- Arch-general - lists.archlinux.org

[Secure Boot] sbctl and MOK
by Giovanni Santini 12 Dec '23

12 Dec '23

Hi everyone, I have my laptop set up using Grub [1] and Shim with hashes [2]. I use sbctl [3] for my key management. I would like to know if any other user is running the same setup and, if so, if they managed to enroll sbctl keys in shim. I am genuinely confused if I should enroll any file from sbctl, since it does not generate a MOK. Bests, Giovanni [1]: https://wiki.archlinux.org/title/GRUB#Shim-lock [2]: https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secu… [3]: https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secu…

1 0

extra/surge-xt-common 1.3.0-1 breaks extra/surge-xt-lv2 1.2.3-2
by Ralf Mardorf 12 Dec '23

12 Dec '23

Hi, I don't know where to report this issue, since 2FA for "ralf" at https://gitlab.archlinux.org/ fails with "Invalid authentication code" [1]. extra/surge-xt-common 1.3.0-1 breaks extra/surge-xt-lv2 1.2.3-2, see https://archlinux.org/packages/extra/x86_64/surge-xt-lv2/ https://archlinux.org/packages/extra/x86_64/surge-xt-common/ Regards, Ralf -- [1] yes, already reported to accountsupport(a)archlinux.org ;)

3 3

Proposal about AUR affairs
by Evan Greenup 12 Dec '23

12 Dec '23

Hello, AUR is a unique feature for Arch Linux (include derived distros). It significantly expand the Arch ecosystem. However, for the current infrastructure and workflow for AUR, there are some drawbacks. 1. Difficult to feedback and difficult to contribute (to already existed package). If have any ideas or report, user need to send email to maintainer via email personally. This is not convenient for both maintainers and users. 2. Lack of Peer review, audience supervise. Some packages even if updated frequently by its maintainer, but it doesn't following good practice and not built from source (Not Java, native program), It retrieve from Debian or Ubuntu or Fedora packages, and extract or repackage it in Arch Linux package. And some packages may failed to build, or some of its dependencies are forgotten added by maintainer. 3. The entry with a specific name in AUR is always occupied by the Maintainer who firstly register the package. If there is another maintainer who has better practice than the previous one, This maintainer has to rename his/her package as `xxx-bin` or some sophisticated name else. This is unfair. It lack of refreshing mechanism. 4. upstream software author is difficult to directly contribute to the AUR packaging contribution. For a great number of upstream software author, they are willing to participate in downstream redistribution process. Especially for those young software. But the current AUR workflow block their way to contribute on downstream stuff. 5. Currently,to evaluate whether a AUR package is eligible to move in Arch Linux official packages (extra repo), It only depend on votes and popularity and whether there is a maintainer willing to pick it up. However, those factors is too lack of details. To evaluate the robustness of the eco-position of a package, It should evaulate the discussion, issue report, contribution, and ... And it should be evaluated case by case. I have some ideas to resolve or mitigate the problems above. 1. Create a git repo on gitlab.archlinux.org named aur-meta (Or whatever names which maker users understand easily). This git repo keep a list (table of content) which point to the git repo URI of the AUR packages. 2. For the AUR package, it can be placed on anywhere (github.com, gitlab.com, gitlab.archlinux.org, gitlab.gnome.org ...), the only things needed are these URIs are public accessible (can be git cloned by anyone who know this URI). And it need to keep its PKGBUILD on the top level of git repo. 3. The issue and affairs related to which upstream software is included and which PKGBUILD git repo is selected, goes to issues section of aur-meta. For packaging specific problems, it goes to the AUR package git repo. 4. If a package is orphaned or too broken/bad practice, the contributor who has access to aur-meta can simply change the pointer to a alternative PKGBUILD git repo which is better in practice and liveliness. 5. If user find there is package which need to be improved, it can firstly report it to PKGBUILD maintainer via the issue section of git repo. If the maintainer long time not response or insist to keep bad practice. The user can write a proposal in aur-meta to change the pointer to another alternative. This is what a community driven packaging method should be. 6. The name of entry in aur-meta is the package name, not the name of PKGBUILD git repo. (git repo can have different name). Many upstream software author would create a separate git repo along with their software repo which is dedicated for PKGBUILD. The design above, is just for demonstrate ideas, improvements can be made further. Evan

15 27

Re: Arch Linux release 2023.12.01 comes with Linux Kernel 6.6.3
by Turritopsis Dohrnii Teo En Ming 11 Dec '23

11 Dec '23

On Saturday, December 9th, 2023 at 10:58 PM, Doug Newgard <dnewgard(a)outlook.com> wrote: > On Sat, 09 Dec 2023 14:51:37 +0000 > Turritopsis Dohrnii Teo En Ming teo.en.ming(a)protonmail.com wrote: > > > I am confused. > > > > On the Arch Linux download page https://archlinux.org/download/ , it clearly > > says Current Release 2023.12.01 with Linux Kernel 6.6.3. > > > Yes, that is the release of the ISO, not of Arch Linux. And it doesn't actually > matter what ISO you use. You could use the ISO from 2-3 months ago and the > installed system will be the same, because as I said, it always downloads the > latest packages to install. There are no packages on the ISO. Noted with thanks. I think I understand already. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore

2 1

Arch Linux release 2023.12.01 comes with Linux Kernel 6.6.3
by Turritopsis Dohrnii Teo En Ming 09 Dec '23

09 Dec '23

Subject: Arch Linux release 2023.12.01 comes with Linux Kernel 6.6.3 Good day from Singapore, After I have downloaded and installed Arch Linux release 2023.12.01, can I upgrade the Linux Kernel from 6.6.3 to 6.6.5 easily? Is the Linux Kernel 6.6.5 package available in the repository? Thank you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems. Sent with Proton Mail secure email.

4 7

Re: Arch Linux release 2023.12.01 comes with Linux Kernel 6.6.3
by Turritopsis Dohrnii Teo En Ming 09 Dec '23

09 Dec '23

On Saturday, December 9th, 2023 at 3:46 AM, Rafael Fontenelle <rffontenelle(a)gmail.com> wrote: > It is available in core-testing: > https://archlinux.org/packages/core-testing/x86_64/linux/ Thanks for the link! I saw linux 6.6.5.arch1-1 already. The latest Linux Kernel. I am going to install Arch Linux on my refurbished/2nd hand Aftershock gaming laptop these few days. Thank you! Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore

1 0

ddgr package broken
by Jude DaShiell 08 Dec '23

08 Dec '23

Originally this package worked. Now it's throwing error 202 on all searches. I suspect duckduckgo changed something or google changed something to break this package. Remote possibility some package on archlinux set the breakage off but I figure that to be highly unlikely. -- Jude <jdashiel at panix dot com> "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." Ed Howdershelt 1940.

1 0

Why are all wiki edits undone?
by David C. Rankin 08 Dec '23

08 Dec '23

Arch Devs, This has been a growing problem over the years. We no longer have a community wiki, we have a wiki that reverts user contribution and continues to deteriorate as a result. Attempting to contribute today to the postgresql page and all additions were undone again by user:Erus Iluvatar. Instead of providing concise information on how to initialize postgresql the wiki instead of providing the example of using the heretofore recommended sudo -iu postgres to reach the postgres prompt instead refers wiki readers to a non-specific web page for them to figure it out for themselves. ( https://wiki.archlinux.org/title/List_of_applications/Security#Privilege_el…) This is unhelpful. The simple example contributed: (example: sudo -iu postgres) was summarily removed. If Arch no longer wants community contributions to the wiki just make that a policy so we don't waste time anymore attempting to contribute. -- David C. Rankin, J.D.,P.E.

4 3

Why does fail2ban-client show no jails?
by David C. Rankin 04 Dec '23

04 Dec '23

All, I've configured fail2ban following the wiki, it is running, and I've enabled jails in /etc/fail2ban/jails.local, but fail2ban-client status shows no jails. The jails.local is: [DEFAULT] destemail = david(a)domain.tld sender = david(a)domain.tld # to ban & send an e-mail with whois report to the destemail. #action = %(action_mw)s # same as action_mw but also send relevant log lines action = %(action_mwl)s [DEFAULT] bantime = 2d [sshd] enable = true port = ssh,6661 [dovecot] enable = true [postfix] enable = true [smtpd] enable = true Running fail2ban-client status shows: # fail2ban-client status Status |- Number of jail: 0 `- Jail list: Reading other fail2ban configuration howtos, suggest I should be seeing the enabled jails. Is there something else I need to do on Arch? -- David C. Rankin, J.D.,P.E.

2 5

Re: makepkg
by Lone_Wolf 28 Nov '23

28 Nov '23

On 23-11-2023 17:44, Jude DaShiell wrote: > cc main.o buffers.o sendmail.o fetchmail.o html.o html-tags.o format.o > stringfile.o ebrc.o msg-strings.o http.o isup.o css.o startwindow.o > dbops.o dbodbc.o jseng-quick.o ../../quickjs/libquickjs.a -ldl -latomic > -s -lcurl -lodbc -lpcre2-8 -lreadline -lssl -lcrypto -lpthread -lm > -lssl -lcrypto -o edbrowse > /usr/bin/ld: cannot find ../../quickjs/libquickjs.a: No such file or > directory Two more changes are needed: A. edbrowse relies on *.a files (static librairies) to use quickjs . makepkg by default removes them since a few years ago. edit the quickjs PKGBUILD, increase pkgrel and change the options= line in it so it reads options=(!strip staticlibs) rebuild & reinstall quickjs B. the environment vars used by edbrowse make have been changed by upstream. replace QUICKJS_DIR="/usr/lib/quickjs/" make with QUICKJS_INCLUDE="/usr/include/quickjs" QUICKJS_LIB="/usr/lib/quickjs/" make The package builds for me that way, but I haven't ran the software. Lone_Wolf

3 12