diff --git a/scripts/post-install.sh b/scripts/post-install.sh index 3116e34..f0ce17c 100755 --- a/scripts/post-install.sh +++ b/scripts/post-install.sh @@ -20,6 +20,34 @@ else log "paru already installed." fi +# --- Set up Moonarch package registry --- + +log "Setting up Moonarch package registry..." +if ! grep -q '\[moonarch\]' /etc/pacman.conf 2>/dev/null; then + sudo tee -a /etc/pacman.conf > /dev/null <<'EOCONF' + +[moonarch] +SigLevel = Required DatabaseOptional +Server = https://gitea.moonarch.de/api/packages/nevaforget/arch/$repo/$arch +EOCONF + log " + Moonarch repo added to pacman.conf." +else + log " ~ Moonarch repo already in pacman.conf." +fi + +log "Importing Moonarch registry signing key..." +KEY_FILE=$(mktemp) +curl -sf https://gitea.moonarch.de/api/packages/nevaforget/arch/repository.key -o "$KEY_FILE" +KEY_ID=$(gpg --show-keys --with-colons "$KEY_FILE" 2>/dev/null | awk -F: '/^pub/{print $5}') +if [[ -n "$KEY_ID" ]] && ! sudo pacman-key --list-keys "$KEY_ID" &>/dev/null; then + sudo pacman-key --add "$KEY_FILE" + sudo pacman-key --lsign-key "$KEY_ID" + log " + Registry key $KEY_ID imported and locally signed." +else + log " ~ Registry key already imported." +fi +rm -f "$KEY_FILE" + # --- Set up Moonarch custom paru repo --- log "Setting up Moonarch paru repo..." diff --git a/scripts/transform.sh b/scripts/transform.sh index 7a23a8f..bfbd90a 100755 --- a/scripts/transform.sh +++ b/scripts/transform.sh @@ -206,6 +206,33 @@ else log "paru already installed." fi +# Moonarch package registry +log "Setting up Moonarch package registry..." +if ! grep -q '\[moonarch\]' /etc/pacman.conf 2>/dev/null; then + sudo tee -a /etc/pacman.conf > /dev/null <<'EOCONF' + +[moonarch] +SigLevel = Required DatabaseOptional +Server = https://gitea.moonarch.de/api/packages/nevaforget/arch/$repo/$arch +EOCONF + log " + Moonarch repo added to pacman.conf." +else + log " ~ Moonarch repo already in pacman.conf." +fi + +log "Importing Moonarch registry signing key..." +KEY_FILE=$(mktemp) +curl -sf https://gitea.moonarch.de/api/packages/nevaforget/arch/repository.key -o "$KEY_FILE" +KEY_ID=$(gpg --show-keys --with-colons "$KEY_FILE" 2>/dev/null | awk -F: '/^pub/{print $5}') +if [[ -n "$KEY_ID" ]] && ! sudo pacman-key --list-keys "$KEY_ID" &>/dev/null; then + sudo pacman-key --add "$KEY_FILE" + sudo pacman-key --lsign-key "$KEY_ID" + log " + Registry key $KEY_ID imported and locally signed." +else + log " ~ Registry key already imported." +fi +rm -f "$KEY_FILE" + # Moonarch custom paru repo log "Setting up Moonarch paru repo..." PARU_CONF="$HOME/.config/paru/paru.conf"