tweak: upstream fixes for gpg location and mirror url