From 1b44b91e30837c6798bd6d2ec21b84d03ba889bf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82?= Date: Mon, 17 Aug 2026 18:55:41 +0200 Subject: [PATCH] chore(pacman): require signed DB for antergos-pkgs, drop TrustAll Both build and installed-system pacman configs now use 'SigLevel = DatabaseRequired PackageOptional' for [antergos-pkgs]. The repo DB is signed by the dedicated signing key (AA644A09...), which authenticates all packages via the checksums the signed DB carries. Keyring package updated to match. --- iso-profiles/antergos/root-overlay/etc/pacman.conf | 2 +- pacman.conf.d/iso-x86_64.conf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/iso-profiles/antergos/root-overlay/etc/pacman.conf b/iso-profiles/antergos/root-overlay/etc/pacman.conf index 626e66c..8ca02a8 100644 --- a/iso-profiles/antergos/root-overlay/etc/pacman.conf +++ b/iso-profiles/antergos/root-overlay/etc/pacman.conf @@ -22,7 +22,7 @@ LocalFileSigLevel = Optional # Antergos NeXT custom packages repo [antergos-pkgs] -SigLevel = Optional TrustAll +SigLevel = DatabaseRequired PackageOptional Server = https://antergos-next.github.io/antergos-packages/ [system] diff --git a/pacman.conf.d/iso-x86_64.conf b/pacman.conf.d/iso-x86_64.conf index 9a4317d..ca33a66 100644 --- a/pacman.conf.d/iso-x86_64.conf +++ b/pacman.conf.d/iso-x86_64.conf @@ -76,7 +76,7 @@ LocalFileSigLevel = Optional # Include = /etc/pacman.d/mirrorlist [antergos-pkgs] -SigLevel = Optional TrustAll +SigLevel = DatabaseRequired PackageOptional Server = https://antergos-next.github.io/antergos-packages/ [system]