- Pacman-dev - lists.archlinux.org

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v3.5.2-162-g22b1338
by dan＠archlinux.org 04 May '11

04 May '11

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via 22b133839088c88801b1f24455e41425a16de372 (commit) via 991bfb7cbfaf68749bfca181fcca9319a73f579e (commit) via 7680f461575b63b592090dbf76c13aa7040b840b (commit) via c4fccfe3e65c17ee5284e10570f9a8fd20e361fa (commit) via e8a40526cb3be82c5019f0ee3f592a08b3387fa9 (commit) via c03faa32f335f3fb7bc1bc8718dd1781781ef3dd (commit) via 8fd9037cfd8836db7dd35ba0e8825ba86c4e4688 (commit) via 9a127d8ed4a43009f93b7e0e2ee60dc07034801d (commit) from 4758cfe33f9a8473312a9fee718c45bf72f555f5 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 22b133839088c88801b1f24455e41425a16de372 Author: Dan McGee <dan(a)archlinux.org> Date: Wed May 4 16:29:41 2011 -0500 dload: make sure we never print a bogus error buffer Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 991bfb7cbfaf68749bfca181fcca9319a73f579e Merge: 7680f46 8fd9037 Author: Dan McGee <dan(a)archlinux.org> Date: Wed May 4 15:54:42 2011 -0500 Merge branch 'maint' commit 7680f461575b63b592090dbf76c13aa7040b840b Author: Allan McRae <allan(a)archlinux.org> Date: Fri Apr 29 21:10:09 2011 +1000 Deal with unused function parameters correctly This started off removing the "(void)foo" hacks to work around unused function parameters and ended up fixing every warning generated by -Wunused-parameter. Dan: rename to UNUSED. Signed-off-by: Allan McRae <allan(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit c4fccfe3e65c17ee5284e10570f9a8fd20e361fa Author: Dan McGee <dan(a)archlinux.org> Date: Wed May 4 15:49:47 2011 -0500 pactree: make -Wwrite-strings friendly Use a few structs to hold configuration values we change given certain options so we can be const-correct with string assignment across the board. Behavior should be completely unchanged. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit e8a40526cb3be82c5019f0ee3f592a08b3387fa9 Author: Dan McGee <dan(a)archlinux.org> Date: Wed May 4 15:48:47 2011 -0500 Fix warnings reported by -Wwrite-strings These are places where we stuck a string constant in a variable not marked as const. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit c03faa32f335f3fb7bc1bc8718dd1781781ef3dd Author: Dan McGee <dan(a)archlinux.org> Date: Wed May 4 15:42:50 2011 -0500 Reduce duplicate signing debug code and fix logic condition We had a lot of similar looking code that we can collapse down into a function. This also fixes errors seen when turning on some gcc warnings and implicitly casting away the const-ness of the string. Free the list when we are done with it as well. Also, fix a logic error where we should be checking with &&, not ||. Signed-off-by: Dan McGee <dan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: doc/PKGBUILD-example.txt | 8 +++- lib/libalpm/be_local.c | 6 +- lib/libalpm/be_package.c | 4 +- lib/libalpm/be_sync.c | 2 +- lib/libalpm/conflict.c | 8 +-- lib/libalpm/dload.c | 11 ++--- lib/libalpm/package.c | 19 +++++++- lib/libalpm/signing.c | 58 +++++++++-------------- lib/libalpm/trans.c | 4 +- lib/libalpm/util.h | 2 + scripts/makepkg.sh.in | 2 +- src/pacman/package.c | 2 +- src/pacman/util.c | 5 +- src/util/cleanupdelta.c | 4 +- src/util/pactree.c | 112 +++++++++++++++++++++++++-------------------- src/util/testdb.c | 2 +- 16 files changed, 132 insertions(+), 117 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, maint, updated. v3.5.2-7-g8fd9037
by dan＠archlinux.org 02 May '11

02 May '11

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, maint has been updated via 8fd9037cfd8836db7dd35ba0e8825ba86c4e4688 (commit) via 9a127d8ed4a43009f93b7e0e2ee60dc07034801d (commit) from da24324e2dad434bc6d868d9815efc9c2517a769 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 8fd9037cfd8836db7dd35ba0e8825ba86c4e4688 Author: Allan McRae <allan(a)archlinux.org> Date: Mon May 2 10:33:22 2011 +1000 makepkg: quote variable that may contain spaces Prevents failures when $PKGDEST contains spaces (FS#24002) Patch-by: Sebastien Duthil Signed-off-by: Allan McRae <allan(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 9a127d8ed4a43009f93b7e0e2ee60dc07034801d Author: Allan McRae <allan(a)archlinux.org> Date: Mon May 2 10:38:29 2011 +1000 Update PKGBUILD example Add quotes around $srcdir/$pkgdir (FS#23960) and use a package() function. Signed-off-by: Allan McRae <allan(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: doc/PKGBUILD-example.txt | 8 ++++++-- scripts/makepkg.sh.in | 2 +- 2 files changed, 7 insertions(+), 3 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v3.5.2-154-g4758cfe
by dan＠archlinux.org 29 Apr '11

29 Apr '11

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via 4758cfe33f9a8473312a9fee718c45bf72f555f5 (commit) via da24324e2dad434bc6d868d9815efc9c2517a769 (commit) via 3ec723ddc75f04e9a3255cf0c4ac75cfe4210528 (commit) via 1b25cb80ba5881bf8f01a32991764b26a7de6548 (commit) from 9c552272e83905703ad0cbcfc92883ebd1eff6f9 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 4758cfe33f9a8473312a9fee718c45bf72f555f5 Merge: 9c55227 da24324 Author: Dan McGee <dan(a)archlinux.org> Date: Fri Apr 29 16:05:59 2011 -0500 Merge branch 'maint' ----------------------------------------------------------------------- Summary of changes: doc/pacman.8.txt | 12 ++++++------ po/de.po | 25 ++++++++++++------------- 2 files changed, 18 insertions(+), 19 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, maint, updated. v3.5.2-5-gda24324
by dan＠archlinux.org 29 Apr '11

29 Apr '11

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, maint has been updated via da24324e2dad434bc6d868d9815efc9c2517a769 (commit) via 3ec723ddc75f04e9a3255cf0c4ac75cfe4210528 (commit) via 1b25cb80ba5881bf8f01a32991764b26a7de6548 (commit) from e3268d5e88308b1b854f5f256cb5fa40ac16ea5b (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit da24324e2dad434bc6d868d9815efc9c2517a769 Author: Dan McGee <dan(a)archlinux.org> Date: Fri Apr 29 16:04:13 2011 -0500 Transifex updates Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 3ec723ddc75f04e9a3255cf0c4ac75cfe4210528 Author: Matt Mooney <mfm(a)muteddisk.com> Date: Thu Apr 28 22:05:21 2011 -0700 pacman(8): grammar correction for relative clauses Change "which" to "that" when used in a restrictive clause. Replace usage of the relative prounoun "those" with a common noun for added clarity. Signed-off-by: Matt Mooney <mfm(a)muteddisk.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 1b25cb80ba5881bf8f01a32991764b26a7de6548 Author: Matt Mooney <mfm(a)muteddisk.com> Date: Thu Apr 28 22:05:20 2011 -0700 pacman(8): change "options" to "operation" when referring to -D -D is an operation not an option. Signed-off-by: Matt Mooney <mfm(a)muteddisk.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: doc/pacman.8.txt | 12 ++++++------ po/de.po | 25 ++++++++++++------------- 2 files changed, 18 insertions(+), 19 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] trustdb locking issues and snippets from the apt changelog
by Dan McGee 29 Apr '11

29 Apr '11

Allan and I today, and Denis in the past, noticed some issues with having a shared public key database and locking that gpg wants to do when reading from it. Here is an interesting bit from the apt changelog: apt (0.6.2) experimental; urgency=low * Provide apt-key with a secret keyring and a trustdb, even though we would never use them, because it blows up if it doesn't have them >From what I gather, they don't use the trustdb for the reasons we are seeing; instead it looks like they have another keyring named "trusted.gpg" and go forth with the assumption that everything in there is to be trusted. -Dan

3 5

[pacman-dev] [PATCH 1/2] pacman(8): change "options" to "operation" when referring to -D
by matt mooney 29 Apr '11

29 Apr '11

-D is an operation not an option. Signed-off-by: matt mooney <mfm(a)muteddisk.com> --- doc/pacman.8.txt | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/doc/pacman.8.txt b/doc/pacman.8.txt index d1b8a73..6d321dd 100644 --- a/doc/pacman.8.txt +++ b/doc/pacman.8.txt @@ -35,7 +35,7 @@ read from stdin. Operations ---------- *-D, \--database*:: - Modify the package database. This options allows you to modify certain + Modify the package database. This operation allows you to modify certain attributes of the installed packages in pacman's database. At the moment, you can only change the install reason using '\--asdeps' and '\--asexplicit' options. -- 1.7.4.4

2 3

[pacman-dev] pyalpm docs
by Erick Pérez 28 Apr '11

28 Apr '11

Hi: I've been searching for python bindings for alpm and I found this <http://mailman.archlinux.org/pipermail/pacman-dev/2011-April/012896.html> The problem is that I want to use it and I the functions doesn't seems to work. Also I tried pycman scrit and I got some errors. Note: I installed the pyalpm package from AUR I want to use it, but I just simply doesn't know how. I think this comment will fit too to the developers of libalpm, Ok, I can work with the C headers, but I will need a minimal example of how to interface with the lib. Something really simple, like test app, not the pacman code pls Thxs in advance. PS: The reason, I'm trying to make a pacman front-end, but as pacman is already a front-end of libalpm, then I'm trying to make other libalpm front-end. Erick -- El derecho de expresar nuestros pensamientos tiene algún significado tan sólo si somos capaces de tener pensamientos propios. El miedo a la libertad, Erich Fromm

2 3

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v3.5.2-150-g9c55227
by dan＠archlinux.org 27 Apr '11

27 Apr '11

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via 9c552272e83905703ad0cbcfc92883ebd1eff6f9 (commit) via 97be2f0e0a0daad2f9058377c7dbee62cc7a8718 (commit) via b7b3fc23869475d3d1729de802935b98594d1677 (commit) via 1d7ad5d24bd7487d70b98197d4dd3477ff75f513 (commit) via 4d63ebe2fbe932412a7b8340af49bf30c8e17a91 (commit) via 1cf79eb8c8c7894d238cd906613dc1cd5b7ced1a (commit) via 2df1534b787a87b4b7e8e4aaa5a9d5c2e3c6e47a (commit) via 225acbbff176e52a88eb6b8030d331a599a7ef06 (commit) via 31e55b8049ed001a993441f3efc8ffebdf360061 (commit) from a7d33d0c36420462b3de5c7e2f8327ddbda2a129 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 9c552272e83905703ad0cbcfc92883ebd1eff6f9 Author: Dan McGee <dan(a)archlinux.org> Date: Sun Apr 24 11:42:51 2011 -0500 configure: add output showing what libraries will be used Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 97be2f0e0a0daad2f9058377c7dbee62cc7a8718 Author: Dan McGee <dan(a)archlinux.org> Date: Sun Apr 24 11:40:58 2011 -0500 Allow conditional compilation with GPGME This makes it possible to omit usage of -lgpgme, just as we can do for -lcurl and -lcrypto. Thanks to Rémy Oudompheng for an initial stab at this. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit b7b3fc23869475d3d1729de802935b98594d1677 Author: Dan McGee <dan(a)archlinux.org> Date: Sat Apr 23 11:39:51 2011 -0500 signing: add more detail to unexpected signature count error Do a quick loop and count of the returned data so we can show how many signatures were parsed and read. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 1d7ad5d24bd7487d70b98197d4dd3477ff75f513 Author: Dan McGee <dan(a)archlinux.org> Date: Fri Apr 22 15:55:54 2011 -0500 Enhance GPGME debug output Add some lookup functions for nice names for the various types used by the library, and remove some fields that are of little use to us in the debug output. This should make looking at key loading and verification a bit easier, especially in determining what makes up our good and bad criteria. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 4d63ebe2fbe932412a7b8340af49bf30c8e17a91 Author: Dan McGee <dan(a)archlinux.org> Date: Thu Apr 21 23:39:01 2011 -0500 Perform package verification at package load time Both md5sum verification and PGP verification can and should be done at package load time. This allows verification to happen as early as possible for packages provided by filename and loaded in the frontend, and moves more stuff out of sync_commit that doesn't really belong there. This should also set the stage for simplified parallel loading of packages later down the road. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 1cf79eb8c8c7894d238cd906613dc1cd5b7ced1a Author: Dan McGee <dan(a)archlinux.org> Date: Thu Apr 21 21:57:08 2011 -0500 sync_commit: refactor out validate_deltas More stuff going on in the pre-committing stage that can be in a static method to make things a bit more clear. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 2df1534b787a87b4b7e8e4aaa5a9d5c2e3c6e47a Author: Dan McGee <dan(a)archlinux.org> Date: Thu Apr 21 21:40:00 2011 -0500 sync_commit: refactor out file downloads This part is almost completely self-contained, except building the list of delta filenames that we use later to check their md5sums. Refactor it into a static method so we can bring most of the code in sync_commit closer to the method name. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 225acbbff176e52a88eb6b8030d331a599a7ef06 Author: Dan McGee <dan(a)archlinux.org> Date: Thu Apr 21 19:25:44 2011 -0500 Rein in the complexity of the signature type Given that we offer no transparency into the pmpgpsig_t type, we don't really need to expose it outside of the library, and at this point, we don't need it at all. Don't decode anything except when checking signatures. For packages/files not from a sync database, we now just read the signature file directly anyway. Also push the decoding logic down further into the check method so we don't need this hanging out in a less than ideal place. This will make it easier to conditionally compile things down the road. Signed-off-by: Dan McGee <dan(a)archlinux.org> commit 31e55b8049ed001a993441f3efc8ffebdf360061 Author: Dan McGee <dan(a)archlinux.org> Date: Thu Apr 21 19:01:06 2011 -0500 signing: let GPGME handle loading signatures from files Rather than go through all the hassle of doing this ourselves, just let GPGME handle the work by passing it a file handle. Signed-off-by: Dan McGee <dan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: configure.ac | 28 ++++- lib/libalpm/Makefile.am | 6 +- lib/libalpm/alpm.h | 10 +- lib/libalpm/be_package.c | 40 +++++--- lib/libalpm/be_sync.c | 2 +- lib/libalpm/db.c | 23 ---- lib/libalpm/db.h | 3 - lib/libalpm/package.c | 41 +------- lib/libalpm/package.h | 7 +- lib/libalpm/signing.c | 267 +++++++++++++++++++++++++++++++++------------- lib/libalpm/signing.h | 13 +-- lib/libalpm/sync.c | 197 ++++++++++++++++------------------ src/pacman/query.c | 2 +- src/pacman/sync.c | 3 +- src/pacman/upgrade.c | 3 +- src/util/testpkg.c | 3 +- 16 files changed, 362 insertions(+), 286 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, maint, updated. v3.5.2-2-ge3268d5
by dan＠archlinux.org 27 Apr '11

27 Apr '11

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, maint has been updated via e3268d5e88308b1b854f5f256cb5fa40ac16ea5b (commit) from 74994faee7ce1681f24a3fc0a108dc4f9b824ffc (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: po/sk.po | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [PATCH 2/2] repo-add: add option to specify a different key to sign
by Denis A. Altoé Falqueto 25 Apr '11

25 Apr '11

There may be some situations when one needs to specify a different key from user's default. The option -k or --signwithkey accepts a key identifier and uses that in the signing command. Signed-off-by: Denis A. Altoé Falqueto <denisfalqueto(a)gmail.com> --- There was a different version of this patch sent some time ago. For some reason, just the part for makepkg was merged. So, now I'm sending a little better version for repo-add/remove. scripts/repo-add.sh.in | 36 ++++++++++++++++++++++++++++-------- 1 files changed, 28 insertions(+), 8 deletions(-) diff --git a/scripts/repo-add.sh.in b/scripts/repo-add.sh.in index cb545f3..7b9e85f 100644 --- a/scripts/repo-add.sh.in +++ b/scripts/repo-add.sh.in @@ -66,7 +66,8 @@ usage() { cmd="$(basename $0)" printf "%s (pacman) %s\n\n" "$cmd" "$myver" if [[ $cmd == "repo-add" ]] ; then - printf "$(gettext "Usage: repo-add [-d] [-f] [-q] [-s] [-v] <path-to-db> <package|delta> ...\n")" + printf "$(gettext "Usage: repo-add [-d] [-f] [-q] [-s [-k|--signwithkey key]]\n")" + printf "$(gettext " [-v] <path-to-db> <package|delta> ...\n")" printf "$(gettext "\ repo-add will update a package database by reading a package file.\n\ Multiple packages to add can be specified on the command line.\n\n")" @@ -74,16 +75,18 @@ Multiple packages to add can be specified on the command line.\n\n")" printf "$(gettext " -d, --delta generate and add delta for package update\n")" printf "$(gettext " -f, --files update database's file list\n")" elif [[ $cmd == "repo-remove" ]] ; then - printf "$(gettext "Usage: repo-remove [-q] [-s] [-v] <path-to-db> <packagename|delta> ...\n\n")" + printf "$(gettext "Usage: repo-remove [-q] [-s [-k|--signwithkey key]]\n")" + printf "$(gettext " [-v] <path-to-db> <packagename|delta> ...\n\n")" printf "$(gettext "\ repo-remove will update a package database by removing the package name\n\ specified on the command line from the given repo database. Multiple\n\ packages to remove can be specified on the command line.\n\n")" printf "$(gettext "Options:\n")" fi - printf "$(gettext " -q, --quiet minimize output\n")" - printf "$(gettext " -s, --sign sign database with GnuPG after update\n")" - printf "$(gettext " -v, --verify verify database's signature before update\n")" + printf "$(gettext " -q, --quiet minimize output\n")" + printf "$(gettext " -s, --sign sign database with GnuPG after update\n")" + printf "$(gettext " -k, --signwithkey <key> use the specified key to sign the repository\n")" + printf "$(gettext " -v, --verify verify database's signature before update\n")" printf "$(gettext "\n\ See %s(8) for more details and descriptions of the available options.\n\n")" $cmd if [[ $cmd == "repo-add" ]] ; then @@ -204,7 +207,13 @@ create_signature() { error "$(gettext "Cannot find the gpg binary! Is gnupg installed?")" exit 1 # $E_MISSING_PROGRAM fi - gpg --detach-sign --use-agent "$dbfile" || ret=$? + + # Check if SIGNKEY is valid. + local SIGNWITHKEY="" + if [[ "${SIGNKEY}" ]]; then + SIGNWITHKEY="-u ${SIGNKEY}" + fi + gpg --detach-sign ${SIGNWITHKEY} "$dbfile" || ret=$? if (( ! ret )); then msg2 "$(gettext "Created signature file %s.")" "$dbfile.sig" else @@ -226,7 +235,7 @@ verify_signature() { warning "$(gettext "No existing signature found, skipping verification.")" return fi - gpg --verify "$dbfile.sig" || ret=$? + gpg --verify "$dbfile.sig" &>/dev/null || ret=$? if (( ! ret )); then msg2 "$(gettext "Database signature file verified.")" else @@ -542,12 +551,22 @@ trap 'trap_exit "$(gettext "An unknown error has occured. Exiting...")"' ERR success=0 # parse arguments -for arg in "$@"; do +while [[ $# > 0 ]]; do + arg="$1" case "$arg" in -q|--quiet) QUIET=1;; -d|--delta) DELTA=1;; -f|--files) WITHFILES=1;; -s|--sign) SIGN=1;; + -k|--signwithkey) + shift + SIGNKEY="$1" + # Check if key exists, to stop as early as possible + if ! gpg --list-key "${SIGNKEY}" &>/dev/null; then + error "$(gettext "The key ${SIGNKEY} doesnn't exist.")" + exit 1 + fi + ;; -v|--verify) VERIFY=1;; *) if [[ -z $REPO_DB_FILE ]]; then @@ -562,6 +581,7 @@ for arg in "$@"; do fi ;; esac + shift done # if at least one operation was a success, re-zip database -- 1.7.4.2

2 2