Skip to content

Do not include the gpg binary unless ARCHISO_GNUPG_FD is set durring build

nl6720 requested to merge nl6720/mkinitcpio-archiso:no-gpg into master

Handle the condition when signature verification is requested but the gpg binary is not available.

Since now there is OpenSSL CMS based root file system image verification, GPG based verification should be made optional. mkarchiso currently requires running as root, which complicates signing with user's GPG keys. E.g. running it with sudo may require chowning the TTY and passing the GNUPGHOME environment variable. While the cause of this annoyance is mkarchiso, gpg doesn't make the process easy. OpenSSL CMS based signing has none of these issues.

Edited by nl6720

Merge request reports