Avoids having to specify them in dependency order.

Copy both UID and primary GID of the invoker to the builduser. Mount
srcdest and startdir read-write.

v2: Fixed GnuPG keyring owner and moved running namcap from a heredoc
    to a function.

This makes it a lot easier to swap out the host that actually serves the repos in the future.

Having it set to nologin breaks a couple of tests in Git and Python.

This way the HOME dir is writable and no ugly hacks are required
in the PKGBUILD if $HOME is accessed (f.e. maven, gradle and also
some python tests etc.)

It is passed down to the container when stdin/stdout is not a tty; this
is the case when archbuild's output is redirected to a pipe or file.

This is needed in order to use GPG's auto-key-retrieve keyserver option,
otherwise the keyring will get copied to the chroot before the required
keys are retrieved during 'makepkg --verifysource'.

Pacman cannot handle armored signatures, so force a generation of a
binary one using the --no-armor flag.

Chances are that pubring.kbx has been created by gpgsm but pubring.gpg
is still around with valid data. We do not know what file contains what
we need, so just copy both.

Signed-off-by: Christian Hesse <mail@eworm.de>
Signed-off-by: Pierre Schmitz <pierre@archlinux.de>

It's an xmas miracle!

Needed for makepkg 4.2

bsdtar doesn't consider it an error when your --include doesn't match
anything in the archive, so we're forced to dump stderr to /dev/null
here.

Fixes: https://bugs.archlinux.org/task/42551

Fixes a regression introduced by 285a4e94, which made namcap a
"compile time" option.

Fixes FS#42277.

This makes soname checking much more robust and is explicit when a
soname change is found.

We don't need to pass _chrootbuild this information at runtime -- we
can just generate the build script to do exactly what we want.

Changing UID to that of 'nobody' is arbitrary at best, and an
information leak at worst. Let's just drop back to the same UID of the
invoker.

Commit 59e348fc added a btrfs subvolume
check, but only used it in create_chroot(); it missed clean_temporary().

The "app" hasn't been an option since arch-nspawn was created.