- Arch-dev-public - lists.archlinux.org

[arch-dev-public] New Arch Linux Developer: Jonas Witschel (diabonas)
by Levente Polyak 15 May '21

15 May '21

I would like to welcome Jonas Witschel (diabonas) among the Arch Linux Developers. Jonas has been a Trusted User since 2019 and lately joined the Arch Linux Security Team. We wish you good luck and joy with your new responsibilities within Arch Linux! cheers, Levente

3 3

[arch-dev-public] GCC 11 and new toolchain on [testing]
by Giancarlo Razzolini 14 May '21

14 May '21

Hi, GCC 11 and a new toolchain rebuild has lended on [testing]. So, until it's moved, if you build anything that uses gcc against testing, it'll have to wait and be moved together. Also, if you guys notice any issues, let me know. Regards, Giancarlo Razzolini

1 0

[arch-dev-public] gnupg 2.3.1-1 pulled from [testing]
by Morten Linderud 11 May '21

11 May '21

Yo! It seems like gnupg 2.3.1-1 was built and pushed to [testing] briefly before being removed. The reason from the removal is because there are changes to how gnupg verifies signatures that depends on the key UIDs being properly signed. In the case of my key, "foxboron(a)archlinux.org" is of marginal trust while "morten(a)linderud.pw" is fully trusted. Since packages are signed with "--sender foxboron(a)archlinux.org" gnupg cares about this trust level starting from 2.3.0-1. This results in failing signature checks if you have this package and attempt to fetch packages signed by me. Related issue: https://dev.gnupg.org/T4735 Why was this removed with no headsup? It caused a fair bit of confusion for a few people and the cause of this issue isn't very clear when packaged fail to verify. Ideally we should have pushed gnupg with an epoch? To testers: The best course of action is to downgrade the gnupg package to 2.2.27-1 from the package archive or your local package cache. https://archive.archlinux.org/packages/g/gnupg/ <sidenote> gnupg is terrible :) </sidenote> -- Morten Linderud PGP: 9C02FF419FECBE16

4 6

[arch-dev-public] Spring cleanup '21
by Antonio Rojas 11 May '21

11 May '21

It's been over a year since our last package cleanup and orphans keep piling up. Please head to https://archlinux.org/devel/reports/unneeded-orphans/ and adopt packages you'd like to keep in the repos. If you are not a dev and would like to adopt some orphan in [extra], reply here or ping me on IRC and I'll move it. I'll start dropping the remaining packages to AUR in about 10 days.

6 8

[arch-dev-public] Disowning ruby packages
by Felix Yan 09 May '21

09 May '21

Hi All, I am disowning most of my ruby packages since I don't use any of them nowadays. Please consider adopting the following ones as they are now orphans: ruby-cairo ruby-faraday-middleware ruby-ffi ruby-multi_json ruby-power_assert ruby-test-unit -- Regards, Felix Yan

1 0

[arch-dev-public] Deprecating systemd-swap
by Felix Yan 09 May '21

09 May '21

As per suggested by upstream [1], systemd-swap is now deprecated and will be removed from [community] in the following days. zram-generator has been added to [community] as the suggested alternative. [1] https://github.com/Nefelim4ag/systemd-swap#users-should-migrate-to-systemdz… -- Regards, Felix Yan

1 0

[arch-dev-public] Barthalion's orphan packages
by Jelle van der Waa 09 May '21

09 May '21

Hi, I've removed Barthalion as maintainer from the last packages in archweb, these packages are now orphan and would like a new maintainer. If any of the packages need to be moved to the [community] please ask :) * libnss_nis * rpcsvc-proto * dejagnu * xdg-dbus-proxy * flatpak * flatpak-builder * xdg-desktop-portal * xdg-desktop-portal-gtk Greetings, Jelle

2 1

Re: [arch-dev-public] Spring cleanup '21
by Antonio Rojas 08 May '21

08 May '21

El miércoles, 28 de abril de 2021 22:26:13 (CEST), Santiago Torres-Arias via arch-dev-public escribió: > Unless there be dragons, I could happily pick up munin and > procinfo-ng... Since nobody objected, I moved procinfo-ng to [community], please adopt (and munin too) I dropped all remaining ones to AUR, except for: - dictionaries - these are low-maintenance and it's convenient to have them in the official repos. I moved all the orphan ones to [community] though, so TUs can maintain them. - asp - since it's an Arch project, I guess we want to keep it? - icewm - seems rather popular

1 0

[arch-dev-public] Call for organisers for an online conference
by Jelle van der Waa 03 May '21

03 May '21

Hi All, Last year we had an amazing event organised by Foxboron, dvzrv and many other volunteers. For this year Foxboron and dvzrv have decided to not organise an event and rather focus on planning an in-person event for 2022. For an online event to happen in 2021, a new team has to be formed to organise the event. Foxboron and dvzrv are willing to assist in helping out with the how to organize the event. The workload depends a bit on the intended scale. But a few months with bi-weekly meetings gets you there. The current discussion channel is #archlinux-conf. Please reach out if you are interested in organizing the event :) Cheers!

1 0

[arch-dev-public] archlinux.org update
by Jelle van der Waa 01 May '21

01 May '21

Hi All, Today I've updated archlinux.org with some interesting changes for packagers. Two new reports have been added: * A new report which includes all required orphan packages in our repositories. [1] * A new report which which includes all orphan non reproducible packages [2] The non reproducible packages dashboard now includes links to the build log and diffoscope output of the packages. Which should help fixing those packages. Lastly archweb now parses the links databases which exists in our repository. So as alternative to 'sogrep' curl -s "https://archlinux.org/packages/sonames?name=libwebsockets.so" | jq '.[].pkgname' "kismet" "libwebsockets" "ardour" "csound" "mosquitto" "kismet" "libwebsockets" This is still a bit alpha-ish as there seems to be some issues with updating the data. [4] Feedback is welcome, as I just realized it shows packages for all repositories so some people might want a filter on "stable" or "testing" or "staging" repositories. Finally what sonames the package requires is shown in the package detail page [6] [1] https://archlinux.org/devel/reports/required-orphan/ [2] https://archlinux.org/devel/reports/orphan-non-reproducible-packages/ [3] https://archlinux.org/devel/reports/non-reproducible-packages/jelle/ [4] https://github.com/archlinux/archweb/issues/342 [5] https://archlinux.org/packages/extra/x86_64/libwebsockets/ [6] https://archlinux.org/packages/extra/x86_64/libwebsockets/ Greeting, Jelle van der Waa

4 3