1 files changed, 40 insertions, 0 deletions
diff --git a/void-key-bootstrap.sh b/void-key-bootstrap.sh
new file mode 100755
index 0000000..e59bfaf
--- /dev/null
+++ b/void-key-bootstrap.sh
@@ -0,0 +1,40 @@
+#!/bin/bash
+# Bootstrap Void Linux release GPG keys correctly
+
+set -euo pipefail
+
+GPGDIR="/etc/mirror-gpg"
+KEYRING="${GPGDIR}/void.gpg"
+mkdir -p "$GPGDIR"
+TMPDIR=$(mktemp -d)
+
+echo "[void] Fetching Void release GPG keys..."
+
+# URLs from raw.githubusercontent.com from correct path
+curl -sL -o "$TMPDIR/void-releases-20191127.asc" \
+    https://raw.githubusercontent.com/void-linux/void-packages/master/common/repo-keyring/void-releases-20191127.pub
+
+curl -sL -o "$TMPDIR/void-releases-20210826.asc" \
+    https://raw.githubusercontent.com/void-linux/void-packages/master/common/repo-keyring/void-releases-20210826.pub
+
+echo "[void] Downloaded files:" 
+ls -l "$TMPDIR"
+
+echo "[void] Checking file previews:"
+for f in "$TMPDIR"/*.asc; do
+  head -n5 "$f"
+  echo "--------"
+done
+
+echo "[void] Importing into keyring..."
+gpg --no-default-keyring --keyring "$KEYRING" --import "$TMPDIR"/*.asc || {
+  echo "[void] GPG import failed!"
+  exit 1
+}
+
+rm -rf "$TMPDIR"
+echo "[void] Imported Void release keys into $KEYRING"
+echo "[void] Final keyring:"
+gpg --no-default-keyring --keyring "$KEYRING" --list-keys
+
+exit 0