Fimeg/souveraine
Watch
1
0
Fork
You've already forked souveraine
 0
Code Releases Activity

ship souveraine-verify-trail in the package that writes the trail

Browse source
This commit is contained in:
Fimeg 2026-07-26 14:58:48 -04:00
commit 3174e7813c
3 changed files with 82 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
packaging/arch/PKGBUILD.prebuilt
View file

@ -15,8 +15,9 @@ options=('!strip')
source=('souveraine-binary' 'souveraine.service'
'souveraine-secrets-binary' 'souveraine-secrets.service'
'souveraine-machined-binary' 'souveraine-machined.service'
'souveraine-verify-trail'
'LICENSE')
sha256sums=('SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP')
sha256sums=('SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP')
# sessiond ships on aarch64 only (the phone is its target; the laptop hit
# lock-screen errors with it). CI drops the two files into the build dir for
# that arch and omits them otherwise, so package() picks them up conditionally
@ -56,5 +57,11 @@ package() {
install -Dm644 "$srcdir/souveraine-machined.service" \
"$pkgdir/usr/lib/systemd/system/souveraine-machined.service"
# Verifies the forensic trail's hash chain. Ships with the daemon that
# writes it, not in the rootfs overlay: the overlay only reaches a device
# at provision time, and the phone is not reflashed. Evidence nobody can
# check is not evidence (DEVICE-STATE-MACHINE.md §11).
install -Dm755 "$srcdir/souveraine-verify-trail" \
"$pkgdir/usr/bin/souveraine-verify-trail"
install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}