diff --git a/builder/build-iso.sh b/builder/build-iso.sh index 980eab8..1279a55 100755 --- a/builder/build-iso.sh +++ b/builder/build-iso.sh @@ -7,8 +7,11 @@ pacman-key --init pacman --noconfirm -Sy archlinux-keyring pacman --noconfirm -Sy archiso git sudo base-devel jq grub +# Pre-import the omarchy signing key so pacman can verify packages without a keyserver lookup +pacman-key --add /builder/omarchy.gpg +pacman-key --lsign-key 40DFB630FF42BCFFB047046CF0134EE680CAC571 + # Install omarchy-keyring for package verification during build -# The [omarchy] repo is defined in /configs/pacman-online.conf with SigLevel = Optional TrustAll pacman --config /configs/pacman-online-${OMARCHY_MIRROR}.conf --noconfirm -Sy omarchy-keyring pacman-key --populate omarchy diff --git a/builder/omarchy.gpg b/builder/omarchy.gpg new file mode 100644 index 0000000..7c5ea36 --- /dev/null +++ b/builder/omarchy.gpg @@ -0,0 +1,13 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mDMEaLAsIhYJKwYBBAHaRw8BAQdAYmKmrWMlfpdIPh3QzvEMzzxdNd/kqDl/Bj8H +mCavKji0Gk9tYXJjaHkgPHBrZ3NAb21hcmNoeS5vcmc+iJAEExYKADgWIQRA37Yw +/0K8/7BHBGzwE07mgMrFcQUCaLAsIgIbAwULCQgHAgYVCgkICwIEFgIDAQIeAQIX +gAAKCRDwE07mgMrFcRF2AQCjjvjgju/kowkN69nenqqRnE+v2MrHmWh2wU0ugIt9 +3gD/bXGugWc5J1vqoT+5aCnJAtfRRmHEfsrAiFgjduB+VA24OARosCwiEgorBgEE +AZdVAQUBAQdAJoU73WdgxE/pEYK5ofyRvQDs1IFRdfJHV9j4Jm+tuDUDAQgHiHgE +GBYKACAWIQRA37Yw/0K8/7BHBGzwE07mgMrFcQUCaLAsIgIbDAAKCRDwE07mgMrF +cYXsAQC5eBEGK0xKsGwtnDDVeNAapx32dpvLgJ94W4DtIpdLlwEA85cSsTiBMuGy +6kwYmHzqw7oFx3VYGXdMNl0SMKzvJA4= +=G7wU +-----END PGP PUBLIC KEY BLOCK-----