From 7f0192fae78ba0c96e322ef1748e14fad1453e42 Mon Sep 17 00:00:00 2001
From: syui <syui@syui.ai>
Date: Mon, 2 Mar 2026 23:52:37 +0900
Subject: [PATCH] fix gpg

---
 aios.gpg  | Bin 0 -> 395 bytes
 build.zsh |  22 ++++++++++++++--------
 2 files changed, 14 insertions(+), 8 deletions(-)
 create mode 100644 aios.gpg

diff --git a/aios.gpg b/aios.gpg
new file mode 100644
index 0000000000000000000000000000000000000000..c12a19bb9f405ad06e9aecf9fed1f20950485d7c
GIT binary patch
literal 395
zcmbPX%#yjZ*H?^Fn~jl$@s>M3BO|-R*PiQax(f3*TszIKXSiE)Us2kGJ3AZ1<0c2K
zC<}YN{_Gav;>yxY1sf3Q03!4fGwnJiun3EBF<6KxvTR%0^fYkMHwmejlk<%G@|}K$
z_|9f!0@=eP&CJTp$-&OVCd$Rh!Og@X#>C9XB*(}k-oU`cDF9PEm64I*tOV1k=9HDG
zSLObdmme&)x})`Ox!080ryq$-eLr9E(K?3zm3!a2Z9G+W@yE&JY{nEP(O=CKzo)+R
zTyU$(Q=ste4Za;<zeS+>ZNI>A-@du4S+0a0wKrAVlzYaEVeaq5^Q;SM8t<{Y2A6hJ
zut)&Cp@7dD5lqqw$j+V2#K_R6d)t2H2mfhml6Ra=xH>Fk3QJL$vSpv=j>auraT2>d
o8U7b-oGW=cZ>7C#N1y)!mba7ZbBehZP86CrYs%BEmBu?b0lrR|r2qf`

literal 0
HcmV?d00001

diff --git a/build.zsh b/build.zsh
index 659f271..4ae7e97 100755
--- a/build.zsh
+++ b/build.zsh
@@ -5,6 +5,7 @@ set -e
 ROOTFS="$(pwd)/root.x86_64"
 BUILD_MODE="${1:-tarball}"
 BUILD_DATE=$(date +%Y.%m.%d)
+GPG_KEY=B6A582E551A2F6181A5CC99E338E6F42F9544D9B
 
 echo "=== aios build $BUILD_DATE (mode: $BUILD_MODE) ==="
 
@@ -24,13 +25,6 @@ echo 'Server = https://geo.mirror.pkgbuild.com/$repo/os/$arch' > $ROOTFS/etc/pac
 sed -i 's/CheckSpace/#CheckSpace/' $ROOTFS/etc/pacman.conf
 sed -i '/\[options\]/a NoUpgrade = etc/os-release' $ROOTFS/etc/pacman.conf
 
-cat >> $ROOTFS/etc/pacman.conf <<'EOF'
-
-[aios]
-SigLevel = Optional TrustAll
-Server = https://git.syui.ai/ai/repo/raw/branch/main/$arch
-EOF
-
 arch-chroot $ROOTFS /bin/sh -c 'pacman-key --init && pacman-key --populate archlinux'
 arch-chroot $ROOTFS /bin/sh -c 'pacman -Syu --noconfirm base-devel vim git zsh rust clang openssh jq nodejs npm zsh-autosuggestions zsh-syntax-highlighting zsh-history-substring-search'
 
@@ -40,7 +34,19 @@ fi
 
 arch-chroot $ROOTFS /bin/sh -c 'npm i -g @anthropic-ai/claude-code'
 
-arch-chroot $ROOTFS /bin/sh -c 'pacman -Sy --noconfirm ailog aigpt aishell'
+cat >> $ROOTFS/etc/pacman.conf <<'EOF'
+
+[aios]
+SigLevel = Required DatabaseOptional
+Server = https://git.syui.ai/ai/repo/raw/branch/main/$arch
+EOF
+
+arch-chroot $ROOTFS /bin/sh -c "
+  # curl -sL https://git.syui.ai/ai/repo/raw/branch/main/aios.gpg -o /tmp/aios.gpg
+  pacman-key --add ./aios.gpg
+  pacman-key --lsign-key $GPG_KEY
+"
+arch-chroot $ROOTFS /bin/sh -c 'pacman -S --noconfirm ailog aigpt aishell'
 
 arch-chroot $ROOTFS /bin/sh -c 'chsh -s /bin/zsh'
 arch-chroot $ROOTFS /bin/sh -c 'useradd -m -G wheel -s /bin/zsh ai'