May 2026 - Aur-general - lists.archlinux.org

Package Maintainer Application: DeepChirp
by DeepChirp 27 May '26

27 May '26

Hello everyone, I am DeepChirp ("深鸣" in Chinese). Sponsored by Felix Yan and George Hu (in alphabetical order), I'm writing this email to apply to become an Arch Linux Package Maintainer. I have a deep passion for free and open-source software, which makes me feel like I'm in a utopia. I tried Ubuntu when I was in middle school. After entering university, I started to use Arch Linux on account of its simplicity and freedom. I am deeply captivated by the fact that my contributions can change the world, so I have been actively contributing to the AUR and Arch Linux CN; the latter is an unofficial Chinese community. My contributions can be viewed via the links below: - Arch Linux CN: <https://github.com/archlinuxcn/repo/commits/master/?author=DeepChirp> - AUR: <https://aur.archlinux.org/packages/?SeB=m&K=DeepChirp> I believe I have the necessary skills to maintain software packages. I have some understanding of operating systems and also know some compilation options. For example, the `rustnet` package, which I previously maintained on the AUR, was later included in the official repositories. - <https://gitlab.archlinux.org/archlinux/packaging/packages/rustnet> I am confident I can also handle the packaging of more complex Electron applications. For instance, I would remove the bundled Electron runtime and delete unnecessary content (such as `.map` files) as well as dependencies to reduce the binary size. - <https://aur.archlinux.org/packages/upscayl> - <https://aur.archlinux.org/packages/piclist> - <https://github.com/archlinuxcn/repo/blob/8d3d4805545fa90c3b8fc234524359cb7c…> I believe I am also capable of handling more complex software packages like `yaak`, which requires distinct compilation parameters for its frontend and backend when enabling LTO. So I handled the separation safely. - <https://github.com/archlinuxcn/repo/blob/8d3d4805545fa90c3b8fc234524359cb7c…> While my direct activity on the official Arch Linux GitLab might appear somewhat limited, it is largely because Arch has been remarkably stable for me. However, when I do find bugs, I always report and track them. - <https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/work_item…> - <https://gitlab.archlinux.org/archlinux/packaging/packages/rustnet/-/merge_r…> - <https://gitlab.archlinux.org/archlinux/packaging/packages/rustnet/-/merge_r…> If accepted, I plan to handle user bug reports as quickly as I currently do in the Arch Linux CN community. - <https://github.com/archlinuxcn/repo/issues/4618> In addition to Arch Linux, I also strive to contribute to upstream projects. For instance, I have reported several issues to the Linux kernel and several of my Merge Requests for KDE have been accepted. While there is always more to learn, I am continuously expanding my skill set and actively engaging with upstream communities. - <https://github.com/DeepChirp> - <https://invent.kde.org/deepchirp> - <https://lore.kernel.org/all/20251229-fda-zero-v1-1-58a41cb0e7ec@google.com/> - <https://lore.kernel.org/all/20260413095407.1426322-1-chaitanya.kumar.borah@…> I'm also used to community collaboration. As an "Expert Wiki Mentor" on the Chinese Wikipedia, I've worked with many editors to create quality articles. I hope to bring this same collaborative spirit to the Arch team. - <https://zh.wikipedia.org/wiki/User:DeepChirp> If my application is approved, I would like to add these packages to the [extra] repository: - upscayl - superproductivity - easytier - sing-box (along with `sing-geoip-rule-set` and `sing-geosite-rule-set`) - yaak (pending communication with upstream to clarify its complex licensing) Additionally, I am also willing to co-maintain the following packages: - rustnet - v2ray-geoip - v2ray-domain-list-community Thank you for your time and consideration! Sincerely, DeepChirp

6 12

(No Subject)
by Peter 27 May '26

27 May '26

Hello, please stop sending email notifications on this addres. Thanks, Zincerely Peter Sent from [Proton Mail](https://proton.me/mail/home) for Android.

4 3

Stale snapshots in the AUR
by Andreas Baumann 25 May '26

25 May '26

Hi all, I got report that AUR download snapshots are stale. See: https://aur.archlinux.org/packages/pacman-static#comment-1066707 File /tmp/mutt-eurox-500-25464-10703324287384108442 not changed so no update needed 1208 kept, 0 deleted. abaumann@eurox:~> cat > /dev/null Hi all, I got report that AUR download snapshots are stale. See: https://aur.archlinux.org/packages/pacman-static#comment-1066707 https://aur.archlinux.org/packages/pacman-static#comment-1066703 Is there a check-in hook or a background process not running for the snapshot generation? Cheers Andreas -- Andreas Baumann Trottenstrasse 20 CH-8037 Zuerich Telefon: +41(0)76/373 01 29 E-mail: mail(a)andreasbaumann.cc Homepage: www.andreasbaumann.cc

2 1

Re: Malicious AUR packages spreading Shai Hulud malware
by Hyacinthe Cartiaux 25 May '26

25 May '26

Hi Soufiane, On 5/19/26 1:29 AM, Fariss, Soufiane wrote: > Flagging an active coordinated supply-chain attack against the AUR > observed on *2026-05-16 / 2026-05-17*. Three packages were adopted by > three single-package burner accounts using |@onionmail.org| addresses, > and the very first commit on each pushed an identical payload. Thanks for bringing this to our attention, we are suspending the concerned accounts and reverting the changes. I've found quite a few additional candidates with a variant (running "npm install crypto-javascript" in a new install script), pushed at the same time. Accounts: * pierrethomas * damienlebond Packages: * gnome-vfs * expressvpn * atomicwallet-bin * exodus-bin This is a not so kind remember to not trust blindly AUR packages and to verify before building/installing updates... Best, Hyacinthe

1 0

jupiter-hw-support: git repo not cleared after approved deletion
by L1bT0rch＠proton.me 23 May '26

23 May '26

Hi, A TU approved my request to delete and recreate jupiter-hw-support to fix the committer email. The package no longer appears on the web UI, but the git repo still contains old commits — git clone returns data and git push is rejected. Could someone please wipe the git history of jupiter-hw-support.git so I can push fresh? Thanks, LibT0rch

2 1

Re: AUR Account Suspension Appeal - ozan-fn
by Actionless Loveless 21 May '26

21 May '26

that's a bit funny assumption that "LLM==data stealing" - 0) how corporations would steal data from local models, and 1) how it's even related if the context is claiming that using tool ABC (20y ago syntax highlight, now LLM) makes the code by definition (of not so-smart snobs/elitists) to be bad quality. ironically the structure of your argument strongly remind chatgpt 5.0+ if users would try to argue its leftist system prompt - it also instead of seeing main logic via reasoning (as 'uncensored' llms or rastafari would do), it instead starting trying hard to narratively 'preserve' its flawed and rigid 'narrative' to attack the small details and blindly ignore big patterns ("we can't compare X and Y, because even if pattern is the same - it would lead to conclusion which conflicts with my propaganda books, so let's derail it into comparing types of paint used on X and Y")

1 0

AUR Account Suspension Appeal - ozan-fn
by AKHMAD FAUZAN 21 May '26

21 May '26

Dear Arch Linux Trusted Users, I am writing to respectfully appeal the suspension of my primary AUR account, username: ozan-fn. I would like to clarify the recent situation regarding the 'antigravity-ide' package. The package was flagged and criticized by some users who suspected that the PKGBUILD contained "AI slop" or suspicious scripts. I want to clarify that while the initial configuration attempts were flawed, the download URL used in the package is indeed the official Google release URL. Out of panic and a desperate desire to save the package and hand it over to the right hands, I made a mistake by creating a second account (username: 2586ozan). Through that account, I immediately added an experienced contributor, @AlphaLynx, as a co-maintainer. @AlphaLynx has since cleaned up the PKGBUILD perfectly, shifted the source to the official Google CDN, and submitted a formal merge request (PRQ#81922). The package 'antigravity-ide' is now completely safe, properly maintained, and follows all AUR packaging standards thanks to this collaboration. I sincerely apologize for the initial messy script and for inappropriately creating a second account to bypass the situation. My only intention was to prevent the package from dying and to ensure the community got a working version. I kindly request the Trusted Users to unsuspend my original account (ozan-fn). I am more than happy to have the temporary account (2586ozan) deleted once my primary account is restored, provided that the maintainer/submitter status for 'antigravity-ide' is transferred back to 'ozan-fn' so that @AlphaLynx, @kIERO, and I can continue working on it together. Thank you for your understanding, time, and help in resolving this matter. Best regards, Akhmad Fauzan (ozan-fn)

3 2

Temporary Maintenance Delay for My AUR Packages
by shresth paul 17 May '26

17 May '26

Hello Everyone, I hope you're doing well. I will be away from active development and maintenance for a short period (likely around a month or 2 (max)) due to some personal circumstances. In case there are any issues related to the packages I currently maintain, please feel free to reach out to me via email. I will try my best to review and fix critical issues as soon as possible whenever I am available. Thank you for your patience and understanding. Thanks Shresth Paul (AUR UserName - SecByShresth)

1 0

Package Maintainer Application - Hyacinthe Cartiaux
by Hyacinthe Cartiaux 05 May '26

05 May '26

Hi, My name is Hyacinthe and I'm hereby applying to become a Package Maintainer. My application is sponsored by Rémi Gacogne (rgacogne), whom I met at FOSDEM this year, and Robin Candau (Antiz). I sincerely thank both of them for their availability and support. I live near Metz in France and I've been working as an HPC sysadmin at the University of Luxembourg for the last 15 years. You can find me by my first name on IRC or my unix login "hcartiaux" anywhere else. My Linux journey started in the 2000s with Mandrake 8.2 which was a magical (pun intended) experience, discovering all the desktop/window managers packed on the 3 CD-Rs, as well as Dreamcast-Linux which I used to write my first Hello World in C. I then used Ubuntu, Debian and Gentoo, before settling on Arch Linux in 2007, convinced by its design and the KISS philosophy. This experience has definitely shaped my professional skills and mindset. In the past years, I've shared my personal projects on GitHub[0] and more recently on Codeberg[1] as well. Among others, I've been particularly active in the dn42 community[2] and developed a BGP auto-peering service[3] which I had the opportunity to talk about at FOSDEM this year[4]. I also build and release OpenBSD cloud images[5] with cloud-init. On the Arch Linux packaging side, I am maintaining some packages on the AUR[6] and I've submitted a fair amount of Merge Requests on the Arch Linux gitlab, most notably to add missing nvchecker integration to packages[7]. I've also been active in the testing team, and started working on small PoC package testing suite using bash, bats and podman[8]. Some packages should obviously be tested on real hardware but, currently, testing packages is a quite repetitive and not well documented task, so I think that centralizing test cases as code could be a good idea. Aside from packaging-related contributions, I submitted two Merge Requests to pacman (pending approval): * one to fix compilation warnings (and make the CI green)[9] * another one to fix a bug (#297) regarding temporary directories left in /var/cache/pacman[10]. I genuinely enjoyed reading the pacman code. C is not my day job but I'm interested in everything low-level. Outside of the cyberspace, I like biking and hiking in the forest, ping me and I'll happily share my preferred spots in Luxembourg and in the greater area ;) If I'm accepted as a Package Maintainer, I'm especially interested in maintaining HPC and sysadmin related packages in [extra], such as: * clustershell * lmod * env-modules * netcalc * autofs I'd also be interested in moving the following AUR packages: * cvmfs * turbovnc * screen-message * ruby-hiera-eyaml * puppet-lint I'm willing to adopt some of the currently orphaned packages in [extra] (e.g. encfs, cdrdao, sg3_utils, nss-mdns) and also to help maintain some packages that only have one maintainer at the moment (e.g. bats* packages, gocryptfs, parted, iotop, smartmontools, autossh, python-paramiko, expect, ncftp, cdparanoia, powertop, unrar/unzip...). I may be interested in contributing to other areas as well in the future, such as bug wrangling and maybe infrastructure/devops (since I'm fairly accustomed to Ansible/Terraform). Thanks in advance for your feedback and for considering my application! Best, Hyacinthe [0] https://github.com/hcartiaux [1] https://codeberg.org/hcartiaux [2] https://hcartiaux.github.io/dn42/ [3] https://github.com/hcartiaux/dn42-sshd-autopeer [4] https://fosdem.org/2026/schedule/event/RPJHYK-automating_bgp_peerings_in_th… [5] https://github.com/hcartiaux/openbsd-cloud-image [6] https://aur.archlinux.org/packages?SeB=M&K=hcartiaux [7] https://gitlab.archlinux.org/groups/archlinux/-/merge_requests/?author_user… [8] https://codeberg.org/hcartiaux/archlinux-testing [9] https://gitlab.archlinux.org/pacman/pacman/-/merge_requests/349 [10] https://gitlab.archlinux.org/pacman/pacman/-/merge_requests/348

7 15