dash is my god now. and it hungers for quotes around local var= expansions.

abuild-sign.in

@@ -17,7 +17,7 @@ fi
 
 do_sign() {
 	local f i keyname repo
-	local openssl=$(command -v openssl || echo libressl)
+	local openssl="$(command -v openssl || echo libressl)"
 
 	# we are actually only interested in the name, not the file itself
 	keyname=${pubkey##*/}

buildlab.in

@@ -49,7 +49,7 @@ die() {
 }
 
 runpart() {
-	local part=$1
+	local part="$1"
 	msg "Running part $part"
 	$part || die "$part failed"
 }

newapkbuild.in

@@ -154,7 +154,7 @@ __EOF__
 # Create new aport from templates
 newaport() {
 	local newname="${1##*/}"
-	local pn=${newname%-[0-9]*}
+	local pn="${newname%-[0-9]*}"
 	local pv
 	local source=
 	is_url "$1" && source="$1"