do not call 'apt-key update' in apt.postinst

The debian-archive-keyring package ships trusted.gpg.d fragment files
for a while now and dropped their call to 'apt-key update', so there is
no need for use to call it as the keys will always be available.

This also finally allows a user to remove key(ring)s without APT to
overriding this decision by readding them with this step.

The functionality is kept around in the odd case that an old
debian-archive-keyring package is used which still calls 'apt-key
update' and depends on the import (hence, we also do not enforce a newer
version of the debian-archive-keyring via our dependencies)

diff --git a/debian/apt.postinst b/debian/apt.postinst
index caa05ccdf2c0fd379f29575eed43eb97fd006848..70de237d0a51c092788f5e239606fad3f2d96aeb 100644 (file)
--- a/debian/apt.postinst
+++ b/debian/apt.postinst
@@ -25,7 +25,6 @@ case "$1" in
                rm -f $SECRING
            fi
        fi
-       apt-key update
 
         # ensure tighter permissons on the logs, see LP: #975199
         if dpkg --compare-versions "$2" lt-nl 0.9.7.7; then