update signature checking & dependancies

1 files changed, 18 insertions, 12 deletions

diff --git a/PKGBUILD b/PKGBUILD
index 7765158550a1..911c8e05a3de 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -7,15 +7,17 @@ githuborg=skycoinproject
 pkgdesc="CX Skycoin Blockchain Programming Language - most recent github commits (+opengl)"
 pkgver='autogenerated'
 pkggopath="github.com/${githuborg}/${pkgname1}"
-pkgrel=2
+pkgrel=3
 arch=('any')
 url="https://${pkggopath}"
 license=()
-makedepends=('git' 'go' 'gcc' 'glade' 'xorg-server-xvfb' 'libxinerama' 'libxcursor' 'libxrandr' 'libglvnd' 'libglade' 'mesa' 'libxi' 'cairo' 'perl' 'pango')
+makedepends=('git' 'go' 'gcc' 'glade' 'xorg-server-xvfb' 'libxinerama' 'libxcursor' 'libxrandr' 'libglvnd' 'libglade' 'mesa' 'libxi' 'cairo' 'perl' 'pango' 'skycoin-keyring')
 source=("git+${url}.git#branch=${BRANCH:-develop}"
-"https://raw.githubusercontent.com/0pcom/skycoin_archlinux_packages/master/key")
+"PKGBUILD.sig")
 sha256sums=('SKIP'
-'41c0a4a42ae64479b008392053f4a947618acd6bb9c3ed2672dafdb2453caa14')
+            'SKIP')
+validpgpkeys=('DE08F924EEE93832DABC642CA8DC761B1C0C0CFC'  # Moses Narrow <moe_narrow@use.startmail.com>
+                           '98F934F04F9334B81DFA3398913BBD5206B19620') #iketheadore skycoin <luxairlake@protonmail.com>
 
 export GOOS=linux
 export GOPATH="${srcdir}"
@@ -48,7 +50,7 @@ mipsel)   export GOARCH="mipsle" ;;
 prepare() {
 	gpg --import key
 	#verify PKGBUILD signature
-	gpg --verify ../PKGBUILD.sig ../PKGBUILD
+	gpg --verify ${srcdir}/PKGBUILD.sig ../PKGBUILD
   # https://wiki.archlinux.org/index.php/Go_package_guidelines
   mkdir -p ${srcdir}/go/src/${pkggopath//${pkgname1}/} "${srcdir}"/go/bin
   ln -rTsf ${srcdir}/${pkgname1} ${srcdir}/go/src/${pkggopath}
@@ -75,15 +77,20 @@ build() {
   cd ${srcdir}/go/src/${pkggopath}
 	make install-gfx-deps
   make build-full
-	go install \
-	  -gcflags "all=-trimpath=${GOPATH}" \
-	  -asmflags "all=-trimpath=${GOPATH}" \
-	  -ldflags "-extldflags ${LDFLAGS}" \
-	  -v ./cmd/...
+
+		cmddir=${srcdir}/go/src/github.com/${githuborg}/${pkgname1}/cmd
+	  #using go build for determinism
+		cd ${cmddir}/newcoin
+	  msg2 'building cx-newcoin binary'
+	  go build -trimpath -ldflags '-extldflags ${LDFLAGS}' -ldflags=-buildid= -o $GOBIN/ .
+	  #binary transparency
+	  cd $GOBIN
+	  msg2 'binary sha256sums'
+	  sha256sum $(ls)
+
 }
 
 package() {
-msg2 'installing CX'
 options=(!strip staticlibs)
 #make dirs
 mkdir -p ${pkgdir}/usr/bin
@@ -93,7 +100,6 @@ mkdir -p ${pkgdir}/usr/lib/${projectname}/${pkgname1}/
 #install sources
 #cp -r ${srcdir}/${pkgname1} ${pkgdir}/usr/lib/${projectname}/go/src/github.com/${projectname}/${pkgname1}
 #install binary
-msg2 'installing binaries'
 #^MAKE DEPENDANCIES ARE IN GOBIN; GET ONLY CX & NEWCOIN
 install -Dm755 ${srcdir}/go/bin/newcoin ${pkgdir}/usr/lib/${projectname}/go/bin/newcoin
 ln -rTsf ${pkgdir}/usr/lib/${projectname}/go/bin/newcoin ${pkgdir}/usr/bin/newcoin