commit:     48746f8f53b41945c738899d4399143019994abf
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Fri Feb  6 21:36:04 2026 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Fri Feb  6 22:03:36 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=48746f8f

sec-keys/openpgp-keys-gentoo-auth: add 20260206

The only difference is adding the L2 auth key for infra members
(ABA5E4E7F4E407ABE9CA7EC7422C9066E21F705A). I've also added comments
in the ebuild for how it is generated, as it's easy to miss the issue
w/ gpg's default import options.

Bug: https://bugs.gentoo.org/834329
Signed-off-by: Sam James <sam <AT> gentoo.org>

 sec-keys/openpgp-keys-gentoo-auth/Manifest         |  1 +
 .../openpgp-keys-gentoo-auth-20260206.ebuild       | 37 ++++++++++++++++++++++
 2 files changed, 38 insertions(+)

diff --git a/sec-keys/openpgp-keys-gentoo-auth/Manifest 
b/sec-keys/openpgp-keys-gentoo-auth/Manifest
index 0c4614a8ede1..17a6266f5bdb 100644
--- a/sec-keys/openpgp-keys-gentoo-auth/Manifest
+++ b/sec-keys/openpgp-keys-gentoo-auth/Manifest
@@ -1,2 +1,3 @@
 DIST gentoo-auth.asc.20240703.gz 3348 BLAKE2B 
0594bffecc718e0314a04f6a85c2d77d9a70d910eeea7dd1c87ba3381f0e4c0670975e2489efd289287326de0fee9284916dd60547e1cf2acf838b5da70fb0e4
 SHA512 
a491cac10e9a7a182b0e886ab94926f340eb1bd124142737097c7f0af8e713a4586a595638d6b08c3ccf6c873cbe9aae2dbe635b51d2b2c7adfaefdcbbc56fa1
 DIST gentoo-auth.asc.20260125.gz 5055 BLAKE2B 
7fd3d5bc4c7c75a0699d09afe7cb20e5fb894038d2b9e57a0e3ed204fdb97ae72f399ec2aabbf9877b4886b8eb7ae8bd496230046dbb754e50607c9479e67218
 SHA512 
473ca34e420533e8d39ab591f728eb16e2d93ebc776a37bdbcb80113e704dc0c0cf66fb3ad17f90a59e1779cd0655aca8ee5fb3cbd8c1182cef43fdd30cca961
+DIST gentoo-auth.asc.20260206.gz 6171 BLAKE2B 
5cb94044a19456343405a3c6cd7b921995170c0c10e56aac4830553e551a82bb8165ff7f0de68c6b615110f222b1684de0fe1721abb4c00837f6c699e28bd00f
 SHA512 
fd424486cc2d18354108e45f448b3fe0761bf4b406d6076b68290638a2d093671d9a629bf7749399dba0dc5df2968fef0ca6ea7794bdf8934ae6484b9210133f

diff --git 
a/sec-keys/openpgp-keys-gentoo-auth/openpgp-keys-gentoo-auth-20260206.ebuild 
b/sec-keys/openpgp-keys-gentoo-auth/openpgp-keys-gentoo-auth-20260206.ebuild
new file mode 100644
index 000000000000..12c411495a0d
--- /dev/null
+++ b/sec-keys/openpgp-keys-gentoo-auth/openpgp-keys-gentoo-auth-20260206.ebuild
@@ -0,0 +1,37 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DESCRIPTION="Gentoo Authority Keys (GLEP 79)"
+HOMEPAGE="https://www.gentoo.org/downloads/signatures/";
+# https://dev.gentoo.org/~mgorny/dist/openpgp-keys/gentoo-auth.asc.${PV}.gz
+SRC_URI="
+       https://dev.gentoo.org/~sam/dist/sec-keys/${PN}/gentoo-auth.asc.${PV}.gz
+"
+S=${WORKDIR}
+
+LICENSE="public-domain"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 
~riscv ~s390 ~sparc ~x86"
+
+# Generated with:
+# 1. export GNUPGHOME=$(mktemp -d)
+# 2. gpg --import-options no-import-clean,no-self-sigs-only --import 
/usr/share/openpgp-keys/gentoo-auth.asc
+# 3. Verify gpg --list-keys shows only expected L1 and L2 authority keys
+# 4. gpg --armor --export > gentoo-auth.asc.${PV}
+# 5. gzip gentoo-auth.asc.${PV}
+#
+# Keys included:
+# ABD00913019D6354BA1D9A132839FE0D796198B1
+# 18F703D702B1B9591373148C55D3238EC050396E
+# 2C13823B8237310FA213034930D132FF0FF50EEB
+# ABA5E4E7F4E407ABE9CA7EC7422C9066E21F705A
+
+src_install() {
+       insinto /usr/share/openpgp-keys
+       newins "gentoo-auth.asc.${PV}" gentoo-auth.asc
+       newins - gentoo-auth-ownertrust.txt <<-EOF
+               ABD00913019D6354BA1D9A132839FE0D796198B1:6:
+       EOF
+}

Reply via email to