- Arch-general - lists.archlinux.org

Fw: ANN: arch-log: a tool for quickly checking package commit logs for Arch & AUR
by Matthew Sexton 22 Jul '23

22 Jul '23

Forwarded to list because my client did a dumb. ________________________________ From: Matthew Sexton <matthew(a)asylumtech.com> Sent: Sunday, July 16, 2023 7:45 PM To: René Neumann <lists(a)necoro.eu> Subject: Re: ANN: arch-log: a tool for quickly checking package commit logs for Arch & AUR Hello! I actually found this quite nifty and appreciate you creating it. I have no idea how often I'll actually use it, but your aur package has my vote. I can't seem to finish any of my pet projects. Go you! ________________________________ From: René Neumann <lists(a)necoro.eu> Sent: Sunday, July 16, 2023 2:49 PM To: arch-general(a)lists.archlinux.org <arch-general(a)lists.archlinux.org> Subject: Re: ANN: arch-log: a tool for quickly checking package commit logs for Arch & AUR Ah, I forgot the fourth point: I had fun writing it. Don't forget that the "I had an idea for a fun toy project" is what starts/drives most of our OSS ecosystem, including the start of Linux itself :) - René Am 16.07.23 um 20:41 schrieb René Neumann: > Am 16.07.23 um 18:14 schrieb Polarian: >> You can simply use git clone to clone the repository from the dumb >> http frontend, and then use git log to show the logs, I do not see why >> this needs to be wrapped with a script as it is already a simple >> process to do. > > First: I'd need the repo URL for cloning (mind that this is different > between AUR repos and Arch repos). So I'd need a script to automate it¹ > > Second: I don't want to have all the repos lying around, when all I need > is to see the log. > > Third: Nobody is forcing you to use the tool. I needed it for myself and > wanted to share it, in case anyone else fancies it. > > - René > > ¹ NB: I have such a script already, for when I actually intend to clone > a repo.

3 2

SSH Error in libcrypto
by Silvio Siefke 22 Jul '23

22 Jul '23

Hello, I try to connect remote maschines over SSH but with all servers I become message: Load key ".ssh/siefke_key": error in libcrypto siefke(a)192.168.2.250: Permission denied (publickey,gssapi-keyex,gssapi-with-mic). With -vvv OpenSSH_9.3p2, OpenSSL 3.1.1 30 May 2023 debug2: resolve_canonicalize: hostname 192.168.2.250 is address debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/home/siefke/.ssh/known_hosts' debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/home/siefke/.ssh/known_hosts2' debug3: ssh_connect_direct: entering debug1: Connecting to 192.168.2.250 [192.168.2.250] port 12500. debug3: set_sock_tos: set socket 3 IP_TOS 0x48 debug1: Connection established. debug1: identity file .ssh/siefke_key type -1 debug1: identity file .ssh/siefke_key-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.3 debug1: Remote protocol version 2.0, remote software version OpenSSH_8.4p1 Debian-5+deb11u1 debug1: compat_banner: match: OpenSSH_8.4p1 Debian-5+deb11u1 pat OpenSSH* compat 0x04000000 debug2: fd 3 setting O_NONBLOCK debug1: Authenticating to 192.168.2.250:12500 as 'siefke' debug3: put_host_port: [192.168.2.250]:12500 debug3: record_hostkey: found key type ED25519 in file /home/siefke/.ssh/known_hosts:1 debug3: load_hostkeys_file: loaded 1 keys from [192.168.2.250]:12500 debug1: load_hostkeys: fopen /home/siefke/.ssh/known_hosts2: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug3: order_hostkeyalgs: have matching best-preference key type ssh-ed25519-cert-v01(a)openssh.com, using HostkeyAlgorithms verbatim debug3: send packet: type 20 debug1: SSH2_MSG_KEXINIT sent debug3: receive packet: type 20 debug1: SSH2_MSG_KEXINIT received debug2: local client KEXINIT proposal debug2: KEX algorithms: sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: compression ctos: none,zlib(a)openssh.com,zlib debug2: compression stoc: none,zlib(a)openssh.com,zlib debug2: languages ctos: debug2: languages stoc: debug2: first_kex_follows 0 debug2: reserved 0 debug2: peer server KEXINIT proposal debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: compression ctos: none debug2: compression stoc: none debug2: languages ctos: debug2: languages stoc: debug2: first_kex_follows 0 debug2: reserved 0 debug1: kex: algorithm: curve25519-sha256 debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305(a)openssh.com MAC: <implicit> compression: none debug1: kex: client->server cipher: chacha20-poly1305(a)openssh.com MAC: <implicit> compression: none debug3: send packet: type 30 debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug3: receive packet: type 31 debug1: SSH2_MSG_KEX_ECDH_REPLY received debug1: Server host key: ssh-ed25519 SHA256:2L6kf42fJXVTes8cWAEHSSXeXVG/bvO1FjBO6kNOUPg debug3: put_host_port: [192.168.2.250]:12500 debug3: put_host_port: [192.168.2.250]:12500 debug3: record_hostkey: found key type ED25519 in file /home/siefke/.ssh/known_hosts:1 debug3: load_hostkeys_file: loaded 1 keys from [192.168.2.250]:12500 debug1: load_hostkeys: fopen /home/siefke/.ssh/known_hosts2: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: Host '[192.168.2.250]:12500' is known and matches the ED25519 host key. debug1: Found key in /home/siefke/.ssh/known_hosts:1 debug3: send packet: type 21 debug2: ssh_set_newkeys: mode 1 debug1: rekey out after 134217728 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug3: receive packet: type 21 debug1: SSH2_MSG_NEWKEYS received debug2: ssh_set_newkeys: mode 0 debug1: rekey in after 134217728 blocks debug3: ssh_get_authentication_socket_path: path '/run/user/1500/keyring/ssh' debug1: get_agent_identities: bound agent to hostkey debug1: get_agent_identities: ssh_fetch_identitylist: agent contains no identities debug1: Will attempt key: .ssh/siefke_key explicit debug2: pubkey_prepare: done debug3: send packet: type 5 debug3: receive packet: type 7 debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,sk-ssh-ed25519@openssh.com,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,webauthn-sk-ecdsa-sha2-nistp256@openssh.com> debug3: receive packet: type 6 debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug3: send packet: type 50 debug3: receive packet: type 51 debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic debug3: start over, passed a different list publickey,gssapi-keyex,gssapi-with-mic debug3: preferred publickey,keyboard-interactive,password debug3: authmethod_lookup publickey debug3: remaining preferred: keyboard-interactive,password debug3: authmethod_is_enabled publickey debug1: Next authentication method: publickey debug1: Trying private key: .ssh/siefke_key Load key ".ssh/siefke_key": error in libcrypto debug2: we did not send a packet, disable method debug1: No more authentication methods to try. siefke(a)192.168.2.250: Permission denied (publickey,gssapi-keyex,gssapi-with-mic). With mac it works, with pi in other way it works. I not understand what happen here. Thank you for help Silvio

3 3

Arch Linux installing.
by Source Code 19 Jul '23

19 Jul '23

Sorry, but I just wanna ask something, it looks like stupid question but I need to get an answer. Here, I have to point the sda2 with EFI, right? Not sd7, which will be empty for the new Arch LInux? I just wanna not make mistakes:) *Device Start End Sectors Size Type* /dev/sda1 2048 616447 614400 300M Windows recovery environment /dev/sda2 616448 821247 204800 100M EFI System /dev/sda3 821248 1083391 262144 128M Microsoft reserved /dev/sda4 1083392 362373119 361289728 172,3G Microsoft basic data /dev/sda5 362373120 812933119 450560000 214,8G Microsoft basic data /dev/sda6 812933120 836370431 23437312 11,2G Linux swap /dev/sda7 836370432 976771071 140400640 66,9G Linux filesystem

5 8

Re: Arch linux installing process
by Ralf Mardorf 18 Jul '23

18 Jul '23

On Tue, 2023-07-18 at 22:57 +0600, Source Code wrote: > But I use EFI and I don’t understand what I should write where … > [snip] > Arch wiki does not tell me this secret. Hi, please reply to the mailing list! I'm sorry, I don't understand your problem. I'm _not_ using legacy BIOS boot, my Intel's GPU doesn't allow this. Grub2 handles all the EFI things for me. I only added the path to the installed microcode to grub.cfg's initrd line. initrd /boot/intel-ucode.img /boot/initramfs-linux.img I can't comment on secure boot, since this is disabled on my machine. You cannot use one of the ways described by https://wiki.archlinux.org/title/microcode#Loading_microcode ? "1Loading microcode 1.1Microcode built in the initramfs 1.2Early loading 1.2.1Unified kernel images 1.2.2Initrd images 1.2.2.1Enabling early microcode loading in custom kernels 1.2.2.2GRUB 1.2.2.3systemd-boot 1.2.2.4EFISTUB 1.2.2.5rEFInd 1.2.2.5.1Manual boot stanzas 1.2.2.6Syslinux 1.2.2.7LILO 1.2.2.8Limine" Have you tested anything from this? Regards, Ralf

1 0

Re: Arch linux installing process
by Ralf Mardorf 18 Jul '23

18 Jul '23

On Tue, 2023-07-18 at 20:17 +0600, Source Code wrote: > Now I use cfdisk and I saw type of sda: Linux swap, > linux root x86-64 and Linux file system. And I wanna > know the difference between linux root x86-64 and Linux > file system. > Now I think to leave just Linux swap and Linux root x86-64. Hi, please reply to the mailing list. This is again quasi the same I already wrote before: https://wiki.archlinux.org/title/partitioning#UEFI/GPT_layout_example You need a "/boot or /efi" partition. You should use a "Linux swap" and you need a "Linux x86-64 root (/)". This root directory can use different file systems, such as ext4, but maybe you want a copy on write file system. https://wiki.archlinux.org/title/file_systems I'm sorry, but I don't know how to use cfdisk. If you don't want to use command line, I recommend to use a live media providing GParted. This isn't what I'm using: https://gparted.org/liveusb.php I'm using an USB stick with https://www.ventoy.net/en/index.html . If I need GParted on a live media, I just run e.g. a persistent Xubuntu or any other ISO copied to the Ventoy USB stick. Regards, Ralf

3 4

Arch linux installing process
by Source Code 18 Jul '23

18 Jul '23

I wanna ask you, that how many size I can choose for Linux x86-64 root and Linux file system?

3 2

Installing process
by Source Code 18 Jul '23

18 Jul '23

I have started to install Arch Linux and I reached to step partitions. How I can delete the partition where my Debian Linux is located? I see only 465 GB of my disk. And use archinstall for graphical installing. And there is the point of boot loader. There I can choose GRUB as a boot loader instead systemd-boot. If I choose GRUB it will be more be easily to do shim 3.2.2? For example, I can not to rename of my boot loader or not?

2 2

Secure_Boot
by Source Code 18 Jul '23

18 Jul '23

Hello! I wanted to ask: 1. The Arch Linux Wiki has a section 3.2 Using a signed boot loader. Can I skip the previous sections and skip subsection 3.2.1 PreLoader and go straight to section 3.2.2 Shim? 2. If I change the boot loader to grubx64.efi and then if I don't finish section 3.2.2, will everything fail? Nothing will load? And if I leave the boot loader (aka boot.efi, right?) and grubx64.efi, will it crash? 3. Section 3.2.2.1.2 shim with key has: $ openssl req -newkey rsa:4096 -nodes -keyout MOK.key -new -x509 -sha256 -days 3650 -subj "/CN=my Machine Owner Key/" -out MOK.crt $ openssl x509 -outform DER -in MOK.crt -out MOK.cer Should I write "/CN=my Machine Owner Key/" like this? Or do you need to write some sequence of characters? Tell me what to write? P.S. If I make a mistake with any item, then everything will fly for me and it will not be possible to recover?

6 8

ANN: arch-log: a tool for quickly checking package commit logs for Arch & AUR
by René Neumann 16 Jul '23

16 Jul '23

Hey everyone, I noted that, from time to time, I want to determine the latest upstream changes in a PKGBUILD, especially when only the pkgrel has changed (i.e. not just a version bump). As it involved remembering the web interfaces and hunt down the package in question, I got tired of it and wrote a small tool to accomplish this: arch-log. I post this here, so whoever finds this interesting/noteworthy can have a look. Git: https://github.com/Necoro/arch-log AUR: https://aur.archlinux.org/packages/arch-log Best, René

3 4

Install Arch Linux
by Source Code 14 Jul '23

14 Jul '23

Hi everyone! I am very closer than ever to install arch Linux and I have small doubts. Can you share with your experience to install arch Linux? I have read Arch wiki. And I saw a few decisions. What did you choose? As I understand disable the security boot is more simple. P.S. As I understand right you have signed your core for a long time, but now not? If it so, why?

2 1