly and crashes. Since we
don’t display any sensiti...

Of course, dialog shouldn’t segfault, but this works around the bug.

This is necessary to allow...

Bash regex syntax is confusing

* origin/pr/157:
get-sources: allow \n in listing components
scripts/build: dnf is now the d...

* origin/pr/155:
configs: don't need for libsolv anymore

* origin/pr/154:
add-remote: If a remote already exists, update it
add-remote: Make fetching...

CHECK is not supposed to be set directly, only via
INSECURE_SKIP_CHECKING or LESS_SECURE_SIGNED_...

This allows fixing mistakes far more easily.

There is no guarantee that the newly-added remote URL actually exists.

Previously, there were several places where the tag was extracted, which
led to bugs.

If we find a validly signed tag, there is no point in continuing
further. Just exit successfully.

A user might have `gpg.program=/usr/bin/qubes-gpg-client-wrapper`, which
can’t handle custom key...

Adding a remote in the wrong directory is a bad idea.

We already check that there is a signed tag, so the signature
verification is unnecessary and ca...

This improves developer experience.

rather than implicitly based on %(object) being empty. Also add some
comments.

This is a bit cleaner.

They aren’t useful for us, since they cannot be signed.

Unsigned tags should be ignored.

`git-tag(1)` supports the option `--format`, which allows it to list
information other than just...

- fix doc
- really accept just signed commit

In case of Gentoo, the output is huge and it reaches CI output limit.

* origin/pr/150:
ci: use QubesOS repository for builder-gentoo

* origin/pr/148:
Use `git checkout -B`
Use $fresh_clone to check for fresh clones

instead of `git branch -f` and `git checkout`. The first will succeed
no matter what the curren...

$VERIFY_REF is now always a hash, so it will never equal HEAD

First of all, source the script where it is defined. But also quote
arguments.

Doesn’t work yet

Other code might need it.

“check” should be “CHECK”

This allows weakening the signature checking in Qubes Builder where
necessary.

- add `set -euo` for the entire script
- add `CHECK` variable with values `signed-tag` (require ...