It isn't necessary anymore, since not the whole xorg group is installed
now.

Do not install the whole xorg group, just the xorg-server package.
And also, prefer pulseaudio o...

Depending on the environment, /dev/ nodes may exist already. Do not
override them if they are ch...

Pacman uses repository order to decide their priority, and then when
package is found in multipl...

Add 3E80CA1A8B89F69CBA57D98A76A5EF9054449A5C used to sign ISO and
bootstap archives. The key is ...

Build based on /usr/share/pacman/keyrings/archlinux-trusted:
2AC0A42EFB0B5CBC7A0402ED4DC95B6D7BE...

Do not depend on qubes-vm-repo package being locally built to build a
template using only online...

If only online qubes repos are used, there will be no qubes packages
before adding that repo. Do...

* origin/pr/68:
Enable Qubes package repository on template

It breaks hosting /dev/xen/* group owner id. So we reduce
to the bare minimum device needed in /...

It should be possible to build a template with just online repositories.
Template build scripts ...

* origin/pr/61:
make wget more verbose
Improve debug logging in 00_prepare.sh
Update build...

The tarball was found using the "sha1sums" file, upstream replaced this
with "sha256sums". Thus ...

* origin/pr/55:
refactor: improve mirrorlist mechanism

* origin/pr/57:
Retry pacman a maximum of 5 times

Pacman fails installation if it finds a signatures that it cannot
verify, even if repository con...

Retrying forever is a very bad idea, as pointed out in
QubesOS/qubes-issues#7048. Instead of du...

systemd-nspawn requires systemd, which we don't have inside docker
runner. In theory it should w...

Instead of plain chroot. This both simplifies the calls, but also
provides better isolation betw...

* origin/pr/53:
Fix Arch build

* origin/pr/50:
Update Makefile.archlinux
Fixup: Directly generate locales
Update Makefile...

Remove sudo

- Add retry loops
- Switch to ‘mirrors.edge.kernel.org’ as the Pacman mirror, as it is
a Tier ...

* origin/pr/34:
Make packages reproducible

Not needed anymore, since keys dir in builder's chroot is back
persistent.

This reverts commit ...

The issue with pacman private key sharing is relevant for TemplateVM (or
generally - VMs) only, ...

No functional change.

Directly generate the locales instead of doing so using su

Add locale generation to get rid of locale warnings when installing packages

For consistency with other builder-* plugins and to match the allowlist
in linux-template-builde...

Since local master key is volatile now, regenerate it when need to sign
a key. Do it only when n...

It isn't needed there (the environment is used in CI only, where the
dir is always covered with ...

No longer copy qubes-vm-keyring (not installed) package into the
template.

There may be some updates since previous snapshot.

Passing GNUPGHOME in env leads to issue to connect to agent in CI.

Install locally built qubes-vm-repo package (meta-packages component),
which enables repositorie...

This will allow building packages in CI (without rebuilding all the
dependencies).

* origin/pr/46:
Increase default pacman mirrors

This ensures that files (such as the secret Pacman master key) cannot be
created in "$secret_key...

Mount points should generally have the same permissions as the
directories that will be mounted ...

These should be 0000 so that CAP_DAC_READ_SEARCH is needed to access its
contents.

This will be used later.

Co-authored-by: Demi Marie Obenour <[email protected]>

Use .list file only when it's newer than the latest commit in the repo.
Otherwise check for dumm...

* origin/pr/40:
Never check signature for qubes local builder repo
04_install_qubes: make sh...

Fix statement when removing qubes local repo

QubesOS/qubes-issues#6145

This is useful for local template build with packages built locally.

This makes 'make check-release-status' working

* origin/pr/37:
Fixes according to Marek's comments
Fix SIGN_KEY naming format
packages: a...

Fixes QubesOS/qubes-issues#6133

QubesOS/qubes-issues#6133

QubesOS/qubes-issues#5961

Starting with devtools 20191227 the Arch repos use the zstandard compression instead of xz compr...

ttf-freefont doesn't exist anymore in archlinux.
If someone what the freefont fonts, it could ...