AUR Package about hashboot

[krathalan]

I've published it to the AUR! https://aur.archlinux.org/packages/hashboot/

I'd recommend deleting the prior Arch instructions I submitted, as (1) it's better to let pacman keep track of files than the user, and (2) I was having issues with linking the hashboot files and systemd anyways.

[krathalan]

I forgot to mention that Arch recommends that the sha256sums be provided by upstream as well -- I've calculated my own sha256sum, but it would be nice to have one published by you.

[krathalan]

Additionally, if you publish a signature file for the release as a .sig or .asc file and publish the relevant key on a keyserver, the PKGBUILD can be configured to verify the download with GPG as well.

[tastytea]

I've added the hook to hooks/pacman.hook. Once I found a good way to add checksums and signatures automatically, I will make a new release.

[tastytea]

The repo moved to https://schlomp.space/tastytea/hashboot. Each new release has now checksums and PGP-signatures. Apart from the URL, you will need to change cd "$srcdir/${pkgname}-${pkgver}" to cd "$srcdir/${pkgname}" in prepare(), because Gitea doesn't put the version in the folder name.

[krathalan]

Awesome, thanks! I've updated the hashboot-aur repo accordingly.

Without editing the user's ~/.gnupg/gpg.conf, the GPG key can't be received automatically, but makepkg will print an error saying the user needs to have the key "242E5AC4DA587BF9". After running gpg --recv-keys 242E5AC4DA587BF9, makepkg automatically verifies the GPG signature (and the sha512sums).

Edit: I forgot the most popular AUR helper (yay) handles this with a prompt automatically.

Are there any other edits/corrections/etc?

[tastytea]

Thanks! It seems there are several ways of installing packages from AUR. Which should I recommend in the readme?

[krathalan]

Many developers don't recommend a specific way, but rather just say that the package is on the AUR (with a link) and don't give full instructions. My preferred way is with yay (https://aur.archlinux.org/packages/yay/), since it makes installing AUR packages as easy as regular packages, but many people prefer to do it manually or with a different AUR tool.

[krathalan]

I deleted the original hashboot-aur repository on GitLab. The GitLab repository is now at https://gitlab.com/krathalan/hashboot and is simply a mirror of the AUR repository at https://aur.archlinux.org/cgit/aur.git/tree/?h=hashboot.

[tastytea]

I've updated the readme. Thanks again!

[krathalan]

Thanks! :)