commit:     e8efe74ab58ef509b32edd7220d2718ba0350553
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Wed Feb  4 02:59:40 2026 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Feb  4 03:00:02 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e8efe74a

sys-apps/dmidecode: wire up verify-sig

Signed-off-by: Sam James <sam <AT> gentoo.org>

 sys-apps/dmidecode/Manifest             |  1 +
 sys-apps/dmidecode/dmidecode-3.7.ebuild | 21 ++++++++++++++++++---
 2 files changed, 19 insertions(+), 3 deletions(-)

diff --git a/sys-apps/dmidecode/Manifest b/sys-apps/dmidecode/Manifest
index ddef923c9635..067350af33d8 100644
--- a/sys-apps/dmidecode/Manifest
+++ b/sys-apps/dmidecode/Manifest
@@ -1,2 +1,3 @@
 DIST dmidecode-3.6.tar.xz 69284 BLAKE2B 
0fd5d1c6f1cef774fe9b31ee36915d9222f568dcff10b416077aff2edd38cc1193cbf28410fcb7377c482bd267b45ee63ddce3d35e7b58dd8674cdf9a19f1b86
 SHA512 
b1e47a2121062581876ba2daf3ce80b1c39612d078718609b8bc97d4e7a4b47427200502468b5d71f0d0dcb5ba299fb2e808791b62dc5b50e67acac60c51a461
 DIST dmidecode-3.7.tar.xz 74700 BLAKE2B 
827d56d9d4a43e4e3418d9090a02f5d8b4b800ce664714b83f2abc6a5172365d0416f0e8c57f31c57c92e2d6e7f4414d96c2041cec3be54c5b431223b42e7576
 SHA512 
faa8f5975340241b4c4a6ae4b538bf7f88f55b2ab0e97ffeaae9a3a20c40fbf95e8310f69d06963f9fb34c7715e55ecfda039e1391a7a27a0be463ac3a1cc8fb
+DIST dmidecode-3.7.tar.xz.sig 566 BLAKE2B 
c43a59cd931ffdaa40671698011db09fcb78ac59c630b6a619f6594bd16715d59cb5a17592c04d205de996b366811b98d1f5d0dbf22e786e349db2bfb83f6216
 SHA512 
8779c1f98fa67c181cc7274e57439bd44fc3b23d4b7bbc649aef0e70ee215e390c9e1ababede81d4e77706aaf8e88570fea894ee6bb35f490eb938f4e6da65d4

diff --git a/sys-apps/dmidecode/dmidecode-3.7.ebuild 
b/sys-apps/dmidecode/dmidecode-3.7.ebuild
index ed4f2086f952..a8d34ad7c3c2 100644
--- a/sys-apps/dmidecode/dmidecode-3.7.ebuild
+++ b/sys-apps/dmidecode/dmidecode-3.7.ebuild
@@ -5,12 +5,16 @@ EAPI=8
 
 # Upstream often give "recommended patches" at 
https://www.nongnu.org/dmidecode/
 # Check regularly after releases!
-inherit bash-completion-r1 flag-o-matic toolchain-funcs
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/khali.asc
+inherit bash-completion-r1 flag-o-matic toolchain-funcs verify-sig
 
 UPSTREAM_PATCH_COMMITS=()
 DESCRIPTION="DMI (Desktop Management Interface) table related utilities"
 HOMEPAGE="https://www.nongnu.org/dmidecode/";
-SRC_URI="mirror://nongnu/${PN}/${P}.tar.xz"
+SRC_URI="
+       mirror://nongnu/${PN}/${P}.tar.xz
+       verify-sig? ( mirror://nongnu/${PN}/${P}.tar.xz.sig )
+"
 for commit in "${UPSTREAM_PATCH_COMMITS[@]}" ; do
        SRC_URI+=" 
https://git.savannah.gnu.org/cgit/dmidecode.git/patch/?id=${commit} -> 
${P}-${commit}.patch"
        UPSTREAM_PATCHES+=( "${DISTDIR}"/${P}-${commit}.patch )
@@ -23,12 +27,23 @@ KEYWORDS="-* ~alpha amd64 arm arm64 ~loong ~mips ~ppc 
~ppc64 ~riscv x86"
 IUSE="selinux"
 
 RDEPEND="selinux? ( sec-policy/selinux-dmidecode )"
-BDEPEND="virtual/pkgconfig"
+BDEPEND="
+       virtual/pkgconfig
+       verify-sig? ( sec-keys/openpgp-keys-khali )
+"
 
 PATCHES=(
        "${UPSTREAM_PATCHES[@]}"
 )
 
+src_unpack() {
+       if use verify-sig; then
+               verify-sig_verify_detached "${DISTDIR}"/${P}.tar.xz{,.sig}
+       fi
+
+       default
+}
+
 src_prepare() {
        default
 

Reply via email to