- Arch-general - lists.archlinux.org

xdg-desktop-portal does not start
by Radosław Kintzi 18 Jun '25

18 Jun '25

Hi, For some time, I have had a problem with screen sharing/capturing in Sway. I tested it using both Firefox and Chromium with Google Meet and this test page: https://mozilla.github.io/webrtc-landing/gum_test.html. I went through the troubleshooting checklist (available here: https://github.com/emersion/xdg-desktop-portal-wlr/wiki/%22It-doesn't-work%22-Troubleshooting-Checklist) to find out that xdg-desktop-portal.service is not started. Not that it fails. It is not even being attempted. How can I make it start? Below is what I tried. I noticed that xdg-desktop-portal.service is a "PartOf" graphical-session.target, so I configured my sway.target to bind to the graphical session. The Sway target is started in the Sway configuration, which includes a slightly modified 50-systemd-user.conf available in the Arch package: --- 50-systemd-user.sh --- # Upstream refuses to set XDG_CURRENT_DESKTOP so we have to. exec systemctl --user set-environment XDG_CURRENT_DESKTOP=sway exec systemctl --user import-environment DISPLAY \ SWAYSOCK \ WAYLAND_DISPLAY \ XDG_CURRENT_DESKTOP exec hash dbus-update-activation-environment 2>/dev/null && \ dbus-update-activation-environment --systemd DISPLAY \ SWAYSOCK \ XDG_CURRENT_DESKTOP=sway \ WAYLAND_DISPLAY \ PATH exec systemctl --user start sway.target --- The sway.target is very simple: --- (~)$ cat .config/systemd/user/sway.target [Unit] Description=Sway target AllowIsolate=yes BindsTo=graphical-session.target --- This changed nothing, so I tried to start xdg-desktop-portal manually to find out that it ends with a core dump. Logs attached. Not sure if this is related to the problem that the service is not started or if it is an unrelated issue. Any advice? Thanks, Radek

3 4

[arch-general] Now that wine is actually wine-wow64, should wine-mono be moved from from multilib to extra?
by Javier 16 Jun '25

16 Jun '25

Hello ! Currently wine-mono [1] is still under the multilib repo, I guess now wine has actually become wine-wow64 [2], and the AUR package is now just a meta package installing wine [3], so I'm wondering if wine-mono should then be moved to extra instead. Perhaps the process is not complete yet. But as wine-mono is not on AUR, then if one doesn't include the multilib repo then wouldn't be able to find wine-mono... Greetings ! -- Javier [1] https://archlinux.org/packages/multilib/x86_64/wine-mono [2] https://archlinux.org/news/transition-to-the-new-wow64-wine-and-wine-staging [3] https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=wine-wow64

1 0

[arch-general] jami consuming too much cpu and jami packages issues
by Javier 16 Jun '25

16 Jun '25

Hello ! I would file an issue on the Arch jami related packages, because they're not only outdated, but I believe due to that jami consumes way too much CPU, you listen to the fans working extra, and top shows 95% usage or more, no matter how fast your PC is. The reason I don't is that my phone broke and I didn't have my aegis data backed somewhere and I can no longer login to Arch gitlab, and as long time ago it happened he same to me and I was warned they wouldn't help me out a 2nd time, oh well. Anyone experiencing the same? I see jami-qt marked as out of date, but I see no issues filed against it, same for jami-daemon. opendht is not marked out of date, and the only issues is about C bindings, however opendht currently has a dependency problem, Arch moved to llhttp 9.3.0, however opendht was linked against llhttp 9.2: > % ldd /usr/lib/libopendht.so > linux-vdso.so.1 (0x00007ff662064000) > libfmt.so.11 => /usr/lib/libfmt.so.11 (0x00007ff661ffa000) > libllhttp.so.9.2 => /usr/lib/libllhttp.so.9.2 (0x00007ff661fe8000) So the only way to currently support opendht is: > % grep IgnorePkg /etc/pacman.conf > # Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup > IgnorePkg = llhttp libgit2 bat Meaning avoid updates on those 3 packages given their dependency chain related to llhttp, since both libgit2 and bat new versions on Arch depend on llhttp 9.3 already except for opendht, which then requires a re-build. BTW, current upstream opendht release is v3.4.0, meaning the Arch "1:3.2.0-2" ought an update anyways, meaning is also out of date, and by upgrading one gets the re-build required, :) So all jami related packages out of date, jami the application consumes too much CPU, and opendht besides out of date requires a re-build to link against current repos llhttp. Not sure how to notify the developers to deal with the jami current issues, perhaps someone could file issues on the packages, particularly opendht which doesn't even have an out of date mark. Thanks a lot ! -- Javier

2 5

Pacman lite?
by Pocket 14 Jun '25

14 Jun '25

Is it possible to build a neutered version of pacman? A pacman lite if you will.... I need to cut down on the dependencies pacman requires. Without key signing and package signing. I would like to only have package building and package management and pull from an http respository. This is for a custom built OS that I would like to use pacman on an ARM SBC. it currently uses rpm as a package manager. I would also like to build them using makepkg. -- Hindi madali ang maging ako

5 6

Pacman/icu conflict: error while loading shared object
by Jeanette C. 09 Jun '25

09 Jun '25

Hey hey, I just updated icu, which broke pacman. I then used pacman-static to install the latest pacman version, using pacman-static, but no change. icu version: 76.1-1 pacman version: 7.0.0.r6.gc685ae6-6 Error message: pacman: error while loading shared libraries: libicuuc.so.75: cannot open shared object file: No such file or directory Can anyone suggest a workaround? Best wishes, Jeanette -- * Website: http://juliencoder.de - for summer is a state of sound * Youtube: https://www.youtube.com/channel/UCMS4rfGrTwz8W7jhC1Jnv7g * Audiobombs: https://www.audiobombs.com/users/jeanette_c * GitHub: https://github.com/jeanette-c Just hang around and you'll see, There's nowhere I'd rather be <3 (Britney Spears)

4 11

Issues with Viewers for "special" images
by Ralf Mardorf 09 Jun '25

09 Jun '25

Hi, yesterday after the latest updates I tried to view some "special" images. I tried to view a JPEG 2000 with extra/geeqie and with extra/krita and I tried to view some FITS {,demo} images with extra/stellarsolver and extra/kstars. I don't know if this worked before, it was the first time I tried to view those kinds of images by my Arch Linux install. It was impossible to view the JPEG 2000 and more or less impossible to view FITS images. Just extra/stellarsolver was able to view a FITS demo image, but failed most of the times, too. I was able to view the JPEG 2000 image on an iPad Pro. I don't want to troubleshoot those issues, I'm just interested if somebody was ever able to view JPEG 2000 and/or FITS images with applications from the official repos. Regards, Ralf

6 11

Akonadi / KMail broken imap resource
by Bennett Piater 09 Jun '25

09 Jun '25

Hi, My IMAP resources broke in Kontact/KMail this week. My first idea was to try akonadictl restart, followed by fsck and vacuum. The restart triggered a mariadb migration, which was successful (shouldn't that have happened automatically before...?). However, it didn't change much. The logs were full of errors like these - the imap resource crashes, with no clear cause: org.kde.pim.akonadicontrol: ProcessControl: Application "/usr/bin/ akonadi_imap_resource" stopped unexpectedly ( "Process crashed" ) org.kde.pim.akonadicontrol: Application '/usr/bin/akonadi_imap_resource' crashed! 0 restarts left. org.kde.pim.akonadiserver: New notification connection (registered as Akonadi::Server::NotificationSubscriber(0x7fe4b02b4f00) ) org.kde.pim.akonadiserver: Subscriber Akonadi::Server::NotificationSubscriber(0x7fe4b02b4f00) identified as "AgentBaseChangeRecorder - 93936498547840" org.kde.pim.akonadiserver: Subscriber "AgentBaseChangeRecorder - 93936498547840" disconnected org.kde.pim.akonadicontrol: ProcessControl: Application "/usr/bin/ akonadi_imap_resource" stopped unexpectedly ( "Process crashed" ) org.kde.pim.akonadicontrol: Application '/usr/bin/akonadi_imap_resource' crashed too often. Giving up! I then tried deleting the mariadb and having akonadi re-create it, which helped me once in the past (should be fine since it's only an indexed cache). Finally, I tried deleting and re-adding the account in kontact. None of the above worked. Any ideas how to proceed? Is there more that I could try to reset? Are there more detailed logs somewhere? I'm hoping arojas has an idea - you're a heroic maintainer, thank you in any case! Cheers, Bennett

1 0

Signstar design concepts - questions
by cen 04 Jun '25

04 Jun '25

Hi, reading through https://signstar.archlinux.page/architecture/design.html can someone explain how the SSS shares are distributed among holders? Do they physically meet for a beer and each takes out a print out from initial console setup? Could you perhaps pre-bake share holder's SSH keys into the image and do a one share per key as the do first login? This way they could retrieve it remotely. My second question is if confidential compute was considered instead of a dedicated physical hardware and OS? Could you replace the setup with a confidential VM that runs signstar as verifiable service?

2 2

stable-repos Newsfeed Never Showed linux 6.14.7.arch2-1 x86_64 after it left core-testing?
by David C Rankin 25 May '25

25 May '25

Arch Admins, I use the newsfeeds extensively to keep track of what packages are coming for server updates. This past cycle with linux 6.14.7.arch2-1, it appeared in core-testing (https://archlinux.org/feeds/packages/x86_64/core-testing/) on 5/22, but I never show it reaching: https://archlinux.org/feeds/packages/all/stable-repos/ This is really just to pass this along in case there is a problem with the feeds. However, if anyone knows why this occurred, I'm curious about that fact as well. -- David C. Rankin, J.D.,P.E.

1 0

[ANNOUNCE] Proposed fix for dnssec-anchors package (outdated trust anchors + unused makedepends)
by meowmeowbeanz 24 May '25

24 May '25

Hi arch-dev-public, I'm announcing a proposed moderate change to the dnssec-anchors package per the developer manual guidelines. ## Summary Fix for 5+ year old DNSSEC trust anchors and unused makedepends in the dnssec- anchors package. ## Issues Addressed - GitLab Issue: #2 (outdated trust anchors) - Existing Bug: #77100 (unused makedepends, assigned to jelly) ## Proposed Changes - Restore dynamic trust anchor generation in build() function - Filter for KSK records (flag 257) to eliminate DNSSEC warnings - Update package version to 20250523-1 - Remove dependency on static 2019 files ## Testing - Verified DNSSEC validation works correctly - Eliminated knot-resolver warnings - Confirmed proper ad flag behavior with drill/kdig ## Merge Request Available at: https://gitlab.archlinux.org/archlinux/packaging/packages/ dnssec-anchors/-/merge_requests/1 The change preserves the established purpose (providing DNSSEC trust anchors) while updating to current practices and fixing confirmed bugs. Comments and feedback welcome. Thanks, meowmeowbeanz

1 0

openSUSE removes Deepin from official distro on security grounds - Arch have similar concerns?
by David C Rankin 14 May '25

14 May '25

Devs, The Register posted an article about openSUSE removing the Deepin desktop based on dbus abuse and other security and packaging violations. The issues are documented and linked in the article: https://go.reg.cx/tdml/dfd67/684a187f/7019d634/4gJn Has Arch done a similar analysis or have similar concerns? openSUSE have removed it from the distro, but left the package available in the community packager's repoo (similar to AUR setup). Not sure whether that is something to consider here. The concern being that by providing official packages openSUSE gave Deepin the aura of being up to the distros security standards where apparently that isn't something that was warranted. -- David C. Rankin, J.D.,P.E.

2 1

Bash [[ foo =~ regex ]] behavior changed with last update, gentoo patches?
by David C Rankin 09 May '25

09 May '25

Arch devs, I have a script that parses IP and CIDR notation using the following to capture IPs: [[ $1 =~ ^([^.]{1,3})[.]([^.]{1,3})[.]([^.]{1,3})[.]([^.]{1,3})$ ]] # validate 5 elements in BASH_REMATCH array if [ "${#BASH_REMATCH[@]}" -eq 5 ]; then ... (yes, I can improve it -- but that's not the point here) Then to capture CIDR: [[ $1 =~ ^([^.]{1,3})[.]([^.]{1,3})[.]([^.]{1,3})[.]([^.]{1,3})/(.*)$ ]] # validate 6 elements in BASH_REMATCH array if [ "${#BASH_REMATCH[@]}" -eq 6 ]; then ... This script was used to automatically update ipset lists and save /etc/ipset.conf. It has worked for years. Today after update to bash-5.2.037-3-x86_64 I get: $ ipsa 38.0.0.0/8 /home/david/scr/adm/ipset_add.sh: line 6: [: 0/8: integer expression expected /home/david/scr/adm/ipset_add.sh: line 6: [: 0/8: integer expression expected valid IP: 38.0.0.0/8 ipset v7.23: Hash is full, cannot add more elements The problem being for the first time ever, the regex in: [[ $1 =~ ^([^.]{1,3})[.]([^.]{1,3})[.]([^.]{1,3})[.]([^.]{1,3})$ ]] parsed the IP as 38 0 0 0/8 (with the "/8") instead of 38 0 0 0 filling the ipset blocklist completely with sequential 38.x.x.x IPs. Technically this regex matching is correct as the final character list [^.] doesn't preclude inclusion of '/', but this is a definite change from all prior bash versions. Is this the intended result of the gentoo patches change to the package? I've since fixed the regex with [^./] as the final list. Are there any other known changes to regex parsing with the changes to the bash PKGBUILD and patches? -- David C. Rankin, J.D.,P.E.

3 3

Package building and signing
by Pocket 06 May '25

06 May '25

I am building packages using makepkg for the raspberry pi 4 platform I changed the CFLAGS adding -march=armv8-a -mtune=cortex-a72 (makepkg.conf). I started to build all the packages that make up the "Building in a clean chroot" following the building in a claen chroot on the wiki. All when well. I will then build all the "base" package followed by all the packages I use on a "desktop" system. I would now like to make a custom repository for those packages and then have pacman install from there, eventually to remove the core extra etc repositories. I know how to create the custom repository (from the various wiki docs) using repo-add. I have a nginx web server on a remote raspberry pi and it will serve those packages from /etc/pacman.conf [custom] SigLevel = Optional TrustAll Server = http://www.home.arpa/Repository So my questions are as follows 1. How to get pacman to pull the packages from the custom repository first 2. I would like to sign the packages in the custom repository. I have looked at some of the information regarding signing packages(maybe missing some of them). It was totally confusing. I need guidance in the form of Step 1, step 2 etc. Is there such docs in existance? -- Hindi madali ang maging ako

5 8

Stop makepkg from running gpg on .sig files
by Sebastian Wiesner 06 May '25

06 May '25

Hello, apparently makepkg automatically attempts to verify .sig files in the SOURCES array with gpg. Can I somehow stop this behaviour? I have .sig URLs but these aren't GPG signatures, but SSH signatures I'd like to validate in a custom verify() function. Currently, I'm working around this by renaming the upstream .sig files to .sigssh in SOURCES, but that's rather inconvenient. Cheers, Basti

2 4

Building in a clean chroot
by Pocket 05 May '25

05 May '25

I am getting this error when running is there a way to fix this? Using makechrootpkg -c -r "$CHROOT" -- --ignorearch --skippgpcheck works fine $ arch-nspawn $CHROOT/root pacman -Syy :: Synchronizing package databases... custom 11.5 KiB 261 KiB/s 00:00 [#############################################] 100% core.db failed to download extra 9.5 MiB 15.9 MiB/s 00:01 [#############################################] 100% alarm.db failed to download aur.db failed to download error: failed retrieving file 'aur.db' from mirror.archlinuxarm.org : The requested URL returned error: 404 error: failed retrieving file 'alarm.db' from mirror.archlinuxarm.org : The requested URL returned error: 404 error: failed retrieving file 'core.db' from mirror.archlinuxarm.org : The requested URL returned error: 404 warning: too many errors from mirror.archlinuxarm.org, skipping for the remainder of this transaction error: failed to synchronize all databases (failed to retrieve some files) -- Hindi madali ang maging ako

3 6

Refreshing pacman database
by Pocket 04 May '25

04 May '25

pacman -Syy refreshes all db for all repositories Is there a way to have pacman only refresh a single repository db? Ie pacman -Syy custom only refreshes custom withou refreshing core extra etc -- Hindi madali ang maging ako

2 1

Arrogant reply on forums
by Qtra Gabriex 03 May '25

03 May '25

Guy with 63,000+ forum posts replies arrogantly over me asking for actual deletion to be implemented. Brings up multiple tragedies. This upsets me because I once donated $20 to the Software in the Public Interest and wish for positivity and inclusion. https://bbs.archlinux.org/viewtopic.php?id=305290

12 13

Does redis returning to AGPL license effect the redis/valkey package replacement decision?
by David C Rankin 02 May '25

02 May '25

Devs, I was a bit surprised to see the following as the lead article on The Register daily stories for today: Redis 'returns' to open source with AGPL license https://www.theregister.com/2025/05/01/redis_returns_to_open_source/ After Arch's recent transition from redis to valkey due redis switching to the SSPLv1 license last year, does the decision by redis to relicense ver. 8 going forward under AGPL mean that redis will come back as a package or is Arch sticking with valkey? -- David C. Rankin, J.D.,P.E.

2 2

Re: Arch-general Digest, Vol 29, Issue 3
by Alessandra 02 May '25

02 May '25

Hi, I am weighing in as a user. Sure community spirit is important but someone already said it, please don't use historical events that affected millions of people as a comparison for an issue you are having that's not really impeding on your ability to staying alive. Milk was spilled, share the link to the post, we can all weigh in collectively whether it is a matter the community should investigate further or leave it. Thank you to anyone that spend time, modding, contributing to packages and thats answered my questions in post or on Reddit ! Cheerio! 2025-05-02T08:06:06Z arch-general-request(a)lists.archlinux.org: > Send Arch-general mailing list submissions to > arch-general(a)lists.archlinux.org > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > arch-general-request(a)lists.archlinux.org > > You can reach the person managing the list at > arch-general-owner(a)lists.archlinux.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Arch-general digest..." > > Today's Topics: > > 1. Re: Arrogant reply on forums (LuKaRo) > 2. Re: Arrogant reply on forums (Óscar García Amor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 2 May 2025 09:46:21 +0200 > From: LuKaRo <lists(a)lrose.de> > Subject: Re: Arrogant reply on forums > To: arch-general(a)lists.archlinux.org > Message-ID: <a18f92b5-4050-4f7f-b953-9f37dc907549(a)lrose.de> > Content-Type: multipart/alternative; > boundary="------------0zPYycE2iWyI60ADO9wAssk9" > > Out of curiosity: Is it? I couldn't find a source, where the purpose of > arch-general is defined, but I thought it is for "general Arch Linux > stuff", which includes community topics for me. > > lukaro > > On 5/2/25 6:00 AM, Martin Zecher wrote: >> Please stop spamming our emails, this is for technical stuff. You can >> freely discuss about human rights and whatever you want somewhere else. >> >> >> ==== >> Martin Zecher >> >> El jue, 1 may 2025, 22:55, Ralf Mardorf <ralf-mardorf(a)riseup.net> >> escribió: >> >> On Fri, 2025-05-02 at 00:51 +0200, Camelia Lavender wrote: >> > I think that the direct reference and comparison to hitler and >> nazism >> > (in the reply) was completely inappropriate and quite frankly >> > unacceptable, because it is antisemitic, and it makes it look like >> > those things weren't extremely serious. >> >> The accusation of anti-Semitism does not make sense. A comparison with >> Hitler and the NAZIS is inappropriate in most cases, but not >> automatically anti-Semitic. There is currently a world situation in >> which diplomacy should be practiced and insinuations of anti-Semitism >> should be treated with great caution. Labeling unpopular >> worldviews and >> questionable opinions as anti-Semitic per se does not help in any way. >> You don't necessarily have to go one better. Please stop! >>

1 0

Would it be possible to include sdl3-freerdp3 in the freerdp package?
by Mathieu Lemoine 28 Apr '25

28 Apr '25

Hello, I have been using the sdl-freerdp3 for a few months now (with the wayland driver), as it works better than the wlfreerdp3 client. Lately I've started to see messages saying sdl-freerdp3 (the SDL2 client) is now deprecated and we should switch over to the SDL3 client (sdl3-freerdp, or I guess sdl3-freerdp3). But it's not currently included in the package. What would be the best way to reach out to the package maintainer so this gets included? https://archlinux.org/packages/extra/x86_64/freerdp/flag/ seems like the wrong place, registrations on the GitLab are closed because of SPAM, and I couldn't find an email for the package Maintainers. So I'm basically left with the general ML. Apologies if this is not the right place to ask about this.

2 1

Replaced redis with valkey and nextcloud broke?
by David C Rankin 27 Apr '25

27 Apr '25

All, I replaced redis with valkey tonight on a long-running nextcloud install. I followed the wiki pages exactly: https://wiki.archlinux.org/title/Valkey (I set all options as shown to suppress warnings) and https://wiki.archlinux.org/title/Nextcloud#Valkey_(Redis) (valkey is running on unixsockets per the wiki) However, upon starting/enabling valkey and restarting apache, attempting to reach nextcloud results in: <quote> Internal Server Error The server encountered an internal error and was unable to complete your request. Please contact the server administrator if this error reappears multiple times, please include the technical details below in your report. More details can be found in the server log. </quote> git, http and nextcloud were added to the valkey group: $ grep valkey /etc/group valkey:x:971:git,http,nextcloud valkey is up and happily running and the socket has 0770 permissions per the wiki: $ scs valkey ● valkey.service - Advanced key-value store Loaded: loaded (/usr/lib/systemd/system/valkey.service; enabled; preset: 5:185mdisabled) Active: active (running) since Sat 2025-04-26 21:09:31 CDT; 17min ago Invocation: 5dc6c28081374c00837d5f7f94c38a95 Main PID: 1913 (valkey-server) Status: "Ready to accept connections" Tasks: 6 (limit: 4575) Memory: 3.4M (peak: 3.9M) CPU: 1.100s CGroup: /system.slice/valkey.service └─1913 "/usr/bin/valkey-server 127.0.0.1:6379" Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * Running mode=standalone, port=6379. Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * Server initialized Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * Loading RDB produced by Valkey version 8.1.1 Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * RDB age 784 seconds Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * RDB memory usage when created 0.85 Mb Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * Done loading RDB, keys loaded: 0, keys expired: 0. Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * DB loaded from disk: 0.000 seconds Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * Ready to accept connections tcp Apr 26 21:09:31 2pi valkey-server[1913]: 1913:M 26 Apr 2025 21:09:31.488 * Ready to accept connections unix Apr 26 21:09:31 2pi systemd[1]: Started Advanced key-value store. $ l /run/valkey/ total 0 drwxr-xr-x 2 valkey valkey 60 Apr 26 21:09 . drwxr-xr-x 46 root root 1100 Apr 26 21:09 .. srwxrwx--- 1 valkey valkey 0 Apr 26 21:09 valkey.sock The config.php was updated per the wiki to use valkey: $ sudo tail /etc/webapps/nextcloud/config/config.php 'filelocking.enabled' => true, 'memcache.distributed' => '\\OC\\Memcache\\Redis', 'memcache.locking' => '\\OC\\Memcache\\Redis', 'redis' => array ( 'host' => '/run/valkey/valkey.sock', 'port' => 0, 'timeout' => 0.0, ), ); Attempting to access the nextcloud instance results in 6 messages in nextcloud.log (they repeat each time nextcloud does its cron update). I've summarized each in pretty-print so they are readable: 1. { "reqId": "Ga2ygrBvnNRsfUk5PSik", "level": 4, "time": "2025-04-27T01:34:11+00:00", "remoteAddr": "192.168.6.196", "user": false, "app": "app_api", "method": "GET", "url": "/nextcloud/login", "message": "Error during app service registration: Permission denied", ... "File": "/usr/share/webapps/nextcloud/lib/private/RedisFactory.php", "Line": 104, "message": "Error during app service registration: Permission denied", "exception": {}, "CustomMessage": "Error during app service registration: Permission denied" } } 2. { "reqId": "Ga2ygrBvnNRsfUk5PSik", "level": 4, "time": "2025-04-27T01:34:11+00:00", "remoteAddr": "192.168.6.196", "user": false, "app": "no app in context", "method": "GET", "url": "/nextcloud/login", "message": "Could not boot webhook_listeners: Redis server went away", ... "File": "/usr/share/webapps/nextcloud/lib/private/Memcache/Redis.php", "Line": 59, "message": "Could not boot webhook_listeners: Redis server went away", "exception": {}, "CustomMessage": "Could not boot webhook_listeners: Redis server went away" } } 3. { "reqId": "Ga2ygrBvnNRsfUk5PSik", "level": 4, "time": "2025-04-27T01:34:11+00:00", "remoteAddr": "192.168.6.196", "user": false, "app": "no app in context", "method": "GET", "url": "/nextcloud/login", "message": "Could not boot workflowengine: Redis server went away", ... "File": "/usr/share/webapps/nextcloud/lib/private/Memcache/Redis.php", "Line": 59, "message": "Could not boot workflowengine: Redis server went away", "exception": {}, "CustomMessage": "Could not boot workflowengine: Redis server went away" } } 4. { "reqId": "Ga2ygrBvnNRsfUk5PSik", "level": 3, "time": "2025-04-27T01:34:11+00:00", "remoteAddr": "192.168.6.196", "user": false, "app": "index", "method": "GET", "url": "/nextcloud/login", "message": "Redis server went away", ... "File": "/usr/share/webapps/nextcloud/lib/private/Memcache/Redis.php", "Line": 59, "message": "Redis server went away", "exception": {}, "CustomMessage": "Redis server went away" } } 5. { "reqId": "Ga2ygrBvnNRsfUk5PSik", "level": 3, "time": "2025-04-27T01:34:11+00:00", "remoteAddr": "192.168.6.196", "user": false, "app": "core", "method": "GET", "url": "/nextcloud/login", "message": "Redis server went away", ... "File": "/usr/share/webapps/nextcloud/lib/private/Memcache/Redis.php", "Line": 59, "message": "Redis server went away", "exception": {}, "CustomMessage": "Redis server went away" } } 6. { "reqId": "Ga2ygrBvnNRsfUk5PSik", "level": 3, "time": "2025-04-27T01:34:11+00:00", "remoteAddr": "192.168.6.196", "user": false, "app": "core", "method": "GET", "url": "/nextcloud/login", "message": "Redis server went away", ... "File": "/usr/share/webapps/nextcloud/lib/private/Memcache/Redis.php", "Line": 59, "message": "Redis server went away", "exception": {}, "CustomMessage": "Redis server went away" } } This has me baffled. Both the valkey(redis) and nextcloud wiki changes make logical sense and seem like that should result in a painless upgrade. I was not so lucky. Is there something else needed to switch nextcloud from redis to valkey? 1. I stopped/disabled redis. 2. Installed valkey removing redis 3. Updated all configs per both wikis 4. started/enabled valkey (all good) 5. restarted httpd (all good) 6. attempted to access nextcloud (failed with the error above) Anybody have any ideas how I can get nextcloud back up and running with valkey? Worst case I'll try disableing redis/valkey altogether in the nextcloud config and run without caching -- not optimal. It was running perfectly with redis before the upgrade, so I'm stuck. -- David C. Rankin, J.D.,P.E.

1 1

Notice that flashed on wiki access today - too fast to read - was it important?
by David C Rankin 27 Apr '25

27 Apr '25

Arch Devs, On access of https://wiki.archlinux.org today, a dialog flashed to the screen immediately before the wiki main page was rendered, but the dialog flashed too quickly to read. Was it important or require any action? May have just been a wiki update note, dark mode looks a bit different? -- David C. Rankin, J.D.,P.E.

8 12

Journal log entries while installing an ISO image
by Friedrich Romstedt 23 Apr '25

23 Apr '25

Hi, Yesterday I prepared an USB stick with the recent version of the Arch Linux installation medium (Release 2025-04-01). This is about some error entries in the system journal, which I encountered during copying this ISO image over. The respective transcripts are provided inline, as well as attached in the form of plain text files. I used initially $ sudo cp <ISO> /dev/sda. After having finished that process, I spotted some error log entries in the system journal: Apr 20 15:30:25 T470p sudo[21475]: friedrich : TTY=pts/2 ; PWD=/home/friedrich/(...) ; USER=root ; COMMAND=/usr/bin/cp archlinux-2025.04.01-x86_64.iso /dev/sda Apr 20 15:30:25 T470p sudo[21475]: pam_unix(sudo:session): session opened for user root(uid=0) by friedrich(uid=1000) Apr 20 15:33:10 T470p systemd[1]: systemd-udevd.service: Watchdog timeout (limit 3min)! Apr 20 15:33:10 T470p systemd[1]: systemd-udevd.service: Killing process 359 (systemd-udevd) with signal SIGABRT. Apr 20 15:34:40 T470p systemd[1]: systemd-udevd.service: State 'stop-watchdog' timed out. Killing. Apr 20 15:34:40 T470p systemd[1]: systemd-udevd.service: Killing process 359 (systemd-udevd) with signal SIGKILL. Apr 20 15:36:10 T470p systemd[1]: systemd-udevd.service: Processes still around after SIGKILL. Ignoring. Apr 20 15:37:38 T470p kernel: sda: sda1 sda2 Apr 20 15:37:38 T470p sudo[21475]: pam_unix(sudo:session): session closed for user root Apr 20 15:37:38 T470p systemd[1]: systemd-udevd.service: Main process exited, code=killed, status=9/KILL Apr 20 15:37:38 T470p systemd[1]: systemd-udevd.service: Failed with result 'watchdog'. Apr 20 15:37:38 T470p systemd[1]: systemd-udevd.service: Consumed 4.845s CPU time, 51.6M memory peak. Apr 20 15:37:38 T470p systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1. Apr 20 15:37:38 T470p systemd[1]: Starting Rule-based Manager for Device Events and Files... Apr 20 15:37:39 T470p systemd-udevd[21582]: Using default interface naming scheme 'v257'. Apr 20 15:37:39 T470p systemd[1]: Started Rule-based Manager for Device Events and Files. Apr 20 15:38:19 T470p kernel: usb 1-1: USB disconnect, device number 7 Because I had doubts about the integrity of the thus prepared USB stick, I repeated the process, this time using $ su - and # dd if=<ISO> of=/dev/sda bs=8M. Here, I encountered similar logs: Apr 20 15:38:53 T470p kernel: sda: sda1 sda2 Apr 20 15:38:53 T470p kernel: sd 0:0:0:0: [sda] Attached SCSI removable disk Apr 20 15:39:07 T470p su[21650]: (to root) friedrich on pts/2 Apr 20 15:39:07 T470p su[21650]: pam_unix(su:session): session opened for user root(uid=0) by friedrich(uid=1000) Apr 20 15:44:05 T470p systemd[1]: systemd-udevd.service: Watchdog timeout (limit 3min)! Apr 20 15:44:05 T470p systemd[1]: systemd-udevd.service: Killing process 21582 (systemd-udevd) with signal SIGABRT. Apr 20 15:45:35 T470p systemd[1]: systemd-udevd.service: State 'stop-watchdog' timed out. Killing. Apr 20 15:45:35 T470p systemd[1]: systemd-udevd.service: Killing process 21582 (systemd-udevd) with signal SIGKILL. Apr 20 15:47:05 T470p systemd[1]: systemd-udevd.service: Processes still around after SIGKILL. Ignoring. Apr 20 15:48:35 T470p systemd[1]: systemd-udevd.service: State 'final-sigterm' timed out. Killing. Apr 20 15:48:35 T470p systemd[1]: systemd-udevd.service: Killing process 21582 (systemd-udevd) with signal SIGKILL. Apr 20 15:48:56 T470p kernel: sda: sda1 sda2 Apr 20 15:48:56 T470p systemd[1]: systemd-udevd.service: Main process exited, code=killed, status=9/KILL Apr 20 15:48:56 T470p systemd[1]: systemd-udevd.service: Failed with result 'watchdog'. Apr 20 15:48:56 T470p systemd[1]: systemd-udevd.service: Consumed 1.101s CPU time, 7.4M memory peak. Apr 20 15:48:56 T470p systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 2. Apr 20 15:48:56 T470p systemd[1]: Starting Rule-based Manager for Device Events and Files... Apr 20 15:48:56 T470p systemd-udevd[21808]: Using default interface naming scheme 'v257'. Apr 20 15:48:56 T470p systemd[1]: Started Rule-based Manager for Device Events and Files. Apr 20 15:49:13 T470p kernel: usb 1-1: USB disconnect, device number 8 In the second run, where I kept an eye on the journal, I noticed that the error entries were logged a few minutes *before* the copying process completed. There were no errors reported by both of these directly. The pen drive is booting and working just fine. However, I felt this behaviour being worth it to be reported. Maybe someone else can make sense of it. Best, Friedrich

4 7

Building with cmake
by Pocket 21 Apr '25

21 Apr '25

I am building packages following DeveloperWiki:Building in a clean chroot When building packages that are associated with gnome I get the following error: CMake Error at wsrep-lib/CMakeLists.txt:5 (cmake_minimum_required): Compatibility with CMake < 3.5 has been removed from CMake. Update the VERSION argument <min> value. Or, use the <min>...<max> syntax to tell CMake that the project requires at least <min> but has been updated to work with policies introduced by <max> or earlier. Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway. Adding export CMAKE_POLICY_VERSION_MINIMUM=3.5 doesn't correct my problem. Is there another way to get past this without adding -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to the PKGBUILD? -- Hindi madali ang maging ako

2 2

Valkey to replace Redis - Are devs updating configs in dependent packages (Nextcloud, etc..) to use valkey?
by David C Rankin 20 Apr '25

20 Apr '25

Arch devs, The latest news for "Valkey to replace Redis in the [extra] Repository" says: <quote> Users are recommended to begin transitioning their use of Redis to Valkey as soon as possible to avoid possible complications after the 14 day transition window closes. </quote> For other Arch packages that are configured to use redis (or php-legacy-redis), will the maintainers update the configs for the next release within the 14 day transition window? Or does "Users are recommended ..." mean just that, users need to try and make the replacements in all needed config files during the 14 days? I'm referring to packages like Nextcloud that Arch packages and has config files with entries for redis and php-legacy-redis. (with corresponding instructions in the Arch-wiki for Nextcloud) Also will there be corresponding php-valkey and php-legacy-valkey packages to replace the php-redis ones? The valkey docs are fairly clear, valkey is a for of redis 7.2: https://valkey.io/topics/migration/ so other than a name change and change to start valkey instead of redis, is there anything else involved for the likes of Nextcloud? I don't have enough cache to worry about migration files from redis to valkey other than stopping/disabling redis, starting valkey and then reloading with the config file(s) name changed. So if there are no caches a user needs to migrate from redis, other than the redis package changing to valkey, will all other Arch packages that use redis be updated in this 14 day period? -- David C. Rankin, J.D.,P.E.

2 1

arch-nspawn ERROR: chroot is not at version v6. Please rebuild. -- does that mean rm -rf $CHROOT?
by David C Rankin 19 Apr '25

19 Apr '25

Arch folks, My clean chroot will no longer update. Attempting update results in the error: $ arch-nspawn $CHROOT/root pacman -Syu ==> ERROR: chroot '/home/david/arch/pkg/chroot/root' is not at version v6. Please rebuild. I've checked the various devtools man pages and --help and there is nothing about rebuilding, so does this mean I need to: # rm -rf $CHROOT and start over? Or, is there actually a way to "rebuild" the chroot without wiping it all out and starting over? -- David C. Rankin, J.D.,P.E.

4 4

Postgresql 17
by IS 18 Apr '25

18 Apr '25

Does anyone know why Postgresql 17 is not yet available on Archlinux? Thanks

6 7

Are there arch based live ISO containing libreoffice?
by u34＠net9.cf 18 Apr '25

18 Apr '25

I am aware to archman, https://archman.org/ , live ISO with libreoffice included. Archman is current, last released on Dec 2024. There is also archbox, https://archbox-linux.github.io/ , last released on 2017.04.15. What other arch based live ISO, preferrably current, with libreoffice included within the ISO, are there? -- u34

2 2

[arch-dev-public] Re: The future of `reflector` [was: Spring cleanup '25]
by mpan 18 Apr '25

18 Apr '25

> On 22/03/2025 14:43, Robin Candau wrote: >> On 3/22/25 11:50 AM, Antonio Rojas wrote: >>> Time to clean up old cruft again. Please head to https:// >>> archlinux.org/devel/reports/unneeded-orphans/ and adopt packages you >>> want to keep in the repos. >>> [...] >>> I will start dropping packages to AUR in ~ 10 days. >>> [...] >>> reflector >>> [...] >> >> Re: Spring cleanup '25 [1]: Aside from being quite popular among our >> users (probably for historical reasons and because it's currently the >> only solution offered in the official repo as far as I can tell), >> `reflector` is included and used in our ISO [2]. >> As such, it should *not* be dropped in the current state of things. >> > Actually I don't think that's a good reason to keep it. If anything it > should be removed from ISO as well in my opinion. > > I don't think we should be including anything like that because then we > should consider also anything from https://wiki.archlinux.org/title/ > Mirrors#Client-side_ranking > > So let's keep it simple. Removal from the ISO may be a reasonable choice. It’s not an essential tool and, as an automatically started service, it was giving people trouble. Personally I also believe benchmarking tools, that use others’ resources, shouldn’t be run without person’s explicit need. Privacy concerns may be raised by some users too, given running the ISO unconditionally contacts a large number of network services. But I don’t see a reason to remove reflector from the repos, unless no new maintainer appears in due time.⁽¹⁾ The package is present on 58% pkgstats-ed machines:⁽²⁾ more popular than chromium, zsh, or ruby. Upon removal the only remaining options will be using Xyne’s repo or AUR. Not a huge deal for seasoned Archers, but I don’t think fresh users should be told to configure 3rd party repos or jump into AUR, if that’s not really necessary. Cheers, mpan ____ ⁽¹⁾ Due time: when reflector’s PKGBUILD needs to be updated. ⁽²⁾ Webapp at <https://pkgstats.archlinux.de/packages/reflector>

2 1

Mailing list is back
by Leonidas Spyropoulos 17 Apr '25

17 Apr '25

Hello, Some might have noticed we had some issues with arch-general ML from November last year. This was debugged and sorted today morning [1] and should have emails now send. Also the archive now contains the messages as well [2]. Thanks for dvzrv and gromit for their time today to sort this out together. [1]: https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/679 [2]: https://lists.archlinux.org/archives/list/arch-general@lists.archlinux.org/ Cheers, -- Leonidas Spyropoulos Developer & DevOps PGP: 59E43E106B247368 244740D17C7FD0EC

2 1

Change user password in KDE settings: root authorisation requested
by SET 17 Apr '25

17 Apr '25

Hello, If a user password is changed in systemsettings, root authorisation is requested willfully, with a UI text confirming that it’s mandatory even if it’s the user password being updated. No such request is made when doing that in a terminal and that's well within reach of any Arch user. It has been discussed at: https://discuss.kde.org/t/change-user-password-in-settings-root-authorisati… It seems that it might be distribution related. I am not asking for any change in Arch itself, and would like to read opinions of Arch maintainers about that. Thanks and regards.

2 4

about the uutils-coreutils package
by Leah Anderson 17 Apr '25

17 Apr '25

Hey, I noticed something about the uutils-coreutils package in the extra repo. It isn't marked as conflicting or providing the coreutils package at all. Is this a problem at all? Best wishes, Leah

2 1

PS: cp from internal SSD via USB 3 to external HDD is very slow
by Ralf Mardorf 17 Apr '25

17 Apr '25

On Tue, 2025-04-15 at 04:04 +0200, Ralf Mardorf wrote: > FWIW ^Z was an oversight. I meant to press Ctrl+Alt+T to open a > terminal tab, and apparently pressed Ctrl+Z (German QWERTY keyboard). ^ A typo, the Y should read Z :D

1 1

test email please ignore
by Jelle van der Waa 17 Apr '25

17 Apr '25

_ _ / \__/ \_____ / / \ \ `\ ) \''/ ( |\ `\__)/__/'_\ / ` //_|_|~|_|_| ^""'"' ""'"'

3 3

Test msg - ignore
by Leonidas Spyropoulos 15 Apr '25

15 Apr '25

test msg -- Leonidas Spyropoulos Developer & DevOps PGP: 59E43E106B247368 244740D17C7FD0EC

1 0

php-legacy-mongodb-2.0.0-1 => Fatal error: ... BSONArray.php on line 74
by David C Rankin 13 Apr '25

13 Apr '25

Arch devs, After update tonight of php-legacy-mongodb-2.0.0-1-x86_64.pkg.tar.zst, accessing mongodb through PHP results in the error: [Sat Apr 12 01:25:20.286158 2025] [php:error] [pid 685:tid 685] [client 192.168.6.224:53078] PHP Fatal error: Declaration of MongoDB\\Model\\BSONArray::bsonSerialize() must be compatible with MongoDB\\BSON\\Serializable::bsonSerialize(): stdClass|MongoDB\\BSON\\Document|MongoDB\\BSON\\PackedArray|array in /srv/http/vendor/mongodb/mongodb/src/Model/BSONArray.php on line 74, referer: https://2pi.3111skyline.com/tmp/db/jnl-grid/ This has never happened before and it is pointing to one of the package files. I updated all composer mongodb/mongodb files thinking that may help. It didn't. I also built php-legacy-mongodb from: https://gitlab.archlinux.org/archlinux/packaging/packages/php-mongodb/-/tre… And downgraded, restarted httpd and everything works fine again. New bug or is there some known break with backwards compatibility? The changelog on Serializable::bsonSerialize makes no mention of a break: https://www.php.net/manual/en/mongodb-bson-serializable.bsonserialize.php -- David C. Rankin, J.D.,P.E.

1 1

https://lists.archlinux.org/archives/list/arch-general@lists.archlinux.org/ - No Messages in Archive for March or April?
by David C Rankin 12 Apr '25

12 Apr '25

Arch Devs, Trying to check the arch-general archives at https://lists.archlinux.org/archives/list/arch-general@lists.archlinux.org/ shows no messages for March or April 2025. It's HyperKitty - is there a problem with the archives? -- David C. Rankin, J.D.,P.E.

1 0

Trying to use "Preview" on bbs.archlinux.org - times out?
by David C. Rankin 20 Mar '25

20 Mar '25

All, I've never had an issue with this, but earlier today attempting to ask https://bbs.archlinux.org/viewtopic.php?pid=2232737 I always use "Preview" to verity formatting before submitting. However, today choosing "Preview" resulted in a timeout and Page Not Found - Try Again? if Firefox. So I did try several times to create a preview and all times I got nothing back. Submitting the question worked fine, so it looks like there was something up with the "Preview" feature. Does anyone have any further information about that? If it is an issue, is a bug report wanted? -- David C. Rankin, J.D.,P.E.

1 0

Screen update / screen bug
by Jeanette C. 05 Mar '25

05 Mar '25

Hey hey, I wondered about this bug: https://gitlab.archlinux.org/archlinux/packaging/packages/screen/-/issues/2 https://savannah.gnu.org/bugs/?66209 As far as I understand a solution for this issue is known, a different compilation switch. Does anyone know what the plans for an update/fix are? Alternatively, can someone suggest a workaround for using -X in scripts? Best wishes and thanks, Jeanette -- * Website: http://juliencoder.de - for summer is a state of sound * Youtube: https://www.youtube.com/channel/UCMS4rfGrTwz8W7jhC1Jnv7g * Audiobombs: https://www.audiobombs.com/users/jeanette_c * GitHub: https://github.com/jeanette-c There's a girl in the mirror I wonder who she is Sometimes I think I know her Sometimes I really wish I did <3 (Britney Spears)

1 0

about the uutils-coreutils package
by Leah Anderson 24 Feb '25

24 Feb '25

Hey, I noticed something about the uutils-coreutils package in the extra repo. It isn't marked as conflicting or providing the coreutils package at all. Is this a problem at all? Best wishes, Leah

1 0

/usr/bin/xml2-config - missing in libxml2 2.13.6-2?
by David C. Rankin 20 Feb '25

20 Feb '25

Devs, Just update to libxml2 2.13.6-2 and found that the /usr/bin/xml2-config file is missing? This breaks many configure scripts. Listing the package contents, the man-page for it is still there, but not the executable: libxml2 /usr/share/man/man1/xml2-config.1.gz It was present in libxml2-2.13.5-2-x86_64.pkg.tar.zst, but not in libxml2-2.13.6-2-x86_64.pkg.tar.zst. Is this an oversight or intentional. If intentional, how best to change configure scripts that use it. What other functionality will take its place? -- David C. Rankin, J.D.,P.E.

1 0

i915 LSPCON init failed bug -- is back
by David C. Rankin 20 Feb '25

20 Feb '25

All, The reboot issue with the new install on the HP ProOne 600 (i5-8500) is a bug: [drm:intel_dp_detect [i915]] *ERROR* LSPCON init failed on port D https://gitlab.freedesktop.org/drm/i915/kernel/-/issues/4458 Looks like we are just stuck until it is fixed. At least now we know the cause (most likely). This was fixed in 5.14.7 and now is back. So we will see when a fix comes through. A least I know I'm not crazy -- yet... -- David C. Rankin, J.D.,P.E.

1 0

Arch iso install failure HP ProOne 600 UEFI - Triggering uevents... - then hangs?
by David C. Rankin 18 Feb '25

18 Feb '25

All, I thought I'd improve a HP ProOne 600 (i5 8500) with a fresh Arch install. Disabled secure boot per https://wiki.archlinux.org/title/Installation_guide, and booted the Arch 2025-02-01 install iso burned to usb with dd per the https://wiki.archlinux.org/title/USB_flash_installation_medium. I get the boot menu and choose the default (first) option. I then get a couple of errors (3 total, all the same except for the file extensions .BCL, .BCM and .BQC: ACPI BIOS Error (bug): Faiure creating named object [\_SB.PCI0.G?.BCL] (and .BCM and .BQC), AE_ALREADY_EXISTS (20240827/dsw-load2-326) ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog (202408???ject-220) I'm not sure what character(s) are where I have the "?" above, that was cut off my picture on the left of the screen. The installer then tries to boot (looks like first few chars guessed): Starting early hook [udev] Loading systemd-udevd version 257-2-2-arch Starting early hook [archiso_pxe_ndb] Starting hook [udev] Triggering uevents... (hangs) The "Starting early hook [archiso_pxe_ndb]" seems to indicate it's trying to boot via pxe instead of from usb?? This is my first new install in a long time. Does anything stand out? Is there a trick to make this work? Any help appreciated. -- David C. Rankin, J.D.,P.E.

1 3

Note: pacstrap -K /mnt ... failed with corrupt signatures, --refresh-keys cured gromit allowing new keyring install
by David C. Rankin 17 Feb '25

17 Feb '25

Devs, Just a note on the current 2025-02-01 install iso. On pacstrap -K /mnt all packages had corrupt signatures. pacman-key --init was run but the failures continued. pacman -Sy archlinux-keyring failed due to corrupt gromit key/signature. Running pacman-key --refresh-keys fixed gromit's key allowing pacman -Sy archlinux-keyring to succeed. Finally, then pacstrap -K succeeded. I'm not sure if this was a hiccup or generic problem with the keyring on the installer. Thought I would pass it along in case it needs fixing. -- David C. Rankin, J.D.,P.E.

1 0

Linux-6.12.10.arch1-1 causes FAT32 mount failure
by J. Gerhards 29 Jan '25

29 Jan '25

Hello all, after upgrading my kernel (standard linux package) to 6.12.10.arch1-1, my computer would now only boot into the systemd emergency shell. After further inspection, I found out this was caused by the kernel failing to mount my EFI system partition which caused systemd to no longer be able to reach local-fs.target[0]. This was easily confirmed by commenting out the line in my /etc/fstab after which the system would boot semi-correctly. Furthermore the kernel does not appear to actually be 6.12.10 but 6.12.9 as indicated by /proc/version and the journal[1]. I first thought this was an error and that pacman just didn't upgrade the package correctly, but after reinstalling it (signature matched), manually deleting the old kernel, regenerating the initramfs and verifying that pacman had actually downloaded the newest version, I still got the same result. I really have no idea of how I would fix this, since the kernel is supposed to have FAT32 support by default so I just downgraded linux and linux-headers back to 6.12.9.arch1-1 and everything is working again. Cheers J. Gerhards [0] snippet of the journal: mount[572]: mount: /efi: unknown filesystem type 'vfat'. mount[572]: dmesg(1) may have more information after failed mount system call. systemd[1]: efi.mount: Mount process exited, code=exited, status=32/n/a systemd[1]: efi.mount: Failed with result 'exit-code'. systemd[1]: Failed to mount /efi. systemd[1]: Dependency failed for Local File Systems. systemd[1]: local-fs.target: Job local-fs.target/start failed with result 'dependency'. systemd[1]: local-fs.target: Triggering OnFailure= dependencies. [1] Kernel boot message: kernel: Linux version 6.12.9-arch1-1 (linux@archlinux) (gcc (GCC) 14.2.1 20240910, GNU ld (GNU Binutils) 2.43.1) #1 SMP PREEMPT_DYNAMIC Fri, 10 Jan 2025 00:39:41 +0000

1 0

arch-signoff package - Merge Request (resend)
by Genes Lists 29 Jan '25

29 Jan '25

Originally sent on Jan 17 '25 and now resending since list did not seem to be working at that time. I came across arch-signoff a little while back and after trying it out, it seems pretty useful. I made a couple of changes to the code and submitted a merge request [1]. Obviously not terribly important at all but it isn't clear if gitlab notifies anyone for this package. Changes in MR are : - Add option/environ for dark terminals (blue doesn't show up well with gnome terminal dark theme for example) - Add color scheme support for light/dark using a new Colors class. - Replace setup.py with pyproject.toml (PEP 518) The MR was about a month ago, so perhaps someone can accept it or delete it or something. Thanks! gene [1] https://gitlab.archlinux.org/archlinux/arch-signoff/- /merge_requests/6 -- Gene

1 0

Linux-6.12.10.arch1-1 causes boot into emergency shell
by J. Gerhards 20 Jan '25

20 Jan '25

Hello all, after upgrading my kernel (standard linux package) yesterday to 6.12.10.arch1-1, my computer would now only boot into the systemd emergency shell. After further inspection, I believe this was caused by the kernel failing to mount my EFI system partition which caused systemd to no longer be able to reach local-fs.target[0]. Furthermore the kernel does not appear to actually be 6.12.10 but 6.12.9 as indicated by /proc/version and the journal[1]. I first thought this was an error and that pacman just didn't upgrade the package correctly, but after reinstalling it (signature matched), manually deleting the old kernel, regenerating the initramfs and verifying that pacman had actually downloaded the newest version, I still got the same result. I really have no idea of how I would fix this, since the kernel is supposed to have FAT32 support by default so I just downgraded linux and linux-headers back to 6.12.9.arch1-1 and everything seems to be working again. I Just thought I should send a mail to let someone know about it since it might be important. Cheers J. Gerhards [0] stripped snippet of the journal: mount[572]: mount: /efi: unknown filesystem type 'vfat'. mount[572]: dmesg(1) may have more information after failed mount system call. systemd[1]: efi.mount: Mount process exited, code=exited, status=32/n/a systemd[1]: efi.mount: Failed with result 'exit-code'. systemd[1]: Failed to mount /efi. systemd[1]: Dependency failed for Local File Systems. systemd[1]: local-fs.target: Job local-fs.target/start failed with result 'dependency'. systemd[1]: local-fs.target: Triggering OnFailure= dependencies. [1] Kernel boot message: kernel: Linux version 6.12.9-arch1-1 (linux@archlinux) (gcc (GCC) 14.2.1 20240910, GNU ld (GNU Binutils) 2.43.1) #1 SMP PREEMPT_DYNAMIC Fri, 10 Jan 2025 00:39:41 +0000

1 0

arch-signoff package - Merge Request
by Genes Lists 17 Jan '25

17 Jan '25

I came across arch-signoff a little while back and after trying it out, it seems pretty useful. I made a couple of changes to the code and submitted a merge request [1]. Obviously not terribly important at all but it isn't clear if gitlab notifies anyone for this package. Changes in MR are : - Add option/environ for dark terminals (blue doesn't show up well with gnome terminal dark theme for example) - Add color scheme support for light/dark using a new Colors class. - Replace setup.py with pyproject.toml (PEP 518) The MR was about a month ago, so perhaps someone can accept it or delete it or something. Thanks! gene [1] https://gitlab.archlinux.org/archlinux/arch-signoff/- /merge_requests/6 -- Gene

1 0

Re: Issues with Libera.Chat and public access via Matrix
by magmaus3 10 Jan '25

10 Jan '25

hi, would selfhosting a matrix/irc bridge (such as matterbridge) be a viable option? maia // magmaus3

1 0

[arch-general] Lighter wayfire
by Javier 09 Jan '25

09 Jan '25

Hello ! I've been using wayfire for some time, I really enjoy it. I do drop some plugins, that I really do not need, in the hope to also make it somehow lighter (the eye candy ones): > # animate \ > # cube \ > # expo \ > # fisheye \ > # grid \ > # invert \ > # wobbly \ > # wrot \ > # zoom I still want to have transparency, opacity, shadows, and simple things picom like provided enabled. Is there anything else that can be dropped that could help? The ones remaining: > plugins = \ > alpha \ > autostart \ > command \ > decoration \ > fast-switcher \ > foreign-toplevel \ > gtk-shell \ > idle \ > move \ > oswitch \ > place \ > resize \ > session-lock \ > shortcuts-inhibit \ > switcher \ > vswitch \ > wayfire-shell \ > window-rules \ > wm-actions \ > workspace-names I also need windows decorations, and being able to do regular windows and workspaces decorations. If you're wondering about workspace-names, I really don't like workspaces pagers or graphical workspaces being shown on waybar, and I prefer to briefly show the target workspace name when transitioning to it, that's all that extra plugin does. plugins = \ alpha \ autostart \ command \ decoration \ fast-switcher \ foreign-toplevel \ gtk-shell \ idle \ move \ oswitch \ place \ resize \ session-lock \ shortcuts-inhibit \ switcher \ vswitch \ wayfire-shell \ window-rules \ wm-actions \ workspace-names If there's anything like eye candy not really required I can get rid of let me know. BTW, I've been thinking on removing switcher, since fast-switcher is less eye candy and does the thing right, but not sure if that would be limiting switching among windows, but that's one additional candidate I've been considering... Thanks a lot ! -- Javier

1 1

Hello
by Mats Svensson 28 Dec '24

28 Dec '24

Hello everyone! Thanks for letting me in here

1 0

Formal Request to review moderation decision [Fwd: What is the policy/thoughts on embedding icons/emojis/unicode glyphs in package descriptions in PKGbUILD]
by David C. Rankin 22 Dec '24

22 Dec '24

Dear Archlinux Governing Board, I formally request a review of how and why I am moderated on AUR. I have been given no explanation, and my posts (including the one below) simply do no make it to the list and I receive no determination on them. After being a member for more than 15 years, I feel this action was unprofessional, uncalled for and completely arbitrary and the result of an "I'll show you" abuse of position rather than a legitimate use of moderation authority. I strongly suspect this was the result of an off-list reply explaining to Jelle that I didn't appreciate him jumping into a thread and claiming to be able to read my mind. That was uncalled for, inappropriate and to suggest he knew my thoughts was utter speculation. This has been going on for months, and apparently the moderation is permanent as I've been given no information on when the sentence will end. I've always been respectful and mindful of my posts and this was no different. I formally appeal the determination and request a review and full determination on the merits. There was no justification for this and we should have all grown beyond kindergarten and wanting to show who is top-dog on the playground. That has no place in open-source. -------- Forwarded Message -------- Subject: What is the policy/thoughts on embedding icons/emojis/unicode glyphs in package descriptions in PKGbUILD Date: Thu, 19 Dec 2024 06:13:21 +0000 From: aur-general-owner(a)lists.archlinux.org To: drankinatty(a)gmail.com Your message to the Aur-general mailing-list was rejected for the following reasons: The message comes from a moderated member The original message as received by Mailman is attached. -- David C. Rankin, J.D.,P.E.

1 0

Solaar Pair Touble
by Silvio Siefke 18 Dec '24

18 Dec '24

Hello, I have a Logitech MK850 set which actually worked well. The mouse was causing problems, so I found Solaar and it works. Unfortunately, I once clicked on unpair and since then the mouse cannot be used via USB. The search for new devices is ended with "Device Block". I have deleted the configuration, I have deleted the UDEV rules, but the mouse still no longer works via USB. Does anyone have any ideas what I could do? Thanks Silvio

1 0

Request for review of two merge requests (Fcitx5-Mozc, Fcitx-Mozc)
by Masato TOYOSHIMA 16 Dec '24

16 Dec '24

Hello everyone I've been using Arch Linux in containers and have tried several Arch-based desktops. I'd like to discuss two Japanese input packages that haven't been updated for about two years. I've created merge requests for major upgrades for both packages. Among Japanese input packages, Mozc likely has the most users currently. There are two Mozc packages in the Arch Linux repository: Fcitx5-Mozc and Fcitx-Mozc. While Fcitx5 has become the main development focus, Fcitx-mozc is still packaged in newer distributions. These two packages haven't been updated for about two years. I created merge requests for major upgrades about two weeks ago. I've tried contacting the previous package maintainers and those assigned by bots, but there's been no response. I'm posting here hoping to catch the attention of those with merge permissions. I'd appreciate if you could review the merge requests for these two packages when you have time. As additional information, the original google/mozc has moved to Bazel build for the Linux version. Fcitx5 already supported Bazel build, and Fcitx (fcitx4) has recently added support for it as well. Therefore, both packages can now be built with Bazel without additional patches or PRs. I've been updating the merge requests to keep them aligned with the latest commits. Now that Fcitx(4)'s Bazel support is complete, it seems like a good time for review. Please review the merge requests when possible. I apologize for the long message. Thank you for your consideration. https://gitlab.archlinux.org/archlinux/packaging/packages/fcitx5-mozc/-/mer… https://gitlab.archlinux.org/archlinux/packaging/packages/fcitx-mozc/-/merg…

1 1

Request For Insights On Kernel Security Hardening Practices In Arch Linux
by Yinhao Hu 13 Dec '24

13 Dec '24

Dear All, We are academic researchers from Huazhong University of Science and Technology, China. To foster a healthier Linux kernel community and enhance the overall security of Linux distributions, we are conducting a study on kernel security hardening deployments across various Linux distributions. In our research, we analyzed kernel config files and the /proc filesystem by installing and running multiple distribution ISO images. This allowed us to enumerate the default deployment of kernel defense mechanisms at runtime. So far, we have cataloged over 50 kernel security hardening features and documented inconsistencies in their deployment across different distributions. The results of our analysis are accessible via the following link: https://docs.google.com/spreadsheets/d/17QRr04pqK1K4-VoHXW2-9KgPd4uV8Q4I-NN…. Given Arch Linux’s reputation for exceptional performance and rich features, we conducted a detailed investigation into its kernel security hardening strategies. To further deepen our understanding, we would greatly appreciate your input on the following questions: 1. Effectiveness of Kernel Security Hardening 1.1 Do you consider deploying kernel security hardening features to be an effective strategy for ensuring operating system security? 2. Configuration Strategy for Default Kernel Security Hardening Options 2.1 What are the primary criteria for selecting kernel security hardening options in your distribution? 2.2 How are configurable security hardening features (e.g., unprivileged_bpf_disabled) typically set (e.g., 0, 1, or 2), and what are the main considerations involved? 2.3 How do you balance the trade-off between side-effects (e.g., performance overhead) and the enhanced security introduced by kernel security hardening? 2.4 Does the tolerance for performance overhead vary across different application scenarios? 2.5 Are there other negative factors, such as compatibility issues, that are considered when enabling security hardening features? 3. Customized Configurations 3.1 Do you provide different kernel security hardening configurations tailored to specific user groups? 4. Best Practices and Recommendations 4.1 Are there any best practices or recommendations you can share regarding kernel security hardening? 4.2 Are there relevant documents or materials available for reference? The purpose of these questions is to gain a deeper understanding of your security protection strategies. Your insights would be immensely valuable to our study. Thank you for taking the time to review our questions. We look forward to your response. Best regards, Yinhao Hu, PhD candidate huyinhaodd(a)gmail.com Huazhong University of Science and Technology

1 0

include in mailing list
by HARRY JAIN 26 Nov '24

26 Nov '24

1 0

Archinstall in ISO 2024.11.01 some kind of broken
by Dan TechGameGeek 18 Nov '24

18 Nov '24

Hi, it seems like the archinstall script in the 2024.11.01 Archiso is broken. It runs for a while and then quits with the error: failed to connect to user scope bus via local transport: No media found Pulling the script of the archinstall-script from git and running the downloades script for installation solves it. git clone https://github.com/archlinux/archinstall.git I assume you fix it in the next ISOs ;-) ? Thanks for the great work! BR Daniel

1 0

x265.h
by Mark E. Mallett 16 Nov '24

16 Nov '24

I'm confused(*) I was compiling something that uses /usr/include/x265.h and it failed. It hasn't failed like this before and it hasn't changed lately. The thing it was having trouble with was this member of x265_api (wrapped for this posting): int (*encoder_encode)(x265_encoder*, x265_nal**, uint32_t*, x265_picture*, x265_picture**); The last element is different than it used to be, it used to be * not **. And ** doesn't really make sense. In the hope that the underlying library wasn't using this definition, I did a typecast where it was used and the compilation succeeded and the program worked. But: I wondered if this was some typo ocurring weirdly. I compared x265.h with the one from a prior version (which I still had in the pacman cache) and there were lots of changes, some probably just for internal purposes, but some with changes to calling sequences that surely must break things that use them. I asked pacman where the code came from (pacman -Qi) and looked there: https://bitbucket.org/multicoreware/x265_git/src/master/source/x265.h and that file does not have this change. (It has others, including at least one that seems problematic). The version of /usr/include/x265 on my system is dated Oct 3 2024 and that matches the "build date" reported by pacman. The modification history in the bitbucket link above has an entry signficantly dated October 4 that says "Reverted the api changes." I infer that the change that affected me was, for lack of a better word, corrected. But evidently Arch hasn't picked it up. (I did a system update today.) Maybe Oct 3 is the last released date, I dunno. That would be odd if so. I don't know what answer I'm looking for here, maybe none, but thought I would mention it. At length ;) -mm- (*)always

1 1

What could cause RSS Recent Package Feed to Hang in Thunderbird?
by David C. Rankin 11 Nov '24

11 Nov '24

All, In Thunderbird 128.3.3esr if I check the RSS Recent Package feed from Arch, Thunderbird hangs showing the check is continually ongoing and never finishes. This takes a continual 143% CPU (about 1/3 of the 4-core i-7) It gets the Recent Packages just fine, but never stops. Checking with tcpdump the connection to 95.217.163.246 initializes just fine with the QUIC protocol and then continues with the data transferred. The last message from 95.217.163.246 is a TCP ACK and then nothing else. Thunderbird just shown the little icon next to the feed as busy (little ball going back and forth) and the CPU is pegged at about 150%. (other than just looking at the tcpdump data in Wireshark - it's pretty much Greek to me) There is no way to cancel the check except to "Pause" the RSS feed and then shutdown thunderbird and restart it. If I then "unPause" the RSS feed after restarting tbird, the same thing happened. I've been subscribed to the RSS feed for years. This just started a couple of days ago. What should I check or look for to try and figure out why the RSS feed check never finishes and shuts down? -- David C. Rankin, J.D.,P.E.

3 4

mail.archlinux.org (95.216.189.61) reverse lookup down earlier today?
by David C. Rankin 08 Nov '24

08 Nov '24

Arch Leaders, Was there a reverse lookup problem with the mail delivery from gitlab(a)archlinux.org earlier today. It looks like reverse lookup for 95.216.189.61 was failing this morning, and the IP got banned by fail2ban in the postfix jail. One of the log entries was: 2024-11-08T09:24:43.204447-05:00 valkyrie postfix/smtpd[490171]: NOQUEUE: reject: RCPT from unknown[95.216.189.61]: 450 4.7.25 Client host rejected: cannot find your hostname, [95.216.189.61]; from=<gitlab(a)archlinux.org> I had to unban the IP manually after whatever was going on this morning. Was there a temporary issue with DNS reverse lookups earlier?. I can look it up with a reverse lookup now just fine, e.g. $ dig -x 95.216.189.61 ; <<>> DiG 9.20.3 <<>> -x 95.216.189.61 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42701 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: 405df5f3dae627dd01000000672e9d65152c46ac67e9ae9e (good) ;; QUESTION SECTION: ;61.189.216.95.in-addr.arpa. IN PTR ;; ANSWER SECTION: 61.189.216.95.in-addr.arpa. 54097 IN PTR mail.archlinux.org. ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP) ;; WHEN: Fri Nov 08 17:23:17 CST 2024 ;; MSG SIZE rcvd: 115 Thought I would pass it along in case there was an issue that needed looking into. -- David C. Rankin, J.D.,P.E.

1 0

Re: Sound system not working on Macbook Pro (2017)
by Christoph Gysin 08 Nov '24

08 Nov '24

> > Mine is a 13" with two ports, which isn't supported based on the GitHub > page. > So you have a MacBookPro14,1, which should support audio output (not input) using the patch linked. There is an AUR package for that audio driver: https://aur.archlinux.org/packages/snd-hda-macbookpro-dkms-git And more info on the drivers github repo: https://github.com/davidjo/snd_hda_macbookpro Good luck! Chris

1 0

Sound system not working on Macbook Pro (2017)
by Sadeep Madurange 06 Nov '24

06 Nov '24

Hello, I installed Arch Linux 6.11.1-arch1-1 on a 2017 Macbook Pro with KDE Plasma desktop package (initially installed the plasma-meta and kde-applications-meta, but I've since gotten rid of them). Sound output is not working with the speakers or headphones. KDE shows "No output or input devices found". During my troubleshoot, I ended up removingn pipewire stuff. Now I have pulseaudio, pulseaudio-alsa, and alsa-utils installed. I created a file /etc/modprobe.d/50-sound.conf and added "options snd_hda_intel model=intel-mac-auto" to it (and restarted), but that did not help. I have installed alsa firmware and sof-firmware. The output of lspci: 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 03) 00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics 640 (rev 06) 00:14.0 USB controller: Intel Corporation Sunrise Point-LP USB 3.0 xHCI Controller (rev 21) 00:15.0 Signal processing controller: Intel Corporation Sunrise Point-LP Serial IO I2C Controller #0 (rev 21) 00:15.2 Signal processing controller: Intel Corporation Sunrise Point-LP Serial IO I2C Controller #2 (rev 21) 00:16.0 Communication controller: Intel Corporation Sunrise Point-LP CSME HECI #1 (rev 21) 00:1c.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #1 (rev f1) 00:1c.4 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #5 (rev f1) 00:1d.0 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #9 (rev f1) 00:1d.1 PCI bridge: Intel Corporation Sunrise Point-LP PCI Express Root Port #10 (rev f1) 00:1e.0 Signal processing controller: Intel Corporation Sunrise Point-LP Serial IO UART Controller #0 (rev 21) 00:1e.3 Signal processing controller: Intel Corporation Sunrise Point-LP Serial IO SPI Controller #1 (rev 21) 00:1f.0 ISA bridge: Intel Corporation Sunrise Point LPC/eSPI Controller (rev 21) 00:1f.2 Memory controller: Intel Corporation Sunrise Point-LP PMC (rev 21) 00:1f.3 Audio device: Intel Corporation Sunrise Point-LP HD Audio (rev 21) 00:1f.4 SMBus: Intel Corporation Sunrise Point-LP SMBus (rev 21) 01:00.0 Mass storage controller: Apple Inc. S3X NVMe Controller (rev 12) 02:00.0 Network controller: Broadcom Inc. and subsidiaries BCM4350 802.11ac Wireless Network Adapter (rev 05) 03:00.0 Multimedia controller: Broadcom Inc. and subsidiaries 720p FaceTime HD Camera 04:00.0 PCI bridge: Intel Corporation DSL6540 Thunderbolt 3 Bridge [Alpine Ridge 4C 2015] (rev 02) 05:00.0 PCI bridge: Intel Corporation JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016] (rev 02) 05:01.0 PCI bridge: Intel Corporation JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016] (rev 02) 05:02.0 PCI bridge: Intel Corporation JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016] (rev 02) 05:04.0 PCI bridge: Intel Corporation JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016] (rev 02) 06:00.0 System peripheral: Intel Corporation JHL6540 Thunderbolt 3 NHI (C step) [Alpine Ridge 4C 2016] (rev 02) 07:00.0 USB controller: Intel Corporation JHL6540 Thunderbolt 3 USB Controller (C step) [Alpine Ridge 4C 2016] (rev 02) In alsamixer, Card shows as PulseAudio and the master volume is 100%. If I press F6 (to select sound card), the first entry is "- (default)". The second is "default:0 HDA Intel PCH". If I choose the second one, I see S/PDIF, S/PDIF 1, and S/PDIF 2. All of them are unmuted but the volume is 00. I can't increase it. The 00 is in a green square (not a rectangle up to 100%). I can hear the chime when the Macbook starts up, so the hardware is working fine.

3 2

Mail Server: A new beginning
by Pocket 05 Nov '24

05 Nov '24

I have read the information previous supplied and found some useful tidbits/information. This is to better explain what I am trying to accomplish server alarm.home.org <-- fetchmail <-- 1(a)example.org Dovecot/SMTP <-- 2(a)example.org <-- 3(a)example.org <-- 4(a)example.org The fetchmail delivers all emails to oldfart(a)home.arpa (dovecot on alarm.home.arpa) (smtp on alarm.home.arpa) ^ | | Thunderbird then reads the account oldfart(a)home.arpa (IMAP) Reply to 3(a)example.org --> www.twc.com smarthost Reply to 1(a)example.org --> www.twc.com smarthost New message to arch-general(a)lists.archlinux.org from pocket(a)alarm.arpa So SMTP needs to rewrite oldfart(a)home.arpa to 3(a)example.org use 3(a)example.org credentials to www.twc.com rewrite oldfart(a)home.arpa to 1(a)example.org use 1(a)example.org credentials to www.twc.com rewrite oldfart(a)home.arpa to pocket(a)example.org use pocket(a)example.org credentials to www.twc.com Dovecot to use PAM to validate user oldfart, Maildir on /srv/Mail/<user> SMTP to use dovecot credentials STARTTLS/TLS connection required to www.twc.com No TLS/SSL required on the local network, but if it is required to do so then so be it. Procedure: Step 1. create certs Step 2. install/configure dovecot Step 3. install/configure a SMTP daemon I hope this makes this more clear of what I am trying to accomplish. All help welcomne Thanks for your help -- Hindi madali ang maging ako

1 0

Mail server
by Pocket 05 Nov '24

05 Nov '24

I am looking to setup an email server for home use. I want to replace a debian server on a RPI 4 to an archlinux arm on RPI 4. I have dovecot and postifix on the debian rpi presently. It is not working as needed. I have looked at the relative wiki pages for postfix, exim, opensmtpd and dovecot. Looks like I may need help with the setup. Need recommendations and setup help for one of the following: SMTP postfix, exim, opensmtpd The server needs to send/forward email from alarm.home.arpa to mail.twc.com for several accounts. The smarthost would need to "lookup" the account for the proper login credentials. I have no been able to set this up in exim nor postfix IMAP dovecot Need to be able set email directories to /srv/Mail/<user> for all users The /srv is a raid 1 partition so I want to store the mail there instead of in the default /var directory Thanks -- Hindi madali ang maging ako

5 8

Re: [arch-dev-public] [RFC] archweb nvchecker integration
by lists.archlinux＠ihavea.quest 04 Nov '24

04 Nov '24

Has there been any update/activity in this regard? This was an excellent idea! -- txtsd https://ihavea.quest On 2/1/22 1:55 AM, Jelle van der Waa wrote: > We’ve wanted automatic flagging packages out of date for a while and > currently every packager has to come up with it’s own solution. Let’s > solve this centralized by integrating nvchecker into archweb. > > nvchecker is a program which can monitor versions upstreams, github, > pypi, haskell, crates.io or custom provided for updates. Various > packagers already use nvchecker in some form. [1] > > The idea is that every package in svn has a .NVCHECKER file > (linux/trunk/.NVCHECKER) which contains the package specific settings i.e.: > > [go] > source = “github” > github = “golang/go” > prefix = “go” > use_max_tag = true > exclude_regex = “.(release|weekly|rc|alpha|beta).” > > Archweb will have a systemd service which regularly goes through the > pkgbases, check if the file exists, runs nvchecker and if required flags > the package out of date automatically. > > For Github sources a token is required so we can do 5000 requests per > hour, Arch Linux already has a Github account so this is no issue. > > Felix already has a script which converts a subset of packages to > nvchecker. This could be extended to apply to more packages. [2] > > The question is if anyone object to checking these small .NVCHECKER > files into our svn repository. If there are no real objections, I'll > start implementing this functionality into archweb in two weeks. > > [1] https://nvchecker.readthedocs.io/en/latest/usage.html#check-crates-io > [2] > https://github.com/felixonmars/archlinux-futils/blob/master/arch-to-nvcheck… > > Greetings, > > Jelle van der Waa

5 7

Re: About AUR accreditation policy
by Óscar García Amor 04 Nov '24

04 Nov '24

El mar, 22-10-2024 a las 13:57 -0300, Giancarlo Razzolini escribió: > If individual attribution is needed, it can be obtained using version > control history. Yes, but this does not happen when moving a package from AUR to the official repositories. For example in the case of the package we are talking about there is no git history [1] since it stayed in the AUR [2]. However that could be a very good solution, always move the git repository from the AUR when a package is promoted and vice versa (move the git from the official repository to the AUR) when the package is left without maintainer. Greetings. [1]: https://gitlab.archlinux.org/archlinux/packaging/packages/textpieces/-/comm… [2]: https://aur.archlinux.org/cgit/aur.git/log/?h=textpieces -- Óscar García Amor | ogarcia at moire.org | http://ogarcia.me

1 0

Is there a way to submit a one-shot update to an Aur package without becoming the maintainer?
by David C. Rankin 03 Nov '24

03 Nov '24

Arch and Aur Folks, I updated https://aur.archlinux.org/packages/mongodb44 to build with the last 4.4.29 source and patched for boost 1.86. The package builds fine now against current Arch. I wanted to pass along the results of those efforts and update the Aur package, but didn't want to take on the maintainer role. Is there a way to provide an update for the package and bring in back into date without becoming the maintainer? I have a signed source package I'm happy to pass along if that is something the admins can do. There is about 8 hours of effort to that went to find and fix all the issues, I'd like to make that available to whoever may need the 4.4 version of mongodb. I didn't think I'd ever need it, but it is the last version that wasn't built requiring avx - so it is useful if you need it for those cases or need it in a VM, etc.. (note: some parts of a 3rd party package included along with the source will need a significant 'type' change to suppress the char8_t -Wc++20-compat type warning, but that's just something for the future, and there is one more -Wredundant-move I need to fix in src/mongo/db/matcher/expression_array.h that somehow got missed in the hundreds of thousands of lines of output) I've tried posting to aur-general, but my posts do not ever make it to the list. I don't mind picking up the maintainer role, but am hesitant to get caught be another large boost deprecation/removal during a busy week and not have time to devote to it. Is a one-shot update something that can be done for this package without becoming the maintainer? -- David C. Rankin, J.D.,P.E.

3 8

Status of package superslicer
by Björn Försterling 30 Oct '24

30 Oct '24

Hi, was the package "superslicer" removed from pacman? $ sudo pacman -Ss superslicer $ echo $? 1 Also I cannot find the package "slic3r" as well. The only slicer that pacman supports now seems to be the "prusa- slicer". Does anyone know why these packages where removed? Regards Björn

1 0

Nextcloud - Archlinux packaged apps verse Nextcloud store - What is the difference?
by David C. Rankin 23 Oct '24

23 Oct '24

Devs, I've used nextcloud in Arch for a couple of years. When I installed, it was just the Nextcloud webapp that was available and the applications were packaged by nextcloud with additional apps available in the nextcloud store. Now there are "nextcloud-app-xxxx" packages provided by Archlinux, e.g. nextcloud-app-bookmarks nextcloud-app-calendar nextcloud-app-contacts nextcloud-app-main nextcloud-app-news nextcloud-app-notes nextcloud-app-spreed Did something change that now means I should be installing the nextcloud-app-xxxx packages instead of the apps that are already in Nextcloud? The wiki https://wiki.archlinux.org/title/Nextcloud is silent on the packaged apps. Are they different from what is available in the nextcloud store? Better? Just trying to figure out why they are packaged and if I should switch to them. -- David C. Rankin, J.D.,P.E.

2 3

About AUR accreditation policy
by Óscar García Amor 22 Oct '24

22 Oct '24

Hello foks, I tell you, about 8 hours ago a package that Radu C. Martin and I were maintaining (textpieces) was moved from the AUR to extra. In this movement (which seems perfect to us, every package officially maintained is welcome and better than this in the AUR) our names have disappeared[1]. I don't want you to misunderstand me, I'm not crying foul about this, but it doesn't seem fair to me that the person (or persons) who kept the package for a while until it became official is not credited. If we in the AUR keep the names of those who preceded us in the maintenance of the package, I understand that when a package moves from the AUR to an official repository the same should happen. This happens when a package is dropped to AUR. I don't know if there is a directive for this, but if not, maybe it's time to write one. And as I said, I don't mind that my name doesn't appear as a contributor right now (I keep my AUR packages for myself and for people to benefit from it, not for fame or similar nonsense), but I do find it a bit ugly that the effort involved in doing that work is not recognized, and not by me, but by everyone. Greetings. PS: I would not want accusations or ugly things to come out of this. I just want to note that there should be a policy that the AUR maintainer's work should be credited when a package is moved to an official repository. [1]: https://gitlab.archlinux.org/archlinux/packaging/packages/textpieces/-/blob… -- Óscar García Amor | ogarcia at moire.org | http://ogarcia.me

13 18

Arch Linux stuck on legacy iptables by default
by Martin Rys 18 Oct '24

18 Oct '24

Arch Linux still uses the legacy iptables backend, as opposed to the nft backend that every other distribution uses. This has been reported since 2021 with no response: https://gitlab.archlinux.org/archlinux/packaging/packages/iptables/-/issues… To me it looks like a direct, simple migration, and it just needs someone with the needed perms to look at it, but I could be wrong. It's assigned to the notoriously overburdened Felix, is there anything a non-core member can do, other than wait? It's not a *large* issue, it's just mildly annoying to have workarounds in my deploys, as it is installed on any system due to iproute2 needing an iptables backend, and some things just outright don't work with that, requiring the nft one. Thanks, Martin

6 9

Network Issues After Pacman Upgrade
by Björn Försterling 14 Oct '24

14 Oct '24

Hello, I just ran a "pacman -Syu" and am having issues with the internet connection. I have around 10 seconds with a working connection to the internet followed by 10 seconds without being able to establish a connection. For 10 seconds I am able to curl google.com or telnet its port 443, and then I get blocked for 10 seconds. There was an update to "networkmanager": [2024-10-13T15:39:41+0200] [ALPM] upgraded networkmanager (1.48.10-1 -> 1.50.0-1) Could this be the cause? Does anyone else experience similar problems? I had the same problem a few weeks ago. Regards Björn

5 5

Strange config /etc/profile.d/utf8.sh added on recent upgrade
by Tadeas Uhlir 13 Oct '24

13 Oct '24

Hey all, Today, I noticed that my alias for "ls" is not working as usual. I alias "ll" to "LC_COLLATE=C ls -alF" to have a long listing with hidden dirs at the top. However, I noticed that the sorting doesn't work all of a sudden. After some digging around I found out that this is due to "LC_ALL" being set to "en_US.utf8". This variable is being set from a file at "/etc/profile.d/utf8.sh". Two notes about this: 1. For the life of me I cannot figure out which package upgrade/install created this file. Just going by a pacman log the file creation time corresponds to when "pacman --noconfirm -S autoconf libtool m4 automake" ran. But those packages don't seem to have much to do with locale. And googling the path of this file doesn't seem to yield much, clearly it's not a very common config file across linux distros. 2. Once I find the culprit, I would love to know what is the rationale behind explicitly setting "LC_ALL". Even the archwiki mentions that this should only be done during tests: https://wiki.archlinux.org/title/Locale#LC_ALL:_troubleshooting . And, indeed, seems like a bad idea given that it overrides all LC_ vars. -- Best Regards, Tadeáš Uhlíř

2 2

Periodic aged package report
by Genes Lists 11 Oct '24

11 Oct '24

Periodic check of Arch out of date packages. This considered are purely my opinion of those that are sufficiently 'relevant'. Apologies to any others. The really good news is that there really aren't many ! Big congrats for the hard work keeping Arch awesome and up to date. Note that, some are excluded when they are work in progress and/or involve a significant amount of work (provided they are not "too" old, which none are). Arch is doing an amazing job keeping our core/key packages like compiler tools, python, systemd, kernel and other vital packages very up to date. What remains are a few that are relevant enough (imho) to make the list. I am using 3 metrics of age: - Num-B The number of releases we are behind Some packages have frequent updates some do not. - Age The number of days between the arch version and the latest - New: How recent was the latest released (days ago from today) Package Arch Curr Date num-b Age New ------------------ ---------- ------ -------- ------ ------ ---- apparmor 3.1.7-5 4.0.3 08/15/24 4 195 55 biber 1:2.19-4 2.20 03/21/24 1 321 202 dkms 3.0.12-1 3.1.0 10/01/24 2 373 8 python-cryptography 42.0.8-1 43.0.1 09/03/24 2 91 36 python-setuptools 1:69.5.1-1 75.1.0 09/13/24 22 153 26 yubioath-desktop 5.1.0-3 7.1.0 09/25/24 12 1234 14 (1) (1) Now called yubico-authenticator -- Gene

5 7

Valgrind problem
by Frank 07 Oct '24

07 Oct '24

Good evening, I'm trying to debug an issue with Evolution and the Gnome guys asked me to use valgrind. However, when running this command I get an error I'm stuck with: valgrind --num-callers=30 --leak-check=no --track-origins=yes /usr/lib/evolution-calendar-factory -w ==4915== Memcheck, a memory error detector ==4915== Copyright (C) 2002-2024, and GNU GPL'd, by Julian Seward et al. ==4915== Using Valgrind-3.23.0 and LibVEX; rerun with -h for copyright info ==4915== Command: /usr/lib/evolution-calendar-factory -w ==4915== valgrind: Fatal error at startup: a function redirection valgrind: which is mandatory for this platform-tool combination valgrind: cannot be set up. Details of the redirection are: valgrind: valgrind: A must-be-redirected function valgrind: whose name matches the pattern: strcmp valgrind: in an object with soname matching: ld-linux-x86-64.so.2 valgrind: was not found whilst processing valgrind: symbols from the object with soname: ld-linux-x86-64.so.2 valgrind: valgrind: Possible fixes: (1, short term): install glibc's debuginfo valgrind: package on this machine. (2, longer term): ask the packagers valgrind: for your Linux distribution to please in future ship a non- valgrind: stripped ld.so (or whatever the dynamic linker .so is called) valgrind: that exports the above-named function using the standard valgrind: calling conventions for this platform. The package you need valgrind: to install for fix (1) is called valgrind: valgrind: On Debian, Ubuntu: libc6-dbg valgrind: On SuSE, openSuSE, Fedora, RHEL: glibc-debuginfo valgrind: valgrind: Note that if you are debugging a 32 bit process on a valgrind: 64 bit system, you will need a corresponding 32 bit debuginfo valgrind: package (e.g. libc6-dbg:i386). valgrind: valgrind: Cannot continue -- exiting now. Sorry. THX Frank

3 4

Delayed responsiveness on resume after upgrade
by SET 07 Oct '24

07 Oct '24

Hello, I just upgraded a host and noticed a waiting of about 90s before the desktop (KDE) becomes responsive (typing to unlock the screen, the mouse cursor can be moved). This was not the case before the upgrade. This box has 3 remote shares attached via sshfs. The delay to responsiveness is near immediate if it is suspended while the remote shares are not connected. With remote shares connected on suspend: [Sat Oct 5 12:05:03 2024] OOM killer enabled. [Sat Oct 5 12:05:03 2024] Restarting tasks ... done. [Sat Oct 5 12:05:03 2024] random: crng reseeded on system resumption [Sat Oct 5 12:05:03 2024] PM: suspend exit [Sat Oct 5 12:05:03 2024] r8169 0000:06:00.0 eth0: Link is Up - 1Gbps/ Full - flow control off [Sat Oct 5 12:06:35 2024] r8169 0000:06:00.0 eth0: Link is Down [Sat Oct 5 12:06:35 2024] Generic FE-GE Realtek PHY r8169-0-600:00: attached PHY driver (mii_bus:phy_addr=r8169-0-600:00, irq=MAC) [Sat Oct 5 12:06:35 2024] r8169 0000:06:00.0 eth0: Link is Down [Sat Oct 5 12:06:39 2024] r8169 0000:06:00.0 eth0: Link is Up - 1Gbps/ Full - flow control off With remote shares disconnected on suspend: [Sat Oct 5 12:10:55 2024] OOM killer enabled. [Sat Oct 5 12:10:55 2024] Restarting tasks ... done. [Sat Oct 5 12:10:55 2024] random: crng reseeded on system resumption [Sat Oct 5 12:10:55 2024] PM: suspend exit [Sat Oct 5 12:10:55 2024] Generic FE-GE Realtek PHY r8169-0-600:00: attached PHY driver (mii_bus:phy_addr=r8169-0-600:00, irq=MAC) [Sat Oct 5 12:10:56 2024] r8169 0000:06:00.0 eth0: Link is Down [Sat Oct 5 12:10:58 2024] r8169 0000:06:00.0 eth0: Link is Up - 1Gbps/ Full - flow control off It seems that the network link remains 'up' when the remote shares are connected, then has to go down and that's where the delay lies. Afterwards, it quickly returns to the up state. 'modinfo r8169' does not expose any option at all. I wish to know if there's a simple known solution to quickly resume the host. The root cause could also lie deep in the kernel and may perhaps disappear on a future upgrade. I can live with it, it's just annoying. Thanks for any input.

2 2

Re: Future of salt in our repositories
by Genes Lists 05 Oct '24

05 Oct '24

On Sat, 2024-10-05 at 17:36 +0200, Morten Linderud wrote: > Yo, > > `salt` is a framework for server provisioning, change management and > ... > `salt` as of version `3007` does not support Python 3.12, and the > release `3008` > seems far away, ... > salt is going for the vendor > approach they call `onedir` and instead bundle *everyting*, including > their own > Python runtime, into a directory. This is going to be a mess to > properly support > ... ... > As long as there are not any major issues I intend to drop this > package ahead of > our Python 3.13 release and prep work. Replying via general. This does indeed make a lot of sense. 'onedir' sounds pretty horrible. It might worthwhile noting that salt was acquired by VMware which in turn was acquired by broadcom a couple years ago. I have no views if this is significant for its future trajectory or not. I wonder if some people might be considering migrating to Ansible or another alternative? thanks for staying on top of things and keeping us informed. gene -- Gene

1 0

Estimate for Linux 6.11 to move from testing to core?
by David C. Rankin 02 Oct '24

02 Oct '24

All, Devs, I've been watching https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues to try and get a handle on when to expect the 6.11 kernel. I can't read the tea-leaves very well. Does anyone involved in the process have an estimate of when we should look for the new kernel to be released? I ask because I have one production box to update and want to set aside time in case I have to troubleshoot. Though thankfully, the 6.10 -> 6.11 update looks benign from a server standpoint. Are we just waiting on the i915 shadow frame-buffer issue or one of the other audio issues? -- David C. Rankin, J.D.,P.E.

4 4

Wayland performance issues after upgrading linux and nvidia
by Edward Toroshchyn 02 Oct '24

02 Oct '24

All, Just wanted to drop a short FYI here, in case you've also encountered issues running Wayland after updating linux (6.10.10.arch1-1 -> 6.11.1.arch1-1) and nvidia (560.35.03-6 -> 560.35.03-9). For me, downgrading helped: # cd /var/cache/pacman/pkg/; pacman -U nvidia-560.35.03-3-x86_64.pkg.tar.zst linux-6.10.8.arch1-1-x86_64.pkg.tar.zst I've reported the issue here: https://gitlab.archlinux.org/archlinux/packaging/packages/nvidia/-/issues/9 Worm regards, -- Edward

1 0

Recommended setup for synced password manager
by Georg 27 Sep '24

27 Sep '24

Dear list crowd, I'm looking for a synced password manager solution that connects my Arch PC with my android phone, and a Windows PC. I'd like to use my arch server as the nexus, and want to avoid commercial services by all means. One option I heard is using one or more keepass databases and keeping them in sync via syncthing. Another option seems to be bitwarden. Are there more good options? What do people use, that works well and painfree? What other options for automatic syncing of the keepass database would there be? I'd prefer short and on point answers without too much detail, but just a conceptual sketch. Thanks in advance, and maybe this benefits someone else as well. Georg

17 18

Re: Kernel with IMA and "better" secure boot / MOK support
by Johan Dahlberg 26 Sep '24

26 Sep '24

On 2024-09-26 16:52, simon-b(a)murena.io wrote: > Hi, > Hi, thanks for replying! Just to avoid any confusion, the setup I'm using already works the way I want, I'm just hoping to find a way to avoid custom kernels. > you can add public keys to the kernel keyring which are stored in a > hardware store (e.g. the UEFI key database). [0] This is mostly what I've been doing, using mokutil to store the mok cert in an efivar with shim. shim then pulls them in to the MokListRT efivar, which the kernel then validates against (if I understood it all correctly). But that is only as long as IMA is enabled in the kernel.. without IMA the .machine keyring never gets populated. The MOK keys will however end up in the .platform keyring even without IMA, but it will not trust them since they're not part of the chain the kernel trusts (.builtin_trusted_keys, or .secondary_trusted_keys). One would need to add one's own CA cert in the kernel build (and sign the modules with the same CA to make this work, I think. Documentation has left me a bit confused on this. > > You can also sign the modules with a MOK. [1] > I've also tried to do this, adding my MOK cert next to the Database cert from the UEFI secure boot setup, and then signing the the modules with the corresponding key. But the kernel still didn't want to trust this cert. Again I assume because the kernels chain of trust requires the MOK cert to come from the same CA as one of the .builtin_trusted_keys. Arch uses auto-generated keys on their kernel builds, so this can't work as far as I understand. And even they signed with their own keys, I'd need to sign my modules with the same key as them, which obviously wouldn't be possible. Perhaps there are facilities in the kernel I'm unaware of here but it seems to me the only way for a user to validate out-of-tree module signatures are with MOKs. Which is why I started thinking maybe there needs to be another official kernel that supports this. > Since I don't use external modules, I have not tested any of these > methods. Any modules that comes with the kernel will always pass validation and load since they share the same auto-generated key/cert. > > I am not sure how you use the IMA (e.g. wether you verify the PCR10 > from a TPM2), but an alternative could be > > a dm-verity signed root-fs, e.g. created with verity-squash-root [2]. > I believe the more advanced features of IMA are not needed in this scenario. In the case of being able to validate out-of-tree modules against MOK signatures all that is needed is CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT (as far as I can tell at least). > Best, > > Simon > > [0] > https://www.kernel.org/doc/html/v6.11/admin-guide/module-signing.html > > [1] > > https://gist.github.com/lijikun/22be09ec9b178e745758a29c7a147cc9 > > [2] > > https://aur.archlinux.org/packages/verity-squash-root > Regards, Johan > September 26, 2024 at 12:09 PM, "Johan Dahlberg" <joda(a)nejomi.net> > wrote: > >> For the last couple of years I've been rolling my own kernels on a >> couple of machines in order to have better support for secure boot >> and especially mok keys. This has been necessary for being able to >> boot with lockdown=confidentiality/integrity and still be able to >> load any signed out-of-tree (dkms) modules. The official kernels in >> arch is built without IMA support as it would break the ability to >> kexec to another kernel when secure boot is on (since the kernels >> are built with auto-generated keys, they would fail validation). >> There are some bug reports on the subject, see [1] and [2]. >> >> How I'm validating signed out-of-tree modules goes as following: >> >> - uefi to setup mode >> >> - create my own EFI keys, and enroll them >> >> - roll my own uki kernel (built with IMA) and sign it and it's >> modules and any out-of-tree modules >> >> - set uefi to boot shim.efi, which then calls grubx64.efi (which is >> just a renamed systemd-boot in my case) >> >> - shim passes on mok keys >> >> - systemd-boot boots the kernel with lockdown=confidentiality >> >> - kernel adds the keys passed from shim to the (.machine) keyring >> and successfully loads any modules signed with a key listed in mok >> >> It's been a while since I set it up so I might have misremembered >> some step there. >> >> Anyway to my question, since the situation with kexec and IMA is >> probably not going to change, and since there probably (?) are more >> people out there who would like to use the whole secure boot chain >> with MOKs and all, perhaps it would be possible to discuss providing >> another official kernel which is built to support the above >> scenario? I'm not too deep into the arch dev system and tools, but >> considering what I'm doing - just pulling the PKGBUILD and doing >> some minimal changes to the config and then building it, it seems it >> would not add too much of a maintenance overhead. >> >> Perhaps there are other ways of achieving the same results that I'm >> not aware of.. if so I'm curious to hear about it. Mostly I'm just >> trying to get out of having to use custom kernels. :-) >> >> Thanks for reading, >> >> Johan >> >> [1] https://bugs.archlinux.org/task/75102 >> >> [2] https://bugs.archlinux.org/task/75041

1 0

Re: strange Adwaita tray icon difficulties
by Abraham S.A.H. 26 Sep '24

26 Sep '24

Sep 26, 2024, 07:26 by daniel.ranc(a)telecom-sudparis.eu: > > Abraham, > > Thank you for this rant which i would have been too shy to write > myself on the list, but i am completely with you on that issue. I > would even add that major applications such as Thunderbird are, > at times, subject to very strange bugs and behaviors related to > "new features to make it slick", slickness in which i am not > interested at all, so that i always install Seamonkey as plan B. > > I relate these problems to project governance issues rather than > budget problems (which they are constantly invoking). Sad. > > Copy to my friend Tarus, who's involved in Open Source matters. > > Cheers > Daniel > > ps. i confess between us that the dinosaur that i am uses FVWM :-) > > > On 26/09/2024 03:02, Abraham S.A.H. wrote: > >> I have bitten by that too, on three systems that I maintain. Even on >> the one which uses Xfce desktop. This random breaking changes to GTK >> and Gnome related stuff is disrespectful to users. And the usuall >> answer is that “If you don’t like it, use something else!”; but they >> are damn everywhere. Gtk used to be the goto universal toolkit on >> GNU/Linux platform that everyone would use to make his/her app; now >> they are maintaining and developing it only for Gnome and Adwaita >> adhering apps. Anything based on GTK keeps not fitting in any other >> DE or any machine that Gnome project doesn’t like or care to support. >> >> And worst is, that any complaint anywhere usually results in aggressive >> or hostile responses. >> >> >> -- >> Best Regards, >> Abraham >> Sent with Tutanota; >> https://tuta.com >> Well, as far as I know, Gnome is one of the most sponsored Free Software projects. And The most sponsored open source desktop environment. And developers are mainly employees of the sponsers (mostly by Red Hat). It's often claimed that Gnome is a community project. Compare it with Emacs, which has about 19 mailing lists; one of them being the development mailing list (emacs-devel) that all development discussions happen openly there. And one can submit his/her patch or code to be included in Emacs! — and unlike Gnome, they even don't scream being a community software project. Actually, many of Emacs features are from the free volunteers that donated their code; just through this mailing list. In contrast, in Gnome, even major bug reports get closed as not planned or not supported, or that it’s not a bug in Gnome software, because you installed that package from your distro rather than Flatpak, or you installed that extension from AUR instead of web interface. And basically, there is no easy way for user-developers to change GTK or Gnome DE out of what Gnome project foresees. If a feature is not planned you are not allowed to implement it, even with two or three developers. — Well, seems fair, since you just implement it, but they have to maintain it. All that aside, Gnome project has its board and its developers and sponsors, and they have the right to decide about the direction. All okay. Problem arises when you have to pull in gtk4 and gtk3 packages only for installing ‘ibus’! Now, that one is ridiculous. And that is my whole point; gtk is everywhere because it was there from when none of these were an issue. -- Best Regards, Abraham Sent with Tutanota; https://tuta.com

1 0

Kernel with IMA and "better" secure boot / MOK support
by Johan Dahlberg 26 Sep '24

26 Sep '24

For the last couple of years I've been rolling my own kernels on a couple of machines in order to have better support for secure boot and especially mok keys. This has been necessary for being able to boot with lockdown=confidentiality/integrity and still be able to load any signed out-of-tree (dkms) modules. The official kernels in arch is built without IMA support as it would break the ability to kexec to another kernel when secure boot is on (since the kernels are built with auto-generated keys, they would fail validation). There are some bug reports on the subject, see [1] and [2]. How I'm validating signed out-of-tree modules goes as following: - uefi to setup mode - create my own EFI keys, and enroll them - roll my own uki kernel (built with IMA) and sign it and it's modules and any out-of-tree modules - set uefi to boot shim.efi, which then calls grubx64.efi (which is just a renamed systemd-boot in my case) - shim passes on mok keys - systemd-boot boots the kernel with lockdown=confidentiality - kernel adds the keys passed from shim to the (.machine) keyring and successfully loads any modules signed with a key listed in mok It's been a while since I set it up so I might have misremembered some step there. Anyway to my question, since the situation with kexec and IMA is probably not going to change, and since there probably (?) are more people out there who would like to use the whole secure boot chain with MOKs and all, perhaps it would be possible to discuss providing another official kernel which is built to support the above scenario? I'm not too deep into the arch dev system and tools, but considering what I'm doing - just pulling the PKGBUILD and doing some minimal changes to the config and then building it, it seems it would not add too much of a maintenance overhead. Perhaps there are other ways of achieving the same results that I'm not aware of.. if so I'm curious to hear about it. Mostly I'm just trying to get out of having to use custom kernels. :-) Thanks for reading, Johan [1] https://bugs.archlinux.org/task/75102 [2] https://bugs.archlinux.org/task/75041

1 0

strange Adwaita tray icon difficulties
by Daniel Ranc 26 Sep '24

26 Sep '24

Dear all, I am experiencing some strangeness with the Adwaita tray icons of VLC and volumeicon. They disappeared from the tray around this summer (unfortunately no precise data here) and I needed to revert to the latest working package adwaita-icon-theme-41.0-1-any.pkg.tar.zst for those icons to work again. My environment is using stalonetray and a very simple window manager (no Gnome, no KDE whatsoever). Are others impacted as well ? Any clue how to get back on track ? Interestingly last week some apps suddenly showed completely black windows: simple-scan and pavucontrol, and i had to revert to older packages to make them work again. Are those phenomena related? Thanks for any help. Daniel

6 9

lightdm login loop with systemd-homed
by Abraham S.A.H. 26 Sep '24

26 Sep '24

It seems that from systemd 256 onwards, lightdm cannot properly log into homed user accounts. At least in X sessions. It keeps in a loop of "getting password --> (trying to) logging in --> black journaled screen --> getting back to the first step asking for password again" It can't read ~/.Xauthority, tries to find it at /.Xauthority instead. lightdm unit logs says: ~~~ Error writing X authority: Failed to open X authority /.Xauthority: Permission denied ~~~ It doesn't seem to be related to https://wiki.archlinux.org/title/LightDM#Infinite_login_loop Also, there's an open issue related to this in lightdm's github repository Is there anyone who is experiencing the same issue? -- Best Regards, Abraham Sent with Tutanota; https://tuta.com

3 6

mkarchroot fails with "Permission denied" error during pacman sync (maybe alpm download user related?)
by Henning 25 Sep '24

25 Sep '24

Hi, I hope this is (one) of the correct places to request some help. I followd this Wiki article (https://wiki.archlinux.org/title/DeveloperWiki:Building_in_a_clean_chroot) and failed on the classical way and I have no clue why :-) I add some example output on the buttom. Maybe related. The "arch machine" with this error is a VM, running via incus on an arch host. The VM use ext4, the host btrfs. On the arch host itself, the command work as expected. Only inside the VM it fails. If I comment out "DownloadUser = alpm" in /etc/pacman.conf, it works. But this is also enabled on the (working) host, without any problems. (same default pacman.conf) Thanks Henning ################################################################### [henning@archlinux ~]$ sudo rm -rf test/ [henning@archlinux ~]$ mkdir test [henning@archlinux ~]$ mkarchroot test/root base-devel ==> Creating install root at /home/henning/test/root ==> Installing packages to /home/henning/test/root :: Synchronizing package databases... error: could not open file /home/henning/test/root/var/lib/pacman/sync/download-AIUAX3/core.db.part: Permission denied error: failed to setup a download payload for core.db error: failed to synchronize all databases (failed to retrieve some files) ==> ERROR: Failed to install packages to new root ==> ERROR: Failed to install all packages

2 1

dbus-broker-units provides dbus-units
by u34＠net9.cf 25 Sep '24

25 Sep '24

$ pacman -Qi dbus-broker-units | grep Provides Provides : dbus-units Seeing that, I assumed it is enough to have the dbus-broker-units package, without having the dbus-units package. That assumption turns to be wrong. While trying to build a chroot environment, if the dbus-units package can not be obtained, the process fails. :: Retrieving packages... dbus-units-36-4-x86_64.pkg.tar.zst failed to download error: failed retrieving file 'dbus-units-36-4-x86_64.pkg.tar.zst' from the_repo : The requested URL returned error: 404 warning: failed to retrieve some files error: failed to commit transaction (failed to retrieve some files) Errors occurred, no packages were upgraded. ==> ERROR: Failed to install packages to new root ==> ERROR: Failed to install all packages One reason for the explicit search for dbus-units is that systemd explicitly depends on dbus-units. $ pacman -Qi systemd | grep dbus-units Depends On : ... dbus dbus-units ... Am I confused? Why the chroot must have a dbus-units package? -- u34

2 1

mkarchroot and Manual intervention for pacman 7.0.0 and local repositories required
by u34＠net9.cf 24 Sep '24

24 Sep '24

$ pacman -Qo mkarchroot /usr/bin/mkarchroot is owned by devtools 1:1.2.1-1 Referring to https://archlinux.org/news/manual-intervention-for-pacman-700-and-local-rep… and to https://wiki.archlinux.org/title/DeveloperWiki:Building_in_a_clean_chroot#S… with a modified pacman.conf: error: could not open file /home/user/chroot/root/var/lib/pacman/sync/download-o6cp5z/core.db.part: Permission denied error: failed to setup a download payload for core.db error: failed to synchronize all databases (failed to retrieve some files) ==> ERROR: Failed to install packages to new root ==> ERROR: Failed to install all packages The modified pacman.conf is using links created with ln -s /var/lib/pacman/sync/*.db /var/cache/pacman/pkg/ I have also tried the naive approach of --- a/usr/bin/mkarchroot 2024-06-23 21:00:54.158267054 +0000 +++ b/usr/bin/mkarchroot 2024-09-22 19:31:52.984269364 +0000 @@ -73,6 +73,7 @@ [[ -e $working_dir ]] && die "Working directory '%s' already exists" "$working_dir" mkdir -p "$working_dir" +chown :alpm "$working_dir" lock 9 "${working_dir}.lock" "Locking chroot" In addition, the most basic suggestion of https://wiki.archlinux.org/title/DeveloperWiki:Building_in_a_clean_chroot#S… , namely # mkarchroot /home/user/chroot/root base-devel also fails. Though it could be due to a usually working XferCommand in pacman.conf. Does mkarchroot broken? -- u34

2 5

spam on the forum
by funny0facer 22 Sep '24

22 Sep '24

Could someone please ban https://bbs.archlinux.org/profile.php?id=162864 on the forum? This person is posting pictures, I really do not want to see. Thanks

3 5

pacman 7 - why is #ParallelDownloads = 5 commented by default now?
by David C. Rankin 21 Sep '24

21 Sep '24

Devs, As I merged .pacnew changes for pacman.conf, I notice the parallel download option is now commented by default. I left it that way. But why is that now the default after having parallel transfer come in as a new feature a year or two ago? -- David C. Rankin, J.D.,P.E.

2 2

Re: Arch Linux public upload server
by Rein Fernhout (Levitating) 19 Sep '24

19 Sep '24

I sent this message yesterday but I accidentally forgot to add the mailing list as a recipient. -------- Original Message -------- Subject: Re: Arch Linux public upload server Date: 2024-09-04 14:28 From: "Rein Fernhout (Levitating)" <me(a)levitati.ng> To: Robin Candau <antiz(a)archlinux.org> On 2024-09-04 09:56, Robin Candau wrote: > On 9/4/24 1:04 AM, Polarian wrote: >> Hello, >> > > Hello, > Hello, >> >> So to spur such a discussion, why should it be rustypaste? >> What makes it better than the competition? >> > > I think you're taking Orhun's mail/proposition the wrong way. > > First of all, Arch Linux and rustypaste are not corporate so there's no > "corporate buddies"/shareholders in that context. I personally have not > been bothered by any potential "conflict of interest" in their > suggestion. > > Secondly, Orhun's demand is not "Should Arch Linux host a public > pastebin/upload server (and, if so, could it be rustypaste)?" but > "rustypaste is looking for a public instance [2], could Arch Linux host > it?" > > Here again, I feel like this an important nuance to understand why the > discussion is specifically about rustypaste (and not about any other > similar services). > > > [1] > https://lists.archlinux.org/archives/list/arch-general@lists.archlinux.org/… > [2] https://github.com/orhun/rustypaste/issues/326 Though I do think that if we were to have a pasting service, I would like to use a battle-proven tool with proper moderation capabilities like 0x0. But in generally I think we just shouldn't start. The amount of abuse pasting services see is absolutely staggering. The only way I think we could manage is, like mentioned before, by protecting it with our SSO account authentication. But rustypaste doesn't rely on a frontend, it works similarly to 0x0. So what does it add to our community? The IRC already recommends use of 0x0 or termbin.com. Both of which rely on open source software that can be selfhosted by users with ease. I would maybe see added value if our pastebin service was graphical, as this would make it more accessible. Authenticated users could submit pastes and anyone could view them. But rustypaste isn't graphical. So I do a agree with Polarian that we should first consider "do we want a pasting service" and then "do we want rustypaste". Even if that was not Orhun's original question.

4 4

[arch-general] Is wine-mono now integrated into wine (9.17)?
by Javier 18 Sep '24

18 Sep '24

Hello ! I'm guessing wine-gecko is now integrated into wine, since it recently got dropped from the repos but it didn't even make it to AUR. Is that the case? Thanks ! -- Javier

2 2

Arch Websites vs Dark Mode
by Genes Lists 16 Sep '24

16 Sep '24

I see that the wiki and gitlab both have dark modes but I didn't see how to activate dark mode for any other part of the website. Did I miss where to turn this on or if it's not yet available are there any plans to add it? Not sure how others feel, but might be nice to offer it. thanks! -- Gene

4 3

Guest issue after virtualbox upgrade from 7.0.20-1 to 7.1.0-1
by Ralf Mardorf 15 Sep '24

15 Sep '24

Hi, the execution of a Windows 11 (64-bit) guest works, with the exception that the shutdown does not end, but this was already a problem under 7.0.20-1, which you can live with. Under 7.0.20-1, a Windows 10 (64-bit) guest, including the shutdown, worked perfectly smoothly. Unfortunately, the Windows 10 startup freezes under 7.1.0-1. Its log ends with "00:01:40.881013 EHCI: USB Suspended". By the manager settings I changed a few settings, to use mainly the same settings for the Windows 10 guest, that are used by the Windows 11 guest. In addition I migrated from USB 2.0 to USB 1.1 for the Windows 10 guest. Now USB is operational and I couldn't see any useful information by the log file. I'm in a hurry as I have to go to work and will read the logs again later at my leisure. Has anyone had similar experiences? FWIW pacman.log mentions an issue: [2024-09-13T05:02:52+0200] [ALPM] upgraded virtualbox (7.0.20-1 -> 7.1.0-1) [2024-09-13T05:02:52+0200] [ALPM-SCRIPTLET] VBoxManage: error: Failed to create the VirtualBox object! [2024-09-13T05:02:52+0200] [ALPM-SCRIPTLET] VBoxManage: error: Most likely, the VirtualBox COM server is not running or failed to start. After restarting the host trying to start the VirtualBox manager GUI for the first time also failed with the object error, but after that it always started without an issue. extra/virtualbox 7.1.0-1 extra/virtualbox-guest-iso 7.1.0-1 extra/virtualbox-host-dkms 7.1.0-1 chaotic-aur/virtualbox-ext-oracle 7.1.0-1 $ uname -r; cat /proc/cmdline 6.10.9-arch1-2 BOOT_IMAGE=/boot/vmlinuz-linux root=/dev/disk/by-label/m1.archlinux ro threadirqs ibt=off Regards, Ralf

1 1

libreoffice - new versioning download frequency - multiple updates per-week?
by David C. Rankin 12 Sep '24

12 Sep '24

Devs, With the advent of the new version scheme for libreoffice, there is a dramatic increase in the frequency of package updates lately, sometimes a new version is packaged daily or every other day, e.g. [2024-08-26T19:24:24-0500] [ALPM] upgraded libreoffice-still (24.2.5-1 -> 24.2.5-2) [2024-09-02T23:01:03-0500] [ALPM] upgraded libreoffice-still (24.2.5-2 -> 24.2.5-3) [2024-09-07T01:54:56-0500] [ALPM] upgraded libreoffice-still (24.2.5-3 -> 24.2.6-1) [2024-09-09T16:53:22-0500] [ALPM] upgraded libreoffice-still (24.2.6-1 -> 24.2.6-2) [2024-09-10T18:48:31-0500] [ALPM] upgraded libreoffice-still (24.2.6-2 -> 24.2.6-3) Granted with gcc changes, etc.. many rebuilds may be needed as those changes are incorporated, and it may just be temporary, but libreoffice is a 150M+ package. I can imagine that adds up from a bandwidth standpoint for Arch and it's mirrors. Is the libreoffice new package frequency just a temporary thing, or is this here to stay? More a curiosity than anything else. I can look back nearly a decade in the pacman.log and it wasn't uncommon to have months when there was no libreoffice update, and rarely 3 or more a month. -- David C. Rankin, J.D.,P.E.

1 0

Update to pacman 7.0.0 and AUR Helpers
by Moabeat 11 Sep '24

11 Sep '24

Hi all, today the update to pacman 7.0.0-r3 was installed on my machine through the core-testing repository. I am usually using the AUR helper yay for any kind of updates. After the update, yay didn't start anymore, as the library version of libalpm increased to 15 and yay was still looking for 14. A manual rebuild of yay easily fixed this. However, I am wondering if there is any way how to make such an update smoother, so that yay would be rebuilt in the same step after pacman was updated and avoid the necessity for a manual rebuild? Kind regards, Moabeat

5 8

Fwd: Replacing mlocate with plocate
by David C. Rankin 10 Sep '24

10 Sep '24

User-feedback on plocate replacment: Works like a champ! Thank you Morten! # pacman -Syu <snip> # systemctl enable plocate-updatedb.timer # updatedb done! -------- Forwarded Message -------- Subject: Re: Replacing mlocate with plocate Date: Tue, 10 Sep 2024 22:04:54 +0200 From: Morten Linderud <foxboron(a)archlinux.org> To: arch-dev-public(a)lists.archlinux.org Thanks for the feedback everyone. I've pushed 1.1.22-2 of plocate which includes a replaces directive. It should replace mlocate from now on. Also included the patch that enables the updatedb timer by default. -- David C. Rankin, J.D.,P.E.

1 0

qemu-common-9.1.0-2 and qemu-system-nios2-9.0.2-1 are in conflict. Remove qemu-system-nios2? [y/N] - Expected?
by David C. Rankin 09 Sep '24

09 Sep '24

Devs, Update today resulted in removal of qemu-system-nios2 presenting the error: qemu-common-9.1.0-2 and qemu-system-nios2-9.0.2-1 are in conflict. Remove qemu-system-nios2? [y/N] There was no note in the "Latest News" about user interaction needed. Just a dependency change or features moving between packages? -- David C. Rankin, J.D.,P.E.

3 2

Re: Arch Linux public upload server
by Óscar García Amor 06 Sep '24

06 Sep '24

El dom, 01-09-2024 a las 12:41 +0200, Jelle van der Waa escribió: > For users there are plenty of pastebin alternatives, for staff we can > use md.archlinux.org to share notes, pastes. Regarding abuse, see for > example what 0x0.st does against detecting awful nsfw content > > https://git.0x0.st/mia/0x0 I couldn't agree more. Personally I have experience in maintaining a public instance of "pastes" with my own development called lesma[1] (source code[2]). If you want some advice, don't do it. 99% of the "pastes" are straight up junk, spam, links to websites selling “dubious products” and other crap. If you want to have it operational, authentication is required and only for internal use. Something public is a pain because unfortunately there are many people who do not respect. Greetings. [1]: https://lesma.eu [2]: https://gitlab.com/ogarcia/lesma -- Óscar García Amor | ogarcia at moire.org | http://ogarcia.me

3 2

extra/realtime-privileges
by Ralf Mardorf 06 Sep '24

06 Sep '24

Hi, I am not up to date, is there meanwhile a reason for • rocketmouse@archlinux ~ $ grep nice /etc/security/limits.d/99-realtime-privileges.conf @realtime - nice -11 ? I the past a nice value for real-time was null and void. Regards, Ralf

1 1

Any way to query the Arch package list to get %-installed by package?
by David C. Rankin 06 Sep '24

06 Sep '24

All, Devs, I was curious about the frequency that packages in extra and core are installed by Arch users. Is that metadata captured anywhere and is there any way a user can query it? What sparked this curiosity is that I follow the package feeds closely checking for version changes I may have to deal with on a production box. In doing so I learn about many packages I've never heard of before. That posed the question of how frequently all packages are installed by Arch users. Package use, popularity, whatever you want to call it can provide a reasonable metric when comparing between two packages that provide the same feature in determining which to investigate first or install. It would also give a metric of the impact of a developer retiring or orphaning packages. Does any install frequency data such as that exist for packages in extra and core? Or could it be garnered by whatever data is captured from the mirror system? -- David C. Rankin, J.D.,P.E.

5 6

Re: Arch Linux public upload server
by Lucie Scarlet 06 Sep '24

06 Sep '24

On 9/3/2024 8:31 PM, Orhun Parmaksiz wrote: > > For users there are plenty of pastebin alternatives Honestly, my biggest issue with the alternatives is how most other services are either too complicated, don't make it easy to just use the keyboard or end up like Hastebin and getting bought up and honestly getting a lot worse. > > it's important to specify how the moderation capabilities are. > My initial idea was to use a configuration like this (with some parts stripped): I 100% support having our own paste service that's on a trustworthy domain like archlinux.org, though I do have some concerns about being able to upload more than just text. I haven't used Rustypaste before, so I can't comment much on that, but reading your email does seem like that would be possible. > > I agree, too. If it should be only for Arch Linux users, we can add a validation question like the one in the forum's log in page. > That's a good/fun idea 🙂 Seconded :D I do hope you're able to put up a service like this. /Lucie

8 10

Network issues on laptop, issue with iwd?
by Lucie Scarlet 03 Sep '24

03 Sep '24

Hi, I've got my HP laptop set up with Arch, and it's been working absolutely wonderful. That is, until recently when it seems like it is having major network issues. I've got it set up with iwd and connected to my home wifi, but it's having a bunch of issues. It keeps dropping the connection, and when it doesn't do that, it really struggles with resolving addresses. I also tested going to 1.1.1.1 and even that had issues, so it's not just DNS. I haven't had any issues with my other devices on the wifi, so I'm not sure if it's that. I tried restarting it as well, which didn't help. Could it be an issue with iwd? Hoping for something that can lead me in the right direction, this is getting quite frustrating. Best, Lucie

8 23

knotes missing after upgrade
by SET 03 Sep '24

03 Sep '24

Hello, After today's upgrade, package knotes is not in the repositories. 'pacman -Q knotes' gives 'knotes 24.05.2-1', the previously installed package that fails to load. Other KDE packages like kontact have version '24.08.0-1'. 'pacman -S knotes' gives nothing. Is it dropped upstream or in Arch (both doubtful)? Has it been renamed? Thank you for any input.

4 4

Two Arch Systems - Identical, loginctl shows TTY for one, not the other?
by David C. Rankin 31 Aug '24

31 Aug '24

Devs, All, Recently across several distros there have been issues with loginctl not showing a TTY associated with a login. This has caused various issues with processes that rely on the user TTY for one thing or another. So I decided to test Arch on two backup servers, both current though today, both boot to multi-user target. On one box TTY=pts/0 is associated with my user login, on the other there is no TTY associated, e.g. 02:41 fenrir:~> loginctl show-session auto Id=1 User=1000 Name=david Timestamp=Sat 2024-08-31 02:37:24 CDT TimestampMonotonic=164549181 VTNr=0 TTY=pts/0 ^^^^^^^^^ Remote=yes RemoteHost=192.168.6.104 Service=sshd Scope=session-1.scope Leader=776 Audit=1 Type=tty Class=user Active=yes State=active IdleHint=no IdleSinceHint=1725090076000000 IdleSinceHintMonotonic=395959270 LockedHint=no The other: 02:40 valhalla:~> loginctl show-session auto Id=1 User=1000 Name=david Timestamp=Sat 2024-08-31 02:26:09 CDT TimestampMonotonic=32411169 VTNr=0 Remote=yes RemoteHost=192.168.6.104 Service=sshd Scope=session-1.scope Leader=712 Audit=1 Type=tty Class=user Active=yes State=active IdleHint=no IdleSinceHint=0 IdleSinceHintMonotonic=0 LockedHint=no How is that possible and what to check? Seems freedesktop.org and provided another mystery. Ideas? -- David C. Rankin, J.D.,P.E.

2 3

Ctl+Alt+F7 fails!
by Ralf Mardorf 31 Aug '24

31 Aug '24

Hi, Ctl+Alt+F7 fails! I need to restart the machine. $ pacman -Q linux linux 6.10.7.arch1-1 2fucktor auth fails as well ;), hence I cannot provide a bug report. I was able to log in https://gitlab.archlinux.org/ a few hours ago. I've had enough by now! I cannot report the issue against the bug tracker, maybe somebody is willing to care about the issue here. Consider to stop this 2fucktor auth crap! Regards, Ralf

5 9

fail2ban with action = %(action_mwl)s not including log lines
by David C. Rankin 30 Aug '24

30 Aug '24

All, I've posted to the forum, but haven't received any suggestions https://bbs.archlinux.org/viewtopic.php?pid=2190182#p2190182 The title says it all. When fail2ban is configured to include log lines in the e-mail it sends when a ban it triggered, no log lines are included. The whois info is included, but not the log lines. Does anybody have this working? Does this need a bug report to have something tweaked to work with the journal on Arch? -- David C. Rankin, J.D.,P.E.

1 1

Auto Chmod inside directory
by Silvio Siefke 30 Aug '24

30 Aug '24

Hello, I use Nextcloud to keep important files synchronised between my computers. This works without any problems, but the folder on the desktop is treated as 777 after every file change. It affects all folders that are below Public/fr4, which is strange, it is kept in sync with a second machine and there (Public/he) this does not happen. How can I find out why this is happening? Are there any possibilities here? It is not the future to use find . -type d -exec chmod 755 {} \; Thank you. Silvio

2 3

gitlab with relative url - ssh push error
by Łukasz Michalski 29 Aug '24

29 Aug '24

Hi, Anyone has a working gitlab installation that uses relative url (https://host/gitlab) ? I am new to gitlab and tried to install and configure it using wiki instructions[1] Then I followed gitlab instruction how to setup subpath[2] Web interface works. I created empty project and tried to push my local repo there and get: [zork@serenity]$ git push gitlab --all Enumerating objects: 33558, done. Counting objects: 100% (33558/33558), done. Delta compression using up to 8 threads Compressing objects: 100% (8908/8908), done. Writing objects: 100% (33558/33558), 509.84 MiB | 46.73 MiB/s, done. Total 33558 (delta 26528), reused 30840 (delta 24311), pack-reused 0 (from 0) remote: Resolving deltas: 100% (26528/26528), done. remote: GitLab: Internal API error (404) To host.pl:repogroup/backend.git ! [remote rejected] case_8546 -> case_8546 (pre-receive hook declined) ! [remote rejected] devel -> devel (pre-receive hook declined) ! [remote rejected] master -> master (pre-receive hook declined) ! [remote rejected] prices_roles -> prices_roles (pre-receive hook declined) No idea from where this "Internal API error (404)" comes from. I already disabled global branch protection and do not have any branch rules in project repo. There are no errors in /var/log/gitlab-shell.json, last lines are: time="2024-08-29T12:54:08Z" level=info msg="Finished HTTP request" content_length_bytes=690 correlation_id=01J6F36KG65FG3DN7NX3JEFX9H duration_ms=100ns method=POST status=200 url="http://unix/gitlab/api/v4/internal/allowed" time="2024-08-29T12:54:08Z" level=info msg="executing git command" command=git-receive-pack correlation_id=01J6F36KG65FG3DN7NX3JEFX9H git_protocol= gl_key_id=1 gl_key_type=key gl_project_path=repogroup/backend gl_repository=project-1 remote_ip=10.21.42.199 user_id=user-2 username=mcl Any idea what can I debug next? Regards, Łukasz [1] https://wiki.archlinux.org/title/GitLab [2] https://docs.gitlab.com/ee/install/relative_url.html

1 1

Changed password on Arch, now ssh cannot connect - "Connection refused"
by David C. Rankin 29 Aug '24

29 Aug '24

All, I changed my password for my username on my Arch server (as you should do every so often). Now everything has gone to hell. I changed the password accordingly in Thunderbird, but it cannot get mail. I've restarted sshd, and I still cannot even connect: debug3: ssh_connect_direct: entering debug1: Connecting to valkyrie [192.168.6.14] port 6661. debug3: set_sock_tos: set socket 3 IP_TOS 0x10 debug1: connect to address 192.168.6.14 port 6661: Connection refused Is there some other magic you must do now other than passwd? -- David C. Rankin, J.D.,P.E.

5 6

win7 BSOD after qemu+libvirt+virt-manager upgrade
by Łukasz Michalski 29 Aug '24

29 Aug '24

Hi, After yesterday host upgrade: linux (6.4.11.arch2-1 -> 6.10.6.arch1-1) qemu-system-x86 (8.0.4-2 -> 9.0.2-1) libvirt (1:9.6.0-1 -> 1:10.6.0-1) I am not able to start win7 guest anymore. My all other vm (win2008srv, arch, win10pro) runs without problems. I filled a bug here with a detailed description: https://gitlab.com/libvirt/libvirt/-/issues/662. Regards, Łukasz

2 2

mirror problems 503 reply?
by David C. Rankin 26 Aug '24

26 Aug '24

All, I don't know if this is a know problem or if I'm just lucky, but checking the mirror status from the archlinux.org main page show more than 50% of the mirrors without any sync status. Trying an update, I just got a 503 reply for an http mirror. Changed to one showing it was syncing -- no issue. Do we have mirror problems? -- David C. Rankin, J.D.,P.E.

1 0

Display manager cannot login to any desktop
by vivid.map8768＠fastmail.com 25 Aug '24

25 Aug '24

Hello all, I am having trouble diagnose display manager problem. I can login to a shell via Ly, and execute Hyprland. However, ly failed to login to Hyprland (and gnome) directly. Here are some relevant configurations: /usr/share/wayland-sessions/hyprland.desktop [Desktop Entry] Name=Hyprland Comment=An intelligent dynamic tiling Wayland compositor Exec=Hyprland Type=Application systemctl and journalctl look OK to me. Any idea what could go wrong? Thanks!

1 0

How to handle reopening old closed bugs
by Friedrich Strohmaier 20 Aug '24

20 Aug '24

Hi @ll, I've one old closed bug [0] in the pipeline, which is still alive and should be fixed one day ;-) [0] https://bugs.archlinux.org/task/46398 If I want to revive it, how to do this in the intended way? As far as I see, old closed bugs are not migrated to the shiny new gitlab. Is that true? If so, how to bring the old wisdom in the new system? I could not find it in gitlab and it does not have any hint about a place there as migrated bugs (closed because of migration) do have. So finally the question: How to revive old closed bugs from flyspray in gitlab? -- Friedrich

2 1

Status of dovecot
by Bjoern Franke 14 Aug '24

14 Aug '24

Hi, Dovecot got a CVE patch release to 2.3.21.1. - CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. - CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email. So I wanted to mark it out of date - and now I'm wondering why it's already out of date for 11 months. Regards Bjoern

1 1

Fwd: News draft: Valkey to replace Redis in the [extra] Repository
by David C. Rankin 13 Aug '24

13 Aug '24

> Hi everyone, > > As you might have heard by now redis got a new license and *some* forks were created [1]. > Valkey as one of them is developed by the Linux Foundation, and adopted by Fedora already [2]. > So we think it's a good step to follow that path and replace redis by valkey. > > > # Valkey to replace Redis in the [extra] Repository Please make sure Valkey works with the Arch package Nextcloud before redis goes away. -- David C. Rankin, J.D.,P.E.

1 0

/usr/bin/tqdm in filesystem NOT owned by any package? (python tqdm)
by David C. Rankin 12 Aug '24

12 Aug '24

Devs, I was surprised trying to install a python-tqdm package to get the error: (2/2) checking for file conflicts [######################################] 100% error: failed to commit transaction (conflicting files) python-tqdm: /usr/bin/tqdm exists in filesystem Errors occurred, no packages were upgraded. The package is there: $ l /usr/bin/tqdm -rwxr-xr-x 1 root root 206 Jul 8 2021 /usr/bin/tqdm I check with pacman to find the owning package -- and there is none: $ pacman -Qo /usr/bin/tqdm error: No package owns /usr/bin/tqdm How can I check how it got there and what may depend on it? I don't install stray packages, and especially not to /usr/bin, so this is a surprise. I don't want to just willy-nilly remove it either and have something unknown break. Best course of action? -- David C. Rankin, J.D.,P.E.

8 13

jenux for me for the future
by Jude DaShiell 07 Aug '24

07 Aug '24

Reason I haven't got the real archlinux on this computer is because I'm in a low grade wi-fi network and iwctl does a couple things that make it impossible to install archlinux. The first is minor but the second is a show stopper. The device list command constantly scrolls the screen with the same information coming up on it. Same thing happens with the station wlan0 connect command scrolling available networks constantly. The second thing iwctl does which is a show stopper is to get the correct network name entered which has a couple spaces in it and get the correct password and then fail to connect throwing an error. I'm using Jenux since somehow Jenux gets around both of these problems. I think iwctl either needs to be cleaned up and improved or I think iwctl needs to be replaced with something that works for wi-fi networks better than iwctl can do it. I don't know how to set up debugging for iwctl and capture useful error information otherwise you'd have that useful error information in this message. We're on penteledata.net so internet quality is also low and was no better on verizon-fios when I used that. These problems are not unique to me either. I was helping a friend for a couple weeks until he finally managed to connect to wi-fi in a remote location with iwctl on archlinux. He is sighted and also had a problem with the scrolling. We were finally able to get his connection up and running and it is just as well it happened this way since I had just learned to use iwctl before Lawrence needed to learn to use it. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

7 9

Re: this happens with pacman too
by Doug Newgard 31 Jul '24

31 Jul '24

> From: Jude DaShiell <jdashiel(a)panix.com> > > Time to reinstall system. A quick scan through, I don't notice that many problems, certainly nothing that indicates the system needs reinstalled. Backup files being altered is normal, and permissions mismatches are not uncommon and don't necessarily indicate a problem. The mtree file issues are definitely a problem.

1 0

Laptop Running Hot
by 2QdxY4RzWzUUiLuE＠potatochowder.com 31 Jul '24

31 Jul '24

Greetings, Lately (the past week or two?), my laptop has been running much hotter than usual, as experienced by my lap and reported by conky and sensors, even after a reboot and before I start X11, and when just idling. Previously, it had been running around 35 to 40 degrees Celsius. Now, it's more like 55 to 60. If I shut the lid and walk away for 10 or 15 minutes, it cools down. But when I open the lid and don't do anything else, the temperature rises again in a few minutes. This happens even when top reports 100% idle, and uptime shows the load average at 0.1±. After multiple lockups attributed to the nvidia 550 drivers a few months ago, I use nvidia-535xx-dkms. I run pacman -Syu daily. Sometimes, problems like this go away with the next kernel or driver(s) update, but that hasn't happened. I would include logs and version numbers, but I'm not sure where to start. :-) I checked the BBS, but I didn't immediately't see anything related. Any ideas? Thanks, Dan

5 13

this happens with pacman too
by Jude DaShiell 31 Jul '24

31 Jul '24

:: Synchronizing package databases... core downloading... jenux downloading... extra downloading... multilib downloading... :: [1mSearching AUR for updates...[0m :: [1mSearching databases for updates...[0m :: 1 package to upgrade/install. 1 extra/bind 9.18.28-1 -> 9.20.0-1 ==> Packages to exclude: (eg: "1 2 3", "1-3", "^4" or repo name) -> Excluding packages may cause partial upgrades and break systems ==> Sync Explicit (1): bind-9.20.0-1 :: Synchronizing package databases... core downloading... jenux downloading... extra downloading... multilib downloading... :: Starting full system upgrade... resolving dependencies... looking for conflicting packages... Packages (1) bind-9.20.0-1 Total Download Size: 2.02 MiB Total Installed Size: 6.86 MiB Net Upgrade Size: 0.19 MiB :: Retrieving packages... bind-9.20.0-1-x86_64 downloading... checking keyring... checking package integrity... loading package files... checking for file conflicts... checking available disk space... :: Processing package changes... upgrading bind... ldconfig: File /usr/lib/libzzipmmapped-0.so is empty, not checked. ldconfig: File /usr/lib/libzzipmmapped.so is empty, not checked. ldconfig: File /usr/lib/libtexluajit.so.2 is empty, not checked. ldconfig: File /usr/lib/libkpathsea.so is empty, not checked. ldconfig: File /usr/lib/libptexenc.so is empty, not checked. ldconfig: File /usr/lib/libffcall.so.0 is empty, not checked. ldconfig: File /usr/lib/libzzip.so is empty, not checked. ldconfig: File /usr/lib/libtrampoline.so is empty, not checked. ldconfig: File /usr/lib/libsynctex.so is empty, not checked. ldconfig: File /usr/lib/libzzip-0.so.10 is empty, not checked. ldconfig: File /usr/lib/libzzipfseeko-0.so.12 is empty, not checked. ldconfig: File /usr/lib/libffcall.so.0.1.0 is empty, not checked. ldconfig: File /usr/lib/libtrampoline.so.1.0.3 is empty, not checked. ldconfig: File /usr/lib/libpotrace.so.0 is empty, not checked. ldconfig: File /usr/lib/libzzipfseeko.so is empty, not checked. ldconfig: File /usr/lib/libptexenc.so.1 is empty, not checked. ldconfig: File /usr/lib/libtexlua53.so is empty, not checked. ldconfig: File /usr/lib/libzzip-0.so.11 is empty, not checked. ldconfig: File /usr/lib/libzzipfseeko-0.so.11 is empty, not checked. ldconfig: File /usr/lib/libzzipwrap-0.so.13.0.77 is empty, not checked. ldconfig: File /usr/lib/libzzipmmapped-0.so.10 is empty, not checked. ldconfig: File /usr/lib/libpaper.so.2.2.5 is empty, not checked. ldconfig: File /usr/lib/libtrampoline.so.1 is empty, not checked. ldconfig: File /usr/lib/libzzipfseeko-0.so.13 is empty, not checked. ldconfig: File /usr/lib/libzzipwrap.so is empty, not checked. ldconfig: File /usr/lib/libpaper.so is empty, not checked. ldconfig: File /usr/lib/libzzip-0.so.13 is empty, not checked. ldconfig: File /usr/lib/libcallback.so.1.0.4 is empty, not checked. ldconfig: File /usr/lib/libzzipmmapped-0.so.13.0.77 is empty, not checked. ldconfig: File /usr/lib/libkpathsea.so.6.4.0 is empty, not checked. ldconfig: File /usr/lib/libavcall.so is empty, not checked. ldconfig: File /usr/lib/libzzipfseeko-0.so.13.0.77 is empty, not checked. ldconfig: File /usr/lib/libavcall.so.1 is empty, not checked. ldconfig: File /usr/lib/libzzipmmapped-0.so.11 is empty, not checked. ldconfig: File /usr/lib/libzzip-0.so.12 is empty, not checked. ldconfig: File /usr/lib/libsynctex.so.2 is empty, not checked. ldconfig: File /usr/lib/libsigsegv.so.2.0.7 is empty, not checked. ldconfig: File /usr/lib/libptexenc.so.1.4.6 is empty, not checked. ldconfig: File /usr/lib/libzzipmmapped-0.so.13 is empty, not checked. ldconfig: File /usr/lib/libzzipfseeko-0.so is empty, not checked. ldconfig: File /usr/lib/libzzipwrap-0.so.13 is empty, not checked. ldconfig: File /usr/lib/libsigsegv.so is empty, not checked. ldconfig: File /usr/lib/libzzipfseeko-0.so.10 is empty, not checked. ldconfig: File /usr/lib/libpaper.so.2 is empty, not checked. ldconfig: File /usr/lib/libpotrace.so is empty, not checked. ldconfig: File /usr/lib/libkpathsea.so.6 is empty, not checked. ldconfig: File /usr/lib/libavcall.so.1.1.0 is empty, not checked. ldconfig: File /usr/lib/libtexluajit.so is empty, not checked. ldconfig: File /usr/lib/libzzip-0.so is empty, not checked. ldconfig: File /usr/lib/libzzipwrap-0.so is empty, not checked. ldconfig: File /usr/lib/libtexlua53.so.5.3.6 is empty, not checked. ldconfig: File /usr/lib/libzzip-0.so.13.0.77 is empty, not checked. ldconfig: File /usr/lib/libsigsegv.so.2 is empty, not checked. ldconfig: File /usr/lib/libcallback.so.1 is empty, not checked. ldconfig: File /usr/lib/libsynctex.so.2.0.0 is empty, not checked. ldconfig: File /usr/lib/libtexlua53.so.5 is empty, not checked. ldconfig: File /usr/lib/libtexluajit.so.2.1.0 is empty, not checked. ldconfig: File /usr/lib/libffcall.so is empty, not checked. ldconfig: File /usr/lib/libcallback.so is empty, not checked. ldconfig: File /usr/lib/libzzipmmapped-0.so.12 is empty, not checked. ldconfig: File /usr/lib/libpotrace.so.0.0.6 is empty, not checked. :: Running post-transaction hooks... (1/4) Creating system user accounts... (2/4) Reloading system manager configuration... (3/4) Creating temporary files... (4/4) Arming ConditionNeedsUpdate... What I cannot figure out is why all of the ldconfig errors on empty files. Is something broken and if so what should be done to fix it? -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

3 3

Plasma upgrade from 5 to 6
by Andy Pieters 25 Jul '24

25 Jul '24

Hi all I have finally gotten round to updating my rolling release installation after a long delay. One of the final cycles in this catch-up [1] pulled in an upgrade from Plasma 5 to Plasma 6 Some things stopped working for me after that and I want to share with you what and how I solved them. 1. Graphical environment doesn't start because video driver is not loaded (dkms) I have a GTX 750 and even though dkms does a successful compilation and installation, this driver no longer automatically loads during startup. There may be other, better solutions, but what I did is [I'm using sddm] is: systemctl edit --full sddm in the section [Service] add an entry ExecStartPre=/usr/bin/modprobe nvidia-drm save and quit then reboot 2. no RDP in krcd -> install freerdp2 3. Fish works in kwrite and kate, etc, but not in develop -> install kio5_extras [1] https://wiki.archlinux.org/title/Arch_Linux_Archive#How_to_restore_all_pack…

2 2

Re: Package RSS feed problems?
by David C. Rankin 22 Jul '24

22 Jul '24

> Arch Admins, > > The last package update notification I received was xdg-desktop-portal-kde > 6.1.3-1 x86_64 sent Fri, 19 Jul 2024 10:11:46 +0000 and arriving Fri, 19 Jul > 2024 05:16:15 -0500. > > Is there an issue with the RSS servers or did they change IP addresses > then? (which may have them blocked at the firewall) Disregard, Sorry for the noise. They started updating automagically again in Tbird? Go figure. -- David C. Rankin, J.D.,P.E.

1 0

Re: libassuan 3.0.1-1 pulled from testing after crashing pacman
by Genes Lists 22 Jul '24

22 Jul '24

On Mon, 2024-07-22 at 09:29 +0200, David Runge wrote: > Hi all, > ... > have to use an installation media or static pacman to get back to > 3.0.0-1. > ... > David > Hey David - no worries these kind of things happen on occasion and it was only in testing, where users of which should mostly know how to recover from an occasional issue cropping up. It does bring up a question and am interested how you think about it. While pretty rare, there certainly can be occasions where an official static pacman could be pretty helpful to have. Its fairly non-trivial to build a static pacman since we don't have archive libs readily available for the 38 packages it depends on (at least that I can see). I wonder given the build tooling if : a) providing static pacman package would be a possibility? or b) provding 'archive' lib packages might be doable e.g. glibc-archive, openssl-archive, gpgme-archive ... Both seem painful: - (a) means either do (b) first or build archive versions of all 38 shared libs as part of pacman build. The latter approach is one taken by the AUR package. - (b) means changing the PKGBUILD of quite a lot of packages - and if we go this route then should it be done for other lib packages as well? Pro: While it's rarely needed it could be very useful. i.e. Protect against a Low frequency but high impact risk. Con: - A lot of work - is it worthwhile doing? - Can always boot install media for non-remote systems or use AUR package - its a lot of work for very small gain. thank you for all the work you and other devs/package managers do to keep Arch "-The-" stellar distro! -- Gene

3 4

Package RSS feed problems?
by David C. Rankin 21 Jul '24

21 Jul '24

Arch Admins, The last package update notification I received was xdg-desktop-portal-kde 6.1.3-1 x86_64 sent Fri, 19 Jul 2024 10:11:46 +0000 and arriving Fri, 19 Jul 2024 05:16:15 -0500. Is there an issue with the RSS servers or did they change IP addresses then? (which may have them blocked at the firewall) -- David C. Rankin, J.D.,P.E.

1 0

Steam Accessibility
by Storm Dragon 16 Jul '24

16 Jul '24

Howdy, In Arch, Steam is completely inaccessible with Orca, nothing reads at all. It was fixed briefly last year, but broke again after about two weeks. I figured this was the company's doing, but I recently found out that it works on Void Linux. I have a couple of friends who run Void, and they can access it just fine with the --bigpicture flag. The weird thing is, as far as I know, it only works in Void, not any other distro. I know it's not working in Debian, Ubuntu, Slint, and Fedora. My question is, does anyone know what Void is doing different from literally everyone else to get this working, and is it something I can replicate in Arch? Just for the sake of completeness, I do have all the accessibility variables I know about enabled: # Accessibility variables export ACCESSIBILITY_ENABLED=1 export GTK_MODULES=gail:atk-bridge export GNOME_ACCESSIBILITY=1 export QT_ACCESSIBILITY=1 export QT_LINUX_ACCESSIBILITY_ALWAYS_ON=1 export SAL_USE_VCLPLUGIN=gtk3 I also have lib32-at-spi: multilib/lib32-at-spi2-core 2.52.0-1 (170.5 KiB 648.7 KiB) (Installed) Thanks, Storm -- ⛈🐲

1 0

Fwd: Resignation
by David C. Rankin 15 Jul '24

15 Jul '24

Florian, A sincere Thank You for your efforts. Arch is the better for it. Just checked and you beat me by 5 months. Original install date 2009-03-08.... Sad to see you go, but life does call. Good luck with what the future holds. -------- Forwarded Message -------- Subject: Resignation Date: Sun, 14 Jul 2024 21:14:27 +0200 From: Florian Pritz <bluewind(a)xinu.at> To: arch-dev-public(a)lists.archlinux.org Hi, Sadly I have no longer had the time necessary to properly handle master key holder and packager duties for a while now. I don't feel like it's fair to you guys and our users to keep this up any longer so I'm officially resigning now. Most pressing topics that come to mind for someone wanting to take over: * I hold a master key, so you'll need to find a new holder for that * perl 5.40 update * various bug reports on Gitlab for my packages * a few flagged packages Thanks for all the nice memories since "[2008-10-19 14:38] installed filesystem (2008.03-2)". While I will no longer be involved in Arch development, I'll still continue to use it and this nice, old install will also continue to live on. Hope to see you guys around :) Florian -- David C. Rankin, J.D.,P.E.

1 0

the archlinux torrent
by Jude DaShiell 03 Jul '24

03 Jul '24

Having downloaded the torrent and burned the iso to a dvd I verified the torrent using sha256sum but apparently that wasn't enough since the installation broke part of the way through which means I ought to have used the gpg verification that is available online. What is done with those asc files to verify a download? I used lftp with no options on the command line and maybe that was also a mistake on my part. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

3 18

How to start mplayer with radio (.pls) url over ssh and have it play?
by David C. Rankin 02 Jul '24

02 Jul '24

All, I know little about audio, but I'm trying to help my kids configure a radio stream. I normally use this media box via X desktop, but wanted to just play the stream via mplayer starting it over ssh -- that didn't work no matter what -ao I specify. However, if I open an x-term on the box from the desktop and enter the same url there - presto, the sound plays, and everything works. Since I normally use this box headless, how do I start mplayer over ssh and have the sound play on the remote box? Entering the following through the x-term from the desktop works just fine: mplayer -loop 0 -playlist http://playerservices.streamtheworld.com/pls/KDAQHD2.pls (it's classical) Is there a config somewhere where I can tell it to start mplayer the same from ssh as it does when started from the desktop? Following troubleshooting from the Sound Wiki, running 'pactl list sinks' over ssh while the desktop is playing the audio stream, I get: $ pactl list sinks Sink #1 State: RUNNING Name: alsa_output.pci-0000_00_1b.0.analog-stereo Description: Built-in Audio Analog Stereo Driver: module-alsa-card.c Sample Specification: s16le 2ch 44100Hz Channel Map: front-left,front-right Owner Module: 19 Mute: no Volume: front-left: 41944 / 64% / -11.63 dB, front-right: 41944 / 64% / -11.63 dB balance 0.00 Base Volume: 65536 / 100% / 0.00 dB Monitor Source: alsa_output.pci-0000_00_1b.0.analog-stereo.monitor Latency: 29816 usec, configured 31247 usec Flags: HARDWARE HW_MUTE_CTRL HW_VOLUME_CTRL DECIBEL_VOLUME LATENCY Properties: alsa.resolution_bits = "16" <snip> Can I use this information when starting mplayer over ssh to have it play sound through that boxes (the remotes) speakers? I've tried '-ao alsa' when starting over ssh, but still no sound. If I missed something in the wiki -- I missed it. Any help appreciated. -- David C. Rankin, J.D.,P.E.

3 3

openssh 9.8p1-1
by Genes Lists 02 Jul '24

02 Jul '24

The new openssh works just fine and this is just a little note to those of us with remote machines. After updating both client and remote machine(s) its important to restart sshd. If you don't restart sshd, and then attempt to ssh into the remote, it may fail with: kex_exchange_identification: read: Connection reset by peer -- Gene

5 5

JDK/JRE and older Java versions
by Peter Nabbefeld 01 Jul '24

01 Jul '24

Hello, as a Java developer, I sometimes need to do compatibility checking using older versions, often using JRE, while I need a JDK for development. When I tried to update arch linux now, I found I cannot start any update because the update is blocked by setting JRE and JDK as conflicting packages. I tried to only install JDK 21, but the update is still being blocked because of my older versions of the JRE. Why do You block any software installation? I don't like the idea to enforce me to use any specific software, or to remove any specific one. Is there any possibility to remove the lock-in? Kind regards, Peter

5 12

git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?
by David C. Rankin 21 Jun '24

21 Jun '24

All, After recent git update, read only repos hosted on a local Apache server could no longer pull over https. (gitweb remained fine) Repositories closed read/write over ssh were fine. On the server the repositories under /srv/git were owned david:david (me). However, after the git change, git refused to serve over https unless the directories under /srv/git were owned by http. Fine, change made - but now repos cloned read/write over ssh fail because the directory under /srv/git is no longer owned by me. How do you make git repositories hosted on my local server allow clone/pull over https AND allow me to still close read/write over ssh? Catch 22, unless /srv/git/xxx.git is http:http, https fails unless /srv/git/xxx.git is david:http, ssh fails Anybody else caught be this? The server is configured per https://wiki.archlinux.org/title/Git_server and the scm-git.com links. The "Note: Make sure that Apache can read and write to your repositories." seems incomplete. It's not just "read and write" it is "must own" for https and "can't own" for ssh? How to solve? -- David C. Rankin, J.D.,P.E.

8 14

Request to cherry-pick commit fixing RMB issue for Non-Removable Media in Linux Kernel 6.10-rc4
by J. Gerhards 20 Jun '24

20 Jun '24

Hi all, as of linux v6.9.*, a regression has been introduced where the removable media bit (RMB) was set for all devices that are hot-pluggable. The bit does not accurately indicate that a device is removable. Therefore, this issue has been addressed and fixed in commit `a6a75e`[0] which was merged under the tag 6.10-rc4[1]. Is it possible to cherry-pick `a6a75e` and release an update prior to the full 6.10 release? Thank you for your consideration. Best regards J. Gerhards [0] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… [1] https://lore.kernel.org/all/171856227442.1143.13572753599648338171.pr-track…

2 4

can't generate key pair
by Jude DaShiell 18 Jun '24

18 Jun '24

gpg2 --full-gen-key breaks shortly after pass key is entered twice generating a Timeout error. I tried this with complex and simple keys and gpg2 times out in both cases. Would a configuration change help here? -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

5 5

linux-6.9.4 or firmware broke monitor type/size detection for Dell box?
by David C. Rankin 15 Jun '24

15 Jun '24

Devs, Tonight's update to linux-6.9.4 and the firmware seems to have broken the monitor type/size detection on Arch. I have a older Dell box I use for a media center connected to a Samsung 59" TV. Arch has always properly detected it and configured itself for full HD resolution. After update tonight, it no longer does that. Instead both the console (I use startx) and fluxbox (or any other desktop) boots and starts at 800x600 or so -- which is quite unusable. Has something changed in the kernel image generation or in the new firmware that has caused this? I'm not sure what the dmesg output was before, it always just worked, but now I get: [ 1.574525] i915 0000:00:02.0: vgaarb: deactivate vga console [ 1.600709] tsc: Refined TSC clocksource calibration: 3324.978 MHz [ 1.600721] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2fed77ea564, max_idle_ns: 440795278175 ns [ 1.600739] clocksource: Switched to clocksource tsc [ 1.608956] sr 3:0:0:0: [sr0] scsi3-mmc drive: 48x/48x writer dvd-ram cd/rw xa/form2 cdda tray [ 1.608963] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 1.609861] i915 0000:00:02.0: [drm] Initialized overlay support. [ 1.610256] [drm] Initialized i915 1.6.0 20230929 for 0000:00:02.0 on minor 1 [ 1.630543] fbcon: i915drmfb (fb0) is primary device [ 1.630545] fbcon: Deferring console take-over [ 1.630547] i915 0000:00:02.0: [drm] fb0: i915drmfb frame buffer device This box is grub2/MBR, so if something changed there, that may also be the issue. Anybody have an idea what changed? -- David C. Rankin, J.D.,P.E.

7 12

Nextclount 29.0.2 update - /etc/webapps/nextcloud/.htaccess.pacnew missing Arch webapp config?
by David C. Rankin 07 Jun '24

07 Jun '24

Devs, Nextcloud 29.0.2 update was released today and the /etc/webapps/.htaccess.pacnew config file is missing the entire config for the Archlinux webapp install. Applying the .htaccess.pacnew results in not being able to access the server with a forbidden error: [Thu Jun 06 20:58:10.130910 2024] [autoindex:error] [pid 17794] [client 192.168.6.104:52498] AH01276: Cannot serve directory /usr/share/webapps/nextcloud/apps/dashboard/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive The upper part is the same, but the lines from the bottom are removed: --- .htaccess.20240523 2024-06-06 20:55:04.132401657 -0500 +++ .htaccess.20240606 2024-06-06 08:57:25.000000000 -0500 @@ -108,29 +108,3 @@ AddDefaultCharset utf-8 Options -Indexes -#### DO NOT CHANGE ANYTHING ABOVE THIS LINE #### - -ErrorDocument 403 /nextcloud/index.php/error/403 -ErrorDocument 404 /nextcloud/index.php/error/404 -<IfModule mod_rewrite.c> - Options -MultiViews - RewriteRule ^core/js/oc.js$ index.php [PT,E=PATH_INFO:$1] - RewriteRule ^core/preview.png$ index.php [PT,E=PATH_INFO:$1] - RewriteCond %{REQUEST_FILENAME} !\.(css|js|mjs|svg|gif|png|html|ttf|woff2?|ico|jpg|jpeg|map|webm|mp4|mp3|ogg|wav|flac|wasm|tflite)$ - RewriteCond %{REQUEST_FILENAME} !/core/ajax/update\.php - RewriteCond %{REQUEST_FILENAME} !/core/img/(favicon\.ico|manifest\.json)$ - RewriteCond %{REQUEST_FILENAME} !/(cron|public|remote|status)\.php - RewriteCond %{REQUEST_FILENAME} !/ocs/v(1|2)\.php - RewriteCond %{REQUEST_FILENAME} !/robots\.txt - RewriteCond %{REQUEST_FILENAME} !/(ocs-provider|updater)/ - RewriteCond %{REQUEST_URI} !^/\.well-known/(acme-challenge|pki-validation)/.* - RewriteCond %{REQUEST_FILENAME} !/richdocumentscode(_arm64)?/proxy.php$ - RewriteRule . index.php [PT,E=PATH_INFO:$1] - RewriteBase /nextcloud - <IfModule mod_env.c> - SetEnv front_controller_active true - <IfModule mod_dir.c> - DirectorySlash off - </IfModule> - </IfModule> -</IfModule> Restoring the .htaccess from the 5/23 update to 29.0.1 fixes the issue. Is this intended and are we supposed to reconfigure for this point release in some other way? https://wiki.archlinux.org/title/Nextcloud is silent and there was no install notice during the pacman update? If I'm supposed to reconfigure something and put the webapp config for Arch somewhere else, just let me know where. The nextcould forum isn't useful for the webapp install approach. -- David C. Rankin, J.D.,P.E.

2 3

virtualbox 7.0.16 and Windows 11 guest
by Ralf Mardorf 05 Jun '24

05 Jun '24

Hi, today I removed virtualbox6.1-bin 6.1.50 and installed virtualbox 7.0.16, because 6.1.50 doesn't work anymore [1] and I got rid of fixing virtualbox 6+ again and again. Doing a first short test a Windows 10 guest seems to run, but a Windows 11 guest seems to cause issues, at least a shutdown of the Windows 11 guest with _not_ updated guest additions didn't finish and locked the host or rather it was possible to push Ctrl+Alt+F2 and to run pkill VirtualBoxVM to get back a responding Arch Linux host. For other reasons I'm restoring another backup of Windows 11, which will take more than an hour, since the the vdi's size is > 700 GiB, so in the meantime I want to gather information. I will take a look at the settings mentioned by the Arch Wiki [2], [3]. Are there more settings I can check? It's an Intel CPU wit integrated GPU. • rocketmouse@archlinux ~ $ hwinfo --cpu | sort -u | grep Model Model: 6.191.5 "13th Gen Intel(R) Core(TM) i3-13100" • rocketmouse@archlinux ~ $ hwinfo --memory | grep Size Memory Size: 32 GB Regards, Ralf [1] "Could you still start Windows guests with virtualbox6.1-bin 6.1.50-1 or do you also experience guru meditations? I'm currently trying extra/virtualbox 7.0.16-1, which gets rid of the gurus, but so far a Windows 11 guest is not doing well." - https://aur.archlinux.org/pkgbase/virtualbox6.1-bin#comment-968033 [2] "4.11.1 Creating the virtual machine A VirtualBox virtual machine must be manually created. As of now do not add any storage device any disk to the virtual machine, it will be done manually later. Configure the virtual machine with the following settings (settings panel can be opened by clicking the "Settings" button in the main toolbar): View: System: Tab: Motherboard: mark Enable I/O APIC; mark Enable EFI; mark Hardware Clock in UTC Time if is your case. Tab: Processor: mark Enable PAE/NX; mark Enable Nested VT-x/AMD-V; Tab: Acceleration: Choose the paravirtualization interface Hyper-V from the drop down menu; mark Enable Nested Paging. Optionally you can enable also the following settings: View: Display Tab: Screen mark Enable 3D Acceleration. Note that it could cause glitches. Note: The Hyper-V setting is not required in order for the system to operate correctly, but it may help avoid licensing issues." - https://wiki.archlinux.org/title/VirtualBox#Creating_the_virtual_machine [3] "5.22 Random freezing in guests with Intel GPU With Intel CPU and graphics, allocating more processors for the guest can lower render performance, thus cause random freezing. Allocating less processors can help." - https://wiki.archlinux.org/title/VirtualBox#Random_freezing_in_guests_with_…

3 8

qemu, aarch64, binfmt: can the execution speed be improved?
by SET 04 Jun '24

04 Jun '24

Hello, I followed the instructions at https://nerdstuff.org/posts/ 2020/2020-003_simplest_way_to_create_an_arm_chroot/ and successfully chroot'ed in the generic aarch64 image available at https://archlinuxarm.org/platforms/armv8/generic on a host running x86_64 arch. I installed qemu-user-static and qemu-user-static-binfmt, restarted systemd- binfmt as advised and the chroot worked using arch-chroot. The slow execution speed has been surprising, I would say roughly 10 times slower than on native x86_64 (building a library, 53 mins instead of < 5). I understand that there's an overhead translation instructions for another architecture. qemu is always advertised as a *fast* emulator, so I'm wondering if I'm missing something. I wish to know if there's some way to speed up execution time in the chroot, some magic configuration to apply. That's my first attempt in this direction. Thank you for any input.

3 4

gitlab OTP - Invalid authenticator code. (is something wrong?)
by David C. Rankin 31 May '24

31 May '24

Devs, Today my gitlab.archlinux.org login (after providing username and password) prompts for the OTP code and always responds "Invalid authenticator code." I've not had any problems for months. Has there be a change or am I just lucky? -- David C. Rankin, J.D.,P.E.

4 5

jellyfin-server and jellyfin-web packages seem unmaintained
by Florian Wetzel 27 May '24

27 May '24

Hi there, I am not sure how to handle this problem, but I know that I am not the only person that has this problem. Currently, the packages /jellyfin-server/ and /jellyfin-web /are one stable release (10.8.13 -> 10.9.0) and multiple bugfix versions (latest version is 10.9.3) behind. While 10.9.0 was released "just" two weeks ago, this still brings some new features that might be required by other packages. What would be the appropriate action if the current maintainer does not release a update soon? Regards, Florian

3 4

Nextcloud 29 update, web server cannot resolve /.well-known/webfinger
by David C. Rankin 20 May '24

20 May '24

The following new error/warning is received in the Admin settings after upgrade: Your web server is not properly set up to resolve `.well-known` URLs, failed on: `/.well-known/webfinger` For more details see the documentation ↗. The documentation suggests adding rewrite rules, e.g. <IfModule mod_rewrite.c> RewriteEngine on RewriteRule ^\.well-known/carddav /nextcloud/remote.php/dav [R=301,L] RewriteRule ^\.well-known/caldav /nextcloud/remote.php/dav [R=301,L] RewriteRule ^\.well-known/webfinger /nextcloud/index.php/.well-known/webfinger [R=301,L] RewriteRule ^\.well-known/nodeinfo /nextcloud/index.php/.well-known/nodeinfo [R=301,L] </IfModule> https://docs.nextcloud.com/server/29/admin_manual/issues/general_troublesho… However, adding the settings to httpd-local.conf and reloading makes no difference. Note: caldav and carddav are handled in /etc/webapps/nextcloud/.htaccess Why isn't webfinger handled there? This has to be set by the package as modifying the file manually triggers a hash violation on the modified file. (that can be worked around, but it's a hack) Is this something that needs to be raised as a bug? -- David C. Rankin, J.D.,P.E.

1 0

ipset v7.21 update - package stop / start exits with failure - but ipset is still running?
by David C. Rankin 20 May '24

20 May '24

Devs, ipset was updated after a recent minor bug with save was fixed. The updated package was installed today. Restarting fails with an error code due to: May 16 14:14:31 valkyrie ipset[62200]: ipset v7.21: Set cannot be destroyed: it is in use by a kernel component May 16 14:14:31 valkyrie systemd[1]: ipset.service: Control process exited, code=exited, status=1/FAILURE The start process then fails: May 16 14:14:31 valkyrie ipset[62203]: ipset v7.21: Error in line 1: Set cannot be created: set with the same name already exists May 16 14:14:31 valkyrie systemd[1]: ipset.service: Main process exited, code=exited, status=1/FAILURE The result is fail2ban is left shutdown after the attempted stop of ipset and its failure to start. Is this a new bug, or is something else wrong? -- David C. Rankin, J.D.,P.E.

2 2

1) No documentation for pacman --ask option 2) pacman gitlab page refers to a 404
by u34＠net9.cf 07 May '24

07 May '24

1) Any point opening a bug about pacman --ask option not documented? [https://bbs.archlinux.org/viewtopic.php?id=35901](https://bbs.archlinux.org… is from 2007. 2) Quoting https://gitlab.archlinux.org/pacman/pacman Please also check open issues in our [historical bug tracker](https://bugs.archlinux.org/index.php?project=3) before opening a new issue here. Shouldn't the url point to the new archive? -- u34

2 2

hibernation stopped working
by Frank 04 May '24

04 May '24

Good evening, I have an up-to-date (daily updates) Arch system running Hyprland and since yesterday or the day before yesterday hibernation stopped working. Kernel version is 6.8.8-arch1-1 I have the following line in my hypridle.conf: listener { timeout = 1800 # 30min on-timeout = systemctl suspend-then-hibernate # suspend pc } This used to work flawlessly. When system is hibernating now it's crashing. This is the journal output: 9:27:11 systemd: Stopped target Bluetooth Support. 09:27:11 kernel: PM: hibernation: hibernation entry 09:27:11 systemd-sleep: Performing sleep operation 'hibernate'... 09:27:11 bluetoothd: Battery Provider Manager destroyed 09:27:11 systemd-sleep: System returned from sleep operation 'suspend- then-hibernate'. 09:27:11 bluetoothd: Endpoint unregistered: sender=:1.41 path=/MediaEndpoint/A2DPSink/aptx_hd 09:27:11 dbus-broker: A security policy denied :1.5 to send method call /midi/profile:org.blue z.GattProfile1.Release to :1.42. 09:27:11 bluetoothd: Endpoint unregistered: sender=:1.41 path=/MediaEndpoint/A2DPSource/ldac 09:27:11 kernel: PM: suspend exit 09:27:11 kernel: Bluetooth: hci0: Firmware Version: 132-3.24 09:27:11 kernel: done. 09:27:11 kernel: Bluetooth: hci0: Bootloader revision 0.3 build 0 week 24 2017 09:27:11 kernel: Restarting tasks ... 09:27:11 kernel: OOM killer enabled. 09:27:11 kernel: amdgpu 0000:04:00.0: amdgpu: ring jpeg_dec uses VM inv eng 6 on hub 8 09:27:11 kernel: [drm] JPEG decode initialized successfully. 09:27:11 kernel: amdgpu 0000:04:00.0: amdgpu: SMU is resumed successfully! 09:27:11 kernel: [drm] reserve 0x400000 from 0xf41f800000 for PSP TMR 09:27:11 kernel: usb 1-4.4: reset full-speed USB device number 5 using xhci_hcd 09:27:11 kernel: ata2: SATA link down (SStatus 0 SControl 300) 09:27:11 kernel: ata1: SATA link down (SStatus 0 SControl 300) 09:27:11 kernel: nvme nvme0: 12/0/0 default/read/poll queues 09:27:11 kernel: [drm] PSP is resuming... 09:27:11 kernel: ACPI: EC: event unblocked 09:27:11 kernel: CPU15 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 15 APIC 0xf 09:27:11 kernel: CPU14 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 14 APIC 0xe 09:27:11 kernel: CPU13 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 13 APIC 0xd 09:27:11 kernel: CPU12 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 12 APIC 0xc 09:27:11 kernel: CPU11 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 11 APIC 0xb 09:27:11 kernel: CPU10 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 10 APIC 0xa 09:27:11 kernel: CPU9 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 9 APIC 0x9 9:27:11 kernel: CPU9 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 9 APIC 0x9 09:27:11 kernel: CPU8 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 8 APIC 0x8 09:27:11 kernel: CPU7 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 7 APIC 0x7 09:27:11 kernel: CPU6 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 6 APIC 0x6 09:27:11 kernel: CPU5 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 5 APIC 0x5 09:27:11 kernel: CPU4 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 4 APIC 0x4 09:27:11 kernel: CPU3 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 3 APIC 0x3 09:27:11 kernel: CPU2 is up 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 2 APIC 0x2 09:27:11 kernel: CPU1 is up 09:27:11 kernel: Spectre V2 : Update user space SMT mitigation: STIBP always-on 09:27:11 kernel: ACPI: FW issue: working around C-state latencies out of order 09:27:11 kernel: smpboot: Booting Node 0 Processor 1 APIC 0x1 09:27:11 kernel: Enabling non-boot CPUs ... 09:27:11 kernel: LVT offset 0 assigned for vector 0x400 09:27:11 kernel: AMD-Vi: Virtual APIC enabled 09:27:11 kernel: ACPI: PM: Restoring platform NVS memory 09:27:11 kernel: smpboot: CPU 15 is now offline 09:27:11 kernel: Spectre V2 : Update user space SMT mitigation: STIBP off 09:27:11 kernel: smpboot: CPU 14 is now offline 09:27:11 kernel: Disabling non-boot CPUs ... 09:27:11 kernel: ACPI: PM: Saving platform NVS memory 09:27:11 kernel: [drm] psp gfx command UNLOAD_TA(0x2) failed and response status is (0x117) 09:27:11 kernel: printk: Suspending console(s) (use no_console_suspend to debug) 09:27:11 kernel: Freezing remaining freezable tasks completed (elapsed 0.000 seconds) 09:27:11 kernel: OOM killer disabled. 09:27:11 kernel: Freezing user space processes completed (elapsed 0.001 seconds) 08:57:09 kernel: Filesystems sync: 0.006 seconds 08:57:09 kernel: PM: suspend entry (deep) 08:57:09 systemd-sleep: Performing sleep operation 'suspend'... 08:57:09 systemd: Starting System Suspend then Hibernate... Any idea what's going wrong here? THX Frank

3 5

Why is apt in the Repo?
by Chime Hart 03 May '24

03 May '24

Hi All: I was sure surprised to be able to install apt, however, in /etc/apt/sources.list is empty. The man-page only seems to make references to Debian versions. So, inquiring minds wanna know. Right this second I don't remember which I used, pacman or yay? Thanks so much in advance Chime

2 1

re/fwd: Archlinux Newsfeeds Broken -- Or am I just lucky?
by David C. Rankin 02 May '24

02 May '24

> All, > > The Arch newsfeeds for Arch Linux Recent news and Arch Linux Recent > packages (e.g. https://archlinux.org/feeds/packages/) are no longer > delivering to me. Is there are problem with the news feeds or is there > something that would just stop Thunderbird from getting them? > > I haven't changed anything and clicking on the "Validate" in the account > config in tbird brings up the page showing they are valid, but I am not > getting anything anymore? > > Is it just me? I check the archlinux.org site, but found no notices? Feed is working fine. It looks like it was just me. My feed was out from 4/29/24 at 14:42 (last message from feed) until 5/1/24 at 1:34. (which missed the 6.8.8 kernel going into core I was waiting on) I'll chock this up to a CSOK issue. I've got no other explanation. ** CSOK (cat stepping on keyboard...) -- David C. Rankin, J.D.,P.E.

1 0

Issue related to the file system hierarchy for operating systems using the systemd service manager
by Ralf Mardorf 01 May '24

01 May '24

Hi, when running extra/audacity from command line it runs into issues, but doesn't provide any output and it seems not to start. When running extra/tenacity from command line it shows that there is an issue with duplicated plugins. It ignores the duplicated plugins and after a while it does start. The culprit is a link. $ /bin/ls -ld /usr/lib{,64} drwxr-xr-x 460 root root 524288 May 1 17:37 /usr/lib lrwxrwxrwx 1 root root 3 Apr 7 20:02 /usr/lib64 -> lib "1.5 Does Arch follow the Linux Foundation's Filesystem Hierarchy Standard (FHS)? Arch Linux follows the file system hierarchy for operating systems using the systemd service manager. See file-hierarchy(7) for an explanation of each directory along with their designations. In particular, /bin, /sbin, and /usr/sbin are symbolic links to /usr/bin, and /lib and /lib64 are symbolic links to /usr/lib." - https://wiki.archlinux.org/title/Frequently_asked_questions#Does_Arch_follo…'s_Filesystem_Hierarchy_Standard_(FHS)? What should I do? Report a bug against a package or something else? Regards, Ralf

2 2

Archlinux Newsfeeds Broken -- Or am I just lucky?
by David C. Rankin 01 May '24

01 May '24

All, The Arch newsfeeds for Arch Linux Recent news and Arch Linux Recent packages (e.g. https://archlinux.org/feeds/packages/) are no longer delivering to me. Is there are problem with the news feeds or is there something that would just stop Thunderbird from getting them? I haven't changed anything and clicking on the "Validate" in the account config in tbird brings up the page showing they are valid, but I am not getting anything anymore? Is it just me? I check the archlinux.org site, but found no notices? -- David C. Rankin, J.D.,P.E.

1 0

What's with the kernels that seem to stay stuck in core-testing longer than they used to?
by David C. Rankin 27 Apr '24

27 Apr '24

Devs, I've noticed kernels stay stuck in core-testing longer than they used to. In the past (unless there was some minor version change), they usually stayed in testing a day or less. The past couple have lingered nearly a week and linux 6.8.7.arch1-2 x86_64 has been there a few days? That's great to ensure there are no issue with other packages that depend on building drivers from the kernel, but does raise the question for the curios -- "What's up?" I ask for scheduling purposes. I monitor the newsfeeds from the package repos and when I see a new kernel coming, I try and set aside a convenient time for the update/reboot. Past few kernels, I've done that only to find - they are still in testing. Not a complaint, just a curiosity. -- David C. Rankin, J.D.,P.E.

3 5

Building Rust kernel modules - target.json missing
by L. Rose 23 Apr '24

23 Apr '24

Hello everyone, I'm trying to build the example Rust kernel modules from kernel source [1] on Arch Linux. I use a simple Makefile to build them out of tree: obj-m += rust_minimal.o all: make -C /lib/modules/$(shell uname -r)/build M=$(PWD) modules However, the build can't find some Rust metadata: make -C /lib/modules/6.8.7-arch1-1/build M=/home/lukas/Downloads/linux-6.8.7-arch1/samples/rust modules make[1]: Entering directory '/usr/lib/modules/6.8.7-arch1-1/build' RUSTC [M] /home/lukas/Downloads/linux-6.8.7-arch1/samples/rust/rust_minimal.o error: target file "./scripts/target.json" does not exist Indeed, there is no target.json in /lib/modules/$(uname -r)/build/scripts/, so I thought, maybe I need to use a special kernel with Rust support. But building linux-rust from the AUR fails with the same error message: Installing Rust files... install: cannot stat 'scripts/target.json': No such file or directory ==> ERROR: A failure occurred in package_linux-rust-headers(). Aborting... And even the default kernel is passing the Linux kernel Rust support check script as suggested in the kernel docs [2]: lukas@Lukas-AMD:rust$ make -C /lib/modules/$(uname -r)/build rustavailable make: Entering directory '/usr/lib/modules/6.8.7-arch1-1/build' Rust is available! make: Leaving directory '/usr/lib/modules/6.8.7-arch1-1/build' So what am I doing wrong? Is the Arch Linux kernel currently missing Rust metadata required for Rust support, like target.json? Or am I missing some important prerequisites here? Any suggestions welcome! Thanks, lukaro [1] https://github.com/Rust-for-Linux/linux/tree/rust-next/samples/rust [2] https://docs.kernel.org/6.8/rust/quick-start.html

1 0

PKGBUILD: nodejs
by Pocket 17 Apr '24

17 Apr '24

I am trying to build nodejs in a chroot using pkgctl repo clone --protocol=https nodejs pushd nodejs makechrootpkg -c -u -r "$CHROOT" -- --skippgpcheck popd It fails at this point ==> Entering fakeroot environment... chmod: cannot access '/startdir/pkg': No such file or directory I don't have startdir defined in the makepkg.conf file nor have I defined it anywhere Why is this failing? -- Hindi madali ang maging ako

3 3

building plasma-wayland-protocols
by Pocket 13 Apr '24

13 Apr '24

Trying to build plasma-wayland-protocols This is the error I am getting What executable is it looking for? I have built the entire qt5/qt6 stack except for qt5-ukui-platformtheme plasma-wayland-protocols is a dependency of qt5-ukui-platformtheme So I am stuck here Can anyone shed light on this issue? ==> Starting build()... -- The C compiler identification is GNU 12.1.0 -- The CXX compiler identification is GNU 12.1.0 -- Detecting C compiler ABI info -- Detecting C compiler ABI info - done -- Check for working C compiler: /usr/bin/cc - skipped -- Detecting C compile features -- Detecting C compile features - done -- Detecting CXX compiler ABI info -- Detecting CXX compiler ABI info - done -- Check for working CXX compiler: /usr/bin/c++ - skipped -- Detecting CXX compile features -- Detecting CXX compile features - done -- -- No executable found. Can't check QT_INSTALL_PREFIX -- Installing in the same prefix as Qt, adopting their path scheme. -- No executable found. Can't check QT_INSTALL_PREFIX CMake Error at /usr/share/ECM/modules/ECMQueryQt.cmake:84 (message): No executable found. Can't check QT_INSTALL_PLUGINS as required Call Stack (most recent call first): /usr/share/ECM/kde-modules/KDEInstallDirs5.cmake:255 (ecm_query_qt) /usr/share/ECM/kde-modules/KDEInstallDirs.cmake:15 (include) CMakeLists.txt:17 (include) -- Configuring incomplete, errors occurred! ==> ERROR: A failure occurred in build(). -- Hindi madali ang maging ako

1 0

pam 1.6.1-2 breaks sudo password
by Frederic Bezies 13 Apr '24

13 Apr '24

Hello. I noticed that pam 1.6.1-2 breaks sudo. Every time I tried to enter my password with a sudo command, it tells me my password is incorrect. Of course, it is not. The "fix" was to downgrade to pam 1.6.1-1. Hope it helps! -- Frederic Bezies fredbezies(a)gmail.com Blog: https://fredericbezies-ep.fr/blog/

9 13

Re: [arch-announce] Increasing the default vm.max_map_count value
by Genes Lists 12 Apr '24

12 Apr '24

On Sun, 2024-04-07 at 18:12 +0000, Arch Linux: Recent news updates: Robin Candau wrote: > The [vm.max_map_count][1] paramater will be increased from the > default `65530` value to `1048576`. > > This change should help address performance, crash or start-up issues > for a number of memory intensive applications, Performance improvement is unlikely but could allow something to run that otherwise would not. The lkml comment [1] is worth a read and includes : "To be clear, what you are doing here is akin to adding more memory to your system when there is a memory leak. This is not the solution you should be pushing. Ironically, this is using more memory and performing worse than it should. At best, the limit increase is a workaround for buggy programs." As Robin said, setting the max higher is probably benign - and only impacts a system running the problematic software (games). Nonetheless, it is very simple to change it to whatever value you want with your own prefs dropped into /etc/sysctl.d/xxx.conf gene [1] https://lore.kernel.org/lkml/566168554.272637693.1710968734203.Jav aMail.root@zimbra54- e10.priv.proxad.net/T/#m1905a48f415bc6e8069a8fe53dec44bc311571f2 -- Gene

1 0

PAM 1.6 breaks limits.conf parsing
by Simone Baratta 12 Apr '24

12 Apr '24

Howdy, Arch community! Today Ardour warned me that I had a ulimit enforced for locked memory, and indeed I was surprised to find that `ulimit -l` reported 8192 for my user (which I configured to `unlimited` a long time ago). After a bit of investigation, it turned out that this is a bug introduced by PAM 1.6, which fails to read my limits.conf file due to the extra whitespace separating entries: ``` @audio - memlock unlimited ``` This makes pam_limits.so fail with the following: ``` pam_limits(login:session): wrong limit value ' unlimited' for limit type '-' ``` Looks like this issue was introduced with [1], and indeed I can confirm that it's fixed by [2] which references the first commit. Is there any chance we can get a 1.6.0-5 update with this patch in? This version is already in core, and it's a very subtle issue which is likely to be unnoticed by many but come with a lot of (possibly security-relevant) side effects. [1] https://github.com/linux-pam/linux-pam/commit/eec4358a49dc0d6d699532965f453… [2] https://github.com/linux-pam/linux-pam/commit/9228077d762fc94ebc8d9fb4edfe9… Thanks! -- Simone

2 2

Building qt-5 packages from PKGBUILD
by Pocket 12 Apr '24

12 Apr '24

I have a project where I am building arch packages for raspberry pi's 4/5. Building the base and devtools with all there dependencies I have 2477 completed with some packages being complete failures. In the qt5-* PKGBUILD most fail due to the wrong directory For example in qt5-tools: Build function qmake ../${_pkgfqn} CONFIG+=fat-static-lto should be qmake ../kde-${_pkgfqn} CONFIG+=fat-static-lto ^^^^ and in the package function cd ../${_pkgfqn} should be cd ../kde-${_pkgfqn} ^^^^ It appears that many of these packages that have this issue and I have not found the all as I am just being to build these. -- Hindi madali ang maging ako

2 1

An Intro from A Debian User
by Chime Hart 10 Apr '24

10 Apr '24

Well, 2nd try, as I must have posted to the subscription address instead. I am still running Debian SID on my main machine with a screen-reader, Speakup, as I am totally blind. Meanwhile, I wanted to try a newer screen-reader, called Fenrir on a laptop. So, we switched over to Arch. While at times I find the 2 package managers confusing, I like an aspect of a much newer kernel. An issue, I cannot find a smaller font which will provide many more lines. So far only 67, but when I was in Debian with this same laptop, I had 135. Can any1 please suggest a font which will do the trick? Storm, who maintains Fenrir says I would need a font which supports utf8, so Fenrir will read. I am having glowing support from Storm as well as Didier, an author of Slint, another accessable distro. Thanks so much in advance Chime

8 14

ipset enabled fails to restore /etc/ipset.conf
by David C. Rankin 10 Apr '24

10 Apr '24

All, I've setup a blocklist (hash:net) a whitelist (hash:ip) and a whitelistnet (hash:net) with ipset. It works quite well added to the stateful firewall. However ipset restore fails: 18:02 valkyrie:~> scs ipset × ipset.service - Loading IP Sets Loaded: loaded (/usr/lib/systemd/system/ipset.service; enabled; preset: disabled) Active: failed (Result: exit-code) since Wed 2024-04-10 17:06:05 CDT; 56min ago Process: 1399 ExecStart=/usr/bin/ipset -f /etc/ipset.conf restore (code=exited, status=2) Main PID: 1399 (code=exited, status=2) CPU: 3ms Apr 10 17:06:05 valkyrie systemd[1]: Starting Loading IP Sets... Apr 10 17:06:05 valkyrie ipset[1399]: ipset v7.20: No command specified: unknown argument Name: Apr 10 17:06:05 valkyrie ipset[1399]: Try `ipset help' for more information. Apr 10 17:06:05 valkyrie systemd[1]: ipset.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Apr 10 17:06:05 valkyrie systemd[1]: ipset.service: Failed with result 'exit-code'. Apr 10 17:06:05 valkyrie systemd[1]: Failed to start Loading IP Sets. The sets cannot manually be restored with ipset restore (or ipset restore -file ipset.conf). It results in the same error: # ipset restore <ipset.conf ipset v7.20: No command specified: unknown argument Name: Try `ipset help' for more information. As does: # ipset restore -f ipset.conf ipset v7.20: No command specified: unknown argument Name: Try `ipset help' for more information. The content of the ipset save > ipset.conf file is the same as ipset list, and looks fine, e.g. # cat /etc/ipset.conf Name: blocklist Type: hash:net Revision: 7 Header: family inet hashsize 1024 maxelem 65536 bucketsize 12 initval 0xf3661058 Size in memory: 8856 References: 0 Number of entries: 194 Members: 167.94.138.0/24 199.45.154.0/23 43.130.0.0/18 43.129.192.0/18 43.157.32.0/24 <snip> Name: whitelist Type: hash:ip Revision: 6 Header: family inet hashsize 1024 maxelem 65536 bucketsize 12 initval 0xfa0e1f24 Size in memory: 1816 References: 0 Number of entries: 42 Members: 212.187.231.66 93.93.130.214 151.101.129.91 91.193.113.65 87.238.57.227 93.93.130.133 <snip> Name: whitelistnet Type: hash:net Revision: 7 Header: family inet hashsize 1024 maxelem 65536 bucketsize 12 initval 0xc9e0aa3d Size in memory: 504 References: 0 Number of entries: 1 Members: 151.101.129.0/24 The bug mentioned in the wiki https://wiki.archlinux.org/title/Ipset was not hit. Even though ipset failed to load the sets, iptables started normally. After manually re-creating the tables and restoring the iptables rules, iptables is again using the sets: # iptables -nvL --line-numbers Chain INPUT (policy DROP 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 match-set whitelistnet src 2 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 match-set whitelist src 3 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 match-set blocklist src 4 0 0 f2b-dovecot 6 -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 110,995,143,993,587,465,4190 <snip> I've followed the wiki and the man-page (and help) command to restore the files manually, but nothing seems to work. Any ideas what is going on? I'm brand new to ipset, so I don't have much experience to draw from. Anybody else seeing this or see a reason ipset isn't being restored on startup by ipset.service? -- David C. Rankin, J.D.,P.E.

1 0

Changing of archive packages to git tags
by Aaron Liu 10 Apr '24

10 Apr '24

Ey, Recently, a bunch of packages such as cowsay have switched to pulling from a git tag away from downloading from the /archive/ path of GitHub. Since downloading GitHub's archives are guaranteed to have the exact same contents as pulling from the tags, with the added benefit of not pulling the .git folder, is there any benefit to this? To my knowledge, the problematic xz tarballs were under the /release/ path as uploaded artifacts, while the /archive/ download remained clean. Aaron

2 1

Graphical session inside systemd-nspawn container
by FirstName LastName 09 Apr '24

09 Apr '24

Hello, I am trying to run X from within a systemd-nspawn container - this is something I had set up and was running successfully about three years ago, but something seems to have changed in the meantime and I am not able to recreate this. I created the container and installed X related packages following the wiki article, and was able to boot into my container and create an unprivileged user. The script I am using to boot is (modified from my container of three years ago): xhost +local: sudo systemd-nspawn -b -D /mnt/extra/nspawn-containers/test \ --bind-ro=/tmp/.X11-unix \ --bind=/dev/dri \ --bind=/dev/shm \ --bind=/dev/nvidia0 \ --bind=/dev/nvidiactl \ --bind=/dev/nvidia-modeset \ --setenv=DISPLAY=:0.0 \ xhost - When I try to `startx` from within the container, however, I get this: /usr/lib/Xorg.wrap: Only console users are allowed to run the X server xinit: giving up xinit: unable to connect to X server: Connection refused xinit: server error Couldn't get a file descriptor referring to the console. I am not entirely sure where to go from here. Is there something incomplete in my configuration? Looking up the Xorg.wrap error message, I only find that X will not run on pseudo terminals, but I do not know what to do about this or if this is even the problem. Best regards, e

3 4

Package java-environment-common-3-5 installs incorrect symlinks
by Wouffy The Dog 09 Apr '24

09 Apr '24

Hello, I was cleaning my machine, trying to find broken symlinks. I scanned my `/bin` directory with `find -L /bin/ -type l -ls`, and it found broken links installed by `java-environment-common` (`pacman -Qqo /bin/javah` for example). Is it the case for some of you?

4 3

Re: Arch Linux Rust packaging licensing problem
by Maarten de Vries 09 Apr '24

09 Apr '24

On 07-04-2024 13:10, Jan Alexander Steffens (heftig) wrote: > Hi Arvid, > > Thanks for bringing this issue to my attention and your detailed email > about it. I'm CCïng our public development mailing list in this > response so our other maintainers get informed, too. > > I agree that Arch needs a solution for this eventually. Unlike Fedora > we do not package Rust libraries so I think we need some help from > Cargo for this. Preferably from upstream, but a third-party tool would > work as well. > > Ideally, I think there we would create a SPDX license expression from > the entire crate tree and then simplify it, e.g. to turn `(MIT) AND > (MPL-2.0 OR MIT) AND (MIT AND BSD-2-Clause) AND (MPL-2.0 OR > BSD-3-Clause)` into `MIT AND BSD-2-Clause AND (MPL-2.0 OR > BSD-3-Clause)`. Or perhaps even simpler if the tool had knowledge > about which licenses are covered by others. > > We could call such a tool in the `package()` function to set the > `license` for the package. > > I'm not sure how feasible this would be. Are crates required to use > SPDX expressions? > > Greetings, > Jan > > Hey, Replying on the general mailing list since the dev list is staff only. The license field of the pacman package is actually only secondary concern. Many libraries have a license that requires shipping the copyright information along with binary distributions (such as MIT and BSD licenses). This is more than just the name or SPDX identifier of the license. Usually, it is included at the top of a license file and it would look like this: > Copyright (c) 2024, Maarten de Vries There are tools to help with this: https://crates.io/crates/cargo-bundle-licenses https://crates.io/crates/cargo-lichking Personally I think having incomplete SPDX identifier in the pacman package is not in itself a license violation as long as the individual license files are shipped with the package. Although it would certainly be nice for tooling if the package information is complete too. Kind regards, Maarten de Vries

8 9

pacman link
by james smith 09 Apr '24

09 Apr '24

the link[1] in the bugs part links to the old bugs it should link to the new one[2] [1]https://archlinux.org/pacman/ [2]https://gitlab.archlinux.org/archlinux/packaging/packages/pacman

1 0

postfix 3.9.0-1 - Worthy of "Latest News" note?? This will catch some people
by David C. Rankin 08 Apr '24

08 Apr '24

Arch devs, The update to postfix 3.9.0-1 appears worthy of a note in "Latest News" on archlinux.org as it will require manual user intervention. The upgrade note in pacman with the upgrade is much appreciated, but removal of hash: database types and replacement by lmdb will require regeneration of all user databases. This is something I'd expect a "Latest News" note on for those managing servers running arch. Just a suggestion. If you think the note on update is sufficient, that's fine too. The only reason I bring it up is this isn't a normal manual intervention that is required (like mariadb update or postgres collation version updates) where people are on the lookout for manual steps. Other than needing to rebuild the databases and skim through and blend the .pacnew changes to main.cf, all goes fine. -- David C. Rankin, J.D.,P.E.

1 0

Re: Proposal to increase the default vm.max_map_count value
by Genes Lists 02 Apr '24

02 Apr '24

On Tue, 2024-04-02 at 12:29 +0200, Robin Candau wrote: > On 4/2/24 11:59 AM, Robin Candau wrote: Couple of comments. * In lkml thread on same topic not everyone is on board with this [1] * Where to put this kind of thing Would it make sense to collect these kind of "system" settings, that dont clearly belong to a specific application, into a separate package (arch-system-settings or whatever). Admittedly at moment this would be very small package 🙂 [1] https://lkml.org/lkml/2024/4/2/404 -- Gene

1 0

Re: [arch-announce] The xz package has been backdoored
by Genes Lists 01 Apr '24

01 Apr '24

On Fri, 2024-03-29 at 18:55 +0000, Arch Linux: Recent news updates: David Runge wrote: > TL;DR: Upgrade your systems and container images **now**! > > Thanks for sharing. Truly an astounding revelation. This is a very, very sophisticated tool-chain attack along the lines of Ken Thompson's famous compiler trust example [1] Arch has been a strong advocate for reproducible builds [2] which can be part of a defense strategy [2]. I note that our xz package is marked as good in this regard [3]. I wonder what more we can reasonably do in the near term. Since git gives us decent tools to check what changed etc., I would imagine that can provide a stronger base on which to check things than working with tarballs or tarballs alone. This may have gone largely un-noticed for so long as people are probably more likely to check the source than the tarball itself. In this case, it seems, it was a primary developer doing the naughty - but they chose to leave the git repo alone and only infect the tarball. Question: -------- Would it make sense, therefore, to switch builds, where possible, away from tar files and instead pull directly from git source (signed tags where possible as usual etc)? Of course a git repo can also carry infections - perhaps taht's a little less likely. Or is this not worth the trouble? Gene [1] https://wiki.c2.com/?TheKenThompsonHack [2] https://reproducible-builds.org/ https://wiki.archlinux.org/title/DeveloperWiki:ReproducibleBuilds https://bootstrappable.org/ [3] https://reproducible.archlinux.org/ -- Gene

2 1

Which Emacs package?
by Abraham S.A.H. 31 Mar '24

31 Mar '24

Hey fellows; There are many Emacs packages available across Arch repositories and AUR. I list some of them here, in no specific order: From Extra repository: * emacs * emacs-wayland * emacs-nativecomp * emacs-nox From AUR and some third party repositories: * emacs-lucid-nativecomp * emacs-git * chaotic-aur/emacs-pgtk-native-comp-git I do not explain any of them for details. My audience is the one who already tried them, so can give me some advice. I already have tried all of them and also read archwiki's Emacs article. The Lucid one seems like the most stable with the least bugs, but with an archaic UI and without dnd support, but I do not use those scroll/menu/toolbars. Please, if you have any experience, share it with me. -- Best Regards, Abraham Sent with Tutanota; https://tuta.com

5 6

man.archlinux.org/man/xzmore.1.uk is not in English
by u34＠net9.cf 30 Mar '24

30 Mar '24

https://man.archlinux.org/man/xzmore.1.uk manual page is not in English. Visually, I would say my local copy, man -l /usr/share/man/uk/man1/xzmore.1.gz , and xzmore.1.uk at man.archlinux.org have the same text. I also have many warnings, for a lot of packages, from pacman -Qkk. One of these warnings is about /usr/share/man/uk/man1/xzmore.1.gz. The warning is despite the fact the actaul data for /usr/share/man/uk/man1/xzmore.1.gz seems to agree with zgreping /var/lib/pacman/local/xz-5.6.1-2/mtree for that file. Local pacman version is 6.0.2-9. -- u34

3 4

Mensaje de ꪗꪮ𝘳ᦔꪖꪀ𝓽ꫀ
by ꪗꪮ𝘳ᦔꪖꪀ𝓽ꫀ 29 Mar '24

29 Mar '24

hello

1 0

Why after rebuild do I still get "warning: normalize: unknown key 'makepkgopt' in package description"?
by David C. Rankin 28 Mar '24

28 Mar '24

All, In whatever changed a week or so ago, pacman gave "... unknown key 'makepkgopt' in package description" for a slew of old packages left on my system from a decade of use. I've since gone back and removed all the packages and rebuilt the ones I need, but I still get a handful of errors for the 'normalize' package I've just built. What am I doing wrong? On cleaning the cache I get: 20:11 valkyrie:~> pms -c Packages to keep: All locally installed packages Cache directory: /var/cache/pacman/pkg/ :: Do you want to remove all other packages from cache? [Y/n] removing old packages from cache... warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description warning: normalize: unknown key 'makepkgopt' in package description Database directory: /var/lib/pacman/ :: Do you want to remove unused repositories? [Y/n] removing unused sync repositories... The normalize package is the one I just built and updated from AUR, e.g 20:12 valkyrie:~> pmqi normalize Name : normalize Version : 0.7.7-7 Description : A tool for adjusting the volume of WAV files to a standard level Architecture : x86_64 URL : http://normalize.nongnu.org Licenses : GPL Groups : None Provides : None Depends On : audiofile libmad vorbis-tools lame flac mpg123 Optional Deps : None Required By : None Optional For : None Conflicts With : None Replaces : None Installed Size : 118.49 KiB Packager : Unknown Packager Build Date : Tue 19 Mar 2024 08:07:32 PM CDT Install Date : Tue 19 Mar 2024 08:08:26 PM CDT Install Reason : Explicitly installed Install Script : No Validated By : None The PKGBUILD is: 20:13 valkyrie:~> cat arch/pkg/bld/normalize/PKGBUILD # $Id: PKGBUILD 266875 2017-11-15 14:29:11Z foutrelis $ # Maintainer: Giovanni Scafora <giovanni(a)archlinux.org> # Contributor: Tom Newsom <Jeepster(a)gmx.co.uk> pkgname=normalize pkgver=0.7.7 pkgrel=7 pkgdesc="A tool for adjusting the volume of WAV files to a standard level" arch=('x86_64') url="http://normalize.nongnu.org" license=('GPL') depends=('audiofile' 'libmad' 'vorbis-tools' 'lame' 'flac' 'mpg123') makedepends=('pkg-config' 'intltool') source=("http://download.savannah.gnu.org/releases/${pkgname}/${pkgname}-${pkgver}.t…" 'normalize-0.7.7-audiofile-pkgconfig.patch' 'normalize-0.7.7-m4.patch') md5sums=('1749b16fc7a08aa5d0cf9f76eeaa8436' '77d565e29bef11837e80347adfd42b58' '0b4bca7bf183275b9f939576ebad4233') prepare() { cd "${srcdir}/${pkgname}-${pkgver}" patch -Np1 -i "${srcdir}/normalize-0.7.7-audiofile-pkgconfig.patch" patch -Np0 -i "${srcdir}/normalize-0.7.7-m4.patch" touch AUTHORS NEWS ChangeLog #libtoolize --force --copy #aclocal -I m4 autoreconf -vi #automake --add-missing } build() { cd "${srcdir}/${pkgname}-${pkgver}" ./configure --prefix=/usr \ --mandir=/usr/share/man \ --with-audiofile \ --with-mad make } package() { cd "${srcdir}/${pkgname}-${pkgver}" make DESTDIR="${pkgdir}" install } Nowhere can I figure out where there is a "key 'makepkgopt' in package description". The package description is pkgdesc="A tool for adjusting the volume of WAV files to a standard level" Where is the "... key 'makepkgopt' ..." coming from? -- David C. Rankin, J.D.,P.E.

2 2

Re: Proposal to increase the default vm.max_map_count value
by Rein Fernhout (Levitating) 25 Mar '24

25 Mar '24

Seeing as other distributions have already adopted this change and gaming is a popular usecase for ArchLinux I do think this is a good thing to have. The default value will only be more of a bottleneck in the future. There's a balance in sticking to defaults. It'd be a shame if users need to alter multiple kernel parameters just to play modern games or run other applications with a high memory footprint. As I understand it there's no real downside to increasing this. Could someone with more knowledge of the kernel shed some light on any possible adverse effects that might come from increasing the default? I am also curious how the upstream discussed will go but I do not expect them to change it. Cheers, Levitating On 2024-03-25 09:10, Robin Candau wrote: > Hi everyone, > > I'm writing this mail as proposal to increase the default > `vm.max_map_count` [1] value in Arch Linux. > > The default `vm.max_map_count` 65530 value is making some Windows games > crash (or even prevent them to start at all) while being played through > Wine or Steam Play (Proton). > Examples are (but not limited to) Star Citizen, THE FINALS, Hogwarts > Legacy, DayZ or Counter-Strike 2 (see [2] for a list of bug reported to > Valve for these games on that matter). > > In that regard, SteamOS is shipping an increased `vm.max_map_count` > default value to address the above issue and numerous distributions > have since then decided to implement that change on their side as well, > such as Fedora [3], NixOS [4] and, more recently, Ubuntu [5]. > > While I'm aware that Arch is a user centric/DIY distro and everyone can > set their own `vm.max_map_count` value fairly easily, shipping an > increased value on our side would be a beneficial change to make in my > opinion as it would result in a smoother gaming experience out of the > box for our users without representing any downside/side effect (as far > as I'm aware). > > In terms of implementation, the change basically consists of shipping > the following sysctl file: > > ``` > # Increase the number of virtual memory areas that one process may > request > vm.max_map_count=1048576 > ``` > > For reference, Fedora added it to their systemd package [6], while > Ubuntu handled it at the procps level [7]. > I personally don't have a strong opinion on the implementation > way/place. > > To sum up, I think this would be a reasonable and positive change to > make to our distro. > I'd be happy to read your thoughts (or eventual objection)! 😊 > > [1] https://docs.kernel.org/admin-guide/sysctl/vm.html#max-map-count > [2] > https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2057792/comments/5 > [3] https://fedoraproject.org/wiki/Changes/IncreaseVmMaxMapCount > [4] https://github.com/NixOS/nixpkgs/pull/238459 > [5] https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2057792 > [6] > https://src.fedoraproject.org/rpms/systemd/blob/f39/f/10-map-count.conf > [7] > https://git.launchpad.net/ubuntu/+source/procps/commit/?h=applied/2%254.0.4…

3 2

Do we need to fix dbus-broker-launch journal warnings -- or just ignore?
by David C. Rankin 25 Mar '24

25 Mar '24

Are we supposed to do anything to fix these dbus-broker-launch journal warnings? Mar 24 02:15:31 valkyrie dbus-broker-launch[1130]: Service file '/usr/share/dbus-1/services/org.xfce.Tumbler.Thumbnailer1.service' is not named after the D-Bus name 'org.freedesktop.thumbnails.Thumbnailer1'. Mar 24 02:15:31 valkyrie dbus-broker-launch[1130]: Noticed file-system modification, trigger reload. Mar 24 02:15:31 valkyrie dbus-broker-launch[1130]: Service file '/usr/share/dbus-1/services/org.xfce.Thunar.FileManager1.service' is not named after the D-Bus name 'org.freedesktop.FileManager1'. Mar 24 02:15:31 valkyrie dbus-broker-launch[1130]: Service file '/usr/share/dbus-1/services/org.xfce.Tumbler.Cache1.service' is not named after the D-Bus name 'org.freedesktop.thumbnails.Cache1'. I don't have XFCE installed, but do have thunar installed stand-alone for fluxbox. -- David C. Rankin, J.D.,P.E.

3 6

Where to find old png2ico PKGBUILD it was dropped to AUR?
by David C. Rankin 24 Mar '24

24 Mar '24

All, Cleaning up old packages, I still need the png2ico utility. It is no longer in AUR replaced by elphicon which uses that abomination electron. I need to know if the old PKGbUILD for Arch png2ico still exists in some historical form somewhere. It would save writing another. What say the historians, does such a thing exist? -- David C. Rankin, J.D.,P.E.

5 6

CLI access to dropbox
by Jeanette C. 22 Mar '24

22 Mar '24

Hey hey, I need CLI access to my dropboox account. I'm still running dropbox-cli, which is marked as out-of-date and I couldn't update to the latest version. Using trizen, I get this error message: [...] -> Found dropboxd-fallback.patch ==> Validating source files with sha256sums... dropbox-cli-2023.09.06.py ... FAILED dropboxd-fallback.patch ... Passed ==> ERROR: One or more files did not pass the validity check! :: Unable to build dropbox-cli - makepkg exited with code: 1 There is dbxcli a commandline interface written in Go, which also fails to build with this: no required module provides package github.com/dropbox/dbxcli: go.mod file not found in current directory or any parent directory; see 'go help modules' ==> ERROR: A failure occurred in build(). Aborting... :: Unable to build dbxcli - makepkg exited with code: 4 Has any one else perhaps encountered these errors and found a fix or can suggest another commandline app that will give easy access to an existing dropbox account. Best wishes and thanks, Jeanette -- * Website: http://juliencoder.de - for summer is a state of sound * Youtube: https://www.youtube.com/channel/UCMS4rfGrTwz8W7jhC1Jnv7g * Audiobombs: https://www.audiobombs.com/users/jeanette_c * GitHub: https://github.com/jeanette-c But tell me what happens when it stops? <3 (Britney Spears)

4 4

Re: Revising Go packaging guidelines (2024)
by Daniel Martí 19 Mar '24

19 Mar '24

Hello, I'm a long time user and only an occasional contributor, but I do have experience on the Go side, so perhaps my input is helpful. I keep forgetting that I can't reply to arch-dev-public, so I'm replying to the poster and arch-general. Overall I agree with simplifying and modernizing the Go guidelines. Practically every Go project uses modules now, not using Go's own linker will come as a surprise to most Arch users, and I've always found all those env vars and flags on top of "go build" to be a surprising setup. Your suggestion of just three flags in GOFLAGS seems far better. That said, I think your suggestion to just use "go build" everywhere is unfortunately not realistic, at least not yet given my experience out in the wild. That's because runtime/debug.ReadBuildInfo isn't actually quite enough. It does embed a module semver version when building via GOPROXY, e.g. "go install cuelang.org/go/cmd/cue@latest", and it also embeds VCS information when doing a local build inside a git clone, e.g. "git checkout master && go install ./cmd/cue". Crucially, however, in the latter case the main module lacks a module semver version, and the stamped VCS information is just a commit hash and a timestamp, without any notion about what the current or last semver tag was. This is a known limitation, and tracked at https://github.com/golang/go/issues/50603. Until this is fixed, some projects still support the ldflags hack, or hard-code a version string to manually change at every release, or simply live with "devel" or "commit X" versions when built locally. Upstream accepted the proposal, but it may be another couple of years before it's shipped and widespread enough that the ldflags hack is gone for good. I also see that you suggest adding -buildvcs=false to GOFLAGS; I'm not sure if that is the right choice or not for Arch, but consider the limitation of the BuildInfo version string I explain above. In the Go programs that I write, I make the "version" command or flag show the VCS information, precisely because otherwise there's no way to tell what the real version might actually be: > $ git rev-parse HEAD # in https://github.com/cue-lang/cue > b648cf45d5adc6592633206cc126670906881729 > $ git describe --tags # note how I'm a few commits after the > v0.9.0-0.dev tag > v0.9.0-0.dev-4-gb648cf45$ go install ./cmd/cue > $ cue version # the version at the top is a hard-coded string named > "fallbackVersion" > cue version v0.9.0-0.dev > > go version devel go1.23-0a6f05e30f 2024-03-17 15:57:54 +0000 > -buildmode exe > -compiler gc > DefaultGODEBUG > asynctimerchan=1,httplaxcontentlength=1,httpmuxgo121=1,tls10server=1,tlsrsakex=1,tlsunsafeekm=1,winreadlinkvolume=0,winsymlink=0 > CGO_ENABLED 1 > GOARCH amd64 > GOOS linux > GOAMD64 v3 > vcs git > vcs.revision b648cf45d5adc6592633206cc126670906881729 > vcs.time 2024-03-18T07:55:11Z > vcs.modified false TL;DR: sounds good to me, just don't assume that every project can simply "go build" now, and consider not disabling -buildvcs, at least for the time being. Cheers. On 18/03/2024 23.17, kpcyrd wrote: > hello, > > the Arch Linux Go packaging guidelines[0] currently suggest this for > building software written in Go: > > > export CGO_CPPFLAGS="${CPPFLAGS}" > > export CGO_CFLAGS="${CFLAGS}" > > export CGO_CXXFLAGS="${CXXFLAGS}" > > export CGO_LDFLAGS="${LDFLAGS}" > > export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external > -mod=readonly -modcacherw" > > > > # or alternatively you can define some of these flags from the CLI > options > > go build \ > > -trimpath \ > > -buildmode=pie \ > > -mod=readonly \ > > -modcacherw \ > > -ldflags "-linkmode external -extldflags \"${LDFLAGS}\"" \ > > . > > [0]: https://wiki.archlinux.org/title/Go_package_guidelines > > There's also section "2.2.2 Supporting debug packages" which > contradicts the previous section. > > ## Suggestion > > I'd like to propose changing this to something like: > > > prepare() { > > cd ${pkgname}-${pkgver} > > go mod download > > } > > > > build() { > > cd ${pkgname}-${pkgver} > > go build . > > } > > > > package() { > > cd ${pkgname}-${pkgver} > > install -Dm0755 -t "${pkgdir}/usr/bin/" "${pkgname}" > > } > > Plus any extra flags (for example for debug packages to work, if any > are needed at all - there's a note about this towards the end of this > essay). Instead of suggesting two (three) different approaches, the > packaging guidelines should endorse argv over environment variables > (how to set them with environment variables can still be documented in > a later section of the guideline). The reason I'm suggesting this: > > ## Passing flags over argv > > Setting these options through environment variables is for cases when > `go` isn't executed directly by our PKGBUILD, but instead by some > indirection like a Makefile. Makefiles are more popular in Go projects > than they are in e.g. Rust projects, but presumably because for many > years (10+) there was no analogous to `env!("CARGO_PKG_VERSION")` to > embed a version string into the binary for --version output. > > Since almost exactly two years ago, in Go 1.18 released March 2022, > there's now `runtime/debug.ReadBuildInfo` which gives you a reference > to an embedded struct that contains a version string[1]. > > [1]: https://pkg.go.dev/runtime/debug#ReadBuildInfo > > Hopefully more Go projects are going to favor this in the future over > custom build scripts and passing `-X main.Version=...` with output > from `git describe --tags`. If this catches on, people might think of > `go build` more like they currently think of `cargo build` and I think > the Go package guideline should encourage this. > > Not just for Go but for software in general, using `git describe` > should be considered an anti-pattern. In the way the Arch Linux build > system currently works, only the checked out files are authenticated > and pinned by sha256sums= and friends, but `git describe` explicitly > works on unauthenticated git objects in `.git/`. I've published a > writeup on how to take advantage of this on the reproducible builds > list in September 2023[2]. > > [2]: > https://lists.reproducible-builds.org/pipermail/rb-general/2023-September/0… > > ## Using the Go native Linker > > Binaries built by the Go compiler have been reproducible for a long > time, however Go binaries built by Arch Linux usually aren't. This has > led to some confusion, with bug reports to upstreams of Go software > because it wasn't obvious that the package not being reproducible in > this case isn't a problem in upstream's source code, but the way Arch > Linux compiles it. > > Arch Linux generally prefers binaries with hardening flags enabled[3] > and therefore explicitly opts into a non-default linker (Cgo), but it > seems to be the unpopular choice. Cgo seems to have less support than > normal Go on Linux (evidently, since Cgo has been known to have > reproducible build issues for years now). Other Linux distributions > seem to stick to normal Go too, Nix has Cgo off by default[4] and > searching through nixpkgs for "buildGoModule" yields about 2k results, > searching for "CGO_ENABLED" has 105 results, with more than half being > "CGO_ENABLED=0" though. Alpine Linux only sets GOFLAGS globally[5] > (which Arch Linux currently doesn't), searching for `rg -l --multiline > '\tgo.*build'` in aports matches 356 files, `rg -l CGO_ENABLED=0` > matches 23 files and `rg -l CGO_ENABLED=1` matches 18 files. > > [3]: https://github.com/jvoisin/compiler-flags-distro > [4]: > https://github.com/NixOS/nixpkgs/blob/b081342f1c16e4cbe4f40f139bbdda1475ea3… > [5]: https://git.alpinelinux.org/abuild/tree/default.conf?h=3.12.0#n5 > > The global GOFLAGS as specified in Alpine Linux are: > > > export GOFLAGS="-buildmode=pie -modcacherw -trimpath -buildvcs=false" > > Which we could consider setting globally too, like we do with RUSTFLAGS. > > Figuring out what Debian does was somewhat challenging, their > integration with the go build system is called dh-golang[6], they seem > to set CGO_ENABLED=1 only when cross-compiling, with go >= 1.13 > (released 2019) they seem to build with `go install -trimpath ...` and > no further GOFLAGS environment variable. > > [6]: > https://salsa.debian.org/go-team/packages/dh-golang/-/blob/debian/sid/lib/D… > > I understand the concern of Go possibly being more prone to ROP-style > exploits when 1) built with the native linker and 2) used with e.g. a > vulnerable version of libgit2, however, as of 2024, there have been > barely any memory-corruption based exploits for Go software. > > ## Motivation > > - Most of our Go software is currently not reproducible due to Cgo, > including core/libcap, which is the last unreproducible package in > docker.io/library/archlinux > - The barrier for packaging Go in Arch Linux is currently somewhat > high (compared to e.g. packaging Rust), the guideline requires too > much interpretation and could be improved > - Quirks that are only needed for old Go projects (like 2.1.1) should > be listed towards the end instead of being the first code block in the > guideline > > --- > > cheers, > kpcyrd

1 0

kernel from own built package won't boot
by solsTiCe d'Hiver 19 Mar '24

19 Mar '24

Hi, I have made a thread on the forum: https://bbs.archlinux.org/viewtopic.php?id=293601 But I did not get much help. I don't know if it is appropriate to post here. I have dug a bit into my issue, and when I build an official PKGBUILD for a kernel, be it linux or linux-zen (pkctl repo clone linux); makepkg --skippgpcheck; sudo pacman-U linux-...), the kernel is not booting with an error. At first, I was thinking it was related to either Secure Boot or shim, or the UKI, but later tests in VMs using BIOS revealed the problem was still there. And I got an error message from the kernel: "ZSTD-compressed data is corrupt" (when booting with limine in BIOS) I found that very string in ./lib/decompress_unzstd.c. in the kernel source. I even rebuilt the kernel inside the VM to rule out host issue (?). I later used an initramfs with no compression (COMPRESSION="cat") and using uncompressed modules in it (MODULES_DECOMPRESS="yes"). But the problem remained. I tried to boot the kernel with the same package on another machine. Still the same. How could this happen? Is it my installation of archlinux? The compilation of the kernel ? Is it something else? What? mkinitcpio? but why does it work with the official package, then? Could you reproduce it? Thanks

2 1

New pacman -Sc floods screen with warnings
by David C. Rankin 17 Mar '24

17 Mar '24

Just updated and went to clear old cache packages with 'pacman -Sc' and... 05:35 2pi:~> pms -c Packages to keep: All locally installed packages Cache directory: /var/cache/pacman/pkg/ :: Do you want to remove all other packages from cache? [Y/n] removing old packages from cache... warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: png2ico: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description warning: abs: unknown key 'makepkgopt' in package description ..... <snip 50-70 more What's up with this? -- David C. Rankin, J.D.,P.E.

2 3

openfin alternative (consultant needed)
by James Tobin 12 Mar '24

12 Mar '24

Hi, I'm working with a fintech company that is looking to hire a consultant that can help them explore alternatives to having to stay reliant on OpenFin. Consequently, I had hoped that you might like to discuss Consequently I had hoped some members of this list may like to discuss further All the best, James

1 0

Small question about mkinitcpio and linux.preset
by Óscar García Amor 09 Mar '24

09 Mar '24

Hello folks, With the latest update of mkinitcpio when running `mkinitcpio -P` you get the following warning: ``` WARNING: Deprecated option 'ALL_microcode' found. Update '/etc/mkinitcpio.d/linux.preset' to use the 'microcode' hook instead. ``` It is clear to me that this is because that option must be removed from the `/etc/mkinitcpio.d/linux.preset` file, but what surprises me is the following: ``` % pacman -Qo /etc/mkinitcpio.d/linux.preset error: No package owns /etc/mkinitcpio.d/linux.preset ``` Who generated the `linux.preset`? It is supposed to have been the `linux` package but right now I can't find how this file was generated. If someone could explain to me how this file is generated at the time of installation I would be very grateful. Greetings. -- Óscar García Amor | ogarcia at moire.org | http://ogarcia.me

4 5

`makepkg` generates two packages
by lacsaP Patatetom 09 Mar '24

09 Mar '24

hi, when I run `makepkg`, it generates a second package with the `-debug` "extension" (eg. `mypackage-w.x.y-z-x86_64.pkg.tar.zst` and `mypackage-debug-w.x.y-z-x86_64.pkg.tar.zst`). I couldn't find anything about this on the wiki : is this a new feature and/or is there a parameter to pass to `makepkg` to avoid building it ? regards, lacsaP.

9 15

Incus exprience
by Abraham S.A.H. 05 Mar '24

05 Mar '24

Hello everyone, I was using LXC — unprivileged — containers for my only two containers. I don't know how much but about a year, perhaps. Meanwhile, reading announcements of Incus following their GitHub release notifications. I was just interested. With v0.5 release, I jumped in, gave it a try and yeah!! it was simpler than LXC itself. Exactly opposite to my guessing. So far, everything was going well. Two little problems that I reported, one has to be documented in archwiki and the other will be fixed in 0.7. Since I dodged LXD directly from LXC to Incus. I want to know what's the difference between their _interfaces_. Am I missing anything from LXD in Incus? -- Best Regards, Abraham Sent with Tutanota; https://tuta.com

2 4

Future of libdepends and libprovides
by Marius Kittler 05 Mar '24

05 Mar '24

Hi, I've just seen the mail https://lists.archlinux.org/hyperkitty/list/arch-dev-public@lists.archlinux… on the "staff only" list. Since this probably affects AUR packages and other places where the whole community is involved such as the Wiki and unofficial repos I think it should be discussed here as well. Am Montag, 4. März 2024, 14:43:54 CET schrieb Balló György: > In short term, we should revert this commit [3] at distribution level > to avoid breakages. That would be much appreciated, also from my point of view as AUR package maintainer and maintainer of an unofficial repository. (If official packages need to be updated then I assume the same also applies to AUR packages. This will probably take even longer as every maintainer will have to take care of their packages individually.) > In long term, we have to decide via RFC what to do with libdepends and > libprovides. We could probably make a slow, manual transition to the > new 'autodeps' feature in pacman, but it still does not support > optional autodeps, [4] which means that would be impossible to mark any > binary deps as optional. That's of course problematic for plugins or binaries only required for optional features. I think we need a solution for that before enabling this new 'autodeps' feature globally by default. I also hope that the 'autodeps' feature will not run into problems with special libraries, e.g. ones that are only intended for cross-compilation purposes like https://aur.archlinux.org/packages/android-x86-64-zlib. It would be very annoying if one had to exclude those libraries manually. Having to add `options=('!autodeps')` would probably be ok although it means updating tons of AUR packages maintained by different people and of course also updating the relevant Wiki pages. Speaking of the Wiki: It still mentions library dependencies, e.g. in the last paragraph of https://wiki.archlinux.org/title/PKGBUILD#depends. This section should be updated and the alternative be documented instead if you decide to actually remove the support. It would also make sense to announce that change on https://archlinux.org so people actually know that they should stop using libdepends/libprovides. Note that I think moving forward with 'autodeps' is generally useful. For maintaining my own repository I even introduced a feature in my build service to keep track of all the dependencies on soname-level so I know when I'll have to rebuild packages. So this is the right approach - we just need to be careful no break existing packages/workflows without a transition period and clear announcements. Best Reagards Marius

2 3

removal of yuzu from the official repos
by james smith 05 Mar '24

05 Mar '24

as most of you have heard the yuzu has been shutdown by nintendo[1] and the github page removed[2] therefore the package needs to be considered for removal from the official repos as there will be no more updates and the package links to the github will be broken in a matter of time [1] https://storage.courtlistener.com/recap/gov.uscourts.rid.56980/gov.uscourts… [2]https://github.com/yuzu-emu/yuzu

4 3

Upgrade failure
by David Bohman 04 Mar '24

04 Mar '24

% sudo pacman -Syu :: Synchronizing package databases... core is up to date extra is up to date :: Starting full system upgrade... :: Replace libblockdev-utils with extra/libblockdev? [Y/n] resolving dependencies... looking for conflicting packages... error: unresolvable package conflicts detected error: failed to prepare transaction (conflicting dependencies) :: libblockdev and libblockdev-utils are in conflict % It looks like both packages provide libbd_utils.so=3-64.

7 10

Fwd: [to Arch General] Consolidating our mkinitcpio hooks
by David C. Rankin 04 Mar '24

04 Mar '24

I've followed the mkinitcpio v38 thread and efforts to not break systems. This has me concerned. I have 3 Arch servers with many mdadm RAID arrays. What changes will I have to make regarding mdadm_udev to ensure my system doesn't break? Will simply updating once all the packages hit the mirrors be all that is required?: * mkinitcpio 38-1 * systemd xxxx * lvm2 xxxx * mdadm xxxx * cryptsetup xxxx Or will manual intervention be needed? -------- Forwarded Message -------- Subject: Re: Consolidating our mkinitcpio hooks Date: Sat, 2 Mar 2024 14:07:14 +0100 From: Morten Linderud <foxboron(a)archlinux.org> To: arch-dev-public(a)lists.archlinux.org Yo, mkinitcpio v38 has been released and I made a personal test setup with the changes and everything seems to work fine on my end. To make sure we are limiting breakage I propose the following news item to go along with the update. Please note I'll insert the relevant versions when the packages hit the testing repositories sometime tomorrow if there are no objections to the current plan. Draft here: https://md.archlinux.org/ixPJWhJXTj6Arlyq3wb9jA # News Item Subject: mkinitcpio hook migration and early microcode With the release of mkinitcpio v38 several hooks provided from Arch packages has moved to the mkinitcpio upstream. The moved hooks are systemd, udev, encrypt, sd-encrypt, lvm2 and mdadm_udev. To ensure we are not breaking the boot of users we have introduced temporary conflicts into the respective packages to prevent you from installing packages that are no longer compatible. The following packages needs to be installed together: * mkinitcpio 38-1 * systemd xxxx * lvm2 xxxx * mdadm xxxx * cryptsetup xxxx Please note the `mkinitcpio` flag `--microcode` has been deprecated in favour of a new `microcode` hook. This also allows you to drop the mircocode `initrd` lines from your boot configuration as they are now included in your initramfs. -- Morten Linderud PGP: 9C02FF419FECBE16 -- David C. Rankin, J.D.,P.E.

3 3

Re: Upgrade failure
by Abraham S.A.H. 04 Mar '24

04 Mar '24

> These should be an option at old.reddit.com/prefs <http://old.reddit.com/prefs> to not use new Reddit, and thus always get the old version at www. Should minimize the headaches you get with old and dusty Reddit links. Thanks, @Aaron -- Best Regards, Abraham Sent with Tutanota; https://tuta.com

1 0

Upgrade failure
by arch＠howorth.org.uk 04 Mar '24

04 Mar '24

On Mon, 4 Mar 2024 14:07:47 +0100 (CET) "Abraham S.A.H." <arash.sah(a)tuta.io> wrote: > > https://www.reddit.com/r/archlinux/comments/1b67kih/libblockdevutils_and_up… > > Can't open. First answer: pacman -S libblockdev-utils; pacman -Syu Possibly a packaging mistake. Another reply: I had the same issue yesterday. I reran the update this morning and it worked. It was either that my mirror was not up to date or a packaging issue. If you’re not in a hurry to update give it a few hours and your mirror should update. And a third reply: I had the same problem as well, what i did was uninstall libblockdev-utils using pacman -Rdd and then i just installed the new version.

1 0

boot parameter to stop hdmi
by Jude DaShiell 04 Mar '24

04 Mar '24

Is nohdmi valid to disable hdmi on an installer boot? A contact may need this but I'm not sure since I'm not familiar with his hardware. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

1 0

Trouble connecting with NetworkManager
by SET 03 Mar '24

03 Mar '24

Hi, Since yesterday's upgrade, it's not possible to establish IPV4 networking with networkmanager 1.46.0-1 and networkmanager-qt5 5.115.0-1 on ethernet and Wi- Fi. It happens with both static and dynamic address assignment. A usable IPV6 address is obtained with DHCP on Wi-Fi. An IPV6 address is assigned on ethernet, but it is not usable to be online. # LC_ALL=C LANG=C journalctl -u NetworkManager -r |less Feb 25 08:24:59 asus0.nmset.info NetworkManager[4136]: <info> [1708845899.6577] policy: set 'ETH0' (eth0) as default for IPv4 routing and DNS Feb 25 08:24:59 asus0.nmset.info NetworkManager[4136]: <info> [1708845899.6566] device (eth0): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed') Feb 25 08:24:59 asus0.nmset.info NetworkManager[4136]: <info> [1708845899.6556] device (eth0): state change: prepare -> config (reason 'none', sys-iface-state: 'managed') Feb 25 08:24:59 asus0.nmset.info NetworkManager[4136]: <info> [1708845899.6551] manager: NetworkManager state is now CONNECTING Feb 25 08:24:59 asus0.nmset.info NetworkManager[4136]: <info> [1708845899.6546] device (eth0): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') Feb 25 08:24:59 asus0.nmset.info NetworkManager[4136]: <info> [1708845899.6531] device (eth0): Activation: starting connection 'ETH0' (ea1d83f9-2dd7-4769-bbe9-ecd6aa48ff3b) Activating and deactivating NetworkManager-wait-online and NetworkManager- dispatcher do not help. Reverting to networkmanager-1.44.2-3 and networkmanager-qt5-5.112.0-1 is a working temporary solution. Devices: - Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller (rev 15); Kernel driver in use: r8169 - Network controller: Intel Corporation Wireless 8265 / 8275 (rev 78); Kernel driver in use: iwlwifi I'm reporting in the hope of a fix on the next upgrade. Regards.

6 9

libblockdev split plugins
by Abraham S.A.H. 02 Mar '24

02 Mar '24

Hello everyone, Probably a little late, but I noticed that `plugins of libblockdev` package has been split out to a few individual, smaller packages, as optional dependencies. Probably, most of the users already noticed that. However, when I did check, I found that all split plugin packages — `libblockdev-*` — take significant size compared to `libblockdev` package itself. `libblockdev` is less than 220 KiB. So splitting it really reduces the size of the package and helps dependency resolution, specially for `udisks2`. Nevertheless, `udisks2` already depends on 8 of those 14 split packages… And many users may need some of them explicitly as well.So at the end of the day, most of them are installed anyway! Interestingly, as far as I know, `libblockdev` is not required by any other package than `udisks2`!! So the benefit of splitting it will not go for any other package. My question is, was such dividing really beneficial? Considering that, it probably brings more work to the maintainer and doesn't do any significant change to the ending of the story? -- Best Regards, Abraham Sent with Tutanota; https://tuta.com

3 4

Bring ARM into the fold?
by Christer Solskogen 02 Mar '24

02 Mar '24

Is it time to bring Arch Linux ARM into the fold of Arch Linux? The GNU toolchain of ALARM is now very behind, and the developers are dead silent about why. There little to no response on pull requests on the github page, and while it seems like there is activity on their PKGBUILDs repo, it almost seems to me that it is some kind of automatic jobs being run. Their forum is broken and has been broken for quite some time as well. -- chs

3 2

libblockdev - Split all provided plugins into separate packages (motivation?)
by David C. Rankin 24 Feb '24

24 Feb '24

All, David, Just did the system upgrade with the split of libblockdev packages, all went fine, though it did suggest install of the LVM plugin. I'm curious as to the motivation for the change? Easier to maintain? Smaller packages? Less overhead? etc... The trend I've seen over the past several years is to subdivide packages, which as long as they continue to work is fine, but at some point it does begin making it harder for the user to keep track of what all subpackages are required for package-X -- unless they are intimately familiar with they package and their use needs. So why was libblockdev put on the chopping-block? -- David C. Rankin, J.D.,P.E.

4 3

No graphical interface
by pete 24 Feb '24

24 Feb '24

Hi Folks having problems here i have lost access to kde plasma on the main box i have installed a new drive and reinstalled i believe it is on my /home drive where thr issue lies is anyone else having issues . i know this is scant information but i have no mail access on the machine that is having the issue wish there was someone local to me Thanks folks Pete

6 11

broken man page
by james smith 17 Feb '24

17 Feb '24

grub-btrfs [1] has a broken man page [1] https://man.archlinux.org/listing/extra/grub-btrfs/

3 2

Suggestion: use static linking instead of dynamic linking just as how rust and golang do.
by Evan Greenup 13 Feb '24

13 Feb '24

Suggestion Build executable program written in Haskell statically. (For the convenient of package maintainer, remove Haskell library packages). Reason The advantage of dynamic linking is letting multiple executable sharing same part of code. The only benefit is to reduce storage consumption. But in nowadays, storage is getting cheaper and cheaper. It is no longer be a issue now. And Haskell packages are all relatively small. However, here are a lot of drawbacks for dynamic linking of Haskell ecosystem. - Firstly is dependency version conflict. If two package depend on a same package with exclusive permitted version range, it will be a big trouble. - One dependency version update requires Arch Linux package maintainer update a series of packages which depend on this package. (Unlike Python, Haskell is compiled language with low ABI compatibility across different version). - lack of link time optimization. - Long time of upgrading via pacman. Updating many small package is really much slower than updating one big package. And registering Haskell module take a long time. Why program written in C/C++ can be distributed in dynamical linking form? C/C++ has very poor dependency resolver and package manager. C/C++ project need developer take care of dependency manually. And C/C++ compiler provide relatively stable ABI. None of those condition applies to Haskell. Details of Action Only providing: - ghc exclusive to ghcup - ghcup provide ghc, stack, cabal-install. This is similar to rustup package. - haskell-language-server like other Haskell executables, statically linked. When user install ghcup via pacman , the need to manually set default toolchain to install ghc and other tools. All non-executable Haskell library become unnecessary. Since no Haskell developer will use haskell package provided by the Linux distro. Expected Benefit - package maintainer will save a lot of time on maintaining Haskell software. - update will be much quicker. - All Haskell program packages can easily up-to-date. I believe the gain of this suggestion is significantly greater than the loss. Evan

4 3

Re: Migration from LXD to Incus
by Bernd Rinn 13 Feb '24

13 Feb '24

Hello, The issue with using the lxd-to-incus migration program is that it requires the lxd server to run in order to work. If I install incus via pacman and then try to migrate, I get: # lxd-to-incus => Looking for source server ==> Detected: manual installation => Looking for target server Error: No target server could be found This message is expected, because the target server (lxd) was uninstalled by pacman during the installation of incus. In comparison, on a Debian box, 'apt-get install incus' installs Incus in parallel to lxd and the subsequent migration program works fine. Best, > Hello, > > I am yet to migrate to incus, however the lxd-to-incus tool is provided > by the incus package [1], and thus should still work as it seems to > migrate itself (lxd is just a frontend after all). > > Let incus replace lxd, run the tool, and it should work just fine. If > not, post the error and the log here so that you can be helped further. > > > What the proper way of migrating from LXD to Incus under Archlinux? > > Seen as incus is relatively new, there is no wiki article on it, and > thus, there is no "proper" way currently, but in general if the > solution provided by upstream works, why change it? > > It goes without saying but you might want to backup before you attempt > this. > > Take care,

4 6

Odd login issue
by pete 12 Feb '24

12 Feb '24

Hi all I strange one here i boot to a text prompt then login but When i enter my username hit enter it sites there not asking for password then the login prompt will return this time enter my username hit enter it then goes correctly to password and logs in perfectly Now i do not think this is related but one of the cats knocked a cup of tea into a keyboard scrapped it totally alarmingly fast a Logitec K270 wireless thing so went and purchased a replacement exactly the same make and model changed it over new usb receiver mouse keyboard . It is strange that i only nmoticed it after that Cheers Pete

1 0

warning: directory permissions differ on /usr/lib/mysql/plugin/auth_pam_tool_dir/
by David C. Rankin 11 Feb '24

11 Feb '24

All, When these crop up from time to time on update, do we just fix them and move on, or it is worth digging into further to find out when and why the permissions changed? E.g. warning: directory permissions differ on /usr/lib/mysql/plugin/auth_pam_tool_dir/ filesystem: 700 package: 755 God knows I haven't touched that package directory permissions, so something changed over the years. In the past, I have simply changed the permissions to match the package (as long as it meets a commons sense test) and been done with it. When these appear, does anybody want further info, or just fix and forget? -- David C. Rankin, J.D.,P.E.

2 2

Join the Arch Testing Team - Call for participation
by Robin Candau 10 Feb '24

10 Feb '24

Hi, We hope y'all had a good start in the new year of 2024 --- With the new year usually come new resolutions. If you don't have any so far, we have one for you: What if you decided to give Arch a bit of help with testing package updates this year? 😃 Arch uses testing repositories [1] as a buffer for core/critical package updates (or any other package updates that would benefit from being tested first) before entering the stable repositories. Testing these package updates helps us to catch more bugs upfront and ensures flawless updates for the stable repos, and that is where you can help! By joining the official Arch Linux Testing Team [2], you'll get the ability to "sign off" packages in testing after vouching for their correctness (or reporting a bug [3] otherwise). This helps Arch Package Maintainers catching eventual bugs upfront and helps to move packages out of the testing repositories faster and more efficiently. We are not necessarily looking for in depth testing. Verifying that a program launches correctly and that you're able to perform your usual routine with it is already a good test on its own. You can also check the general testing guidelines [4]. This is a very effective and rather easy way to contribute to Arch Linux. The more testers we have, the more reliable packages updates will be. We hope to see some of you there! 😉 [1]: https://wiki.archlinux.org/title/Official_repositories#Testing_repositories [2]: https://wiki.archlinux.org/title/Arch_Testing_Team [3]: https://wiki.archlinux.org/title/Bug_reporting_guidelines [4]: https://wiki.archlinux.org/title/Arch_Testing_Team#Guidelines -- Regards, Robin Candau / Antiz

1 0

laptop microphone not working properly
by Frank 08 Feb '24

08 Feb '24

Good evening, my build in mic stopped working. It produces only random noise, while i was on a Zoom call. I checked with gnome-recorder and confirm it's not the Zoom app. My wife's bluetooth headset works fine. My setup: UXEDO Pulse 14 Gen1 AMD Ryzen™ 7 4800H Arch Linux (obvioulsy) with current kernel and packages pipewire Tested on Hyperland and Gnome (both wayland and X). I checked settings in pavucontrol but looks all fine. Is there something else for me to check if it's a config/driver error and rule out hardware issue. Thanks Frank

2 1