don't extract the .deb until we've verified it

2 files changed, 6 insertions, 0 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 525f2a717b90..82cd7519057f 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -13,6 +13,7 @@ pkgbase = runescape-launcher
 	depends = gtk2
 	provides = runescape-launcher-nxt
 	conflicts = runescape-launcher-nxt
+	noextract = runescape-launcher_2.2.4-8_amd64.deb
 	source = runescape-launcher_2.2.4-8_Release::https://content.runescape.com/downloads/ubuntu/dists/trusty/Release
 	source = runescape-launcher_2.2.4-8_Release.gpg::https://content.runescape.com/downloads/ubuntu/dists/trusty/Release.gpg
 	source = wrapper.sh
diff --git a/PKGBUILD b/PKGBUILD
index 2258a269d408..3c465c5d5a67 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -30,6 +30,7 @@ sha256sums=('SKIP'
             'd20151c9111a77e753954638eb60f1b4ec0d2c86e173041dcd95bb7b309d5b12')
 sha256sums_x86_64=('SKIP'
                    'SKIP')
+noextract=("${pkgname}_${pkgver}-${_pkgbump}_amd64.deb")
 validpgpkeys=("AAC9264309E4D717441DB9527373B12CE03BEB4B")
 
 _verify_repo() {
@@ -87,6 +88,10 @@ _verify_repo() {
         error "Hash sum of '$debfile' did not match expected"
         return 1
     fi
+
+    msg2 "Extracting $debfile..."
+    rm -f control.tar.gz data.tar.xz
+    bsdtar xf "$debfile"
 }
 
 prepare() {