May 2022 - Arch-dev-public - lists.archlinux.org

Re: [arch-dev-public] openssl 3.0
by Pierre Schmitz 15 Dec '22

15 Dec '22

Hi Jelle, (also forwarding to dev-public) definitely yes, OpenSSL 3.0 is on my wish list! :-) I did not want to jump on it at day one though. Even the last minor updates were quite painful and we still have packages requiring version 1.0 and are still not compatible with 1.1. While they claim that most packages should work with a recompile, it would be nice to actually know which packages are not compatible. This should help whether we need another compatibility package are would be able to just replace openssl 1.1 with version 3. I know about foutrelis' awesome rebuilder script, but I wonder if we have something similar that I just could run for half a day to get an idea which package would break and which wont? Like a dry run that wont commit anything. If no such thing exists yet, I might have a look myself. Greetings, Pierre On Wed, Nov 3, 2021 at 9:14 PM Jelle van der Waa <jelle(a)vdwaa.nl> wrote: > > Hi Pierre, > > Shall we start an openssl 3.0 rebuild soon? Fedora/Debian/Alpine seens > to have already started. > > https://fedoraproject.org/wiki/Changes/OpenSSL3.0 > > Greetings, > > Jelle -- Pierre Schmitz, https://pierre-schmitz.com

10 19

The future of arch-commits
by Kristian Klausen 12 Sep '22

12 Sep '22

Hi all, I'm in the process of migrating our mailing lists from mailman2 to mailman3[1]. Migrating arch-commits could be a challenge though (+1 million mails) and just deprecating it would be easier :) So, is there any reasons for not deprecating it? How are you using it and could that need be met in some other (and perhaps better) way? [1] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/59 Cheers, Kristian Klausen

4 5

auth-tarball-from-git: verifying signed git tags without sha256sums=(SKIP)
by kpcyrd 30 May '22

30 May '22

ohai! I blogged about a new tool that can be used to verify a tarball from a signed git tag, while still pinning the sourcecode with >= sha256sum: https://vulns.xyz/2022/05/auth-tarball-from-git/ Let me know what you think - that's all, kpcyrd

6 7

News draft: qmk>=1.1.0-1 update may require manual intervention
by Morten Linderud 29 May '22

29 May '22

The qmk package prior to version 1.1.0-1 was missing the compiled python modules. This has been fixed so the upgrade may need to overwrite any untracked pyc files created. If you get errors like these qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/__init__.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/git.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/helpers.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/script_qmk.cpython-310.pyc exists in filesystem when updating, use pacman -Syu --overwrite /usr/lib/python3.10/site-packages/qmk_cli/\* to perform the upgrade. -- Morten Linderud PGP: 9C02FF419FECBE16

3 2

Arch Linux in April 2022
by Levente Polyak 24 May '22

24 May '22

## Keyring We have started phasing out sha1 keyring signatures and replace some existing keys with more modern variants. Furthermore we have started to enforce @archlinux.org UIDs so we can control the retrieval via wkd in a single place and also allow externals to just trust one official wkd domain. ## Security Team We would like to welcome djerun and raa who will help us in the security team to keep track of all vulnerabilities. ## Wiki We would like to welcome Erus Iluvatar as an ArchWiki Maintainer and Translator [0]. ## Infrastructure We now have a GeoIP based mirror https://geo.mirror.pkgbuild.com for docker images and arch-boxes. After a MR lands in osinfo-db this will allow users on all distro's with an update osinfo-db to use gnome-boxes to install Arch Linux with the "download operating system" option. [0] https://wiki.archlinux.org/title/ArchWiki:News#2022/04/13_-_New_maintainer_… [1] https://gitlab.com/libosinfo/osinfo-db/-/merge_requests/444

1 0

Mailman3 migration and news draft
by Kristian Klausen 17 May '22

17 May '22

Hi all, As hinted in my last message, I'm in the process of migrating our mailing lists from mailman2 to mailman3[1]. We are migrating away from mailman2 as it is basically unmaintained and requires Python 2 which is EOL. At the time of writing the following active lists haven't been migrated: - arch-commits - arch-general - arch-security - aur-dev - aur-general - aur-requests - pacman-contrib - pacman-dev I'm planning to migrate the remaining lists soon and likely migrating arch-general and aur-general as the last two lists. As part of the migration I'm disabling the "mangling" of the mails to keep the DKIM signature intact (i.e. no rewrite of the "from" header nor prefixing the subject with the list name), this means "reply list" must be used when replying to the list. For that reason I think the change is worth a news item, so the users know they must use "reply list" and that they may need to update their filters. I have created a draft here[2] which I hope to post after migrating the remaining lists (feel free to edit). [1] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/59 [2] https://md.archlinux.org/mDhhaF0WRaOPMmyYqifn2Q Cheers, Kristian Klausen

2 1

[arch-dev-public] News draft: Undone replacement of pipewire-media-session with wireplumber
by Jan Alexander Steffens (heftig) 12 May '22

12 May '22

Hi all, I would like to post the following post-mortem to inform our users about the recent mishap with wireplumber. ``` Two days ago the `wireplumber` package was made to replace `pipewire-media-session` as the latter session manager for PipeWire is considered dead upstream and will see no more releases. Unfortunately, this step was premature. Our pipewire audio packages (`pipewire-alsa`, `pipewire-jack` and `pipewire-pulse`) ship configuration that prompt media-session to activate PipeWire's audio features. Without this configuration, PipeWire can be used without interfering with ALSA or PulseAudio when these packages are not installed. Unlike media-session, WirePlumber disregards this mechanism and will always configure PipeWire to grab audio devices. The replacement has been reverted while we attempt to look for a better solution switching to WirePlumber. If you are currently not using PipeWire for audio and `wireplumber` got installed on your system, please reinstall `pipewire-media-session` and reboot to restore audio functionality. pacman -Syu pipewire-media-session ``` Greetings, Jan

1 0

[arch-dev-public] keenerd unresponsiveness
by Jelle van der Waa 12 May '22

12 May '22

Hi All, I've tried to reach out to keenerd a couple of times about dropping some packages of him such as geda-gaf (which lets us drop guile2.0, gtk2 in the future etc.). But I haven't heard back about these mails. David has also tried to contact him about his key expiring and being unable to package after allan's master key will be revoked. Keenerd did vote in recent TU proposals and still committed in May. [1] [2] So with this email I hope keenerd responds to the keyring issue and responds to the inquiries about his old packages. [1] https://aur.archlinux.org/tu/137 [2] https://github.com/archlinux/svntogit-community/commit/dd3ec59e66ede524c5bf… Greetings, Jelle van der Waa

1 0

[arch-dev-public] possible mkinitcpio-31-3 package
by Tobias Powalowski 09 May '22

09 May '22

Hi folks, I would like to bring a new mkinitcpio package to [testing], to finally cleanup my archboot initcpio workaround hacks. Adressing the following issues on FS: - Adding NEW parameter MODULES_DECOMPRESS to mkinitcpio.conf: https://bugs.archlinux.org/task/72882 The old behaviour of decompressing modules stays the default - Adding full symlink support: https://bugs.archlinux.org/task/73493 - Allow reproducable builds in case of /var/cache exists in initramfs: https://bugs.archlinux.org/task/73817 - Added zst firmware compression support for future kernel versions The proposed patch to add is located here: https://pkgbuild.com/~tpowa/symlink-compression.patch Thanks for your feedback. greetings tpowa -- Tobias Powalowski Arch Linux Developer & Package Maintainer (tpowa) https://www.archlinux.org tpowa(a)archlinux.org St. Martin-Apotheke Herzog-Georg-Str. 25 89415 Lauingen https://www.st-martin-apo.de info(a)st-martin-apo.de

3 6