commit: 24744c624e30b298f9897f135786c5f23cec40a4
Author: Florian Albrechtskirchinger <falbrechtskirchinger <AT> gmail <DOT>
com>
AuthorDate: Thu Jan 15 15:53:24 2026 +0000
Commit: Florian Albrechtskirchinger <falbrechtskirchinger <AT> gmail <DOT>
com>
CommitDate: Thu Jan 15 15:53:24 2026 +0000
URL: https://gitweb.gentoo.org/repo/proj/guru.git/commit/?id=24744c62
dev-util/google-antigravity: improve verify-sig
1) Merge a grep & awk call.
2) Match full version string instead of prefix.
Signed-off-by: Florian Albrechtskirchinger <falbrechtskirchinger <AT> gmail.com>
.../google-antigravity-1.14.2.ebuild | 22 +++++++++++-----------
1 file changed, 11 insertions(+), 11 deletions(-)
diff --git a/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild
b/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild
index c164436297..2d2c4d563c 100644
--- a/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild
+++ b/dev-util/google-antigravity/google-antigravity-1.14.2.ebuild
@@ -97,24 +97,24 @@ src_unpack() {
verify-sig_verify_message "${FILESDIR}/InRelease" Release || \
die "InRelease signature verification failed"
- sed -n '/^SHA256:/,/^[^ ]/p' Release \
- | grep "binary-${ARCH}/Packages"
\
- | awk -v f="${FILESDIR}/Packages.${ARCH}" '{print $1 "
" f}' \
- | sha256sum --check --strict - || die "Packages hash
mismatch"
+ sed -n '/^SHA256:/,/^[^ ]/p' Release \
+ | awk -v f="${FILESDIR}/Packages.${ARCH}" \
+ '/binary-'"${ARCH}"'\/Packages/ {print $1 " "
f}' \
+ | sha256sum -c --strict - || die "Packages hash
mismatch"
local version="${PV}-"
use amd64 && version+="${BUILD_ID_AMD64}"
use arm64 && version+="${BUILD_ID_ARM64}"
awk -v v="${version}" -v f="${DISTDIR}/${P}_${ARCH}.deb" \
- 'BEGIN {RS=""} index($0, "Version: " v) {
- for (i=1; i<=NF; ++i) {
- if ($i == "SHA256:") {
- print $(i+1) " " f
- exit
- }
+ 'BEGIN {RS=""} {
+ m=0; h=""
+ for(i=1; i<NF; ++i) {
+ if ($i == "Version:" && $(i+1) == v) m=1
+ if ($i == "SHA256:") { h=$(i+1); break }
}
+ if (m && h) { print h " " f; exit }
}' "${FILESDIR}/Packages.${ARCH}" \
- | sha256sum --check --strict - || die ".deb archive
hash mismatch"
+ | sha256sum -c --strict - || die ".deb archive hash
mismatch"
fi
}