- Arch-general - lists.archlinux.org

Good PR from bad AUR FF bin package situation courtesy of The Register
by David C Rankin 24 Jul '25

24 Jul '25

All, Despite the unfortunate AUR RAT issue, Arch received a good review of its handling of the matter: Arch Linux users told to purge Firefox forks after AUR malware scare https://go.reg.cx/tdml/dfd67/68a9047f/70c7d2e3/4hwN The article spoke well of Arch throughout. That's a good reflection on Arch governance and reaffirmation of the the way the distro has been managed. Well done. (I'm not affiliated with The Register, but worth subscribing to the excellent daily newsletter) -- David C. Rankin, J.D.,P.E.

1 0

About the 2 patches and GitLab requests
by c4a＠monocles.eu 23 Jul '25

23 Jul '25

Within the last 24 hours, I have sent 2 patches. Since the mailing list clearly isn't the right place to post them, I decided to request a GitLab account. However, this decision of mine has changed. As a preemptive action to prevent any drama, I have sent a message in the support ticket to disregard the request. None of this is done maliciously to harm Arch Linux or flood people's mailboxes. I really want this to be the last message about this. I mainly just was curious about the bring up process for packages. And I wanted to bring up a couple packages for the Arch Linux team since they are out of date.

2 1

[PATCH] upgpkg: 7zip 25.00
by c4a＠monocles.eu 22 Jul '25

22 Jul '25

From: Charles <c4a(a)monocles.eu> Unfortunately I had to add a prepare function to patch out the -Werror flag using sed. Apart from that the package appears to work just fine. --- PKGBUILD | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/PKGBUILD b/PKGBUILD index ab0524b..14c55f6 100644 --- a/PKGBUILD +++ b/PKGBUILD @@ -1,8 +1,8 @@ # Maintainer: Evangelos Foutras <foutrelis(a)archlinux.org> pkgname=7zip -pkgver=24.09 -pkgrel=3 +pkgver=25.00 +pkgrel=1 pkgdesc="File archiver for extremely high compression" arch=('x86_64') url="https://www.7-zip.org" @@ -13,7 +13,12 @@ provides=('p7zip') conflicts=('p7zip') replaces=('p7zip') source=(https://7-zip.org/a/7z${pkgver//./}-src.tar.xz) -sha256sums=('49c05169f49572c1128453579af1632a952409ced028259381dac30726b6133a') +sha256sums=('bff9e69b6ca73a5b8715d7623870a39dc90ad6ce1f4d1070685843987af1af9b') + +prepare() { + cd "$srcdir" + sed -i 's/-Werror//g' CPP/7zip/7zip_gcc.mak +} build() { local _platform_flags=() -- 2.50.1

3 2

[PATCH] upgpkg: less 679
by c4a＠monocles.eu 22 Jul '25

22 Jul '25

From: Charles <c4a(a)monocles.eu> --- PKGBUILD | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/PKGBUILD b/PKGBUILD index 95a9671..b279e80 100644 --- a/PKGBUILD +++ b/PKGBUILD @@ -3,7 +3,7 @@ # Contributor: judd <jvinet(a)zeroflux.org> pkgname=less -pkgver=668 +pkgver=679 pkgrel=1 epoch=1 pkgdesc='A terminal based program for viewing text files' @@ -14,7 +14,7 @@ depends=('glibc' 'ncurses' 'pcre2') validpgpkeys=('AE27252BD6846E7D6EAE1DD6F153A7C833235259') # Mark Nudelman source=("https://www.greenwoodsoftware.com/$pkgname/$pkgname-$pkgver.tar.gz" "$pkgname-$pkgver.tar.gz.sig::https://www.greenwoodsoftware.com/$pkgname/$pkgname-$pkgver.sig") -sha256sums=('2819f55564d86d542abbecafd82ff61e819a3eec967faa36cd3e68f1596a44b8' +sha256sums=('9b68820c34fa8a0af6b0e01b74f0298bcdd40a0489c61649b47058908a153d78' 'SKIP') prepare() { -- 2.50.1

2 1

Bind in systemd-nspawn Container
by Pocket 18 Jul '25

18 Jul '25

Is it possible to run bind inside a nspawn container? Created a container with pacstrap -k base into /var/lib/machines/Bind/ set root password in container Using host networking machinectl start Bind machinectl login Bind Login as root root@Bind named]# pacman -Syy&&pacman -S bind vim Configured bind as resolver per archlinux wiki BIND root@Bind named]# systemctl start named&&systemctl status named ● named.service - Internet domain name server Loaded: loaded (/usr/lib/systemd/system /named.service; enabled; preset: disabled) Active: active (running) since Thu 2025-07-17 19:45:23 EDT; 17ms ago Invocation: f5eddb5e40fb4c548d8eae7671c563fd Main PID: 1109 ((named)) Tasks: 1 (limit: 19108) CPU: 9ms CGroup: /system.slice/named.service └─1109 "(named)" Jul 17 19:45:23 Bind systemd[1]: Started Internet domain name server. [root@Bind named]# dig @127.0.0.1 redhat.com ;; communications error to 127.0.0.1#53: connection refused ;; communications error to 127.0.0.1#53: connection refused ;; communications error to 127.0.0.1#53: connection refused ; <<>> DiG 9.20.11 <<>> @127.0.0.1 redhat.com ; (1 server found) ;; global options: +cmd ;; no servers could be reached [root@Bind named]# dig @localhost. redhat.com ;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to ::1#53: connection refused ;; communications error to 127.0.0.1#53: connection refused ; <<>> DiG 9.20.11 <<>> @localhost. redhat.com ; (2 servers found) ;; global options: +cmd ;; no servers could be reached root@Bind named]# ps aux|grep named named 1109 0.0 0.1 223180 22328 ? Ssl 19:45 0:00 /usr/bin/named -f -u named root 1135 0.0 0.0 3796 2064 pts/1 S+ 19:47 0:00 grep named [root@pocket ~]# ps aux|grep named root 22107 0.0 0.0 16348 10928 pts/1 Sl+ 19:44 0:00 vim etc/named.conf vu-Bind+ 22145 0.0 0.1 223180 22328 ? Ssl 19:45 0:00 /usr/bin/named -f -u named root 22228 0.0 0.0 6468 2048 pts/0 S+ 19:47 0:00 grep named From journalctl: Jul 17 20:00:34 Bind named[1306]: couldn't add command channel 127.0.0.1#953: permission denied Jul 17 20:00:34 Bind named[1306]: configuring command channel from '/etc/rndc.key' Jul 17 20:00:34 Bind named[1306]: couldn't add command channel ::1#953: permission denied Jul 17 20:00:34 Bind named[1306]: listening on IPv4 interface lo, 127.0.0.1#53 Jul 17 20:00:34 Bind named[1306]: creating IPv4 interface lo failed; interface ignored Jul 17 20:00:34 Bind named[1306]: listening on IPv4 interface end0, 192.168.50.5#53 Jul 17 20:00:34 Bind named[1306]: creating IPv4 interface end0 failed; interface ignored Jul 17 20:00:34 Bind named[1306]: IPv6 socket API is incomplete; explicitly binding to each IPv6 address separately Jul 17 20:00:34 Bind named[1306]: listening on IPv6 interface lo, ::1#53 Jul 17 20:00:34 Bind named[1306]: creating IPv6 interface lo failed; interface ignored Jul 17 20:00:34 Bind named[1306]: listening on IPv6 interface end0, 2603:6010:6c00:3f2e:2ecf:67ff:fed8:6900#53 Jul 17 20:00:34 Bind named[1306]: creating IPv6 interface end0 failed; interface ignored Jul 17 20:00:34 Bind named[1306]: listening on IPv6 interface end0, fe80::2ecf:67ff:fed8:6900%2#53 Jul 17 20:00:34 Bind named[1306]: creating IPv6 interface end0 failed; interface ignored Looks like it is running in the container but can not bind to any interfaces Looks like I am missing something or it just doesn't work. Anyone have any magic pixie dust? -- Hindi madali ang maging ako

2 2

Systemd resolved
by Pocket 17 Jul '25

17 Jul '25

I have a router that has DHCP and assigns IP and DNS servers The DNS server assigned are 192.168.50.4 192.168.50.2 fe80::dea6:32ff:fe25:41d2 192.168.50.4 pi-hole 192.168.50.2 Bind DNS recursive fe80::dea6:32ff:fe25:41d2 pi-hole The pi-hole server uses 192.168.50.2 as its DNS name resolution resolvectl returns this Global Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=allow-downgrade/supported resolv.conf mode: stub Fallback DNS Servers: 1.1.1.1#cloudflare-dns.com 9.9.9.9#dns.quad9.net 8.8.8.8#dns.google 2606:4700:4700::1111#cloudflare-dns.com 2620:fe::9#dns.quad9.net 2001:4860:4860::8888#dns.google Link 2 (end0) Current Scopes: DNS Protocols: +DefaultRoute -LLMNR -mDNS -DNSOverTLS DNSSEC=allow-downgrade/supported Current DNS Server: fe80::dea6:32ff:fe25:41d2 DNS Servers: 192.168.50.4 192.168.50.2 fe80::dea6:32ff:fe25:41d2 Default Route: yes Link 3 (wlan0) Current Scopes: none Protocols: -DefaultRoute -LLMNR -mDNS -DNSOverTLS DNSSEC=allow-downgrade/supported Default Route: no The following for end0 wired connection Current DNS Server: fe80::dea6:32ff:fe25:41d2 changes or cycles through the three DNS servers, changing about every 5 minutes or upon browsing the web with firefox ( firefox is set to use my DNS servers) Is that how resolved really works? I was under the impression that once the "Current DNS Server" was set it would stay that way unless the "Current DNS Server" failed. I there a setting other than /etc/systemd/resolved.conf ? [Resolve] DNS=192.168.50.4 fe80::dea6:32ff:fe25:41d2 Domains=~. I would really like to have it assigned by the router instead of at each client. -- Hindi madali ang maging ako

2 2

Inquiry About Creating a Modified Distribution Based on Arch Linux
by 王奕宁 14 Jul '25

14 Jul '25

Dear Arch Linux Development Team, I am working on a customized Linux distribution named LinuxToGo, which would be explicitly based on Arch Linux (not a fork). Our goal is to create a specialized Linux distribution derived from Arch Linux, focused exclusively on providing a robust, portable Linux experience bootable directly from external drives (e.g., USB sticks, SSDs, etc.). All releases will prominently state: "LinuxToGo is NOT an official Arch Linux product. It is a modified version of Arch Linux. Official resources can be found at archlinux.org." The project website/documentation will clearly credit Arch Linux as the foundation and link to the official project. Technical Approach The distribution would utilize the Arch Linux package repositories ([core], [extra], [community]) directly where possible. Customizations (e.g., installer scripts, default configurations, or curated software sets) will be developed/maintained separately in our repositories. We will strictly adhere to all relevant Arch Linux trademarks and branding guidelines. I would like to confirm whether this approach aligns with Arch Linux’s policies, particularly regarding: The use of the Arch Linux name/brand in the context of "based on Arch Linux." Distributing pre-configured ISOs that utilize official repositories. Any specific compliance requirements we should follow. We deeply respect the Arch Linux community and philosophy, and wish to ensure full alignment with your guidelines before proceeding. Thank you for your time and consideration. Wtada233 wtada233(a)outlook.com

6 5

vlc-plugins split - is there a list of what used to be included?
by David C Rankin 11 Jul '25

11 Jul '25

Arch devs, Updates tonight showed 20+ new vlc-plugins that are now separate from the main vlc package. The wiki is silent on which were included. There are a number of reddit threads from the last day about vlc no longer working due to the plugin issue, is there a list of what (which plugins) used to be included by vlc before the package was split? I see there is a plugins-all which presumably installs every plugin, but I can't tell if that is wildly over-inclusive compared to what vlc used to provide by default. Is there a way to figure out what used to be in the default Arch vlc package that now must be separately installed as a plugin to ensure the same functionality? The old package before the split used to work quite well without any muss or fuss. -- David C. Rankin, J.D.,P.E.

3 3

Adding rocprofiler-register as a dependency of rocm runtimes
by Jesper Jensen 11 Jul '25

11 Jul '25

I've investigated and issue with the rocm profiler on arch[1]. It turns out that you need to have rocprofiler-register installed when building some of the rocm runtimes. I think this probably falls under the Arch definition of a feature request[2], but I don't know where to file those. I know that Torsten Keßler is packaging rocm, but I don't know if he's reachable on the archlinux email address. I could of course shove it into gitlab, but I'd rather not dress it up like a bug when I don't know what Torsten's position is on it. Where can I file a feature request? Kindly, [1]: https://github.com/ROCm/rocprofiler-sdk/issues/58 [2]: https://wiki.archlinux.org/title/Bug_reporting_guidelines#Bug_or_feature? -- Jesper Jensen PGP Fingerprint: DC1E 2882 4A1B 9821 B7E4 3D3D F1FB F142 B815 2A85 http://keybase.io/delusional Damstræde 90 9220 Aalborg Øst

1 0

Are Steam games kind of sandboxed?
by Markus Schaaf 10 Jul '25

10 Jul '25

Hi all, I am trying to access a folder directly beneath the root folder of my computer from inside a game (Symphony), using Steam Linux Runtime (no Windows emulation like Proton). Strangely that particular folder is missing (some others like /boot and /opt too). Then there is a folder /overrides that does not exist in /. So this is some kind of sandbox, but I have no idea where to look, if I want to whitelist or link other folders there. Can anybody help? BR Markus

2 1