sec-keys/openpgp-keys-libuv: new package, add 20240209

Signed-off-by: Hank Leininger <hlein@korelogic.com>
Signed-off-by: Sam James <sam@gentoo.org>

3 files changed, 145 insertions, 0 deletions

diff --git a/sec-keys/openpgp-keys-libuv/Manifest b/sec-keys/openpgp-keys-libuv/Manifest
new file mode 100644
index 000000000000..39abc8a22fdc
--- /dev/null
+++ b/sec-keys/openpgp-keys-libuv/Manifest
@@ -0,0 +1,14 @@
+DIST libuv-20240209-57353E0DBDAAA7E839B66A1AFF47D5E4AD8B4FDC.asc 3152 BLAKE2B e0734fa2633aadf41600cd8624420134fc4954e753397d404dd0ef340fec5b8f8767f2eae574b6a4879b5ec37b7b413a497838dd48e10339c86df5c5a6989c49 SHA512 cad23c21ca34225b834692fd4d70286e2197a51e37562d1a213548caca751da3600b14c605836a4e5760c6e4c7fc8b1eec46b4f4f18b194918a0f11bf9322e69
+DIST libuv-20240209-612F0EAD9401622379DF4402F28C3C8DA33C03BE.asc 6353 BLAKE2B bdc1a3172de4d70f70baaa82f08ce36f0d3d8d03079344498ea39ca217df82228e33ccbe0a64de0046feec5cd6be7d33409cfaa7fd082cf1c5d0e8eaa36a6d13 SHA512 cd284b06625977efef9aa21026a210bbfcc680c3102420f5849581b10491824ee1514a55b19248aa5aeed308cf386dfe211480a35fba48e629901f773ad42154
+DIST libuv-20240209-94AE36675C464D64BAFA68DD7434390BDBE9B9C5.asc 8868 BLAKE2B fffba9fb609b73b981f967448248a6ddc7269c951147b15f49588d15283f2d625b7841ca3d74c03085fc295c76340008d06736fa8f6e3d3c6143dc3fdc345ef4 SHA512 e56e2bf26898af4e6fbf39772f1d6365dac6afbb53bf706720e5afa97ebac7f6c776b79fc69ec17ec83b7aa9fc68bf69bf7d90e01a8196d64c7005869a415c24
+DIST libuv-20240209-AEAD0A4B686767751A0E4AEF34A25FB128246514.asc 4675 BLAKE2B f0924b25bee3846833fe09735987c3dbc29b09dc4285b4d626a89cea7af8d549a6f34d7d88124d6c6ff828a439d2dd8cd4151cd8347901f769a3a3810c004481 SHA512 9c090087d93d52715f881d5d95ced73b423fedf329501c8612976ffaa07a73605a45f3d2840626a53365b259ea0f375d34d29b5c86f72c722564667383bf9687
+DIST libuv-20240209-AF2EEA41EC3447BFDD86FED9D7063CCE19B7E890.asc 12894 BLAKE2B 83b1cfbcf4ec354c890e151f9d391c6809543474995b30d5170252a90347323f04136fd51a6a5a876358e649ef97827d183b0eb315244e31f73efeb5d393eac8 SHA512 f7717288f225316c287bd186171098d018a540683be73bc02ab1431760193cf0ffa411bac85bfa4e5ef82837dff1b0fa6d79c021e823f9f60292915c8abbeb25
+DIST libuv-20240209-C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C.asc 5618 BLAKE2B 0774b7bda18fcc3eed58fca208d7b0eeba63450d6069a6ee17f69260095685a637e6485303f70d922277955cc7b2c78897319d385cf81c36edbd8228401d0e24 SHA512 18386e1e6e6ed3e6230312a4c0ea2f5a695f8379c978ae4f8f0ea0b3eb2ac1ae72a6a77dfda297e996a4ff4121ca1e96651ed8e093a65913a69b34819d93c4de
+DIST libuv-20240209-CFBB9CA9A5BEAFD70E2B3C5A79A67C55A3679C8B.asc 5439 BLAKE2B 85986b25527343eb2da809ffa96c1a9692778787eb07044c48c7debc49d8ab8b3ff4d5ee17bd7cc17de83a6df57fa9e10b6ec8f20c29734e9396a1f937a484d4 SHA512 7a2eb8f7fa1d7ef38a692fc3366b5f9f8e808c832c9aaabbeaa843685304fddc0ddd770d2d15a2992ec02610d3c350628d674b19b10ec6ad45fe541755609663
+DIST libuv-20240209-D77B1E34243FBAF05F8E9CC34F55C8C846AB89B9.asc 3132 BLAKE2B e960017ae1da0810ce1f38b235704d6955ca8a8b21a77d84300d9cc155f6836716b5ffa531348cb6939f7be7710503d1c5b3e0a069ac7cd33373bdda67f0426a SHA512 c325f81ef1995f76550149ef7bf010385f46c796bcb9230b97d4a4977f4e1bb7535eb5b22a016d6938cd8cded7edd2c3102dc242df006247e3799260b87bdbe8
+DIST libuv-20240209-FDF519364458319FA8233DC9410E5553AE9BC059.asc 19617 BLAKE2B de49e6d9b39565556a2364c5fbd68d2201e3ecfa8ba89a4ac991f517ef769d5a72c58691f9dc2dcb106762e936c091761ad238f0a26697da4aee11ef592c3ed4 SHA512 4c6ac6f6b7bf865b2b5c6ab86a4b8a6b97ff68c45080b7b8d0f06907508a627aed6270678ff20325d95bed9d62f5ded274dad91e95c237802bd9c8e6b006b8a5
+DIST libuv-20240209-cjihrig.asc 7261 BLAKE2B 123e547a5b17328a1236bd6656caf3d21f1f5074c9bfe6849552b3f0d1adcac6107daade3c297998c3cfd35a8b1f4f3ca4dc55b89609f6c06793cc81ad4e5ef1 SHA512 fca56be70e2d80524b81eae37af56d7a996a7aa7b3cb705f64c668e4da1a804bd7aab38004c3c76fdd42c5176bbd2007a2f2d667c38afd89cb11ec85b5812754
+DIST libuv-20240209-richardlau.asc 3946 BLAKE2B b31d77e265076802eec291cb9f01e1be6c786e939aee80ac7d079b9018eb5db41c9276614a955704e13328e697e3b106d44f9d95d23aca617548bd7febfa1cad SHA512 f3d3f914d9207644cc7c5366c9edd3676f4603df5cdedbd436c0d4e0005d564ced035b2b1c3346dfbcc0cf5801e35e83f9026093529aada1b8599e6dcf7e9de4
+DIST libuv-20240209-santigimeno.asc 3174 BLAKE2B 1dfa3b624a14f116ea9da7bc32850fd9876c3f5acada0f541e01208a0e00ac1f5ab1b7557d776bac3bb7ed57692b576a455a43eacf6c26042b8c3cc593ec8034 SHA512 96646393cfb624510ec7e6770db6ca593ad6c017310be8cf57834a86a24e4182bca65fc63e27f50c6babca275502e8f7094ff5b320477775eef70df876217ac3
+DIST libuv-20240209-trevnorris.asc 2545 BLAKE2B 2b6466c087e1fba30caa06d011faf3b497622c15dbe22d32257339ddcd196a261e49b92ef9c7b21d1264674b12c6b0d72b614e6478fe0bf2be234969205e8938 SHA512 fecc7cd2e773ba32437d8b78f23878735d0fb8f3e6fa096f8c3c49a37e291a7732fca73f38ff0c1b358bba0752a4951314a3bdad84ef2cb4f592d084a79ded08
+DIST libuv-20240209-vtjnash.asc 10016 BLAKE2B 7aaf31b5413ca38162a31eeb60f05fcff3a31b9609beb671e9fd448fe5cb833d52abf19d739ad186196920bc0063a3e4a4728f6a6e0dd63fc2615d75f8cdb1b3 SHA512 e2221483a5a859e10345e6ac9f09afb9e61142346346ea961f674ce844ff076d5055a078d401ad5a4f3fca9986a19ecd163b7f08238f53f687eb91df77229e2a
diff --git a/sec-keys/openpgp-keys-libuv/metadata.xml b/sec-keys/openpgp-keys-libuv/metadata.xml
new file mode 100644
index 000000000000..d661e08a9c6e
--- /dev/null
+++ b/sec-keys/openpgp-keys-libuv/metadata.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="project">
+		<email>kde@gentoo.org</email>
+		<name>Gentoo KDE Project</name>
+	</maintainer>
+	<maintainer type="person">
+		<email>jsmolic@gentoo.org</email>
+		<name>Jakov Smolić</name>
+	</maintainer>
+	<stabilize-allarches/>
+</pkgmetadata>
diff --git a/sec-keys/openpgp-keys-libuv/openpgp-keys-libuv-20240209.ebuild b/sec-keys/openpgp-keys-libuv/openpgp-keys-libuv-20240209.ebuild
new file mode 100644
index 000000000000..97b7305cb978
--- /dev/null
+++ b/sec-keys/openpgp-keys-libuv/openpgp-keys-libuv-20240209.ebuild
@@ -0,0 +1,118 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DESCRIPTION="OpenPGP keys used by libuv"
+HOMEPAGE="https://libuv.org/"
+
+# See the following:
+# - https://github.com/libuv/libuv/blob/v1.x/MAINTAINERS.md
+# - https://github.com/libuv/libuv/issues/4306
+# - https://github.com/libuv/libuv/issues/4307
+#
+# Most keys are uploaded to keyserver.ubuntu.com, some are not.
+#
+# Some keys at keyserver.ubuntu.com are not "registered", so no UID.
+#
+# Some keys are uploaded to github.com, some are not.
+#
+# Some keys at github.com are expired, despite owner having extended
+# them locally and still using them.
+#
+# GitHub key export (/username.gpg) may include cruft comment lines
+# which cause GPG to error during import.
+#
+# Most keys are stored within the git repo, but in a manner that cannot
+# be fetched via https://github.com/, only by cloning the repo.
+#
+# Some of the keys stored in the repo are expired.
+#
+# Test for viability of sources:
+#
+# for key in $(egrep 'GPG key:' MAINTAINERS.md | sed 's/^ *- GPG key: //; s/ (pubkey.*//; s/ //g') ; do
+#   echo -n "$key "
+#   curl -s "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x${key}" | \
+#   	egrep -q 'BEGIN PGP' && echo yes || echo no
+# done
+#
+# for user in $(egrep -B1 'GPG key:' MAINTAINERS.md | sed -n -E 's/.*\*\* +\( *\[@([^] ]+)\].*/\1/p') ; do
+#   echo -n "$user "
+#   curl -s "https://github.com/${user}.gpg" | egrep -q '^mQ' && echo yes || echo no
+# done
+#
+# Collect the yeses (keep dupes because some are not current) and then:
+#
+# for A in \
+#		D77B1E34243FBAF05F8E9CC34F55C8C846AB89B9 \
+#		AEAD0A4B686767751A0E4AEF34A25FB128246514 \
+#		CFBB9CA9A5BEAFD70E2B3C5A79A67C55A3679C8B \
+#		C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C \
+#		612F0EAD9401622379DF4402F28C3C8DA33C03BE \
+#		FDF519364458319FA8233DC9410E5553AE9BC059 \
+#		94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
+#		57353E0DBDAAA7E839B66A1AFF47D5E4AD8B4FDC \
+#		AF2EEA41EC3447BFDD86FED9D7063CCE19B7E890 \
+#   ; do
+#   echo -e "\t'https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x${A}\n\t\t-> libuv-\${PV}-${A}.asc"
+# done
+#
+# for A in vtjnash richardlau santigimeno trevnorris cjihrig ; do
+#   echo -e "\thttps://github.com/${A}.gpg\n\t\t-> libuv-\${PV}-${A}.asc"
+# done
+
+SRC_URI="
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xD77B1E34243FBAF05F8E9CC34F55C8C846AB89B9
+		-> libuv-${PV}-D77B1E34243FBAF05F8E9CC34F55C8C846AB89B9.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xAEAD0A4B686767751A0E4AEF34A25FB128246514
+		-> libuv-${PV}-AEAD0A4B686767751A0E4AEF34A25FB128246514.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xCFBB9CA9A5BEAFD70E2B3C5A79A67C55A3679C8B
+		-> libuv-${PV}-CFBB9CA9A5BEAFD70E2B3C5A79A67C55A3679C8B.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xC82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C
+		-> libuv-${PV}-C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x612F0EAD9401622379DF4402F28C3C8DA33C03BE
+		-> libuv-${PV}-612F0EAD9401622379DF4402F28C3C8DA33C03BE.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xFDF519364458319FA8233DC9410E5553AE9BC059
+		-> libuv-${PV}-FDF519364458319FA8233DC9410E5553AE9BC059.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x94AE36675C464D64BAFA68DD7434390BDBE9B9C5
+		-> libuv-${PV}-94AE36675C464D64BAFA68DD7434390BDBE9B9C5.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x57353E0DBDAAA7E839B66A1AFF47D5E4AD8B4FDC
+		-> libuv-${PV}-57353E0DBDAAA7E839B66A1AFF47D5E4AD8B4FDC.asc
+	https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xAF2EEA41EC3447BFDD86FED9D7063CCE19B7E890
+		-> libuv-${PV}-AF2EEA41EC3447BFDD86FED9D7063CCE19B7E890.asc
+	https://github.com/vtjnash.gpg
+		-> libuv-${PV}-vtjnash.asc
+	https://github.com/richardlau.gpg
+		-> libuv-${PV}-richardlau.asc
+	https://github.com/santigimeno.gpg
+		-> libuv-${PV}-santigimeno.asc
+	https://github.com/trevnorris.gpg
+		-> libuv-${PV}-trevnorris.asc
+	https://github.com/cjihrig.gpg
+		-> libuv-${PV}-cjihrig.asc
+"
+
+S="${WORKDIR}"
+
+LICENSE="public-domain"
+SLOT="0"
+KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86"
+
+src_compile() {
+	local files=( ${A} )
+
+	touch libuv.asc
+	# Skip keys w/no UID (gpg will error and gemato will abort),
+	# and strip github header (gpg will error and gemato will abort)
+	for file in "${files[@]/#/${DISTDIR}/}" ; do
+		if gpg --list-packets "$file" 2>/dev/null | egrep -q '^:user ID' ; then
+		  sed "/^Note: The keys with the following IDs couldn't be exported/d" "$file" >>libuv.asc
+		fi
+	done
+}
+
+src_install() {
+	local files=( ${A} )
+	insinto /usr/share/openpgp-keys
+	doins libuv.asc
+}