May 2016 - Arch-projects - lists.archlinux.org

[arch-projects] [devtools] [GIT] The official devtools repository branch master updated. 20151129-5-gf36c45e
by svenstaro＠archlinux.org 27 May '16

27 May '16

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official devtools repository". The branch, master has been updated via f36c45e0c66f0d83dc30f899676c094d925bff24 (commit) from 7fc22b9abaf52a8326b93b38578fd25457f9c253 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit f36c45e0c66f0d83dc30f899676c094d925bff24 Author: Sven-Hendrik Haase <svenstaro(a)gmail.com> Date: Fri May 27 21:11:46 2016 +0200 Makefile: change version to 20160527 ----------------------------------------------------------------------- Summary of changes: Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) hooks/post-receive -- The official devtools repository

1 0

[arch-projects] [devtools] [GIT] The official devtools repository tag 20160527 created. 20151129-4-g7fc22b9
by svenstaro＠archlinux.org 27 May '16

27 May '16

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official devtools repository". The tag, 20160527 has been created at 7fc22b9abaf52a8326b93b38578fd25457f9c253 (commit) - Log ----------------------------------------------------------------- commit 7fc22b9abaf52a8326b93b38578fd25457f9c253 Author: Sven-Hendrik Haase <svenstaro(a)gmail.com> Date: Fri May 27 21:02:46 2016 +0200 Use repos.archlinux.org everywhere instead of hostname based domains This makes it a lot easier to swap out the host that actually serves the repos in the future. ----------------------------------------------------------------------- hooks/post-receive -- The official devtools repository

1 0

[arch-projects] [devtools] [GIT] The official devtools repository branch master updated. 20151129-4-g7fc22b9
by svenstaro＠archlinux.org 27 May '16

27 May '16

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official devtools repository". The branch, master has been updated via 7fc22b9abaf52a8326b93b38578fd25457f9c253 (commit) from f85fc32d78414c25f82e0b13e3d99f15ab787b56 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 7fc22b9abaf52a8326b93b38578fd25457f9c253 Author: Sven-Hendrik Haase <svenstaro(a)gmail.com> Date: Fri May 27 21:02:46 2016 +0200 Use repos.archlinux.org everywhere instead of hostname based domains This makes it a lot easier to swap out the host that actually serves the repos in the future. ----------------------------------------------------------------------- Summary of changes: Makefile | 3 ++- archco.in | 4 ++-- commitpkg.in | 2 +- crossrepomove.in | 2 +- rebuildpkgs.in | 2 +- 5 files changed, 7 insertions(+), 6 deletions(-) hooks/post-receive -- The official devtools repository

1 0

[arch-projects] [namcap] [PATCH] Search RPATH for shared libraries dependencies
by Nicola Squartini 20 May '16

20 May '16

If an ELF file specifies a list of RPATHs, for each shared library dependency search each RPATH and see if the package contains it in that location. FS#43239 <https://bugs.archlinux.org/task/43239?string=namcap&project=1&type[0]=&sev[…> Signed-off-by: Nicola Squartini <tensor5(a)gmail.com> --- Namcap/rules/sodepends.py | 33 ++++++++++++++++++++++++--------- 1 file changed, 24 insertions(+), 9 deletions(-) diff --git a/Namcap/rules/sodepends.py b/Namcap/rules/sodepends.py index 92826af..527f511 100644 --- a/Namcap/rules/sodepends.py +++ b/Namcap/rules/sodepends.py @@ -28,6 +28,7 @@ import subprocess import tempfile import Namcap.package from Namcap.ruleclass import * +from Namcap.rules.rpath import get_rpaths libcache = {'i686': {}, 'x86-64': {}} @@ -43,7 +44,7 @@ def figurebitsize(line): else: return 'i686' -def scanlibs(fileobj, filename, sharedlibs): +def scanlibs(fileobj, filename, sharedlibs, tarlist): """ Run "readelf -d" on a file-like object (e.g. a TarFile) @@ -52,6 +53,7 @@ def scanlibs(fileobj, filename, sharedlibs): sharedlibs: a dictionary { library => set(ELF files using that library) } """ shared = re.compile('Shared library: \[(.*)\]') + origin = re.compile('^\$ORIGIN|^\$\{ORIGIN\}') # test magic bytes magic = fileobj.read(4) @@ -71,18 +73,31 @@ def scanlibs(fileobj, filename, sharedlibs): var = p.communicate() assert(p.returncode == 0) for j in var[0].decode('ascii').splitlines(): + found = False n = shared.search(j) # Is this a Shared library: line? if n != None: # Find out its architecture architecture = figurebitsize(j) - try: - libpath = os.path.abspath( - libcache[architecture][n.group(1)])[1:] - sharedlibs.setdefault(libpath, set()).add(filename) - except KeyError: - # We didn't know about the library, so add it for fail later - sharedlibs.setdefault(n.group(1), set()).add(filename) + # If file has RPATH, check if shared library is already packaged + for rpath in get_rpaths(tmp.name): + # Expand $ORIGIN + realrpath = origin.sub(os.path.dirname(filename), rpath) + libpath = os.path.normpath(os.path.join(realrpath, n.group(1))) + # Remove possible leading '/' + libpath = re.sub('^/', '', libpath) + if libpath in tarlist: + sharedlibs.setdefault(libpath, set()).add(filename) + found = True + break + if not found: + try: + libpath = os.path.abspath( + libcache[architecture][n.group(1)])[1:] + sharedlibs.setdefault(libpath, set()).add(filename) + except KeyError: + # We didn't know about the library, so add it for fail later + sharedlibs.setdefault(n.group(1), set()).add(filename) finally: os.unlink(tmp.name) @@ -157,7 +172,7 @@ class SharedLibsRule(TarballRule): if not entry.isfile(): continue f = tar.extractfile(entry) - scanlibs(f, entry.name, liblist) + scanlibs(f, entry.name, liblist, tar.getnames()) f.close() # Ldd all the files and find all the link and script dependencies -- 2.8.2

1 0

[arch-projects] [devtools] [GIT] The official devtools repository branch master updated. 20151129-4-g7fe0f68
by pierre＠archlinux.org 07 May '16

07 May '16

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official devtools repository". The branch, master has been updated via 7fe0f688566fe2bf637d0503056cf04a6d4a5c87 (commit) from f85fc32d78414c25f82e0b13e3d99f15ab787b56 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 7fe0f688566fe2bf637d0503056cf04a6d4a5c87 Author: Pierre Schmitz <pierre(a)archlinux.de> Date: Sat May 7 10:53:48 2016 +0200 Set target vendor to pc for usge with gcc 6 ----------------------------------------------------------------------- Summary of changes: makepkg-x86_64.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) hooks/post-receive -- The official devtools repository

1 0

[arch-projects] [archweb][PATCH] releng: Add netboot ipxe environment to archweb.
by Thomas Bächler 05 May '16

05 May '16

--- Now that the March and May ISOs have the required initramfs signatures (April version is broken, sadly), I think it is time to deploy the new netboot environment to the main archweb site. This patch does not add a website and compatible IPXE images yet, but only supplies the correct ipxe configuration. Once this patch is live, I will provide test images and start working on instructions for the website. Highlights of this new feature: * Uses release and mirror data from archweb * Comfortable configuration of version, architecture, mirror and boot options via ipxe menu. * Complete signature verification: With the proper ipxe image, the signature of the kernel and initramfs files is verified. Then the kernel is booted and archiso verifies the signature of the squashfs image. releng/urls.py | 5 ++ releng/views.py | 21 +++++- templates/releng/archlinux.ipxe | 157 ++++++++++++++++++++++++++++++++++++++++ 3 files changed, 182 insertions(+), 1 deletion(-) create mode 100644 templates/releng/archlinux.ipxe diff --git a/releng/urls.py b/releng/urls.py index ca76eb2..0e87de4 100644 --- a/releng/urls.py +++ b/releng/urls.py @@ -22,9 +22,14 @@ 'release_torrent', {}, 'releng-release-torrent'), ) +netboot_patterns = patterns('releng.views', + (r'^archlinux\.ipxe$', 'netboot_config', {}, 'releng-netboot-config') +) + urlpatterns = patterns('', (r'^feedback/', include(feedback_patterns)), (r'^releases/', include(releases_patterns)), + (r'^netboot/', include(netboot_patterns)), ) # vim: set ts=4 sw=4 et: diff --git a/releng/views.py b/releng/views.py index dbb65c2..7db469c 100644 --- a/releng/views.py +++ b/releng/views.py @@ -13,7 +13,7 @@ from .models import (Architecture, BootType, Bootloader, ClockChoice, Filesystem, HardwareType, InstallType, Iso, IsoType, Module, Source, Test, Release) - +from mirrors.models import (Mirror, MirrorUrl, MirrorProtocol) def standard_field(model, empty_label=None, help_text=None, required=True): return forms.ModelChoiceField(queryset=model.objects.all(), @@ -280,4 +280,23 @@ def releases_json(request): response = HttpResponse(to_json, content_type='application/json') return response +def netboot_config(request): + release_qs = Release.objects.filter(available=True).order_by('-release_date') + releases = [ release.version for release in release_qs ] + mirrorurls = MirrorUrl.objects.filter(protocol__protocol='http', + active=True, + mirror__public=True, + mirror__active=True, + mirror__isos=True) + mirrorurls = sorted( mirrorurls, + key=lambda x: x.mirror.name) + mirrorurls = sorted( mirrorurls, + key=lambda x: x.country.name) + context = { + 'archs': [ 'i686', 'x86_64' ], + 'releases': releases, + 'mirrorurls': mirrorurls, + } + return render(request, "releng/archlinux.ipxe", context, content_type='text/plain') + # vim: set ts=4 sw=4 et: diff --git a/templates/releng/archlinux.ipxe b/templates/releng/archlinux.ipxe new file mode 100644 index 0000000..87f9c83 --- /dev/null +++ b/templates/releng/archlinux.ipxe @@ -0,0 +1,157 @@ +#!ipxe +{% regroup mirrorurls by country as mirrors_by_country %} + +# Figure out if client is 64-bit capable +cpuid --ext 29 && set cpuarch x86_64 || set cpuarch i686 + +# allow only trusted images +imgtrust + +# initial options +set bootarch ${cpuarch} +set release {{ releases.0 }} +set mirrorurl +set extrabootoptions ip=dhcp +set countrycode + +:main +menu Arch Linux Netboot +item --gap Settings +item set_architecture Architecture: ${bootarch} +item set_release Release: ${release} +isset ${mirrorurl} && item set_mirror Mirror: ${mirrorurl} || item set_mirror Choose a mirror +item set_options Boot options: ${extrabootoptions} +item +isset ${mirrorurl} && item boot Boot Arch Linux || item --gap Boot Arch Linux +item shell Drop to iPXE shell +item reboot Reboot +item exit Exit iPXE +isset ${mirrorurl} && choose --default set_options selected || choose --default set_mirror selected || goto shell +goto ${selected} || goto main + +:shell +echo Type 'exit' to get the back to the menu +shell +goto main + +:reboot +reboot + +:exit +exit + +:set_architecture +menu Arch Linux Netboot: Select Architecture +item back back +item +item --gap Available architectures: +iseq ${cpuarch} x86_64 && item x86_64 x64_64 || +item i686 i686 +choose selected || goto main +iseq ${selected} back && goto main || +set bootarch ${selected} +goto main + +:set_release +menu Arch Linux Netboot: Select Release +item back back +item +item --gap Available releases: +{% for release in releases %}item {{ release }} {{ release }} +{% endfor %} +choose selected || goto main +iseq ${selected} back && goto main || +set release ${selected} +goto main + +:set_mirror +goto select_mirror_country + +:select_mirror_country +menu Arch Linux Netboot: Select Mirror +item back back +item +item --gap Custom Configuration: +item custom Enter mirror URL +item +item --gap Select Mirror By Country: +{% for mirrorgroup in mirrors_by_country %} +{% if mirrorgroup.grouper == '' %} +item 00 Global +{% else %} +item {{ mirrorgroup.grouper }} {{ mirrorgroup.grouper.name }} +{% endif %} +{% endfor %} +isset ${countrycode} && choose --default ${countrycode} selected || choose selected || goto main +iseq ${selected} back && goto main || +iseq ${selected} custom && goto enter_mirror_url || +set countrycode ${selected} +goto select_mirror_url + +:enter_mirror_url +set countrycode +echo Enter the mirror URL including the trailing slash. +echo Example: http://some.host/archlinux/ +echo +echo -n Mirror URL: ${} && read mirrorurl || goto select_mirror_country +goto main + +:select_mirror_url +goto select_mirror_url_${countrycode} || goto select_mirror_country + +{% for mirrorgroup in mirrors_by_country %} +{% if mirrorgroup.grouper == '' %} +:select_mirror_url_00 +set countryname Global +{% else %} +:select_mirror_url_{{ mirrorgroup.grouper }} +set countryname {{ mirrorgroup.grouper.name }} +{% endif %} +menu Arch Linux Netboot: Select Mirror +item back back +item +item --gap Available mirrors in ${countryname} +{% for mirror in mirrorgroup.list %}item {{ mirror.url }} {{ mirror.mirror.name }} +{% endfor %} +choose selected || goto select_mirror_country +iseq ${selected} back && goto select_mirror_country || +set mirrorurl ${selected} +goto main +{% endfor %} + +:set_options +echo -n Boot options: ${} && read extrabootoptions || +goto main + +:boot +echo Booting Arch Linux ${bootarch} ${release} from ${mirrorurl} +echo +kernel ${mirrorurl}iso/${release}/arch/boot/${bootarch}/vmlinuz || goto failed_download +imgverify vmlinuz ${mirrorurl}iso/${release}/arch/boot/${bootarch}/vmlinuz.ipxe.sig || goto failed_verify +initrd ${mirrorurl}iso/${release}/arch/boot/intel_ucode.img || goto failed_download +imgverify intel_ucode.img ${mirrorurl}iso/${release}/arch/boot/intel_ucode.img.ipxe.sig || goto failed_verify +initrd ${mirrorurl}iso/${release}/arch/boot/${bootarch}/archiso.img || goto failed_download +imgverify archiso.img ${mirrorurl}iso/${release}/arch/boot/${bootarch}/archiso.img.ipxe.sig || goto failed_verify +imgargs vmlinuz initrd=intel_ucode.img initrd=archiso.img archiso_http_srv=${mirrorurl}iso/${release}/ archisobasedir=arch verify=y ${extrabootoptions} +boot || goto failed_boot + +:failed_download +echo +echo Failed to download a file. +goto failed + +:failed_verify +echo +echo Failed to verify a file. +goto failed + +:failed_boot +echo +echo Boot failed. +goto failed + +:failed +echo Press a key to return to the menu. +prompt +imgfree +goto main -- 2.8.0

1 0

[arch-projects] [devtools] [PATCH 0/2] makechrootpkg: Allow signing packages inside chroot
by Patrick Burroughs (Celti) 01 May '16

01 May '16

This pair of patches works to allow makepkg to sign packages inside makechrootpkg; something that while perhaps not useful for the Arch packaging toolchain itself, is immensely helpful to getting all of us unofficial packagers in the community doing both signed packages and clean builds. The first patch adds an option to makechrootpkg that translates into --setenv on systemd-nspawn; the second passes necessary variables through sudo over to makepkg and thus to gpg. To make it all work, call makechrootpkg (or the appropriate archbuild alias) with the following arguments: -d "$HOME/.gnupg/S.gpg-agent:/build/.gnupg/S.gpg-agent" -e "DISPLAY=$DISPLAY" -e "GPG_TTY=$(tty)" This will pass the agent socket into the chroot, tell gpg where to tell the agent to start the pinentry, and works quite well both in X and on the terminal. --- Patrick Burroughs (Celti) (2): allow passing --setenv to nspawn let sudo pass DISPLAY and GPG_TTY to builduser makechrootpkg.in | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) -- 2.8.2

1 2