- Aur-general - lists.archlinux.org

[aur-general] MariaDB vs MySQL
by Konstantin Gizdov 01 Jun '17

01 Jun '17

Hi all, I saw today libmariadbclient was updated to 10.1.24 and dropped the line where it provides libmysqlclient. However, it still ships with the shared libs and conflicts libmysqlclient. I maintain a few packages that require libmysqlclient and I have some installed that require libmariadbclient. So with this conflict and no provision statement, my system is broken. As a temporary fix, the packages I maintain now require libmariadbclient with the hopes that it implicitly provides mysql support too. However, can I realistically depend on this as a fact or not? If not, isn't that a way bigger problem for others as well? Help and advice is much appreciated. Regards, Konstantin

2 1

[aur-general] TU Application: André Silva
by André Silva 27 May '17

27 May '17

Hi all, I'm André Silva (known as Emulatorman) that was one of main full-time Parabola devs between 2012-2017 [0] maintaining around 800 packages [1], mainly Linux-libre kernels and personal ones such as the Linux-libre in combination with Knock [2], Grsecurity+Knock [3]. I will happy to maintain some of my packages with the other TUs and my sponsor (nicohood) in [community]. The following packages that i would maintain are: * ath9k-htc-firmware * linux-libre-firmware * openfwwf * linux-libre * linux-libre-lts Regards, André Silva GPG ID: C92B AA71 3B8D 53D3 CAE6 3FC9 E697 4752 F970 4456 [0]:https://git.parabola.nu/hackers.git/tree/users/1007.yml [1]:https://lists.parabola.nu/pipermail/dev/2017-April/005094.html [2]:https://wiki.parabola.nu/Knock [3]:https://wiki.parabola.nu/Grsecurity%2BKnock

7 13

[aur-general] TU Application: Thore Bödecker
by Thore Boedecker 24 May '17

24 May '17

Hey folks, My name is Thore Bödecker (a.k.a. foxxx0, or just foxxx depending on nick availability) and finally I have taken the time increase my involvement with Arch Linux. I'm 26 years old now and living in small town called Falkensee, near Berlin in Germany. First of all thanks to Florian Pritz (Bluewind) who is sponsoring my TU application. I heard you like stories so I'm happy to tell you about my way through the Linux world. I have been using Linux in various flavours for a long time, if memory serves correctly it all started with Ubuntu 6.10 somewhere in 2006 while I was still in school. At first it was merely some experimentation and exploring a whole new world but quickly I got really interested. Being a totally addicted gamer at that time it was not a real option for daily usage but I went ahead to build a small fileserver with it and continued to learn new stuff while doing so. After switching back and forth between Ubuntu and Debian for a couple of years and a bit of Gentoo in the middle I ended up renting a server to host some stuff with Debian. In October 2010 my bachelor studies in some sort of technical computer science started at HTW Berlin (for the German speaking people, the course of studies was called "Informationstechnik/Vernetzte Systeme"). This surely had quite some influence and not much later Arch Linux was the OS on my laptop. And oh it was good and enjoyable (even without systemd back then! :P). During my studies I had less and less time for gaming which eventually made me install Arch on my desktop at home. At that point it was already quite clear that there was no alternative for me. Having used Arch for some years on a daily basis made me more and more annoyed with my rented server, that was still running Debian. I got really upset with APT and the "Debian-way" of doing things, having seen how simply and enjoyable they were on Arch Linux. You can pretty much guess what happened, I ended up with Arch on my rented server as well. And a second one. And on my router at home. I even build a custom archiso for home PXE setup, doing which is really pleasing too. Please bear with me, I'll try to wrap things up :) Since October 2013 I am studying computer science at the TU Berlin which has been quite an adventure thus far and if everything works out I'm on track to start my master thesis near the end of this year. As I am also providing hosting services on that server to a small group of customers, the PHP 7 release was quite cumbersome. I had to find a way to provide support for two different PHP versions on my server. Gladly I found a fellow sufferer in Mickaël Thomas (mickael9 in the AUR) and we started working on the php56 AUR package [1]. It was a bit messy at first but in the end it worked out and I've been running php56 together with the upstream Arch Linux php packages for over a year now. I have been a co-maintainer of that package ever since and tried to push the security releases out as quickly as possible. In order to retain as much features of php56 as possible, I created some additional packages for that, which could co-exist with upstream Arch repo packages as well: [2] php56-apcu [3] php56-geoip [4] php56-memcache [5] php56-memcached [6] php56-xdebug So why am I doing this all? I love using Arch Linux, it has been a joyful journey most of the time and I'm looking forward to what might come. But why do I want to be a TU some of you might ask. As I am providing hosting services for customers I am also acting as an email service provider for my customers (and for myself too). Over the last few month there were some nasty spam mails glitching through my spamassassin setup. Naturally I investigated and found that I couldn't really do *anything* while using Arch Linux repo packages only (which I highly prefer for critical infrastructure). I have been in touch with Florian very, very much over the last few years and we shared the same desire: amavisd-new. So last week I did an experiment with a combination of opendkim + opendmarc + amavisd-new. When I discovered that there was no AUR package for amavisd-milter I went ahead and created one. But somehow when I tried to push my package to AUR it said "Permission denied". As it turned out, another fellow Arch Linux user has done the exact same thing and pushed to the AUR a couple of hours before me. So I got in contact with said Person, Karol Babioch (kbabioch) and he was happy to let me take ownership of amavisd-milter [7]. I countinued to experiment and it seemed the opendmarc internal SPF check wasn't really working in the Arch Linux repo version. This made me build opendmarc using libspf2 which did the trick and I've put that together in opendmarc-libspf2 [8]. To make all these parts easily and comfortably available to all Arch Linux users I would like to move these few packages to [community] (if Yardena Cohen a.k.a. yar agrees for amavisd-new). As you guys want to make sure that I am capable of writing high quality PKGBUILDs, Florian pointed out some AUR packages that were orphaned and could use some makeover. So I went ahead and tried my best to get them back into shape, feel free to give feedback: [9] awl [10] davical [11] webalizer You can find all packages that I currently maintain here: [12]. Last but not least I would like to throw in my own open source project, that I created to easy management of my hosting: [13] vhost-api It is currently undergoing a rewrite in order to improve the modularity, expandability and maintenance. Sadly my time for that is a bit scarce right now and it is not urgent as has been working quite well thus far. The packages that I would like to move to [community], if the current maintainers agree, are: - amavisd-new - amavisd-milter - perl-convert-tnef (required for amavisd-new) - perl-convert-uulib (required for amavisd-new) - libspf2 Additionally I would like to take maintainership of opendmarc if that is okay with Sergej, in order to build it against libspf2. Apart from maintaining the mentioned packages I am also quite capable regarding server and service hosting and happy to assist in maintaining and improving the Arch Linux infrastructure. :) The best ways to reach me are either through email: me [at] foxxx0 [dot] de Or over on split^Wfreenode: freenode/foxxx0 Thanks for taking the time to read all this and for considering my application. Cheers, Thore [1] https://aur.archlinux.org/cgit/aur.git/log/?h=php56 [2] https://aur.archlinux.org/packages/php56-apcu [3] https://aur.archlinux.org/packages/php56-geoip [4] https://aur.archlinux.org/packages/php56-memcache [5] https://aur.archlinux.org/packages/php56-memcached [6] https://aur.archlinux.org/packages/php56-xdebug [7] https://aur.archlinux.org/packages/amavisd-milter [8] https://aur.archlinux.org/packages/opendmarc-libspf2 [9] https://aur.archlinux.org/packages/awl [10] https://aur.archlinux.org/packages/davical [11] https://aur.archlinux.org/packages/webalizer [12] https://aur.archlinux.org/packages/?SeB=m&K=foxxx [13] https://github.com/vhost-api --

7 12

[aur-general] Cabal-install-git package
by Markus Ongyerth 14 May '17

14 May '17

Hello, I created a PKGBUILD for cabal-install (from git) and wanted to upload it to the aur. [1] When I fetched the repository from the server, I got a PKGBUILD that already exists, but isn't listed on the website. #archlinux on freenode told me, that can happen when a repository was deleted from the aur. Is it possible to get my version in? Or was it removed, because a git HEAD version of cabal-install is considered superseeded by something from the official repos? ongy [1] https://github.com/Ongy/cabal-install-PKGBUILD

4 3

[aur-general] Can we have optional deps on AUR packages?
by Sven-Hendrik Haase 19 Apr '17

19 Apr '17

I just wanted to clear this up with the other TUs: Is it ok for [community] packages to have optional deps on AUR packages or not?

3 3

[aur-general] aursec - blockchain-based verification of AUR packages
by Bennett Piater 13 Apr '17

13 Apr '17

Hello, we are pleased to announce the release of aursec [0], a tool which aims to improve the security of using the AUR. We are writing it as part of our Bachelor's thesis. It provides a secure hash database in a private Ethereum blockchain that stores hashes for specific package versions. The hash that was submitted from the most different users becomes the consensus and can be queried and compared against. The hash is formed from the PKGBUILD, install files and VCS sources, thereby adding a layer of verification on top of that provided by the hashes in the PKGBUILD. The threat model [1] we defend against is targeted attacks against specific AUR users, e.g. using a hostile takeover and subsequent modification of an orphan package, that would be reverted and therefore likely not noticed. If the target used aursec, he would see that his package has a different hash from what other users got. Aursec takes a build folder containing a PKGBUILD and .SRCINFO and does all the work automatically. It calls makepkg --verifysrc in a firejail sandbox to download VCS sources and find out the current version. Example use: $aursec ~/aur/foo $find -type d ~/aur | aursec We would greatly appreciate feedback on the threat model, solution, and the usability of the tool itself. Cheers, Bennett Piater and Lukas Krismer [0]: https://aur.archlinux.org/packages/aursec [1]: https://vps1.piater.name/file-sharing/r/_q35eP3Y89#wqDp8+hB9C22GdKrH4nD/HP1… -- GPG fingerprint: 871F 1047 7DB3 DDED 5FC4 47B2 26C7 E577 EF96 7808

1 0

[aur-general] git push - Permissions denied
by Dan B 06 Apr '17

06 Apr '17

Package: aur.archlinux.org/libcs50 > » git push > Enter passphrase for key '/home/krakn/.ssh/id_rsa': > git-receive-pack: permission denied: krakn > fatal: Could not read from remote repository. > > Please make sure you have the correct access rights and the repository exists. Remotes are as follows (I am able to clone the repository): > » git remote -v > origin ssh://aur@aur.archlinux.org/libcs50 (fetch) > origin ssh://aur@aur.archlinux.org/libcs50 (push) I have no problems pushing to my other repositories. Is there something on the backend that might be preventing the push? Thanks!

3 4

[aur-general] first package submission
by David CARLIER 05 Apr '17

05 Apr '17

Hi all, I wished to submit this new package, the only thing is the main source file needs to be taken from the url (e.g needs a registration) but that s all so I dunno if I can apply for submitting this to aur ? Kind regards.

4 4

[aur-general] Deletion requests
by Konstantin Gizdov 04 Apr '17

04 Apr '17

Hi all, So I updated my packages and had other people also update theirs so that pythia8 and xrootd-abi0 are now completely redundant. I submitted requests for deletion a while ago and I am just writing to confirm that they can be safely removed. No packages have them as dependencies and I have even overprovisioned with 'provide' statements in the now correct pythia and xrootd packages. Thanks. Regards, Konstantin

2 1

[aur-general] Should "base" packages be listed as dependencies?
by Baptiste Jonglez 30 Mar '17

30 Mar '17

Hi, I was pretty confident that "base" packages should be listed as dependencies in PKGBUILDs, i.e. they are not assumed to be installed (as opposed to "base-devel" for build dependencies). This belief is reinforced by the fact that namcap gives dependencies error about packages such as glibc (which is in "base"): E: Dependency glibc detected and not included (libraries ['usr/lib/libc.so.6', 'usr/lib/libcrypt.so.1'] needed in files ['usr/lib/libcli.so.1.9.7']) But I could not find any documentation about this. On the contrary, this wiki page [1] says the opposite: In addition, the base group is assumed to be installed on *all* Arch systems. Am I missing something obvious? Thanks, Baptiste [1] https://wiki.archlinux.org/index.php/Makepkg#Usage

16 32