c-ludenberg
ba245056c4
Replace the maintainer key in antergos-next-keyring with the new Antergos NeXT Package Signing key (AA644A09..., sign subkey 3F1B219A..., expires 2028-08-16). CI now signs the repo database with it (--detach-sign, loopback pinentry from SIGNING_KEY / SIGNING_PASSPHRASE secrets). Client SigLevel switches from 'Optional TrustAll' to 'DatabaseRequired PackageOptional' — the signed DB authenticates every package via its checksums.
31 lines
635 B
Bash
31 lines
635 B
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
echo "Setting up Antergos NeXT PKGS..."
|
|
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "Run with sudo!"
|
|
exit 1
|
|
fi
|
|
|
|
cp /etc/pacman.conf /etc/pacman.conf.backup
|
|
|
|
if ! grep -q "\[antergos-pkgs\]" /etc/pacman.conf; then
|
|
cat >> /etc/pacman.conf << 'CONF'
|
|
|
|
[antergos-pkgs]
|
|
SigLevel = DatabaseRequired PackageOptional
|
|
Server = https://antergos-next.github.io/antergos-packages/
|
|
CONF
|
|
echo "Added antergos-pkgs to pacman.conf"
|
|
else
|
|
echo "antergos-pkgs already in pacman.conf"
|
|
fi
|
|
|
|
pacman-key --init 2>/dev/null || true
|
|
pacman-key --populate antergos-next 2>/dev/null || true
|
|
|
|
pacman -Sy
|
|
|
|
echo "Antergos NeXT PKGS ready!"
|