Replace the maintainer key in antergos-next-keyring with the new Antergos NeXT Package Signing key (AA644A09..., sign subkey 3F1B219A..., expires 2028-08-16). CI now signs the repo database with it (--detach-sign, loopback pinentry from SIGNING_KEY / SIGNING_PASSPHRASE secrets). Client SigLevel switches from 'Optional TrustAll' to 'DatabaseRequired PackageOptional' — the signed DB authenticates every package via its checksums.
24 lines
704 B
Bash
24 lines
704 B
Bash
# Maintainer: Michał <ash8820@proton.me>
|
|
|
|
pkgname=antergos-next-keyring
|
|
pkgver=1
|
|
pkgrel=3
|
|
pkgdesc="Antergos NeXT GPG keyring"
|
|
arch=('any')
|
|
url="https://github.com/Antergos-NeXT/antergos-packages"
|
|
license=('GPL3')
|
|
install=antergos-next-keyring.install
|
|
source=(
|
|
"antergos-next.gpg"
|
|
"antergos-next-trusted"
|
|
"antergos-next-revoked"
|
|
)
|
|
sha256sums=('SKIP' 'SKIP' 'SKIP')
|
|
|
|
package() {
|
|
install -dm755 "${pkgdir}/usr/share/pacman/keyrings"
|
|
install -m644 "${srcdir}/antergos-next.gpg" "${pkgdir}/usr/share/pacman/keyrings/"
|
|
install -m644 "${srcdir}/antergos-next-trusted" "${pkgdir}/usr/share/pacman/keyrings/"
|
|
install -m644 "${srcdir}/antergos-next-revoked" "${pkgdir}/usr/share/pacman/keyrings/"
|
|
}
|