Skip to content

chore(deps): update keyring images #38

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
renovate merged 1 commit into from
Oct 19, 2026
Merged

chore(deps): update keyring images #38

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion targets/aarch64-alarm.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: aarch64
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4
keyring_platform = linux/arm64

# The keyring package is in core: verify installs it from the promoted
Expand Down
2 changes: 1 addition & 1 deletion targets/aarch64-aur.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: aarch64
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4
keyring_platform = linux/arm64

# The keyring package is in core: verify installs it from the promoted
Expand Down
2 changes: 1 addition & 1 deletion targets/aarch64-core.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: aarch64
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4
keyring_platform = linux/arm64

# The keyring package, installed from the snapshot before anything else is
Expand Down
2 changes: 1 addition & 1 deletion targets/aarch64-extra.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: aarch64
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9
keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4
keyring_platform = linux/arm64

# The keyring package is in core: verify installs it from the promoted
Expand Down
2 changes: 1 addition & 1 deletion targets/armv7h-alarm.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: armv7h
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800
keyring_platform = linux/arm/v7

# The keyring package is in core: verify installs it from the promoted
Expand Down
2 changes: 1 addition & 1 deletion targets/armv7h-aur.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: armv7h
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800
keyring_platform = linux/arm/v7

# The keyring package is in core: verify installs it from the promoted
Expand Down
2 changes: 1 addition & 1 deletion targets/armv7h-core.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: armv7h
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800
keyring_platform = linux/arm/v7

# The keyring package, installed from the snapshot before anything else is
Expand Down
2 changes: 1 addition & 1 deletion targets/armv7h-extra.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out
# of it and never run. The x86_64 image keeps its own archlinux keyring.
# tag: armv7h
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073
keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800
keyring_platform = linux/arm/v7

# The keyring package is in core: verify installs it from the promoted
Expand Down
2 changes: 1 addition & 1 deletion targets/loong64-core.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ verify_platform = linux/amd64
# of it and never run. The x86_64 image keeps its own archlinux keyring, which
# signs the port's any packages.
# tag: loong64
keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:87ea8562e551d289bbbba1908b8a19b37bf8a0ec1e7fbb807bc00a455210d2d0
keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:5bbde0e9d9d18408e501dcbee489b4c75f68bcb136592083bebd37df85ea40ce
keyring_platform = linux/loong64

# Both keyring packages, installed from the snapshot before anything else is
Expand Down
2 changes: 1 addition & 1 deletion targets/loong64-extra.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ verify_platform = linux/amd64
# of it and never run. The x86_64 image keeps its own archlinux keyring, which
# signs the port's any packages.
# tag: loong64
keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:87ea8562e551d289bbbba1908b8a19b37bf8a0ec1e7fbb807bc00a455210d2d0
keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:5bbde0e9d9d18408e501dcbee489b4c75f68bcb136592083bebd37df85ea40ce
keyring_platform = linux/loong64

# Both keyring packages are in core: verify installs them from the promoted
Expand Down
2 changes: 1 addition & 1 deletion targets/powerpc-base-any.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb
verify_platform = linux/amd64

# tag: ppc
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:cf484e871f00b4d840e2cc6e918d3117b9e8d5a66396d98487e9f35c7492905e
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:62452fae4826d982ae7d709a1ee2057ad6b8f79281a71e643a0e88012e9e13c2
keyring_platform = linux/ppc

# The keyring package is in this repository, so no keyring_from.
Expand Down
2 changes: 1 addition & 1 deletion targets/powerpc-base.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb
verify_platform = linux/amd64

# tag: ppc
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:cf484e871f00b4d840e2cc6e918d3117b9e8d5a66396d98487e9f35c7492905e
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:62452fae4826d982ae7d709a1ee2057ad6b8f79281a71e643a0e88012e9e13c2
keyring_platform = linux/ppc

# The keyring package is in base-any. keyring_from names that target of this
Expand Down
2 changes: 1 addition & 1 deletion targets/powerpc64-base-any.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb
verify_platform = linux/amd64

# tag: ppc64
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:fcff0901e12386250da3af86889a00a838e0c82975a385e1ec0127484cbcf526
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:905446bf22114f9b94ce30b5443954e701cc208c2707617a51fb1d2242096eea
keyring_platform = linux/ppc64

# The keyring package is in this repository, so no keyring_from.
Expand Down
2 changes: 1 addition & 1 deletion targets/powerpc64-base.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb
verify_platform = linux/amd64

# tag: ppc64
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:fcff0901e12386250da3af86889a00a838e0c82975a385e1ec0127484cbcf526
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:905446bf22114f9b94ce30b5443954e701cc208c2707617a51fb1d2242096eea
keyring_platform = linux/ppc64

# The keyring package is in base-any. keyring_from names that target of this
Expand Down
2 changes: 1 addition & 1 deletion targets/powerpc64le-base-any.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb
verify_platform = linux/amd64

# tag: ppc64le
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:e112a1ace94c57c64f6fe8f4d1b91896cbf280372afbfec14e26625635480455
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:cf15b6d6855a31dd0be34a0881ff888095b557cbcca7575e000b8d7dfb107bc5
keyring_platform = linux/ppc64le

# The keyring package is in this repository, so no keyring_from.
Expand Down
2 changes: 1 addition & 1 deletion targets/powerpc64le-base.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb
verify_platform = linux/amd64

# tag: ppc64le
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:e112a1ace94c57c64f6fe8f4d1b91896cbf280372afbfec14e26625635480455
keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:cf15b6d6855a31dd0be34a0881ff888095b557cbcca7575e000b8d7dfb107bc5
keyring_platform = linux/ppc64le

# The keyring package is in base-any. keyring_from names that target of this
Expand Down
2 changes: 1 addition & 1 deletion targets/riscv64-core.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ verify_platform = linux/amd64
# signature in the port is by a key in archlinux.gpg (2026-10-14), which the
# x86_64 image keeps as its own; the image follows the port if that changes.
# tag: riscv64
keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:4f73be803865cade5558d824a0d6f2595fd927539474383ef058d26d8278e42f
keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:23681d447c97fad28ece404e5f5f73ba5330e328317f4fa1b09014d63fd5170a
keyring_platform = linux/riscv64

# The keyring package, installed from the snapshot before anything else is
Expand Down
2 changes: 1 addition & 1 deletion targets/riscv64-extra.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ verify_platform = linux/amd64
# signature in the port is by a key in archlinux.gpg (2026-10-14), which the
# x86_64 image keeps as its own; the image follows the port if that changes.
# tag: riscv64
keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:4f73be803865cade5558d824a0d6f2595fd927539474383ef058d26d8278e42f
keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:23681d447c97fad28ece404e5f5f73ba5330e328317f4fa1b09014d63fd5170a
keyring_platform = linux/riscv64

# The keyring package is in core: verify installs it from the promoted
Expand Down
2 changes: 1 addition & 1 deletion tests/unit/40-lib.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@ refused "a line that is not key = value" "$work/t6/x86_64-core.conf"
# The keys that set verify's trust root
#---------------------------------------------------------------------------#
# tag: aarch64
IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9'
IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4'
# trust NAME LINES...: a target file of x86_64 extra, with x86_64-core beside it
trust() {
local d="$work/trust-$1"
Expand Down