- Arch-dev-public - lists.archlinux.org

[arch-dev-public] News draft: Undone replacement of pipewire-media-session with wireplumber
by Jan Alexander Steffens (heftig) 12 May '22

12 May '22

Hi all, I would like to post the following post-mortem to inform our users about the recent mishap with wireplumber. ``` Two days ago the `wireplumber` package was made to replace `pipewire-media-session` as the latter session manager for PipeWire is considered dead upstream and will see no more releases. Unfortunately, this step was premature. Our pipewire audio packages (`pipewire-alsa`, `pipewire-jack` and `pipewire-pulse`) ship configuration that prompt media-session to activate PipeWire's audio features. Without this configuration, PipeWire can be used without interfering with ALSA or PulseAudio when these packages are not installed. Unlike media-session, WirePlumber disregards this mechanism and will always configure PipeWire to grab audio devices. The replacement has been reverted while we attempt to look for a better solution switching to WirePlumber. If you are currently not using PipeWire for audio and `wireplumber` got installed on your system, please reinstall `pipewire-media-session` and reboot to restore audio functionality. pacman -Syu pipewire-media-session ``` Greetings, Jan

1 0

[arch-dev-public] keenerd unresponsiveness
by Jelle van der Waa 12 May '22

12 May '22

Hi All, I've tried to reach out to keenerd a couple of times about dropping some packages of him such as geda-gaf (which lets us drop guile2.0, gtk2 in the future etc.). But I haven't heard back about these mails. David has also tried to contact him about his key expiring and being unable to package after allan's master key will be revoked. Keenerd did vote in recent TU proposals and still committed in May. [1] [2] So with this email I hope keenerd responds to the keyring issue and responds to the inquiries about his old packages. [1] https://aur.archlinux.org/tu/137 [2] https://github.com/archlinux/svntogit-community/commit/dd3ec59e66ede524c5bf… Greetings, Jelle van der Waa

1 0

[arch-dev-public] possible mkinitcpio-31-3 package
by Tobias Powalowski 09 May '22

09 May '22

Hi folks, I would like to bring a new mkinitcpio package to [testing], to finally cleanup my archboot initcpio workaround hacks. Adressing the following issues on FS: - Adding NEW parameter MODULES_DECOMPRESS to mkinitcpio.conf: https://bugs.archlinux.org/task/72882 The old behaviour of decompressing modules stays the default - Adding full symlink support: https://bugs.archlinux.org/task/73493 - Allow reproducable builds in case of /var/cache exists in initramfs: https://bugs.archlinux.org/task/73817 - Added zst firmware compression support for future kernel versions The proposed patch to add is located here: https://pkgbuild.com/~tpowa/symlink-compression.patch Thanks for your feedback. greetings tpowa -- Tobias Powalowski Arch Linux Developer & Package Maintainer (tpowa) https://www.archlinux.org tpowa(a)archlinux.org St. Martin-Apotheke Herzog-Georg-Str. 25 89415 Lauingen https://www.st-martin-apo.de info(a)st-martin-apo.de

3 6

[arch-dev-public] Upcoming PHP 8.1 update
by Pierre Schmitz 25 Apr '22

25 Apr '22

Hi all, a little heads up as it takes longer than expected. I'll start the PHP 8.1 update and the required rebuilds soon. I noticed some unexpected incompatibilities and I'd like to look into these first. I'll also evaluate if we could drop the php7 packages at the same time. Greetings, Pierre -- Pierre Schmitz, https://pierre-schmitz.com

7 28

[arch-dev-public] News draft: QEMU >= 7.0.0 may need manual intervention
by David Runge 23 Apr '22

23 Apr '22

Hi all, with qemu 7.0.0 now in [staging] we have a more extensive split package setup (see accompanying TODO [1]). Under certain circumstances this will require manual intervention (or rather a specific upgrade) to regain the previous functionality: ``` With the update to qemu 7.0.0 the package has been turned into a more fine grained split package. The `qemu` package now only carries a few common files and tracks all of its leaf packages as optional dependencies. Much of the previous summarized functionality is now available via meta packages: * The functionality of `qemu` prior to 7.0.0 is replaced by `qemu-desktop` (**the transition to this package is manual**!) * The functionality of `qemu-headless` prior to 7.0.0 is replaced by `qemu-base` (the transition to this package is automatic). * The functionality of `qemu-arch-extra` and `qemu-headless-arch-extra` prior to 7.0.0 is replaced by `qemu-emulators-full` (the transition to this package is automatic). Furthermore, the meta package `qemu-full` provides all qemu related packages (excluding `qemu-docs`). As such, users that relied on the functionality of the `qemu` package prior to 7.0.0 should update using `sudo pacman -Syu qemu-desktop`. ``` Best, David [1] https://archlinux.org/todo/qemu-700-packaging-changes/ -- https://sleepmap.de

2 4

[arch-dev-public] Spring cleanup '22
by Antonio Rojas 08 Apr '22

08 Apr '22

Hello, Spring (in the northern hemisphere) is here and with it our yearly orphans cleanup. Please head to https://archlinux.org/devel/reports/unneeded-orphans/ and adopt packages that you'd like to keep in the repos. This is also a good oportunity to disown any packages you no longer want to maintain, so others can adopt them or they can be dropped if nobody is interested. If any non-dev TU wants to maintain some orphan in [extra], reply here and I'll move it to [community]. I will start dropping the leftovers to AUR in about 10 days.

4 6

Re: [arch-dev-public] Bi-weekly arch-repo-management meeting
by David Runge 06 Apr '22

06 Apr '22

On 2022-04-06 15:49:54 (+0200), Luna Jernberg wrote: > Hey! > Will miss the meeting today, and missed the one 2 weeks ago (if there was > one?) > But would gladly read the writeup or see a recording when i have time Hi! Yes, see the mail on archlinux-projects [1]. However, I might be a few minutes late myself. :) Best, David [1] https://lists.archlinux.org/pipermail/arch-projects/2022-March/005435.html -- https://sleepmap.de

1 0

[arch-dev-public] Arch Linux in March 2022
by Levente Polyak 05 Apr '22

05 Apr '22

## Staff We would like to welcome sudoforge among the Trusted Users [0]. ## RFC We have ratified a RFC to store upstream signing keys alongside the packaging sources [1]. This will allow easier successive builds without the need to continuously rely on remote keyservers to retrieve the upstream signing keys. ## security-tracker After a lot of work and with the amazing help of multiple people we have finally finished the SSO integration of our security tracker [2][3]. This is one step closer to a uniform authentication and role management across our services. Furthermore several incompatibility changes have been resolved which finally allowed us to upgrade to SQLAlchemy 1.4. [0] https://lists.archlinux.org/pipermail/aur-general/2022-March/036842.html [1] https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/11 [2] https://github.com/archlinux/arch-security-tracker/pull/181 [3] https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/545

1 0

[arch-dev-public] Disowning Atom
by Nicola Squartini 30 Mar '22

30 Mar '22

Hi, I'm disowning the following packages: apm atom electron9 Atom is basically a rotten project, it gets minimal updates and relies on obsolete dependencies, so it has become a burden to maintain. Let me know if you intend to adopt it. Thanks. Regards, Nicola

2 3

[arch-dev-public] RFC Final Comment Period: Store PGP keys for source file signatures alongside PKGBUILDs
by Allan McRae 27 Mar '22

27 Mar '22

An RFC has now entered Final Comment Period. In 14 days, discussion will end and the proposal will either be accepted, rejected or withdrawn: https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/11 Please visit the above link for discussion. Summary: Store the PGP signing keys listed in a PKGBUILDs `validpgpkeys` array alongside the PKGBUILD in our VCS. Motivation: The PGP keyserver infrastructure has become increasingly brittle over recent years. This can make helping with updates or rebuilds of packages difficult due to lack of access to the valid signing key. Having the signing key exported alongside the PKGBUILD would allow for anybody to import the key into their keyring and verify the source.

1 1