February 2014 - Arch-general - lists.archlinux.org

[arch-general] Updating the archlinux-keyring package
by Leonid Isaev 14 Feb '14

14 Feb '14

Hi, Recently I had to fix a corrupted pacman db from a 3 month old livecd and realized that this process is not so innocent. Specifically, there is a chance to get a trojaned package on the system simply because the archlinux-keyring package on the iso is outdated. Of course, other similar scenarios are possible, e.g. a fresh install is made from an old livecd, or a server is updated after several months of uptime: new packages are pulled in but signature checks are made using the old keyring currently on the host. So, instead of relying on the discrete updates of archlinux-keyring, wouldn't is make more sense to have a systemd timer/cron job to frequently refresh pacman keyring? Thanks, -- Leonid Isaev GPG key fingerprint: C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D

5 6

[arch-general] Vim configuration: custom runtimepath + ftdetect
by Jakub Klinkovský 14 Feb '14

14 Feb '14

I have moved ~/.vim to ~/.config/vim, the configuration is as follows: in ~/.profile: export VIMINIT='let $MYVIMRC="$XDG_CONFIG_HOME/vim/vimrc" | source $MYVIMRC' in ~/.config/vim/vimrc: set viminfo+=n$XDG_CACHE_HOME/vim/viminfo set runtimepath=$XDG_CONFIG_HOME/vim,$XDG_CONFIG_HOME/vim/after,$VIM,$VIMRUNTIME Now, the thing is that files from ~/.config/vim/ftdetect/ are not respected. On the other hand, if I create ~/.vim/ftdetect/ (leaving the vimrc and everything else under ~/.config), the files are correctly sourced. Is this a bug or am I missing something here? According to ':help ftdetect' the runtimepath should be respected. For completeness: I have vim-hg-7.4.179 installed, the PKGBUILD is here: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Build/vim-hg/PKG… Thanks, -- jlk

2 3

[arch-general] KDE breakage with glibc 2.19-2
by Paul Gideon Dann 14 Feb '14

14 Feb '14

Is anyone else seeing breakage of KDE compositing with glibc 2.19-2? Large areas are unrendered: window contents and the plasma desktop are black, although my panel is visible. Seems OK when I turn of compositing. I've tried going back and forth, and it's definitely the glibc update that's causing the issue for me. Anyone else? Paul

2 1

[arch-general] Systemd email notifications
by Paul Gideon Dann 14 Feb '14

14 Feb '14

Hello all, Does anyone know of any standard system for receiving notifications from systemd for unit state changes? I currently use Monit for the monitoring of many processes, and it'll e-mail me when things happen (e.g. a process was restarted). Since switching to systemd, it's felt a bit silly that for several processes, I'm having Monit monitor them simply because systemd is unable to tell me it restarted a unit. Monit isn't actually required to keep those processes alive as it once was, because systemd can do that. Paul

7 16

[arch-general] Linux container
by arnaud gaboury 13 Feb '14

13 Feb '14

Dear all, I am slowly building a Arch Linux VM guest on my Arch Linux host. The guest machine is now built and is recognized as shown by this command : gabx@hortensia ➤➤ ~ % machinectl list MACHINE CONTAINER SERVICE dahlia container nspawn 1 machines listed. I an following the libvirt.org documentation. Now, according this page[1] about lxc driver, i am dealing with namespace requirements. This sentence, in bold, puzzles me: A suitably configured UID/GID mapping is a pre-requisite to making containers secure, in the absence of sVirt confinement. If I understand what a namespace is, I have no idea how to make sure my UIG/GID mapping is well configured. I would appreciate having any hints abut this part of the settings. Another question : is there any advantage/disadvantage using the lxc Userspace tools[2] instead of libvirt to manage these namespaces ? Thank you for help. [1]http://libvirt.org/drvlxc.html [2]http://linuxcontainers.org/

6 11

[arch-general] "Automatic" upgrade
by Ismael Bouya 11 Feb '14

11 Feb '14

Hi, I know it is highly discouraged and that it can break the machine, but I have a good reason to do it anyway: It's highly unpractical to me to access the machine from where I am -- even remotely: I need someone to manually open a tunnel each time I want to access the machine --, and the other person who has root access to the machine doesn't think of doing the upgrade regularly: Last upgrade was 2 months ago, despite regular reminders. However I want to do it the best way: - Check that the Arch news didn't change - ssh is run as a service and not a socket (it's a headless machine) - Ignore ssh, linux, grub upgrades - Transmit the log by email (I *will* read it) - Send by email the list that will be upgraded before doing the upgrade Anything else I should check before running an automatic upgrade? Any other advice? Thanks in advance for any advice! Best regards, -- Ismaël

9 14

[arch-general] Arch VM + QEMU/KVM + libvirt + Systemd
by arnaud gaboury 11 Feb '14

11 Feb '14

Dear all, I have been reading and working hard these past few days to set up a Arch VM guest on my Arch host. The guest partition is on /dev/sdc and mounted on my root partition as /dahlia (name of the machine). First question : is this Ok or shall I instead use /machine/dahlia as container directory. Then, this partition is mounted twice indeed. One time on my host fstab as /dahlia and a second time on my guest fstab as /. It sounds to me redundant. Then I installed Arch with pacstrap on /dahlia. No bootloader but Linux (i will remove the last one later as I want to share the kernel with the host). After many errors due to some missing libs, installation went fine. I managed everything about cgroups, even spent hours on /etc/cgconfig.conf which is not mandatory since systemd 205. I can see a dahlia folder in all controllers (sys/fs/cgroup/$CONTROLLER-NAME). As for systemd, I enabled cgconfig , libvirt-guest.service and systemd-machined.service gabx@hortensia ➤➤ ~ % systemctl status systemd-machined.service systemd-machined.service - Virtual Machine and Container Registration Service Loaded: loaded (/usr/lib/systemd/system/systemd-machined.service; static) Active: active (running) since Tue 2014-02-11 08:09:25 CET; 12min ago Docs: man:systemd-machined.service(8) http://www.freedesktop.org/wiki/Software/systemd/machined Main PID: 980 (systemd-machine) CGroup: /system.slice/systemd-machined.service └─980 /usr/lib/systemd/systemd-machined Feb 11 08:09:25 hortensia systemd[1]: Starting Virtual Machine and Container Registration Service... Feb 11 08:09:25 hortensia systemd[1]: Started Virtual Machine and Container Registration Service. Hint: Some lines were ellipsized, use -l to show in full. Now comes the tricky part : registering my container with slice mechanism. $ machine ctl returns empty. /sys/fs/cgroup/systemd/machine.slice directory contains nothing about dahlia container. gabx@hortensia ➤➤ ~ # systemd-nspawn -M /dahlia Invalid machine name: /dahlia gabx@hortensia ➤➤ ~ # systemd-nspawn -bD /dahlia Spawning namespace container on /dahlia (console is /dev/pts/1). Init process in the container running as PID 1208. execv() failed: No such file or directory Container failed with error code 1. I put a machine-dahlia.slice unit file in /etc/systemd/system, but I am not sure it is enough. I read I shall register the container with logind, but no idea how. How can I register my container for systemd to recognize it ? Shall I use the usual way with libvirt and virsh ? Thank you for help in such a tricky set up. --

1 1

[arch-general] Forum registration requires INSANE captcha.
by Feliz Xett 11 Feb '14

11 Feb '14

Hi all! I hope it's ok to bother this list with this question/suggestion/rant about the forum registration process. I've been using arch for a couple of months now and I'm very happy with it. Today, I somewhat broke my box so I was excited to post my first question to the forums at bbs.archlinux.org. On the bottom of the registration page there was a very clever "captcha". The question was: What is the output of "date -u +%V$(uname)|sha256sum|sed 's/\W//g'"? I might even have found this funny if I wasn't ON A NON-LINUX LAPTOP. <rant> I'm sorry, but this is ridiculous. To be honest I am extremely annoyed because this barrier is so unnecessary. Why is there not just a simple normal captcha that helps Google with house numbers or something. It looks to me like someone wanted to demonstrate that whoever is not able to find the solution to *such* a simple question is not worthy of the forums. Only they failed to consider that possibly there might be situations where even the cleverest person just *can't* find the solution to a question like this. </rant> Could this please please please be replaced with a real captcha? Also, this is obviously absolutely unsuitable to tell computers and humans apart (if that's what was intended), considering that the result only changes once a week and any unix machine could easily calculate the result. Aaanyway. Could someone please give me the solution? I'd still like to join the forums once I calmed down :) FE

24 29

[arch-general] Permanently allow root access
by piruthiviraj natarajan 11 Feb '14

11 Feb '14

I want to run root X application in a terminal. [root@archbox ~]# smplayer smplayer: cannot connect to X server [root@archbox ~]# I followed the wiki https://wiki.archlinux.org/index.php/Running_X_apps_as_root added export XAUTHORITY=/home/archie/.Xauthority to /etc/profile. After this I am not able to login with my user account archie through gdm. Deleting the added line to /etc/profile let me log back in. How can I get this thing working as I wish? I definitely don't prefer the method given under temporarily allow root access as per the wiki page, since in other distribution I can start the X applications in a root terminal without a hitch. I would like to start root X applications in a terminal.

5 8

Re: [arch-general] Permanently allow root access
by Martti Kühne 10 Feb '14

10 Feb '14

Hey guys I'll just throw my more local (than probably necessary) .bashrc function in here... sudo () { local env; if [[ -n "$DISPLAY" ]]; then command sudo "XAUTHORITY=$HOME/.Xauthority" "$@"; else command sudo "$@"; fi } You don't give up on X11 cookies, you don't need to touch pam and can go on hoping it works in your favor, and thridly, there's even a mention of .Xauthority in the stock sudoers file, so, you'll never find where these things are set up on a running system anyway... cheers! mar77i

2 3