- Arch-general - lists.archlinux.org

[arch-general] libgcrypt.so.20 missing
by Mark E. Lee 16 Jan '14

16 Jan '14

Salutations! After an upgrade of my entire system, I am now unable to install packages or run any programs that depend on libgcrypt. I get the following error : libgrypt.so.20 not found. Looking at my pacman logs it seems that This error appeared after an update to pth (2.0.7-4 -> 2.0.7-5). I've downgraded the package but it doesn't seem to solve the issue. Regards, Mark -- Mark E. Lee <mark(a)markelee.com>

11 25

[arch-general] libgsf 1.14.28-1 - bug - gsf-libxml.h:26:25: fatal error
by David C. Rankin 15 Jan '14

15 Jan '14

All, Is this a bug or is it me. Looks like a bug in libgsf 1.14.28-1 in the header file: /usr/include/libgsf-1/gsf/gsf-libxml.h If you attempt to include this header file you receive the error: /usr/include/libgsf-1/gsf/gsf-libxml.h:26:25: fatal error: libxml/tree.h: No such file or directory #include <libxml/tree.h> ^ compilation terminated. Example: #include <stdio.h> #include <libxml/tree.h> void main (int argc, char *argv[]) { printf("testing include\n"); } 17:01 phoinix:/dat_e/tde/tstbld/tmp> gcc -o tst tst.c tst.c:3:25: fatal error: libxml/tree.h: No such file or directory #include <libxml/tree.h> ^ compilation terminated. If someone will confirm this is a bug and not me being dense -- I'll file it. -- David C. Rankin, J.D.,P.E.

1 1

[arch-general] Mirrors out of date
by Mark Lee 15 Jan '14

15 Jan '14

Salutations, Pardon me but does anyone know how mirrors are synced and flagged out of date? Regards, Mark -- Mark Lee <mark(a)markelee.com>

6 9

[arch-general] Is out of source building still recommended with cmake in PKGBUILD scripts
by David C. Rankin 15 Jan '14

15 Jan '14

All, Updating PKGBUILDs as specified in VCS_PKGBUILD_Guidelines, I have a svn based source that builds with cmake. In the past I have forced out of source building for all cmake built packages. e.g.: build() { cd $srcdir msg "Creating out-of-source build directory: ${srcdir}/${_builddir}" mkdir -p build cd build msg "Starting cmake..." cmake ${srcdir}/blah \ <snip> msg "Building - $pkgname..." make } In https://wiki.archlinux.org/index.php/VCS_PKGBUILD_Guidelines it specifies that "The local repo is left untouched, thus invalidating the need for a -build directory." Am I reading this correctly to say - "creating a separate out-of-source build directory is no longer required -- even for cmake built packages?" Or am I just confused again... -- David C. Rankin, J.D.,P.E.

3 3

[arch-general] How stable are the new version number formats on eg. filesystem, usbutils, etc.
by David C. Rankin 15 Jan '14

15 Jan '14

All, Updating different minimum dependency package version info for tde PKGBUILDs, I note there have been a number of 'version number format' changes for various packages. E.g.: filesystem 0.x.y-z ==> 2013.05-2 usbutils 0.x.y-z ==> 006-1 There is a big difference going from filesystem>=0.7.3 to filesystem>=2013. When I run across packages like this where the version has changed format -- Are they likely going to stay with the new format? Or will they likely revert back to major.minor-rel numbers at some time? -- David C. Rankin, J.D.,P.E.

3 2

[arch-general] Ruby gem packages in Arch
by Anatol Pomozov 15 Jan '14

15 Jan '14

Hi everyone I manage a lot of Ruby packages (~230) in AUR, updated ~150 of them recently. I would like to share my experience with herding these packages. Some of the issues might be similar to other language package systems (cpan, pip, nodejs). First it worth mention that Ruby has its own packages manager (rubygems). It is the standard and nearly all ruby software distributed via rubygems. Rubygems has its package specification that includes information like project homepage, developer contacts, license, information about native dependencies. It makes sense to parse those specifications and use it for PKGBUILD maintenance. The idea is to have a script that will create ruby packages, will bump versions, update dependencies if needed. And this scriptability is important - copy/pasting ruby gems information is boring and error-prone. There are several scripts that perform gem->arch conversion and I work on one of them called 'gem2arch' [1]. >From other side rubygems differ from pacman that sometimes make it harder to match packages. The main difference is that rubygems has very flexible dependency mechanism. Several versions of a package can be installed at the same time. Another package can specify custom dependency restriction. It can depend on a specific version e.g. '=4.0.2' or it can ask for a range of versions, or any crazy set of restrictions like 'provide me package FOO with version between 2.3 and 3.1.4 but excluding 2.8 and 3.0.2'. The most popular type of dependency restriction is 'approximately greater' aka '~>'. '~>3.0.3' means 'give me package with version 3.0.XXX where XXX equal or larger than 3'. '~>' is quite popular mechanism to stick to a specific version range with stable API. Because rubygem can have several versions of the package installed such restrictions do not block other packages from using more recent versions. Thus package FOO might use version 2.x while BAR uses 3.x and everyone is happy. This dependency mechanism is different from the Arch where the preferred form of dependency is 'use HEAD version'. Several versions can be installed in Arch by adding version suffix to the package name e.g. ruby1.8 or apachae2.2. But versioned packages is an exception rather than rule in Arch. In rubygems using non-HEAD version is normal and widely-used practice. ~20% of my ruby packages are versioned one, e.g. ruby-rail-2 ruby-tilt-1. ruby-rails-2 means the latest version of rails 2.xx and ruby-tilt-1 is the latest version of tilt 1.yy. Dependency version calculation might be tricky in case of complex dependency restrictions, e.g. foo-2.2.1 might be either 'foo', 'foo-2', 'foo-2.2' or 'foo-2.2.1' depending on what other released version 'foo' has. Doing these calculations manually might be tricky but thanks to 'gem2arch' it makes things easier. In general adding/updating packages is a simple task (thanks to gem2arch). Only small number of packages require custom modifications like source patching or adding native dependencies. Emphasizing importance of scripting I would like to mention a rule that makes scripting harder. Ruby language page [3] says "For libraries, use ruby-$gemname. For applications, use the program name". How to calculate this rule in a script? Is a file in /usr/bin enough to tell that this is an app? Actually a lot of the ruby libraries can be used both as command-line application and a library (rake, rdoc, rubygems, erubis, nokogiri, ....) it is safe to tell that all packages in rubygems are libraries. If so I propose to change this rule to "all ruby packages should be named ruby-$gemname". Other ruby users like this idea [2]. Also some maintainers try to make package names nicer and do not follow "ruby-$gemname" rule. For example 'rubyirc' gem was packed as ruby-irc Arch package. It is harder for a script to match the gem to this package. Also there was a problem when another gem called 'irc' appeared, this one is actually should be used for 'ruby-irc' package. So I propose another rule for Ruby (and other languages) - follow 'ruby-$gemname' even if gemname already contains a mention of 'ruby'. To negative side of ruby packaging in AUR I can add bad situation with inactive maintainers. The ruby packages are spread over many maintainers most of which are inactive and do not update packages. Ruby packages in AUR stay out-of-date for many months. In general I think that for an active ruby development that does not require Arch dependencies 'gem installed in $HOME' is better way to go. [1] https://github.com/anatol/gem2arch [2] https://wiki.archlinux.org/index.php/Talk:Ruby_Gem_Package_Guidelines [3] https://wiki.archlinux.org/index.php/Ruby_Gem_Package_Guidelines

9 17

[arch-general] connman conflicts
by Curtis Shimamoto 15 Jan '14

15 Jan '14

I was wondering why connman conflicts with openresolv. Looking through the files in each package, there don't seem to be any in common. So I figure there must be something that I am missing or just completely unaware of. I am primarily a connman user, but I use connman-git from the AUR, both because it seems to be in pretty active development and because it does not have as many of the features that I don't need built into it. In the AUR, connman-git does not conflict with openresolv. So I am kind of wondering if it should. I like having netctl on my machine as well, but if this poses some kind of risk or true conflict somehow, I would just like to know if I should make a decision between one or the other. Thanks. -- Curtis Shimamoto

1 0

[arch-general] Failure to resume on kernel >3.9.9
by Patrick Burroughs (Celti) 14 Jan '14

14 Jan '14

Hi list, I realise this email comes with a deplorable paucity of informaton, but I haven't found *any* logs relating to this event. I also realise I've waited what may be considered overlong to ask for help, but I was hoping the bug would be fixed in a later kernel release and it wasn't. Google has failed me, so now I come to you for help. My laptop is an HP Pavilion g7. The system suspends normally, but fails to resume leaving a powered-off screen and no responsiveness to keyboard input, including the magic sysrq, but the caps lock light turns on and off. At first I suspected fglrx, but it happens with or without fglrx loaded, and with or without nomodeset on the kernel command line. Further, it happens identically inside or outside of X. I tried git-bisect on the kernel but gave up after many hours of compiling and testing — anyone know of a faster/easier way to do this? I'm currently running kernel 3.9.8, but am perfectly willing to update again and generate a failure to provide any logs someone thinks may help — I haven't found anything, but I may not be looking in the right place. Thank you, ~Celti

2 3

[arch-general] Packages Verified with MD5
by Taylor Hornby 14 Jan '14

14 Jan '14

I noticed that the TrueCrypt package is downloaded over an insecure FTP connection and then only verified using MD5 hashes. https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=… There are practical collision attacks against MD5. This means an adversary (e.g. the NSA) can construct two versions of the truecrypt binaries, one malicious and one not, which have the same MD5 hash. They can silently replace the file being downloaded with the malicious version and the change will not be detected. This should be fixed to use SHA256 hashes, like the Firefox package: https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=… How can I help make it use SHA256 instead of MD5? I'm relatively new to arch, so I'm not familiar with what it takes to change something in the repos. Any advice would be appreciated. Are there other packages still being verified with MD5? Can we fix them too? I'll gladly donate my time if it's not something that can be automated. Thanks, -- Taylor Hornby p.s. This might be better suited to arch-dev-public, but I think users should be informed of the vulnerability, so I decided on arch-general.

11 23

[arch-general] Empty resolv.conf after PXE boot
by Loper 14 Jan '14

14 Jan '14

Hello, I'm having problem with resolv.conf. After booting LiveCD (every version), sometimes it's empty. Problem occurs when using more than 1 interface and probably when one of them isn't connected. Mostly it takes place when I'm booting Arch under ESXi 5.5.0. After running 'dhcpcd' resolv.conf is filled and has correct data. Adding 'copy_resolvconf=y' to kernel params doesn't help. Also FYI: I'm using iPXE to boot this ISO. To reproduce this issue: 1. Boot ArchLinux ISO on any machine (ie. virtual) with 2 or more NIC's 2. Log in as root and cat /etc/resolv.conf - it will be empty or containing empty line 3. Try to ping any foreign domain, ie. google.com - it should fail 4. Run 'dhcpcd' and check if resolv.conf is filled correctly - fixed If it would work automatically, not by explicite calling 'dhcpcd or systemctl start dhcpcd@'. Any ideas? ------- Best regards, Loper

1 0