[arch-general] Question on removing pacman keys (and adding new ones)

[Sebastian Pipping]

Hi there!


In relation to making virtual machine images of Arch I noticed that
sharing images with pacman keys inside would enable two systems to
present spoofed packages to the other unnoticed.  True?
It seems like a good idea to remove and re-add pacman keys specific to
each system again, later.

I wonder how to best remove the system-specific keys (not secure
deletion, just not breaking the system) and how (more than when) to
re-add new ones to the existing system to get it back to fully
functional.  Any ideas?

Many thanks in advance, best,



Sebastian