aboutsummaryrefslogtreecommitdiff
path: root/lib/_ak_ns
diff options
context:
space:
mode:
authorkaotisk <kaotisk@arching-kaos.org>2025-07-22 01:38:24 +0300
committerkaotisk <kaotisk@arching-kaos.org>2025-07-22 01:38:24 +0300
commitc65db16ec0f40fa4c10ea4ee05326d50a221656f (patch)
tree10d54a7d450dacc65b73f3ce2cc8d9c91e60aa5e /lib/_ak_ns
parent7165a90be793b9aa102d1c3a32a128a0b143caf0 (diff)
downloadarching-kaos-tools-c65db16ec0f40fa4c10ea4ee05326d50a221656f.tar.gz
arching-kaos-tools-c65db16ec0f40fa4c10ea4ee05326d50a221656f.tar.bz2
arching-kaos-tools-c65db16ec0f40fa4c10ea4ee05326d50a221656f.zip
[ns] Outputs an akfs_map_v3 and appends historic list for each published key
Diffstat (limited to 'lib/_ak_ns')
-rwxr-xr-xlib/_ak_ns19
1 files changed, 19 insertions, 0 deletions
diff --git a/lib/_ak_ns b/lib/_ak_ns
index f412c93..32ac594 100755
--- a/lib/_ak_ns
+++ b/lib/_ak_ns
@@ -21,6 +21,7 @@ source $AK_LIBDIR/_ak_lib_load
_ak_lib_load _ak_log
_ak_lib_load _ak_script
_ak_lib_load _ak_gpg
+_ak_lib_load _ak_fs
_ak_lib_load _ak_zchain
AK_NS_DIR="${AK_WORKDIR}/akns"
@@ -204,6 +205,15 @@ function _ak_ns_publish_zchain(){
then
_ak_gpg_verify_clear_signature ${AK_NS_DIR}/${zchain_key} >> ${AK_NS_DIR}/${zchain_key}.history
fi
+ signed_akfs_map=$(_ak_fs_import ${zlatest_csigned_file})
+ if [ -f ${AK_NS_DIR}/${zchain_key}.map ]
+ then
+ printf '%s %s\n' "$(echo -n $signed_akfs_map)" \
+ "$(_ak_gpg_verify_clear_signature ${AK_NS_DIR}/${zchain_key})" \
+ >> ${AK_NS_DIR}/${zchain_key}.history_map
+
+ fi
+ echo ${signed_akfs_map} > ${AK_NS_DIR}/${zchain_key}.map
mv ${zlatest_csigned_file} ${AK_NS_DIR}/${zchain_key}
}
@@ -225,6 +235,15 @@ function _ak_ns_publish_config(){
then
_ak_gpg_verify_clear_signature ${AK_NS_DIR}/${zconfig_key} >> ${AK_NS_DIR}/${zconfig_key}.history
fi
+ signed_akfs_map=$(_ak_fs_import ${zconfig_csigned_file})
+ if [ -f ${AK_NS_DIR}/${zconfig_key}.map ]
+ then
+ printf '%s %s\n' "$(echo -n $signed_akfs_map)" \
+ "$(_ak_gpg_verify_clear_signature ${AK_NS_DIR}/${zconfig_key})" \
+ >> ${AK_NS_DIR}/${zconfig_key}.history_map
+
+ fi
+ echo ${signed_akfs_map} > ${AK_NS_DIR}/${zconfig_key}.map
mv ${zconfig_csigned_file} ${AK_NS_DIR}/${zconfig_key}
}