- Pacman-contrib - lists.archlinux.org

"IgnorePkg" feature request
by Atreya Shankar 13 Mar '22

13 Mar '22

Dear Pacman-Contrib Team, Good day, I am one of the developers working on the `downgrade` AUR package (https://aur.archlinux.org/packages/downgrade) and have a quick question in regards to a potential feature request. Some background: our `downgrade` package aims to ease downgrading of packages in Arch Linux. This is done by searching either the Arch Linux Archive or local caches and then providing the user with previous package selection options. Finally, `downgrade` provides the user with the ability to automatically add the downgraded package name to the `IgnorePkg` directive such that this package is no longer updated. Recently, we received feature requests to automate the editing of the `IgnorePkg` directive. As an example, assume we are currently ignoring updates on package `foo` due to some upstream bug. Now after the bug is fixed, it would be nice to be able to remove `foo` from the `IgnorePkg` directive programmatically. This could be done using a new script called `pacignore` with an example command being: `pacignore rm foo`. This command could accept other subcommands such as `ls` for listing and `add` for adding packages to `IgnorePkg`, as described in our discussion here: https://github.com/pbrisbin/downgrade/issues/158#issuecomment-866884679 Naturally, we could develop this `pacignore` script as part of `downgrade`. However, we believe it would be better suited as part of `pacman-contrib` (or even `pacman` proper) since it could benefit the larger Arch Linux community. Given this, we would like to ask for your feedback; specifically if you think that the proposed `pacignore` script could feasibly be part of `pacman-contrib` (or `pacman` proper)? With this information, we would then be able to submit a formal feature request in the appropriate channel. Thank you for your time, wishing all a nice day ahead. -- Atreya Shankar PGP Key ID: 0x5330BD3D1107E5A6 PGP Public Key: https://github.com/atreyasha.gpg

2 1

[PATCH 1/2] paccache.service.in: Add @system-service to SystemCallFilter
by Frederik “Freso” S. Olesen 08 Dec '21

08 Dec '21

The SystemCallFilter group @system-service includes some calls that are necessary for the service unit to run, that are not included in @file-system. Signed-off-by: Frederik “Freso” S. Olesen <freso.dk(a)gmail.com> --- src/paccache.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/paccache.service.in b/src/paccache.service.in index 0a280b3..a821daf 100644 --- a/src/paccache.service.in +++ b/src/paccache.service.in @@ -36,5 +36,5 @@ RestrictRealtime=yes RestrictSUIDSGID=yes RemoveIPC=yes PrivateMounts=yes -SystemCallFilter=@file-system +SystemCallFilter=@system-service @file-system SystemCallArchitectures=native -- 2.34.1

2 4

Create a Release?
by Denton Liu 16 Nov '21

16 Nov '21

Hi Daniel, Would it be possible to create a release for pacman-contrib? It's been over a year since the last release and there have been many fixes and features contributed since then. (In particular, I'm waiting for pacdiff's merge mode to be released! :) ) Thanks, Denton

1 0

[PATCH] Add pacman-syncdb: systemd service and timer for `pacman -Fy`.
by Thiago Perrotta 03 Aug '21

03 Aug '21

From: Thiago Perrotta <tbperrotta(a)gmail.com> `pacman -Fy` is a modern replacement for `pkgfile`[1]. This service/timer makes `pacman -Fy` have feature parity with `pkgfile`. The unit files were based on both pkgfile and paccache, for consistency with the existing ecosystem. Context: https://bbs.archlinux.org/viewtopic.php?pid=1981076 [1]: https://wiki.archlinux.org/title/Pacman#Search_for_a_package_that_contains_… Signed-off-by: Thiago Perrotta <tbperrotta(a)gmail.com> --- CHANGES.md | 1 + src/Makefile.am | 8 ++++++-- src/pacman-syncdb.service.in | 12 ++++++++++++ src/pacman-syncdb.timer | 10 ++++++++++ 4 files changed, 29 insertions(+), 2 deletions(-) create mode 100644 src/pacman-syncdb.service.in create mode 100644 src/pacman-syncdb.timer diff --git a/CHANGES.md b/CHANGES.md index 80f02bb..96a441b 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -6,6 +6,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] ### Added +- pacman-syncdb: systemd service and timer for `pacman -Fy` (https://bbs.archlinux.org/viewtopic.php?pid=1981076) ### Changed diff --git a/src/Makefile.am b/src/Makefile.am index eef0590..cbc8bd0 100644 --- a/src/Makefile.am +++ b/src/Makefile.am @@ -30,7 +30,8 @@ vim_syntax__DATA = \ systemd_dir = ${libdir}/systemd/system systemd__DATA = \ - paccache.service paccache.timer + paccache.service paccache.timer \ + pacman-syncdb.service pacman-syncdb.timer BASHSCRIPTS = \ checkupdates \ @@ -50,7 +51,8 @@ OURSCRIPTS = \ $(PERLSCRIPTS) OURFILES = \ - paccache.service + paccache.service \ + pacman-syncdb.service EXTRA_DIST = \ checkupdates.sh.in \ @@ -60,6 +62,8 @@ EXTRA_DIST = \ pacdiff.sh.in \ paclist.sh.in \ paclog-pkglist.sh.in \ + pacman-syncdb.service.in \ + pacman-syncdb.timer \ pacscripts.sh.in \ pacsearch.pl.in \ pacsort.c \ diff --git a/src/pacman-syncdb.service.in b/src/pacman-syncdb.service.in new file mode 100644 index 0000000..a249045 --- /dev/null +++ b/src/pacman-syncdb.service.in @@ -0,0 +1,12 @@ +[Unit] +Description=Download pacman fresh files databases from the server +RequiresMountsFor="/var/lib/pacman/sync" +After=network-online.target +Wants=network-online.target + +[Service] +Type=oneshot +ExecStart=@bindir@/pacman -Fy +Nice=19 +StandardOutput=null +StandardError=journal diff --git a/src/pacman-syncdb.timer b/src/pacman-syncdb.timer new file mode 100644 index 0000000..2562443 --- /dev/null +++ b/src/pacman-syncdb.timer @@ -0,0 +1,10 @@ +[Unit] +Description=Download pacman fresh files databases from the server weekly + +[Timer] +OnCalendar=weekly +AccuracySec=1h +Persistent=true + +[Install] +WantedBy=timers.target -- 2.32.0

4 5

[PATCH] Amend `pacman -Fy` unit naming and descriptions
by Daniel M. Capella 03 Aug '21

03 Aug '21

Addresses https://lists.archlinux.org/pipermail/pacman-contrib/2021-August/000382.html Signed-off-by: Daniel M. Capella <polyzen(a)archlinux.org> --- CHANGES.md | 3 ++- src/Makefile.am | 8 ++++---- ...yncdb.service.in => pacman-filesdb-refresh.service.in} | 2 +- src/{pacman-syncdb.timer => pacman-filesdb-refresh.timer} | 2 +- 4 files changed, 8 insertions(+), 7 deletions(-) rename src/{pacman-syncdb.service.in => pacman-filesdb-refresh.service.in} (77%) rename src/{pacman-syncdb.timer => pacman-filesdb-refresh.timer} (57%) diff --git a/CHANGES.md b/CHANGES.md index 96a441b..6e233ae 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -6,7 +6,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] ### Added -- pacman-syncdb: systemd service and timer for `pacman -Fy` (https://bbs.archlinux.org/viewtopic.php?pid=1981076) +- pacman-syncdb: systemd service and timer for `pacman -Fy` +- Rename `pacman -Fy` units to pacman-filesdb-refresh from pacman-syncdb and simplify descriptions ### Changed diff --git a/src/Makefile.am b/src/Makefile.am index cbc8bd0..5101f4a 100644 --- a/src/Makefile.am +++ b/src/Makefile.am @@ -31,7 +31,7 @@ systemd_dir = ${libdir}/systemd/system systemd__DATA = \ paccache.service paccache.timer \ - pacman-syncdb.service pacman-syncdb.timer + pacman-filesdb-refresh.service pacman-filesdb-refresh.timer BASHSCRIPTS = \ checkupdates \ @@ -52,7 +52,7 @@ OURSCRIPTS = \ OURFILES = \ paccache.service \ - pacman-syncdb.service + pacman-filesdb-refresh.service EXTRA_DIST = \ checkupdates.sh.in \ @@ -62,8 +62,8 @@ EXTRA_DIST = \ pacdiff.sh.in \ paclist.sh.in \ paclog-pkglist.sh.in \ - pacman-syncdb.service.in \ - pacman-syncdb.timer \ + pacman-filesdb-refresh.service.in \ + pacman-filesdb-refresh.timer \ pacscripts.sh.in \ pacsearch.pl.in \ pacsort.c \ diff --git a/src/pacman-syncdb.service.in b/src/pacman-filesdb-refresh.service.in similarity index 77% rename from src/pacman-syncdb.service.in rename to src/pacman-filesdb-refresh.service.in index 26cbe6d..1ce63a6 100644 --- a/src/pacman-syncdb.service.in +++ b/src/pacman-filesdb-refresh.service.in @@ -1,5 +1,5 @@ [Unit] -Description=Download pacman fresh files databases from the server +Description=Refresh pacman files databases RequiresMountsFor="/var/lib/pacman/sync" After=network-online.target nss-lookup.target Wants=network-online.target diff --git a/src/pacman-syncdb.timer b/src/pacman-filesdb-refresh.timer similarity index 57% rename from src/pacman-syncdb.timer rename to src/pacman-filesdb-refresh.timer index 2562443..67fef8f 100644 --- a/src/pacman-syncdb.timer +++ b/src/pacman-filesdb-refresh.timer @@ -1,5 +1,5 @@ [Unit] -Description=Download pacman fresh files databases from the server weekly +Description=Refresh pacman files databases weekly [Timer] OnCalendar=weekly -- 2.32.0

1 0

[PATCH 0/4] Fixes for (M)erge mode and --sudo
by Denton Liu 28 Jul '21

28 Jul '21

The first two patches are just mailmap changes for incorrect authorship. The third patch is some documentation update. The final patch are some fixes to a bad interaction between (M)erge mode and --sudo. Denton Liu (4): .mailmap: Map Daniel Parks .mailmap: Map Denton Liu pacdiff: update --sudo usages pacdiff: Don't use $SUDO on temporary files .mailmap | 2 ++ doc/pacdiff.8.txt | 3 +++ src/pacdiff.sh.in | 18 +++++++----------- 3 files changed, 12 insertions(+), 11 deletions(-) -- 2.31.0.208.g409f899ff0

2 8

[PATCH 1/2] paccache.service.in: Harden unit
by Frederik “Freso” S. Olesen 28 Jul '21

28 Jul '21

Adds a number of sandboxing and other hardening options to the paccache.service file. Signed-off-by: Frederik “Freso” S. Olesen <freso.dk(a)gmail.com> --- src/Makefile.am | 2 ++ src/paccache.service.in | 28 ++++++++++++++++++++++++++++ 2 files changed, 30 insertions(+) diff --git a/src/Makefile.am b/src/Makefile.am index eef0590..e5af195 100644 --- a/src/Makefile.am +++ b/src/Makefile.am @@ -8,6 +8,7 @@ DIST_SUBDIRS = $(SUBDIRS) conffile = ${sysconfdir}/pacman.conf dbpath = ${localstatedir}/lib/pacman/ gpgdir = ${sysconfdir}/pacman.d/gnupg/ +cachedir = ${localstatedir}/cache/pacman bin_SCRIPTS = \ $(OURSCRIPTS) @@ -95,6 +96,7 @@ AM_CFLAGS = \ edit = sed \ -e 's|@bindir[@]|$(bindir)|g' \ + -e 's|@cachedir[@]|$(cachedir)|g' \ -e 's|@sysconfdir[@]|$(sysconfdir)|g' \ -e 's|@localstatedir[@]|$(localstatedir)|g' \ -e 's|@PACKAGE_VERSION[@]|$(REAL_PACKAGE_VERSION)|g' \ diff --git a/src/paccache.service.in b/src/paccache.service.in index cd28e67..0f71f5f 100644 --- a/src/paccache.service.in +++ b/src/paccache.service.in @@ -4,3 +4,31 @@ Description=Remove unused cached package files [Service] Type=oneshot ExecStart=@bindir@/paccache -r +# Sandboxing and other hardening +ProtectProc=invisible +ProcSubset=pid +NoNewPrivileges=yes +ProtectSystem=strict +ProtectHome=yes +ReadWritePaths=@cachedir@/pkg +PrivateTmp=yes +PrivateDevices=yes +PrivateNetwork=yes +PrivateIPC=yes +PrivateUsers=yes +ProtectHostname=yes +ProtectClock=yes +ProtectKernelTunables=yes +ProtectKernelModules=yes +ProtectKernelLogs=yes +ProtectControlGroups=yes +RestrictAddressFamilies=AF_UNIX +RestrictNamespaces=yes +LockPersonality=yes +MemoryDenyWriteExecute=yes +RestrictRealtime=yes +RestrictSUIDSGID=yes +RemoveIPC=yes +PrivateMounts=yes +SystemCallFilter=@file-system +SystemCallArchitectures=native -- 2.32.0

3 8

[pacman-contrib] [PATCH] updpkgsums: don't try to add nonexistent checksums
by Eli Schwartz 28 Jul '21

28 Jul '21

In the event there are no sources, there won't be sums either. awk won't find any to remove and replace inline, so it tries to print "" at the end of the file, and merely adds superfluous newlines. Abort early instead, since updpkgsums cannot be expected to process such a file. Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> --- src/updpkgsums.sh.in | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/updpkgsums.sh.in b/src/updpkgsums.sh.in index 41965f5..e5dbd2b 100644 --- a/src/updpkgsums.sh.in +++ b/src/updpkgsums.sh.in @@ -99,6 +99,11 @@ newbuildfile=$(mktemp "${TMPDIR:-/tmp}/updpkgsums.XXXXXX") trap "rm -rf '$BUILDDIR' '$newbuildfile'" EXIT sumtypes=$(IFS='|'; echo "${known_hash_algos[*]}") newsums=$(makepkg -g -p "$buildfile" "${MAKEPKG_OPTS[@]}") || die 'Failed to generate new checksums' + +if [[ -z $newsums ]]; then + die "$buildfile does not contain sources to update" +fi + awk -v sumtypes="$sumtypes" -v newsums="$newsums" ' $0 ~"^[[:blank:]]*(" sumtypes ")sums(_[^=]+)?=", $0 ~ "\\)[[:blank:]]*(#.*)?$" { if (!w) { -- 2.31.1

2 1

[PATCH] Add pacman-syncdb: systemd service and timer for `pacman -Fy`.
by tbperrotta＠gmail.com 28 Jul '21

28 Jul '21

From: Thiago Perrotta <tbperrotta(a)gmail.com> `pacman -Fy` is a modern replacement for `pkgfile`[1]. This service/timer makes `pacman -Fy` have feature parity with `pkgfile`. The unit files were based on both pkgfile and paccache, for consistency with the existing ecosystem. Context: https://bbs.archlinux.org/viewtopic.php?pid=1981076 [1]: https://wiki.archlinux.org/title/Pacman#Search_for_a_package_that_contains_… --- CHANGES.md | 1 + src/Makefile.am | 8 ++++++-- src/pacman-syncdb.service.in | 12 ++++++++++++ src/pacman-syncdb.timer | 10 ++++++++++ 4 files changed, 29 insertions(+), 2 deletions(-) create mode 100644 src/pacman-syncdb.service.in create mode 100644 src/pacman-syncdb.timer diff --git a/CHANGES.md b/CHANGES.md index bd0daf5..a3fd982 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -6,6 +6,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] ### Added +- pacman-syncdb: systemd service and timer for `pacman -Fy` (https://bbs.archlinux.org/viewtopic.php?pid=1981076) ### Changed diff --git a/src/Makefile.am b/src/Makefile.am index eef0590..cbc8bd0 100644 --- a/src/Makefile.am +++ b/src/Makefile.am @@ -30,7 +30,8 @@ vim_syntax__DATA = \ systemd_dir = ${libdir}/systemd/system systemd__DATA = \ - paccache.service paccache.timer + paccache.service paccache.timer \ + pacman-syncdb.service pacman-syncdb.timer BASHSCRIPTS = \ checkupdates \ @@ -50,7 +51,8 @@ OURSCRIPTS = \ $(PERLSCRIPTS) OURFILES = \ - paccache.service + paccache.service \ + pacman-syncdb.service EXTRA_DIST = \ checkupdates.sh.in \ @@ -60,6 +62,8 @@ EXTRA_DIST = \ pacdiff.sh.in \ paclist.sh.in \ paclog-pkglist.sh.in \ + pacman-syncdb.service.in \ + pacman-syncdb.timer \ pacscripts.sh.in \ pacsearch.pl.in \ pacsort.c \ diff --git a/src/pacman-syncdb.service.in b/src/pacman-syncdb.service.in new file mode 100644 index 0000000..a249045 --- /dev/null +++ b/src/pacman-syncdb.service.in @@ -0,0 +1,12 @@ +[Unit] +Description=Download pacman fresh files databases from the server +RequiresMountsFor="/var/lib/pacman/sync" +After=network-online.target +Wants=network-online.target + +[Service] +Type=oneshot +ExecStart=@bindir@/pacman -Fy +Nice=19 +StandardOutput=null +StandardError=journal diff --git a/src/pacman-syncdb.timer b/src/pacman-syncdb.timer new file mode 100644 index 0000000..2562443 --- /dev/null +++ b/src/pacman-syncdb.timer @@ -0,0 +1,10 @@ +[Unit] +Description=Download pacman fresh files databases from the server weekly + +[Timer] +OnCalendar=weekly +AccuracySec=1h +Persistent=true + +[Install] +WantedBy=timers.target -- 2.32.0

2 1

[GIT] branch master updated (62190b1 -> fd21ee2)
by Daniel M. Capella 21 May '21

21 May '21

This is an automated email from the git hooks/post-receive script. polyzen pushed a change to branch master in repository pacman-contrib. from 62190b1 pacdiff: update --sudo usages new fd21ee2 pactree: fix compilation with pacman 6 The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Graph of new commits: * fd21ee2 (HEAD -> master) pactree: fix compilation with pacman 6 Detailed log of new commits: commit fd21ee241c85856be941e41942d6c179ca713c41 Author: Eli Schwartz via pacman-contrib <pacman-contrib(a)lists.archlinux.org> Date: Fri May 21 00:30:07 2021 -0400 pactree: fix compilation with pacman 6 In "add front-end provided context to callbacks", libalpm gained a new argument to callbacks which we don't use and is only needed by some frontends wishing to do stuff with the callback state. NULL it and move on with life, just like pacman itself did. Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> Signed-off-by: Daniel M. Capella <polyzen(a)archlinux.org> Summary of changes: src/pactree.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0