Use sources from kernel.org and verify keys

The kernel.org repo is considered official, see [0].

[0] https://github.com/mricon/grokmirror/issues/25

2 files changed, 11 insertions, 6 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 26863207e9d6..359e95158e65 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -2,12 +2,15 @@ pkgbase = grokmirror
 	pkgdesc = Framework to smartly mirror git repositories
 	pkgver = 1.1.0
 	pkgrel = 2
-	url = https://github.com/mricon/grokmirror
+	url = https://git.kernel.org/pub/scm/utils/grokmirror/grokmirror.git
 	arch = any
 	license = GPL3
 	depends = python-setuptools
-	source = grokmirror-1.1.0::https://github.com/mricon/grokmirror/archive/v1.1.0.tar.gz
-	sha256sums = c838df4e9f055b269dd9664c554586d05cc91db337f559b3c2318aba24c89354
+	source = https://git.kernel.org/pub/scm/utils/grokmirror/grokmirror.git/snapshot/grokmirror-1.1.0.tar.gz
+	source = https://git.kernel.org/pub/scm/utils/grokmirror/grokmirror.git/snapshot/grokmirror-1.1.0.tar.asc
+	validpgpkeys = DE0E66E32F1FDD0902666B96E63EDCA9329DD07E
+	sha256sums = SKIP
+	sha256sums = SKIP
 
 pkgname = grokmirror
 
diff --git a/PKGBUILD b/PKGBUILD
index a09ec0bd5dc2..250ea867862f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -4,12 +4,14 @@ pkgname=grokmirror
 pkgver=1.1.0
 pkgrel=2
 pkgdesc='Framework to smartly mirror git repositories'
-url='https://github.com/mricon/grokmirror'
+url='https://git.kernel.org/pub/scm/utils/grokmirror/grokmirror.git'
 arch=('any')
 license=('GPL3')
 depends=('python-setuptools')
-source=("${pkgname}-${pkgver}::https://github.com/mricon/grokmirror/archive/v${pkgver}.tar.gz")
-sha256sums=('c838df4e9f055b269dd9664c554586d05cc91db337f559b3c2318aba24c89354')
+source=(https://git.kernel.org/pub/scm/utils/grokmirror/grokmirror.git/snapshot/grokmirror-${pkgver}.tar.{gz,asc})
+validpgpkeys=('DE0E66E32F1FDD0902666B96E63EDCA9329DD07E') # Konstantin Ryabitsev
+sha256sums=('SKIP'
+            'SKIP')
 
 build() {
     cd "${pkgname}-${pkgver}"