#
# /etc/pacman.conf
#
# Live ISO configuration for the built system.
# Repositories are hard-enabled; signature checking stays strict because
# pacman-init.service populates all keyrings (archlinux, cachyos, chaotic)
# at every live boot.
#
# See the pacman.conf(5) manpage for option and repository directives

[options]
Architecture = auto

HoldPkg     = pacman glibc

ParallelDownloads = 5

# By default, pacman accepts packages signed by keys that its local keyring
# trusts (see pacman-key and its man page), as well as unsigned packages.
SigLevel    = Required DatabaseOptional
LocalFileSigLevel = Optional
#RemoteFileSigLevel = Required

# NOTE: You must run `pacman-key --init` before first using pacman; the local
# keyring can then be populated with the keys of all official Arch Linux
# packagers with `pacman-key --populate archlinux`.

#
# REPOSITORIES
#   - repositories listed first will take precedence when packages
#     have identical names, regardless of version number
#   - URLs will have $repo replaced by the name of the current repo
#   - URLs will have $arch replaced by the name of the architecture
#

# [cachyos] first, same as the build's pacman.conf: pacstrap installs the
# target from this file, so with [core] ahead the target got Arch builds of
# everything cachyos also ships (pacman -2 vs the live -4 -> libalpm
# "unknown key '%INSTALLED_DB%'" warnings) and flipped them on the first -Syu.
[cachyos]
SigLevel = Required DatabaseOptional
Include = /etc/pacman.d/cachyos-mirrorlist

[core]
Include = /etc/pacman.d/mirrorlist

[extra]
Include = /etc/pacman.d/mirrorlist

[multilib]
Include = /etc/pacman.d/mirrorlist

[chaotic-aur]
SigLevel = Required DatabaseOptional
Include = /etc/pacman.d/chaotic-mirrorlist

[local-aur]
# Ships on the medium only: packages built at ISO build time (end-4
# dependencies, plus localrepo/). Keeps pacstrap from needing the network for
# anything that is not in the official repos. alvin-install strips this whole
# section from the target system's pacman.conf, because /opt/localrepo exists
# only on the live medium.
SigLevel = Optional TrustAll
Server = file:///opt/localrepo