feat: sign repo DB with dedicated ed25519 signing key

Replace the maintainer key in antergos-next-keyring with the new Antergos NeXT Package Signing key (AA644A09..., sign subkey 3F1B219A..., expires 2028-08-16). CI now signs the repo database with it (--detach-sign, loopback pinentry from SIGNING_KEY / SIGNING_PASSPHRASE secrets). Client SigLevel switches from 'Optional TrustAll' to 'DatabaseRequired PackageOptional' — the signed DB authenticates every package via its checksums.
2026-08-17 18:55:32 +02:00
parent 43f1f6e1d9
commit ba245056c4
5 changed files with 24 additions and 3 deletions
@@ -2,7 +2,7 @@

 pkgname=antergos-next-keyring
 pkgver=1
-pkgrel=2
+pkgrel=3
 pkgdesc="Antergos NeXT GPG keyring"
 arch=('any')
 url="https://github.com/Antergos-NeXT/antergos-packages"
@@ -1 +1 @@
-F1D8F02C5E929F3FE0424EE897F813D238CF0DBB:4:
+AA644A095D2AF5F950FADB57C51BFE8D3A985236:4: