build-local.sh permanently changes the build host's pacman keyring #58

Merged
Breadway merged 1 commit from fix/bos-38-pacman-keyring into main 2026-09-30 02:29:01 +08:00
Owner

Build-local now points the staged pacman configuration at a temporary GPG directory, initializes and populates that keyring with Arch and Breadway keys, and removes it when the script exits. The signed repository docs now describe the isolated trust scope, and CHANGELOG.md records the change.

Verified with bash -n build-local.sh, git diff --check, and pacman-conf --config ... GPGDir. A full ISO build was not run because the repo instructions reserve that for an explicit request; this checkout also has no automatic PR CI for ordinary commits.

Closes #38

Build-local now points the staged pacman configuration at a temporary GPG directory, initializes and populates that keyring with Arch and Breadway keys, and removes it when the script exits. The signed repository docs now describe the isolated trust scope, and CHANGELOG.md records the change. Verified with `bash -n build-local.sh`, `git diff --check`, and `pacman-conf --config ... GPGDir`. A full ISO build was not run because the repo instructions reserve that for an explicit request; this checkout also has no automatic PR CI for ordinary commits. Closes #38
Sign in to join this conversation.
No description provided.