security/archlinux-keyring: update to 20230504

Now uses sequoia-sq to generate the keyring. Also run-depend on
archlinux-pacman to initialise/populate/update the keyring on the
target such that the official Arch Linux pacman repositories verify
PGP signatures properly.

Event: SouthEast LinuxFest 2023

1 files changed, 29 insertions, 0 deletions

diff --git a/security/archlinux-keyring/files/archlinux-keyring.ucl.in b/security/archlinux-keyring/files/archlinux-keyring.ucl.in
new file mode 100644
index 000000000000..ce622abb06c5
--- /dev/null
+++ b/security/archlinux-keyring/files/archlinux-keyring.ucl.in
@@ -0,0 +1,29 @@
+path_glob: %%LOCALBASE%%/share/pacman/keyrings
+cleanup: {
+	type: lua
+	sandbox: false
+	script: <<EOS
+function cleanup(directory)
+  for _,d in ipairs(pkg.readdir(directory)) do
+    local full_path = directory .. "/" .. d
+    local stat = pkg.stat(full_path)
+    if stat["type"] == "dir" then
+      cleanup(full_path)
+    end
+    os.remove(full_path)
+  end
+  os.remove(directory)
+end
+
+cleanup("%%LOCALBASE%%/etc/pacman.d/gnupg")
+EOS
+}
+trigger: {
+	type: lua
+	sandbox: false
+	script: <<EOS
+pkg.exec({"pacman-key", "--init"})
+pkg.exec({"pacman-key", "--populate", "archlinux"})
+pkg.exec({"pacman-key", "--updatedb"})
+EOS
+}