Package Details: dual-root 3.7.1-1

Git Clone URL: https://aur.archlinux.org/dual-root.git (read-only, click to copy)
Package Base: dual-root
Description: Dual Root Tools to Manage dual esp systems with backup boot on alternate disk.
Upstream URL: https://github.com/gene-git/dual-root
Keywords: boot efi root tools
Licenses: GPL-2.0-or-later
Submitter: GeneArch
Maintainer: GeneArch
Last Packager: GeneArch
Votes: 3
Popularity: 0.000000
First Submitted: 2023-03-06 15:19 (UTC)
Last Updated: 2026-01-06 16:27 (UTC)

Pinned Comments

GeneArch commented on 2026-06-14 20:52 (UTC) (edited on 2026-06-14 20:53 (UTC) by GeneArch)

As both the packager and upstream author I'd like to encourage all users to activate "git source verification" if not already done. Please see comment in the PKGBUILD file. The recent supply chain issues highlight the importance of validating source code.

All git tags are signed and going forward, every commit will also be signed.

The public signing key is available in a few places, but I recommend getting it either via WKD or directly from the website of the key's email domain. These are sound ways to do this. For additional information please see:

https://sapience.com/tech/blog/git-keys

To get the key via WKD:

gpg --auto-key-locate nodefault,wkd --locate-external-keys arch@sapience.com

Latest Comments

GeneArch commented on 2026-06-14 20:52 (UTC) (edited on 2026-06-14 20:53 (UTC) by GeneArch)

As both the packager and upstream author I'd like to encourage all users to activate "git source verification" if not already done. Please see comment in the PKGBUILD file. The recent supply chain issues highlight the importance of validating source code.

All git tags are signed and going forward, every commit will also be signed.

The public signing key is available in a few places, but I recommend getting it either via WKD or directly from the website of the key's email domain. These are sound ways to do this. For additional information please see:

https://sapience.com/tech/blog/git-keys

To get the key via WKD:

gpg --auto-key-locate nodefault,wkd --locate-external-keys arch@sapience.com

GeneArch commented on 2025-01-03 10:37 (UTC)

Note on getting the git signing public key. Any of the following:

1) Get fresh copy of the package (on this page Package Actions Download Snapshot) Unpack tar file and the key will be in keys/pgp:

gpg --import < keys/pgp/*.asc

2) Available on github (same account as the package source): https://github.com/gene-git/blog/tree/master/git-keys

3) From authors website : https://www.sapience.com/tech

4) via WKD curl $(gpg-wks-client --print-wkd-url arch@sapience.com) | gpg --import

GeneArch commented on 2025-01-02 11:08 (UTC)

NB Key is available but not from pgp key servers which should no longer be used. For more info please take a look at comment in another package: https://aur.archlinux.org/packages/wg_tool#comment-1004777

quick solutions (as the package build user) use one of the following:

1) in same directory as PKGBUILD : gpg --import keys/pgp/*.asc

2) curl $(gpg-wks-client --print-wkd-url arch@sapience.com) | gpg --import

3) download at the authors website : www.sapience.com/tech