December 2023 - Pacman-dev - lists.archlinux.org

pacman-7.0 release planning
by Allan McRae 09 Feb '24

09 Feb '24

Hi all, I have finally had enough time to finish the privsep work. We now download all files using a dedicated user. This is ready to be committed (following any final review) [1]. Note that this currently only separates downloads - more work is needed for (e.g.) package verification to also occur in a separate process. I consider this marking the milestone for the next package release. I have started a tracker for what is needed to be addressed before the release [2]. There are more things that need added to the list... It just represents my bare minimum before release. Realistically, given my upcoming commitments, I think the release will happen close to the end of the year. Cheers, Allan [1] https://gitlab.archlinux.org/pacman/pacman/-/merge_requests/23 [2] https://gitlab.archlinux.org/pacman/pacman/-/milestones/1

2 3

Supporting openssh-signing of packages and databases
by Max Gautier 08 Dec '23

08 Dec '23

Would pacman be interested in supporting signature verification of packages (and databases) using the (relatively new) signing protocol introduced and implemented by Openssh [1], alongside GPG signatures ? The intended benefits are be easier packagers setup and workflows (compared to GPG), as well as more out of the box support for signing with FIDO2 tokens (as openssh has sk-* keys to natively support those). The ALLOWED_SIGNERS (documented in man ssh-keygen) file and thus the signing namespace or namespaces would be up to the distribution using pacman (presumably, different distributions should not use the same namespace(s)). If there is interest in this, I'm interested in trying my hands at an implementation; in that case, I'd welcome any advice or things to avoid in doing so. Thanks, [1]: https://raw.githubusercontent.com/openssh/openssh-portable/master/PROTOCOL.… -- Max Gautier

2 6

[Git][pacman/pacman][master] libalpm: fix check_pgp_signature docs
by Allan McRae (＠allan) 05 Dec '23

05 Dec '23

Allan McRae pushed to branch master at Pacman / Pacman Commits: 8d387465 by morganamilo at 2023-12-04T15:34:49+00:00 libalpm: fix check_pgp_signature docs The function did have these return values a long time ago but now only return 0 or -1. - - - - - 1 changed file: - lib/libalpm/alpm.h View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/8d38746586794ab2cb21dc4… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/8d38746586794ab2cb21dc4… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 6 commits: dload: differentiate between hard and soft errors
by Allan McRae (＠allan) 02 Dec '23

02 Dec '23

Allan McRae pushed to branch master at Pacman / Pacman Commits: 56626816 by Andrew Gregory at 2023-12-02T04:56:25+00:00 dload: differentiate between hard and soft errors Set error count to -1 to indicate a hard error to allow them to be treated differently. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - 3aa1975c by Andrew Gregory at 2023-12-02T04:56:25+00:00 alpm: add cache server support Cache servers differ from regular servers in that they do not produce warnings and are not removed from the server pool for "soft errors" (i.e. the server was reachable, but the download failed) and they are not used for databases. If a host is used for both a cache server and a regular server, it may still be removed from the server pool for soft errors that occur when used as cache server and removal from the server pool for soft errors will not affect future attempted use as a cache server. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - 45e94e2d by Andrew Gregory at 2023-12-02T04:56:25+00:00 pmtest: return pkg from addpkg2db Allows more compact syntax: p1 = self.addpkg2db('sync', pmpkg("foo")) Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - bad3e13e by Andrew Gregory at 2023-12-02T04:56:25+00:00 conf.c: remove unnecessary _add_mirror function It does very little, is only used in one place, and can't easily be reused for other server types due to the inclusion of an error message. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - dc914765 by Andrew Gregory at 2023-12-02T04:56:25+00:00 pacman: add cache server support Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - 0df44c2e by Andrew Gregory at 2023-12-02T04:56:25+00:00 db.c: set pm_errno for server list modifications Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - 13 changed files: - doc/pacman.conf.5.asciidoc - lib/libalpm/alpm.h - lib/libalpm/db.c - lib/libalpm/db.h - lib/libalpm/dload.c - lib/libalpm/dload.h - lib/libalpm/sync.c - src/pacman/conf.c - src/pacman/conf.h - src/pacman/pacman-conf.c - test/pacman/meson.build - test/pacman/pmtest.py - + test/pacman/tests/cache-server-basic.py View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/0f512ae46e0524b0b7abec… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/0f512ae46e0524b0b7abec… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 2 commits: Increment error count on filelist conflicts in local database
by Allan McRae (＠allan) 02 Dec '23

02 Dec '23

Allan McRae pushed to branch master at Pacman / Pacman Commits: d56e9ed0 by Allan McRae at 2023-12-02T04:55:29+00:00 Increment error count on filelist conflicts in local database Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 0f512ae4 by Allan McRae at 2023-12-02T04:55:29+00:00 Do not increment on every database error to avoid overflow Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - src/pacman/database.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/2d190d5a3314fbaf97c5c8… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/2d190d5a3314fbaf97c5c8… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 2 commits: remove unused pkgconfig template
by Allan McRae (＠allan) 02 Dec '23

02 Dec '23

Allan McRae pushed to branch master at Pacman / Pacman Commits: 2e23126e by Andrew Gregory at 2023-11-25T13:04:56-08:00 remove unused pkgconfig template libalpm uses meson's pkgconfig module which does not use the template file. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - 2d190d5a by Andrew Gregory at 2023-11-25T13:05:00-08:00 meson.build: add _FILE_OFFSET_BITS to pkgconfig Meson automatically sets _FILE_OFFSET_BITS but that value was not getting carried through to the libalpm pkgconfig file, breaking downstream projects that relied on it. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> - - - - - 2 changed files: - − lib/libalpm/libalpm.pc.in - meson.build View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/18e49f2c97f0e33a645f36… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/18e49f2c97f0e33a645f36… You're receiving this email because of your account on gitlab.archlinux.org.

1 0