commit:     05eca8f21152d81c033da95ab8209116bc7ed778
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Fri Jan 23 01:55:54 2026 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Tue Jan 27 07:14:55 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=05eca8f2

app-backup/tarsnap: wire up verify-sig

Signed-off-by: Sam James <sam <AT> gentoo.org>
Part-of: https://codeberg.org/gentoo/gentoo/pulls/25
Signed-off-by: Sam James <sam <AT> gentoo.org>

 app-backup/tarsnap/Manifest              |  1 +
 app-backup/tarsnap/tarsnap-1.0.41.ebuild | 24 +++++++++++++++++++++---
 2 files changed, 22 insertions(+), 3 deletions(-)

diff --git a/app-backup/tarsnap/Manifest b/app-backup/tarsnap/Manifest
index b181299d3069..59aa3c8281d0 100644
--- a/app-backup/tarsnap/Manifest
+++ b/app-backup/tarsnap/Manifest
@@ -1 +1,2 @@
 DIST tarsnap-autoconf-1.0.41.tgz 763978 BLAKE2B 
485305ad628c55b39cb639adae08eeb03ca03c5d9d610a466ebfacca09552e7a2016712d834b8f43270cccc593cc31f794f99615aea89eb33152ec81c38e25e6
 SHA512 
ea9fc30c9d9860040021eae2583c370c6ebd5bb37c5fa39d9d0ea141ff976d22e5df8c842c0963b6d930da9452eb0e6c3040e74e9cdb3a348e41f4aeec27deb8
+DIST tarsnap-sigs-1.0.41.asc 972 BLAKE2B 
fe8539722a00899f5d0b1b68c984d4586ddbab2e599918f35dd0965c0a0336e3be3da8a4955e6a642dc357e40197fd57ebc6417096f81c1a5554dafe78ec6aab
 SHA512 
d91239c7230ca5fa3a2c6f9d8bac834782dbe5772d18f12aac1f20c4171f4f3afe924ec05b1cff219d096959e204594b94a1860c7d205d32033282cef29a0150

diff --git a/app-backup/tarsnap/tarsnap-1.0.41.ebuild 
b/app-backup/tarsnap/tarsnap-1.0.41.ebuild
index e05952634eef..4aac194fc434 100644
--- a/app-backup/tarsnap/tarsnap-1.0.41.ebuild
+++ b/app-backup/tarsnap/tarsnap-1.0.41.ebuild
@@ -1,13 +1,17 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
 
-inherit toolchain-funcs shell-completion
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/tarsnap.asc
+inherit toolchain-funcs shell-completion verify-sig
 
 DESCRIPTION="Online backups for the truly paranoid"
 HOMEPAGE="https://www.tarsnap.com/";
-SRC_URI="https://www.tarsnap.com/download/${PN}-autoconf-${PV}.tgz";
+SRC_URI="
+       https://www.tarsnap.com/download/${PN}-autoconf-${PV}.tgz
+       verify-sig? ( https://www.tarsnap.com/download/${PN}-sigs-${PV}.asc )
+"
 S="${WORKDIR}"/${PN}-autoconf-${PV}
 
 LICENSE="tarsnap BSD BSD-2 MIT"
@@ -32,6 +36,7 @@ DEPEND="
        ${RDEPEND}
        virtual/os-headers
 "
+BDEPEND="verify-sig? ( sec-keys/openpgp-keys-tarsnap )"
 
 QA_CONFIG_IMPL_DECL_SKIP=(
        # false positive due to outdated autoconf, bug #900124
@@ -39,6 +44,19 @@ QA_CONFIG_IMPL_DECL_SKIP=(
        makedev
 )
 
+src_unpack() {
+       if use verify-sig; then
+               cd "${DISTDIR}" || die
+               verify-sig_verify_signed_checksums \
+                       ${PN}-sigs-${PV}.asc \
+                       openssl-dgst \
+                       ${PN}-autoconf-${PV}.tgz
+               cd "${WORKDIR}" || die
+       fi
+
+       default
+}
+
 src_configure() {
        local myeconfargs=(
                $(use_enable xattr)

Reply via email to