July 2018 - Aur-general - lists.archlinux.org

[aur-general] ttf-google-webfonts{,-distilled,-git,-hg} mess
by Jason St. John 19 Jun '19

19 Jun '19

I am the current maintainer of the AUR package ttf-google-webfonts-hg[4], and I'm bothered by the mess of various packages there are for Google's Web Fonts project. It's not at all KISS in its current state. There are currently four different AUR packages[1][2][3][4] that essentially supply the same files, and all four packages conflict with each other. Around August of 2012, the package named ttf-google-webfonts[1] was orphaned, and user w0ng created a GitHub repository[5] that mirrors the Mercurial repository[6] on Google Code (why?). Then, the new maintainer changed the original ttf-google-webfonts package from a VCS-type package that simply lacked "-hg" in the name to a package that pulls tarballs from w0ng's GitHub repo[5]. As you can see in the comments for ttf-google-webfonts[1], this has caused all sorts of confusion and messages about the package being out-of-date or having invalid checksums. To get around these issues, user epinephrine created the package ttf-google-webfonts-git[3] that clones w0ng's GitHub repo[5] instead of pulling tarballs from it, which significantly reduces the maintenance required on the package. Then, user Gently created a package named ttf-google-webfonts-distilled[2] that pulls a tarball from w0ng's GitHub repo[5] and only installs a small subset of the fonts therein. Shortly after ttf-google-webfonts[1] was changed from being a Mercurial-based package and not liking the direction that the package was taking, I reuploaded the original ttf-google-webfonts package as ttf-google-webfonts-hg[4] for people that simply wanted the old package back that uses the actual Google Web Fonts repository to download the files. To clean up this mess, I propose that ttf-google-webfonts-distilled[2] and ttf-google-webfonts-git[3] be deleted outright, for what should be obvious reasons. I also propose that ttf-google-webfonts[1] be deleted because of how frequently the Web Fonts project is updated and because the project lacks version numbers. If people really feel strongly about keeping that maintenance nightmare, then let them have it, but I really don't see what advantage it provides over the original ttf-google-webfonts-hg[4] other than one less makedepends. I apologize for the huge email, but this situation really is a mess. [1] https://aur.archlinux.org/packages/ttf-google-webfonts/ [2] https://aur.archlinux.org/packages/ttf-google-webfonts-distilled/ [3] https://aur.archlinux.org/packages/ttf-google-webfonts-git/ [4] https://aur.archlinux.org/packages/ttf-google-webfonts-hg/ [5] https://github.com/w0ng/googlefontdirectory [6] https://code.google.com/p/googlefontdirectory/ Jason

14 23

[aur-general] TU application -- Santiago Torres-Arias
by Santiago Torres-Arias 06 Aug '18

06 Aug '18

Hello everyone, Formalities first, Christian Rebischke (Shibumi) is sponsoring my application, although I'd like to thank so many people for their feedback, help, guidance and counsel in all-things-Arch*. My name is Santiago Torres-Arias[1], and I'm a Mexican PhD candidate from New York University. My research focuses on securing the dev-ops pipeline/supply chain, which includes work on package manager security, version control system security, securing container orchestrators, reproducible builds, so on and so forth. It is not a coincidence that all of these relate strongly with Linux; I believe the Linux environment pretty much shaped my professional career since I was in High School. I've been a GNU/Linux user for more than I can remember, although I started using it exclusively circa 2011. I started using Debian, Mint and Ubuntu interchangeably for a couple of years and, as time passed, I started to develop personal scripts and unscrew my deterministically-broken distro (I still remember my hook to fix the fglrx install every time X was updated). This experience threw me to the other side, and for a while I thought I could maintain my own LFS-based distribution with scripts of this sort, which led me to learn a lot about what *not* to do when managing packages. However, It was when I finally decided to give Arch a serious try (around 2014) that I found myself enamored with not only the toolchains, but the community and the philosophy behind the distribution --- I'm now a strong supporter of the Arch Way(tm) thanks to all the leasons learned through the winding roads of linux-system-administration. Although I've always been an assiduous user of the AUR, not only using but writing my own PKGBUILDs, It was only until recently (about 8 months now), that I've been working towards becoming more familiar with the package ecosystem with the end goal of becoming a TU. I've received feedback from many members on the community on how to fix, extend and follow best practices on writing PKGBUILDS which I believe has improved their quality[2]. Besides maintaining packages I've been contributing to other aspects of the Arch Linux ecosystem for about three years now. I've participated in the security team almost since its inception, by providing code to the tracker, tracking CVE's and sending advisories. Likewise, I've been a tester for more than a year. I've also participated (although not as much as I've wanted) on the archlinux-reproducible efforts. Finally, I've worked along with shibumi and Pierre in making an automated build of an official Archlinux Docker image. Beyond Arch Linux, I'm a committer to projects like reproducible-builds.org[3], Briar[4], neomutt[5], and The Update Framework (TUF)[6], among others[7]. There are two main reasons for this application to become a TU. First, I want to contribute *more* to a community that has given me so much, and I'm certain that helping packaging tools for everyone in the community repository will only improve the overall user experience. Second, and most importantly, I want to expand the offer of packages in the official repositories. Concretely, I want to maintain the following packages: - Orphaned packages (I'm a regular user of these): - giblib (currently on extra) - python-pylint (currently on extra) - uthash - znc - cvf - netctl (?! currently on core, so I suspect I can't maintain this one) - python-opencl/pyopencl-headers - I'd love to co-maintain some packages that have a packager right now**: - radare-cutter - hub - rtl-sdr - maven - I intend to move the following packages from the AUR: - reprotest - git-latexdiff - python-rstr - python2-grip - inxi - plex-fonts Needless to say, I'm open to discussion on this list. I can extend it with any suggested packages, or discard any packages that aren't deemed popular enough. On a less technical, serious note, I love playing guitar! I have a band and we play progressive, shoegaze, and math-rock. I also like cycling, and reading on pretty much anything. I'm a Rust fanboy and I'm re-learning Verilog, as I'm hoping to play around with the RISC-V ISA and emulate TPM's and other trusted hardware designs. Thanks, -Santiago (Sangy) Torres-Arias [1] https://badhomb.re [2] https://aur.archlinux.org/account/sangy [3] https://reproducible-builds.org [4] https://neomutt.org/feature/new-mail#7-%C2%A0credits [5] https://briarproject.org [6] https://theupdateframework.com [7] https://github.com/santiagotorres * Thanks to eschwartz, shibumi, anthraax, jelle, rgacogne, Foxboron, pid1, Tigrmesh, meskarune et al.! ** This is the first time I make this public, so there's no commitment from the current packager at all

5 12

[aur-general] Keras circular dependency resolution
by Robby Stokoe 30 Jul '18

30 Jul '18

Keras recently moved two of its submodules to separate modules---keras-applications, and keras-preprocessing [1]. These also import keras and will not work without it, nor will keras work without those submodules. Currently the submodule packages depend on keras, but making keras depend on the submodules creates unresolvable circular dependencies. Currently the submodules are listed as optional dependencies of keras with the note that keras will not work without them. This seems like a problem to me. Someone wanting to install keras will be able to do so without installing the submodules but won't be able to use it without them. The only warning will be the optional dependencies which seems insufficient to me. Since both actually depend on the other(s) to work, the only solution I can see is to include them all in the python-keras package. Is there any other way to resolve this? Is it not as big of a deal as I think it is? How would such a change even get implemented? Thanks. [1]: https://github.com/keras-team/keras/pull/10339

2 1

[aur-general] TU application -- Santiago Torres-Arias
by Santiago Torres-Arias 27 Jul '18

27 Jul '18

> > Hello everyone, > > > > Formalities first, Christian Rebischke (Shibumi) is sponsoring my application, > > although I'd like to thank so many people for their feedback, help, guidance > > and counsel in all-things-Arch*. > > Apologies for being somewhat late with the ztrawchse review. > > argon2-git: > - CC-0 is, apparently, not common enough to be in the licenses package. > As such, the license should be marked as 'custom:CC-0' and installed > to /usr/share/licenses/$pkgname/ > see how core/argon2 does this > > git-latexdiff: > - unquoted srcdir/pkgdir > - license is not, in fact, GPL > - the source file has a unique name, but then you told makepkg to rename > it to something non-unique. I.. must admit this is new to me... > > in-toto: > - sources seem to come with a testsuite, this should be run in a check() > function > > python-securesystemslib: > - the check() function does not accept depends, this is broken > - multiple depends are deleted and overridden in the package() function > - empty optdepends array can be deleted > - tox doesn't really test what needs testing, code should be tested > using the native testsuite hooked up to the packaged system > dependencies > - license is the literal file (rather than a file within the directory > of this name): /usr/share/licenses/python-securesystemslib > > reprotest: > - multiple depends are deleted and overridden in the package() function > - optdepends could use description of what additional functionality they > provide when installed > Thanks for the feedback! I'll apply this changes as soon as I get back from work :) -Santiago.

1 0

[aur-general] TU Application - Filipe Laíns
by Filipe Laíns 24 Jul '18

24 Jul '18

Hello, My name is Filipe Laíns. You might also know me by my alias, FFY00. I am applying to be a Trusted User with Dan Printzell's (Wild) sponsorship. Let's get to the part where you get to know me a bit more I am a Portuguese student and I use Linux as my main operating system since 2013. I gave Arch a try last year and I've been in love with it's ecosystem ever since. Since then, I started contributing to AUR and I've been maintaining quite a few packages. I am also fairly active in the Open Source community as you can see in my Github profile[1]. I love to help people and that is my main motivation to become a TU. If I do become a Trusted User, one thing I would like to do is to improve the usability of Arch for SDR (software defined raio) development. I think Arch is a great system for this and it's a bit of a shame that one of the most relevant packages (soapysdr) isn't in any official repo. Most of the work to improve the SDR support in Arch has been done by Kyle Keen, and I thank him for that, but I still think we could do a bit more. I don't plan to only maintain SDR related packages. I would like to maintain anything that I use, or anything that is relevant to anyone, really. If it makes someone's life easier it's a win. With that being said, here's a list of packages that I plan to move to community: - soapysdr - soapyrtlsdr - libratbag - piper - tribler - qspectrumanalyzer - pulseaudio-equalizer-ladspa - synology-cloud-station-drive Some comments on the packages, (soapysdr and soapyrtlsdr) soapysdr is a vendor neutral SDR driver[2] and soapyrtlsdr is the rtlsdr plugin for it. The non -git versions of the packages are quite recent so they don't have much votes yet. Their correspondent -git variants have enough votes. (libratbag and piper) libratbag is a DBus daemon to configure gaming mice[3] and piper is a GTK+ app to interface with it. I do not maintain this packages but I contribute to the upstream development. It would be helpful for the project if they were moved to an official repo as we are thinking about changing our CI's base distribution from Fedora to Arch. (tribler) Tribler is a popular torrent client with P2P content discovery[4]. (qspectrumanalyzer) This is a popular spectrum analyser for SDR devices[5]. It uses soapysdr as its default driver so it supports a wide range of SDR devices. (pulseaudio-equalizer-ladspa) This is a pulseaudio equalizer based on a ladspa plugin. It has a nice GTK+ based front-end to configure it. (synology-cloud-station-drive) This is a drive client for Synology devices[6]. I am also interested in adopting the following packages in community: - netcf - znc (packages bellow - probably, depending on my free time) - python2-caja - python2-cheetah - python2-exiv2 - python2-fastimport - python2-ipaddr I think that's it, thanks for bearing with me until the end. Best regards, Filipe Laíns ^.^ [1] https://github.com/FFY00 [2] https://github.com/pothosware/SoapySDR/wiki#features [3] https://github.com/libratbag/libratbag#libratbag [4] https://github.com/Tribler/tribler#tribler [5] https://github.com/xmikos/qspectrumanalyzer#qspectrumanalyzer [6] https://www.synology.com/en-global/releaseNote/CloudStationDrive

5 11

[aur-general] python traceback on git push
by Georg 19 Jul '18

19 Jul '18

Hi, I just updated a few packages and ran into an issue with the AUR: $ git push […] remote: Traceback (most recent call last): remote: File "/usr/bin/aurweb-notify", line 11, in <module> remote: load_entry_point('aurweb==4.7.0', 'console_scripts', 'aurweb-notify')() remote: File "/usr/lib/python3.6/site-packages/aurweb-4.7.0-py3.6.egg/aurweb/scripts/notify.py", line 541, in main remote: File "/usr/lib/python3.6/site-packages/aurweb-4.7.0-py3.6.egg/aurweb/scripts/notify.py", line 69, in send remote: File "/usr/lib/python3.6/site-packages/aurweb-4.7.0-py3.6.egg/aurweb/scripts/notify.py", line 56, in get_body_fmt remote: File "/usr/lib/python3.6/site-packages/aurweb-4.7.0-py3.6.egg/aurweb/scripts/notify.py", line 192, in get_body remote: File "/usr/lib/python3.6/site-packages/aurweb-4.7.0-py3.6.egg/aurweb/l10n.py", line 14, in translate remote: File "/usr/lib/python3.6/gettext.py", line 514, in translation remote: raise OSError(ENOENT, 'No translation file found for domain', domain) remote: FileNotFoundError: [Errno 2] No translation file found for domain: 'aurweb' […] the push succeeded nonetheless. Georg

3 3

[aur-general] Spam account Playgame123
by Christoph Gysin 19 Jul '18

19 Jul '18

Comment here: https://aur.archlinux.org/packages/macbook12-spi-driver-dkms/ -- echo mailto: NOSPAM !#$.'<*>'|sed 's. ..'|tr "<*> !#:2" org@fr33z3

1 0

[aur-general] Spam account Hard_Work23
by Beej Jorgensen 18 Jul '18

18 Jul '18

Comment here: https://aur.archlinux.org/packages/inform/ -- Brian "Beej Jorgensen" Hall - beej(a)beej.us - http://beej.us/

4 3

[aur-general] Attempting to update upwork-beta, and hit a head-scratcher
by Shane Simmons 16 Jul '18

16 Jul '18

I got an AUR Out-of-date Notification from msheremet on upwork-beta. After digging through Upwork app logs and checking their website, apparently they've pushed the update to their download website, but not to the client apps yet (at least, not to mine. ;-) However, I'm sending the changes from my laptop and I had never added my public key on my laptop, and when I went to log in to the AUR to copy the pubkey to my ~/.ssh/config, AUR informs me that my account has been suspended. I never received any kind of notification that my account was suspended, or why. As far as I can recall, my best guess would be that it was because I had stupidly published a bug comment to the aurman AUR page and was harshly schooled by the aurman developer that his package depends on a -git package, which had to be installed manually because, again, stupidly, I didn't know that -git packages' PKGBUILDs don't contain the current version, but is instead calculated during install. If that's why, after I understood the issue I just shrugged and went on with my life, and wasn't aware there was a continuing problem until I tried to push updates. I'm more than happy to push my changes if I can; if it can't be reinstated, though, then I'd at least like to know why, please; and if it's going to be impossible to reinstate, then someone at the very least needs to mark upwork-beta as orphaned so someone else can take over.

4 9

[aur-general] package with nginx config file
by Damjan Georgievski 15 Jul '18

15 Jul '18

I'm making a package for a webapp that will include an nginx config file. What's the convention for these config files, where's the best place to put them? Ideally, I'd like to see a » include /etc/nginx/sites/*.conf;« at the bottom of the main /etc/nginx/nginx.conf so at least files dropped there would work out-of-the-box. -- damjan

2 1