- Arch-dev-public - lists.archlinux.org

[arch-dev-public] Remote PGP signing service (proof of concept)
by Rémy Oudompheng 03 Jan '12

03 Jan '12

Hello, I just wrote a small proof of concept for remote PGP signing. It is written in Go (using the weekly snapshot, not the r60 release), and is hosted at: https://github.com/remyoudompheng/remotepgp Usage is quite simple: - compile everything - run the server on the appropriate machine, for example ./server -addr localhost:10022 (by default it binds on localhost) - choose a remote file name - run the client: ./client -server http://localhost:10022/hash /home/remy/packages/blah It does the following: - looks for the secret keyring in $HOME/.gnupg/secring.gpg - chooses the first secret key and asks for the passphrase if needed - sends a little chunk of bytes to the server - the server hashes the concatenation of the file and the little chunk and returns the hash - the client finishes the signature process and writes blah.sig in the current directory. You should then be able to copy the remote file and check the signature is valid. For paranoid remote usage, it is possible to setup a SSH tunnel to connect to the server. Any comments are welcome. -- Rémy. (I'm not really good at license terms and associated legalese, please tell me if copyright notices get wrong)

3 2

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 03 Jan '12

03 Jan '12

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 2 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 15 fully signed off packages * 8 packages missing signoffs * 5 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (2 total) == * inetutils-1.9-1 (i686) * inetutils-1.9-1 (x86_64) == Incomplete signoffs for [core] (5 total) == * ed-1.6-1 (i686) 0/2 signoffs * glibc-2.15-3 (i686) 3/4 signoffs * inetutils-1.9-1 (i686) 0/2 signoffs * ed-1.6-1 (x86_64) 0/2 signoffs * inetutils-1.9-1 (x86_64) 0/2 signoffs == Incomplete signoffs for [extra] (3 total) == * pulseaudio-1.1-2 (i686) 0/2 signoffs * valgrind-3.7.0-2 (i686) 1/2 signoffs * pulseaudio-1.1-2 (x86_64) 1/2 signoffs == Completed signoffs (15 total) == * binutils-2.22-4 (i686) * file-5.10-1 (i686) * gcc-4.6.2-5 (i686) * linux-api-headers-3.1.6-1 (i686) * pacman-4.0.1-1 (i686) * binutils-2.22-4 (x86_64) * file-5.10-1 (x86_64) * gcc-4.6.2-5 (x86_64) * glibc-2.15-3 (x86_64) * linux-api-headers-3.1.6-1 (x86_64) * pacman-4.0.1-1 (x86_64) * namcap-3.2.1-1 (any) * pyalpm-0.5.3-1 (i686) * pyalpm-0.5.3-1 (x86_64) * valgrind-3.7.0-2 (x86_64) == All packages in [testing] for more than 14 days (5 total) == * pyalpm-0.5.3-1 (i686), since 2011-10-15 * pyalpm-0.5.3-1 (x86_64), since 2011-10-15 * namcap-3.2.1-1 (any), since 2011-10-20 * pacman-4.0.1-1 (i686), since 2011-11-21 * pacman-4.0.1-1 (x86_64), since 2011-11-21 == Top five in signoffs in last 24 hours == 1. dreisner - 2 signoffs

1 0

[arch-dev-public] [HEADSUP] Minimum kernel version bump
by Tom Gundersen 02 Jan '12

02 Jan '12

Hi guys, The next udev release will change its kernel requirements. This will not affect people running our standard kernel, but self-compiled kernels might be, and the -lts kernel is affected. The major changes are: * 2.6.34 is the minimum kernel requirement (our current -lts is .32). * devtmpfs support must be switched on; /dev can no longer be on a tmpfs (this should only affect self-compiled kernels). For more details see <http://git.kernel.org/?p=linux/hotplug/udev.git;a=blob_plain;f=README>. I think it does not make any sense for people to hold back udev and upgrade other packages, so once this is out I'll remove support for non-devtmpfs kernels in initscripts too. It might possibly make sense to re-evaluate our minimum kernel version supported in glibc, but I'll leave that to more knowledgeable people. Closer to the release I'll make a news item about this so everyone is aware. Cheers, Tom

4 9

[arch-dev-public] Registration question for forum/wiki
by Allan McRae 02 Jan '12

02 Jan '12

There are reports that the registration question for the forum and wiki is not working. I seem to remember a similar issue last year. Can someone take a look at this? Allan

1 2

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 02 Jan '12

02 Jan '12

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 4 new packages in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 13 fully signed off packages * 8 packages missing signoffs * 5 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (4 total) == * ed-1.6-1 (i686) * file-5.10-1 (i686) * ed-1.6-1 (x86_64) * file-5.10-1 (x86_64) == Incomplete signoffs for [core] (5 total) == * ed-1.6-1 (i686) 0/2 signoffs * file-5.10-1 (i686) 1/2 signoffs * glibc-2.15-3 (i686) 3/4 signoffs * ed-1.6-1 (x86_64) 0/2 signoffs * file-5.10-1 (x86_64) 1/2 signoffs == Incomplete signoffs for [extra] (3 total) == * pulseaudio-1.1-2 (i686) 0/2 signoffs * valgrind-3.7.0-2 (i686) 1/2 signoffs * pulseaudio-1.1-2 (x86_64) 1/2 signoffs == Completed signoffs (13 total) == * binutils-2.22-4 (i686) * gcc-4.6.2-5 (i686) * linux-api-headers-3.1.6-1 (i686) * pacman-4.0.1-1 (i686) * binutils-2.22-4 (x86_64) * gcc-4.6.2-5 (x86_64) * glibc-2.15-3 (x86_64) * linux-api-headers-3.1.6-1 (x86_64) * pacman-4.0.1-1 (x86_64) * namcap-3.2.1-1 (any) * pyalpm-0.5.3-1 (i686) * pyalpm-0.5.3-1 (x86_64) * valgrind-3.7.0-2 (x86_64) == All packages in [testing] for more than 14 days (5 total) == * pyalpm-0.5.3-1 (i686), since 2011-10-15 * pyalpm-0.5.3-1 (x86_64), since 2011-10-15 * namcap-3.2.1-1 (any), since 2011-10-20 * pacman-4.0.1-1 (i686), since 2011-11-21 * pacman-4.0.1-1 (x86_64), since 2011-11-21 == Top five in signoffs in last 24 hours == 1. bluewind - 3 signoffs 2. allan - 2 signoffs

1 0

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 01 Jan '12

01 Jan '12

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 1 new package in last 24 hours * 1 known bad package * 0 packages not accepting signoffs * 15 fully signed off packages * 4 packages missing signoffs * 5 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [testing] in last 24 hours (1 total) == * initscripts-2012.01.1-1 (any) == Incomplete signoffs for [core] (1 total) == * glibc-2.15-3 (i686) 3/4 signoffs == Incomplete signoffs for [extra] (3 total) == * pulseaudio-1.1-2 (i686) 0/2 signoffs * valgrind-3.7.0-2 (i686) 1/2 signoffs * pulseaudio-1.1-2 (x86_64) 1/2 signoffs == Completed signoffs (15 total) == * binutils-2.22-4 (i686) * gcc-4.6.2-5 (i686) * linux-api-headers-3.1.6-1 (i686) * pacman-4.0.1-1 (i686) * perl-5.14.2-5 (i686) * binutils-2.22-4 (x86_64) * gcc-4.6.2-5 (x86_64) * glibc-2.15-3 (x86_64) * linux-api-headers-3.1.6-1 (x86_64) * pacman-4.0.1-1 (x86_64) * perl-5.14.2-5 (x86_64) * namcap-3.2.1-1 (any) * pyalpm-0.5.3-1 (i686) * pyalpm-0.5.3-1 (x86_64) * valgrind-3.7.0-2 (x86_64) == All packages in [testing] for more than 14 days (5 total) == * pyalpm-0.5.3-1 (i686), since 2011-10-15 * pyalpm-0.5.3-1 (x86_64), since 2011-10-15 * namcap-3.2.1-1 (any), since 2011-10-20 * pacman-4.0.1-1 (i686), since 2011-11-21 * pacman-4.0.1-1 (x86_64), since 2011-11-21 == Top five in signoffs in last 24 hours == 1. tomegun - 6 signoffs 2. stephane - 4 signoffs 3. bpiotrowski - 2 signoffs

1 0

[arch-dev-public] Away on January 5–15
by Gaetan Bisson 01 Jan '12

01 Jan '12

Hi all, I'll be away and unreachable from January 5 to January 15. There's no current issue that I know of with any of my packages but if something comes up feel free to step in. Happy 2012! -- Gaetan

1 0

[arch-dev-public] [RFC] new manpages
by Tom Gundersen 31 Dec '11

31 Dec '11

Hi guys, Initscripts in [testing] contain some new man pages documenting /etc/{rc.conf,locale.conf,vconsole.conf,hostname}, intended for the next iso release. Corrections and comments welcome (preferably in the form of patches to arch-projects...). Cheers, Tom

1 0

[arch-dev-public] ML password?
by Aaron Griffin 31 Dec '11

31 Dec '11

Hmm, who has the password to this these days? It's been changed and I can no longer access it. ---------- Forwarded message ---------- From: Vesa Kaihlavirta <vegai(a)iki.fi> Date: Thu, Dec 22, 2011 at 12:22 PM Subject: Fwd: [arch-dev-public] Developer/TU key signing To: Aaron Griffin <aaronmgriffin(a)gmail.com> Hi Aaron, It looks like I have lost my ability to send to arch-dev-public. Could you add me back there? --vk ---------- Forwarded message ---------- From: <arch-dev-public-owner(a)archlinux.org> Date: Thu, Dec 22, 2011 at 7:33 PM Subject: Re: [arch-dev-public] Developer/TU key signing To: vegai(a)iki.fi This list is for ArchLinux Development and is not open for public comment. If there is an important issue, please reply directly to the original author or to the general ArchLinux mailing list (arch-general(a)archlinux.org) Write access to this list may be provided in special circumstances, and may need to be evaluated by the rest of the developers. Please send an email to aaron(a)archlinux.org to request write access if you feel you fit a "special circumstance". ---------- Forwarded message ---------- From: Vesa Kaihlavirta <vegai(a)iki.fi> To: Public mailing list for Arch Linux development <arch-dev-public(a)archlinux.org> Cc: Date: Thu, 22 Dec 2011 19:33:25 +0200 Subject: Re: [arch-dev-public] Developer/TU key signing -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, Nov 25, 2011 at 3:27 PM, Ionut Biru <ibiru(a)archlinux.org> wrote: > Hi, > > my arch master key is available [1] with fingerprint 44D4 A033 AC14 0143 > 9273 97D4 7EFD 567D 4C7E A887. > > Every packager please do: > > 1) reply this email in the mailing list, include gerolde/sigurd username > and sign your reply using your gpg key. > 2) name at least one package you already signed. vegai@sigurd vesa@gerolde go-1:r60.3-2-i686 - --vk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJO82rIAAoJEAl9Yp5DdSC9MukH/jwZlRBBVdBP1esb9GTataHK oSxpZSJgYz+yLyE+obadq2rkFuteomh/zXJL96wo4XSM3cGLbPz6YpV+kF/YcEtX j9FC6FDN6+KS1uLzwl9QLnUR25SiEtmLZlFy60JZ7ci9Opc2bG3irB2Mv9If1zwG jsDYav8/PKVtlM+F46flLbYaC6lpQcN0BueiOimsYuEOsMh/eS39kb7nDgi7Xi2M Zl95Vudo6gJZbvoviuzLuq/ByB7Yoie+RMgUqrSEPNsC2iOE5TXidsGoajf0CeAK 9t8zSh5vMGVbXnc39ro68WT8PULkvS4aeoCBF2uWBR+xTEQX0UvKQLY8E+pR/ko= =Vt0d -----END PGP SIGNATURE-----

3 3

[arch-dev-public] Signoff report for [testing]
by Arch Website Notification 31 Dec '11

31 Dec '11

=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 0 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 17 fully signed off packages * 8 packages missing signoffs * 5 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == Incomplete signoffs for [core] (3 total) == * glibc-2.15-3 (i686) 2/4 signoffs * perl-5.14.2-5 (i686) 1/2 signoffs * glibc-2.15-3 (x86_64) 3/4 signoffs == Incomplete signoffs for [extra] (5 total) == * graphicsmagick-1.3.13-1 (i686) 0/2 signoffs * pulseaudio-1.1-2 (i686) 0/2 signoffs * valgrind-3.7.0-2 (i686) 1/2 signoffs * graphicsmagick-1.3.13-1 (x86_64) 0/2 signoffs * pulseaudio-1.1-2 (x86_64) 0/2 signoffs == Completed signoffs (17 total) == * binutils-2.22-4 (i686) * gcc-4.6.2-5 (i686) * linux-3.1.6-1 (i686) * linux-api-headers-3.1.6-1 (i686) * pacman-4.0.1-1 (i686) * binutils-2.22-4 (x86_64) * gcc-4.6.2-5 (x86_64) * linux-3.1.6-1 (x86_64) * linux-api-headers-3.1.6-1 (x86_64) * pacman-4.0.1-1 (x86_64) * perl-5.14.2-5 (x86_64) * namcap-3.2.1-1 (any) * ntp-4.2.6.p5-2 (i686) * pyalpm-0.5.3-1 (i686) * ntp-4.2.6.p5-2 (x86_64) * pyalpm-0.5.3-1 (x86_64) * valgrind-3.7.0-2 (x86_64) == All packages in [testing] for more than 14 days (5 total) == * pyalpm-0.5.3-1 (i686), since 2011-10-15 * pyalpm-0.5.3-1 (x86_64), since 2011-10-15 * namcap-3.2.1-1 (any), since 2011-10-20 * pacman-4.0.1-1 (i686), since 2011-11-21 * pacman-4.0.1-1 (x86_64), since 2011-11-21 == Top five in signoffs in last 24 hours == 1. allan - 12 signoffs 2. dreisner - 8 signoffs 3. dan - 2 signoffs 4. bluewind - 2 signoffs

1 0