- Arch-dev-public - lists.archlinux.org

Spring cleanup '26
by Antonio Rojas 11 Apr '26

11 Apr '26

It's that time of the year again. Please head to https://archlinux.org/devel/reports/unneeded-orphans/ and adopt packages you want to keep in the repos. For reference, a current list of packages is attached (but this may vary as packages are adopted/disowned). If you adopt a package from the list, make sure to check its dependencies and also adopt them in case they are orphan. This is also a good time to check your out-of-date and/or unmaintained by upstream packages and disown the ones you no longer have interest in/time to maintain, so they can find a maintainer in the official repos or otherwise in AUR. Keeping packages out of date and/or with unfixed issues for months/years is not ideal and can be detrimental to the overall quality of our distro in the long run. I will start dropping packages to AUR in ~ 10 days. archlinux-themes-slim axel b43-fwcutter banner beebeep byobu caja-actions clusterssh coolreader cutefish-screenshot djview dma dnsperf erlang-docs finch focuswriter gcdmaster gephi gobby gtksourceviewmm-docs hepmc hepmc-docs horst inadyn ipv6calc josm lhapdf libbobcat libmemcached-awesome libofa libxml++2.6-docs ls++ ltrace manuskript merkaartor mono-addins nginx-mod-vts nitroshare nrpe openui5 pam-krb5 pencil2d penguin-subtitle-player photoflare php-geoip php-legacy-geoip php-legacy-memcache php-memcache php-memcached polly purple-plugin-pack python-cpplint python-olm python-oset python-sphinxcontrib-bibtex python-sphinxcontrib-spelling python-virtualenvwrapper qjournalctl qnapi quilt radcli reactphysics3d reactphysics3d-docs remind rhino-javadoc rofi-pass slim-themes splix sysdig tinyemu ukui-notification-daemon vim-seti volumeicon wakatime xbindkeys xfce4-artwork xfce4-datetime-plugin xfwm4-themes xplot

4 6

Update on Valve sponsored work in Q1 2026
by Sven-Hendrik Haase 08 Apr '26

08 Apr '26

Hi all, here is a quick progress report on Valve sponsored work in Q1 2026. We figured quarterly reports is a good cadence. ## Signstar - Milestones have been added and adjusted to contain work items for the proposed steps described in [RFC 0059]. - We have split out the mkosi-based image-building setup to the separate [Signstar-OS GitLab] repository. - In a [milestone for YubiHSM2 support] we track the remaining work required to automate the use of a YubiHSM2 as backend with Signstar - In this context we have rewritten the configuration layer, to accommodate several backends and are still busy with a few places to refactor for this larger change. - Improvements to the project's task running integration have been made to simplify this for direct use and CI. - We fixed a couple of bugs in the YubiHSM library (`yubihsm.rs`). - A small proof-of-concept has been designed and implemented for encryption and decryption of Yubico backup format, including parsing and wrapping ed25519 signing keys, AES-128 authorization keys and opaque data. The backup format is compatible with Yubico's own tools. Work is under way to expose these features as a CLI tool. - In a [milestone for a virtualized test setup] we are working towards creating a public environment that can be used by interested developers and package maintainers for test purposes and will at the same time serve as a long-term staging environment for automated updates. Generally, you can follow our work on the [Signstar GitLab] and [Signstar-OS GitLab] projects. ## Buildbtw Following the concessions of the last progress report, we are happy to report that we're now back to full capacity. In the last report, we announced that we had started work on the production version of buildbtw. By now, we have migrated most of the code from the PoC into the new production version and done most of the production-readiness work we set out to do. In contrast to the PoC, all the new production code is reviewed in-depth, documented, and well-tested. - Continuous deployment for review, staging and production environments ([buildbtw-archlinux-org]) - Keycloak roles are automatically mapped to buildbtw roles for permission management - Build graph calculation, diffing, and persistence - GitLab Executor running builds in vmexec and uploads artifacts - vmexec fixes, features, and a lot of testing - Modern responsive web UI - Session management & API keys - Parallel repo updater/cloner Next steps and in-progress work: - Nice bbtw CLI with good developer experience - API docs - Finish up pipeline scheduling - Separate out the repo-updater crate into its own project - Deploy the GitLab Executor As always, you can follow us over at GitLab [gitlab-buildbtw] and specifically the current milestone [buildbtw-milestone]. ## Meeting Notes Meeting notes are available for staff in the [internal-notes] repository. [RFC 0059]: https://rfc.archlinux.page/0059-automated-digital-signing-of-os-artifacts/ [Signstar GitLab]: https://gitlab.archlinux.org/archlinux/signstar [Signstar-OS GitLab]: https://gitlab.archlinux.org/archlinux/signstar-os [buildbtw-archlinux-org]: https://buildbtw.archlinux.org/ [buildbtw-milestone]: https://gitlab.archlinux.org/archlinux/buildbtw/-/milestones/10 [gitlab-buildbtw]: https://gitlab.archlinux.org/archlinux/buildbtw/-/boards/24162 [internal-notes]: https://gitlab.archlinux.org/archlinux/internal-notes/-/tree/main/valve [milestone for a virtualized test setup]: https://gitlab.archlinux.org/archlinux/signstar/-/milestones/6 [milestone for YubiHSM2 support]: https://gitlab.archlinux.org/archlinux/signstar/-/milestones/12

1 0

RFC: Boot standardization and bootchain package
by Morten Linderud 07 Apr '26

07 Apr '26

Yo, A new RFC (request for comment) has been opened here: https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/66 Please visit the above link for discussion. Summary: Standardize and unify the Arch Linux boot chain with `kernel-install` and the `bootchain` package. -- Morten Linderud PGP: 9C02FF419FECBE16

1 0

News draft: kea >= 1:3.0.3-2 update requires manual intervention
by Robin Candau 05 Apr '26

05 Apr '26

Hi everyone, Our Kea (ISC's DHCP server) package is moving to a non-root setup to run services for improved security. This implies a manual intervention for users upgrading from an existing installation. See the news draft below (pad available at https://md.archlinux.org/1TykcWc0TPaz3MAuwfm9Fw) --- Starting with `kea 1:3.0.3-2`, all kea services now run as a dedicated non-privileged `kea` user (instead of `root`) for improved security. This change requires a manual intervention for users upgrading from `kea` <= `1:3.0.3-1` to >= `1:3.0.3-2`, in order to update the permissions and ownership of the kea files and directories accordingly. After upgrading, run the following commands to update permissions and ownership of kea files and directories, then restart the affected services (if they are running): ```bash chmod 755 /etc/kea/{,radius} /usr/include/kea/{,asiodns,asiolink,cc,config,config_backend,cryptolink,d2srv,database,dhcp,dhcp_ddns,dhcpsrv,dhcpsrv/parsers,dns,eval,exceptions,hooks,http,log,log/interprocess,mysql,pgsql,process,process/cfgrpt,stats,tcp,util,util/encode,util/io} /usr/lib/kea/{,hooks} /usr/lib/python3.14/site-packages/kea/{,__pycache__/} /usr/share/kea/{,api,meson-info,scripts,scripts/mysql,scripts/pgsql} chmod 644 /etc/kea/*.conf /etc/kea/radius/* chown kea: /var/lib/kea/* /var/log/kea/* /run/lock/kea/logger_lockfile systemctl try-restart kea-ctrl-agent.service kea-dhcp{4,6,-ddns}.service ``` If necessary, you can run `pacman -Qkk kea` to find any other permission deviations and adjust as needed. --- -- Regards, Robin Candau / Antiz

1 1

cryptsetup 2.8.5-1 pulled from core-testing
by Christian Hesse 02 Apr '26

02 Apr '26

Hello everybody, I pushed a bad package of cryptsetup to core-testing. Pulled it from the repository after just 72 seconds... Anyway - if you managed it install it please downgrade to the last stable version still in core. Already reported the issue: https://gitlab.com/cryptsetup/cryptsetup/-/work_items/984 -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}

1 0

News draft: iptables now defaults to the nft backend
by Felix Yan 02 Apr '26

02 Apr '26

The old iptables-nft package name is replaced by iptables, and the legacy backend is available as iptables-legacy. When switching packages (among iptables-nft, iptables, iptables-legacy), check for .pacsave files in /etc/iptables/ and restore your rules if needed: - /etc/iptables/iptables.rules.pacsave - /etc/iptables/ip6tables.rules.pacsave Most setups should work unchanged, but users relying on uncommon xtables extensions or legacy-only behavior should test carefully and use iptables-legacy if required. -- Regards, Felix Yan

1 0

util-linux v2.42 pre-releases
by Christian Hesse 01 Apr '26

01 Apr '26

Hello everybody, Karel Zak has pushed the first util-linux pre-release for the upcoming v2.42 release. Please see the NEWS [0] for details. As announced in the PKGBUILD [1] I have prepared packages and pushed them to my personal testing repository. Have a look at this if you are brave and want to have a first look. Happy testing! [0] https://github.com/util-linux/util-linux/blob/stable/v2.42/NEWS [1] https://gitlab.archlinux.org/archlinux/packaging/packages/util-linux/-/blob… -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}

1 2

HEADS UP: Qt 6.11 in testing
by Antonio Rojas 23 Mar '26

23 Mar '26

As usual, this means the anything compiled against it will automatically depend on it so will have to stay in testing until Qt itself moves. With 6.11, besides the usual private API changes, there is an additional potentially breaking change due to a QWayland native interface version bump. The symptoms may vary from programs not starting to subtle bugs, but the issue can be easily identified by the message "warning: Native interface revision mismatch (requested 1 / available 2) for interface QWaylandApplication" printed in the application's logs. Unfortunately, it is not easy to figure out in advance which applications will be affected. So please test Qt applications thoroughly, and if you notice an affected one, rebuild it with Qt 6.11 in testing and add it to the todo list https://archlinux.org/todo/additional-qt-611-rebuild/[1] to make sure it's moved to stable along with Qt. -------- [1] https://archlinux.org/todo/additional-qt-611-rebuild/

1 0

Removal of remaining packages signed by 86CFFCA918CF3AF47147588051E8B148A9999C34
by David Runge 20 Mar '26

20 Mar '26

Hi all, a rebuild of the remaining packages signed by Evangelos Foutras has been started in January[1]. It unfortunately still has six remaining packages: - dosemu - icoutils - libcdaudio - netperf - tsocks - wipe None of the above are used by other packages (any longer) and fail to build (for various reasons) and are mostly just extremely old/unmaintained pieces of software. To not block the revocation of the certificate [2] further I suggest to remove those remaining packages from the repositories. If you intend to keep any of the above packages in the repositories, please fix and rebuild them before 2026-03-22. I will move any remaining packages to the AUR on that day. Best, David [1] https://archlinux.org/todo/rebuild-packages-signed-by-86cffca918cf3af471475… [2] https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/issues/314

3 2

systemd v260 pre-releases
by Christian Hesse 17 Mar '26

17 Mar '26

Hello everybody, the systemd development team has pushed the first pre-release for the upcoming v260 release. Please see the NEWS [0] for details. As announced in the PKGBUILD [1] I have prepared packages and pushed them to my personal testing repository. Have a look at this if you are brave and want to have a first look. Happy testing! [0] https://github.com/systemd/systemd/blob/v260-rc1/NEWS [1] https://gitlab.archlinux.org/archlinux/packaging/packages/systemd/-/blob/ma… -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}

1 2