Adding metadata

2 files changed, 51 insertions, 6 deletions

diff --git a/media-tv/plex-media-server/Manifest b/media-tv/plex-media-server/Manifest
index 688a9bde0d82..21247020a1be 100644
--- a/media-tv/plex-media-server/Manifest
+++ b/media-tv/plex-media-server/Manifest
@@ -1,4 +1,9 @@
-DIST plexmediaserver_1.43.0.10492-121068a07_amd64.deb 84210046 BLAKE2B 4b9eae41becd86dfe253d2ad2e8d097317b073bdf61be925438a8a7bd5374d2d3fd4aa58c831e95b3864d263eb5abde0b7c3faea61d0e633cf879169e0a65e8b SHA512 11a81add221aade69ac9f534fd6b2cc8521a116e83efd64f9a2d1b78e1a3dc3eb2b04c0ab169d6c08590792fb2a8bd5ea8f29ea46f32bd25e2ce4f207fc194db
-DIST plexmediaserver_1.43.0.10492-121068a07_arm64.deb 76125026 BLAKE2B ffb5d2c0517b73601ddd7d13138ff15c7b775c5e5e6ac97d7982cefa2d5e765f1212a258292c0055c2e2e0a9c53f832d6f9b9865069d3b72843b65473fc99587 SHA512 2137f151078571be29f303393275f1e571da1c2850701a45e2e636f10143a717354b30e5fb994ca862caa445eb7f4edf449d597f9abf235841e1bda59c8c50f7
-DIST plexmediaserver_1.43.0.10492-121068a07_armhf.deb 76170442 BLAKE2B 1630ae764b47d233afec5e98798cbb451c9265519660ef5459b573e25ba3215670174855fa54643f51d9ef7c85e9c281ad4a7598f27bfdf7a032612a8d495668 SHA512 f8c528600971e8dce49e6e973206d8dbbbdfdd0232b1f3d85ea4f5474e6bf19d8e7e21dd9392e9478464e3617a3943919d125c51b8c60c4a3504eccf139a45e7
-DIST plexmediaserver_1.43.0.10492-121068a07_i386.deb 77337558 BLAKE2B dd5795a19d5107516492d19a6abf108d3d6c5d44e1f1caa97934b625b93db93fd281f62def60ea5bd4c6aa4255c0da275e50691b6ab402993309f26bc8435a7f SHA512 4acc836aaf998a66291a640838daad84e82d996fb795f6b216c133d91934c2a61f87cc0a4bc30d361cb801b7cb9b5c75070abe9e134a31cbc1951f96d7c20068
+DIST plex-media-server-1.43.1.10576-InRelease 4069 BLAKE2B fd7794cbc4e4e638df0b98b45f61c01ecbdf8c082e918f1808d28f2a65984a444447ea52529c4c60121fcc6d29f27ce20de4857d3d8cb3426fa4ca93b53b6a50 SHA512 32081306420a0af01958c65fbc98662e97571e954e3b2a04ef80b6dcf6c07feb1d897a54cfcacd08a345b731ca19c625064507ad1156413741ebc25ea848a4c1
+DIST plex-media-server-1.43.1.10576-Packages.amd64 557 BLAKE2B 98fd0c1155b4e6377119f59b3872210bee81a654ced2db44886074b4a33b870840ddfb5efda84ff31159960ac0364b47e3f8789680af7a90a22033541a35e109 SHA512 07995afd0e9436192f2a1b44da54e74785ddac0678659155cbd9d4cea914a0bbec0d2e5dac78994b22c6575cbeece7ae4a1ded686953b83f08d647462a9fd14c
+DIST plex-media-server-1.43.1.10576-Packages.arm 557 BLAKE2B d750b276084ccfafb78503103a8e0a3864abcd0ac54377318c1f03231a69fbcf07032cdbf703005f587691036f8ce892e5dffc2ce8f1393269baedad83de8775 SHA512 5a64f82f5e852a7e69dce8d6dc1be592c7ef9eec4f9d2e887d7fbb7e43a010a8ff6170397168f83ebb7c876a4d4450e354bc1b38df1691d248669008881b00bf
+DIST plex-media-server-1.43.1.10576-Packages.arm64 557 BLAKE2B 3508d6d20df252ca8510ecb7cf650d94e4fcd6498a5fdfeac0264b9b05043bd9032403601b3fdd5862d0f2c00b160d4a45c8ecc825d02c8ae56e644852d0f410 SHA512 e715baed5e3ffaff778bd13db2e52b8afe6e0533b2bca625f77c98e8884ced21856edd9c60b0459e83a91bd3d4b884ff4f6a090a768d3d6a6c7ce295e3b0a11c
+DIST plex-media-server-1.43.1.10576-Packages.x86 555 BLAKE2B 0ab62d906b9a1c2c950f35f1218c7d19e2929d07f8ac0b7a6f0eb64ea807b0e5a4f007748d86914bd87396ee287278cc30277803be8a21eced48ce5c06ebd29a SHA512 cd82f6f7c2054c3ed761107b41161256e923ed155dd64ac51ff2ccbf29b372bd9260f346a2d8c9ae5b8f98034b0104bc69168b74cba865a4ab0e53e802342e4c
+DIST plexmediaserver_1.43.1.10576-06378bdcd_amd64.deb 84340854 BLAKE2B 58383e861ddbf2cafedb1eeb350e897e400a0fd443d0ea1d8d3f333c6a5d9fb0d7b211972b330a7b533e62e45f7af3d5c39c700f06393484522061477be7f53a SHA512 b355c3e04b5c48ce9301fcf37191c892c5866e5c4c4a47596ffe99860e163f6fbb67f74d797eb3f5dbd7fcb1b57a08403f8e595e3f99864db3cb637f989db3c3
+DIST plexmediaserver_1.43.1.10576-06378bdcd_arm64.deb 76215002 BLAKE2B 5ddebb1ccd34e26440f318695cbf6279def3c702d581a42604d378e15ac87434fc300341b58ad3193063224c6a57675fe772a5e02905022b195f7c0f2ac5a60b SHA512 7663f2ff8179bad1c7cae5046b088d8255db2bf16d36218c097447593d245f7b202a877b6b2ffe0401d41cc6b0b511b0458675a758dbcf374749131257b2bbcc
+DIST plexmediaserver_1.43.1.10576-06378bdcd_armhf.deb 76244446 BLAKE2B b0f975c04eb39bcfb0c962945bd49d67743f5d2652b88b4c5b89162d44dec12fd9ea7c581e2b9340abf744081ea58772e132d30e045e4471aa1d305b931c35b2 SHA512 35d5d32a56cb29127f93a6746ac2c4684949e696e3655dc1922be3791f0981ff4e4b3648dc4d82c8b21f8ad15a840428096ee4c3a6ba296dad209abd42128d2f
+DIST plexmediaserver_1.43.1.10576-06378bdcd_i386.deb 77429042 BLAKE2B 4cadfd9a5ba1cff3881624cb71e43a7c8e8efb63a2ec9ba14437de617149a634d3f5e18620f275759ad3ce1ee1da6c84c2b3778cd95e8398b49300e308b1a551 SHA512 7a53159b6dbb71e08d3afb3bccad2d0f5b265ecf0f3188a110eec4f8ffb6726d000b93a6fab944d869f9620242a619c934fc3748c3e66d8c88978ecaaefcc22f
diff --git a/media-tv/plex-media-server/plex-media-server-1.43.0.10492.ebuild b/media-tv/plex-media-server/plex-media-server-1.43.1.10576.ebuild
index 9825b37eec7c..61dfe12bf9fb 100644
--- a/media-tv/plex-media-server/plex-media-server-1.43.0.10492.ebuild
+++ b/media-tv/plex-media-server/plex-media-server-1.43.1.10576.ebuild
@@ -3,9 +3,11 @@
 
 EAPI=8
 
-inherit readme.gentoo-r1 systemd unpacker pax-utils
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/plexmediaserver.asc
 
-MY_PV="${PV}-121068a07"
+inherit eapi9-pipestatus readme.gentoo-r1 systemd unpacker pax-utils verify-sig
+
+MY_PV="${PV}-06378bdcd"
 MY_URI="https://downloads.plex.tv/plex-media-server-new"
 
 DESCRIPTION="Free media library that is intended for use with a plex client"
@@ -15,18 +17,29 @@ SRC_URI="
 	arm? ( ${MY_URI}/${MY_PV}/debian/plexmediaserver_${MY_PV}_armhf.deb )
 	arm64? ( ${MY_URI}/${MY_PV}/debian/plexmediaserver_${MY_PV}_arm64.deb )
 	x86? ( ${MY_URI}/${MY_PV}/debian/plexmediaserver_${MY_PV}_i386.deb )
+	verify-sig? (
+		https://repo.plex.tv/deb/dists/public/InRelease -> ${P}-InRelease
+		amd64? ( https://repo.plex.tv/deb/dists/public/main/binary-amd64/Packages -> ${P}-Packages.amd64 )
+		arm? ( https://repo.plex.tv/deb/dists/public/main/binary-armhf/Packages -> ${P}-Packages.arm )
+		arm64? ( https://repo.plex.tv/deb/dists/public/main/binary-arm64/Packages -> ${P}-Packages.arm64 )
+		x86? ( https://repo.plex.tv/deb/dists/public/main/binary-i386/Packages -> ${P}-Packages.x86 )
+	)
 "
 S="${WORKDIR}"
 
 LICENSE="all-rights-reserved"
 SLOT="0"
 KEYWORDS="-* amd64 ~arm arm64 ~x86"
+IUSE="verify-sig"
 RESTRICT="bindist"
 
 DEPEND="
 	acct-group/plex
 	acct-user/plex"
 RDEPEND="${DEPEND}"
+BDEPEND="
+	verify-sig? ( >=sec-keys/openpgp-keys-plexmediaserver-20240120 )
+"
 
 PATCHES=(
 	"${FILESDIR}/${PN}.service.patch"
@@ -40,6 +53,33 @@ QA_MULTILIB_PATHS=(
 	"usr/lib/plexmediaserver/Resources/Python/lib/python2.7/lib-dynload/_hashlib.so"
 )
 
+src_unpack() {
+	if use verify-sig; then
+		local deb_arch=${ARCH}
+		[[ ${ARCH} == arm ]] && deb_arch=armhf
+		[[ ${ARCH} == x86 ]] && deb_arch=i386
+
+		cd "${DISTDIR}" > /dev/null || die
+
+		# Verify APT chain of trust:
+		# InRelease (signed) -> Packages (checksum) -> .deb (checksum)
+		verify-sig_verify_message ${P}-InRelease - \
+			| sed "s,[0-9]\+ main/binary-${deb_arch}/Packages$,${P}-Packages.${ARCH}," \
+			| verify-sig_verify_unsigned_checksums - sha256 ${P}-Packages.${ARCH}
+		pipestatus || die
+
+		sed -n "/^Version: ${MY_PV}/,/^SHA256:/p" \
+			${P}-Packages.${ARCH} \
+			| sed "s,^SHA256: \(.*\),\1 plexmediaserver_${MY_PV}_${deb_arch}.deb," \
+			| verify-sig_verify_unsigned_checksums - sha256 plexmediaserver_${MY_PV}_${deb_arch}.deb
+		pipestatus || die
+
+		cd "${WORKDIR}" > /dev/null || die
+	fi
+
+	unpacker_src_unpack
+}
+
 src_install() {
 	# Remove Debian specific files
 	rm -r "usr/share/doc" || die