- Pacman-dev - lists.archlinux.org

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v3.5.3-459-ge209955
by dan＠archlinux.org 14 Jul '11

14 Jul '11

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via e20995560640d11491905bfa80aa993c2efde7c4 (commit) via 8f72ffbc4521008897fff0819cae4c80f8405391 (commit) via 0fe93bc34c4f463fbaeaa8be7a00e10bc0bc8b4d (commit) via 1376ba5b0e261f9bd1988598e8fc3237f9d1fef7 (commit) via 6907a22b275859dcdf4c80ac6df87099414b0b04 (commit) via 727e03fe198e58e53434ad445e6156f06daf5e94 (commit) via 282be6bf4b87678d3b634a5bc6a8a1c097e593ea (commit) via 7f5b24597bec4d74328c62467ad778f7eaae75a1 (commit) via af357d6ab00d8ca258dfd7abb689d6fd2eb4090f (commit) via 36e48573ceee0f707de0dcc55d1da442d949d3dc (commit) via 00628c7268e3b81045961be51a0ca640aea368b0 (commit) via 1d53dd716d7c7bea297a532809c4557b805a9918 (commit) from b678e002714b732d7ea6a48029ac1a5b285d04e5 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e20995560640d11491905bfa80aa993c2efde7c4 Author: Dan McGee <dan(a)archlinux.org> Date: Tue Jul 5 22:48:50 2011 -0500 doc/PKGBUILD: clarify scriptlet version arguments It was a bit unclear that both pkgver and pkgrel were included in the passed version strings; clarify this fact in the manpage. Also include epoch in the mix now that it exists. Also make two other minor consistency touchups to code-print variables in text. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 8f72ffbc4521008897fff0819cae4c80f8405391 Author: Dan McGee <dan(a)archlinux.org> Date: Wed Jul 6 13:37:18 2011 -0500 Make alpm_db_set_pkgreason() arguments more sane This can only ever operate on the local database, and a local package at that. Change the function signature to take a handle and package object, add the relevant asserts, and ensure the frontend can detect the package not found condition when finding packages to pass to this method. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 0fe93bc34c4f463fbaeaa8be7a00e10bc0bc8b4d Author: Dave Reisner <dreisner(a)archlinux.org> Date: Wed Jul 6 09:19:44 2011 -0400 contrib/paclog-pkglist: new contribution converts a pacman log file to a list of installed packages, which should match the output of `pacman -Q'. Signed-off-by: Dave Reisner <dreisner(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 1376ba5b0e261f9bd1988598e8fc3237f9d1fef7 Author: Dave Reisner <dreisner(a)archlinux.org> Date: Wed Jul 6 22:19:58 2011 -0400 contrib/bash_completion: update with new makepkg opts Signed-off-by: Dave Reisner <dreisner(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 6907a22b275859dcdf4c80ac6df87099414b0b04 Author: Dave Reisner <dreisner(a)archlinux.org> Date: Fri Jul 8 09:01:37 2011 -0400 makepkg: remove unused -C option from option list We nuke it from the completion file as well along with its longopt. Signed-off-by: Dave Reisner <dreisner(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 727e03fe198e58e53434ad445e6156f06daf5e94 Author: Dave Reisner <dreisner(a)archlinux.org> Date: Sun Jul 10 19:36:00 2011 -0400 makepkg: skip devel_check when reading from a pipe Signed-off-by: Dave Reisner <dreisner(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 282be6bf4b87678d3b634a5bc6a8a1c097e593ea Author: DJ Mills <danielmills1(a)gmail.com> Date: Fri Jul 8 00:31:22 2011 -0400 makepkg: Remove pre-optimization from in_array() The '[[ -z' test in in_array() is redundant, so remove it. Signed-off-by: DJ Mills <danielmills1(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 7f5b24597bec4d74328c62467ad778f7eaae75a1 Author: DJ Mills <danielmills1(a)gmail.com> Date: Fri Jul 8 00:31:23 2011 -0400 makepkg: Remove OPT_TEMP hack in parse_options call Instead of hacking around the error trap, simply do an explicit test for failure. Signed-off-by: DJ Mills <danielmills1(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit af357d6ab00d8ca258dfd7abb689d6fd2eb4090f Author: Dan McGee <dan(a)archlinux.org> Date: Thu Jul 14 15:32:03 2011 -0500 Allow fileconflict if unowned file moving into backup array The bulk of this commit is adding new tests to ensure the new behavior works without disrupting old behavior. This is a relatively sane maneuver when a package adds a conf file (e.g. '/etc/mercurial/hgrc') that was not previously in the package, but it is placed in the backup array. In essence, we can treat the existing file as having always been a part of the package and do our normal compare/install as pacnew logic checks. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 36e48573ceee0f707de0dcc55d1da442d949d3dc Author: Dan McGee <dan(a)archlinux.org> Date: Thu Jul 14 14:58:46 2011 -0500 Add 'compress' compression format as an available option This adds the '.tar.Z' option to both repo-add and makepkg for no other reason than "why not", and because bsdtar supports it natively with the '-Z' flag. Also update the documentation accordingly. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 00628c7268e3b81045961be51a0ca640aea368b0 Author: Dan McGee <dan(a)archlinux.org> Date: Wed Jul 6 09:18:59 2011 -0500 Unify package removal code This code duplication has always been a rather clumsy casuality of fixing some past upgrade issues. Unify the removal code across upgrade and remove operations into a new _alpm_remove_single_package() method wihch makes it very clear how we handle upgrade and remove differently, via several conditionals on newpkg. This commit highlights interesting behavior such as the fact that the implicit removal in every package upgrade never gets transaction events or progress callbacks. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 1d53dd716d7c7bea297a532809c4557b805a9918 Author: Dan McGee <dan(a)archlinux.org> Date: Tue Jul 5 22:36:40 2011 -0500 include util.h in rawstr.c Fixes "error: no previous prototype for '_alpm_raw_cmp' [-Werror=missing-prototypes]" warnings, and also prevents someone from getting the prototypes and functions out of sync. Signed-off-by: Dan McGee <dan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: contrib/Makefile.am | 1 + contrib/bash_completion.in | 10 +- contrib/paclog-pkglist | 57 ++++++ doc/PKGBUILD.5.txt | 34 ++-- doc/makepkg.conf.5.txt | 3 +- doc/pacman.conf.5.txt | 11 +- doc/repo-add.8.txt | 4 +- lib/libalpm/add.c | 6 +- lib/libalpm/alpm.h | 7 +- lib/libalpm/backup.c | 7 +- lib/libalpm/backup.h | 2 +- lib/libalpm/conflict.c | 16 ++ lib/libalpm/db.c | 34 ++-- lib/libalpm/rawstr.c | 2 + lib/libalpm/remove.c | 204 +++++++++---------- lib/libalpm/remove.h | 5 +- scripts/makepkg.sh.in | 13 +- scripts/repo-add.sh.in | 1 + src/pacman/database.c | 3 +- test/pacman/tests/fileconflict003.py | 2 +- test/pacman/tests/{upgrade022.py => upgrade027.py} | 13 +- test/pacman/tests/{upgrade021.py => upgrade028.py} | 13 +- test/pacman/tests/upgrade029.py | 24 +++ 23 files changed, 291 insertions(+), 181 deletions(-) create mode 100755 contrib/paclog-pkglist copy test/pacman/tests/{upgrade022.py => upgrade027.py} (51%) copy test/pacman/tests/{upgrade021.py => upgrade028.py} (51%) create mode 100644 test/pacman/tests/upgrade029.py hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] Adding a new config file to a package (e.g. mercurial file conflict)
by Dan McGee 14 Jul '11

14 Jul '11

I did an -Syu on my Arch box today, which updated Mercurial, and the new package contains a /etc/mercurial/hgrc file. I had already created one on my system, and the old package did not contain one, so I got a file conflict. (54/54) checking package integrity [######################] 100% (54/54) checking for file conflicts [######################] 100% error: failed to commit transaction (conflicting files) mercurial: /etc/mercurial/hgrc exists in filesystem Errors occurred, no packages were upgraded. So instead, I had to -Sf the package, which installs the file with a pacnew: (1/1) checking package integrity [######################] 100% (1/1) checking available disk space [######################] 100% (1/1) upgrading mercurial [######################] 100% warning: /etc/mercurial/hgrc installed as /etc/mercurial/hgrc.pacnew This behavior is a bit...odd. We don't like people using -f, and they are trained to assume the worst, so most would not expect the backup logic to still kick into effect. A pactest is below, but I'm asking for thoughts on expected behavior in this case. Many possibilities listed for completeness, some of which are just plain dumb. 1) Keep as is with file conflict error, require -Sf, keep backing up file to pacnew 2) Keep as is with file conflict error, require -Sf, don't backup (this is stupid) 3) Don't error at all, treat as a normal backup case except pretend old file is the same as /dev/null (aka empty). 4) Same as (3), but make the pacnew warning message slightly different, e.g. "%s is new in package, installed as %s" or something. 5) Something like (3) or (4) but don't even treat it the same as an empty file, treat it as never matching anything. My vote is 3 or 4, not that we are a democracy. :) -Dan self.description = "Upgrade a package, with a file entering the pkg in 'backup'" lp = pmpkg("dummy") lp.files = ["usr/bin/dummy"] self.addpkg2db("local", lp) p = pmpkg("dummy", "1.0-2") p.files = ["usr/bin/dummy", "etc/dummy.conf"] p.backup = ["etc/dummy.conf"] self.addpkg(p) self.args = "-U %s" % p.filename() self.addrule("PACMAN_RETCODE=0") self.addrule("PKG_VERSION=dummy|1.0-2") self.addrule("!FILE_PACSAVE=etc/dummy.conf") self.addrule("FILE_PACNEW=etc/dummy.conf") self.addrule("FILE_EXIST=etc/dummy.conf")

4 3

[pacman-dev] [PATCH] Add 'compress' compression format as an available option
by Dan McGee 14 Jul '11

14 Jul '11

This adds the '.tar.Z' option to both repo-add and makepkg for no other reason than "why not", and because bsdtar supports it natively with the '-Z' flag. Also update the documentation accordingly. Signed-off-by: Dan McGee <dan(a)archlinux.org> --- This is about as random as it gets. Did notice we lack some consistency in our doc/ directory regarding extension quoting, as you can see the two different styles below (and a third in use elsewhere). doc/makepkg.conf.5.txt | 3 ++- doc/pacman.conf.5.txt | 11 ++++++----- doc/repo-add.8.txt | 4 ++-- scripts/makepkg.sh.in | 2 ++ scripts/repo-add.sh.in | 1 + 5 files changed, 13 insertions(+), 8 deletions(-) diff --git a/doc/makepkg.conf.5.txt b/doc/makepkg.conf.5.txt index aa0174c..dce9b59 100644 --- a/doc/makepkg.conf.5.txt +++ b/doc/makepkg.conf.5.txt @@ -215,7 +215,8 @@ Options **PKGEXT=**".pkg.tar.gz", **SRCEXT=**".src.tar.gz":: Sets the compression used when making compiled or source packages. The - current valid suffixes are `.tar`, `.tar.gz`, `.tar,bz2` and `.tar.xz`. + current valid suffixes are `.tar`, `.tar.gz`, `.tar,bz2`, `.tar.xz`, and + `.tar.Z`. Do not touch these unless you know what you are doing. See Also diff --git a/doc/pacman.conf.5.txt b/doc/pacman.conf.5.txt index bdf0bc8..a28e00f 100644 --- a/doc/pacman.conf.5.txt +++ b/doc/pacman.conf.5.txt @@ -225,11 +225,12 @@ directory with these packages so pacman can find it when run with '\--refresh'. The above command will generate a compressed database named '/home/pkgs/custom.db.tar.gz'. Note that the database must be of the form -'\{treename\}.db.tar.gz', where '\{treename\}' is the name of the section defined in -the configuration file. That's it! Now configure your custom section in the -configuration file as shown in the config example above. Pacman will now use your -package repository. If you add new packages to the repository, remember to -re-generate the database and use pacman's '\--refresh' option. +'\{treename\}.db.tar.{ext}', where '\{treename\}' is the name of the section +defined in the configuration file and '\{ext\}' is a valid compression type as +documented in linkman:repo-add[8]. That's it! Now configure your custom section +in the configuration file as shown in the config example above. Pacman will now +use your package repository. If you add new packages to the repository, +remember to re-generate the database and use pacman's '\--refresh' option. For more information on the repo-add command, see ``repo-add \--help'' or linkman:repo-add[8]. diff --git a/doc/repo-add.8.txt b/doc/repo-add.8.txt index 2de5be8..e03384f 100644 --- a/doc/repo-add.8.txt +++ b/doc/repo-add.8.txt @@ -31,8 +31,8 @@ can be specified on the command line. A package database is a tar file, optionally compressed. Valid extensions are ``.db'' or ``.files'' followed by an archive extension of ``.tar'', -``.tar.gz'', ``.tar.bz2'', or ``.tar.xz''. The file does not need to exist, but -all parent directories must exist. +``.tar.gz'', ``.tar.bz2'', ``.tar.xz'', or ``.tar.Z''. The file does not need +to exist, but all parent directories must exist. Common Options diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in index 1b132a9..5d9a382 100644 --- a/scripts/makepkg.sh.in +++ b/scripts/makepkg.sh.in @@ -1152,6 +1152,7 @@ create_package() { *tar.gz) EXT=${PKGEXT%.gz} ;; *tar.bz2) EXT=${PKGEXT%.bz2} ;; *tar.xz) EXT=${PKGEXT%.xz} ;; + *tar.Z) EXT=${PKGEXT%.Z} ;; *tar) EXT=${PKGEXT} ;; *) warning "$(gettext "'%s' is not a valid archive extension.")" \ "$PKGEXT" ; EXT=$PKGEXT ;; @@ -1174,6 +1175,7 @@ create_package() { *tar.gz) gzip -c -f -n ;; *tar.bz2) bzip2 -c -f ;; *tar.xz) xz -c -z - ;; + *tar.Z) compress -c -f ;; *tar) cat ;; esac > "${pkg_file}" || ret=$? diff --git a/scripts/repo-add.sh.in b/scripts/repo-add.sh.in index 474e21d..19fe660 100644 --- a/scripts/repo-add.sh.in +++ b/scripts/repo-add.sh.in @@ -228,6 +228,7 @@ verify_repo_extension() { *.(a)(db|files).tar.gz) TAR_OPT="z" ;; *.(a)(db|files).tar.bz2) TAR_OPT="j" ;; *.(a)(db|files).tar.xz) TAR_OPT="J" ;; + *.(a)(db|files).tar.Z) TAR_OPT="Z" ;; *.(a)(db|files).tar) TAR_OPT="" ;; *) error "$(gettext "'%s' does not have a valid archive extension.")" \ "$repofile" -- 1.7.6

1 0

[pacman-dev] [PATCH] makepkg: don't try to verbump PKGBUILD on /dev/stdin
by Dave Reisner 10 Jul '11

10 Jul '11

This works around an edge case where we try to change the $pkgver and $pkgrel of a VCS PKGBUILD passed in standard input, which fails on missing write permissions in /dev. As an added bonus, we avoid a second (costly) full re-sourcing of the PKGBUILD, and simply reassign the variables that may have changed to ensure that in the non-write case we create the new package with the correct version. Signed-off-by: Dave Reisner <dreisner(a)archlinux.org> --- Extreme edge cases ftw. Allan, correct me if I'm wrong that this is the only place where we actually modify the PKGBUILD itself. I had myself a grep around and couldn't find anything else -- I just want to make sure I'm not going to hit some crazy pitfall by avoiding the second resourcing. I did do some simple testing and all seems to be well, but you probably know this portion of the code better than I do. scripts/makepkg.sh.in | 11 ++++++++--- 1 files changed, 8 insertions(+), 3 deletions(-) diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in index 1b132a9..e77ca51 100644 --- a/scripts/makepkg.sh.in +++ b/scripts/makepkg.sh.in @@ -1623,9 +1623,14 @@ devel_update() { if [[ -n $newpkgver ]]; then if [[ $newpkgver != $pkgver ]]; then if [[ -f $BUILDFILE && -w $BUILDFILE ]]; then - @SEDINPLACE@ "s/^pkgver=[^ ]*/pkgver=$newpkgver/" "$BUILDFILE" - @SEDINPLACE@ "s/^pkgrel=[^ ]*/pkgrel=1/" "$BUILDFILE" - source "$BUILDFILE" + if [[ -w "${BUILDFILE%/*}" ]]; then + @SEDINPLACE@ "s/^pkgver=[^ ]*/pkgver=$newpkgver/" "$BUILDFILE" + @SEDINPLACE@ "s/^pkgrel=[^ ]*/pkgrel=1/" "$BUILDFILE" + else + warning "$(gettext "Unable to update PKGBUILD package version")" + fi + pkgver=$newpkgver + pkgrel=1 fi fi fi -- 1.7.6

2 1

[pacman-dev] [PATCH v3] pacman-key: Add --import and --import-trustdb
by Pang Yan Han 10 Jul '11

10 Jul '11

Currently, pacman-key allows the user to import their keys using the --add option. However, no similar functionality exists for importing ownertrust values. The --import-trustdb option takes a list of directories and imports ownertrust values if the directories have a trustdb.gpg database. The --import option takes a list of directories and imports keys from pubring.gpg and ownertrust values from trustdb.gpg. Think of it as a combination of --add and --import-trustdb Signed-off-by: Pang Yan Han <pangyanhan(a)gmail.com> --- NOTE: To be applied on top of allan/working There is an issue with this patch and pacman -U See http://mailman.archlinux.org/pipermail/pacman-dev/2011-July/013780.html for more info. doc/pacman-key.8.txt | 7 +++++++ scripts/pacman-key.sh.in | 36 +++++++++++++++++++++++++++++++++--- 2 files changed, 40 insertions(+), 3 deletions(-) diff --git a/doc/pacman-key.8.txt b/doc/pacman-key.8.txt index cf72b83..6314287 100644 --- a/doc/pacman-key.8.txt +++ b/doc/pacman-key.8.txt @@ -60,6 +60,13 @@ Options *-h, \--help*:: Output syntax and command line options. +*\--import* <dir(s)>:: + Adds keys from pubring.gpg into pacman's keyring and imports ownertrust + values from trustdb.gpg in the specified directories. + +*\--import-trustdb* <dir(s)>:: + Imports ownertrust values from trustdb.gpg in the specified directories. + *--init*:: Ensure the keyring is properly initialized and has the required access permissions. diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in index cb108ac..91c3d87 100644 --- a/scripts/pacman-key.sh.in +++ b/scripts/pacman-key.sh.in @@ -32,6 +32,8 @@ DELETE=0 EDITKEY=0 EXPORT=0 FINGER=0 +IMPORT=0 +IMPORT_TRUSTDB=0 INIT=0 LIST=0 RECEIVE=0 @@ -66,6 +68,8 @@ usage() { echo "$(gettext " --edit-key <keyid(s)> Present a menu for key management task on keyids")" echo "$(gettext " --gpgdir <dir> Set an alternate directory for gnupg")" printf "$(gettext " (instead of '%s')")\n" "@sysconfdir@/pacman.d/gnupg" + echo "$(gettext " --import <dir(s)> Imports pubring.gpg and trustdb.gpg from dir(s)")" + echo "$(gettext " --import-trustdb <dir(s)> Imports ownertrust values from trustdb.gpg in dir(s)")" echo "$(gettext " --init Ensure the keyring is properly initialized")" echo "$(gettext " --reload Reload the default keys")" } @@ -278,6 +282,27 @@ edit_keys() { done } +import_trustdb() { + local importdir + for importdir in "${IMPORT_DIRS[@]}"; do + if [[ -f "${importdir}/trustdb.gpg" ]]; then + gpg --homedir "${importdir}" --export-ownertrust | ${GPG_PACMAN} --import-ownertrust + fi + done +} + +import() { + local importdir + for importdir in "${IMPORT_DIRS[@]}"; do + if [[ -f "${importdir}/trustdb.gpg" ]]; then + import_trustdb "${import_dir}" + fi + if [[ -f "${importdir}/pubring.gpg" ]]; then + ${GPG_PACMAN} --quiet --batch --import "${importdir}/pubring.gpg" + fi + done +} + # PROGRAM START if ! type gettext &>/dev/null; then gettext() { @@ -287,7 +312,8 @@ fi OPT_SHORT="a::d:e:f::hlr:uv:V" OPT_LONG="add::,config:,delete:,edit-key:,export::,finger::,gpgdir:" -OPT_LONG+=",help,init,list,receive:,reload,updatedb,verify:,version" +OPT_LONG+=",help,import:,import-trustdb:,init,list,receive:,reload,updatedb" +OPT_LONG+=",verify:,version" if ! OPT_TEMP="$(parse_options $OPT_SHORT $OPT_LONG "$@")"; then echo; usage; exit 1 # E_INVALID_OPTION; fi @@ -308,6 +334,8 @@ while true; do -e|--export) EXPORT=1; [[ -n $2 && ${2:0:1} != "-" ]] && shift && KEYIDS=($1) ;; -f|--finger) FINGER=1; [[ -n $2 && ${2:0:1} != "-" ]] && shift && KEYIDS=($1) ;; --gpgdir) shift; PACMAN_KEYRING_DIR=$1 ;; + --import) IMPORT=1; shift; IMPORT_DIRS=($1) ;; + --import-trustdb) IMPORT_TRUSTDB=1; shift; IMPORT_DIRS=($1) ;; --init) INIT=1 ;; -l|--list) LIST=1 ;; -r|--receive) RECEIVE=1; shift; KEYSERVER="${1[0]}"; KEYIDS=("${1[@]:1}") ;; @@ -330,7 +358,7 @@ if ! type -p gpg >/dev/null; then exit 1 fi -if (( (ADD || DELETE || EDITKEY || INIT || RECEIVE || RELOAD || UPDATEDB) && EUID != 0 )); then +if (( (ADD || DELETE || EDITKEY || IMPORT || IMPORT_TRUSTDB || INIT || RECEIVE || RELOAD || UPDATEDB) && EUID != 0 )); then error "$(gettext "%s needs to be run as root for this operation.")" "pacman-key" exit 1 fi @@ -348,7 +376,7 @@ PACMAN_KEYRING_DIR=${PACMAN_KEYRING_DIR:-$(get_from "$CONFIG" "GPGDir" || echo " GPG_PACMAN="gpg --homedir ${PACMAN_KEYRING_DIR} --no-permission-warning" # check only a single operation has been given -numopt=$(( ADD + DELETE + EDITKEY + EXPORT + FINGER + INIT + LIST + RECEIVE + RELOAD + UPDATEBD + VERIFY )) +numopt=$(( ADD + DELETE + EDITKEY + EXPORT + FINGER + IMPORT + IMPORT_TRUSTDB + INIT + LIST + RECEIVE + RELOAD + UPDATEBD + VERIFY )) if (( ! numopt )); then error "$(gettext "No operations specified")" @@ -370,6 +398,8 @@ fi (( EDITKEY )) && edit_keys (( EXPORT )) && ${GPG_PACMAN} --armor --export "${KEYIDS[@]}" (( FINGER )) && ${GPG_PACMAN} --batch --fingerprint "${KEYIDS[@]}" +(( IMPORT )) && import +(( IMPORT_TRUSTDB)) && import_trustdb (( INIT )) && initialize (( LIST )) && ${GPG_PACMAN} --batch --list-sigs "${KEYIDS[@]}" (( RECEIVE )) && receive_keys -- 1.7.6.132.g8b11f

1 0

[pacman-dev] [PATCH] pacman-key: --init: correct creation of gpg.conf
by Pang Yan Han 10 Jul '11

10 Jul '11

Signed-off-by: Pang Yan Han <pangyanhan(a)gmail.com> --- NOTE: To be applied on top of allan/working scripts/pacman-key.sh.in | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in index 3ed42e6..cb108ac 100644 --- a/scripts/pacman-key.sh.in +++ b/scripts/pacman-key.sh.in @@ -105,7 +105,7 @@ initialize() { chmod 644 ${PACMAN_KEYRING_DIR}/{{pub,sec}ring,trustdb}.gpg # gpg.conf - [[ ! -f ${PACMAN_KEYRING_DIR}/gpg.conf ]] || touch ${PACMAN_KEYRING_DIR}/gpg.conf + [[ -f ${PACMAN_KEYRING_DIR}/gpg.conf ]] || touch ${PACMAN_KEYRING_DIR}/gpg.conf chmod 644 ${PACMAN_KEYRING_DIR}/gpg.conf if ! grep -w -q "lock-never" ${PACMAN_KEYRING_DIR}/gpg.conf &>/dev/null; then echo "lock-never" >> ${PACMAN_KEYRING_DIR}/gpg.conf -- 1.7.6.132.g8b11f

1 0

[pacman-dev] [PATCH] pacman-key: correct spelling mistake
by Pang Yan Han 10 Jul '11

10 Jul '11

Signed-off-by: Pang Yan Han <pangyanhan(a)gmail.com> --- NOTE: To be applied on top of allan/working scripts/pacman-key.sh.in | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in index 972749f..3ed42e6 100644 --- a/scripts/pacman-key.sh.in +++ b/scripts/pacman-key.sh.in @@ -66,7 +66,7 @@ usage() { echo "$(gettext " --edit-key <keyid(s)> Present a menu for key management task on keyids")" echo "$(gettext " --gpgdir <dir> Set an alternate directory for gnupg")" printf "$(gettext " (instead of '%s')")\n" "@sysconfdir@/pacman.d/gnupg" - echo "$(gettest " --init Ensure the keyring is properly initialized")" + echo "$(gettext " --init Ensure the keyring is properly initialized")" echo "$(gettext " --reload Reload the default keys")" } -- 1.7.6.132.g8b11f

1 0

[pacman-dev] [PATCH 00/25] Rename types from pmfoo_t to alpm_foo_t
by Allan McRae 09 Jul '11

09 Jul '11

After discussion here and on IRC, it was decided that rather than changing the one struct from alpm_foo_t to pmfoo_t for consistency, it would instead be better to rename all the other structs to follow the alpm_foo_t scheme. Given we are pushing towards 4.0, now is the best (only?) time to do this. I am not going to send the enitre patchset here as that would just be overkill. Take a look at the patches in my repo: http://projects.archlinux.org/users/allan/pacman.git/log/?h=breakshit Allan McRae (25): Rename pmpkgreason_t to alpm_pkgreason_t Rename pmdepmod_t to alpm_depmod_t Rename pmfileconflicttype_t to alpm_fileconflicttype_t Rename pmhandle_t to alpm_handle_t Rename pmdb_t to alpm_db_t Rename pmtrans_t to alpm_trans_t Rename pmdepend_t to alpm_depend_t Rename pmdepmissing_t to alpm_depmissing_t Rename pmconflict_t to alpm_conflict_t Rename pmfileconflict_t to alpm_fileconflict_t Rename pmgrp_t to alpm_grp_t Rename pmdelta_t to alpm_delta_t Rename pmbackup_t to alpm_backup_t Rename pmloglevel_t to alpm_loglevel_t Rename pmtransflag_t to alpm_transflag_t Rename pmtransevt_t to alpm_transevt_t Rename pmtransconv_t to alpm_transconv_t Rename pmtransprog_t to alpm_transprog_t Rename pmerrno_t to alpm_errno_t Rename pmpkgfrom_t to alpm_pkgfrom_t Rename pmgraph_t to alpm_graph_t Rename pmpkghash_t to alpm_pkghash_t Rename pmtransstate_t to alpm_transstate_t Rename pmdbinfrq_t to alpm_dbinfrq_t Rename _pmdbstatus_t to _alpm_dbstatus_t lib/libalpm/add.c | 34 +++--- lib/libalpm/add.h | 2 +- lib/libalpm/alpm.c | 12 +- lib/libalpm/alpm.h | 354 +++++++++++++++++++++++----------------------- lib/libalpm/backup.c | 16 +- lib/libalpm/backup.h | 8 +- lib/libalpm/be_local.c | 82 ++++++------ lib/libalpm/be_package.c | 30 ++-- lib/libalpm/be_sync.c | 34 +++--- lib/libalpm/conflict.c | 62 ++++---- lib/libalpm/conflict.h | 12 +- lib/libalpm/db.c | 92 ++++++------ lib/libalpm/db.h | 62 ++++---- lib/libalpm/delta.c | 68 +++++----- lib/libalpm/delta.h | 8 +- lib/libalpm/deps.c | 136 +++++++++--------- lib/libalpm/deps.h | 16 +- lib/libalpm/diskspace.c | 18 ++-- lib/libalpm/diskspace.h | 2 +- lib/libalpm/dload.c | 6 +- lib/libalpm/dload.h | 4 +- lib/libalpm/error.c | 4 +- lib/libalpm/graph.c | 8 +- lib/libalpm/graph.h | 8 +- lib/libalpm/group.c | 8 +- lib/libalpm/group.h | 4 +- lib/libalpm/handle.c | 108 +++++++------- lib/libalpm/handle.h | 20 ++-- lib/libalpm/log.c | 4 +- lib/libalpm/log.h | 2 +- lib/libalpm/package.c | 154 ++++++++++---------- lib/libalpm/package.h | 86 ++++++------ lib/libalpm/pkghash.c | 36 +++--- lib/libalpm/pkghash.h | 18 ++-- lib/libalpm/remove.c | 48 +++--- lib/libalpm/remove.h | 8 +- lib/libalpm/signing.c | 12 +- lib/libalpm/signing.h | 4 +- lib/libalpm/sync.c | 108 +++++++------- lib/libalpm/sync.h | 4 +- lib/libalpm/trans.c | 38 +++--- lib/libalpm/trans.h | 20 ++-- lib/libalpm/util.c | 14 +- lib/libalpm/util.h | 18 ++-- src/pacman/callback.c | 10 +- src/pacman/callback.h | 8 +- src/pacman/conf.c | 8 +- src/pacman/conf.h | 4 +- src/pacman/database.c | 4 +- src/pacman/deptest.c | 2 +- src/pacman/package.c | 14 +- src/pacman/package.h | 8 +- src/pacman/query.c | 36 +++--- src/pacman/remove.c | 14 +- src/pacman/sync.c | 80 +++++----- src/pacman/upgrade.c | 12 +- src/pacman/util.c | 40 +++--- src/pacman/util.h | 14 +- src/util/cleanupdelta.c | 10 +- src/util/pactree.c | 18 ++-- src/util/testdb.c | 14 +- src/util/testpkg.c | 8 +- 62 files changed, 1048 insertions(+), 1048 deletions(-) -- 1.7.6

3 8

[pacman-dev] pacman-key status
by Allan McRae 09 Jul '11

09 Jul '11

Hi, With the patches towards pacman-key now on my working branch ([1] - 16 patches in total!), I have completed everything that I had on my TODO list for pacman-key. This should also cover all patches submitted to the mailing list except the --import{,-trustdb} ones by Pang Yan Han (see below). Please let me know if anything submitted here has been omitted. For the --import{,-trustdb} patches, I am not entirely sure of the status... It would appear that the original patch [2] was reviewd by Dan [3] and a revision submitted [4]. The revised patch looks fine and I am happy to get it applying on top of my current work but is has this comment in it: > NOTE: There is this very strange bug such that when new keys are added, > previously imported keys will fail for signature verification. This happens with > both --add and --import. > > Eg. Say you want to import trustdb.gpg and pubring.gpg from directories "first", > "second" and "third", you'd have to: > > # pacman-key --import first second third > # pacman-key --import first second third However, I am not seeing this behavior with --add, so I am unsure whether it is just this --import patch that is an issue. So that patch is somewhat in limbo at the moment. I will follow this up in reply to the patch. Allan [1] http://projects.archlinux.org/users/allan/pacman.git/log/?h=working [2] http://mailman.archlinux.org/pipermail/pacman-dev/2011-May/013159.html [3] http://mailman.archlinux.org/pipermail/pacman-dev/2011-June/013190.html [4] http://mailman.archlinux.org/pipermail/pacman-dev/2011-June/013321.html

1 0

[pacman-dev] [PATCH] pacman-key: check required permissions on keyring
by Allan McRae 09 Jul '11

09 Jul '11

Makes sure that the pacman keyring is readable and that the user has permissions to create a lock file if lock-never is not specified in the gpg.conf file. Signed-off-by: Allan McRae <allan(a)archlinux.org> --- scripts/pacman-key.sh.in | 20 ++++++++++++++++++++ 1 files changed, 20 insertions(+), 0 deletions(-) diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in index 4ea9842..b4e7abc 100644 --- a/scripts/pacman-key.sh.in +++ b/scripts/pacman-key.sh.in @@ -112,6 +112,25 @@ initialize() { fi } +check_keyring() { + if [[ ! -r ${PACMAN_KEYRING_DIR}/pubring.gpg || \ + ! -r ${PACMAN_KEYRING_DIR}/secring.gpg || \ + ! -r ${PACMAN_KEYRING_DIR}/trustdb.gpg ]]; then + error "$(gettext "You do not have sufficient permissions to read the %s keyring...")" "pacman" + msg "$(gettext "Use '%s' to correct the keyring permissions.")" "pacman-key --init" + exit 1 + fi + + if (( (EXPORT || FINGER || LIST || VERIFY) && EUID != 0 )); then + if ! grep -w -q "lock-never" ${PACMAN_KEYRING_DIR}/gpg.conf &>/dev/null; then + error "$(gettext "You do not have sufficient permissions to run this command...")" + msg "$(gettext "Use '%s' to correct the keyring permissions.")" "pacman-key --init" + exit 1 + fi + fi + +} + verify_keyring_input() { local ret=0; @@ -344,6 +363,7 @@ if (( numopt != 1 )); then exit 1 fi +(( ! INIT )) && check_keyring (( ADD )) && ${GPG_PACMAN} --quiet --batch --import "${KEYFILES[@]}" (( DELETE )) && ${GPG_PACMAN} --quiet --batch --delete-key --yes "${KEYIDS[@]}" -- 1.7.6

1 0