verify() does not work when building in a clean chroot

Pacman 6.1 supports verify(), while it doesn't work when building a package in a clean chroot, as makechrootpkg runs makepkg --verifysource outside the chroot [1].

There is a commit years ago about verifying sources and chroots [2]. It seems like sources should be verified outside chroots, so that the host GPG keyring can be used?

Steps to reproduce:

  1. pkgctl repo clone libchewing
  2. Edit PKGBUILD and replace prepare() with verify()
  3. Run pkgctl build -o 
==> Starting verify()...
/home/yan12125/.cache/offload-build/tmp.JQpY1otBfD/PKGBUILD: line 28: minisign: command not found

[1] https://gitlab.archlinux.org/archlinux/devtools/-/blob/05bea3e922aa7aec5cba3242d3f34b5c10fad24e/src/makechrootpkg.in#L250

[2] 80ba8788