March 2022 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] News draft: Keycloak 17.0.0-3 update requires manual reconfiguration
by Leonidas Spyropoulos 07 Mar '22

07 Mar '22

The `keycloak` package prior to version 17.0.0-3 was running with WildFly server. Since upstream moved to Quarkus, Arch Linux follows this approach. This means current configurations need to be migrated. The new config location needs to be adjusted from the old `.xml` format to the new `.conf` ``` /etc/keycloak/keycloak.conf ``` The new $HOME of Keycloak is in `/usr/share/java/keycloak` See Keycloak [migration docs](https://www.keycloak.org/migration/migrating-to-quarkus) and Keycloak Quarkus [server docs](https://www.keycloak.org/server/configuration) -- Leonidas Spyropoulos PGP: 59E43E106B247368

1 1

[arch-dev-public] Moving base-devel dependencies to [core]
by Allan McRae 04 Mar '22

04 Mar '22

Hi all, I notice when using devtools, the following packages from [extra] get pulled into our clean build root: extra/gc extra/guile extra/libcroco extra/libsysprof-capture extra/libxml2 These are all dependencies of base-devel packages. I'd like to move them to [core] so they are captured by the signoff process. Thank you for your lack of objection. :) Allan

2 3

[arch-dev-public] Away for most of March
by David Runge 03 Mar '22

03 Mar '22

Hi all, I'll be away for most of March and beginning of April. I still have time sporadically over the next week but will likely not be available for packaging or other things afterwards until the beginning of April. Feel free to upgrade packages that are out-of-date while I'm away. Best, David -- https://sleepmap.de

1 0

[arch-dev-public] RFC: Store PGP keys for source file signatures in SVN
by Allan McRae 02 Mar '22

02 Mar '22

A new RFC (request for comment) has been opened here: https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/11 Please visit the above link for discussion. Summary: Store the PGP signing keys listed in a PKGBUILDs `validpgpkeys` array in the trunk directory of SVN. Motivation: The PGP keyserver infrastructure has become increasingly brittle over recent years. This can make helping with updates or rebuilds of packages difficult due to lack of access to the valid signing key. Having the signing key exported along side the PKGBUILD would allow for anybody to import the key into their keyring and verify the source.

1 0