commit: 6e755a49897e68233e2225052c601e26bde9d79c Author: Brett A C Sheffield <bacs <AT> librecast <DOT> net> AuthorDate: Sat Feb 28 18:42:08 2026 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Sun Mar 1 00:00:14 2026 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6e755a49
net-dns/nsd: wire up verify-sig Signed-off-by: Brett A C Sheffield <bacs <AT> librecast.net> Part-of: https://codeberg.org/gentoo/gentoo/pulls/175 Signed-off-by: Sam James <sam <AT> gentoo.org> net-dns/nsd/Manifest | 1 + net-dns/nsd/nsd-4.14.1.ebuild | 9 +++++++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/net-dns/nsd/Manifest b/net-dns/nsd/Manifest index 4e28e6515291..d71d2038b2af 100644 --- a/net-dns/nsd/Manifest +++ b/net-dns/nsd/Manifest @@ -1,2 +1,3 @@ DIST nsd-4.12.0.tar.gz 1531601 BLAKE2B b8b2353cbddfde5004d3bcd9b373da65b2089579904a9f3cf66f3f5fc8a1dd1b5e6bf13620e26c65597e7b8b7793b02d775ff324ba900d68cb2742245368a107 SHA512 5efdc95407ee2726856233830501821b6843808760e4c9ed580e5266c8b6797b0902c01238dd7d4441021d5f6b1a0b90767693f1b0db76dae4e2f0621bb79bf4 DIST nsd-4.14.1.tar.gz 1616372 BLAKE2B fbeabc698f47832ee78cd2be9f8ffdc63d60700722095fc8623cc5d9ef9370b590f88d4c617432e6964734712cc0c8582908acb8be326476a524c21cd1a22d04 SHA512 17e5f7c72589a6e7467d1741459b7199a0b12f8eda9022ab64ab700bd6959a009af1d7dac45c352f5209553679462805883c6f3b3f6c8a1fa4c762160b27e766 +DIST nsd-4.14.1.tar.gz.asc 659 BLAKE2B 5a92e41fefdb33fffba8c2363d5c3aa9f779994efa1843d3b3747f8904f6debc4bd01b0508b596f8aadfd0708871cffa9db9e753aa999a7d4a4b23dffa3bc671 SHA512 7ccf1a9d6edcebb858ae1a74f75a06acc3f904406951f73ea880c59efd2f4d2b0eb9646886e811168f9c632d8dcbf273dca2747e1f2460928869affd18e3fdf0 diff --git a/net-dns/nsd/nsd-4.14.1.ebuild b/net-dns/nsd/nsd-4.14.1.ebuild index 5dac984d8d2f..d655537132ed 100644 --- a/net-dns/nsd/nsd-4.14.1.ebuild +++ b/net-dns/nsd/nsd-4.14.1.ebuild @@ -3,7 +3,8 @@ EAPI=8 -inherit autotools systemd tmpfiles toolchain-funcs +VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/nlnetlabs.asc +inherit autotools systemd tmpfiles toolchain-funcs verify-sig DESCRIPTION="An authoritative only, high performance, open source name server" HOMEPAGE="https://www.nlnetlabs.nl/projects/nsd/about/"; @@ -18,7 +19,10 @@ else MY_P="${PN}-${MY_PV}" if [[ ${PV} != *_beta* && ${PV} != *_rc* ]] ; then - SRC_URI="https://www.nlnetlabs.nl/downloads/${PN}/${MY_P}.tar.gz"; + SRC_URI=" + https://www.nlnetlabs.nl/downloads/${PN}/${MY_P}.tar.gz + verify-sig? ( https://www.nlnetlabs.nl/downloads/nsd/${MY_P}.tar.gz.asc ) + " S="${WORKDIR}"/${MY_P} KEYWORDS="~amd64 ~arm64 ~x86" @@ -53,6 +57,7 @@ BDEPEND=" app-alternatives/yacc systemd? ( virtual/pkgconfig ) xdp? ( llvm-core/clang:*[llvm_targets_BPF] ) + verify-sig? ( >=sec-keys/openpgp-keys-nlnetlabs-20260101 ) " PATCHES=(
