- Arch-dev-public - lists.archlinux.org

Remove GTK2 from the official repositories
by Balló György 26 Oct '25

26 Oct '25

Hi all, I think we've reached the point when we can remove the very old GTK2 package from the official repositories. I recently dropped the GTK2 version of LXDE, and there are only a few applications left that still depend on GTK2: - alltray - amsynth - bless - calf - eq10q - gimp-nufraw - gkrellm - gpsim - gtk2fontsel - gtk-chtheme - hexchat - hexter - leafpad - mono-tools - nitrogen - nspluginwrapper - osdlyrics - parcellite - pidgin - sbxkb - trayer - xboard - xdialog - xlockmore Most of these have no active development a long time ago. If no one has objections, I'll drop these packages to AUR in the next days if it's not possible to build them without GTK2. Any opinion? -- György Balló Package Maintainer

2 2

New CDN based mirror now available: fastly.mirror.pkgbuild.com
by gromit 20 Oct '25

20 Oct '25

Hello everyone, we [have now setup][0][1] an additional option for a worldwide mirror: https://fastly.mirror.pkgbuild.com With the caching done by the Fastly CDN, the bandwidth speeds and time to first byte should be quite good all around the globe, especially as more and more people start using the service. Thanks a lot to Fastly for sponsoring us with free access to their services! This new mirror can be seen as an orthogonal approach to the already existing, also DevOps administered geomirrors, which will not be replaced by the CDN based mirror. Please check it out and [let us know][2] if you find any problems with it! Kind regards, Antiz, Pitastrudl and gromit [0]: https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/1031 [1]: https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/639 [2]: https://gitlab.archlinux.org/archlinux/infrastructure/-/issues

1 0

GHC 9.6.6 enters [extra-testing]
by Felix Yan 13 Oct '25

13 Oct '25

Hi all, The GHC 9.6.x updates have now entered [extra-testing]. This time, four packages have been retired, so please remove them manually if you have them installed: - haskell-configfile - haskell-monad-gen - haskell-monad-journal - haskell-success Again a special thanks to @Vekhir for helping me in preparing many batches of updates, including this one. Please let me know if you encounter any issues. Otherwise, the batch will be moved to [extra] in a few days. -- Regards, Felix Yan

1 0

New filesystem in core-testing with fully locked accounts
by David Runge 12 Oct '25

12 Oct '25

Hi all, please note, that filesystem 2025.10.12 in core-testing now features fully locked user accounts [1] based on the ongoing related TODO [2]. In case you run into any issues with those user accounts because of this, please report them as ticket on the package. Best, David [1]: https://gitlab.archlinux.org/archlinux/packaging/packages/filesystem/-/comm… [2]: https://archlinux.org/todo/change-sysusers-to-fully-locked-system-accounts/

1 0

HEADS UP: Qt 6.10 in [extra-testing]
by Antonio Rojas 07 Oct '25

07 Oct '25

This is a reminder that anything compiled against 6.10 will automatically depend on it, so it will have to stay in testing until Qt itself moves.

1 0

arch-install-scripts v30
by Morten Linderud 27 Sep '25

27 Sep '25

Yo, I've cut a new release of arch-install-scripts ahead of next months ISO. Changes and features in the new release: * Removal of `DownloadUser` from `pacman.conf` in `pacstrap` to prevent errors where the `alpm` user does not have access to the given path. * `arch-chroot` now has a new flag, `-S`, which uses `systemd-run` under the hood. * Uses the new `X-mount.nocanonicalize=target` option from `util-linux` to mount symlinks. * `genfstab` now properly understand `zram` swap targets, and will ignore them. * `pacstrap` now respects all paths from `pacman.conf` when initializing a new chroot. * Shellcheck no longer makes complaints about the project. It's been pushed to `[testing]`. https://gitlab.archlinux.org/archlinux/arch-install-scripts/-/releases/v30 Cheers. -- Morten Linderud PGP: 9C02FF419FECBE16

1 0

ffmpeg 8.0 rebuild on hold
by Lukas Fleischer 24 Sep '25

24 Sep '25

Hi all, The ffmpeg 8.0 rebuild [1] overlaps with other pending rebuilds. Those rebuilds need to be completed and moved out of the staging repositories first. Please do not continue working on the ffmpeg rebuild until the other rebuilds are completed. We'll send an update once things are ready. Thanks! Lukas [1] https://archlinux.org/todo/ffmpeg-80-and-friends/

1 1

RFC: buildbtw build service
by Rafael Epplée 23 Sep '25

23 Sep '25

Hey all, A new RFC (request for comment) has been opened here: https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/63 Please visit the above link for discussion. Summary: This RFC proposes a first vertical slice of a build service to streamline rebuilding packages with many reverse dependencies. It tackles problems like repetitive manual work, blocking staging repos, missed reverse dependencies and lack of shared context like build logs. Goals include automating rebuilds and build ordering, enabling unattended builds, and providing isolated repos for parallel work. Builds run in secure virtual machines via a GitLab executor, organized into namespaces with histories and automatic dependency graphs. Interaction happens through CLI (`pkgctl`) and a web UI with SSO. - Cheers, Rafael

1 0

systemd v258 pre-releases
by Christian Hesse 17 Sep '25

17 Sep '25

Hello everybody, the systemd development team has pushed the first pre-release for the upcoming v258 release. It is a massive feature release, with a huge amount of new functionality and goodies. Please see the NEWS [0] for details. As announced in the PKGBUILD [1] I have prepared packages and pushed them to my personal testing repository. Have a look at this if you ware brave and want to have a first look. The comes with an updated mkinitcpio package, cherry-picking systemd-related changes. We should merge these before v258 release. Happy testing! [0] https://github.com/systemd/systemd/blob/v258-rc1/NEWS [1] https://gitlab.archlinux.org/archlinux/packaging/packages/systemd/-/blob/ma… [2] https://gitlab.archlinux.org/archlinux/mkinitcpio/mkinitcpio/-/merge_reques… -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}

1 4

Update on Valve sponsored work in July 2025
by Rafael Epplée 08 Sep '25

08 Sep '25

Hi all, here is a quick progress report on Valve sponsored work in July 2025. ## Signstar Based on feedback from reviewers, we have added further research and data to [RFC 0059] which provides information on specific costs and technological differences between discussed options. Due to reviewer concerns with regards to colocation hosting feasibility and costs we have pivoted to support the YubiHSM 2 as default backend for the proposed solution. The existing NetHSM integration will remain for as long as possible to potentially be re-evaluated in the future. The code coverage setup has been split so that unit tests and integration tests each have their own report. In an additional step, we have also added coverage reporting for use-cases in which tests have to switch users. Logging to systemd journal with rich metadata has been added, in case journald is available in the given environment. An issue with doctests coverage being broken for multi-member projects has been investigated (see [cargo-llvm-cov#440]). A large part of the NetHSM handling backend has been merged and released, which allows to synchronize a NetHSM backend with a Signstar configuration file ([signstar!249]). To support further backends in the future, work on making the Signstar configuration file format less dependent on the existing set of crates related to the NetHSM has been started ([signstar!292]). A sample signer [yubihsm-pgp] with mock YubiHSM has been implemented. The PoC exercises all major features we would need (creating new ed25519 asymmetric key; creating new wrapping key, backed by 3 out of 5 Shamir’s Secret Sharing and key export/import; creating new OpenPGP certificate using HSM key; signing given data file using that certificate; verifying that file with SOP implementations). YubiHSM additionally has support for [key attestation], sadly, due to RustCrypto version drift it doesn't work when mixed with rPGP. Additionally, investigated internal YubiHSM audit log for operations, which stores all operations executed on the HSM. The log can be cryptographically verified that it has not been tampered with. [YubiHSM logs] ## wkd-exporter Added code coverage, based on the existing code from signstar. Generated code quality file for Gitlab so that each merge request has a nice presentation of what would change. Contributed `[metadata]` attributes to `just` [just#2794] and used that to track CI job package dependencies [wkd-exporter#16]. ### Hours billed for Signstar David (85h), Wiktor (124h) ## Buildbtw We've received lots of feedback from PoC testers which as lead to lots of improvements and a treasure trove of new issues we'll be able to reference while building towards the next milestone: the first "production" release. Our plan is to take all learnings from the PoC and use them to build a small, but polished foundation which will provide build services to all staff members (and eventually also drive-by gitlab contributors). The PoC will continue running for a while (consider joining the testing instance if you haven't done so!), and we've continued working on it. We drastically improved the scheduler's memory usage and performance, fixed lots of papercuts in the CLI and web UI, and fixed bugs, a major one of them in the graph calculation algorithm. We also merged the first contributions from gromit. Thank you, gromit! The impulses for these changes came from onboarding sessions for the PoC testing instance. Thanks to everyone who participated so far! For the new production milestone, we've created plans based on our experience with the PoC: an overhauled data structure for improved performance, a deployment concept and release strategy, OIDC authentication, an improved JSON API for scheduling builds, and a new module structure for the code. Last but not least, we started writing an RFC covering major workflows and requirements for the production system we're envisioning. ### Hours billed for buildbtw Rafael (79h), Sven (39.5h), Levente (0h) ## Package Source Licensing Implemented [pkgctl license](https://gitlab.archlinux.org/archlinux/devtools/-/merge_requests/3… and worked through many packages with bad licenses. Created a [todo to make all packages license compliant](https://archlinux.org/todo/make-packages-license-compliant/). ### Hours billed for Package Source Licensing Rafael (4h), Sven (81h) ## Meeting Notes Meeting notes are available for staff in the [internal-notes] repository. [internal-notes]: https://gitlab.archlinux.org/archlinux/internal-notes/-/tree/main/valve [RFC 0059]: https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/59 [cargo-llvm-cov#440]: https://github.com/taiki-e/cargo-llvm-cov/issues/440 [yubihsm-pgp]: https://gitlab.archlinux.org/wiktor/yubihsm-pgp [key attestation]: https://docs.yubico.com/hardware/yubihsm-2/hsm-2-user-guide/hsm2-core-conce… [just#2794]: https://github.com/casey/just/pull/2794 [signstar!249]: https://gitlab.archlinux.org/archlinux/signstar/-/merge_requests/249 [signstar!292]: https://gitlab.archlinux.org/archlinux/signstar/-/merge_requests/292 [wkd-exporter#16]: https://gitlab.archlinux.org/archlinux/wkd-exporter/-/merge_requests/16/dif… [YubiHSM logs]: https://docs.yubico.com/hardware/yubihsm-2/hsm-2-user-guide/hsm2-core-conce…

1 0