August 2010 - Pacman-dev - lists.archlinux.org

[pacman-dev] [GIT] The official pacman repository branch, maint, updated. v3.4.0-34-g90c45f7
by dan＠archlinux.org 27 Aug '10

27 Aug '10

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, maint has been updated via 90c45f7bbe6811a2f32ef81e57bce8237d491e9f (commit) from 9fbf5d9336455649528843efe9a551291dafb257 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: test/pacman/pmtest.py | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v3.4.0-82-g693ebbd
by dan＠archlinux.org 27 Aug '10

27 Aug '10

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via 693ebbd16bc1560ec3ec166d9944e44583141259 (commit) via 0223a028e0835b6e09e2654e62ce5fd462370ffb (commit) via d14a98db25c3dd1843510a1608064dda913ea230 (commit) via a8dcfeccfcd0fc78554e6dad7ae07d53034363e1 (commit) via 90c45f7bbe6811a2f32ef81e57bce8237d491e9f (commit) via 9fbf5d9336455649528843efe9a551291dafb257 (commit) from 8d88f0c897e5dd531a2c74dd2bca56db56a3c63d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 693ebbd16bc1560ec3ec166d9944e44583141259 Author: Jonathan Conder <j(a)skurvy.no-ip.org> Date: Thu Aug 19 00:07:21 2010 +1200 use execv to avoid using sh just to run ldconfig Signed-off-by: Jonathan Conder <j(a)skurvy.no-ip.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 0223a028e0835b6e09e2654e62ce5fd462370ffb Author: Jonathan Conder <j(a)skurvy.no-ip.org> Date: Thu Aug 19 00:07:18 2010 +1200 redirect scriptlet stderr synchronously through alpm Fixes FS#18770, and hopefully an occasional deadlock in my frontend as well. For simplicity it redirects all scriptlet output through SCRIPTLET_INFO, and all callbacks in the child process have been replaced for thread-safety. Signed-off-by: Jonathan Conder <j(a)skurvy.no-ip.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit d14a98db25c3dd1843510a1608064dda913ea230 Merge: a8dcfec 90c45f7 Author: Dan McGee <dan(a)archlinux.org> Date: Fri Aug 27 11:19:05 2010 -0500 Merge branch 'maint' commit a8dcfeccfcd0fc78554e6dad7ae07d53034363e1 Author: Dan McGee <dan(a)archlinux.org> Date: Fri Aug 27 10:52:05 2010 -0500 makepkg: remove trailing quote mark in regex Regular expressions in bash should not be quoted. Glad this was in the documentation and I didn't have to go to #bash to ask... Signed-off-by: Dan McGee <dan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: lib/libalpm/trans.c | 5 ++- lib/libalpm/util.c | 98 +++++++++++++++++++++++++++++------------------- lib/libalpm/util.h | 2 +- po/zh_CN.po | 2 +- scripts/makepkg.sh.in | 2 +- test/pacman/pmtest.py | 5 ++- 6 files changed, 70 insertions(+), 44 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [PATCH] Use pipe to create compressed package instead of an intermediate tar file
by Juergen Hoetzel 27 Aug '10

27 Aug '10

A pipe between tar and compression command is used. This improves performance by running tar and the compression command simultaneously. Using a pipe also reduces IO by not writing an intermediate tar file to disk. Signed-off-by: Juergen Hoetzel <juergen(a)archlinux.org> --- scripts/makepkg.sh.in | 25 ++++++++++++------------- 1 files changed, 12 insertions(+), 13 deletions(-) diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in index 66e1225..2200e98 100644 --- a/scripts/makepkg.sh.in +++ b/scripts/makepkg.sh.in @@ -1032,26 +1032,25 @@ create_package() { *) warning "$(gettext "'%s' is not a valid archive extension.")" \ "$PKGEXT" ; EXT=$PKGEXT ;; esac - local tar_file="$PKGDEST/${nameofpkg}-${pkgver}-${pkgrel}-${PKGARCH}${EXT}" - local pkg_file="$PKGDEST/${nameofpkg}-${pkgver}-${pkgrel}-${PKGARCH}${PKGEXT}" + local pkg_file="$PKGDEST/${nameofpkg}-${pkgver}-${pkgrel}-${PKGARCH}${PKGEXT}" local ret=0 # when fileglobbing, we want * in an empty directory to expand to # the null string rather than itself shopt -s nullglob - bsdtar -cf - $comp_files * > "$tar_file" || ret=$? - shopt -u nullglob + # TODO: Maybe this can be set globally for robustness + shopt -s -o pipefail + bsdtar -cf - $comp_files *| + case "$PKGEXT" in + *tar.gz) gzip -c -f -n ;; + *tar.bz2) bzip2 -c -f ;; + *tar.xz) xz -c -z - ;; + *tar) cat ;; + esac >>${pkg_file} || ret=$? - if (( ! ret )); then - case "$PKGEXT" in - *tar.gz) gzip -f -n "$tar_file" ;; - *tar.bz2) bzip2 -f "$tar_file" ;; - *tar.xz) xz -z -f "$tar_file" ;; - *tar) true ;; - esac - ret=$? - fi + shopt -u nullglob + shopt -u -o pipefail if (( ret )); then error "$(gettext "Failed to create package file.")" -- 1.7.2.2

1 0

[pacman-dev] [PATCH 2/2] use execv to avoid using sh just to run ldconfig
by Jonathan Conder 27 Aug '10

27 Aug '10

Signed-off-by: Jonathan Conder <j(a)skurvy.no-ip.org> --- lib/libalpm/trans.c | 5 ++++- lib/libalpm/util.c | 11 ++++++----- lib/libalpm/util.h | 2 +- 3 files changed, 11 insertions(+), 7 deletions(-) I just improved the debug output for this patch, which I've been meaning to do since I first submitted it. diff --git a/lib/libalpm/trans.c b/lib/libalpm/trans.c index 523f33b..61d0722 100644 --- a/lib/libalpm/trans.c +++ b/lib/libalpm/trans.c @@ -343,6 +343,7 @@ int _alpm_runscriptlet(const char *root, const char *installfn, char scriptfn[PATH_MAX]; char cmdline[PATH_MAX]; char tmpdir[PATH_MAX]; + char *argv[] = { "sh", "-c", cmdline, NULL }; char *scriptpath; int clean_tmpdir = 0; int retval = 0; @@ -400,7 +401,9 @@ int _alpm_runscriptlet(const char *root, const char *installfn, scriptpath, script, ver); } - retval = _alpm_run_chroot(root, cmdline); + _alpm_log(PM_LOG_DEBUG, "executing \"%s\"\n", cmdline); + + retval = _alpm_run_chroot(root, "/bin/sh", argv); cleanup: if(clean_tmpdir && _alpm_rmrf(tmpdir)) { diff --git a/lib/libalpm/util.c b/lib/libalpm/util.c index 46460f0..8a1f392 100644 --- a/lib/libalpm/util.c +++ b/lib/libalpm/util.c @@ -452,7 +452,7 @@ int _alpm_logaction(int usesyslog, FILE *f, const char *fmt, va_list args) return(ret); } -int _alpm_run_chroot(const char *root, const char *cmd) +int _alpm_run_chroot(const char *root, const char *path, char *const argv[]) { char cwd[PATH_MAX]; pid_t pid; @@ -475,7 +475,7 @@ int _alpm_run_chroot(const char *root, const char *cmd) goto cleanup; } - _alpm_log(PM_LOG_DEBUG, "executing \"%s\" under chroot \"%s\"\n", cmd, root); + _alpm_log(PM_LOG_DEBUG, "executing \"%s\" under chroot \"%s\"\n", path, root); /* Flush open fds before fork() to avoid cloning buffers */ fflush(NULL); @@ -513,8 +513,8 @@ int _alpm_run_chroot(const char *root, const char *cmd) exit(1); } umask(0022); - execl("/bin/sh", "sh", "-c", cmd, (char *) NULL); - fprintf(stderr, _("call to execl failed (%s)\n"), strerror(errno)); + execv(path, argv); + fprintf(stderr, _("call to execv failed (%s)\n"), strerror(errno)); exit(1); } else { /* this code runs for the parent only (wait on the child) */ @@ -578,7 +578,8 @@ int _alpm_ldconfig(const char *root) if(access(line, F_OK) == 0) { snprintf(line, PATH_MAX, "%ssbin/ldconfig", root); if(access(line, X_OK) == 0) { - _alpm_run_chroot(root, "/sbin/ldconfig"); + char *argv[] = { "ldconfig", NULL }; + _alpm_run_chroot(root, "/sbin/ldconfig", argv); } } diff --git a/lib/libalpm/util.h b/lib/libalpm/util.h index 8a3154a..35c4d28 100644 --- a/lib/libalpm/util.h +++ b/lib/libalpm/util.h @@ -68,7 +68,7 @@ int _alpm_unpack_single(const char *archive, const char *prefix, const char *fn) int _alpm_unpack(const char *archive, const char *prefix, alpm_list_t *list, int breakfirst); int _alpm_rmrf(const char *path); int _alpm_logaction(int usesyslog, FILE *f, const char *fmt, va_list args); -int _alpm_run_chroot(const char *root, const char *cmd); +int _alpm_run_chroot(const char *root, const char *path, char *const argv[]); int _alpm_ldconfig(const char *root); int _alpm_str_cmp(const void *s1, const void *s2); char *_alpm_filecache_find(const char *filename); -- 1.7.2.1

2 2

[pacman-dev] [GIT] The official pacman repository branch, maint, updated. v3.4.0-33-g9fbf5d9
by dan＠archlinux.org 25 Aug '10

25 Aug '10

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, maint has been updated via 9fbf5d9336455649528843efe9a551291dafb257 (commit) from 3de32a08126480f2a9cd67d09ef104accfde8992 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 9fbf5d9336455649528843efe9a551291dafb257 Author: 甘露(Gan Lu) <rhythm.gan(a)gmail.com> Date: Wed Aug 25 14:29:44 2010 -0500 Update Chinese translation Submitted through Transifex on 2010-07-02. Signed-off-by: Dan McGee <dan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: po/zh_CN.po | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, maint, updated. v3.4.0-32-g3de32a0
by dan＠archlinux.org 24 Aug '10

24 Aug '10

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, maint has been updated via 3de32a08126480f2a9cd67d09ef104accfde8992 (commit) via 71660f55b22050219cb582def2ee246084e55893 (commit) via 4a487346c57ca6ea2beedad5f670313670fe1971 (commit) via 0478dfa1a58ca4a127897af0b90ac3a579adb06f (commit) from 281bc725342e07d314f412ba6c930c3efb8f623c (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: NEWS | 10 + doc/PKGBUILD.5.txt | 12 +- lib/libalpm/po/LINGUAS | 1 + lib/libalpm/po/{en_GB.po => sk.po} | 263 +++++----- po/LINGUAS | 1 + po/ca.po | 13 +- po/cs.po | 12 +- po/de.po | 7 +- po/el.po | 13 +- po/en_GB.po | 7 +- po/es.po | 13 +- po/fr.po | 62 ++-- po/hu.po | 7 +- po/it.po | 7 +- po/kk.po | 13 +- po/nb.po | 13 +- po/pacman.pot | 6 +- po/pl.po | 13 +- po/pt_BR.po | 12 +- po/ro.po | 13 +- po/ru.po | 7 - po/{en_GB.po => sk.po} | 996 ++++++++++++++++++------------------ po/sv.po | 13 +- po/tr.po | 13 +- po/uk.po | 13 +- po/zh_CN.po | 11 +- 26 files changed, 708 insertions(+), 843 deletions(-) copy lib/libalpm/po/{en_GB.po => sk.po} (52%) mode change 100644 => 100755 copy po/{en_GB.po => sk.po} (51%) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v3.4.0-76-g8d88f0c
by dan＠archlinux.org 24 Aug '10

24 Aug '10

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via 8d88f0c897e5dd531a2c74dd2bca56db56a3c63d (commit) via a28868eeae98b28c00f8112e8d81403ad21a3117 (commit) via 08e1d4764cdc7f62b11be4b411071b6a87118c93 (commit) via f04530eb618a3f7e7ee1dd15f0b2907fc28bed98 (commit) via 68d8bfa0b5c15e1ddbc7f81cd23bf464674413f9 (commit) via 3de32a08126480f2a9cd67d09ef104accfde8992 (commit) via f27fed14b16dc85da104ae4c463ba6040d7e4d64 (commit) via 298cbf2cb152df365a593a396266636a9d34355f (commit) via 48589ccc64c5e7266f70c6294087e8b0450953e9 (commit) via d896527d21107afe69328ac465a3d2f0e318ddca (commit) via 71660f55b22050219cb582def2ee246084e55893 (commit) via 4a487346c57ca6ea2beedad5f670313670fe1971 (commit) via 0478dfa1a58ca4a127897af0b90ac3a579adb06f (commit) via ce3f4e7800f215e8a2b6e22bbd5f5ec9e0de90c2 (commit) via 281bc725342e07d314f412ba6c930c3efb8f623c (commit) via 5908992e4730263edb8255439560d5411d28c895 (commit) via c3f537538029285cca2ebb22975db60033a78c40 (commit) via b02bda75f14f35817d1757863d0b3c4cf09a0677 (commit) via 815557118318779f784e82a39497f46dde32845d (commit) via e7d5803f07c11882685e2a65b5638fd385804d22 (commit) from ddc4130c978decc5b2498b24d3b20e0c4efbc3cf (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 8d88f0c897e5dd531a2c74dd2bca56db56a3c63d Merge: a28868e 3de32a0 Author: Dan McGee <dan(a)archlinux.org> Date: Mon Aug 23 21:53:06 2010 -0500 Merge branch 'maint' commit a28868eeae98b28c00f8112e8d81403ad21a3117 Author: Allan McRae <allan(a)archlinux.org> Date: Thu Aug 5 21:37:22 2010 +1000 makepkg: error out on empty optdepends entries If optdepends was defined with empty members, then makepkg would abort late in the package building process. Detect such cases in the check_sanity() function. Fix-provided-by: Andres P <aepd87(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 08e1d4764cdc7f62b11be4b411071b6a87118c93 Author: Allan McRae <allan(a)archlinux.org> Date: Thu Aug 5 21:35:54 2010 +1000 makepkg: use less local variables in check_sanity Instead of declaring a new local variable for each loop in the check_sanity() function, just reuse $i. Signed-off-by: Allan McRae <allan(a)archlinux.org> commit f04530eb618a3f7e7ee1dd15f0b2907fc28bed98 Author: Allan McRae <allan(a)archlinux.org> Date: Thu Aug 5 21:12:11 2010 +1000 makepkg: remove unnecessary variable presence check It is unnecessary to check for a variables existence before looping over it. Extracted from patch supplied by Andres P <aepd87(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 68d8bfa0b5c15e1ddbc7f81cd23bf464674413f9 Author: Allan McRae <allan(a)archlinux.org> Date: Thu Aug 5 21:01:32 2010 +1000 makepkg: clarify invalid backup entry errors "Invalid backup entry" was not a particular helpful error message, especially when it was due to the file not being in the final package. Clarify these two messages. Signed-off-by: Allan McRae <allan(a)archlinux.org> commit f27fed14b16dc85da104ae4c463ba6040d7e4d64 Author: Andres P <aepd87(a)gmail.com> Date: Fri Jun 25 18:46:40 2010 -0430 makepkg: less code duplication in create_package Combine changelog and install file creation in create_package(). Signed-off-by: Andres P <aepd87(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 298cbf2cb152df365a593a396266636a9d34355f Author: Allan McRae <allan(a)archlinux.org> Date: Thu Aug 5 20:44:34 2010 +1000 makepkg: use regex to match options for privilege escalation Eases maintanence if we need to add further options in the future. Extracted from a patch supplied by Andres P <aepd87(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 48589ccc64c5e7266f70c6294087e8b0450953e9 Author: Allan McRae <allan(a)archlinux.org> Date: Wed Jul 7 16:58:51 2010 +1000 Fix some whitespace issues The combination of tabs and spaces is annoying in any editor that does not use a tab width of 2 spaces. Signed-off-by: Allan McRae <allan(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit d896527d21107afe69328ac465a3d2f0e318ddca Author: Dan McGee <dan(a)archlinux.org> Date: Wed Jul 7 17:12:42 2010 -0500 fgets invocation cleanup From the fgets manpage: fgets() reads in at most one less than size characters from stream and stores them into the buffer pointed to by s. Reading stops after an EOF or a newline. If a newline is read, it is stored into the buffer. A '\0' is stored after the last character in the buffer. This means there is no need at all to do 'size - 1' math. Remove all of that and just use sizeof() for simplicity on the buffer we plan on reading into. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit ce3f4e7800f215e8a2b6e22bbd5f5ec9e0de90c2 Author: Dan McGee <dan(a)archlinux.org> Date: Mon Aug 23 17:42:22 2010 -0500 Enable libfetch connection caching This will allow downloads to reuse connections if possible, which could make big differences on perceived FTP speed as the connection won't have to be reestablished each time. For the most part, HTTP requests wouldn't be using keep alive anyway so this won't have an effect there. I'm not enthused about having to do this with the library initialization, but there isn't a much better place due to the fact that the loop over databases occurs on the frontend and not the backend. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 815557118318779f784e82a39497f46dde32845d Author: Thomas Bächler <thomas(a)archlinux.org> Date: Sat Aug 7 12:47:59 2010 +0200 makepkg: Allow creation of uncompressed packages When performing local testing, it may be useful to add PKGEXT='.pkg.tar' to the PKGBUILD to save time, especially with big packages. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit e7d5803f07c11882685e2a65b5638fd385804d22 Author: Dan McGee <dan(a)archlinux.org> Date: Tue Jul 27 15:50:43 2010 -0500 Use the plural features of gettext Gettext has this whole 'Plural-Form' thing that until now we haven't taken advantage of. Given that not all languages have the same plural form rules as English, take advantage of it by defining a new _n() macro which will normally define to ngettext(), and adjust a few messages as an example of how to use. There are surely other places where we do singular/plural logic without me having noticed, so further patches are welcome to fix those up too. Signed-off-by: Dan McGee <dan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: NEWS | 10 + doc/PKGBUILD.5.txt | 12 +- lib/libalpm/alpm.c | 13 + lib/libalpm/be_files.c | 59 +-- lib/libalpm/be_package.c | 2 +- lib/libalpm/conflict.c | 2 +- lib/libalpm/package.h | 6 +- lib/libalpm/po/LINGUAS | 1 + lib/libalpm/po/pl.po | 99 +---- lib/libalpm/po/{en_GB.po => sk.po} | 263 +++++----- lib/libalpm/trans.c | 5 +- po/LINGUAS | 1 + po/ca.po | 13 +- po/cs.po | 12 +- po/de.po | 7 +- po/el.po | 13 +- po/en_GB.po | 7 +- po/es.po | 13 +- po/fr.po | 62 ++-- po/hu.po | 7 +- po/it.po | 7 +- po/kk.po | 13 +- po/nb.po | 13 +- po/pacman.pot | 6 +- po/pl.po | 183 +++---- po/pt_BR.po | 12 +- po/ro.po | 13 +- po/ru.po | 7 - po/{en_GB.po => sk.po} | 996 ++++++++++++++++++------------------ po/sv.po | 13 +- po/tr.po | 13 +- po/uk.po | 13 +- po/zh_CN.po | 11 +- scripts/makepkg.sh.in | 114 +++-- scripts/repo-add.sh.in | 5 +- src/pacman/callback.c | 13 +- src/pacman/query.c | 6 +- src/pacman/util.c | 5 +- src/pacman/util.h | 2 + 39 files changed, 922 insertions(+), 1130 deletions(-) copy lib/libalpm/po/{en_GB.po => sk.po} (52%) mode change 100644 => 100755 copy po/{en_GB.po => sk.po} (51%) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [PATCH] Enable libfetch connection caching
by Dan McGee 23 Aug '10

23 Aug '10

This will allow downloads to reuse connections if possible, which could make big differences on perceived FTP speed as the connection won't have to be reestablished each time. For the most part, HTTP requests wouldn't be using keep alive anyway so this won't have an effect there. I'm not enthused about having to do this with the library initialization, but there isn't a much better place due to the fact that the loop over databases occurs on the frontend and not the backend. Signed-off-by: Dan McGee <dan(a)archlinux.org> --- lib/libalpm/alpm.c | 13 +++++++++++++ 1 files changed, 13 insertions(+), 0 deletions(-) diff --git a/lib/libalpm/alpm.c b/lib/libalpm/alpm.c index 51b9e25..7bcfc8f 100644 --- a/lib/libalpm/alpm.c +++ b/lib/libalpm/alpm.c @@ -23,6 +23,11 @@ #include "config.h" +/* connection caching setup */ +#if defined(INTERNAL_DOWNLOAD) +#include <fetch.h> +#endif + /* libalpm */ #include "alpm.h" #include "alpm_list.h" @@ -54,6 +59,10 @@ int SYMEXPORT alpm_initialize(void) bindtextdomain("libalpm", LOCALEDIR); #endif +#ifdef INTERNAL_DOWNLOAD + fetchConnectionCacheInit(5, 1); +#endif + return(0); } @@ -73,6 +82,10 @@ int SYMEXPORT alpm_release(void) _alpm_handle_free(handle); handle = NULL; +#ifdef INTERNAL_DOWNLOAD + fetchConnectionCacheClose(); +#endif + return(0); } -- 1.7.2.1

1 0

[pacman-dev] system to obviate need for DESTDIR hacks and improve PKGBUILD security
by James Pike 22 Aug '10

22 Aug '10

Hi, I've just release a system call interceptor system to freshmeat that uses LD_PRELOAD style wrappers to intercept and modify system calls. No root priveleges or chroot needed. I'm just finishing work now on a plugin for it that redirects system call writes and other file modifying events to a different directory offset: for example now when you do: make DESTDIR="$pkgdir" install You could do pito redirect -d"$pkgdir" make install There are some pretty large hacks and patches necessary in some PKGBUILDs to get packages to respect DESTDIR which would be no longer necessary if they utilised pito. pito redirect also fakes the root user and captures operations like "chmod" and "chown" so: pito redirect -upacman -d"$pkgdir" make install When run as root.. will run the "make install" as the user pacman, and then after the operation is finished will use its root privileges to chown files securely within $pkgdir as necessary. I believe arch currently runs install operations as root so the above method would increase security as it would remove the ability for packages to write to the file system in any way other than to $pkgdir (any writes that could theoretically escape the sandbox would only be as a user with low privileges anyway). There are also flags to allow writes to certain directories and remove default some basic needed allowed writes such as to /dev etc. I hope this project will be of use! The website for pito is http://chilon.net/pito. -- +44 (0) 7974 159 643 | james(a)chilon.net | http://chilon.net

2 1

[pacman-dev] Fwd: [Arch Linux] patch for bacman from pacman-contrib package
by Allan McRae 22 Aug '10

22 Aug '10

Forwarding to the pacman-dev list. I'd prefer some copying of the code we use in makepkg to decide how to compress a package based on PKGEXT. Alla -------- Original Message -------- Subject: [Arch Linux] patch for bacman from pacman-contrib package Date: Sat, 21 Aug 2010 11:58:17 +1000 From: Nelson Chan <khcha.n.el(a)gmail.com> To: allan(a)archlinux.org originally, bacman doesn't catch up with current .pkg.tar.xz package format it produces a package named according /etc/makepkg.conf (e.g. *.pkg.tar.xz) but it fact it created a .gz format instead of xz Package : pacman-contrib (version 3.4.0-1) Component: /usr/bin/bacman (version 0.2.1) --- Nelson Chan here is the patch: --- bacman.orig 2010-08-21 00:15:43.480000752 +1000 +++ bacman 2010-08-21 00:22:20.440001311 +1000 @@ -87,7 +87,7 @@ pkg_arch=${CARCH:-'unknown'} pkg_dest="${PKGDEST:-$PWD}" -pkg_ext=${PKGEXT:-'.pkg.tar.gz'} +pkg_ext=${PKGEXT} pkg_pkger=${PACKAGER:-'Unknown Packager'} pkg_name="$1" @@ -266,7 +266,15 @@ echo "Generating the package..." ret=0 -bsdtar -czf "$pkg_dest/$pkg_namver-$pkg_arch$pkg_ext" $(ls -A) || ret=$? +if [[ $pkg_ext == ".pkg.tar.xz" ]]; then + tar -cJf "$pkg_dest/$pkg_namver-$pkg_arch.pkg.tar.xz" $(ls -A) || ret=$? +elif [[ $pkg_ext == ".pkg.tar.bz2" ]]; then + bsdtar -cyf "$pkg_dest/$pkg_namver-$pkg_arch.pkg.tar.bz2" $(ls -A) || ret=$? +else + bsdtar -czf "$pkg_dest/$pkg_namver-$pkg_arch.pkg.tar.gz" $(ls -A) || ret=$? +fi + + if [ $ret -ne 0 ]; then echo "ERROR: unable to write package to $pkg_dest" echo " Maybe the disk is full or you do not have write access"

2 1