Skip to content

Commit

Permalink
getuto: Re-import the system key as well on updates
Browse files Browse the repository at this point in the history
Always re-import the system keys because it might be our only source of updates
for e.g. revocations, renewals, etc if we're on a firewalled machine.

Signed-off-by: Sam James <sam@gentoo.org>
  • Loading branch information
thesamesam committed Aug 26, 2023
1 parent be676cc commit bff712c
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions getuto
Original file line number Diff line number Diff line change
Expand Up @@ -101,8 +101,10 @@ EOF

fi

# Refresh all keys from the keyserver.

# Always re-import the system keys because it might be our only source of updates
# for e.g. revocations, renewals, etc if we're on a firewalled machine.
gpg --no-permission-warning --batch --import "${ROOT%/}"/usr/share/openpgp-keys/gentoo-release.asc
# Refresh all keys from the keyserver if we can.
gpg --no-permission-warning --batch --keyserver "${mykeyserver}" --refresh-keys || true # TODO: keys.openpgp.org lacks a UID for our keys, need to verify email

# Make sure the trustdb is world-readable (again).
Expand Down

0 comments on commit bff712c

Please sign in to comment.