Emir Beganovic
f6377d2f87
The three configs the build downloads the ISO's packages with had "SigLevel = Optional TrustAll" on [omarchy]. Optional checks a signature when there is one and accepts a package that has none; TrustAll accepts any key in the keyring. So a package whose .sig was missing went onto the ISO unchecked. Without the line, [omarchy] follows the configs' own default, Required DatabaseOptional, which is what an installed system uses. Every package in the repository is signed, and the build adds and signs the release key before its first download, so nothing else changes. [arch-mact2] keeps its own SigLevel = Never: those packages are unsigned upstream.
35 lines
919 B
Plaintext
35 lines
919 B
Plaintext
#
|
|
# /etc/pacman.conf
|
|
#
|
|
# See the pacman.conf(5) manpage for option and repository directives
|
|
|
|
[options]
|
|
HoldPkg = pacman glibc
|
|
Architecture = auto
|
|
ParallelDownloads = 5
|
|
|
|
# By default, pacman accepts packages signed by keys that its local keyring
|
|
# trusts (see pacman-key and its man page), as well as unsigned packages.
|
|
SigLevel = Required DatabaseOptional
|
|
LocalFileSigLevel = Optional
|
|
|
|
[omarchy]
|
|
Server = https://pkgs.omarchy.org/rc/$arch
|
|
|
|
[core]
|
|
Server = https://rc-mirror.omarchy.org/$repo/os/$arch
|
|
Include = /etc/pacman.d/mirrorlist
|
|
|
|
[extra]
|
|
Server = https://rc-mirror.omarchy.org/$repo/os/$arch
|
|
Include = /etc/pacman.d/mirrorlist
|
|
|
|
[multilib]
|
|
Server = https://rc-mirror.omarchy.org/$repo/os/$arch
|
|
Include = /etc/pacman.d/mirrorlist
|
|
|
|
[arch-mact2]
|
|
Server = https://mirror.funami.tech/arch-mact2/os/x86_64
|
|
Server = https://github.com/NoaHimesaka1873/arch-mact2-mirror/releases/download/release
|
|
SigLevel = Never
|