Change to new repo at github.com/skycoinproject ; implement signature checking of the PKGBUILD

3 files changed, 20 insertions, 15 deletions

diff --git a/.SRCINFO b/.SRCINFO
index ab7891bc980c..7c390855f063 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,14 +1,16 @@
 pkgbase = cx-bin
 	pkgdesc = CX Skycoin Blockchain Programming Language; latest binary release
 	pkgver = 0.7.1
-	pkgrel = 3
-	url = https://github.com/skycoin/cx
+	pkgrel = 5
+	url = https://github.com/skycoinproject/cx
 	arch = x86_64
 	makedepends = unzip
 	provides = cx
 	conflicts = cx
-	source = https://github.com/skycoin/cx/releases/download/v0.7.1/cx-0.7.1-bin-linux-x64.zip
+	source = https://github.com/skycoinproject/cx/releases/download/v0.7.1/cx-0.7.1-bin-linux-x64.zip
+	source = https://raw.githubusercontent.com/0pcom/skycoin_archlinux_packages/master/key
 	sha256sums = 99235508f1c5f8df651f89a34e61e418d2c092f037b1210e8541cae16334f2d4
+	sha256sums = 41c0a4a42ae64479b008392053f4a947618acd6bb9c3ed2672dafdb2453caa14
 
 pkgname = cx-bin
 	options = !strip
diff --git a/PKGBUILD b/PKGBUILD
index 56959a19fcc5..42905482f751 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,10 +3,11 @@
 pkgname=cx-bin
 pkgname1=cx
 projectname=skycoin
+githuborg=skycoinproject
 pkgdesc="CX Skycoin Blockchain Programming Language; latest binary release"
 pkgver=0.7.1
-pkggopath="github.com/${projectname}/${pkgname1}"
-pkgrel=3
+pkggopath="github.com/${githuborg}/${pkgname1}"
+pkgrel=5
 arch=('x86_64')
 url="https://${pkggopath}"
 license=()
@@ -14,15 +15,18 @@ makedepends=('unzip')
 provides=('cx')
 conflicts=('cx')
 source=("https://${pkggopath}/releases/download/v$pkgver/${pkgname1}-$pkgver-bin-linux-x64.zip"
-)
+"https://raw.githubusercontent.com/0pcom/skycoin_archlinux_packages/master/key")
 sha256sums=('99235508f1c5f8df651f89a34e61e418d2c092f037b1210e8541cae16334f2d4'
-)
+'41c0a4a42ae64479b008392053f4a947618acd6bb9c3ed2672dafdb2453caa14')
 
 prepare() {
-mkdir -p ${srcdir}/bin
-mv ${pkgname1}-$pkgver-bin-linux-x64.zip ${srcdir}/bin/${pkgname1}-$pkgver-bin-linux-x64.zip
-cd ${srcdir}/bin
-unzip ${pkgname1}-$pkgver-bin-linux-x64.zip
+  gpg --import key
+  #verify PKGBUILD signature
+  gpg --verify ../PKGBUILD.sig ../PKGBUILD
+  mkdir -p ${srcdir}/bin
+  mv ${pkgname1}-$pkgver-bin-linux-x64.zip ${srcdir}/bin/${pkgname1}-$pkgver-bin-linux-x64.zip
+  cd ${srcdir}/bin
+  unzip ${pkgname1}-$pkgver-bin-linux-x64.zip
 }
 
 package() {
@@ -33,8 +37,7 @@ package() {
   mkdir -p ${pkgdir}/usr/lib/${projectname}/go/src/github.com/
   mkdir -p ${pkgdir}/usr/lib/${projectname}/${pkgname1}/
   ln -s ${pkgdir}/usr/lib/${projectname}/${pkgname1} ${pkgdir}/usr/lib/${projectname}/go/src/github.com/
-
-install -Dm755 ${srcdir}/home/amherag/go/bin/${pkgname1} ${pkgdir}/usr/lib/${projectname}/go/bin/${pkgname1}
-ln -rTsf ${pkgdir}/usr/lib/${projectname}/go/bin/${pkgname1} ${pkgdir}/usr/bin/${pkgname1}
-chmod 755 ${pkgdir}/usr/bin/${pkgname1}
+  install -Dm755 ${srcdir}/home/amherag/go/bin/${pkgname1} ${pkgdir}/usr/lib/${projectname}/go/bin/${pkgname1}
+  ln -rTsf ${pkgdir}/usr/lib/${projectname}/go/bin/${pkgname1} ${pkgdir}/usr/bin/${pkgname1}
+  chmod 755 ${pkgdir}/usr/bin/${pkgname1}
 }
diff --git a/PKGBUILD.sig b/PKGBUILD.sig
new file mode 100644
index 000000000000..811f4242d652
--- /dev/null
+++ b/PKGBUILD.sig