From e3037bfa11b967462dc0b065883d29590f7b1139 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 11:57:13 +0000 Subject: [PATCH] chore(deps): update keyring images --- targets/aarch64-alarm.conf | 2 +- targets/aarch64-aur.conf | 2 +- targets/aarch64-core.conf | 2 +- targets/aarch64-extra.conf | 2 +- targets/armv7h-alarm.conf | 2 +- targets/armv7h-aur.conf | 2 +- targets/armv7h-core.conf | 2 +- targets/armv7h-extra.conf | 2 +- targets/loong64-core.conf | 2 +- targets/loong64-extra.conf | 2 +- targets/powerpc-base-any.conf | 2 +- targets/powerpc-base.conf | 2 +- targets/powerpc64-base-any.conf | 2 +- targets/powerpc64-base.conf | 2 +- targets/powerpc64le-base-any.conf | 2 +- targets/powerpc64le-base.conf | 2 +- targets/riscv64-core.conf | 2 +- targets/riscv64-extra.conf | 2 +- tests/unit/40-lib.sh | 2 +- 19 files changed, 19 insertions(+), 19 deletions(-) diff --git a/targets/aarch64-alarm.conf b/targets/aarch64-alarm.conf index 2a4cdc65..e7b75ed2 100644 --- a/targets/aarch64-alarm.conf +++ b/targets/aarch64-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:dfb052c213391ed2f40e6fe4b06c1bdf496fa0c8afad33547b3cee6fa67cafe6 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:bad5f413c0600da30bf7551fd42b183ba88f772c8989c55b71007cd00dbbbfb5 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-aur.conf b/targets/aarch64-aur.conf index 24c51f0d..7b322254 100644 --- a/targets/aarch64-aur.conf +++ b/targets/aarch64-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:dfb052c213391ed2f40e6fe4b06c1bdf496fa0c8afad33547b3cee6fa67cafe6 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:bad5f413c0600da30bf7551fd42b183ba88f772c8989c55b71007cd00dbbbfb5 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-core.conf b/targets/aarch64-core.conf index 9a63a53b..aba04f8c 100644 --- a/targets/aarch64-core.conf +++ b/targets/aarch64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:dfb052c213391ed2f40e6fe4b06c1bdf496fa0c8afad33547b3cee6fa67cafe6 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:bad5f413c0600da30bf7551fd42b183ba88f772c8989c55b71007cd00dbbbfb5 keyring_platform = linux/arm64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/aarch64-extra.conf b/targets/aarch64-extra.conf index cd761623..39bfc76a 100644 --- a/targets/aarch64-extra.conf +++ b/targets/aarch64-extra.conf @@ -34,7 +34,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:dfb052c213391ed2f40e6fe4b06c1bdf496fa0c8afad33547b3cee6fa67cafe6 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:bad5f413c0600da30bf7551fd42b183ba88f772c8989c55b71007cd00dbbbfb5 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-alarm.conf b/targets/armv7h-alarm.conf index 2d659568..4729f4f6 100644 --- a/targets/armv7h-alarm.conf +++ b/targets/armv7h-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:9fabf7646a52436234337aed821952047c3aa4cd2132027cacf887ec79e34762 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:0727099179c4793b0349c34a476ac04de508c592484381cfecfc841d7c86219d keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-aur.conf b/targets/armv7h-aur.conf index 45fa9470..4ebbb396 100644 --- a/targets/armv7h-aur.conf +++ b/targets/armv7h-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:9fabf7646a52436234337aed821952047c3aa4cd2132027cacf887ec79e34762 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:0727099179c4793b0349c34a476ac04de508c592484381cfecfc841d7c86219d keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-core.conf b/targets/armv7h-core.conf index 7dfe26fe..26db7239 100644 --- a/targets/armv7h-core.conf +++ b/targets/armv7h-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:9fabf7646a52436234337aed821952047c3aa4cd2132027cacf887ec79e34762 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:0727099179c4793b0349c34a476ac04de508c592484381cfecfc841d7c86219d keyring_platform = linux/arm/v7 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/armv7h-extra.conf b/targets/armv7h-extra.conf index 86c6cb72..0c8a9a90 100644 --- a/targets/armv7h-extra.conf +++ b/targets/armv7h-extra.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:9fabf7646a52436234337aed821952047c3aa4cd2132027cacf887ec79e34762 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:0727099179c4793b0349c34a476ac04de508c592484381cfecfc841d7c86219d keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/loong64-core.conf b/targets/loong64-core.conf index 5d75ffc0..f4b63881 100644 --- a/targets/loong64-core.conf +++ b/targets/loong64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:a66d15ec71539860fa70cae0e1ae47ffb55b95e060ac376624df31e336208727 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:b02ca09fbc04a9ca4d54c4d85b6032bee91c6a78da0491bc64ac35632a5f41ad keyring_platform = linux/loong64 # Both keyring packages, installed from the snapshot before anything else is diff --git a/targets/loong64-extra.conf b/targets/loong64-extra.conf index 60cf55b7..488c3418 100644 --- a/targets/loong64-extra.conf +++ b/targets/loong64-extra.conf @@ -36,7 +36,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:a66d15ec71539860fa70cae0e1ae47ffb55b95e060ac376624df31e336208727 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:b02ca09fbc04a9ca4d54c4d85b6032bee91c6a78da0491bc64ac35632a5f41ad keyring_platform = linux/loong64 # Both keyring packages are in core: verify installs them from the promoted diff --git a/targets/powerpc-base-any.conf b/targets/powerpc-base-any.conf index 0cba1610..506007c8 100644 --- a/targets/powerpc-base-any.conf +++ b/targets/powerpc-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e43f1fd80e073992c5f173efb verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:62452fae4826d982ae7d709a1ee2057ad6b8f79281a71e643a0e88012e9e13c2 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:b784af003996b2c70d0115455ae7841c051c7c5ba1793dab67f48f5ce8363edf keyring_platform = linux/ppc # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc-base.conf b/targets/powerpc-base.conf index 198cee7f..b2a61c6d 100644 --- a/targets/powerpc-base.conf +++ b/targets/powerpc-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e43f1fd80e073992c5f173efb verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:62452fae4826d982ae7d709a1ee2057ad6b8f79281a71e643a0e88012e9e13c2 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:b784af003996b2c70d0115455ae7841c051c7c5ba1793dab67f48f5ce8363edf keyring_platform = linux/ppc # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64-base-any.conf b/targets/powerpc64-base-any.conf index 002bc87b..c6100eec 100644 --- a/targets/powerpc64-base-any.conf +++ b/targets/powerpc64-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e43f1fd80e073992c5f173efb verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:e67f4cc0c5e4952470dac2ebc7c6d37f488d3b6156a9f57733b2b60ab84f1157 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:c32a277e7296720e329ea5c714651275ce70c484a33a09691d5ed185bfd594b6 keyring_platform = linux/ppc64 # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64-base.conf b/targets/powerpc64-base.conf index e323432b..7aed55be 100644 --- a/targets/powerpc64-base.conf +++ b/targets/powerpc64-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e43f1fd80e073992c5f173efb verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:e67f4cc0c5e4952470dac2ebc7c6d37f488d3b6156a9f57733b2b60ab84f1157 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:c32a277e7296720e329ea5c714651275ce70c484a33a09691d5ed185bfd594b6 keyring_platform = linux/ppc64 # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64le-base-any.conf b/targets/powerpc64le-base-any.conf index a82d5c62..36f63c27 100644 --- a/targets/powerpc64le-base-any.conf +++ b/targets/powerpc64le-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e43f1fd80e073992c5f173efb verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:9379be251e8a899e1d48e8bcc6e47924bff5fb62091b157b0e29e94296e300c6 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:66b207e737ed151e4e6cca8b9fc17e1f59da2808ec34e4cf6b64c6f51abac607 keyring_platform = linux/ppc64le # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64le-base.conf b/targets/powerpc64le-base.conf index 2a91171a..74304390 100644 --- a/targets/powerpc64le-base.conf +++ b/targets/powerpc64le-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e43f1fd80e073992c5f173efb verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:9379be251e8a899e1d48e8bcc6e47924bff5fb62091b157b0e29e94296e300c6 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:66b207e737ed151e4e6cca8b9fc17e1f59da2808ec34e4cf6b64c6f51abac607 keyring_platform = linux/ppc64le # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf index 0596e375..e79dd648 100644 --- a/targets/riscv64-core.conf +++ b/targets/riscv64-core.conf @@ -35,7 +35,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:eea185a48c9d07f447558ab3019ef0b7bb9c821e1f15ab070d950b096be1c73e +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:26669be3366e7c1962d26e40776741b1b918faff9b5d70e56b3f861f0dd5d58f keyring_platform = linux/riscv64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf index 7b3de742..0029f00d 100644 --- a/targets/riscv64-extra.conf +++ b/targets/riscv64-extra.conf @@ -40,7 +40,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:eea185a48c9d07f447558ab3019ef0b7bb9c821e1f15ab070d950b096be1c73e +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:26669be3366e7c1962d26e40776741b1b918faff9b5d70e56b3f861f0dd5d58f keyring_platform = linux/riscv64 # The keyring package is in core: verify installs it from the promoted diff --git a/tests/unit/40-lib.sh b/tests/unit/40-lib.sh index c963a012..7723e3d6 100644 --- a/tests/unit/40-lib.sh +++ b/tests/unit/40-lib.sh @@ -72,7 +72,7 @@ refused "a line that is not key = value" "$work/t6/x86_64-core.conf" # The keys that set verify's trust root #---------------------------------------------------------------------------# # tag: aarch64 -IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:dfb052c213391ed2f40e6fe4b06c1bdf496fa0c8afad33547b3cee6fa67cafe6' +IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:bad5f413c0600da30bf7551fd42b183ba88f772c8989c55b71007cd00dbbbfb5' # trust NAME LINES...: a target file of x86_64 extra, with x86_64-core beside it trust() { local d="$work/trust-$1"