From aeb8e370aeb9f3126a3066af3be462da95d69ca3 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 14 Oct 2026 17:28:44 +0000 Subject: [PATCH] Update keyring images --- targets/aarch64-alarm.conf | 2 +- targets/aarch64-aur.conf | 2 +- targets/aarch64-core.conf | 2 +- targets/aarch64-extra.conf | 2 +- targets/armv7h-alarm.conf | 2 +- targets/armv7h-aur.conf | 2 +- targets/armv7h-core.conf | 2 +- targets/armv7h-extra.conf | 2 +- targets/loong64-core.conf | 2 +- targets/loong64-extra.conf | 2 +- targets/riscv64-core.conf | 2 +- targets/riscv64-extra.conf | 2 +- tests/unit/40-lib.sh | 2 +- 13 files changed, 13 insertions(+), 13 deletions(-) diff --git a/targets/aarch64-alarm.conf b/targets/aarch64-alarm.conf index a2f75ae..7001fc2 100644 --- a/targets/aarch64-alarm.conf +++ b/targets/aarch64-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b3610e2db83532a105802cf05a40ee7273f58231d5d0e507138f0cd9adef2e27 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:15031c4e061148f93f4942bc0bc0ec05e3da69007889d6808020e91a5e26d162 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-aur.conf b/targets/aarch64-aur.conf index 7af1944..afd82f6 100644 --- a/targets/aarch64-aur.conf +++ b/targets/aarch64-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b3610e2db83532a105802cf05a40ee7273f58231d5d0e507138f0cd9adef2e27 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:15031c4e061148f93f4942bc0bc0ec05e3da69007889d6808020e91a5e26d162 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-core.conf b/targets/aarch64-core.conf index fd79ac4..52a31b7 100644 --- a/targets/aarch64-core.conf +++ b/targets/aarch64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b3610e2db83532a105802cf05a40ee7273f58231d5d0e507138f0cd9adef2e27 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:15031c4e061148f93f4942bc0bc0ec05e3da69007889d6808020e91a5e26d162 keyring_platform = linux/arm64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/aarch64-extra.conf b/targets/aarch64-extra.conf index cd3742f..b08c070 100644 --- a/targets/aarch64-extra.conf +++ b/targets/aarch64-extra.conf @@ -34,7 +34,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b3610e2db83532a105802cf05a40ee7273f58231d5d0e507138f0cd9adef2e27 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:15031c4e061148f93f4942bc0bc0ec05e3da69007889d6808020e91a5e26d162 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-alarm.conf b/targets/armv7h-alarm.conf index 0e13d70..00b741c 100644 --- a/targets/armv7h-alarm.conf +++ b/targets/armv7h-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:d9036f1bb4e272f7b72f1ed81cb6f3ffa6b2a80239ede387fac0ff1dbe5f6298 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a1708b782b459eace82913998f4b6cb5eeb04db02d26cb643945a04e311aa55e keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-aur.conf b/targets/armv7h-aur.conf index d7a86df..c12f9df 100644 --- a/targets/armv7h-aur.conf +++ b/targets/armv7h-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:d9036f1bb4e272f7b72f1ed81cb6f3ffa6b2a80239ede387fac0ff1dbe5f6298 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a1708b782b459eace82913998f4b6cb5eeb04db02d26cb643945a04e311aa55e keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-core.conf b/targets/armv7h-core.conf index 5c2bd55..d853318 100644 --- a/targets/armv7h-core.conf +++ b/targets/armv7h-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:d9036f1bb4e272f7b72f1ed81cb6f3ffa6b2a80239ede387fac0ff1dbe5f6298 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a1708b782b459eace82913998f4b6cb5eeb04db02d26cb643945a04e311aa55e keyring_platform = linux/arm/v7 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/armv7h-extra.conf b/targets/armv7h-extra.conf index d22b4fb..9b9dea3 100644 --- a/targets/armv7h-extra.conf +++ b/targets/armv7h-extra.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:d9036f1bb4e272f7b72f1ed81cb6f3ffa6b2a80239ede387fac0ff1dbe5f6298 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a1708b782b459eace82913998f4b6cb5eeb04db02d26cb643945a04e311aa55e keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/loong64-core.conf b/targets/loong64-core.conf index 8aca507..96ad869 100644 --- a/targets/loong64-core.conf +++ b/targets/loong64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:493c2d153bb1b6b4ea3ff07a22bc63516807d1038473994f3f9e04ba9c01e50c +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:72d26fe32951e375559fcdf98097fd892db744d768a60bcab43ecea026b9c686 keyring_platform = linux/loong64 # Both keyring packages, installed from the snapshot before anything else is diff --git a/targets/loong64-extra.conf b/targets/loong64-extra.conf index 23d3106..e84a6fd 100644 --- a/targets/loong64-extra.conf +++ b/targets/loong64-extra.conf @@ -36,7 +36,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:493c2d153bb1b6b4ea3ff07a22bc63516807d1038473994f3f9e04ba9c01e50c +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:72d26fe32951e375559fcdf98097fd892db744d768a60bcab43ecea026b9c686 keyring_platform = linux/loong64 # Both keyring packages are in core: verify installs them from the promoted diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf index 5e44394..8f72652 100644 --- a/targets/riscv64-core.conf +++ b/targets/riscv64-core.conf @@ -35,7 +35,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d2b71c9ac98971be75e0e4b29b6bb24dea2e3b302dfc27288567193bf16091d4 +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:546c7965a2ca05b221b996c4ffbdebecaa12c095cba24a4dcbee899e4d36f5ed keyring_platform = linux/riscv64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf index e129eba..fe32895 100644 --- a/targets/riscv64-extra.conf +++ b/targets/riscv64-extra.conf @@ -40,7 +40,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d2b71c9ac98971be75e0e4b29b6bb24dea2e3b302dfc27288567193bf16091d4 +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:546c7965a2ca05b221b996c4ffbdebecaa12c095cba24a4dcbee899e4d36f5ed keyring_platform = linux/riscv64 # The keyring package is in core: verify installs it from the promoted diff --git a/tests/unit/40-lib.sh b/tests/unit/40-lib.sh index 9db6cf1..4d6c667 100644 --- a/tests/unit/40-lib.sh +++ b/tests/unit/40-lib.sh @@ -72,7 +72,7 @@ refused "a line that is not key = value" "$work/t6/x86_64-core.conf" # The keys that set verify's trust root #---------------------------------------------------------------------------# # tag: aarch64 -IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b3610e2db83532a105802cf05a40ee7273f58231d5d0e507138f0cd9adef2e27' +IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:15031c4e061148f93f4942bc0bc0ec05e3da69007889d6808020e91a5e26d162' # trust NAME LINES...: a target file of x86_64 extra, with x86_64-core beside it trust() { local d="$work/trust-$1"