- Arch-dev-public - lists.archlinux.org

[arch-dev-public] FYI: New packages have to be signed
by Pierre Schmitz 01 Nov '11

01 Nov '11

Hi all, as discussed all new packages have to be signed from now on. This mean that if you use a build server you have to download the package to create the signature. Also see https://wiki.archlinux.org/index.php/DeveloperWiki:Signing_Packages A new version of devtools will follow soon. Greetings, Pierre -- Pierre Schmitz, http://pierre-schmitz.com

1 0

[arch-dev-public] [signoff] linux-firmware 20111101-1
by Thomas Bächler 01 Nov '11

01 Nov '11

Some minor updates, most notably the addition of the ath6kl firmware. Please sign off.

2 1

[arch-dev-public] [signoff] linux 3.1-3
by Thomas Bächler 01 Nov '11

01 Nov '11

Compared to the last release, a few bugfixes: Fix FS#19234, FS#26674, FS#25939, FS#26528 and a wrong drm error. Please sign off.

5 4

[arch-dev-public] SLiM up for adoption
by Gaetan Bisson 31 Oct '11

31 Oct '11

Hi devs, Hi TUs, I am orphaning SLiM (login manager): upstream is dead, patches keep piling up, and I actually stopped using that package a while ago. As far as I know, our current package has only one unfixed bug: https://bugs.archlinux.org/task/26579 Anyhow, I will move that package to the AUR in a week or so unless a dev or a TU wishes to adopt it. Cheers. -- Gaetan

5 8

[arch-dev-public] [signoff] ca-certificates 20111025-2
by Pierre Schmitz 31 Oct '11

31 Oct '11

Hi, the locale problems should have been resolved with this package. The upstream chagnes can be found at: http://packages.qa.debian.org/c/ca-certificates/news/20111022T133218Z.html and http://packages.qa.debian.org/c/ca-certificates/news/20111026T183215Z.html Please sign off, Pierre -- Pierre Schmitz, http://pierre-schmitz.com

3 2

[arch-dev-public] [signoff] cryptsetup 1.4.0-1
by Thomas Bächler 30 Oct '11

30 Oct '11

Upstream update. This also adds the new (optional) options field to cryptsetup. If you use a SSD, you can change cryptdevice=/dev/foo:bar to cryptdevice=/dev/foo:bar:allow-discards to enable discard functionality on the crypto mapping.

1 0

[arch-dev-public] [signoff] linux-3.1-1
by Tobias Powalowski 30 Oct '11

30 Oct '11

Hi guys, please signoff 3.1 series for both arches. Upstream changes: http://kernelnewbies.org/LinuxChanges Archlinux Changes: - $(uname -r) reports now the full kernel version - all external modules should be installed in /lib/modules/extramodules-3.1-ARCH now - disabled the old IDE subsystem, marked as deprecated for quite some time All users of the old ide hook in mkinitcpio should make the transition to pata hook now! - disabled the old ACPI /proc files, marked as deprecated for quite some time, everything is available in /sys greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

6 13

[arch-dev-public] [signoff] curl 7.22.0-3
by Dave Reisner 30 Oct '11

30 Oct '11

Hi all, A rebuild of curl 7.22.0 is in [testing]. Its nothing special, just reverting my cert changes from -2. I don't really have the time to invest in figuring out our ca-certificates package at the moment. Shouldn't be any surprises here -- please sign off for both arches. Regards, Dave

2 2

[arch-dev-public] Issues with non-ASCII path names in packages
by Pierre Schmitz 29 Oct '11

29 Oct '11

Hi all, we found some issues with libarchive and some file names when using the C locale. For example try $ bsdtar tf ca-certificates-20111025-1-any.pkg.tar.xz (from testing) The result will be "bsdtar: Pathname in pax header can't be converted to current locale." Fun fact: The package was created using the C locale. Due to this pacman will refuse to install this package when using the C locale which is used e.g. by our build tools. Ignoring the question if we should avoid packaging such file names we might have a bigger problem here: our C locale does not work well with unicode names. To solve such issues our friends at Debian introduced a new C.UTF-8 locale. This might be a better alternative than forcing e.g. en_US.UTF-8 as default locale which might have other consequences; different sorting behavior for example. Some information can be found at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609306 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=522776 What is your opinion about this? Of course the easiest solution would be to ensure that all packages only contain ASCII file names. I also wonder if there any real world use cases for using non-utf8 locales. Greetings, Pierre -- Pierre Schmitz, https://users.archlinux.de/~pierre

4 6

[arch-dev-public] [signoff] tzdata 2011m-1
by Andreas Radke 29 Oct '11

29 Oct '11

Upstream update for the DST changes happening tonight and next week. For the first time I've had a make check error ==> Starting check()... awk -f checktab.awk africa antarctica asia australasia europe northamerica southamerica zone.tab:260: missing comment make: *** [check_tables] Error 1 make: Target `check' not remade because of errors. ==> ERROR: A failure occurred in check(). I've reported this to the tz mailing list. It shouldn't hold back the bump. Please do some quick test with "date" and give signoffs. -Andy Changes: The file ... ftp://munnari.oz.au/pub/tzdata2011l.tar.gz ...is now available; this reflects changes circulated last week on the time zone mailing list. There are just 2 changes that cause different generated tzdata files from zic, to Asia/Hebron and Pacific/Fiji - the possible change for Bahia, Brazil is included, but commented out. Compared with the diff I sent out last week, this version also includes attributions for the sources for the changes (in much the same format as ado used, but the html tags have not been checked, verified, or used in any way at all, so if there are errors there, please let me know.) Unfortunately, there are no signatures, it turns out that I have not used any form of PGP in so long that getting my keys into a form where they're usable by gpg is somewhat of a challenge - so most probably I'll just generate a new key (as was suggested, and which is obviously the sane approach) for tz distributions - the down side is that at least initially it isn't going to be signed (trusted) by anyone at all... To compensate for this lack of signatures, I'm appending (in this message) a list of digest values, crypto hash function digests generated by a number of different algorithms (all from the NetBSD pkgsrc "digest" program). Those ought to give a fair degree of confidence that the tarball has not been compromised, and by distributing them in this message, essentially no way for anyone to compromise the digest values (which is the one thing that a proper signature would ensure). Lastly, for now, because people seem to be mirroring ftp://munnari.oz.au/pub/oldtz/ I have included the current versions of the data & code files there, as well as their normal home in ftp://munnari.oz.au/pub - previously the oldtz directory contained only the obsolete tarballs. But thanks to Joseph S. Myers, the oldtz directory now includes a few extra archives that I had been missing, including the extremely elusive tzcode2003b which had been replaced before I even new it existed (and no, you don't really want it, it contained a fairly serious bug, which is why it was replaced so quickly...) kre The file ftp://munnari.oz.au/pub/tzdata2011m.tar.gz ...is now available; this reflects changes circulated last week on the time zone mailing list, with minor corrections as pointed out on the list. In particular, the typos in comments in the data (2011-11-17 should have been 2011-10-17 as Alan Barrett noted, and spelling of Tiraspol that Tim Parenti noted) have been fixed, and the change for Ukraine has been made in all 4 Ukrainian zones, rather than just Kiev (again, thanks to Tim Parenti, and also Denys Gavrysh) In addition, I added Europe/Tiraspol to zone.tab. This time, all the files have new version numbers... (including the files otherwise unchanged in 2011m that were changed in 2011l but didn't get new version numbers there...) Still no proper signatures, so once again, crypto digest values using several algorithms (from the NetBSD pkgsrc digest program) are appended, and can be used to verify that the file you fetched is the same as the one I generated. kre

2 2