f-denkena/fd-gentoo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

qubes.eclass: copy from fepitre overlay

Browse Source 
Signed-off-by: Federico Justus Denkena <federico.denkena@posteo.de>
This commit is contained in:
Federico Justus Denkena 2024-12-05 03:46:10 +01:00
parent 9140324d01
commit f28bce4925
Signed by: f-denkena
GPG Key ID: 28F91C66EE36F382
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
eclass/qubes.eclass Normal file
View File

@ -0,0 +1,23 @@
# Maintainer: Frédéric Pierret <frederic.pierret@qubes-os.org>
# Workaround for verifying git tags
# Feature request: https://bugs.gentoo.org/733430
qubes_verify_sources_git() {
# To override the default Qubes repository path, set QUBES_OVERLAY_DIR in your make.conf
LOCAL_QUBES_OVERLAY_DIR="${QUBES_OVERLAY_DIR:-/var/db/repos/qubes}"
# Import Qubes developers keys
gpg --import "${LOCAL_QUBES_OVERLAY_DIR}/keys/qubes-developers-keys.asc" 2>/dev/null
# Trust Qubes Master Signing Key
echo '427F11FD0FAA4B080123F01CDDFA1A3E36879494:6:' | gpg --import-ownertrust
VALID_TAG_FOUND=0
for tag in $(git tag --points-at="$1"); do
if git verify-tag --raw "$tag" 2>&1 | grep -q '^\[GNUPG:\] TRUST_\(FULLY\|ULTIMATE\)'; then
VALID_TAG_FOUND=1
fi
done
if [ "$VALID_TAG_FOUND" -eq 0 ]; then
die 'Signature verification failed!'
fi
}