Set [breadway] SigLevel=Never (Forgejo db key unavailable to pacman)
All checks were successful
Mirror to GitHub / mirror (push) Successful in 4s

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Breadway 2026-06-13 23:34:51 +08:00
parent 0d550a1bda
commit 82c63bc4c4

View file

@ -33,11 +33,12 @@ Include = /etc/pacman.d/mirrorlist
# Packages are published to the Forgejo Arch registry (group "os") by the # Packages are published to the Forgejo Arch registry (group "os") by the
# .forgejo/workflows/package.yml workflow in each repo, on tag push. # .forgejo/workflows/package.yml workflow in each repo, on tag push.
# #
# TODO: packages are currently unsigned (TrustAll). For production, sign # Forgejo signs the repo db with a key pacman can't look up, so TrustAll
# them in CI with a GPG key and switch to SigLevel = Required. # fails. SigLevel = Never skips verification (acceptable for this private
# repo over TLS). TODO: import Forgejo's signing key + SigLevel = Required.
# ----------------------------------------------------------------------- # -----------------------------------------------------------------------
# The section name must match Forgejo's served db filename # The section name must match Forgejo's served db filename
# ({owner}.{group}.{domain}.db) — pacman fetches "<section>.db" from Server. # ({owner}.{group}.{domain}.db) — pacman fetches "<section>.db" from Server.
[Breadway.os.git.breadway.dev] [Breadway.os.git.breadway.dev]
SigLevel = Optional TrustAll SigLevel = Never
Server = https://git.breadway.dev/api/packages/Breadway/arch/os/$arch Server = https://git.breadway.dev/api/packages/Breadway/arch/os/$arch