- Arch-dev-public - lists.archlinux.org

Arch Linux in June 2022
by Levente Polyak 08 Jul '22

08 Jul '22

## devtools The new devtools release brings in several new additions. First and foremost the `export-pkgbuild-keys` script in combination with `commitpkg` ensures we export all validpgpkeys into the source tree. The local keys cache will allow us to operate without remote PGP keyservers for the most part [0]. Furthermore the new `diffpkg` tool allows to automatically diff a package file against the current repository version or another package file. Multiple diff modes allow comparing archive listings, the whole content via diffoscope or the .PKGINFO and .BUILDINFO metadata [1]. Last but not least we have added `x86_64_v3` builders as a first step towards more optimized architectures. The scripts and configs can be used for testing purposes [2]. ## archlinux.page In cooperation with SPI and Gandi a new domain has been acquired to host the documentation of projects related to Arch Linux: https://archlinux.page First deployments are already available on the following subdomains: - https://repod.archlinux.page/ - https://monthly-reports.archlinux.page/ ## archiso The official installation ISO image can now boot on IA32 UEFI [3]. ## SPI The annual SPI report for member projects updates has been submitted and will be available shortly through SPI. ## glibc The glibc package ships with the `C.UTF-8` locale available by default. [0] https://gitlab.archlinux.org/archlinux/devtools/-/merge_requests/98 [1] https://gitlab.archlinux.org/archlinux/devtools/-/merge_requests/99 [2] https://gitlab.archlinux.org/archlinux/devtools/-/merge_requests/86 [3] https://gitlab.archlinux.org/archlinux/archiso/-/merge_requests/216

1 0

Gone until August
by Morten Linderud 27 Jun '22

27 Jun '22

Yo, I'll be gone from the start of July until the start of August! Vacation time along with starting a new job over the summer. I also need to recharge some batteries. If you need anything from me please tell me so we can sort it asap. Else I will be reachable if there is something important, but I won't be prioritizing it. The only exception will be a few days at May Contain Hacker in Netherlands next month where I'll be doing a self-organized session and distributing some stickers :) I've included a list of packages I'm the sole maintainer of. Feel free to co-maintain or update it when there are new releases available. Note the list contains core/extra/community packages. -- Morten Linderud PGP: 9C02FF419FECBE16 # Packages $ pkgsearch -m Foxboron -l 1 archlinux-contrib archlinux-repro asp b4 barrier bmusb bucklespring catatonit cni-plugins debugedit docker-scan dqlite flatpak-xdg-utils fsverity-utils fuse-overlayfs gopls go-tools grobi hy i3-gaps influx-cli influxdb jgmenu jq libmd mlocate mopidy nageru nano-syntax-highlighting pass-otp patatt pdfjs perl-data-perl perl-gnupg-interface perl-moox-handlesvia perl-moox-late perl-search-xapian perl-strictures perl-sub-handlesvia perl-type-tiny plocate podman-dnsname protege public-inbox python2-docs python2-typing python-adblock python-babel python-docs python-dotty-dict python-flask-babel python-formencode python-guzzle-sphinx-theme python-halo python-hid python-hjson python-jsonrpclib-pelix python-keyutils python-ldap python-log_symbols python-m2crypto python-milc python-nbxmpp python-nltk python-pew python-pydbus python-pydocstyle python-pydrive python-pyflakes python-pygame python-pykka python-pypeg2 python-pywal python-reportlab python-rope python-send2trash python-shutilwhich python-speaklater python-sphinx-autorun python-spinners python-sqlobject python-sqlparse python-typed-ast python-xlib qmk qprint raft screenkey signing-party staticcheck step-ca tailscale toolbox vim-ultisnips wpa_supplicant xdp-tools

5 4

Arch Linux in May 2022
by Levente Polyak 14 Jun '22

14 Jun '22

## Staff We would like to welcome Slithery [0] among our Forum Admins. Furthermore fukawi2 has stepping down [1] as Forum Admin. We would like to express appreciation for all the work through the years. Last but not least we held our first Mediator election where Andrea Denisse Gómez-Martínez (denisse), David Runge (dvzrv) and Morgan Adamiec (morganamilo) were elected. This has implemented the previously ratified RFC-0009 [2]. An official mediation program in our organization helps to settle disputes and provides a clear escalation path. ## gnome boxes Gnome boxes now supports installing Arch Linux from an ISO using our GeoIP mirror. ## mailman3 We started migrating our mailing lists from mailman2 to mailman3. The migration is handled list by list by DevOps. All mailman3 lists will have their From header kept unmangled, preserving the sent mail as is hence allowing to validate DKIM signatures. [0] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/454 [1] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/456 [2] https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/9

1 0

auth-tarball-from-git: verifying signed git tags without sha256sums=(SKIP)
by kpcyrd 29 May '22

29 May '22

ohai! I blogged about a new tool that can be used to verify a tarball from a signed git tag, while still pinning the sourcecode with >= sha256sum: https://vulns.xyz/2022/05/auth-tarball-from-git/ Let me know what you think - that's all, kpcyrd

6 7

News draft: qmk>=1.1.0-1 update may require manual intervention
by Morten Linderud 29 May '22

29 May '22

The qmk package prior to version 1.1.0-1 was missing the compiled python modules. This has been fixed so the upgrade may need to overwrite any untracked pyc files created. If you get errors like these qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/__init__.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/git.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/helpers.cpython-310.pyc exists in filesystem qmk: /usr/lib/python3.10/site-packages/qmk_cli/__pycache__/script_qmk.cpython-310.pyc exists in filesystem when updating, use pacman -Syu --overwrite /usr/lib/python3.10/site-packages/qmk_cli/\* to perform the upgrade. -- Morten Linderud PGP: 9C02FF419FECBE16

3 2

Arch Linux in April 2022
by Levente Polyak 24 May '22

24 May '22

## Keyring We have started phasing out sha1 keyring signatures and replace some existing keys with more modern variants. Furthermore we have started to enforce @archlinux.org UIDs so we can control the retrieval via wkd in a single place and also allow externals to just trust one official wkd domain. ## Security Team We would like to welcome djerun and raa who will help us in the security team to keep track of all vulnerabilities. ## Wiki We would like to welcome Erus Iluvatar as an ArchWiki Maintainer and Translator [0]. ## Infrastructure We now have a GeoIP based mirror https://geo.mirror.pkgbuild.com for docker images and arch-boxes. After a MR lands in osinfo-db this will allow users on all distro's with an update osinfo-db to use gnome-boxes to install Arch Linux with the "download operating system" option. [0] https://wiki.archlinux.org/title/ArchWiki:News#2022/04/13_-_New_maintainer_… [1] https://gitlab.com/libosinfo/osinfo-db/-/merge_requests/444

1 0

Mailman3 migration and news draft
by Kristian Klausen 17 May '22

17 May '22

Hi all, As hinted in my last message, I'm in the process of migrating our mailing lists from mailman2 to mailman3[1]. We are migrating away from mailman2 as it is basically unmaintained and requires Python 2 which is EOL. At the time of writing the following active lists haven't been migrated: - arch-commits - arch-general - arch-security - aur-dev - aur-general - aur-requests - pacman-contrib - pacman-dev I'm planning to migrate the remaining lists soon and likely migrating arch-general and aur-general as the last two lists. As part of the migration I'm disabling the "mangling" of the mails to keep the DKIM signature intact (i.e. no rewrite of the "from" header nor prefixing the subject with the list name), this means "reply list" must be used when replying to the list. For that reason I think the change is worth a news item, so the users know they must use "reply list" and that they may need to update their filters. I have created a draft here[2] which I hope to post after migrating the remaining lists (feel free to edit). [1] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/59 [2] https://md.archlinux.org/mDhhaF0WRaOPMmyYqifn2Q Cheers, Kristian Klausen

2 1

[arch-dev-public] News draft: Undone replacement of pipewire-media-session with wireplumber
by Jan Alexander Steffens (heftig) 12 May '22

12 May '22

Hi all, I would like to post the following post-mortem to inform our users about the recent mishap with wireplumber. ``` Two days ago the `wireplumber` package was made to replace `pipewire-media-session` as the latter session manager for PipeWire is considered dead upstream and will see no more releases. Unfortunately, this step was premature. Our pipewire audio packages (`pipewire-alsa`, `pipewire-jack` and `pipewire-pulse`) ship configuration that prompt media-session to activate PipeWire's audio features. Without this configuration, PipeWire can be used without interfering with ALSA or PulseAudio when these packages are not installed. Unlike media-session, WirePlumber disregards this mechanism and will always configure PipeWire to grab audio devices. The replacement has been reverted while we attempt to look for a better solution switching to WirePlumber. If you are currently not using PipeWire for audio and `wireplumber` got installed on your system, please reinstall `pipewire-media-session` and reboot to restore audio functionality. pacman -Syu pipewire-media-session ``` Greetings, Jan

1 0

[arch-dev-public] keenerd unresponsiveness
by Jelle van der Waa 12 May '22

12 May '22

Hi All, I've tried to reach out to keenerd a couple of times about dropping some packages of him such as geda-gaf (which lets us drop guile2.0, gtk2 in the future etc.). But I haven't heard back about these mails. David has also tried to contact him about his key expiring and being unable to package after allan's master key will be revoked. Keenerd did vote in recent TU proposals and still committed in May. [1] [2] So with this email I hope keenerd responds to the keyring issue and responds to the inquiries about his old packages. [1] https://aur.archlinux.org/tu/137 [2] https://github.com/archlinux/svntogit-community/commit/dd3ec59e66ede524c5bf… Greetings, Jelle van der Waa

1 0

[arch-dev-public] possible mkinitcpio-31-3 package
by Tobias Powalowski 09 May '22

09 May '22

Hi folks, I would like to bring a new mkinitcpio package to [testing], to finally cleanup my archboot initcpio workaround hacks. Adressing the following issues on FS: - Adding NEW parameter MODULES_DECOMPRESS to mkinitcpio.conf: https://bugs.archlinux.org/task/72882 The old behaviour of decompressing modules stays the default - Adding full symlink support: https://bugs.archlinux.org/task/73493 - Allow reproducable builds in case of /var/cache exists in initramfs: https://bugs.archlinux.org/task/73817 - Added zst firmware compression support for future kernel versions The proposed patch to add is located here: https://pkgbuild.com/~tpowa/symlink-compression.patch Thanks for your feedback. greetings tpowa -- Tobias Powalowski Arch Linux Developer & Package Maintainer (tpowa) https://www.archlinux.org tpowa(a)archlinux.org St. Martin-Apotheke Herzog-Georg-Str. 25 89415 Lauingen https://www.st-martin-apo.de info(a)st-martin-apo.de

3 6