[openwrt/openwrt] openwrt-keyring: apk: use just snapshot key explicitly

LEDE Commits lede-commits at lists.infradead.org
Mon Nov 25 03:21:06 PST 2024


robimarko pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/72dec105fb99a949d7ecf2a3d0ac29880007d602

commit 72dec105fb99a949d7ecf2a3d0ac29880007d602
Author: Petr Štetiar <ynezz at true.cz>
AuthorDate: Mon Nov 4 09:04:04 2024 +0000

    openwrt-keyring: apk: use just snapshot key explicitly
    
    Currently we're going to ship all the apk keys in the keyring, but the
    preference is to ship and use single release/branch specific key so lets
    use openwrt-snapshots.pem for apk explicitly as well.
    
    Fixes: 2cea05002489 ("openwrt-keyring: add apk public key for signing of package indexes")
    Signed-off-by: Petr Štetiar <ynezz at true.cz>
    Link: https://github.com/openwrt/openwrt/pull/16852
    Signed-off-by: Robert Marko <robimarko at gmail.com>
---
 package/system/openwrt-keyring/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/system/openwrt-keyring/Makefile b/package/system/openwrt-keyring/Makefile
index 029463817b..7f237ed9fa 100644
--- a/package/system/openwrt-keyring/Makefile
+++ b/package/system/openwrt-keyring/Makefile
@@ -33,7 +33,7 @@ Build/Compile=
 ifneq ($(CONFIG_USE_APK),)
 define Package/openwrt-keyring/install
 	$(INSTALL_DIR) $(1)/etc/apk/keys/
-	$(INSTALL_DATA) $(PKG_BUILD_DIR)/apk/*.pem $(1)/etc/apk/keys/
+	$(INSTALL_DATA) $(PKG_BUILD_DIR)/apk/openwrt-snapshots.pem $(1)/etc/apk/keys/
 endef
 else
 define Package/openwrt-keyring/install




More information about the lede-commits mailing list