From 9ab03892d87574cca3457cd43096351dd9271ab1 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 12 Nov 2026 16:19:01 +0000 Subject: [PATCH] chore(deps): update keyring images --- targets/aarch64-alarm.conf | 2 +- targets/aarch64-aur.conf | 2 +- targets/aarch64-core.conf | 2 +- targets/aarch64-extra.conf | 2 +- targets/armv7h-alarm.conf | 2 +- targets/armv7h-aur.conf | 2 +- targets/armv7h-core.conf | 2 +- targets/armv7h-extra.conf | 2 +- targets/loong64-core.conf | 2 +- targets/loong64-extra.conf | 2 +- targets/powerpc-base-any.conf | 2 +- targets/powerpc-base.conf | 2 +- targets/powerpc64-base-any.conf | 2 +- targets/powerpc64-base.conf | 2 +- targets/powerpc64le-base-any.conf | 2 +- targets/powerpc64le-base.conf | 2 +- targets/riscv64-core.conf | 2 +- targets/riscv64-extra.conf | 2 +- tests/unit/40-lib.sh | 2 +- 19 files changed, 19 insertions(+), 19 deletions(-) diff --git a/targets/aarch64-alarm.conf b/targets/aarch64-alarm.conf index 884a43f0..a54d5247 100644 --- a/targets/aarch64-alarm.conf +++ b/targets/aarch64-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b0c6e482353fa5795b9ba0d0f2965771e033f26e3e2914276742f1f52f12ba9e +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:73cf4c0c79ebeb398364bdf93434e42976c105d5426854282bf0b46bce29591e keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-aur.conf b/targets/aarch64-aur.conf index 1a7e5d87..71c6b15d 100644 --- a/targets/aarch64-aur.conf +++ b/targets/aarch64-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b0c6e482353fa5795b9ba0d0f2965771e033f26e3e2914276742f1f52f12ba9e +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:73cf4c0c79ebeb398364bdf93434e42976c105d5426854282bf0b46bce29591e keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-core.conf b/targets/aarch64-core.conf index 4480d6fd..3cfa1583 100644 --- a/targets/aarch64-core.conf +++ b/targets/aarch64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b0c6e482353fa5795b9ba0d0f2965771e033f26e3e2914276742f1f52f12ba9e +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:73cf4c0c79ebeb398364bdf93434e42976c105d5426854282bf0b46bce29591e keyring_platform = linux/arm64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/aarch64-extra.conf b/targets/aarch64-extra.conf index 825a7e3b..d1225e76 100644 --- a/targets/aarch64-extra.conf +++ b/targets/aarch64-extra.conf @@ -34,7 +34,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b0c6e482353fa5795b9ba0d0f2965771e033f26e3e2914276742f1f52f12ba9e +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:73cf4c0c79ebeb398364bdf93434e42976c105d5426854282bf0b46bce29591e keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-alarm.conf b/targets/armv7h-alarm.conf index ba05c906..d99d3e7f 100644 --- a/targets/armv7h-alarm.conf +++ b/targets/armv7h-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a27d6dbe6f24cdcb4172074b7eec97d2c34122ac10ebd613a8dfdbb35bc64f5b +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:f1a65d76f9b325cf61c5bf7d7c95383bfa9f3f4c03484c233f36aa663e644fe7 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-aur.conf b/targets/armv7h-aur.conf index f8b3720c..3e8e10dc 100644 --- a/targets/armv7h-aur.conf +++ b/targets/armv7h-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a27d6dbe6f24cdcb4172074b7eec97d2c34122ac10ebd613a8dfdbb35bc64f5b +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:f1a65d76f9b325cf61c5bf7d7c95383bfa9f3f4c03484c233f36aa663e644fe7 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-core.conf b/targets/armv7h-core.conf index 14852075..56638bf1 100644 --- a/targets/armv7h-core.conf +++ b/targets/armv7h-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a27d6dbe6f24cdcb4172074b7eec97d2c34122ac10ebd613a8dfdbb35bc64f5b +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:f1a65d76f9b325cf61c5bf7d7c95383bfa9f3f4c03484c233f36aa663e644fe7 keyring_platform = linux/arm/v7 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/armv7h-extra.conf b/targets/armv7h-extra.conf index 633125cb..28f33f71 100644 --- a/targets/armv7h-extra.conf +++ b/targets/armv7h-extra.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a27d6dbe6f24cdcb4172074b7eec97d2c34122ac10ebd613a8dfdbb35bc64f5b +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:f1a65d76f9b325cf61c5bf7d7c95383bfa9f3f4c03484c233f36aa663e644fe7 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/loong64-core.conf b/targets/loong64-core.conf index 4cc837a5..c05b38ae 100644 --- a/targets/loong64-core.conf +++ b/targets/loong64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:7674be83f6cec5d4bf3dd24b11f8064cfc4b058c26f889b4db0b0e8a2fa16016 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:e8accea2aa65690d065bd19c90e2aebd362e4655fa47d45b8bc60ba25275c883 keyring_platform = linux/loong64 # Both keyring packages, installed from the snapshot before anything else is diff --git a/targets/loong64-extra.conf b/targets/loong64-extra.conf index 56edcf2b..29a37242 100644 --- a/targets/loong64-extra.conf +++ b/targets/loong64-extra.conf @@ -36,7 +36,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:7674be83f6cec5d4bf3dd24b11f8064cfc4b058c26f889b4db0b0e8a2fa16016 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:e8accea2aa65690d065bd19c90e2aebd362e4655fa47d45b8bc60ba25275c883 keyring_platform = linux/loong64 # Both keyring packages are in core: verify installs them from the promoted diff --git a/targets/powerpc-base-any.conf b/targets/powerpc-base-any.conf index fd7078de..0e469e62 100644 --- a/targets/powerpc-base-any.conf +++ b/targets/powerpc-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:d4594bb2300cba11f41c2f279 verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:dde9e49a7f2e2afe049bfd8f9d4da7c0ff85b556f227124f760c076830106c6b +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:0e8ea89d3945b6de66b00f7b11b8ebfc977a9076870a6c3d67a29a1246437154 keyring_platform = linux/ppc # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc-base.conf b/targets/powerpc-base.conf index 32b84edb..18d1cc91 100644 --- a/targets/powerpc-base.conf +++ b/targets/powerpc-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:d4594bb2300cba11f41c2f279 verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:dde9e49a7f2e2afe049bfd8f9d4da7c0ff85b556f227124f760c076830106c6b +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:0e8ea89d3945b6de66b00f7b11b8ebfc977a9076870a6c3d67a29a1246437154 keyring_platform = linux/ppc # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64-base-any.conf b/targets/powerpc64-base-any.conf index 71f2dd2f..3ef91fbf 100644 --- a/targets/powerpc64-base-any.conf +++ b/targets/powerpc64-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:d4594bb2300cba11f41c2f279 verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:09270d6482ce5252313c8134266a6689477d6d3b13e8530485e3cf61bc35908a +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:b80bf15fe1df640a104da7ebceba33b9da758bb36a18ffeb4b1570c69813de91 keyring_platform = linux/ppc64 # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64-base.conf b/targets/powerpc64-base.conf index 7304781e..1eeaca77 100644 --- a/targets/powerpc64-base.conf +++ b/targets/powerpc64-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:d4594bb2300cba11f41c2f279 verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:09270d6482ce5252313c8134266a6689477d6d3b13e8530485e3cf61bc35908a +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:b80bf15fe1df640a104da7ebceba33b9da758bb36a18ffeb4b1570c69813de91 keyring_platform = linux/ppc64 # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64le-base-any.conf b/targets/powerpc64le-base-any.conf index a713ebb4..4a5005bc 100644 --- a/targets/powerpc64le-base-any.conf +++ b/targets/powerpc64le-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:d4594bb2300cba11f41c2f279 verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:079f541ae6d00ae98d5933940c6ffa67988247d18d837ea6a4e436e7514df1a9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:1a57f032c2231e3f3ec75da583a7d203887c3f76b0b77900ac5546d493615dc3 keyring_platform = linux/ppc64le # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64le-base.conf b/targets/powerpc64le-base.conf index 6ef2f4a1..0715ad2c 100644 --- a/targets/powerpc64le-base.conf +++ b/targets/powerpc64le-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:d4594bb2300cba11f41c2f279 verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:079f541ae6d00ae98d5933940c6ffa67988247d18d837ea6a4e436e7514df1a9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:1a57f032c2231e3f3ec75da583a7d203887c3f76b0b77900ac5546d493615dc3 keyring_platform = linux/ppc64le # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf index ae4115b1..38dc6149 100644 --- a/targets/riscv64-core.conf +++ b/targets/riscv64-core.conf @@ -35,7 +35,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d816b5255a5c296b75ef580e9d794acffb1b257399c9eb51bd34a659a1b2528a +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:efb27bb2646cb39a2a175b8825663ab97030542c54ed0f0a623f19fc9a975527 keyring_platform = linux/riscv64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf index bd830e49..280b7b79 100644 --- a/targets/riscv64-extra.conf +++ b/targets/riscv64-extra.conf @@ -40,7 +40,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d816b5255a5c296b75ef580e9d794acffb1b257399c9eb51bd34a659a1b2528a +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:efb27bb2646cb39a2a175b8825663ab97030542c54ed0f0a623f19fc9a975527 keyring_platform = linux/riscv64 # The keyring package is in core: verify installs it from the promoted diff --git a/tests/unit/40-lib.sh b/tests/unit/40-lib.sh index cd72dc71..6fc5985c 100644 --- a/tests/unit/40-lib.sh +++ b/tests/unit/40-lib.sh @@ -72,7 +72,7 @@ refused "a line that is not key = value" "$work/t6/x86_64-core.conf" # The keys that set verify's trust root #---------------------------------------------------------------------------# # tag: aarch64 -IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:b0c6e482353fa5795b9ba0d0f2965771e033f26e3e2914276742f1f52f12ba9e' +IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:73cf4c0c79ebeb398364bdf93434e42976c105d5426854282bf0b46bce29591e' # trust NAME LINES...: a target file of x86_64 extra, with x86_64-core beside it trust() { local d="$work/trust-$1"