- Aur-general - lists.archlinux.org

Re: [aur-general] Couldn't reset AUR password - RESOLVED
by Vitaliy Berdinskikh 09 Jul '17

09 Jul '17

Thanks, I've resetted a password and logged in AUR successfully. 9 лип. 2017 р. 3:27 пп "Florian Pritz" <bluewind(a)xinu.at> пише: On 08.07.2017 11:23, Vitaliy Berdinskikh via aur-general wrote: > Login: ur6lad > E-mail: <login>@gmail.com (or maybe <login>@archlinux.org.ua but > archlinux.org.ua now is down) I see multiple emails being successfully delivered to gmail. Please check your spam folder. Florian

1 0

[aur-general] Couldn't reset AUR password
by Vitaliy Berdinskikh 09 Jul '17

09 Jul '17

Hi! Some years ago I managed few AUR packages then I abandoned them. Now I want to update these packages and maybe add few new but cannot login to AUR as I fogot my password. I've tried to reset the password, the site said Check your e-mail for the confirmation link but I didn't receive any e-mails. How can I reset my password for AUR? Login: ur6lad E-mail: <login>@gmail.com (or maybe <login>@archlinux.org.ua but archlinux.org.ua now is down) -- Regards, Vitaliy Berdikskikh AKA UR6LAD <http://ur6lad.co.ua/> 73!

2 1

[aur-general] Suggestion to add a pinned comment to PKGBUILDs of high risk vulnerable software
by Ralf Mardorf 05 Jul '17

05 Jul '17

Hi, I understand that users should decide on their own, if they wish to install high risk vulnerable software, so I'm not writing because a deletion request was rejected. I want to make a suggestion. A pinned comment could warn about the high security risk and assuming that upstream of the original software shouldn't fix vulnerabilities, at least recommend to ask upstream of software that requires such software as a dependency, to get rid of this dependency, instead of installing the vulnerable software. I'm not sure if everybody is aware of the risks a package like https://aur.archlinux.org/pkgbase/webkitgtk/ https://aur.archlinux.org/packages/webkitgtk2/ does cause. When providing such a PKGBUILD, is speaking anything against a short pinned comment? Regards, Ralf -- Vote for apulse! echo $(w3m https://aur.archlinux.org/packages/apulse |grep 'Votes: ') Votes: 81 Updated: Sun Jul 2 09:03:52 CEST 2017

5 9

[aur-general] Removal of two packages of mine.
by Jannik Hauptvogel 03 Jul '17

03 Jul '17

Hello Arch fellas, I just got into submitting packages to the AUR and made a mistake, two to be exact. I want to have the following two packages removed: https://aur.archlinux.org/packages/tictactoe-gtk/ https://aur.archlinux.org/packages/connect-four-gtk/ How can i accomplish that? Kind regards, Jannik Hauptvogel.

2 1

[aur-general] gopro package check
by mickael foucaux 02 Jul '17

02 Jul '17

Hi ! I just realized my first PKGBUILD for gopro tool which is available here for now: https://github.com/mickro/gopro-tools-arch-package Gopro tools are made by https://github.com/KonradIT. That gives some useful tools for GoPro post production. And I think that can be usefull for many. I'm asking here for a PKGBUILD review, as suggested on https://wiki.archlinux.org/index.php/Arch_User_Repository#Submitting_packag… . cheers, Mickael

2 4

[aur-general] Help with PKGBUILD for python-txtorcon
by Storm Dragon 30 Jun '17

30 Jun '17

Howdy, My package requires a new dependancy called python-txtorcon. I wanted to provide both python2 and python3 versions of this package, so I made the PKGBUILD using the package python-twisted as a guide. I think I have done pretty much everything right, and it works for me, but there are some who are having trouble with it: https://aur.archlinux.org/packages/magic-wormhole/?comments=all I have attached the PKGBUILD for python-txtorcon. Can someone please take a look at it and see if there is anything wrong? Thanks for the help :) Storm -- Powered by Arch Linux! I am registered Linux user number 508465: https://linuxcounter.net/user/508465.html My blog, Thoughts of a Dragon: http://www.stormdragon.tk/ get my public PGP key: gpg --keyserver wwwkeys.pgp.net --recv-key 43DDC193 Twitter and Facebook are so ... yesteryear. Get your 2MB Social account TODAY! http://2mb.social/main/register How many Internet mail list subscribers does it take to change a lightbulb? http://goo.gl/eO4PJ "Every day is Halloween" Type O Negative - Black No. One

2 1

[aur-general] Gcc-6.3: ldd shows wrong symbols
by Stefan Husmann 28 Jun '17

28 Jun '17

Hello, I have put gcc63 to AUR, merely to have a working gcj implemetation, but something is wrong with it. If I compile anything with it, ldd shows that the resulting binaries have wrong symbols. For instance, ldd ~/paketierung/meine_Pakete/fotoxx/pkg/fotoxx/usr/bin/fotoxx |grep -v usr linux-vdso.so.1 (0x00007ffcbe5cf000) libstdc++.so.6 => /lib/gcc/x86_64-pc-linux-gnu/6.3.1/libstdc++.so.6 (0x00007fd4fb0e7000) libgcc_s.so.1 => /lib/gcc/x86_64-pc-linux-gnu/6.3.1/libgcc_s.so.1 (0x00007fd4fabbe000) /lib64/ld-linux-x86-64.so.2 (0x00007fd4fe8d6000) IMHO it should be libstdc++.so.6 => /usr/lib/gcc/x86_64-pc-linux-gnu/6.3.1/libstdc++.so.6 What am I doing wrong? I do not know how to fix this. fotoxx is written in c++, but this happens also for programs compiled with gcc or gcj. The pdftk PKGBUILD especially suffers from this, as you can see in the AUR comments. Help is much appreciated. Best Regards Stefan

3 3

[aur-general] https://aur.archlinux.org/ is down
by Ralf Mardorf 17 Jun '17

17 Jun '17

Hi, just in case it should be an unknown issue, https://aur.archlinux.org/ is down. Regards, Ralf

3 2

[aur-general] Typo in email address
by Laurent van den Bos 14 Jun '17

14 Jun '17

Dear all, Approximately an hour ago I tried to create an account for AUR but during the registration I made a typo in my email address. After a query on the forum (see [1]) I was referred to this list for help. I think it would be a bit odd if I just create a new account and ignore the other one (keeping the database a bit clean). What is the best thing I could do? The username I registered at AUR is Laurent and the correct email address should be the address of this email. Thanks, Laurent [1] https://bbs.archlinux.org/viewtopic.php?id=227238

1 0

[aur-general] saving AUR history (Re: TU Application: Thore Bödecker)
by Yardena Cohen 05 Jun '17

05 Jun '17

On Wed, May 10, 2017 at 5:02 AM, Yardena Cohen <yardenack(a)gmail.com> wrote: > On Wed, May 10, 2017 at 4:49 AM, Thore Boedecker via aur-general > <aur-general(a)archlinux.org> wrote: >> To make all these parts easily and comfortably available to all >> Arch Linux users I would like to move these few packages to [community] >> (if Yardena Cohen a.k.a. yar agrees for amavisd-new). > > That's very polite of you, and once you're a TU you're welcome to take > it over, but generally you don't need to ask permission. TUs have > taken my packages before, and that's just how it is. :) So, I just noticed that you took over my two packages: amavisd-new and perl-convert-uulib. Which is fine. But I also noticed that instead of preserving their git repo histories, you just started a new repo with the first commit called "import from AUR": https://git.archlinux.org/svntogit/community.git/log/trunk?h=packages/amavi… https://git.archlinux.org/svntogit/community.git/log/trunk?h=packages/perl-… I'm curious, other than my local backup, is this history now gone for good?

5 4

[aur-general] MariaDB vs MySQL
by Konstantin Gizdov 01 Jun '17

01 Jun '17

Hi all, I saw today libmariadbclient was updated to 10.1.24 and dropped the line where it provides libmysqlclient. However, it still ships with the shared libs and conflicts libmysqlclient. I maintain a few packages that require libmysqlclient and I have some installed that require libmariadbclient. So with this conflict and no provision statement, my system is broken. As a temporary fix, the packages I maintain now require libmariadbclient with the hopes that it implicitly provides mysql support too. However, can I realistically depend on this as a fact or not? If not, isn't that a way bigger problem for others as well? Help and advice is much appreciated. Regards, Konstantin

2 1

[aur-general] TU Application: André Silva
by André Silva 27 May '17

27 May '17

Hi all, I'm André Silva (known as Emulatorman) that was one of main full-time Parabola devs between 2012-2017 [0] maintaining around 800 packages [1], mainly Linux-libre kernels and personal ones such as the Linux-libre in combination with Knock [2], Grsecurity+Knock [3]. I will happy to maintain some of my packages with the other TUs and my sponsor (nicohood) in [community]. The following packages that i would maintain are: * ath9k-htc-firmware * linux-libre-firmware * openfwwf * linux-libre * linux-libre-lts Regards, André Silva GPG ID: C92B AA71 3B8D 53D3 CAE6 3FC9 E697 4752 F970 4456 [0]:https://git.parabola.nu/hackers.git/tree/users/1007.yml [1]:https://lists.parabola.nu/pipermail/dev/2017-April/005094.html [2]:https://wiki.parabola.nu/Knock [3]:https://wiki.parabola.nu/Grsecurity%2BKnock

7 13

[aur-general] TU Application: Thore Bödecker
by Thore Boedecker 24 May '17

24 May '17

Hey folks, My name is Thore Bödecker (a.k.a. foxxx0, or just foxxx depending on nick availability) and finally I have taken the time increase my involvement with Arch Linux. I'm 26 years old now and living in small town called Falkensee, near Berlin in Germany. First of all thanks to Florian Pritz (Bluewind) who is sponsoring my TU application. I heard you like stories so I'm happy to tell you about my way through the Linux world. I have been using Linux in various flavours for a long time, if memory serves correctly it all started with Ubuntu 6.10 somewhere in 2006 while I was still in school. At first it was merely some experimentation and exploring a whole new world but quickly I got really interested. Being a totally addicted gamer at that time it was not a real option for daily usage but I went ahead to build a small fileserver with it and continued to learn new stuff while doing so. After switching back and forth between Ubuntu and Debian for a couple of years and a bit of Gentoo in the middle I ended up renting a server to host some stuff with Debian. In October 2010 my bachelor studies in some sort of technical computer science started at HTW Berlin (for the German speaking people, the course of studies was called "Informationstechnik/Vernetzte Systeme"). This surely had quite some influence and not much later Arch Linux was the OS on my laptop. And oh it was good and enjoyable (even without systemd back then! :P). During my studies I had less and less time for gaming which eventually made me install Arch on my desktop at home. At that point it was already quite clear that there was no alternative for me. Having used Arch for some years on a daily basis made me more and more annoyed with my rented server, that was still running Debian. I got really upset with APT and the "Debian-way" of doing things, having seen how simply and enjoyable they were on Arch Linux. You can pretty much guess what happened, I ended up with Arch on my rented server as well. And a second one. And on my router at home. I even build a custom archiso for home PXE setup, doing which is really pleasing too. Please bear with me, I'll try to wrap things up :) Since October 2013 I am studying computer science at the TU Berlin which has been quite an adventure thus far and if everything works out I'm on track to start my master thesis near the end of this year. As I am also providing hosting services on that server to a small group of customers, the PHP 7 release was quite cumbersome. I had to find a way to provide support for two different PHP versions on my server. Gladly I found a fellow sufferer in Mickaël Thomas (mickael9 in the AUR) and we started working on the php56 AUR package [1]. It was a bit messy at first but in the end it worked out and I've been running php56 together with the upstream Arch Linux php packages for over a year now. I have been a co-maintainer of that package ever since and tried to push the security releases out as quickly as possible. In order to retain as much features of php56 as possible, I created some additional packages for that, which could co-exist with upstream Arch repo packages as well: [2] php56-apcu [3] php56-geoip [4] php56-memcache [5] php56-memcached [6] php56-xdebug So why am I doing this all? I love using Arch Linux, it has been a joyful journey most of the time and I'm looking forward to what might come. But why do I want to be a TU some of you might ask. As I am providing hosting services for customers I am also acting as an email service provider for my customers (and for myself too). Over the last few month there were some nasty spam mails glitching through my spamassassin setup. Naturally I investigated and found that I couldn't really do *anything* while using Arch Linux repo packages only (which I highly prefer for critical infrastructure). I have been in touch with Florian very, very much over the last few years and we shared the same desire: amavisd-new. So last week I did an experiment with a combination of opendkim + opendmarc + amavisd-new. When I discovered that there was no AUR package for amavisd-milter I went ahead and created one. But somehow when I tried to push my package to AUR it said "Permission denied". As it turned out, another fellow Arch Linux user has done the exact same thing and pushed to the AUR a couple of hours before me. So I got in contact with said Person, Karol Babioch (kbabioch) and he was happy to let me take ownership of amavisd-milter [7]. I countinued to experiment and it seemed the opendmarc internal SPF check wasn't really working in the Arch Linux repo version. This made me build opendmarc using libspf2 which did the trick and I've put that together in opendmarc-libspf2 [8]. To make all these parts easily and comfortably available to all Arch Linux users I would like to move these few packages to [community] (if Yardena Cohen a.k.a. yar agrees for amavisd-new). As you guys want to make sure that I am capable of writing high quality PKGBUILDs, Florian pointed out some AUR packages that were orphaned and could use some makeover. So I went ahead and tried my best to get them back into shape, feel free to give feedback: [9] awl [10] davical [11] webalizer You can find all packages that I currently maintain here: [12]. Last but not least I would like to throw in my own open source project, that I created to easy management of my hosting: [13] vhost-api It is currently undergoing a rewrite in order to improve the modularity, expandability and maintenance. Sadly my time for that is a bit scarce right now and it is not urgent as has been working quite well thus far. The packages that I would like to move to [community], if the current maintainers agree, are: - amavisd-new - amavisd-milter - perl-convert-tnef (required for amavisd-new) - perl-convert-uulib (required for amavisd-new) - libspf2 Additionally I would like to take maintainership of opendmarc if that is okay with Sergej, in order to build it against libspf2. Apart from maintaining the mentioned packages I am also quite capable regarding server and service hosting and happy to assist in maintaining and improving the Arch Linux infrastructure. :) The best ways to reach me are either through email: me [at] foxxx0 [dot] de Or over on split^Wfreenode: freenode/foxxx0 Thanks for taking the time to read all this and for considering my application. Cheers, Thore [1] https://aur.archlinux.org/cgit/aur.git/log/?h=php56 [2] https://aur.archlinux.org/packages/php56-apcu [3] https://aur.archlinux.org/packages/php56-geoip [4] https://aur.archlinux.org/packages/php56-memcache [5] https://aur.archlinux.org/packages/php56-memcached [6] https://aur.archlinux.org/packages/php56-xdebug [7] https://aur.archlinux.org/packages/amavisd-milter [8] https://aur.archlinux.org/packages/opendmarc-libspf2 [9] https://aur.archlinux.org/packages/awl [10] https://aur.archlinux.org/packages/davical [11] https://aur.archlinux.org/packages/webalizer [12] https://aur.archlinux.org/packages/?SeB=m&K=foxxx [13] https://github.com/vhost-api --

7 12

[aur-general] Cabal-install-git package
by Markus Ongyerth 14 May '17

14 May '17

Hello, I created a PKGBUILD for cabal-install (from git) and wanted to upload it to the aur. [1] When I fetched the repository from the server, I got a PKGBUILD that already exists, but isn't listed on the website. #archlinux on freenode told me, that can happen when a repository was deleted from the aur. Is it possible to get my version in? Or was it removed, because a git HEAD version of cabal-install is considered superseeded by something from the official repos? ongy [1] https://github.com/Ongy/cabal-install-PKGBUILD

4 3

[aur-general] Can we have optional deps on AUR packages?
by Sven-Hendrik Haase 19 Apr '17

19 Apr '17

I just wanted to clear this up with the other TUs: Is it ok for [community] packages to have optional deps on AUR packages or not?

3 3

[aur-general] aursec - blockchain-based verification of AUR packages
by Bennett Piater 13 Apr '17

13 Apr '17

Hello, we are pleased to announce the release of aursec [0], a tool which aims to improve the security of using the AUR. We are writing it as part of our Bachelor's thesis. It provides a secure hash database in a private Ethereum blockchain that stores hashes for specific package versions. The hash that was submitted from the most different users becomes the consensus and can be queried and compared against. The hash is formed from the PKGBUILD, install files and VCS sources, thereby adding a layer of verification on top of that provided by the hashes in the PKGBUILD. The threat model [1] we defend against is targeted attacks against specific AUR users, e.g. using a hostile takeover and subsequent modification of an orphan package, that would be reverted and therefore likely not noticed. If the target used aursec, he would see that his package has a different hash from what other users got. Aursec takes a build folder containing a PKGBUILD and .SRCINFO and does all the work automatically. It calls makepkg --verifysrc in a firejail sandbox to download VCS sources and find out the current version. Example use: $aursec ~/aur/foo $find -type d ~/aur | aursec We would greatly appreciate feedback on the threat model, solution, and the usability of the tool itself. Cheers, Bennett Piater and Lukas Krismer [0]: https://aur.archlinux.org/packages/aursec [1]: https://vps1.piater.name/file-sharing/r/_q35eP3Y89#wqDp8+hB9C22GdKrH4nD/HP1… -- GPG fingerprint: 871F 1047 7DB3 DDED 5FC4 47B2 26C7 E577 EF96 7808

1 0

[aur-general] git push - Permissions denied
by Dan B 06 Apr '17

06 Apr '17

Package: aur.archlinux.org/libcs50 > » git push > Enter passphrase for key '/home/krakn/.ssh/id_rsa': > git-receive-pack: permission denied: krakn > fatal: Could not read from remote repository. > > Please make sure you have the correct access rights and the repository exists. Remotes are as follows (I am able to clone the repository): > » git remote -v > origin ssh://aur@aur.archlinux.org/libcs50 (fetch) > origin ssh://aur@aur.archlinux.org/libcs50 (push) I have no problems pushing to my other repositories. Is there something on the backend that might be preventing the push? Thanks!

3 4

[aur-general] first package submission
by David CARLIER 05 Apr '17

05 Apr '17

Hi all, I wished to submit this new package, the only thing is the main source file needs to be taken from the url (e.g needs a registration) but that s all so I dunno if I can apply for submitting this to aur ? Kind regards.

4 4

[aur-general] Deletion requests
by Konstantin Gizdov 04 Apr '17

04 Apr '17

Hi all, So I updated my packages and had other people also update theirs so that pythia8 and xrootd-abi0 are now completely redundant. I submitted requests for deletion a while ago and I am just writing to confirm that they can be safely removed. No packages have them as dependencies and I have even overprovisioned with 'provide' statements in the now correct pythia and xrootd packages. Thanks. Regards, Konstantin

2 1

[aur-general] Should "base" packages be listed as dependencies?
by Baptiste Jonglez 30 Mar '17

30 Mar '17

Hi, I was pretty confident that "base" packages should be listed as dependencies in PKGBUILDs, i.e. they are not assumed to be installed (as opposed to "base-devel" for build dependencies). This belief is reinforced by the fact that namcap gives dependencies error about packages such as glibc (which is in "base"): E: Dependency glibc detected and not included (libraries ['usr/lib/libc.so.6', 'usr/lib/libcrypt.so.1'] needed in files ['usr/lib/libcli.so.1.9.7']) But I could not find any documentation about this. On the contrary, this wiki page [1] says the opposite: In addition, the base group is assumed to be installed on *all* Arch systems. Am I missing something obvious? Thanks, Baptiste [1] https://wiki.archlinux.org/index.php/Makepkg#Usage

16 32

[aur-general] Review and a bit of other help request
by Konstantin Gizdov 29 Mar '17

29 Mar '17

Hi all, So I have now for quite a while been the maintainer for the following: root root-extra pythia8 xrootd-abi0 (this exists as a work around for other maintainer not updating package) unuran root5 (legacy and poorly supported for GCC 5+, need help here especially) and just adopted pythia. I've actually put quite a bit of work in some of them. With the latest changes upstream here and there, I am planning to re-optimize the builds, but I wanted to first ask for some input from this list and gather some suggestions. My main focus is making CERN's ROOT and it's relevant dependencies/extensions work on Arch. I started and mainly concentrate on root and root-extra. Pythia, XRootD, Unuran are such extensions which were not available or broken in Arch. So I had to make 'pythia8' and 'xrootd-abi0' as workarounds. I have now finally been able to adopt 'pythia' and plan on making a major re-write and optimization. I still have to keep 'xrootd-abi0' as the current maintainer does not really update or fix his package when new versions/problems arise. I do not plan on making an orphan request, as I do not want to cause trouble for people. However, I do wish to make the current environment as good as possible for the people that actually use it and would welcome any input from you. Thanks in advance. Apart from that I wanted to understand better if and how package signing works with AUR. I tried the wiki and a bit of Google, but so far it seems package signing is only for official repos/trusted users. I did not want to try it out myself before getting some advice as I was afraid messing up will prevent people from installing them. Regards, Konstantin

4 16

[aur-general] Aur password reset link doesn't send mail
by Taha Konuk 29 Mar '17

29 Mar '17

Hello, I want to reset my aur login password but after I enter my email address to get a reset link I don't receive the mail. My account is on this mail. Can you guys help me? Thanks

3 2

[aur-general] Trusted User application
by m4sk1n＠vivaldi.net 17 Mar '17

17 Mar '17

Hello, I'm Marcin Mikołajczak (on AUR 'm4sk1n') and I would like to become Arch User Repository Trusted User. I was born in Poland in 2001. I am Arch Linux user for about one year. I have recommended it to some people, a lot of them have switched from Windows to Manjaro. I understand bash scripting. Now I spend a lot of time on learning C++. Currently I'm maintainer of 5 packages in AUR and I can take care of more of them. The current ones are 'xnots-git', 'otter-browser-weekly', 'otter-browser-git' and two Xfce components (git checkout). I'm working on Polish translations of some open source projects (like Xfce, WINE, Otter Browser...). Of source I know how to use Git. My main non-technical interest is music, mainly electronic. If I become a TU I would like to push 'otter-browser' package to [community] repo. I would also adopt some packages, maybe music-related? Best way to contact me is IRC (freenode, as m4sk1n, I'm on 'arch-linux', 'arch-linux-aur' and 'arch-linux-newbie'). That's all, thanks for reading it, Best regards, m4sk1n

3 2

[aur-general] Package review request
by Stefan Auditor 16 Mar '17

16 Mar '17

Hi list, creating a PKGBUILD[1] for Traefik[2], a reverse proxy, I would like to have it reviewed, as this is the first package I do that is containing a service. I tried following the Arch packaging standards[3] but am fairly sure I missed things. Other than that it's a Golang project, so I just have a binary and some configuration files to package. Thank you for your time. Stefan [1] https://aur.archlinux.org/packages/traefik-bin/ [2] https://github.com/containous/traefik [3] https://wiki.archlinux.org/index.php/Arch_packaging_standards

2 2

[aur-general] aurweb 4.5.1 released
by Lukas Fleischer 09 Mar '17

09 Mar '17

Hello, We are pleased to announce aurweb 4.5.1, the first maintenance release for 4.5. The official aurweb setup [1] has already been updated. For a comprehensive list of changes, please consult the Git log [2]. As usual, bugs should be reported to the aurweb bug tracker [3]. [1] https://aur.archlinux.org/ [2] https://projects.archlinux.org/aurweb.git/log/?id=v4.5.1 [3] https://bugs.archlinux.org/index.php?project=2

1 0