numerous updates

updates.d/10-pacman.sh

@@ -6,12 +6,28 @@ source "$COREDESKTOP/utils.sh"
 source "$COREDESKTOP/packages.conf"
 source "$COREDESKTOP/remove-packages.conf"
 
+STATUS=0
+
 echo "Removing unwanted packages..."
 remove_packages "${REMOVE_PACMAN[@]}"
 remove_flatpaks "${REMOVE_FLATPAKS[@]}"
 
+# A machine that hasn't updated in a while can have a keyring too old to verify
+# the new packages. Update it first; the -Su below completes this -Sy.
+echo "Updating Arch keyring..."
+sudo pacman -Sy --needed --noconfirm archlinux-keyring || STATUS=1
+
+# script(1) keeps pacman's progress bars while logging its output for the
+# initramfs check
 echo "Updating Arch..."
-sudo pacman -Syu --noconfirm
+mkdir -p "$(dirname "$PACMAN_UPDATE_LOG")"
+: > "$PACMAN_UPDATE_LOG"
+sudo script -qefc "pacman -Su --noconfirm" "$PACMAN_UPDATE_LOG" || STATUS=1
+
+if initramfs_build_failed; then
+  echo -e "\e[31mRebuilding the initramfs failed. Don't reboot until it's fixed - see the output above or $PACMAN_UPDATE_LOG.\e[0m"
+  STATUS=1
+fi
 
 echo "Checking for new packages..."
 install_packages "${SYSTEM_UTILS[@]}"
@@ -20,3 +36,5 @@ install_packages "${MAINTENANCE[@]}"
 install_packages "${DESKTOP[@]}"
 install_packages "${MEDIA[@]}"
 install_packages "${FONTS[@]}"
+
+exit $STATUS