From 5516bc2fa21760a8f227470514ad917e21dc254b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C4=90o=C3=A0n=20Tr=E1=BA=A7n=20C=C3=B4ng=20Danh?= Date: Wed, 8 Jul 2020 23:14:48 +0700 Subject: [PATCH] keybase: use hand-generated tarball GitHub tarballs can be changed at anytime, which renders GitHub auto-generated tarball invalid at sometime [1] Use keybase manual generated tarball that is verified with their code signing key [2] [1] https://github.com/keybase/client/issues/10800 [2] https://keybase.io/docs/server_security/code_signing_key.asc --- srcpkgs/keybase/template | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/srcpkgs/keybase/template b/srcpkgs/keybase/template index be4e07e5ede..48214c6dc1a 100644 --- a/srcpkgs/keybase/template +++ b/srcpkgs/keybase/template @@ -2,7 +2,7 @@ pkgname=keybase version=5.5.1 revision=1 -wrksrc="client-${version}" +wrksrc="client-v${version}" build_style=go go_import_path="github.com/keybase/client" go_package="${go_import_path}/go/keybase @@ -16,8 +16,8 @@ short_desc="Client for keybase.io" maintainer="Toyam Cox " license="BSD-3-Clause" homepage="https://keybase.io/" -distfiles="https://github.com/keybase/client/archive/v${version}.tar.gz" -checksum=a65dc4b62fc1299dd17da52ddd2484fa1dc1e7d2a4776c3a6e112ee020980b12 +distfiles="https://github.com/keybase/client/releases/download/v$version/keybase-v$version.tar.xz" +checksum=a70abf39c68cef1effccf4b9b9b1ed2e9cad20ab4f6c4b66160b610eca1ec874 post_install() { vlicense LICENSE