November 2022 - Arch-general - lists.archlinux.org

Python 2.7 depends on openssl-1.1
by Friedrich Romstedt 12 Nov '22

12 Nov '22

Hi, Today I encountered an error response in my browser when attempting to use my locally-installed Trac projects. Notice that Trac, as it is installed on my system, uses Python 2.x. Inspecting /var/log/httpd/error_log I tracked the error down to the hashlib-Module in Python 2.7.18-5. Attempting to import that module in Python2 reproduced the error logged by apache precisely. So I tried to install python2-2.7.18-8 from the AUR. This required gdb and xorg-server-xvfb. After having them installed, another dependency on openssl-1.1 was reported by makepkg. Notice that the package itself is called openssl-1.1, the -1.1 is *not* the Arch Package version, which is at the moment 1.1.1.s-2. While googling to resolve the issue, before attempting to make the AUR python2 package, in some way I spotted openssl as a probable reason for the issue. It got updated from 1.1.1.q-1 to 3.0.7-2 quite recently on my system (pacman.log). As a result of this guess, I tried to downgrade from 3.0.7-2 back to 1.1.1.q-1, which failed because it would break some dependencies. Now, I installed the openssl-1.1 package (which resolves to openssl-1.1-1.1.1.s-2), as it was required to build the AUR python2-2.7.18-8 package. After having installed openssl-1.1, 'import hashlib' worked in Python2 from Arch upstream (i.e., python2-2.7.18-5), and after a machine restart my Trac projects are now up and running again as well. So there was no need to build the AUR package in the end. I am proposing to add 'openssl-1.1' to the list of requirements for the 'python2' package. 'openssl-1.1' can peacefully coexist with the 'openssl' package, AFAICT from my system. At the moment, 'python2' depends on 'openssl'. I do not know if *both* openssl (3.0.7-2) *as well as* openssl-1.1 (1.1.1.s-2) are required, or if the openssl-dependency can be dropped. For all I know, keeping them both would not harm. Best, Friedrich

2 2

pacman gpg trust db corrupted by temporary failure in name-resolution
by David C. Rankin 12 Nov '22

12 Nov '22

All, Disregard the "how do I fix?" part of the prior thread on the pacman trust db getting corrupted. (I got it fixed) Backtracking, the problem occurred after an attempted update when there was a temporary failure in name-resolution due to the DNS server undergoing a reboot when the pacman update was attempted. Corruption of the trust store should not occur due to name resolution failure. Is this a "feature" of the latest pacman release? Does it need further investigation? -- David C. Rankin, J.D.,P.E.

1 0

/var/cache/pacman/pkg/archlinux-keyring-20221110-1-any.pkg.tar.zst is corrupted
by David C. Rankin 12 Nov '22

12 Nov '22

Full system update completed find earlier, but then attempting to install lightdm, the following error was received: :: Proceed with installation? [Y/n] :: Retrieving packages... libxklavier-5.4-3-x86_64 72.5 KiB 145 KiB/s 00:01 [######################################] 100% lightdm-1:1.32.0-4-x86_64 239.1 KiB 357 KiB/s 00:01 [######################################] 100% Total (2/2) 311.6 KiB 351 KiB/s 00:01 [######################################] 100% (2/2) checking keys in keyring [######################################] 100% warning: Public keyring not found; have you run 'pacman-key --init'? downloading required keys... error: keyring is not writable error: keyring is not writable error: required key missing from keyring error: failed to commit transaction (unexpected error) Errors occurred, no packages were upgraded. Huh? Attempting to update archlinux-keyring results in: :: Proceed with installation? [Y/n] (1/1) checking keys in keyring [######################################] 100% (1/1) checking package integrity [######################################] 100% error: archlinux-keyring: signature from "Christian Hesse <eworm(a)archlinux.org>" is unknown trust :: File /var/cache/pacman/pkg/archlinux-keyring-20221110-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded. Attempting lightdm again results in Allan's key not found and of unknown trust: :: Proceed with installation? [Y/n] (2/2) checking keys in keyring [######################################] 100% downloading required keys... :: Import PGP key F99FFE0FEAE999BD, "Allan McRae <allan(a)archlinux.org>"? [Y/n] :: Import PGP key 0F65C7D881506130, "Maxime Gauduin <alucryd(a)archlinux.org>"? [Y/n] (2/2) checking package integrity [######################################] 100% error: libxklavier: signature from "Allan McRae (Developer) <allan(a)archlinux.org>" is unknown trust :: File /var/cache/pacman/pkg/libxklavier-5.4-3-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] error: lightdm: signature from "Maxime Gauduin <alucryd(a)archlinux.org>" is unknown trust :: File /var/cache/pacman/pkg/lightdm-1:1.32.0-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded. Is this a temporary issue or did something get fsck'ed up on my system? (and how to attempt to fix?) -- David C. Rankin, J.D.,P.E.

1 0

random junk appended to kernel command line
by Geert Hendrickx 10 Nov '22

10 Nov '22

Hi I'm UEFI-booting Arch Linux from a unified kernel image (UKI) generated by mkinitcpio: https://wiki.archlinux.org/title/Unified_kernel_image Recently, I'm seeing random junk being appended to the kernel commandline: $ cat /proc/cmdline "_VGA] +WQmapper/ssdvg-root rw quiet loglevel=3 udev.log_priority=3 ]GM?|-dQ2�H~A3y $ hexdump -C /proc/cmdline 00000000 72 6f 6f 74 3d 2f 64 65 76 2f 6d 61 70 70 65 72 |root=/dev/mapper| 00000010 2f 73 73 64 76 67 2d 72 6f 6f 74 20 72 77 20 71 |/ssdvg-root rw q| 00000020 75 69 65 74 20 6c 6f 67 6c 65 76 65 6c 3d 33 20 |uiet loglevel=3 | 00000030 75 64 65 76 2e 6c 6f 67 5f 70 72 69 6f 72 69 74 |udev.log_priorit| 00000040 79 3d 33 20 17 5d 47 4d 05 3f 7c 2d 64 51 32 1a |y=3 .]GM.?|-dQ2.| 00000050 1f 48 15 7e 41 33 79 0d 22 5f 56 47 41 5d 20 2b |.H.~A3y."_VGA] +| 00000060 57 51 0a |WQ.| 00000063 (the junk is only at the end, but with "cat" it garbles the terminal and overwrites the beginning of the line. hexdump shows it's exclusively at the end though.) Unrecognized junk is then passed on to init: $ journalctl -k -o cat | grep -a command\ line "_VGA] +WQmand line: root=/dev/mapper/ssdvg-root rw quiet loglevel=3 udev.log_priority=3 ]GM?|-dQ2�H~A3y Unknown kernel command line parameters "]GM?|-dQ2�H~A3y _VGA] +WQ", will be passed to user space. $ ps -ef | grep init root 1 0 1 20:30 ? 00:00:00 /sbin/init ?]GM??|-dQ2??H?~A3y _VGA] +WQ (journalctl without -o cat doesn't even print those lines.) The input file /etc/kernel/cmdline (used by mkinitcpio to generate the UKI) is clean though: $ cat /etc/kernel/cmdline root=/dev/mapper/ssdvg-root rw quiet loglevel=3 udev.log_priority=3 And the UKI itself doesn't seem to contain this random junk either: $ hexdump -C /boot/archlinux-linux.efi | grep -A5 root= 0000e200 72 6f 6f 74 3d 2f 64 65 76 2f 6d 61 70 70 65 72 |root=/dev/mapper| 0000e210 2f 73 73 64 76 67 2d 72 6f 6f 74 20 72 77 20 71 |/ssdvg-root rw q| 0000e220 75 69 65 74 20 6c 6f 67 6c 65 76 65 6c 3d 33 20 |uiet loglevel=3 | 0000e230 75 64 65 76 2e 6c 6f 67 5f 70 72 69 6f 72 69 74 |udev.log_priorit| 0000e240 79 3d 33 20 00 00 00 00 00 00 00 00 00 00 00 00 |y=3 ............| 0000e250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| However when booting the kernel directly (not the UKI) from the UEFI shell, the same kernel command line is passed clean. No idea what is causing this, but it's a recent issue. I have regenerated the UKI several times, and also tried downgrading mkinitcpio back to v31, and the kernel to 5.19, but keep getting the same result. I'm not suspecting the hardware, since I'm seeing the same issue on two different machines. Any ideas? Geert

2 2

(Arch)Linux source routing help
by Pascal 09 Nov '22

09 Nov '22

*(sorry, the previous message is gone a bit fast)* hi, where can I get help for this ? my problem is : I'm on a corporate network that is filtered (proxy) and I need to run some tests on a virtual machine that needs to have direct access to the Internet. I set up this configuration and try to route everything that comes out of tap0 to wlan0 and then to Internet. - - \ / \ / \ / +--------\-------+ +-------/-------+ |free GW | |corporate GW | |192.168.144.254 | |10.10.10.254/24| <http://10.10.10.254/24%7C> +--------|-------+ +-------|-------+ \ / +---------------|-----------------|------+ |HOST |wlan0 | |eth0 | | |192.168.144.1/24| <http://192.168.144.1/24%7C> |10.10.10.1/24| <http://10.10.10.1/24%7C> | +----------------+ +-------------| | | | +-----------------+ | | |tap0 | | | |192.168.11.254/24| <http://192.168.11.254/24%7C> | | +--------|--------+ | | | | | +-------------|--------+ | | |VM |eth0 | | | | |192.168.11.1/24 | | | | +-----------------| | | +----------------------+ | +----------------------------------------+ here are the commands used: # ip tuntap add tap0 mode tap user me # ip addr add 192.168.11.254/24 dev tap0 # ip link set tap0 down # echo 11 tap0 >> /etc/iproute2/rt_tables # ip rule add from 192.168.11.254 lookup tap0 # ip route add default via 192.168.144.254 dev wlan0 proto dhcp src 192.168.144.1 # echo 1 > /proc/sys/net/ipv4/ip_forward # iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE I can ping 8.8.8.8 from my virtual machine but all traffic (host/corporate) now seems to flow through wlan0 (tshark -i wlan0)... regards, lacsaP.

4 4

(Arch)Linux source routing help
by Pascal 09 Nov '22

09 Nov '22

hi, where can I get help with this ? my problem is this: I'm on a corporate network that is filtered (proxy) and I need to run some tests on a virtual machine that needs to have direct access to the Internet. I set up this configuration and try to route everything that comes out of tap0 to wlan0 and then to Internet. - - \ / \ / \ / +--------\-------+ +-------/-------+ |free GW | |corporate GW | |192.168.144.254 | |10.10.10.254/24| +--------|-------+ +-------|-------+ \ / +---------------|-----------------|------+ |HOST |wlan0 | |eth0 | | |192.168.144.1/24| |10.10.10.1/24| | +----------------+ +-------------| | | | +-----------------+ | | |tap0 | | | |192.168.11.254/24| | | +--------|--------+ | | | | | +-------------|--------+ | | |VM |eth0 | | | | |192.168.11.1/24 | | | | +-----------------| | | +----------------------+ | +----------------------------------------+

1 0

installing archlinux, get lynx accessible first
by Jude DaShiell 08 Nov '22

08 Nov '22

I had a read through the Installation_guide script and discovered it uses lynx to bring the guide up on the screen. I'm a screen reader user so whenever I use lynx and certain other console browsers I set certain options then save me a .lynxrc file before using lynx further. Two really critical options are show cursor on so my screen reader can track where I am on the screen and links and form fields are numbered so I can find links to run. Others are there too but for me these are most critical. Once the .lynxrc file is saved reading through the installation_guide for me is much better. elinks and links can show numbered links but their configuration is a bit different. So for screen reader users who find numbered links in lynx the cat useful, before running Installation_guide get lynx configured so it runs well for you. I did this on a flash drive so my .lynxrc got saved for future use. Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author, 1940) .

3 4

Keeping desktop PC and laptop in sync
by Joel 07 Nov '22

07 Nov '22

Hi, as we have a discussion ongoing about setting up a new PC, I thought I could jump in with my current issue : I have retired my laptop and bought a desktop PC. Gone through the fresh installation process (once every 12 years is OK to declutter a bit), and rsync'ed my home directory (parts of it, mostlyskipped ~/.local and~/.config where I found some 10-20 years old files from programs I used once but never since). Now I still want to use my laptop when I'm on the road, which happens rather seldomly (once every 2 weeks), i.e. have my files, my bookmarks etc available on my laptop. Also not only have to sync my /home/$USER but also /root and some more mountpoints (source code, website stuff, audio, video, pictures), totaling around 1.5TB of data I've been playing around with rsync and adding many many exclude rules to a) limit the amount of files being transferred (eg exclude ~/.cache, browser's cache, thunderbird's imap cache etc) so I can keep an overview if something is getting overwritten that I don't want b) keep certain files (especially XFCE config etc) distinct as eg I have 2 monitors on my PC vs only 1 on the laptop -> different menus, window settings etc Now this is pretty tedious, initial rsync's dry-run showed ~700k files that would be sync'ed, which I brought down to 1k after several iterations and adjustment of exclude settings, and this is so far my first run - currently using my laptop and will sync back when I'm home again... let's see how many files will differ then ! So I'm looking for more easy-to-use alternatives. Most important thing : I want dry-run functionality to prevent unwanted data loss, which means automatic sync tools are not the way to go ! I think synthing is such a candidate, unless I missed the dry-run option somewhere. Have used unison many many years ago, but I think it was also not perfect and had issues handling thousands/millions of files. Heard of some new systemd homesync (?), but didn't have a look at it now, sounds also like it automatically syncs. Any thoughts / recommendations / advices ? Many thanks Joel

6 8

Re: [arch-dev-public] openssl 3.0
by Genes Lists 07 Nov '22

07 Nov '22

Just a note to thank you all for pushing this over the line. Obviously a huge effort and very big thanks!! Everything I've tested so far works just fine : dovecot, postfix, ldns, rust/cargo, nginx-mainline, cyrus-sasl, nsd, unbound, cryptsetup, stunnel and kernel signed modules. Looking forward to testing python 3.11 as well!! Thank you for all the work you do keeping things running so well. gene

5 5

kea_config tool available
by Genes Lists 05 Nov '22

05 Nov '22

In the spirit of continuing to give back to the community, I'm happy to share my kea configuration tool. kea_config is available in the AUR [1] with source on github [2] kea is the current ISC dhcp server software taht offers a nice feature set, including a hot standby to pick up should the primary be unavailable. Its power also lurks behind a somewhat complicated configuration suite that, at least for me, isn't the most human friendly and creates a burden to keep things appropriately consistent. kea_config provides a nice and clean way to generate the required config files from a simple, single config. It generates the set of configs for each of primary, backup and standby servers which are then copied to each server; each can then use a link to primary or standby or backup config as appropriate. If you only run primary, that's fine too :) For host reservations it uses hostnames and looks up the IP - thus further helping reduce risk of human error. Hope others find it helpful. regards, gene [1] https://aur.archlinux.org/packages/kea_config [2] https://github.com/gene-git/kea_config

1 0