commit:     cd75a1abe8705551cf352339b73c9dec78440aff
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Wed Jan 21 06:28:27 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
CommitDate: Fri Jan 23 20:25:09 2026 +0000
URL:        https://gitweb.gentoo.org/proj/catalyst.git/commit/?id=cd75a1ab

stagebase: set `verify-signature` for binrepos.conf

Verify signatures for the Gentoo binhost by default.

Bug: https://bugs.gentoo.org/945384
Bug: https://bugs.gentoo.org/945385
Signed-off-by: Sam James <sam <AT> gentoo.org>
Signed-off-by: Andreas K. Hüttel <dilfridge <AT> gentoo.org>

 catalyst/base/stagebase.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/catalyst/base/stagebase.py b/catalyst/base/stagebase.py
index 41d95db7..510aaaa8 100644
--- a/catalyst/base/stagebase.py
+++ b/catalyst/base/stagebase.py
@@ -1305,6 +1305,7 @@ class StageBase(TargetBase, ClearBase, GenBase):
                 myb.write("sync-uri = " + self.settings["binhost"] + \
                         self.settings["binrepo_path"] + "\n")
                 myb.write("location = /var/cache/binhost/gentoobinhost\n")
+                myb.write("verify-signature = true\n")
 
     def fsscript(self):
         if "autoresume" in self.settings["options"] \

Reply via email to