- Arch-dev-public - lists.archlinux.org

[arch-dev-public] potentially useful scripts for soname bumps
by Allan McRae 05 Dec '08

05 Dec '08

Hi, I have written a couple of script that other here might find useful. To generate a list of packages on your computer that require a rebuild for a library somane bump run "rebuildlist <library>", e.g. for the current heimdal rebuilt, run "rebuildlist libhx509". This creates are file called rebuildlist.txt with a list of packages that need rebuilt in it, although it is limited to what is on your system but I do not see a way around that. The second script take a list of packages that need rebuilt and annotates that list with information on the order it needs done. E.g. for the heimdal rebuild, I ran "rebuildorder rebuildlist.txt" and got: brasero (Requires totem-plparser) cups (Requires libcups) cvs evince (Requires libspectre) evolution-data-server (Requires gnome-vfs) ghostscript (Requires gtk2) gnome-panel (Requires evolution-data-server) gnome-python-desktop (Requires gnome-vfs) gnome-vfs (Requires smbclient, gtk2) gstreamer0.10-bad-plugins (Requires neon) gtk2 (Requires libcups) hplip (Requires cups, ghostscript) imagemagick (Requires ghostscript) libcups libgnomecups (Requires libcups) libgnomeprint (Requires libgnomecups) libspectre (Requires ghostscript) mplayer (Requires gtk2, smbclient) neon openoffice-base (Requires neon) openssh smbclient subversion (Requires neon) totem-plparser (Requires evolution-data-server) xfprint (Requires imagemagick) The rebuildorder script is my first "real" python script so it could probably be improved. If people think that these would be useful to have somewhere, I can tidy them up a put them in a git repo somewhere. Allan #! /bin/bash library=$1 if [ "x$library" == "x" ]; then echo "Usage $0 <library>" exit fi for pkg in $(pacman -Qq); do echo $pkg found=$(ldd $(pacman -Ql $pkg) 2>/dev/null | grep "${library}.so" | wc -l) if [ $found -ne 0 ]; then echo $pkg >> rebuildlist.txt fi; done #! /usr/bin/env python import os, sys def get_deps( package ): deps = [] pkginfo = os.popen("pacman -Si " + package + " 2> /dev/null").read().split("\n") if pkginfo != ['']: found = False for i in pkginfo: if not found: if i[0:10] == "Depends On": deplist = i.split()[3:] found = True else: if i[0] != " ": break deplist += i.split() for i in deplist: pkg = i.split(">")[0].split("<")[0].split("=")[0] if os.popen("pacman -Si " + pkg + " 2> /dev/null").read().split("\n") != ['']: deps.append(pkg) return deps rebuild_file = open(sys.argv[1], "r") rebuild_list = rebuild_file.read().split() rebuild_deps = {} package_deps = {} for i in rebuild_list: package_deps[i] = get_deps(i) for package in rebuild_list: rebuild_deps[package] = package_deps[package][:] pos = 0 while pos < len(rebuild_deps[package]): dep = rebuild_deps[package][pos] if not package_deps.has_key(dep): package_deps[dep] = get_deps(dep) for i in package_deps[dep]: if not i in rebuild_deps[package]: rebuild_deps[package].append(i) pos += 1 for package in rebuild_list: pos = 0 while pos < len(rebuild_deps[package]): if rebuild_deps[package][pos] in rebuild_list: pos += 1 else: rebuild_deps[package].pop(pos) filtered_deps = {} for package in rebuild_list: filtered_deps[package] = rebuild_deps[package][:] if len(filtered_deps[package]) > 1: pos=0 while pos < len(filtered_deps[package]) and len(filtered_deps[package]) > 1: removed = False for i in filtered_deps[package]: if filtered_deps[package][pos] in rebuild_deps[i]: filtered_deps[package].pop(pos) removed = True break if not removed: pos += 1 for package in rebuild_list: if len(rebuild_deps[package]) == 0: print package else: rebuild_deps[package].sort() print package + " (Requires " + ", ".join(["%s" % pkg for pkg in filtered_deps[package]]) +")"

2 3

[arch-dev-public] Repository Maintenance 04-12-2008 15:00
by repomaint＠archlinux.org 04 Dec '08

04 Dec '08

Scan complete for extra (i686) at /srv/ftp/extra/os/i686/ The following files are out of date They will be moved to /srv/package-cleanup gtk2-themes-collection-0.1.0-2.pkg.tar.gz php-5.2.6-5-i686.pkg.tar.gz Scan complete for extra (x86_64) at /srv/ftp/extra/os/x86_64/ The following files are out of date They will be moved to /srv/package-cleanup php-5.2.6-5-x86_64.pkg.tar.gz

1 0

[arch-dev-public] Repository Maintenance 04-12-2008 12:00
by repomaint＠archlinux.org 04 Dec '08

04 Dec '08

Scan complete for extra (i686) at /srv/ftp/extra/os/i686/ The following files are out of date They will be moved to /srv/package-cleanup grub2-1.96-1-i686.pkg.tar.gz truecrypt-6.1-1-i686.pkg.tar.gz The following files are in the repo but not the db They will be moved to /srv/package-cleanup python-pysqlite-legacy-1.0.1-5-i686.pkg.tar.gz sqlite2-2.8.17-2-i686.pkg.tar.gz Scan complete for extra (x86_64) at /srv/ftp/extra/os/x86_64/ The following files are out of date They will be moved to /srv/package-cleanup grub2-1.96-1-x86_64.pkg.tar.gz truecrypt-6.1-1-x86_64.pkg.tar.gz The following files are in the repo but not the db They will be moved to /srv/package-cleanup python-pysqlite-legacy-1.0.1-5-x86_64.pkg.tar.gz sqlite2-2.8.17-2-x86_64.pkg.tar.gz

1 0

[arch-dev-public] removal python-pysqlite-legacy/sqlite2
by Andreas Radke 04 Dec '08

04 Dec '08

While I'm on the renaming of sqlite3->sqlite I've found sqlite2 still sitting in extra just for python-pysqlite-legacy. Afaik nothing depends on these two packages. Can we remove them from the repos now? -Andy

2 2

[arch-dev-public] [signoff] libpcap, ppp
by Thomas Bächler 04 Dec '08

04 Dec '08

I think all the libpcap rebuilds in core/extra are done now, so I need signoffs for the core packages libpcap and ppp. I am signing off on libpcap x86_64, I have not tested ppp.

2 2

[arch-dev-public] Repository Maintenance 04-12-2008 06:00
by repomaint＠archlinux.org 04 Dec '08

04 Dec '08

Scan complete for extra (i686) at /srv/ftp/extra/os/i686/ The following files are out of date They will be moved to /srv/package-cleanup vlc-0.9.8-1-i686.pkg.tar.gz The following files are in the repo but not the db They will be moved to /srv/package-cleanup xf86-video-i810-1.7.4-10-i686.pkg.tar.gz Scan complete for extra (x86_64) at /srv/ftp/extra/os/x86_64/ The following files are out of date They will be moved to /srv/package-cleanup vlc-0.9.8-1-x86_64.pkg.tar.gz The following files are in the repo but not the db They will be moved to /srv/package-cleanup xf86-video-i810-1.7.4-10-x86_64.pkg.tar.gz

1 0

[arch-dev-public] Repository Maintenance 04-12-2008 03:00
by repomaint＠archlinux.org 04 Dec '08

04 Dec '08

Scan complete for extra (i686) at /srv/ftp/extra/os/i686/ The following files are out of date They will be moved to /srv/package-cleanup mutagen-1.14-2-i686.pkg.tar.gz Scan complete for extra (x86_64) at /srv/ftp/extra/os/x86_64/ The following files are out of date They will be moved to /srv/package-cleanup mutagen-1.14-2-x86_64.pkg.tar.gz xvidcore-1.1.3-2-x86_64.pkg.tar.gz

1 0

[arch-dev-public] Repository Maintenance 04-12-2008 00:00
by repomaint＠archlinux.org 04 Dec '08

04 Dec '08

Scan complete for extra (i686) at /srv/ftp/extra/os/i686/ The following files are out of date They will be moved to /srv/package-cleanup xvidcore-1.1.3-2-i686.pkg.tar.gz

1 0

[arch-dev-public] Can we trust our mirrors?
by Pierre Schmitz 04 Dec '08

04 Dec '08

Hi all, at first: it is really great that the number of mirrors is increasing and I am really thankfull to those who provide one. The point why I feel more and more uncomfortable is that we have no way to ensure tat one will get the same file from a mirror as from archlinux.org. A mirror owner might be a "bad" person himself, his servers might have weak security, the government of their home country cannot be trusted, they might sync from another "bad" mirror. etc... Of course since several years demand package signing. I have even seen some first code, but nothing was ever finished. It should be clear that something has to be done. Manipulating packages is just too easy. The simplest solution would be if we sign the db files (automatically) on gerolde. Of course this is less secure than signing every single package by its packager; but on the other side it would be easy to implement and there would be no overhead for packagers. I am aware that this method would only ensure that packages on a mirror are the same as on gerolde; if our server gets "hacked" we would have lost. But this should be fine and is far more better than just nothing and hoping that there are no "bad guys" out there. Gerhard has written a small patch as a proof of concept. Ignore the details at this point. The idea is as follows: 1) patch repo-add in order to create a .sig file everytime the db file will be changed. For this a private key readable by every dev or just sudo can be used 2) use this version of repo-add on gerolde. So we'll have the sinatures propagated to our mirrors. 3) For testing the whole thing one could just write a small download script which checks the signatures of db files. (Abusing the XferCommand statement in pacman.conf) 4) If all went well we could think about a build-in check in pacman itself. (we might be able to reuse some code here that was written for package signing) 5) Enable those checks by default for all official repos 6) The public key should not be in a package but people have to get it from our website. What do you think about this? Step 1 to 3 could be implemented in a rather short time. Pierre -- Pierre Schmitz Clemens-August-Straße 76 53115 Bonn Telefon 0228 9716608 Mobil 0160 95269831 Jabber pierre(a)jabber.archlinux.de WWW http://www.archlinux.de

5 7

[arch-dev-public] Repository Maintenance 03-12-2008 18:00
by repomaint＠archlinux.org 03 Dec '08

03 Dec '08

Scan complete for extra (i686) at /srv/ftp/extra/os/i686/ The following files are out of date They will be moved to /srv/package-cleanup postfix-2.5.3-1-i686.pkg.tar.gz Scan complete for extra (x86_64) at /srv/ftp/extra/os/x86_64/ The following files are out of date They will be moved to /srv/package-cleanup postfix-2.5.3-1-x86_64.pkg.tar.gz Scan complete for testing (i686) at /srv/ftp/testing/os/i686/ The following files are in the repo but not the db They will be moved to /srv/package-cleanup postfix-2.5.5-1-i686.pkg.tar.gz Scan complete for testing (x86_64) at /srv/ftp/testing/os/x86_64/ The following files are in the repo but not the db They will be moved to /srv/package-cleanup postfix-2.5.5-1-x86_64.pkg.tar.gz

1 0