- Arch-general - lists.archlinux.org

[arch-general] Done! Website move to 1st Archlinux Box
by David C. Rankin 27 Apr '09

27 Apr '09

Guys, Thanks for all of your help. My first Arch install and server config is almost 100% complete (some server apps still remain, but that's just install time) Archlinux works like a champ. It is a great, lightweight, full featured distribution. In case any other Arch user is looking to do a full apache2 install with SSL, PHP & MySQL support, the LAMP wiki page will get you going. http://wiki.archlinux.org/index.php/LAMP. PHP and MySQL support comes from nothing more than making sure the module include statements in /etc/httpd/conf/httpd.conf are active as detailed in the LAMP page. The only trick there is that for some reason the php object module isn't included in the default httpd.conf file so you need to add the following to the end of the LoadModule list: LoadModule php5_module modules/libphp5.so Secure http (https) support takes a little more. The simple part of SSL setup, as with PHP and MySQL, is just making sure the shared object module is loaded in etc/httpd/conf/httpd.conf: LoadModule ssl_module modules/mod_ssl.so Usually the more challenging part of secure http setup is generating the server keys and certificates that apache will use to offer ssl support. To make this easier, I have created a script to automate this process and install the server key, certificate and signing request under /etc/httpd/certs. You can grab a copy of the script at: http://archangel.3111skyline.com/download/Archlinux/apache2/apache-ssl-Arch (don't panic if it is temporarily not available as I am still moving servers around and will normally have it back up in 20 minutes or so) After download, if you want to generate your server keys automatically **edit** the script variables: COUNTRY=US STATE=Texas LOCAL=Nacogdoches ON="Rankin Law Firm, PLLC" OU=Attorneys EMAIL%3Dhelp(a)3111skyline.com or you will end up with a server certificate that contains my defaults. Once you make the changes, just run the script as root like: apache-ssl-Arch <CN> where <CN> is just the 'Common Name' (usually your FQDN for your server). If you omit the CN, you will be prompted. If you just want to gen the keys, request and cetrificate manually, you can always just cut and paste the commands from the script. In addition to the script, I also put my httpd.conf and httpd-ssl.conf (both without comments) on the site if anybody wants to reference them for the changes required: http://archangel.3111skyline.com/download/Archlinux/apache2/httpd.conf http://archangel.3111skyline.com/download/Archlinux/apache2/httpd-ssl.conf Lastly, I spun up what I think is a cool Archlinux footer image based on one of the images in /usr/share/arch-artwork/. If you like it -- take it. http://archangel.3111skyline.com/download/Archlinux/apache2/ArchFooter-smal… That's it, thanks to all for helping me learn Arch! (I guess that should be 'learn enough to get running') We all know, the learning is never really done;-) -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com

4 6

[arch-general] libsoup 2.26.0-1 dependencies in [testing]
by JM 26 Apr '09

26 Apr '09

Hello, I noticed that libsoup in [testing] depends on gconf, is that really necessary? Libsoup is a dependency for some desktop-agnostic applications such as Midori (through its dependency on libwebkit) or hardinfo (currently in AUR). Regards, JM

7 15

Re: [arch-general] [arch-dev-public] [arch-commits] Commit in htdig/trunk (PKGBUILD)
by Abhishek Dasgupta 25 Apr '09

25 Apr '09

2009/4/25 Pierre Schmitz <pierre(a)archlinux.de>: > Am Samstag, 25. April 2009 17:36:19 schrieb Dan McGee: >> Installing into srv is no different than installing into /home/, >> IMO. It might be worse as it presents a relatively big security risk >> for those that do run public facing services, and suddenly a new >> script has been made available for web site users to run. > > If we agree to this we should add such a rule to namcap. > Removing 'srv/' in Namcap/directoryname.py will make namcap issue a warning about a file in a non-standard directory. -- Abhishek

1 0

Re: [arch-general] [arch-dev-public] [arch-commits] Commit in htdig/trunk (PKGBUILD)
by Gerardo Exequiel Pozzi 25 Apr '09

25 Apr '09

Pierre Schmitz wrote: > Am Samstag, 25. April 2009 17:36:19 schrieb Dan McGee: > >> Installing into srv is no different than installing into /home/, >> IMO. It might be worse as it presents a relatively big security risk >> for those that do run public facing services, and suddenly a new >> script has been made available for web site users to run. >> > > If we agree to this we should add such a rule to namcap. > > Then this packages from [extra] should be fixed ? (install files under /srv/) xsp 2.4-1 Daniel Isenmann deluge(*) 1.1.6-3 Hugo Doria mythweb 0.21-1 Juergen Hoetzel squirrelmail 1.4.17-3 Unknown Packager (install files under /home) mailman 2.1.11-2 Allan McRae hylafax 4.4.4-1 Arch Linux slimserver v6.5.4-2 Tom Killian (*) does not matter much, it only put a directory inside /srv And from [community] that install files on /srv apache13,bugzilla, cacti, cchost, dokuwiki, drupal, dspam, flyspray, gnump3d, jabwebhist, mediawiki, nginx, phpldapadmin, phpmyadmin, phppgadmin, pnews, punbb, roundcubemail, web-news (all from Sergej Pupykin) and cherokee (from Evangelos Foutras) (and /home) sqlitemanager 1.2.0-2 Andrea Scarpino Grüße! -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 0

[arch-general] libnotify as optdepend in thunar?
by hollunder＠gmx.at 25 Apr '09

25 Apr '09

Hi there, today when I tried to unmount a thumbdrive in thunar I got an error message about missing libnotify. It worked after I installed it. Did I do something wrong or is it just missing in the optdepends array? Regards, Philipp

3 6

[arch-general] libnl- 1.1-1 -build error
by Baho Utot 25 Apr '09

25 Apr '09

This is the error when built with gcc-4.3 MAKE libnl.so.1.1 CC addr.c In file included from addr.c:28: ../include/netlink-local.h: In function '__str2type': ../include/netlink-local.h:218: error: 'ULONG_MAX' undeclared (first use in this function) ../include/netlink-local.h:218: error: (Each undeclared identifier is reported only once ../include/netlink-local.h:218: error: for each function it appears in.) ../include/netlink-local.h: In function '__list_str2type': ../include/netlink-local.h:239: error: 'ULONG_MAX' undeclared (first use in this function) make[2]: *** [addr.o] Error 1 make[1]: *** [all] Error 2 make: *** [all] Error 2 ==> ERROR: Build Failed. Aborting... Here is a fix: gcc-4.3.patch follows --- include/netlink-local.h~ 2008-01-14 10:48:45.000000000 -0500 +++ include/netlink-local.h 2009-04-25 08:16:28.981393890 -0400 @@ -27,6 +27,8 @@ #include <inttypes.h> #include <assert.h> +#include <limits.h> + #include <arpa/inet.h> #include <netdb.h> PKGBUILD changes: # $Id: PKGBUILD 930 2008-04-24 22:14:40Z jgc $ # Maintainer: Jan de Groot <jgc(a)archlinux.org> # Contributor: William Rea <sillywilly(a)gmail.com> pkgname=libnl pkgver=1.1 pkgrel=1 pkgdesc="Library for applications dealing with netlink sockets" arch=('i686' 'x86_64') url="http://people.suug.ch/~tgr/libnl" license=('GPL') depends=('glibc') source=(http://people.suug.ch/~tgr/${pkgname}/files/${pkgname}-${pkgver}.tar.gz gcc-4.3.patch) build() { cd ${startdir}/src/libnl-${pkgver} patch -Np0 -i ../gcc-4.3.patch || return 1 ./configure --prefix=/usr || return 1 make || return 1 make DESTDIR=${startdir}/pkg install || return 1 } md5sums=('ae970ccd9144e132b68664f98e7ceeb1' '6cb6edc341e6ffc3c50bd8fcd90e5c89')

2 2

[arch-general] "pkgdyn" a set of scripts for analysis of ELF deps in pkgs.
by Gerardo Exequiel Pozzi 25 Apr '09

25 Apr '09

Hi, This is a set of draft scripts that I use to find/extract some data of ELF files from packages. For example: * Find all packages that needed inexistent shared objects because a soname bump in libraries. * Generate a report for all packages per repo that in case of soname bump , needs to be rebuild. * Find ELF files that are outside the allowed paths (for example ELF in /usr/share) * Find RPATH in packages, with a simple "awk" can generate a report etc. * Other task with "temporary data generated", but there are no scripts at this time, are only "at command line runtime". Can be easily construct with awk, of your preferer lang. It use files in analysis so, if a ELF needed a "soname" that are symlink, this are reported (tho only case here are courier-maildrop, just ignore it) http://archlinux.djgera.com.ar/pkgdyn/ Sample data and generated DB by "dynup.bash" is uploaded, extract in "pkgdyn" directory. The dyunp.bash can make DB from empty DB, or update the DB, deleting old entries and inserting news. Is in "public domain": so use it, modify it, copy it, no problem. Sugestions, improvements, dudes, write me. PS1: Exception here: (this report as missing, but is a "optdepend in community") extra/gnome-speech-0.4.25-1:NEEDED libespeak.so.1 PS2: All missing deps I already reported and many of [community] have been fixed. Congrats TU! Cheers, -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

2 2

[arch-general] Handling optional dependencies with pacman?
by David C. Rankin 25 Apr '09

25 Apr '09

Listmates, Is there a better way to handle optional dependencies than just manually creating a list and checking it against the current installed packages to see if you need to install them before issuing the sync command and having some of the packages reinstalled? Basically, after installing packages (most recently openoffice and gimp), I just cut-and-paste the names into a for loop and check the names against the installed packages with the query option to eliminate the packages that are already installed. For openoffice and gimp, the optional dependencies were: Targets (9): libwpd-0.8.14-1 icu-4.0-2 hsqldb-java-1.8.0.10-1 openoffice-base-3.0.1-1 babl-0.0.22-1 gegl-0.0.22-1 gimp-2.6.6-1 gimp-refocus-0.9.0-2 gimp-ufraw-0.15-2 Total Download Size: 172.88 MB Total Installed Size: 422.08 MB Proceed with installation? [Y/n] :: Retrieving packages from extra... <snip> Optional dependencies for openoffice-base java-runtime: adds java support libcups: adds printing support gconf: adds additional gnome support nss: adds support for signed files/macros pstoedit: translates PostScript and PDF graphics into other vector formats <snip> Optional dependencies for gimp gutenprint: for sophisticated printing only as gimp has built-in cups print support libwebkit: for the help browser poppler-glib: for pdf support hal: for Linux input event controller module alsa-lib: for MIDI event controller module <snip> Optional dependencies for gimp-ufraw gimp: to use the gimp import plugin for raw images cinepaint: to use the cinepaint import plugin for raw images So I then do: for i in gutenprint libwebkit poppler-glib alsa-lib cinepaint java-runtime libcups gconf nss pstoedit; do pacman -Q $i; done Which tells me: error: package "gutenprint" not found error: package "libwebkit" not found error: package "poppler-glib" not found alsa-lib 1.0.19-1 error: package "cinepaint" not found error: package "java-runtime" not found libcups 1.3.10-1 gconf 2.26.0-3 error: package "nss" not found error: package "pstoedit" not found So I then know I need to install: gutenprint libwebkit poppler-glib cinepaint java-runtime nss pstoedit. That brings up a couple of questions. First, for those packages I have reinstalled I notice "Total Download Size: 0.0 MB", so I know I'm not re-downloading, but is the package actually "reinstalling" where the config files with end up with x.pacnew packages?? Next, is there any wrapper for pacman that will catch the output in a temporary file and then grep for "Optional dependencies" and then do something like: while read line; do tmparray[$count]=(${line%%:*}) done < tmpfile And then do something useful with tmparray like compare it against the installed packages and maybe write it out in something like ~/tmp/pacman/optDeps$(date '+%Y%m%d')? Just checking to see if there is an easy way to avoid a few cut and pastes. -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com

6 7

[arch-general] kdemod3-complete install - many duplicates in kde menu
by David C. Rankin 24 Apr '09

24 Apr '09

Listmates, After installing kde3 with "pacman -S kdemod3-complete", I was rearranging and ordering the kde menu with 'kmenuedit' and ran across a number of duplicate entries created during the install. The following isn't a complete list, but probably catches 80-90% of the duplicate entries. The following were each duplicated one (or more) times by the installer in various places within the kde menu: KPalmDOC KPilot KNotes KArm KAlarm Kandy Xgnokii KNotes Dictionary KTnef Korn Kontact KDE Groupware Wizard I don't know who does kdemod3, but if it will help, I have gone through and removed most of the duplicates and sorted the kde menu into a few additional folders to get rid of the ton of files that were under 'utilities' and I have also moved all the packages in the catchall 'More Applications' and 'Lost & Found' folders to new homes in the menu. I have put a copy of the new ~/.config/menus/applications-kmenuedit.menu on the web site if anybody wants to grab pieces from it or compare it to the original. http://www.3111skyline.com/download/ArchLinux/fixes/menus/applications-kmen… HTHs, if not, just hit delete... No troll comments necessary or appreciated. Thanks. -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com

5 6

[arch-general] Problem installing FreeNX from extra, can anyone else confirm?
by David C. Rankin 24 Apr '09

24 Apr '09

Listmates, There was a minor problem installing FreeNX and its dependencies from extra that resulted in the warning: "cp: cannot stat `/usr/lib/cups/backend/ipp': No such file or directory" In context the error occurred here: Targets (5): nx-common-3.3.0-2 nxserver-3.3.0-5 gnu-netcat-0.7.1-2 expect-5.44.1.10-1 freenx-0.7.3-3 Total Download Size: 3.61 MB Total Installed Size: 9.30 MB Proceed with installation? [Y/n] <snip install stuff> Generating keys ... passwd: unlocking the user would result in a passwordless account. You should set a password with usermod -p to unlock this user account. cp: cannot stat `/usr/lib/cups/backend/ipp': No such file or directory I don't know if this is a significant issue or not, I guess I'll find out, but I thought I would put the out to the list to (1) see if anyone else could confirm this; and (2) ask anyone familiar with the FreeNX package if this is anything to worry about. Thanks -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com

2 1