# Build-time pacman.conf for mkarchiso (pulls live packages incl. tanin-desktop).
# Replaces releng's pacman.conf. [tanin] is added so the airootfs can include
# our packages.
[options]
HoldPkg     = pacman glibc
Architecture = auto
CheckSpace
SigLevel    = Required DatabaseOptional
LocalFileSigLevel = Optional
ParallelDownloads = 5

[core]
Include = /etc/pacman.d/mirrorlist

[extra]
Include = /etc/pacman.d/mirrorlist

[multilib]
Include = /etc/pacman.d/mirrorlist

[tanin]
# Required DatabaseOptional assumes packaging/gen-signing-key.sh has been run
# and its packager pubkey is already trusted on THIS build host's own pacman
# keyring (mkarchiso's pacstrap reads the host's /etc/pacman.d/gnupg, not the
# airootfs's — that trust is set up separately by customize_airootfs.sh for
# the live/target system). Until the key exists and is trusted here, building
# will fail closed rather than pull unsigned [tanin] packages into the ISO.
SigLevel = Required DatabaseOptional
Server = https://git.openbureau.ch/api/packages/karim/arch/tanin/$arch