1
0
mirror of https://github.com/lxc/distrobuilder.git synced 2026-02-05 06:45:19 +01:00

sources: Fix portage snapshot GPG verification

Pass both portage-latest.tar.xz and its detached signature
(.gpgsig) to VerifyFile for proper GPG verification.

Signed-off-by: Chaosoffire <81634128+chaosoffire@users.noreply.github.com>
This commit is contained in:
Chaosoffire
2026-01-12 20:49:19 +08:00
parent 4e92c6a2e2
commit e46de2b967

View File

@@ -131,8 +131,8 @@ func (s *gentoo) Run() error {
}
valid, err := s.VerifyFile(
filepath.Join(fpath, fname+".gpgsig"),
"")
filepath.Join(fpath, fname),
filepath.Join(fpath, fname+".gpgsig"))
if err != nil {
return fmt.Errorf("Failed to verify %q: %w", filepath.Join(fpath, fname+".gpgsig"), err)
}