March 2015 - Aur-general - lists.archlinux.org

[aur-general] ttf-google-webfonts{,-distilled,-git,-hg} mess
by Jason St. John 19 Jun '19

19 Jun '19

I am the current maintainer of the AUR package ttf-google-webfonts-hg[4], and I'm bothered by the mess of various packages there are for Google's Web Fonts project. It's not at all KISS in its current state. There are currently four different AUR packages[1][2][3][4] that essentially supply the same files, and all four packages conflict with each other. Around August of 2012, the package named ttf-google-webfonts[1] was orphaned, and user w0ng created a GitHub repository[5] that mirrors the Mercurial repository[6] on Google Code (why?). Then, the new maintainer changed the original ttf-google-webfonts package from a VCS-type package that simply lacked "-hg" in the name to a package that pulls tarballs from w0ng's GitHub repo[5]. As you can see in the comments for ttf-google-webfonts[1], this has caused all sorts of confusion and messages about the package being out-of-date or having invalid checksums. To get around these issues, user epinephrine created the package ttf-google-webfonts-git[3] that clones w0ng's GitHub repo[5] instead of pulling tarballs from it, which significantly reduces the maintenance required on the package. Then, user Gently created a package named ttf-google-webfonts-distilled[2] that pulls a tarball from w0ng's GitHub repo[5] and only installs a small subset of the fonts therein. Shortly after ttf-google-webfonts[1] was changed from being a Mercurial-based package and not liking the direction that the package was taking, I reuploaded the original ttf-google-webfonts package as ttf-google-webfonts-hg[4] for people that simply wanted the old package back that uses the actual Google Web Fonts repository to download the files. To clean up this mess, I propose that ttf-google-webfonts-distilled[2] and ttf-google-webfonts-git[3] be deleted outright, for what should be obvious reasons. I also propose that ttf-google-webfonts[1] be deleted because of how frequently the Web Fonts project is updated and because the project lacks version numbers. If people really feel strongly about keeping that maintenance nightmare, then let them have it, but I really don't see what advantage it provides over the original ttf-google-webfonts-hg[4] other than one less makedepends. I apologize for the huge email, but this situation really is a mess. [1] https://aur.archlinux.org/packages/ttf-google-webfonts/ [2] https://aur.archlinux.org/packages/ttf-google-webfonts-distilled/ [3] https://aur.archlinux.org/packages/ttf-google-webfonts-git/ [4] https://aur.archlinux.org/packages/ttf-google-webfonts-hg/ [5] https://github.com/w0ng/googlefontdirectory [6] https://code.google.com/p/googlefontdirectory/ Jason

14 23

[aur-general] Linux packaging
by Javier Domingo Cansino 23 Apr '15

23 Apr '15

Hi, I am looking to package rtai, which was already packaged some years ago. I want to make it easily updatable, and I have a problem. RTAI is a kernel patch and some other stuff. I am now trying to obtain the linux config for an specific arch kernel. I was trying to extract it from packages.git, but it's a monstrous repo and not a good way to obtain the needed object without downloading it all . The svn version is also quite hacky , but more affordable, I would svn log, search for the most close version bump commit and extract that config file (along with the patch). Is there any recommended method to build a linux kernel of X version without having to package the config files? Or maybe a git tree that is smaller and reasonable to clone. Cheers,

3 7

[aur-general] Trusted User application: Levente Polyak
by Levente Polyak 05 Apr '15

05 Apr '15

Hello everyone, My name is Levente Polyak (also known as anthraxx) and I would like to apply to become an Arch Linux TU. First at all I wanted to thank Felix Yan for being my sponsor for this journey. I was born in 1986 in Budapest (Hungary) and I'm currently working as a software developer and security engineer / pentester in Hamburg (Germany). I use GNU/Linux since something around 2001 and over the years collected lot of experience with different distributions and setups, going from SUSE over Debian and Ubuntu to Gentoo (and some others just for testing or education purpose). I was never fully satisfied with any of those, however with Gentoo I became acquainted with the concept of rolling releases which since then I don't wanted to ever miss. Finally around 2011 I gave Arch Linux a try and within a very short period of time I got fully addicted to its simplicity, flexibility and up-to-dateness. It was the first distribution were I started to feel like being "home" without having anything that annoyed me. I started maintaining packages in the AUR in 2013 and it didn't took long until I noticed that I evolved a passion for doing that. Since then I adopted and submitted several tools and libraries [0] that I find useful and/or use myself. When I find packaging issues or software bugs I contact upstream about the problems and/or contribute to the code directly. To name some: binwalk, lynis, shellnoob, xortool, selene, minitube... Besides my packaging activities I am very active in the Arch CVE Monitoring Team [1] since the first security advisory proposal of Remi [2]. As part of the team I track all relevant CVEs [3] which affect our official packages, push mitigation for important issues via bug reports and publish Arch Linux security advisories (ASA) [4] to the arch-security mailing list [5]. I'm also interested in developing for the Arch Linux ecosystem and as I noticed that the wiki became quite painful for tracking and handling the mitigation procedure, I started building a security tracker. If my current plan sum up I will be able to provide a preview of this soonish. My packages reflect my emphasis related to security, but my general interest in maintaining is not limited to that. However, I experienced that in various security and forensics circles Arch Linux is often being used and people are frequently crying why some of their daily tools are not available in the official repositories. If I became a TU, I would like to start with moving the following packages maintained by me to [community]: lynis, pyrit, binwalk, sslstrip, p0f, cowpatty, perl-term-extendedcolor, smali, volatility, vit, hexer. Additionally I would love to also move some packages maintained by other users to [community] but currently its just an idea as I did not yet ask them what they think about this step: radare2, capstone, zmap, zaproxy, hydra, medusa, nikto, snort, foremost, xpdf, pngcrush, wavemon, python-colorama (+ python2-colorama). On top of this I also had a look at the currently orphaned packages in [community] and I would like to adopt the following packages: ansible, awesome, cclive, codeblocks, fail2ban, fish, ncmpcpp, id3v2. As a small fadeout, besides all of the above, my favorite hobbies are hanging around at the local CCC hackerspace in Hamburg, playing it-sec CTFs, watching animes, geocaching and playing boardgames. Kind regards, Levente [0] https://aur.archlinux.org/packages/?SeB=m&K=anthraxx [1] https://wiki.archlinux.org/index.php/Arch_CVE_Monitoring_Team [2] https://lists.archlinux.org/pipermail/arch-security/2014-September/000098.h… [3] https://wiki.archlinux.org/index.php/CVE [4] https://wiki.archlinux.org/index.php/Security_Advisorie [5] https://lists.archlinux.org/listinfo/arch-security

8 10

[aur-general] Introducing Liveroot
by Mark Lee 01 Apr '15

01 Apr '15

To all, I'd like to introduce an initcpio hooks I created called liveroot. It basically allows one to run Arch root on a ram block device. It has three modes: oroot=compressed (compressed block device), oroot=raw (tmpfs), oroot=live (run entirely on ram). In addition, it has a function called overlay_flush which lets one flush the ram block device to disk. https://aur.archlinux.org/packages/liveroot/ Regards, Mark

3 4

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 31 Mar '15

31 Mar '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 4 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 35 packages missing signoffs * 1 package older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (4 total) == * hiera-2.0.0-1 (any) * puppet-3.7.5-1 (any) * mongodb-tools-3.1.0-2 (i686) * mongodb-tools-3.1.0-2 (x86_64) == Incomplete signoffs for [community] (27 total) == * hiera-2.0.0-1 (any) 0/2 signoffs * mantisbt-1.2.19-2 (any) 0/2 signoffs * puppet-3.7.5-1 (any) 0/2 signoffs * acpi_call-1.1.0-27 (i686) 0/1 signoffs * bbswitch-0.8-29 (i686) 0/1 signoffs * dart-1.9.1-1 (i686) 0/1 signoffs * gnome-boxes-3.16.0-1 (i686) 0/1 signoffs * gnome-packagekit-3.16.0-1 (i686) 0/1 signoffs * gnote-3.16.0-1 (i686) 0/1 signoffs * mongodb-3.0.1-1 (i686) 0/1 signoffs * r8168-8.039.00-13 (i686) 0/1 signoffs * rt3562sta-2.4.1.1_r2-5 (i686) 0/1 signoffs * tp_smapi-0.41-66 (i686) 0/1 signoffs * vhba-module-20140928-10 (i686) 0/1 signoffs * virtualbox-modules-4.3.26-5 (i686) 0/1 signoffs * acpi_call-1.1.0-27 (x86_64) 0/2 signoffs * bbswitch-0.8-29 (x86_64) 0/2 signoffs * dart-1.9.1-1 (x86_64) 0/2 signoffs * gnome-boxes-3.16.0-1 (x86_64) 0/2 signoffs * gnome-packagekit-3.16.0-1 (x86_64) 0/2 signoffs * gnote-3.16.0-1 (x86_64) 0/2 signoffs * mongodb-3.0.1-1 (x86_64) 0/2 signoffs * r8168-8.039.00-13 (x86_64) 0/2 signoffs * rt3562sta-2.4.1.1_r2-5 (x86_64) 0/2 signoffs * tp_smapi-0.41-66 (x86_64) 0/2 signoffs * vhba-module-20140928-10 (x86_64) 0/2 signoffs * virtualbox-modules-4.3.26-5 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (8 total) == * etckeeper-1.18.1-4 (any) 0/2 signoffs * iscan-data-1.36.0-2 (any) 0/2 signoffs * iscan-2.30.1-7 (i686) 0/1 signoffs * mongodb-tools-3.1.0-2 (i686) 0/1 signoffs * pacmanlogviewer-1.3.1-3 (i686) 0/1 signoffs * iscan-2.30.1-7 (x86_64) 0/2 signoffs * mongodb-tools-3.1.0-2 (x86_64) 0/2 signoffs * pacmanlogviewer-1.3.1-3 (x86_64) 0/2 signoffs == All packages in [community-testing] for more than 14 days (1 total) == * mantisbt-1.2.19-2 (any), since 2015-02-17 == Top five in signoffs in last 24 hours == 1. fyan - 6 signoffs 2. heftig - 6 signoffs 3. foutrelis - 4 signoffs 4. ronald - 1 signoffs

1 0

[aur-general] oxygen-gtk3 not found
by Bernard Baeyens 30 Mar '15

30 Mar '15

oxygen-gtk3 cannot be found in AUR although there is a PKGBUILD at: https://aur.archlinux.org/packages/ox/oxygen-gtk3/PKGBUILD This PKGBUILD is for oxygen-gtk3 1.0.0-1 but the last version in Extra was 1.4.1-1 So is this package orphan in AUR? Why has it disappeared?

2 1

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 30 Mar '15

30 Mar '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 9 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 32 packages missing signoffs * 1 package older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (9 total) == * gnome-boxes-3.16.0-1 (i686) * gnote-3.16.0-1 (i686) * gnome-boxes-3.16.0-1 (x86_64) * gnote-3.16.0-1 (x86_64) * iscan-data-1.36.0-2 (any) * iscan-2.30.1-7 (i686) * pacmanlogviewer-1.3.1-3 (i686) * iscan-2.30.1-7 (x86_64) * pacmanlogviewer-1.3.1-3 (x86_64) == Incomplete signoffs for [community] (25 total) == * mantisbt-1.2.19-2 (any) 0/2 signoffs * acpi_call-1.1.0-27 (i686) 0/1 signoffs * bbswitch-0.8-29 (i686) 0/1 signoffs * dart-1.9.1-1 (i686) 0/1 signoffs * gnome-boxes-3.16.0-1 (i686) 0/1 signoffs * gnome-packagekit-3.16.0-1 (i686) 0/1 signoffs * gnote-3.16.0-1 (i686) 0/1 signoffs * mongodb-3.0.1-1 (i686) 0/1 signoffs * r8168-8.039.00-13 (i686) 0/1 signoffs * rt3562sta-2.4.1.1_r2-5 (i686) 0/1 signoffs * tp_smapi-0.41-66 (i686) 0/1 signoffs * vhba-module-20140928-10 (i686) 0/1 signoffs * virtualbox-modules-4.3.26-5 (i686) 0/1 signoffs * acpi_call-1.1.0-27 (x86_64) 0/2 signoffs * bbswitch-0.8-29 (x86_64) 0/2 signoffs * dart-1.9.1-1 (x86_64) 0/2 signoffs * gnome-boxes-3.16.0-1 (x86_64) 0/2 signoffs * gnome-packagekit-3.16.0-1 (x86_64) 0/2 signoffs * gnote-3.16.0-1 (x86_64) 0/2 signoffs * mongodb-3.0.1-1 (x86_64) 0/2 signoffs * r8168-8.039.00-13 (x86_64) 0/2 signoffs * rt3562sta-2.4.1.1_r2-5 (x86_64) 0/2 signoffs * tp_smapi-0.41-66 (x86_64) 0/2 signoffs * vhba-module-20140928-10 (x86_64) 0/2 signoffs * virtualbox-modules-4.3.26-5 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (7 total) == * etckeeper-1.18.1-4 (any) 0/2 signoffs * iscan-data-1.36.0-2 (any) 0/2 signoffs * iscan-2.30.1-7 (i686) 0/1 signoffs * pacmanlogviewer-1.3.1-3 (i686) 0/1 signoffs * iscan-2.30.1-7 (x86_64) 0/2 signoffs * mongodb-tools-3.1.0-1 (x86_64) 0/2 signoffs * pacmanlogviewer-1.3.1-3 (x86_64) 0/2 signoffs == All packages in [community-testing] for more than 14 days (1 total) == * mantisbt-1.2.19-2 (any), since 2015-02-17 == Top five in signoffs in last 24 hours ==

1 0

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 29 Mar '15

29 Mar '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 0 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 23 packages missing signoffs * 1 package older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == Incomplete signoffs for [community] (21 total) == * mantisbt-1.2.19-2 (any) 0/2 signoffs * acpi_call-1.1.0-27 (i686) 0/1 signoffs * bbswitch-0.8-29 (i686) 0/1 signoffs * dart-1.9.1-1 (i686) 0/1 signoffs * gnome-packagekit-3.16.0-1 (i686) 0/1 signoffs * mongodb-3.0.1-1 (i686) 0/1 signoffs * r8168-8.039.00-13 (i686) 0/1 signoffs * rt3562sta-2.4.1.1_r2-5 (i686) 0/1 signoffs * tp_smapi-0.41-66 (i686) 0/1 signoffs * vhba-module-20140928-10 (i686) 0/1 signoffs * virtualbox-modules-4.3.26-5 (i686) 0/1 signoffs * acpi_call-1.1.0-27 (x86_64) 0/2 signoffs * bbswitch-0.8-29 (x86_64) 0/2 signoffs * dart-1.9.1-1 (x86_64) 0/2 signoffs * gnome-packagekit-3.16.0-1 (x86_64) 0/2 signoffs * mongodb-3.0.1-1 (x86_64) 0/2 signoffs * r8168-8.039.00-13 (x86_64) 0/2 signoffs * rt3562sta-2.4.1.1_r2-5 (x86_64) 0/2 signoffs * tp_smapi-0.41-66 (x86_64) 0/2 signoffs * vhba-module-20140928-10 (x86_64) 0/2 signoffs * virtualbox-modules-4.3.26-5 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (2 total) == * etckeeper-1.18.1-4 (any) 0/2 signoffs * mongodb-tools-3.1.0-1 (x86_64) 0/2 signoffs == All packages in [community-testing] for more than 14 days (1 total) == * mantisbt-1.2.19-2 (any), since 2015-02-17 == Top five in signoffs in last 24 hours ==

1 0

Re: [aur-general] PKGBUILD for multiple packages: some examples?
by Giovanni Santini 28 Mar '15

28 Mar '15

Il 28/mar/2015 11:18 AM Rob McCathie <korrode(a)gmail.com> ha scritto: > > Here is an example of a split package for you: > > https://github.com/manjaro/packages-community/blob/master/octopi/PKGBUILD > > -- > Regards, > > Rob McCathie > > On 28/03/15 20:08, Giovanni Santini wrote: > > Good morning everybody, > > As a student, I need to download for a class AMPL, which has its > > latest student binaries here [1]. > > I wanted to create a PKGBUILD with all the possible solvers; I > > remember to have seen a PKGBUILD that > > had the same sorce and built multiple packages but I can't remember > > where. > > Can someone help me with some PKGBUILD/Wiki article/similar for > > reference? > > Thank you. > > Have a nice day, > > Giovanni Santini > > > > [1] http://ampl.com/netlib/ampl/student/index.html Many thanks, it was what I was looking for. Thank you! Giovanni Santini --- Coding stuff: https://github.com/ItachiSan

1 0

[aur-general] Signoff report for [community-testing]
by Arch Website Notification 28 Mar '15

28 Mar '15

=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 0 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 23 packages missing signoffs * 1 package older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == Incomplete signoffs for [community] (21 total) == * mantisbt-1.2.19-2 (any) 0/2 signoffs * acpi_call-1.1.0-27 (i686) 0/1 signoffs * bbswitch-0.8-29 (i686) 0/1 signoffs * dart-1.9.1-1 (i686) 0/1 signoffs * gnome-packagekit-3.16.0-1 (i686) 0/1 signoffs * mongodb-3.0.1-1 (i686) 0/1 signoffs * r8168-8.039.00-13 (i686) 0/1 signoffs * rt3562sta-2.4.1.1_r2-5 (i686) 0/1 signoffs * tp_smapi-0.41-66 (i686) 0/1 signoffs * vhba-module-20140928-10 (i686) 0/1 signoffs * virtualbox-modules-4.3.26-5 (i686) 0/1 signoffs * acpi_call-1.1.0-27 (x86_64) 0/2 signoffs * bbswitch-0.8-29 (x86_64) 0/2 signoffs * dart-1.9.1-1 (x86_64) 0/2 signoffs * gnome-packagekit-3.16.0-1 (x86_64) 0/2 signoffs * mongodb-3.0.1-1 (x86_64) 0/2 signoffs * r8168-8.039.00-13 (x86_64) 0/2 signoffs * rt3562sta-2.4.1.1_r2-5 (x86_64) 0/2 signoffs * tp_smapi-0.41-66 (x86_64) 0/2 signoffs * vhba-module-20140928-10 (x86_64) 0/2 signoffs * virtualbox-modules-4.3.26-5 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (2 total) == * etckeeper-1.18.1-4 (any) 0/2 signoffs * mongodb-tools-3.1.0-1 (x86_64) 0/2 signoffs == All packages in [community-testing] for more than 14 days (1 total) == * mantisbt-1.2.19-2 (any), since 2015-02-17 == Top five in signoffs in last 24 hours == 1. foutrelis - 11 signoffs

4 3