June 2021 - Aur-dev - lists.archlinux.org

Mailing List Address Update
by Kevin Morris 26 Jun '21

26 Jun '21

Hi aur-dev, The mailing list has undergone a specific modification in which <list>@archlinux.org no longer deals with or redirects to <list>@lists.archlinux.org. At this point, the newly required address for the aur-dev mailing list is: aur-dev(a)lists.archlinux.org Thank you all for the hard work you do and contributing to AUR for the benefit of the community! Regards, Kevin Morris kevr @ Libera -- Kevin Morris Software Developer Identities: - kevr @ Libera

1 0

Complete Docker Implementation
by Kevin Morris 25 Jun '21

25 Jun '21

Hello aur-dev, Some new commits have been merged into the `pu` branch which implement the majority of the codebase in Docker services. First, build the `aurweb:latest` Docker image: $ docker build --tag aurweb:latest . Once that's built, you can now use a myriad of `docker-compose` services: $ docker-compose up mariadb ... Host mariadb. Accessible on localhost:13306, user: aur, pass: aur, databases: aurweb, aurweb_test. $ docker-compose up git ... Setup aur.git and host an aurweb sshd Accessible on localhost:2222 $ docker-compose up nginx ... Host PHP and FastAPI on separate ports. This service depends on the `ca` service, which generates a self signed CA certificate and moves it into the mounted $AURWEB/cache volume with the name `ca.root.pem`. Users can import this into their ca-certificates or web browser. This CA root certificate will persist until it is deleted from ./cache. Accessible on https://localhost:8443 (PHP) and https://localhost:8444 (FastAPI). $ docker-compose up test ... Run comprehensive tests (sharness, pytest-mysql, pytest-sqlite). $ docker-compose up sharness ... Run sharness tests. $ docker-compose up pytest-sqlite ... Run pytests using SQLite. Note: This service as well as *-mysql produce a ./cache/.coverage file which can be used on the host by running `./util/fix-coverage ./cache/.coverage` from aurweb's root directory. $ docker-compose up pytest-mysql ... Run pytests using MySQL. A complete list of Docker services: - ca: Certificate Authority - mariadb - git - cgit - php-fpm - fastapi - nginx - sharness - pytest-mysql - pytest-sqlite - test A list of Docker volumes: - `./cache/`: Mounted volume data cache directory. - Hosts `ca.root.pem`, `localhost.{key,cert}.pem`. - `./logs/`: Various logs from services in docker. Any improvements are welcome. Thanks for working on aurweb with us! Regards, Kevin Morris kevr @ Libera -- Kevin Morris Software Developer Identities: - kevr @ Libera

3 3

Questions with setting up aurweb instance
by Hunter Wittenborn 24 Jun '21

24 Jun '21

Hi, I'm in the middle of setting up an aurweb instance, but I'm having a few issues getting it set up: First - no mail is getting sent for some reason. I'm fairly certain my email config in /etc/aurweb/config is set properly, as changing it also didn't yield any results. Is the `sendmail` option supposed to be set? It was empty, and I was thinking it might've been causing issues, but I wasn't sure what to do with it. Second - how do I create Trusted Users? After signing up (without being able to get the emails, so I'm stick), I'm seeing that I'm a normal, registered user, but how would I go about making myself a Trusted User? Anything I can try for either? --- *Hunter Wittenborn* hunter(a)hunterwittenborn.com

3 9

[PATCH aurweb 1/2] Source valid ssh prefixes from config
by Steven Guikal 10 Jun '21

10 Jun '21

--- I'm not versed in PHP and this hasn't been tested. web/lib/acctfuncs.inc.php | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/web/lib/acctfuncs.inc.php b/web/lib/acctfuncs.inc.php index efc08331..0d021f99 100644 --- a/web/lib/acctfuncs.inc.php +++ b/web/lib/acctfuncs.inc.php @@ -875,11 +875,7 @@ function valid_pgp_fingerprint($fingerprint) { * @return bool True if the SSH public key is valid, otherwise false */ function valid_ssh_pubkey($pubkey) { - $valid_prefixes = array( - "ssh-rsa", "ssh-dss", "ecdsa-sha2-nistp256", - "ecdsa-sha2-nistp384", "ecdsa-sha2-nistp521", "ssh-ed25519", - "sk-ssh-ecdsa(a)openssh.com", "sk-ssh-ed25519(a)openssh.com" - ); + $valid_prefixes = explode(' ', config_get('auth', 'valid-keytypes')); $has_valid_prefix = false; foreach ($valid_prefixes as $prefix) { -- 2.32.0

2 2

[PATCH aurweb v2] Source valid ssh prefixes from config
by Steven Guikal 10 Jun '21

10 Jun '21

--- Old patch didn't apply because it had some local changes. web/lib/acctfuncs.inc.php | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/web/lib/acctfuncs.inc.php b/web/lib/acctfuncs.inc.php index df016c6d..0d021f99 100644 --- a/web/lib/acctfuncs.inc.php +++ b/web/lib/acctfuncs.inc.php @@ -875,10 +875,7 @@ function valid_pgp_fingerprint($fingerprint) { * @return bool True if the SSH public key is valid, otherwise false */ function valid_ssh_pubkey($pubkey) { - $valid_prefixes = array( - "ssh-rsa", "ssh-dss", "ecdsa-sha2-nistp256", - "ecdsa-sha2-nistp384", "ecdsa-sha2-nistp521", "ssh-ed25519" - ); + $valid_prefixes = explode(' ', config_get('auth', 'valid-keytypes')); $has_valid_prefix = false; foreach ($valid_prefixes as $prefix) { -- 2.32.0

2 1

[PATCH aurweb] Allow FIDO/U2F SSH security keys
by Steven Guikal 10 Jun '21

10 Jun '21

These were added in OpenSSH bersion 8.2[1]. Fixes #36 [1]: https://www.openssh.com/txt/release-8.2 --- Just a heads up that I haven't tested this and aren't sure if the keys are used anywhere else that may be affected (though a grep makes me think they aren't). web/lib/acctfuncs.inc.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/web/lib/acctfuncs.inc.php b/web/lib/acctfuncs.inc.php index df016c6d..efc08331 100644 --- a/web/lib/acctfuncs.inc.php +++ b/web/lib/acctfuncs.inc.php @@ -877,7 +877,8 @@ function valid_pgp_fingerprint($fingerprint) { function valid_ssh_pubkey($pubkey) { $valid_prefixes = array( "ssh-rsa", "ssh-dss", "ecdsa-sha2-nistp256", - "ecdsa-sha2-nistp384", "ecdsa-sha2-nistp521", "ssh-ed25519" + "ecdsa-sha2-nistp384", "ecdsa-sha2-nistp521", "ssh-ed25519", + "sk-ssh-ecdsa(a)openssh.com", "sk-ssh-ed25519(a)openssh.com" ); $has_valid_prefix = false; -- 2.32.0

2 1

Notification: pu history rewritten
by Kevin Morris 06 Jun '21

06 Jun '21

aurweb's `pu` branch was rewritten to resolve a merge conflict during a rebase on `master` on 06-05-2021 (PDT). If you have an existing clone of aurweb, run the following to checkout properly to updated `pu`: ``` $ git checkout pu $ git fetch origin pu $ git reset --hard origin/pu ``` This will reset your local `pu` branch state to what we have at archlinux/aurweb. -- Kevin Morris

1 0