December 2022 - Pacman-dev - lists.archlinux.org

persistent hooks (inhibit shutdown)
by Andrew Gregory 05 Dec '22

05 Dec '22

If anybody's interested, I've been playing around with more complex hook setups and wrote a hook/script to track the pacman process during transactions and inhibit shutdown.[0] This technique could be used for hooks with pre and post transaction components that need need tighter coupling than separate hooks allow or to setup post transaction hooks that are guaranteed to run even if the transaction fails, unlike our current implementation of PostTransaction hooks. [0]: https://github.com/andrewgregory/pachooks/blob/a15e08d7321f17aae2431bddc1e9…

2 1

[Git][pacman/pacman][master] 4 commits: pacman.conf.in: adjust example custom repo path for consistency
by Allan McRae (＠allan) 04 Dec '22

04 Dec '22

Allan McRae pushed to branch master at Pacman / Pacman Commits: e7806a43 by Allan McRae at 2022-12-04T20:11:43+10:00 pacman.conf.in: adjust example custom repo path for consistency The example makepkg.conf.in suggests using "PKGDEST=/home/packages". It makes sense to use the same path for the custom repo example in pacman.conf.in. Fixes FS#48497. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 4f43ce3e by Allan McRae at 2022-12-04T20:14:32+10:00 repo-add: use parseopts from libmakepkg Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 310bf878 by Allan McRae at 2022-12-04T20:15:33+10:00 repo-add: do not add md5sums to the repo dbs Keeping md5sums in the repo databases no longer serves a real purpose. md5sums are no longer considered secure, and we already have sha256sums in the repos (along with PGP verification). Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1327ce7b by Allan McRae at 2022-12-04T20:15:33+10:00 makepkg: remove md5sums from generated mtree file md5sums are cryptographically broken and we supply sha256sums to verify files on a users system have not been modified from the packaged version. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 3 changed files: - etc/pacman.conf.in - scripts/makepkg.sh.in - scripts/repo-add.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/23aa82812e6831313e3490… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/23aa82812e6831313e3490… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[pacman-key] Support for new gpg kbx files in imports.
by Masato TOYOSHIMA 02 Dec '22

02 Dec '22

Hello. Support for new gpg kbx files in imports. Allow Import for both types pubring.gpg and pubring.kbx. ``` diff --git a/001-import-pubring-kbx-and-gpg.patch b/001-import-pubring-kbx-and-gpg.patch new file mode 100644 index 0000000..bc246d5 --- /dev/null +++ b/001-import-pubring-kbx-and-gpg.patch @@ -0,0 +1,29 @@ +diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in +index 913f2c3..5910b47 100644 +--- a/scripts/pacman-key.sh.in ++++ b/scripts/pacman-key.sh.in +@@ -453,14 +453,21 @@ import() { + local importdir + local ret=0 + for importdir in "$@"; do ++ if [[ ! -f "${importdir}/pubring.gpg" && ! -f "${importdir}/pubring.kbx" ]]; then ++ error "$(gettext "Both file %s does not exist and could not be imported.")" "${importdir}/pubring.gpg and ${importdir}/pubring.kbx" ++ ret=1 + if [[ -f "${importdir}/pubring.gpg" ]]; then + if ! "${GPG_PACMAN[@]}" --quiet --batch --import "${importdir}/pubring.gpg" ; then + error "$(gettext "%s could not be imported.")" "${importdir}/pubring.gpg" + ret=1 + fi +- else +- error "$(gettext "File %s does not exist and could not be imported.")" "${importdir}/pubring.gpg" +- ret=1 ++ fi ++ if [[ -f "${importdir}/pubring.kbx" ]]; then ++ if ! "${GPG_PACMAN[@]}" --quiet --batch --homedir "${importdir}" --keyring pubring.kbx --export | "${GPG_PACMAN[@]}" --import - ; then ++ error "$(gettext "%s could not be imported.")" "${importdir}/pubring.kbx" ++ ret=1 ++ fi ++ fi + fi + done + if (( ret )); then ```

1 0