- Arch-dev-public - lists.archlinux.org

[arch-dev-public] Implementing package branches for the svntogit repos
by Evangelos Foutras 21 Jul '11

21 Jul '11

Hi, The past few days I've been testing a new way to maintain the svntogit repositories [1]. The main change is keeping a separate branch for each package, in addition to the master branch which contains all packages. Currently, the log pages load very slow; waiting over a minute is not uncommon. If we switch to the new script, we can then specify the package branch we want and everything should load very quickly. :) Some relevant links: New script and log file after running for a couple of days: http://pkgbuild.com/~foutrelis/svntogit/ (The first run had to update a week's worth of packages. :p) Test repositories (click the 'refs' tab to get a list of all package branches): - http://pkgbuild.com/git/packages.git/ - http://pkgbuild.com/git/community.git/ What do you guys think? If there are no objections, I could do the switch (I'd need access to svntogit's $HOME on gerolde). [1] http://projects.archlinux.org/svntogit/

2 2

[arch-dev-public] [signoff] tcp_wrappers rebuild bonanza
by Dave Reisner 21 Jul '11

21 Jul '11

5 packages in core were affected by this: inetutils nfs-utils syslog-ng openssh xinetd Note that we still have 2 packages in extra to get this rebuild completed -- archboot and openldap, before we can do the viking funeral for tcp_wrappers. Signoff both arches, dave

6 11

[arch-dev-public] [signoff] iproute2 2.6.39-1
by Ronald van Haren 21 Jul '11

21 Jul '11

please signoff for both architectures. Ronald Upstream changes: This version of iproute2 utilities intended for use with 2.6.39 or later kernel, but should be backward compatible with older releases. It is mostly small bug fixes, but there is also support for the new queuing disciplines in 2.6.39. Source: (note old developer.osdl.org address works as well) http://devresources.linuxfoundation.org/dev/iproute2/down... Repository: git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/iproute2.git For more info on iproute2 see: http://www.linuxfoundation.org/collaborate/workgroups/net... Report problems (or enhancements) to the netdev(a)vger.kernel.org mailing list. Changelog: Brandon Philips (2): ip: fix memory leak in ipmaddr.c doc: add pdf targets Diego Elio Pettenò (1): Remove -L flags from link Eric Dumazet (3): sfq: add divisor support ip: Support IFLA_TXQLEN in ip link command ss: fix autobound filter Gerrit Renker (6): utils: get_jiffies always uses base=0 iproute: fix unit conversion of rtt/rttvar/rto_min iproute: rename 'get_jiffies' since it uses msecs utils: get_jiffies always uses base=0 iproute: fix unit conversion of rtt/rttvar/rto_min iproute: rename 'get_jiffies' since it uses msecs Jiri Pirko (1): iplink: implement setting of master devic John Fastabend (2): iproute2: tc add mqprio qdisc support iproute2: improve mqprio inputs for queue offsets and counts Joy Latten (6): xfrm security context support xfrm security context support xfrm security context support xfrm security context support xfrm security context support xfrm security context support Juliusz Chroboczek (1): tc : SFB flow scheduler Nicolas Dichtel (3): iproute2: allow to specify truncation bits on auth algo iproute2: add support of flag XFRM_STATE_ALIGN4 iproute2: allow to specify truncation bits on auth algo Sridhar Samudrala (1): macvlan/macvtap: support 'passthru' mode Stephen Hemminger (26): CHOKe scheduler Merge branch 'master' into choke update to net-next (2.6.39) headers Merge branch 'choke' into net-next Remove #ifdef's v2.6.38.1 update to 2.6.39-rc3 headers Add no-strict-aliasing to genl Add checks for fgets() when reading proc Fix snprintf with non format Fix warning in u32 from assignment in conditional Update email address of netem Add README.devel Update README information Use INIT_NETDEV_GROUP Merge branch 'for-2.6.39' of /home/shemminger/iproute2-net-next tc filter: fix dport/sport in pretty print output ip: addrlabel fix set never used warning ip: iproute fix set never used warning tc: fix set never used warning in red libnetlink: fix set never used warning Fix set-never-used warning in ifstat ss: check result of readlink skbedit: fix set-never-used warning xt match: fix set-never-used warning v2.6.39 Ulrich Weber (1): iproute2: parse flag XFRM_POLICY_ICMP Vlad Dogaru (6): iproute2: support listing devices by group iproute2: support device group semantics iproute2: support device group semantics iproute2: fix man page whitespace iproute2: fix man page whitespace iproute2: support listing devices by group

3 2

[arch-dev-public] [signoff] iptables 1.4.11.1-1
by Ronald van Haren 21 Jul '11

21 Jul '11

please signoff for both architectures. Ronald Changelog 1.4.11.1: Elie De Brauwer (1): doc: fix trivial typo in libipt_SNAT Jan Engelhardt (13): libxt_owner: restore inversion support build: remove dead code parts build: fix installation of symlinks build: fix absence of xml translator in IPv6-only builds doc: update GPL license text doc: iptables-xml should be in manpage section 1 build: move basic preprocessor flags to regular_CPPFLAGS build: move kinclude's preprocessor flags to kinclude_CPPFLAGS src: move all libiptc pieces into its directory src: move all iptables pieces into a separate directory tests: add some sample rulesets to test save-restore cycle option: fix ignored negation before implicit extension loading build: re-add missing CPPFLAGS for libiptc Maciej Å»enczykowski (1): xtables-multi: fix absence of xml translator in IPv6-only builds Mike Frysinger (1): build: move remaining preprocessor flags to CPPFLAGS Patrick McHardy (1): Bump version to 1.4.11.1 Vlad Dogaru (1): doc: fix MASQUERADE section of man page Chamgelog 1.4.11: Changli Gao (1): iptables: fix the dead loop when meeting unknown options Florian Westphal (3): libxt_conntrack: fix --ctdir save/dump output format libxt_time: fix random --datestart skips extensions: libxt_NFQUEUE: add v2 revision with --queue-bypass option JP Abgrall (1): libxt_quota: make sure uint64 is not truncated Jan Engelhardt (218): libxtables: change option precedence order to be intuitive libxt_TOS: avoid an undesired overflowing computation iptables: fix longopt reecognition and workaround getopt(3) behavior Revert "Revert "libxtables: change option precedence order to be intuitive"" Merge branch 'master' of git://dev.medozas.de/iptables into m2 iptables: reset options at the start of each command iptables: do not emit orig_opts twice include: update files with headers from Linux 2.6.37-rc1 TPROXY: add support for revision 1 socket: add support for revision 1 build: fix globbing of extensions in other locales libxt_owner: output numeric IDs when save is requested Merge commit 'v1.4.10' build: stop on error in subcommand src: const annotations xt_comment: remove redundant cast src: use C99/POSIX types iptables: abort on empty interface specification xtables: reorder num_old substraction for clarity ip[6]tables: only call match's parse function when option char is in range ip[6]tables: only call target's parse function when option char is in range extensions: remove no longer necessary default: cases libxt_sctp: fix a typo libipt_CLUSTERIP: const annotations libxtables: do some option structure checking libxt_quota: print negation when it has been selected libxt_connlimit: reword help text to say prefix length libxt_connlimit: add a --connlimit-upto option libxt_connlimit: support for dstaddr-supporting revision 1 libxt_connlimit: remove duplicate member that caused size change libxt_quota: clarifications on matching iptables: improve error reporting with extension loading troubles libxt_u32: enclose argument in quotes xtables: set custom opts to NULL on free iptables: warn when parameter limit is exceeded iptables: remove bogus address-of iptables: remove more redundant casts iptables: do not print trailing whitespaces src: collect do_command variables in a struct src: move large default: block from do_command6 into its own function src: share iptables_command_state across the two programs src: deduplicate find_proto function src: move OPT_FRAGMENT to the end so the list can be shared src: put shared option flags into xshared src: deduplicate and simplify implicit protocol extension loading src: unclutter command_default function src: move jump option handling from do_command6 into its own function src: move match option handling from do_command6 into its own functions iptables: fix error message for unknown options iptables: fix segfault target option parsing ip6tables: spacing fixes for -o argument libxt_devgroup: option whitespace update following v1.4.10-49-g7386635 extensions: fix indent of vtable doc: fix wrong sentence about negation in xt_limit doc: fix misspelling of "field" extensions: remove redundant init functions Remove unused CVS expanded keywords libip6t_dst: remove unimplemented --dst-not-strict libip6t_hbh: remove unimplemented --hbh-not-strict extensions: add missing checks for specific flags libipt_ECN: set proper option flags doc: mention other possible nf_loggers for TRACE doc: fix odd partial sentence in libipt_TTL libxt_quota: require --quota to be specified doc: rateest options can be optional libxtables: fix memory scribble beyond end of array iptables: fix an inversion doc: add VERSION section to manpages extensions: add missing checks for specific flags (2) libxtables: guided option parser libxt_CHECKSUM: use guided option parser libxt_socket: use guided option parser libxtables: provide better final_check libxt_CONNSECMARK: use guided option parser libxtables: XTTYPE_UINT32 support libxt_cpu: use guided option parser libxtables: min-max option support libxt_cluster: use guided option parser libxtables: XTTYPE_UINT8 support libip[6]t_HL: use guided option parser libip[6]t_hl: use guided option parser libxtables: XTTYPE_UINT32RC support libip[6]t_ah: use guided option parser libip6t_frag: use guided option parser libxt_esp: use guided option parser libxtables: XTTYPE_STRING support libip[6]t_REJECT: use guided option parser libip6t_dst: use guided option parser libip6t_hbh: use guided option parser libip[6]t_icmp: use guided option parser libip6t_ipv6header: use guided option parser libipt_ECN: use guided option parser libipt_addrtype: use guided option parser libxt_AUDIT: use guided option parser libxt_CLASSIFY: use guided option parser libxt_DSCP: use guided option parser libxt_LED: use guided option parser libxt_SECMARK: use guided option parser libxt_TCPOPTSTRIP: use guided option parser libxt_comment: use guided option parser libxt_helper: use guided option parser libxt_physdev: use guided option parser libxt_pkttype: use guided option parser libxt_state: use guided option parser libxt_time: use guided option parser libxt_u32: use guided option parser doc: avoid duplicate entries in manpage libxtables: XTTYPE_MARKMASK32 support libxt_MARK: use guided option parser libxt_CONNMARK: use guided option parser libxtables: XTTYPE_UINT64 support libxt_quota: use guided option parser libxtables: linked-list name<->id map libxt_devgroup: use guided option parser libipt_realm: use guided option parser libxtables: XTTYPE_UINT16RC support libxt_length: use guided option parser libxt_tcpmss: use guided option parser libxtables: XTTYPE_UINT8RC support libxtables: XTTYPE_UINT64RC support libxt_connbytes: use guided option parser libxtables: XTTYPE_UINT16 support libxt_CT: use guided option parser libxt_NFQUEUE: use guided option parser libxt_TCPMSS: use guided option parser libxtables: pass struct xt_entry_{match,target} to x6 parser libxt_string: use guided option parser libxtables: XTTYPE_SYSLOGLEVEL support libip[6]t_LOG: use guided option parser libxtables: XTTYPE_ONEHOST support libxtables: XTTYPE_PORT support libxt_TPROXY: use guided option parser libipt_ULOG: use guided option parser build: bump libxtables ABI version libxt_TEE: use guided option parser xtoptions: respect return value in xtables_getportbyname libxt_TOS: use guided option parser libxt_tos: use guided option parser extensions: remove unused TOS code libxtables: XTTYPE_PORTRC support libxt_udp: use guided option parser libxt_dccp: use guided option parser libxt_tos: add inversion support back again libxtables: fix assignment in wrong offset (XTTYPE_UINT*RC) libxt_u32: add missing call to xtables_option_parse extensions: remove bogus use of XT_GETOPT_TABLEEND libxt_owner: remove ifdef IPT_COMM_OWNER libxtables: output name of extension on rev detect failure extensions: const annotations libxt_statistic: streamline and document possible placement of negation libxt_statistic: increase precision on create and dump libxtables: XTTYPE_DOUBLE support libxt_statistic: use guided option parser libxt_IDLETIMER: use guided option parser libxt_NFLOG: use guided option parser libxtables: support for XTTYPE_PLENMASK libxt_connlimit: use guided option parser libxt_recent: use guided option parser libxtables: do not overlay addr and mask parts, and cleanup libxtables: flag invalid uses of XTOPT_PUT libxtables: XTTYPE_PLEN support libxt_hashlimit: use guided option parser libxtables: XTTYPE_HOSTMASK support libxt_policy: use guided option parser libxt_owner: use guided option parser libxt_osf: use guided option parser libxt_multiport: use guided option parser libipt_NETMAP: use guided option parser libxt_limit: use guided option parser libxtables: XTTYPE_PROTOCOL support libxt_ipvs: use guided option parser doc: S/DNAT allows to omit IP addresses libxt_conntrack: use guided option parser libip6t_mh: use guided option parser libip6t_rt: use guided option parser libxtables: XTTYPE_ETHERMAC support libxt_mac: use guided option parser libipt_CLUSTERIP: use guided option parser libxt_iprange: use guided option parser libipt_DNAT: use guided option parser libipt_SNAT: use guided option parser libipt_MASQUERADE: use guided option parser libipt_REDIRECT: use guided option parser libipt_SAME: use guided option parser src: replace old IP*T_ALIGN macros src: combine default_command functions libxt_policy: option table fixes, improved error tracking libxtables: avoid running into .also checks when option not used libxt_policy: use XTTYPE_PROTOCOL type libxtables: collapse double protocol parsing libipt_[SD]NAT: flag up module name on error libipt_[SD]NAT: avoid false error about multiple destinations specified libxt_conntrack: correct printed module name libxt_conntrack: fix assignment to wrong member libxt_conntrack: resolve erroneous rev-2 port range message libip6t_rt: rt-0-not-strict should take no arg libxtables: retract _NE types and use a flag instead libxt_quota: readd missing XTOPT_PUT request libxtables: check for negative numbers in xtables_strtou* libxt_rateest: streamline case display of units doc: add some coded option examples to libxt_hashlimit doc: make usage of libxt_rateest more obvious doc: clarify that -p all is a special keyword only doc: use .IP list for TCPMSS doc: remove redundant .IP calls in libxt_time libxt_ipvs: restore network-byte order libxt_u32: --u32 option is required libip6t_rt: restore --rt-type storing libxtables: more detailed error message on multi-int parsing libxtables: use uintmax for xtables_strtoul libxtables: make multiint parser have greater range libxtables: unclutter xtopt_parse_mint libxtables: have xtopt_parse_mint interpret partially-spec'd ranges libxt_NFQUEUE: avoid double attempt at parsing libxt_NFQUEUE: add mutual exclusion between qnum and qbal libxt_time: always ignore libc timezone libxt_time: --utc and --localtz are mutually exclusive libxt_time: deprecate --localtz option, document kernel TZ caveats Jozsef Kadlecsik (3): Fix listing/saving the new revision of the SET target Fix set match/target direction parser SET target revision 2 added Li Yewang (1): xtables: fix typo in error message of xtables_register_match() Lutz Jaenicke (2): libipt_REDIRECT: "--to-ports" is not mandatory libxt_devgroup: actually set XT_DEVGROUP_OPT_???GROUP flags Maciej Zenczykowski (20): man pages: allow underscores in match and target names mark newly opened fds as FD_CLOEXEC (close on exec) xtables_ip6addr_to_numeric: fix typo in comment xtables: delay (statically built) match/target initialization v4: rename init_extensions() to init_extensions4() v6: rename init_extensions() to init_extensions6() xtables.h: init_extensions() no longer exists v4: rename for_each_chain() to for_each_chain4() v6: rename for_each_chain() to for_each_chain6() v4: rename flush_entries() to flush_entries4() v6: rename flush_entries() to flush_entries6() v4: rename delete_chain() to delete_chain4() v6: rename delete_chain() to delete_chain6() v4: rename print_rule() to print_rule4() v6: rename print_rule() to print_rule6() v4: rename do_command() to do_command4() v6: rename do_command() to do_command6() move 'int line' definition from ip6?tables.c into xtables.c convert ip6?tables-multi to actually use their own header files Don't load ip6?_tables module when already loaded Maciej Å»enczykowski (3): Add --ipv4/-4 and --ipv6/-6 support to ip6?tables{,-restore}. Move common parts of libext{4,6}.a into libext.a combine ip6?tables-multi into xtables-multi Mark Montague (1): iptables: documentation for iptables and ip6tables "security" tables Max Kellerman (1): xtables: use strspn() to check if string needs to be quoted Pablo Neira Ayuso (1): libxt_cluster: fix inversion in the cluster match Patrick McHardy (16): Revert "libxtables: change option precedence order to be intuitive" Merge branch 'master' of git://dev.medozas.de/iptables extensions: libxt_conntrack: add support for specifying port ranges extensions: add extension for devgroup match Merge branch 'master' of git://dev.medozas.de/iptables Merge branch 'master' of vishnu.netfilter.org:/data/git/iptables Merge branch 'opts' of git://dev.medozas.de/iptables Merge branch 'opts' of git://dev.medozas.de/iptables Merge branch 'floating/opts' of git://dev.medozas.de/iptables Merge branch 'opts' of git://dev.medozas.de/iptables Merge branch 'opts' of git://dev.medozas.de/iptables Merge branch 'master' of git://dev.medozas.de/iptables Merge branch 'opts' of git://dev.medozas.de/iptables Merge branch 'floating/opts' of git://dev.medozas.de/iptables Merge branch 'master' of git://dev.medozas.de/iptables Bump version to 1.4.11 Rob Leslie (1): iptables-restore: resolve confusing policy error message Stefan Tomanek (2): ip(6)tables-multi: unify subcommand handling iptables: add -C to check for existing rules Stephen Beahm (1): libipt_REDIRECT: avoid dereference of uninitialized pointer Thomas Graf (2): libxt_AUDIT: add AUDIT target iptables: add manual page section for AUDIT target Wes Campaigne (4): libxtables: avoid confusing use of ai_protocol=IPPROTO_IPV6 xtables: fix excessive memory allocation in host_to_ipaddr xtables: fix the broken detection/removal of redundant addresses xtables: use all IPv6 addresses resolved from a hostname

4 3

[arch-dev-public] libgcrypt 1.5.0 needs testing
by Andreas Radke 20 Jul '11

20 Jul '11

I've pushed new libgcrypt to testing. There's no .so bump but other major changes. http://lists.gnupg.org/pipermail/gnupg-announce/2011q2/000307.html I had to disable aes-ni cpu extension support for i686 architecture because it gives segmentation faults in the test suite. Not sure if this is caused by our build process in chroot or a real issue. I've reported this to the gcrypt-devel list. Please give it a good test. I'm going to look into some gnutls test suite failures now caused by libgcrypt bump. The package should stay a bit longer in testing. -Andy

4 7

[arch-dev-public] [signoff] keyutils-1.5.1-1
by Stéphane Gaudreault 20 Jul '11

20 Jul '11

Rebuild canceled (is there a way to remove a todo list on the web dashboard ?) and pkg moved to [testing]. Please test and signoff. - Fix unread variables. - Licence file update. - Disable RPATH setting in Makefile. - Add -I. to build to get this keyutils.h. - Make CFLAGS override on make command line work right. - Make specfile UTF-8. - Support KEYCTL_REJECT. - Support KEYCTL_INSTANTIATE_IOV. - Add AFSDB DNS lookup program from Wang Lei. - Generalise DNS lookup program. - Add recursive scan utility function. - Add bad key reap command to keyctl. - Add multi-unlink variant to keyctl unlink command. - Add multi key purger command to keyctl. - Handle multi-line commands in keyctl command table. - Move the package to version to 1.5. * Tue Mar 1 2011 David Howells <dhowells(a)redhat.com> - 1.4-4 - Make build guess at default libdirs and word size. - Make program build depend on library in Makefile. - Don't include $(DESTDIR) in MAN* macros. - Remove NO_GLIBC_KEYSYS as it is obsolete. - Have Makefile extract version info from specfile and version script. - Provide RPM build rule in Makefile. - Provide distclean rule in Makefile. * Fri Dec 17 2010 Diego Elio Pettenò <flameeyes(a)hosting.flameeyes.eu> - 1.4-3 - Fix local linking and RPATH. * Thu Jun 10 2010 David Howells <dhowells(a)redhat.com> - 1.4-2 - Fix prototypes in manual pages (some char* should be void*). - Rename the keyctl_security.3 manpage to keyctl_get_security.3. * Fri Mar 19 2010 David Howells <dhowells(a)redhat.com> - 1.4-1 - Fix the library naming wrt the version. - Move the package to version to 1.4. * Fri Mar 19 2010 David Howells <dhowells(a)redhat.com> - 1.3-3 - Fix spelling mistakes in manpages. - Add an index manpage for all the keyctl functions. * Thu Mar 11 2010 David Howells <dhowells(a)redhat.com> - 1.3-2 - Fix rpmlint warnings. * Fri Feb 26 2010 David Howells <dhowells(a)redhat.com> - 1.3-1 - Fix compiler warnings in request-key. - Expose the kernel function to get a key's security context. - Expose the kernel function to set a processes keyring onto its parent. - Move libkeyutils library version to 1.3.

1 0

[arch-dev-public] keyutils-1.5.1 rebuild
by Stéphane Gaudreault 20 Jul '11

20 Jul '11

Version bump with soname change lib/libkeyutils.so.1.3 => lib/libkeyutils.so.1.4 Please rebuild package on this todo list : http://www.archlinux.org/todo/89/ Stéphane PS. I adopted this as it was orphan and it is a dependency for krb5. I guess the maintainer for this got lost when the package moved to [core]. In that case, please feel free to readopt it.

2 2

[arch-dev-public] DNS and SSL Cert
by Aaron Griffin 19 Jul '11

19 Jul '11

Two things are coming up here, and I just want to bring this discussion up again. * DNS Our everydns account is going away. According to their site (http://www.everydns.com/) we have 43-ish days to get everything moved off. We have a handful of options, some free, some not. a) https://pointhq.com/ - I use this personally. Maybe not the snappiest DNS servers in the world, but the interface is easy. b) http://reflected.net/ could host our DNS, but we'd need to manually contact people to change things c) Use our registrar (godaddy) d) Other? * SSL Cert Our StartCom cert is expiring. I need to reconfirm my identity with them, but I can get to this as early as tomorrow. Have we had any major issues with using a cert from these people? Now would be the time to switch, if so. Cheers, Aaron

6 8

[arch-dev-public] testing splitted LibreOffice 3.4.2rc1
by Andreas Radke 19 Jul '11

19 Jul '11

It's done. LibreOffice has been split into libreoffice-common and application packages -writer,base,calc,... For better look'n feel you should also install libreoffice-gnome for use in any gtk desktop and libreoffice-kde4 if you want. The en-US language is no more included in the -common pkg. So everyone will have to install at least one language pack,e.g. libreoffice-en-US. I hope I've covered the deps all well. Please test fresh installations and also upgrading from last 3.4.1 release. The new 3.4.2rc1 should be already safe for daily usage. Recommended way for new installations should be to either install libreoffice-common the should ask for a langpack or directly install the langpack of your choice that will pull in the -common pkg. Then you install the application packages you want. It's also possible to install the "libreoffice" group package. If you upgrade you should get libreoffice-common installed showing the needed infos. So get it from the testing repo and report bugs. -Andy

2 3

Re: [arch-dev-public] Audacious 3 - GTK2 vs GTK3
by Gaetan Bisson 18 Jul '11

18 Jul '11

[2011-07-18 16:56:37 -0400] John Lindgren: > I suggest building it with GTK 3, as upstream development is now > oriented toward and optimized for this version. That said, it's not a > major issue one way or the other, and Audacious will still work with GTK > 2 for some time yet. I didn't do it before because certain plugins were incompatible with gtk3 [#]. Since it's fine now with 3.0, I'll push an update to [extra]. [#] https://bugs.archlinux.org/task/24576 -- Gaetan

1 0