September 2019 - Aur-general - lists.archlinux.org

[aur-general] TU application: kpcyrd
by kpcyrd 11 Oct '19

11 Oct '19

Hello, My name is kpcyrd and I'm applying to become a Trusted User with anthraxx', sangys and jelles sponsorship. I'm interested in rust, defensive programming and offensive security tooling. Open source became an essential part of my life at some point and the idea of contributing back to the community that gave me so much for free kept me going the last few years. I worked as both a software and IT security engineer in the past and I currently do a combination of both as a contractor. --- # How I started using linux - Started with linux by trying to remaster knoppix in 2010 for a while - Wiped my laptop in 2011 and installed debian with no way of return since it was my only computer at that time - First successful Arch Linux install I did was by helping a friend in 2013 - Eventually migrated to Arch Linux myself in 2015 due to anthraxx - I currently run a combination of Arch Linux, debian and openbsd at home and on servers # How I contributed to the opensource community in the past (somewhat chronological) - Too many pull requests (stopped counting a long time ago) - Assisted debian-security with some issues (redis, mongodb and xul-ext-wot) - Wrote some PKGBUILDs that got moved into community - Revived http://tests.reproducible-builds.org/archlinux/ - Packaged software for alpine, brew and openbsd - Packaged about 1/3 of the rust packages in debian - Co-authored the current reproducible builds rebuilder prototype with NYU - Recently became a debian maintainer (while running Arch Linux) # AUR packages I maintain a few packages in the AUR, the most relevant that I would like to maintain in community at some point are: - diesel_cli - cargo-tree - cargo-fuzz - cargo-crev - python-fints - python-mt-940 - python-sepaxml I'm also interested in co-maintaining reprotest and some of the packages anthraxx currently maintains for me. # Community packages I wrote or contributed to - cjdns - go-ipfs - alacritty - reprotest - sniffglue - badtouch - rshijack - sn0int # Upstream for the following packages in Arch Linux - sniffglue - badtouch - rshijack - sn0int --- Thanks for taking the time reading this, kpcyrd

10 17

[aur-general] AUR Cleanup Day September 20th 2019
by Daniel M. Capella 28 Sep '19

28 Sep '19

Do you like popping other people's pimples? Gross, me neither. Anyways, next Friday is our bi-yearly AUR Cleanup Day -- join #archlinux-aur and BYOB. The wiki article[1] has instructions for how to proceed and space to compile our list of candidates. Here's[2] an example from a previous rendition of Purge Day. [1] https://wiki.archlinux.org/index.php/DeveloperWiki:AUR_Cleanup_Day [2] https://wiki.archlinux.org/index.php?title=AUR_Cleanup_Day/2010&oldid=353326 -- Good hunting, Daniel <https://danielcapella.com>

2 4

[aur-general] TU application: Jonas Witschel (diabonas)
by Jonas Witschel 26 Sep '19

26 Sep '19

Hi all, my name is Jonas Witschel (online nick "diabonas" on the AUR/GitHub/GitLab/...) and I am applying as an Arch Linux Trusted User under the sponsorship of Bruno Pagani and Alad Wenter. A few words about myself: I am a math PhD student and long-time Linux user. I switched to Arch Linux around 2016 because I like the idea of a rolling release distribution that stays close to upstream, which is especially beneficial when doing software development. I got more actively involved in contributing to Arch when the previous AUR maintainer of the tpm2-software stack (tpm2-tss, tpm2-abrmd and tpm2-tools) orphaned these packages, so I took over maintenance until they were adopted to [community]. I am interested in many security-related thing such as Secure Boot, Trusted Platform Modules (TPMs), disk encryption, PGP, ... As such, I am a member of the tpm2-software organisation and a maintainer of tpm2-totp [1]. Recently I have been working on getting Web Key Directory support into pacman for fetching PGP keys independently of the key server network [2,3]. A repository of all my AUR packages can be found on Gitlab [4]. If I were accepted as a trusted user, I would take over maintenance of the tpm2-software stack from my sponsor Bruno Pagani. This makes sense since I am an upstream member of tpm2-software anyway and had been maintaining these packages until they were adopted to [community]. Another long-time goal as a trusted user would be getting out of the box Secure Boot support for the Arch Linux installation images [5,6]. Packages I would like to adopt from the AUR to [community] for starters are: - The rest of the tpm2-software stack: tpm2-tss-engine and tpm2-totp (when they have reached the 1% usage from pkgstats/10 votes on the AUR threshold), tpm2-pkcs11-git (as soon as it gets a release). - clevis and tang (and their dependencies jose, luksmeta) - sbupdate-git (I need to speak to upstream about making a release first) - paperkey - cryptomator - deheader - texworks - pdftk-java (an exact Java reimplementation of the very popular pdftk/pdftk-bin, which is hard to package since it relies on an outdated version of GCC) I am looking forward to working with you and welcome any questions and comments! Cheers, Jonas [1] https://github.com/tpm2-software/tpm2-totp [2] https://bugs.archlinux.org/task/63171 [3] https://lists.archlinux.org/pipermail/pacman-dev/2019-July/023493.html [4] https://gitlab.com/diabonas/aur-packages [5] https://bugs.archlinux.org/task/53864 [6] https://lists.archlinux.org/pipermail/arch-releng/2019-January/003891.html

6 13

[aur-general] spam messages
by Lone_Wolf 26 Sep '19

26 Sep '19

Hi, cndrvcups-lb gained a new spam message, and I also listed older ones. https://aur.archlinux.org/packages/cndrvcups-lb/#comment-709467 https://aur.archlinux.org/packages/cndrvcups-lb/#comment-702798 https://aur.archlinux.org/packages/cndrvcups-lb/?O=10&PP=10#comment-701682 https://aur.archlinux.org/packages/cndrvcups-lb/?O=10&PP=10#comment-701681 https://aur.archlinux.org/packages/cndrvcups-lb/?O=10&PP=10#comment-695882 https://aur.archlinux.org/packages/cndrvcups-lb/?O=10&PP=10#comment-695880 https://aur.archlinux.org/packages/cndrvcups-lb/?O=10&PP=10#comment-695879 https://aur.archlinux.org/packages/cndrvcups-lb/?O=10&PP=10#comment-695877 Lone

2 1

Re: [aur-general] TU application: kpcyrd
by Giancarlo Razzolini 21 Sep '19

21 Sep '19

Levente Polyak via aur-general <aur-general(a)archlinux.org> writes: > > > > I'm hereby confirming my sponsorship. kpcyrd is a friend of mine in > both, cyber- and meatspace. He is a very kind person and I like his way > of thinking. His technical skills would be a great benefit for the TU > community. > Even though I'm not one of kpcyrd sponsors, I can vouch for him as well. Given that I've worked with him in the past. He's a very nice person to work with and quite technically skilled. Regards, Giancarlo Razzolini

1 0

[aur-general] Why keeping OpenRC related packages on AUR?
by fredbezies 16 Sep '19

16 Sep '19

Hello. Note: posting in the right mailing list now. Oops! I hope it is the right place to discuss about this issue. I noticed there is a lot of OpenRC related packages on AUR. I don't want to start a flamewar, I just want to know what is going on with these PKGBUILDs. A quick search gave me 42 answers - some not related to this init system - 95% of them last updated between 2015 and 2018. https://aur.archlinux.org/packages/?O=0&K=openrc Is there any interest of keeping these PKGBUILDs? There is an official Archlinux + OpenRC init system called Artix, providing a migration guide from Arch or Manjaro. It is also listed in https://wiki.archlinux.org/index.php/Arch-based_distributions#Active "Artix Linux *2016, previously Arch-OpenRC" https://artixlinux.org/ https://wiki.artixlinux.org/Main/Migration By the way, it is written in the wiki that : "Warning: Arch Linux only has official support for systemd. When using OpenRC, please mention so in support requests." Source: https://wiki.archlinux.org/index.php/OpenRC Is there any explanations for keeping them? Thanks for your answers. -- Frederic Bezies fredbezies(a)gmail.com

4 7

[aur-general] Naming issue of mysql-shell and (possibly) request for adoption
by Frederick Zhang 13 Sep '19

13 Sep '19

Hi all, I am writing about the naming issue that I noticed about the AUR package mysql-shell, i.e. I reckon it's better to rename it to mysql-shell-bin since MySQL Shell is an open-source project and the package actually downloads the prebuilt Ubuntu package. I tried reaching out to Raphaël, who is the current maintainer, via the website comments and flagged it out-of-date on 05 Aug but so far I've got no response. The maintainer's account seems to still be active (package openrefine, which is also owned by the maintainer, was updated on 01 Aug) but I'm not sure whether this particular package is still maintained. If not, I'm willing to adopt the package but instead of renaming it, I would actually like to maintain one that's built from source. However since it needs to be linked against V8 v6.7 (I've submitted an AUR pacakge [1] for this), it'll take a while to build and it could be an unexpected change for users I guess, so I wonder whether it's possible to: 1. rename mysql-shell to mysql-shell-bin 2. allow current mysql-shell users to upgrade to mysql-shell-bin by default like how 'replaces' works 3. ...and I can submit a new mysql-shell package Please shed some light on me. Thanks. [1] https://aur.archlinux.org/packages/v8-6.7-static/ -- Best Regards, Frederick Zhang Email: frederick888(a)tsundere.moe

2 1

[aur-general] TU membership application
by Jean Lucas 12 Sep '19

12 Sep '19

Hi all, My name is Jean Lucas, and I'm sending this email to submit my candidacy for Trusted User member. As per the latest TU bylaws, I'm being sponsored by both Alexander Rødseth and Sergej Pupykin. I've been an Arch Linux user since around a little before I registered my AUR account (January 2015, username "flacks" [1]), and I've recently had a few of my packages adopted into [community], namely "cage", "coturn", and "swaybg". I'm currently a computer science student with a particular interest in software engineering ranging from low-level (with a few contributions to projects like coreboot and postmarketOS) all the way up to web development (my current focus), and as such, would love to help maintain Arch's [community] repo in an official capacity to be part of the team that gives Arch users a robust, high-quality Linux software experience; as well as to help maintain, manage, and watch over the operation of the AUR and it's vast sea of software packaging recipes. If I were accepted to become a TU, I'd like to adopt and move the following packages (all having over 10 votes in the AUR) from the AUR into [community]: anydesk, downgrade, exercism, flutter, godot, itch, mattermost-desktop, nvm, reaper, spotify, teamviewer, thermald, unity-editor, and unityhub, for starters! Additionally, I would express my willingness to help co-maintain "firejail" (already in [community]), as its a project I have a higher interest in and contribute to occasionally; as well as to help get "ghidra" in good enough shape to propose moving it into [community], since I've had lots of fun building it [2], its a phenomenal piece of open-source software, and it'd be nice to have it officially supported by the Arch community (it also has a nice number of votes in the AUR)! Thank you for your time, and thank you to all who help make Arch a great OS! Best regards, Jean Lucas [1] https://aur.archlinux.org/account/flacks [2] https://aur.archlinux.org/cgit/aur.git/log/?h=ghidra-git

20 45

[aur-general] Spam from user stupidblogger
by Michael Duell 08 Sep '19

08 Sep '19

User: https://aur.archlinux.org/account/stupidblogger spamming here: https://aur.archlinux.org/packages/android-studio/#comment-707098

2 1

[aur-general] Rescinding my TU application
by Jean Lucas 08 Sep '19

08 Sep '19

Hello all, I am sending this notice to formally announce the rescinding of my TU application sent on August 16th. I'd like to thank everyone for their feedback, as well as apologize for not taking the time to better prepare and iron out all the details with my sponsors. Cordially, Jean Lucas

1 0