Kros DaiandClaude Opus 5.5
1c912658aa
- ✨ one iso serves every region, so regional packages ride in the offline repo without being installed by default - 🔒 verify each regional keyring through arch's trust chain before downloading its packages Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QuATgjU4mnqpqSLAKMQ14g
38 lines
1.5 KiB
Bash
38 lines
1.5 KiB
Bash
#!/bin/bash
|
|
|
|
# Ship every region profile from the bundled runtime, so one ISO serves every
|
|
# region. The installer picks a profile from the target's timezone; this only
|
|
# stages the profiles and makes their packages downloadable. Repository
|
|
# defaults stay in the runtime, not in a second set of ISO-specific templates.
|
|
set -euo pipefail
|
|
|
|
regions="$1"
|
|
iso_payload="$2"
|
|
online_config="$3"
|
|
|
|
# A runtime predating region profiles ships none; the ISO then installs
|
|
# global targets only, exactly as before.
|
|
if [[ ! -d $regions ]]; then
|
|
echo "Runtime ships no region profiles; every install will be global."
|
|
exit 0
|
|
fi
|
|
|
|
cp -a "$regions" "$iso_payload/regions"
|
|
|
|
for profile in "$regions"/*/; do
|
|
# Only the community repositories are needed to download regional packages.
|
|
# Keep the channel's build mirrors intact; target mirrors are set later by
|
|
# the runtime's own pacman finalizer.
|
|
printf '\n' >> "$online_config"
|
|
cat "$profile/pacman/pacman.conf.append" >> "$online_config"
|
|
|
|
# Each keyring package must be signed by a key Arch already trusts. Do not
|
|
# bootstrap trust from an unchecked keyserver response or disable signatures.
|
|
# https://github.com/archlinuxcn/repo#usage
|
|
mapfile -t keyring_packages < <(grep -hv '^#\|^$' "$profile/packages" | grep -- '-keyring$' || true)
|
|
if (( ${#keyring_packages[@]} > 0 )); then
|
|
pacman --config "$online_config" --noconfirm -Sy --needed "${keyring_packages[@]}"
|
|
pacman-key --populate "${keyring_packages[@]%-keyring}"
|
|
fi
|
|
done
|