build-local.sh permanently changes the build host's pacman keyring #58
No reviewers
Labels
No labels
P0
P1
P2
P3
audio
bakery
boot
breadbug
bug
build
ci
dependencies
design
disk
docs
encryption
final
firewall
graphics
hardware
idle
installer
keybinds
nvidia
packages
phase-1
polish
recovery
reliability
reproducibility
secure-boot
security
shell
signing
snapshots
supply-chain
swap
tech-debt
theming
ux
website
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Breadway/bos!58
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "fix/bos-38-pacman-keyring"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Build-local now points the staged pacman configuration at a temporary GPG directory, initializes and populates that keyring with Arch and Breadway keys, and removes it when the script exits. The signed repository docs now describe the isolated trust scope, and CHANGELOG.md records the change.
Verified with
bash -n build-local.sh,git diff --check, andpacman-conf --config ... GPGDir. A full ISO build was not run because the repo instructions reserve that for an explicit request; this checkout also has no automatic PR CI for ordinary commits.Closes #38