feat: sign repo DB with dedicated ed25519 signing key

Browse Source

Replace the maintainer key in antergos-next-keyring with the new
Antergos NeXT Package Signing key (AA644A09..., sign subkey
3F1B219A..., expires 2028-08-16). CI now signs the repo database
with it (--detach-sign, loopback pinentry from SIGNING_KEY /
SIGNING_PASSPHRASE secrets). Client SigLevel switches from
'Optional TrustAll' to 'DatabaseRequired PackageOptional' — the
signed DB authenticates every package via its checksums.

...

This commit is contained in:

c-ludenberg

2026-08-17 18:55:32 +02:00

parent 43f1f6e1d9

commit ba245056c4

5 changed files with 24 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

packages/antergos-next-keyring/antergos-next.gpg

BIN

Binary file not shown.