Tried with older AMI images for Debian 9.1 and Debian 9.0 and no success.
Believe this is not solvable in a satisfactory manner since will encounter the same going forward for the upcoming Buster release (Debian 10).
Hence closing this and moving on to attempting to get Debian building / signing with a non-root user. Essentially perform all building but make gpg-agent non-root and alter build product on disk to allow non-root signing.
Tried with older AMI images for Debian 9.1 and Debian 9.0 and no success. Believe this is not solvable in a satisfactory manner since will encounter the same going forward for the upcoming Buster release (Debian 10).
Hence closing this and moving on to attempting to get Debian building / signing with a non-root user. Essentially perform all building but make gpg-agent non-root and alter build product on disk to allow non-root signing.
see https://github.com/saltstack/salt-pack/issues/611