openwrt/package/system/openwrt-keyring/Makefile

# Copyright (C) 2016 LEDE project

include $(TOPDIR)/rules.mk

PKG_NAME:=openwrt-keyring
PKG_RELEASE:=2

PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git
PKG_SOURCE_DATE:=2021-02-20
PKG_SOURCE_VERSION:=49283916005d7868923d34ab34f14188cf74812d
PKG_MIRROR_HASH:=7b58592bb49e4b37c8e80904c8f457ce3f0f2e6b1d2c473ccfe9204a8b7be831

PKG_MAINTAINER:=John Crispin <john@phrozen.org>
PKG_LICENSE:=GPL-2.0

include $(INCLUDE_DIR)/package.mk

define Package/openwrt-keyring
  SECTION:=base
  CATEGORY:=Base system
  PROVIDES:=lede-keyring
  TITLE:=OpenWrt Developer Keyring
  URL:=https://openwrt.org/docs/guide-user/security/signatures
endef

define Package/openwrt-keyring/description
  The keyring of with the developer using and gpg public keys.
endef

Build/Compile=

define Package/openwrt-keyring/install
	$(INSTALL_DIR) $(1)/etc/opkg/keys/
	# Public usign key for unattended snapshot builds
	$(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/b5043e70f9a75cde $(1)/etc/opkg/keys/
endef

$(eval $(call BuildPackage,openwrt-keyring))
signing: remove unatteded build key and use current keyring instead Remove the public unatteded buildkey from the opkg package to avoid having hardcoded keys in tree. Use the external keyring package instead which can be easily updated by users. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2016-04-30 18:39:23 +00:00			`# Copyright (C) 2016 LEDE project`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00
			`include $(TOPDIR)/rules.mk`

openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2018-05-20 17:32:29 +00:00			`PKG_NAME:=openwrt-keyring`
openwrt-keyring: Only copy sign key for snapshots Instead of adding all public signature keys from the openwrt-keyring repository only add the key which is used to sign the master feeds. If one of the other keys would be compromised this would not affect users of master snapshot builds. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2021-05-12 23:25:55 +00:00			`PKG_RELEASE:=2`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00
			`PKG_SOURCE_PROTO:=git`
treewide: replace LEDE_GIT with PROJECT_GIT Remove LEDE_GIT references in favor to the new name-agnostic PROJECT_GIT variable. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2018-01-05 09:46:06 +00:00			`PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git`
openwrt-keyring: add OpenWrt 21.02 GPG/usign keys 49283916005d usign: add 21.02 release build pubkey bc4d80f064f2 gpg: add OpenWrt 21.02 signing key Signed-off-by: Petr Štetiar <ynezz@true.cz> 2021-02-20 14:56:19 +00:00			`PKG_SOURCE_DATE:=2021-02-20`
			`PKG_SOURCE_VERSION:=49283916005d7868923d34ab34f14188cf74812d`
			`PKG_MIRROR_HASH:=7b58592bb49e4b37c8e80904c8f457ce3f0f2e6b1d2c473ccfe9204a8b7be831`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00
global: change my email address Signed-off-by: John Crispin <john@phrozen.org> 2016-05-11 07:06:21 +00:00			`PKG_MAINTAINER:=John Crispin <john@phrozen.org>`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00			`PKG_LICENSE:=GPL-2.0`

			`include $(INCLUDE_DIR)/package.mk`

openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2018-05-20 17:32:29 +00:00			`define Package/openwrt-keyring`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00			`SECTION:=base`
			`CATEGORY:=Base system`
openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2018-05-20 17:32:29 +00:00			`PROVIDES:=lede-keyring`
			`TITLE:=OpenWrt Developer Keyring`
			`URL:=https://openwrt.org/docs/guide-user/security/signatures`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00			`endef`

openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2018-05-20 17:32:29 +00:00			`define Package/openwrt-keyring/description`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00			`The keyring of with the developer using and gpg public keys.`
			`endef`

			`Build/Compile=`

openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2018-05-20 17:32:29 +00:00			`define Package/openwrt-keyring/install`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00			`$(INSTALL_DIR) $(1)/etc/opkg/keys/`
openwrt-keyring: Only copy sign key for snapshots Instead of adding all public signature keys from the openwrt-keyring repository only add the key which is used to sign the master feeds. If one of the other keys would be compromised this would not affect users of master snapshot builds. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2021-05-12 23:25:55 +00:00			`# Public usign key for unattended snapshot builds`
			`$(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/b5043e70f9a75cde $(1)/etc/opkg/keys/`
lede-keyring: add the developer public keyring Signed-off-by: John Crispin <john@phrozen.org> 2016-04-26 23:50:04 +00:00			`endef`

openwrt-keyring: rename from lede-keyring Also let the new openwrt-keyring package provide lede-keyring for backwards compatibility. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 2018-05-20 17:32:29 +00:00			`$(eval $(call BuildPackage,openwrt-keyring))`