- Arch-dev-public - lists.archlinux.org

Arch Linux in May 2022
by Levente Polyak 14 Jun '22

14 Jun '22

## Staff We would like to welcome Slithery [0] among our Forum Admins. Furthermore fukawi2 has stepping down [1] as Forum Admin. We would like to express appreciation for all the work through the years. Last but not least we held our first Mediator election where Andrea Denisse Gómez-Martínez (denisse), David Runge (dvzrv) and Morgan Adamiec (morganamilo) were elected. This has implemented the previously ratified RFC-0009 [2]. An official mediation program in our organization helps to settle disputes and provides a clear escalation path. ## gnome boxes Gnome boxes now supports installing Arch Linux from an ISO using our GeoIP mirror. ## mailman3 We started migrating our mailing lists from mailman2 to mailman3. The migration is handled list by list by DevOps. All mailman3 lists will have their From header kept unmangled, preserving the sent mail as is hence allowing to validate DKIM signatures. [0] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/454 [1] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/456 [2] https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/9

1 0

auth-tarball-from-git: verifying signed git tags without sha256sums=(SKIP)
by kpcyrd 29 May '22

29 May '22

ohai! I blogged about a new tool that can be used to verify a tarball from a signed git tag, while still pinning the sourcecode with >= sha256sum: https://vulns.xyz/2022/05/auth-tarball-from-git/ Let me know what you think - that's all, kpcyrd

6 7

News draft: qmk>=1.1.0-1 update may require manual intervention
by Morten Linderud 29 May '22

29 May '22

The qmk package prior to version 1.1.0-1 was missing the compiled python modules. This has been fixed so the upgrade may need to overwrite any untracked pyc files created. If you get errors like these qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/__init__.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/git.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/helpers.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/script_qmk.cpython-310.pyc exists in filesystem when updating, use pacman -Syu --overwrite /usr/lib/python3.10/site-packages/qmk_cli/\* to perform the upgrade. -- Morten Linderud PGP: 9C02FF419FECBE16

3 2

Arch Linux in April 2022
by Levente Polyak 24 May '22

24 May '22

## Keyring We have started phasing out sha1 keyring signatures and replace some existing keys with more modern variants. Furthermore we have started to enforce @archlinux.org UIDs so we can control the retrieval via wkd in a single place and also allow externals to just trust one official wkd domain. ## Security Team We would like to welcome djerun and raa who will help us in the security team to keep track of all vulnerabilities. ## Wiki We would like to welcome Erus Iluvatar as an ArchWiki Maintainer and Translator [0]. ## Infrastructure We now have a GeoIP based mirror https://geo.mirror.pkgbuild.com for docker images and arch-boxes. After a MR lands in osinfo-db this will allow users on all distro's with an update osinfo-db to use gnome-boxes to install Arch Linux with the "download operating system" option. [0] https://wiki.archlinux.org/title/ArchWiki:News#2022/04/13_-_New_maintainer_… [1] https://gitlab.com/libosinfo/osinfo-db/-/merge_requests/444

1 0

Mailman3 migration and news draft
by Kristian Klausen 17 May '22

17 May '22

Hi all, As hinted in my last message, I'm in the process of migrating our mailing lists from mailman2 to mailman3[1]. We are migrating away from mailman2 as it is basically unmaintained and requires Python 2 which is EOL. At the time of writing the following active lists haven't been migrated: - arch-commits - arch-general - arch-security - aur-dev - aur-general - aur-requests - pacman-contrib - pacman-dev I'm planning to migrate the remaining lists soon and likely migrating arch-general and aur-general as the last two lists. As part of the migration I'm disabling the "mangling" of the mails to keep the DKIM signature intact (i.e. no rewrite of the "from" header nor prefixing the subject with the list name), this means "reply list" must be used when replying to the list. For that reason I think the change is worth a news item, so the users know they must use "reply list" and that they may need to update their filters. I have created a draft here[2] which I hope to post after migrating the remaining lists (feel free to edit). [1] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/59 [2] https://md.archlinux.org/mDhhaF0WRaOPMmyYqifn2Q Cheers, Kristian Klausen

2 1

[arch-dev-public] News draft: Undone replacement of pipewire-media-session with wireplumber
by Jan Alexander Steffens (heftig) 12 May '22

12 May '22

Hi all, I would like to post the following post-mortem to inform our users about the recent mishap with wireplumber. ``` Two days ago the `wireplumber` package was made to replace `pipewire-media-session` as the latter session manager for PipeWire is considered dead upstream and will see no more releases. Unfortunately, this step was premature. Our pipewire audio packages (`pipewire-alsa`, `pipewire-jack` and `pipewire-pulse`) ship configuration that prompt media-session to activate PipeWire's audio features. Without this configuration, PipeWire can be used without interfering with ALSA or PulseAudio when these packages are not installed. Unlike media-session, WirePlumber disregards this mechanism and will always configure PipeWire to grab audio devices. The replacement has been reverted while we attempt to look for a better solution switching to WirePlumber. If you are currently not using PipeWire for audio and `wireplumber` got installed on your system, please reinstall `pipewire-media-session` and reboot to restore audio functionality. pacman -Syu pipewire-media-session ``` Greetings, Jan

1 0

[arch-dev-public] keenerd unresponsiveness
by Jelle van der Waa 12 May '22

12 May '22

Hi All, I've tried to reach out to keenerd a couple of times about dropping some packages of him such as geda-gaf (which lets us drop guile2.0, gtk2 in the future etc.). But I haven't heard back about these mails. David has also tried to contact him about his key expiring and being unable to package after allan's master key will be revoked. Keenerd did vote in recent TU proposals and still committed in May. [1] [2] So with this email I hope keenerd responds to the keyring issue and responds to the inquiries about his old packages. [1] https://aur.archlinux.org/tu/137 [2] https://github.com/archlinux/svntogit-community/commit/dd3ec59e66ede524c5bf… Greetings, Jelle van der Waa

1 0

[arch-dev-public] possible mkinitcpio-31-3 package
by Tobias Powalowski 09 May '22

09 May '22

Hi folks, I would like to bring a new mkinitcpio package to [testing], to finally cleanup my archboot initcpio workaround hacks. Adressing the following issues on FS: - Adding NEW parameter MODULES_DECOMPRESS to mkinitcpio.conf: https://bugs.archlinux.org/task/72882 The old behaviour of decompressing modules stays the default - Adding full symlink support: https://bugs.archlinux.org/task/73493 - Allow reproducable builds in case of /var/cache exists in initramfs: https://bugs.archlinux.org/task/73817 - Added zst firmware compression support for future kernel versions The proposed patch to add is located here: https://pkgbuild.com/~tpowa/symlink-compression.patch Thanks for your feedback. greetings tpowa -- Tobias Powalowski Arch Linux Developer & Package Maintainer (tpowa) https://www.archlinux.org tpowa(a)archlinux.org St. Martin-Apotheke Herzog-Georg-Str. 25 89415 Lauingen https://www.st-martin-apo.de info(a)st-martin-apo.de

3 6

[arch-dev-public] Upcoming PHP 8.1 update
by Pierre Schmitz 25 Apr '22

25 Apr '22

Hi all, a little heads up as it takes longer than expected. I'll start the PHP 8.1 update and the required rebuilds soon. I noticed some unexpected incompatibilities and I'd like to look into these first. I'll also evaluate if we could drop the php7 packages at the same time. Greetings, Pierre -- Pierre Schmitz, https://pierre-schmitz.com

7 28

[arch-dev-public] News draft: QEMU >= 7.0.0 may need manual intervention
by David Runge 23 Apr '22

23 Apr '22

Hi all, with qemu 7.0.0 now in [staging] we have a more extensive split package setup (see accompanying TODO [1]). Under certain circumstances this will require manual intervention (or rather a specific upgrade) to regain the previous functionality: ``` With the update to qemu 7.0.0 the package has been turned into a more fine grained split package. The `qemu` package now only carries a few common files and tracks all of its leaf packages as optional dependencies. Much of the previous summarized functionality is now available via meta packages: * The functionality of `qemu` prior to 7.0.0 is replaced by `qemu-desktop` (**the transition to this package is manual**!) * The functionality of `qemu-headless` prior to 7.0.0 is replaced by `qemu-base` (the transition to this package is automatic). * The functionality of `qemu-arch-extra` and `qemu-headless-arch-extra` prior to 7.0.0 is replaced by `qemu-emulators-full` (the transition to this package is automatic). Furthermore, the meta package `qemu-full` provides all qemu related packages (excluding `qemu-docs`). As such, users that relied on the functionality of the `qemu` package prior to 7.0.0 should update using `sudo pacman -Syu qemu-desktop`. ``` Best, David [1] https://archlinux.org/todo/qemu-700-packaging-changes/ -- https://sleepmap.de

2 4