- Aur-general - lists.archlinux.org

Re: (suspension of Pellegrino Prevete) - was: removal of yuzu from the official repos
by Muflone 18 Mar '24

18 Mar '24

Il 17/03/24 19:10, Pellegrino Prevete ha scritto: >> Sending again as Gmail SPF policy denied my previous message >> >> > -------- Forwarded Message -------- >> >> tallero [1] added the following comment to libisl25-static [2]: >> >> >> >> If Marcello Meszaros were a good maintainer >> >> he wouldn't need me to tell him each time for what packages >> >> my static depends are written for and he would go >> >> check himself. >> >> >> >> Actually he's capable of going check and lie, as with Banshee. >> >> >> >> As usual, I urge people to either make him stop making me lose so much >> >> time after his useless deletion requests. >> >> >> >> Many packages can't currently bu upgraded becausu Muflone disabled >> >> my mobile account. >> >> >> >> The attacks I've received from these two individuals are shameful >> >> to say the least and I'm starting to think they should >> >> be asked to go away. >> >> >> >> [1]https://aur.archlinux.org/account/tallero/ >> >> [2]https://aur.archlinux.org/pkgbase/libisl25-static/ >> >> @tallero / @trucolo / Pellegrino Prevete your first account was >> suspended for disrespecting the AUR rules and decisions. >> >> Before suspending your trucolo account I asked you to read the Arch >> Linux code of conduct but unfortunately it seems you have not any >> intention to respect any rules. >> >> Therefore I'm going to delete this your latest comment and give you >> the final warning before banning you definitively from the AUR, in >> all of your accounts. >> >> Regards > > I can't see how suspending my mobile account can help me maintain my > packages and do my work and not being detrimental to everybody. > I see actions being taken irresponsably by people on high scranes. > I consider this whole behaviour completely unacceptable: "if you want > to refer to what i could have meant, please go check pag.4369 of third > edition of the Zibaldone." > Your packages maintenance is not a concern. Your first account was suspended because you direspect the rules and you still continue to disrespect the code of conduct [1] I linked you before by writing ad-personam messages attacking MarsSeed and writing others offensive comments and git commit messages. Unfortunately the suspension has not stopped you in acting in a bad way and therefore I gave you a last warning. If you'll continue to write offensive messages in AUR your accounts will be permanently banned. It's up to you to change this behavior or to stop it immediately as it's not tolerated [1] https://terms.archlinux.org/docs/code-of-conduct/ -- Muflone

9 22

Question about aur package existing in git, but not visible in aur
by Julien Virey 16 Mar '24

16 Mar '24

Hi, The package toggl-cli is not visible in https://aur.archlinux.org/packages?O=0&K=toggl-cli. But it still exists in ssh://aur.archlinux.org/toggl-cli.git The package has not been updated since 2016. commit dd7340e8804776df85fe1eb82a79384e7f1349fb (HEAD -> master, origin/master, origin/HEAD) Date: Mon Feb 22 06:00:17 2016 -0300 I was about to release a new package for this pkgbase ( https://github.com/watercooler-labs/toggl-cli) Can I request a deletion / reset of ssh://aur.archlinux.org/toggl-cli.git to use this pkgbase ? Salutations, Julien

3 3

How do I get an unpopular package that's needed by an existing package to extra?
by Lime In a Jacket (Aaron Liu) 13 Mar '24

13 Mar '24

Ey, A while ago I made the AUR package perl-acme-cow, which is needed for some cowfiles bundled with cowsay. Is there a process for dependencies to enter extra? I understand that it's not popular and doesn't meet the requirement, but without it, attempting to use certain bundled cowfiles results in an error. Cheers, Aᴀʀᴏɴ

2 1

Migration of p7-tools to cahute
by Eldeberen 11 Mar '24

11 Mar '24

Hi everyone, I currently maintain some packages on the AUR, related to Casio calculators. In particular we'll focus on p7/libp7/p7screen which are dedicated to communication protocols. https://aur.archlinux.org/packages/p7 https://aur.archlinux.org/packages/libp7 https://aur.archlinux.org/packages/p7screen Recently the developer (Cakeisalie5) rewrote these utilities and replaced them by a single package, Cahute. https://cahuteproject.org/ I made a new package for this, which is not yet on the AUR but can be found on my personnal forge: https://git.middleearth.fr/Packages/cahute So I have some questions for you ^^ - How do I manage the decommissioning of the old tools? - I understand I'm not allowed to use the 'replaces' directive on the PKGBUILD as it is not an official package, I am right? - Should I add some warnings on existing p7/libp7/p7screen packages warning that they are no more maintained? - On the cahute package, does the .install looks good? - More generally I'll take any advise that help me to comply with the AUR guidelines :) Thanks for your help, Eldeberen

3 2

removal of yuzu from the official repos
by james smith 05 Mar '24

05 Mar '24

as most of you have heard the yuzu has been shutdown by nintendo[1] and the github page removed[2] therefore the package needs to be considered for removal from the official repos as there will be no more updates and the package links to the github will be broken in a matter of time [1] https://storage.courtlistener.com/recap/gov.uscourts.rid.56980/gov.uscourts… [2]https://github.com/yuzu-emu/yuzu

6 7

Re: Upgrade failure
by Abraham S.A.H. 04 Mar '24

04 Mar '24

> Odd, I've been accessing it in China over a VPN for many years. Do you have issues with any other website, and what happens when you replace "www" with "old"? The "old" one opens perfectly. I completely forgot that version of Reddit. But not with "www". No I do not have this problem with other websites. -- Best Regards, Abraham Sent with Tutanota; https://tuta.com

2 1

AUR Orphan Purge
by arch＠serebit.com 01 Mar '24

01 Mar '24

Hello all, Over the past few days, about 3,000 packages were removed from the Arch User Repository as part of a larger cleanup effort. These packages all fit the following criteria: - No maintainer - Popularity equal to 0.00000 - 3 or fewer total votes - Most recent update before 2019-01-01 If a package that you actively use has been removed, and you are willing to maintain it, feel free to resubmit the package. The Git repositories of all deleted packages are still accessible[1]. Any future large-scale cleanup efforts will be preceded by an announcement on the mailing lists to avoid blindsiding users and maintainers. Best, Campbell Jones [1] https://wiki.archlinux.org/title/Arch_User_Repository#Acquire_build_files

2 1

Re: powertabeditor - request for PKGBUILD review
by Jonas Serych 21 Feb '24

21 Feb '24

Hi, thanks for your comments. Lone_Wolf wrote: > timidity++ and fluidsynth are the 2 most common software midi > synthesizers on archlinux. > I suggest you list them as optdepends . Thanks, I did that (and also checked that it works with both of these). Polarian wrote: > Appreciate it if you paste the PKGBUILD into the email body, and not > attach it. Would also make it easier to quote. Here is the updated PKGBUILD: --8<---------------cut here---------------start------------->8--- # Maintainer: Jonas Serych <jonas(a)sery.ch> pkgname='powertabeditor' pkgver='2.0.0_alpha19' pkgrel=1 pkgdesc="Guitar tablature viewer and editor" arch=('x86_64') url="https://powertab.github.io/" license=('GPL-3.0-only') depends=('boost-libs' 'boost' 'doctest' 'minizip' 'pugixml' 'rtmidi' 'alsa-lib' 'nlohmann-json' 'qt5-base' 'qt5-tools') optdepends=('timidity++: MIDI playback support' 'fluidsynth: MIDI playback support') makedepends=('cmake') source=("https://github.com/powertab/${pkgname}/archive/refs/tags/${pkgver//_/-}.tar…") sha256sums=('318e14370bd60670dadfe70d2f124d817d51017ec13011f577080633d83f41d4') build() { cmake -B build -S "${pkgname}-${pkgver//_/-}" \ -DCMAKE_BUILD_TYPE='None' \ -DCMAKE_INSTALL_PREFIX=/usr cmake --build build } check() { ctest --test-dir build --output-on-failure } package() { DESTDIR="$pkgdir" cmake --install build } --8<---------------cut here---------------end--------------->8--- Any other things to improve? Or can I put it to AUR? Best, Jonas Serych

1 0

Moving from binary to from source, can we delete bin version
by Mek Yt 20 Feb '24

20 Feb '24

Hi, I first created AUR packages from binary file (`dagu-bin`, `oathkeeper-bin` and `kratos-bin`) but it is best to build them from source. I recreated them from source, I would like to know if it is possible to delete the binary version. I would like to maintain only the one from source. I could disown and wait for them to disappear but it looks cleaner to directly delete them and direct potential users to the correct/maintain one. Thanks, Mek Yt AUR to delete: https://aur.archlinux.org/packages/dagu-bin https://aur.archlinux.org/packages/oathkeeper-bin https://aur.archlinux.org/packages/kratos-bin PS: - `oathkeeper-bin` and `kratos-bin` use `ory-` namespace now (`ory-kratos` and `ory-oathkeeper`) - `oathkeeper-bin` and `kratos-bin` where duplicate (with service files) of orphan `ory-oathkeeper-bin` and `ory-kratos-bin`

4 3

Is including GPG keys in an AUR package for verifying sources a good idea?
by Wilhelm Schuster 20 Feb '24

20 Feb '24

Hi, I maintain the AUR package for wget2 [0] (which has `validgpgkeys()` populated) and have recently been contacted by a user that has trouble with GPG signature verification when building the package in a Docker container (using aurutils apparently). Their first suggestion was for me to drop the validpgpkeys section to make it easier for them to build the package. This is not something I'm willing to implement as that means downgrading security for other users of the package. makepkg provides an escape hatch for users who don't care about signature verification via the `--skippgpcheck` flag. Their second suggestion was for me to add the GPG public keys directly to AUR package. My first thought was that this is also not a good idea, but I'm not sure I can come up with convincing arguments. My reason against it is, that the PGP key allows for a user of my PKGBUILD to verify that I only include sources which have been signed by the maintainer of the software. As packager, I can control the source and hashes for a package, so if I want to use a malicious source, I can just update the hash to match, but I can't easily change the upstream signing key. However, if the users relies on the key included with the package, then I could use my own malicious key, so the user should compare the key with upstream sources anyway. On the other hand retrieving keys from the keyservers can be a crapshoot. I certainly have been bitten by that brittle infrastructure in the past, and having a copy of the key can alleviate that. That seems also the reason, why Arch proper has started including copies of GPG keys with their packages (see for example glibc [1]). This has been codified in RFC0011 [2] and is managed via the `export-pkgbuild-keys` script included in devtools. There doesn't seem to be any discussion of downsides of this approach in the RFC and accompanying Merge Request. Users, who wish to make sure that the used GPG keys are the ones published by upstream can always ignore the included key files and grab the keys directly from the keyservers. Do you think including GPG keys with AUR packages to make it easier for some users is a good idea? Or should they just use `--skippgpcheck`? Are there any glaring issues I'm missing here? Do you know of AUR packages that include the GPG keys for source verification similar to what Arch packages do? [0]: https://aur.archlinux.org/packages/wget2 [1]: https://gitlab.archlinux.org/archlinux/packaging/packages/glibc/-/tree/2.39… [2]: https://rfc.archlinux.page/0011-store-source-signing-keys/ Cheers, Wilhelm.

11 17

powertabeditor - request for PKGBUILD review
by Jonas Serych 19 Feb '24

19 Feb '24

Hi, this is my first time creating a PKGBUILD. I tried to follow the guidelines and the recommended practices for cmake packages, but not sure I didn't miss something. Thanks for any suggestions. I checked that it builds in clean chroot. The software seems to work well, except for JACK server not running error (for playback of midi). I am not sure if this should be somehow solved in the PKGBUILD, or if it should be left to the user. When I run qsynth alongside the powertabeditor the playback works just fine. Somehow setting up timidity++ daemon would work too, I guess. Best regards, Jonas Serych

3 3

Package maintainer for vinegar-git & vinegar is malicious.
by sewn 17 Feb '24

17 Feb '24

Hi. I am the primary developer of Vinegar (sewn(a)disroot.org, see commits and members of GitHub organization vinegarhq with repository vinegar). The AUR package maintainer for my software has defaced me [1], my software, and patched Vinegar maliciously [2]. I have not appreciated the direct insults at me. They have also added a .install hook file to direct installers of the package to another piece of software, which is biased and uncalled for. Additionally, i have asked the maintainer various times to remove the insult directed at me, and to update the package - to which they have not responded for days. They have then maliciously modified the description and changed the code of Vinegar to remove a feature which was announced in our communication channels. I would like to request an urgent removal of the package maintainer DodoGTA from maintaining the AUR packages for my software, they cannot be trusted and are malicious. [1]: https://aur.archlinux.org/cgit/aur.git/commit/?h=vinegar&id=2abcbe54f64c748… [2]: https://aur.archlinux.org/cgit/aur.git/commit/?h=vinegar&id=aa3b4dcad2a67e4…

2 2

tor-browser depublication and replacment
by Zehka 10 Feb '24

10 Feb '24

Hello everyone, Today i noticed by chance that the aur/tor-browser package is gone and replaced by extra/torbrowser-launcher That worries me a bit because as a user of an aur helper i did either not receive or see a notice about that so i stayed on version 12.5.3-1 that was the last one on aur without noticing it was getting outdated. I just wonder if that's common practice? This case is particularly unlucky in my eyes because tor browser has a special role in the security concepts of many people and because the new package is spelled torbrowser-launcher a search in both databases with "yay tor-browser" in september only showed me the aur result. So i just wanted to ask if there is any possibility to make that transition better because i assume i'm not the only user out there who didn't notice. And more thought that i had even though i didn't want to check in order to cause unnecessary chaos: Is the name tor-browser now blocked in aur or could anyone just upload a malicious package to that name and until somebody notices that everyone who has the old tor browser and uses an aur helper for updates gets a malicious version? Regards Zehka

6 5

My account suspended (MarsSeed) without reason - which PM abused their power?
by Marcell Meszaros 28 Jan '24

28 Jan '24

Dear PM's, Please kindly look into which PM chose to abuse their power to suspend my account without any reason. Please also kindly sanction such unacceptable behavior by said PM. Thank you very much. Yours, Marcell Mészáros (MarsSeed)

11 39

Postorius configuration help
by Georg 28 Jan '24

28 Jan '24

Hi list, I'm looking for a good description for postorius configuration. The Arch wiki is unclear to me, and the mailman documentation points to postorius.org configuration, who then points to another mailman doc providing little info on the actual configuration. Long story short, I'm failing to set up postorius so I can create users and let them log in. It would be highly appreciated if someone proficient in this topic is willing to walk me throuh. I'd then amend the wiki for more clarity. Thanks in advance Georg

1 1

Comment spam
by Mark Wagie 22 Jan '24

22 Jan '24

I've been going through my 400+ AUR packages updating the license to match SPDX license requirements. xiota has decided a pkgrel bump is required if one updates the license. He has begun spamming the same comment on 9 of my AUR packages so far. I've already told him to stop here: https://aur.archlinux.org/pkgbase/qtscrcpy#comment-952888. I imagine he's doing it on other packages as well if he's doing it for mine. This is not the first time someone has complained about xiota's behavior. I've had quite enough of it. His email is private, so I can't CC him here. Sent with [Proton Mail](https://proton.me/) secure email.

4 4

Re: xen moving to [extra]
by Sam Mulvey 22 Jan '24

22 Jan '24

On 1/21/24 22:19, Daurnimator wrote: > There's not really any ongoing discussions. > > For what it's worth, my personal motivation is to package qubes guest > packages into the Arch [extra] repo, of which qubes-libvchan will > depend on shared library from xen > (https://github.com/QubesOS/qubes-core-vchan-xen/blob/6427a74060dccf0baa34e3…) > > As an official package, it wouldn't have build options like your > current AUR package. So I think you'd have to maintain an AUR > xen-stubdom package separately. This package is currently more about being a hypervisor rather than being a guest of one, and includes bootable kernels and infrastructure for such. If this package is going to make it to official status with this functionality, the qemu package would have to be modified to support xen and likely a subpackage for it. The Xen codebase will build it's own copy of qemu unless told otherwise, and until a couple years ago that was what the PKGBUILD did. I eventually had to spin off qemu into it's own package to avoid having to build an increasingly aging version of qemu with it's increasing number of compiler errors. That package is here: https://aur.archlinux.org/packages/xen-qemu Without that functionality, it would be necessary to continue maintaining these packages in AUR. In which case I would make effort to work with what exists in the repos. Previous maintainers have attempted to rid themselves of the stubdom functionality, but as of now it's the only consistent way to allow GPU pass-through. I personally do not use this functionality, but I maintain it for those that do with an eye towards deprecating it as soon as newer PVH infrastructure is in place. That should be very soon. For completeness, there's also the xen-pvhgrub package which is a copy of GRUB that runs under PVH domUs, allowing us to boot using Arch's standard kernel packages in that context. > > Are you able to share why OCaml was disabled in your AUR package > recently? > (https://aur.archlinux.org/cgit/aur.git/commit/PKGBUILD?h=xen&id=e9890b16a54…) > Sure! The immediate cause was that the ocaml bindings were not building properly. It was easier to remove them than try to repair them, especially as I have zero knowledge of ocaml. There is some nuance to that, however: - The OCaml bindings are generally not well maintained upstream, afaik - The serially previous maintainers were working towards a minimum viable build, which I've tried to respect as much as I can - The flag to disable OCaml support was already in the ./configure stanza, but that flag had since been renamed - Apparently, no one was using it. I hope that helps explain things! -Sam

1 0

xen moving to [extra]
by Sam Mulvey 22 Jan '24

22 Jan '24

Hello! I've been maintaining xen and associated packages for a few years. This relative evening the package got the following comment: https://aur.archlinux.org/pkgbase/xen#comment-952940 I think it'd be a great idea to include xen in [extra], and I'm wondering if there's some way I could be of assistance or part of any ongoing discussion about it, if any. Thanks! -Sam

2 1

Addition of Support Staff - wahrwolf
by Anton Hvornum 18 Jan '24

18 Jan '24

Hi! I'd like to start the on-boarding process for wahrwolf[1] as a support staff and mirror admin. I hereby sing off as a sponsor with my reasoning below. Wahrwolf, or Vincent, has shown great dedication and engagement with myself and other staff. Vincent has also been a integral part of making progress on several Mirror improvements such as: * A new Mirror definition RFC[2] * A new mirror tooling called 'mirrorctl'[3] (work in progress, but work being done nevertheless) * Several on-line meetings regarding mirrors and mirror management Vincent also graciously hosted 2023's Arch Linux Summit. Overall my experience with Vincent has been good and I think Vincent would make a great addition to the support staff and especially the mirror admins. [1] https://gitlab.archlinux.org/wahrwolf [2] https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/29 [3] https://gitlab.archlinux.org/archlinux/mirrorctl

1 0

changing name
by james smith 18 Jan '24

18 Jan '24

when you open the aur page it says "Some packages may be provided as binaries in [community]." That should be changed to say "Some packages may be provided as binaries in [extra]."

2 1

What to do with oh-my-zsh-git, a package people might not know how to start using
by Aaron Liu 14 Jan '24

14 Jan '24

Greetings AUR users, (hmm I sound like an alien) This package on the AUR called oh-my-zsh-git has been occasionally flagged by people who do not understand that you have to add a line to zshrc to start using it. I suggested a clearer and less suspicious postinstall message, which the package's current maintainer and another user in the comments denied as Arch users should know their system and inspect the PKGBUILD. The package's maintainer then suggested a counterproposal of shipping a symlink of /usr/bin/ohmyzsh-install to "install.sh", which I presume is the name of the official install script. I don't think we should symlink that to oh-my-zsh-something. At most, it should echo the instructions. Plus, I think this is a worse solution than simply putting a message in the postinstall on both merits and practicality. No matter how much people try it, there will be less people who try to tab-complete than those who read the postinstall messages, and nowhere in "know your system" do I see "blindly try tab-completions"; not to mention this package's name is oh-my-zsh-git, not ohmyzsh-git. Yes, ohmyzsh is the official name, but I don't expect users to know that. We cannot rely on users having hyphen completions enabled. This entire exchange occurred in the comments of that package. What do you guys think? -- Cheers, Aᴀʀᴏɴ

2 1

wiringX-git PKGBUILD Review Request
by David C. Rankin 09 Jan '24

09 Jan '24

All, I'm thinking of adding a wiringX-git package to AUR and wanted to put the PKGBUILD out for comment and help. It's a simple tiny package used for embedded development to manipulate GPIO pins. What I've cobbled together is: pkgname=wiringX-git _gitname=wiringX pkgver=251.54030cd pkgrel=1 pkgdesc="wiringX is a modular approach to several GPIO interfaces." url="httpx://wiringx.org/" arch=('i686' 'x86_64' 'armv6h' 'armv7h' 'aarch64') license=('MPL-2.0') makedepends=('git' 'cmake') source=('git+https://github.com/wiringX/wiringX.git') md5sums=('SKIP') pkgver() { cd "${srcdir}/$_gitname" echo $(git rev-list --count HEAD).$(git rev-parse --short HEAD) } prepare() { cd "${srcdir}/$_gitname" mkdir -p build cd build msg2 "Cmake..." cmake .. } build() { cd "${srcdir}/$_gitname/build" msg2 "Building wiringX..." make } package() { cd "${srcdir}/$_gitname/build" msg2 "Packaging wiringX..." make DESTDIR="$pkgdir/" install mv "$pkgdir/usr/local/"* "$pkgdir/usr" rm -r "$pkgdir/usr/local" install -Dm644 "${srcdir}/$_gitname/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE" } And it produces: $ pacman -Qpl wiringX-git-251.54030cd-1-x86_64.pkg.tar.zst wiringX-git /usr/ wiringX-git /usr/include/ wiringX-git /usr/include/wiringx.h wiringX-git /usr/lib/ wiringX-git /usr/lib/libwiringx.so wiringX-git /usr/sbin/ wiringX-git /usr/sbin/wiringx-blink wiringX-git /usr/sbin/wiringx-interrupt wiringX-git /usr/sbin/wiringx-read wiringX-git /usr/share/ wiringX-git /usr/share/licenses/ wiringX-git /usr/share/licenses/wiringX-git/ wiringX-git /usr/share/licenses/wiringX-git/LICENSE We may also want to include the static library. Thoughts? -- David C. Rankin, J.D.,P.E.

6 19

edbrowse being outdated is understandable
by Jude DaShiell 29 Dec '23

29 Dec '23

The maintainer aksr has 389 packages to their credit and hasn't gotten around to doing a git pull on upstream site and another build of edbrowse. Since I can't log into aur original primary email address jdashiel(a)shellworld.net got blacklisted and in process to cutting over to my current address I forgot I had set up an aur account on that older blacklisted address. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

1 0

aur/edbrowse package
by Jude DaShiell 28 Dec '23

28 Dec '23

Incorrectly flagged as out of date. Upstream edbrowse went from version 3.85 to 3.87. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

2 1

Re: Removal of linux-bin AUR package (suspended account)
by myself600＠tutanota.de 27 Dec '23

27 Dec '23

I'm asking for my account to be restored on the basis presented above. -- Odoslané pomocou Tutanoty. Užívaj si bezpečné e-maily bez reklám.

6 8