From c7cda4734292bca540402bb87d1a258f2e4a0eaa Mon Sep 17 00:00:00 2001 From: Pierre Schmitz Date: Mon, 11 Jun 2012 16:44:23 +0200 Subject: Enable signature checking within build environment * bind /sys and /dev/pts from host * drop support for devtmpfs as it is no longer needed * add /run and /dev/rtc0 * clone own ipc, uts and mount namespaces for chroot * set localtime, timezone and locale within chroot environment * copy /etc/pacman.d/gnupg from host --- pacman-staging.conf | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) (limited to 'pacman-staging.conf') diff --git a/pacman-staging.conf b/pacman-staging.conf index 4a803a1..d4116e2 100644 --- a/pacman-staging.conf +++ b/pacman-staging.conf @@ -45,9 +45,6 @@ Architecture = auto # keyring can then be populated with the keys of all official Arch Linux # packagers with `pacman-key --populate archlinux`. -# Signature checking does not work within our chroot -SigLevel = Never - # # REPOSITORIES # - can be defined here or included from another file @@ -72,29 +69,36 @@ SigLevel = Never # after the header, and they will be used before the default mirrors. [staging] +SigLevel = PackageRequired Include = /etc/pacman.d/mirrorlist [testing] +SigLevel = PackageRequired Include = /etc/pacman.d/mirrorlist [core] +SigLevel = PackageRequired Include = /etc/pacman.d/mirrorlist [extra] +SigLevel = PackageRequired Include = /etc/pacman.d/mirrorlist [community-staging] +SigLevel = PackageRequired Include = /etc/pacman.d/mirrorlist [community-testing] +SigLevel = PackageRequired Include = /etc/pacman.d/mirrorlist -#SigLevel = Optional TrustAll [community] +SigLevel = PackageRequired Include = /etc/pacman.d/mirrorlist # An example of a custom package repository. See the pacman manpage for # tips on creating your own repositories. #[custom] +#SigLevel = Optional TrustAll #Server = file:///home/custompkgs -- cgit v1.2.3-54-g00ecf