- Arch-general - lists.archlinux.org

[arch-general] update-ca-trust. how to create Equifax_Secure_CA.pem and thawte_Primary_Root_CA.pem bundle
by niya levi 06 Feb '16

06 Feb '16

hi how do i create a ca certificate bundle with update-ca-trust extract or trust extract-compat which includes my root and intermediate certificates plus Equifax_Secure_CA.pem and thawte_Primary_Root_CA.pem, i need this for postfix to relay through gmail, on a previous instalation of postfix i simply used :- cat myCA.crt /etc/ssl/certs/Equifax_Secure_CA.pem /etc/ssl/certs/thawte_Primary_Root_CA.pem | tee /etc/postfix/ca.crt with the new dynamic configuration feature method of adding CA certificates i use :- cp myCA.crt /etc/ca-certificates/trust-source/anchors update-ca-trust extract my root and intermediate ca certificates are created in /etc/ssl/certs and /etc/ssl/cert.pem has the root and intermediate ca certificate bundle so how do i add the other two ca certificates to the /etc/ssl/cert.pem bundle ? thanx shadrock

1 0

[arch-general] building cwm or twrp on arch
by Javier Vasquez 04 Feb '16

04 Feb '16

Hi, As I was not able to fing a CWM (clock work mode) recovery image, neither a TWRP (TeamWin Recovery Project) recovery image for Huawei SnapTo, I'm planning on building CWM for that phone on Arch. I was looking at [1], so to have an idea of what packages I needed to install, but [1] doesn't focus on building CWM/TWRP, besides I couldn't notice how the sdk and others under [2] were sourced, or included into PATH, LD_LIBRARY_PATH, etc. So I have already installed: android-tools android-sdk android-sdk-platform-tools android-sdk-build-tools android-platform And several other android build requirements, except for ncurses5-compat-libs and lib32-ncurses5-compat-libs (not planning to install them unless strictly necessary). However searching I found [3], which in turns indicate one should do: export PATH="/opt/android-build:/opt/jdk1.6.0_45/bin:$PATH" But then it also indicates: . build/envsetup.sh lunch cyanogen_cooperve-eng make clean Which I'd guess those are the initial cyanogen build steps, and depend on the cynogenmod sources being downloaded there. However I'm still missing how to build CWM/TWRP recovery images for that particular phone model. If anyone has pointers to where one can read how to build such images for any phone model (being able to specify the one for which it's to be built), or huawei snapto in particular, then that'd be great. Or if anyone can include instructions on how to build such images, then that'd be also great. Thanks a lot, -- Javier [1] https://wiki.archlinux.org/index.php/android [2] /opt/android-sdk [3] http://forum.xda-developers.com/showthread.php?t=2259929

2 3

[arch-general] Network configuration
by Wolfgang Mader 04 Feb '16

04 Feb '16

Dear list, I have a router which automatically identifies the devices connected to it by their host name (its a FritzBox if that matters). However, this does not work for all my arch-boxes. Thus, I get the feeling, I am missing something in my network configuration. Usually, I edit /etc/hostname by putting just the hostname in there. There is also the tool hostnamectl set-hostname myhostname which does the same. The arch wiki says, that the file also may contain the domain, if any. How do I set a hostname with domain? Is it just hostnamectl set-hostname myhostname.domain Then, the arch wiki says, that it is a good idea to add the hostname as alias for localhost in /etc/hosts. Do you do that? And last, which piece of information determines the computers name in the network. Is it the hostname in /etc/hostname, or more likely the aliases in /etc/hosts? Is there anything more I should configure? Thank, Wolfgang

2 2

[arch-general] Link to the original efivars BBS thread
by Kyle Terrien 04 Feb '16

04 Feb '16

Hello all, A few days ago, there was a big stink about bricking motherboards accidentally with an overzealous rm that descended into /sys/firmware/efi/efivars. It all started with one thread on the BBS titled "No POST after rm -rf /". After reading about the issue, I went into archivist mode and made a small writeup for myself detailing how to remount efivars as ro. I saved the link to the original thread [0], but now when I navigate to it, I get the error message, "Bad request. The link you followed is incorrect or outdated." Was the thread moved? Does anyone have the new address of the thread? --Kyle [0]: https://bbs.archlinux.org/viewtopic.php?id=207549

2 2

[arch-general] Update GNU Wget
by Darshit Shah 03 Feb '16

03 Feb '16

Hi, I noticed that it's been almost one month since the release of GNU Wget 1.17 and yet it is not even in the [testing] repos. Is there anything holding up? A new bugfix version has just been released and I'd like to see that in the repos as soon as possible. If there's any issues, please let us know so they can be fixed. Thanking You, Darshit Shah

4 6

[arch-general] [pacman] unknown-horizons / dependencies
by Peter Nabbefeld 03 Feb '16

03 Feb '16

Hi, as far as I understood, there's a conflict between "unknown-horizons" and current version of fife. However, the game refuses to start, so I want to re-install it, respectively replace it by the git version. Using "pacman -Rssd" (also using only one "s"), optional dependencies of other packages are removed, too (e.g. "boost" for "ogre"), but without any "s", no dependencies are removed. 1. As I don't remember, which package has installed "ogre" probably as a dependency, I'd like to know that. Using "-Qo" it seems only to be possible to get the owners of files - how can I view the "parent" or "owner package" of a package? 2. How can I exclude optional dependencies from removal? Kind regards Peter

2 1

[arch-general] pacman and hooks
by Magnus Therning 03 Feb '16

03 Feb '16

I just noticed an email in this list mentioning that with pacman 5.0 we know have support for hooks. I proceeded to look at the man pages for /pacman/, /makepkg/, and /PKGBUILD/ but only found one mention of a /hookdir/. Is there more information about this feature available somewhere? /M -- Magnus Therning OpenPGP: 0x927912051716CE39 email: magnus(a)therning.org jabber: magnus(a)therning.org twitter: magthe http://therning.org/magnus Do not meddle in the affairs of Wizards, for they are subtle and quick to anger. -- J.R.R Tolkien

6 12

[arch-general] systemd user accounts are created in a inconsistent way
by Daniel Milewski 02 Feb '16

02 Feb '16

Most systemd user accounts are present in the /etc/passwd file provided by the filesystem package. This is not the case for only two of them, namely systemd-journal-upload and systemd-journal-remote, which are set up by systemd-sysusers, executed when the systemd package is installed. Is there a reason for that? Wouldn't it be better to include all systemd users in /etc/passwd, or let systemd-sysusers handle account creation? -- Daniel Milewski GPG key ID: 8D43A4A1

3 2

[arch-general] Why does a regular user have access to /dev/uinput (and why only temporary)
by Manuel Reimer 02 Feb '16

02 Feb '16

Hello, I'm currently developing a usermode input driver using uinput. While doing this, I've found some "ugly" behaviour. If I do getfacl from my regular user, I get: $ getfacl /dev/uinput getfacl: Removing leading '/' from absolute path names # file: dev/uinput # owner: root # group: root user::rw- user:manuel:rw- group::--- mask::rw- other::--- So for whatever reason my user is able to launch a usermode input driver. No root permission needed. But in fact the driver isn't even loaded (no uinput module). But it is loaded as soon as I try to access the device. After that, I have: $ getfacl /dev/uinput getfacl: Removing leading '/' from absolute path names # file: dev/uinput # owner: root # group: root user::rw- user:manuel:rw- #effective:--- group::--- mask::--- other::--- So somehow the permission is still there, but no longer effective??? If I switch VT once (and probably switching the active session this way) I have permission again and now my user keeps it. What is causing this ugly behaviour? Why does a user have to have uinput permissions at all? The (possible security) problem with this is, that the driver (may be a simulated keyboard driver) keeps active even if the session changes. So a software, launched in one session, affects another session. Thanks in advance Manuel

2 2

[arch-general] btrfs/snapper hook for pacman 5.0?
by Karol Babioch 02 Feb '16

02 Feb '16

Hi all, now with hooks newly introduced to pacman, are there already some useful btrfs and/or snapper hooks available? At least a quick look-around in the forums and with Google hasn't revealed anything yet. Maybe I'm getting something wrong here, but in my understanding it should be doable and probably is even a cool feature that other distros / package managers already provide. Basically all we have to do is to create a snapshot before and after each pacman invocation. However, after having a look at the alpm-hooks(5) man page I'm not too sure what kind of trigger would make the most sense here. With the "recommended" btrfs / snapper subvolume layout, one could add triggers for paths that should be backed up (e.g. /, /var/, etc.). On the other hand the man page tells us that using the root directory as trigger path is not recommended. So has anyone already looked into this and has some thoughts on this? Best regards, Karol Babioch

6 13