- Arch-general - lists.archlinux.org

Packaging wireguard re-resolve DNS
by LuKaRo 06 Aug '23

06 Aug '23

Hi everyone, wireguard users need to manually re-resolve the DNS when using endpoints with changing IPs. The wiki page lists an example solution using a systemd timer[0]. I like that solution a lot and use it heavily on multiple machines, and as I prefer to have system files managed by pacman instead of manually creating them, I created an AUR package for that. Today I set up another machine using that package, and I thought, why not push the package to the public, so others can use it as well. Of course, you can as well just copy-paste the example on the wiki page, but I guess there are more people out there who prefer having system files managed by pacman instead of manually creating them. Its easier, after all. However, less than an hour after pushing my package to the AUR and mentioning it in the wiki, the change was reverted and a deletion request was filed with the comment > useless package which literally just copy-pastes the units from the wiki Yes, that's right, it doesn't need to do more than that, because the example on the wiki works great, no need to change that. However, I still think it adheres to the AUR submission guidelines, as I can imagine I'm not the only one who prefers installing an AUR package over copying file contents from the wiki. What do you think? Is this really a useless package? Then go ahead, delete it. But I'm not sure if that's the prevalent opinion, or if there are others like me that like seeing things like that on the AUR, that make your life easier. So at least I wanted to raise the discussion. Would love to hear your input, lukaro [0]: https://wiki.archlinux.org/title/WireGuard#Endpoint_with_changing_IP

5 4

systemd 254 - How will we disable soft-reboot?
by David C. Rankin 04 Aug '23

04 Aug '23

Arch devs, I read that systemd 254 will enable a soft-reboot similar to how windows does fast-boot does it. (The Register: https://go.reg.cx/tdml/dfd67/64f3cc7f/8aaa3ef6/49jh) Mentioned in the article is this soft-reboot will prevent a full reboot - preventing kernel updates in that mode. But the article is silent, and indeed hints at the open question of if or how this will be disabled to allow kernel updates, dual-booting, etc.. Personally, just like on windows, I want to permanently disable it. I don't know if that has been settled yet on Arch, but wanted to know whether we will have the ability to just disable the systemd soft-boot. I have a 12 second cold-start to full desktop -- I have no need for a soft-reboot that will cause issues with dual-booting and kernel updates. Anybody know if, and how we will be able to do it? -- David C. Rankin, J.D.,P.E.

8 10

Boot secure
by Source Code 25 Jul '23

25 Jul '23

Hi everyone! I just wanna say some questions: 1. I can not find anywhere about why Arch Linux developers do not make secure for Arch Linux. Why? And will secure be in Arch Linux in the future? 2. I read the https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secu… and now I don’t see information about ship. Why?

4 4

Re: What laptop's do you guys like?
by Susanne Schneider 25 Jul '23

25 Jul '23

hi, I'm one of those guys sticking to old Thinkpads, I have 2 of them, a W520 and a T520, both quadcore with 16Gb ram, one is established as musicmachine (I'm a hobbymusician), the other is my all-day-machine, which already has done VERY heavy video encoding for many many hours now, and still running flawlessly... I love those machines mainly for two reasons: firstly I'm able to open them, mainly for cleaning purposes, fan, replacing heat transfer paste, furthermore it's easy to replace the battery, and secondly: they provide firewire access! I have two Focusrite Saffire 10 Pro soundcards, also working like a charm, and I would be very upset losing the possibility to use them. Both are equipped with Nvidia Optimus technology, thanks to lovely people providing the necessary software on AUR both are running without any constraints, just like entire Archlinux does, best -s Am 23.07.23 um 00:30 schrieb arch-general-request(a)lists.archlinux.org: > Send Arch-general mailing list submissions to > arch-general(a)lists.archlinux.org > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > arch-general-request(a)lists.archlinux.org > > You can reach the person managing the list at > arch-general-owner(a)lists.archlinux.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Arch-general digest..." > > Today's Topics: > > 1. Re: SSH Error in libcrypto (Wesley Kerfoot) > 2. What laptop's do you guys like? (Polarian) > 3. Re: What laptop's do you guys like? (Eric Waller) > 4. Re: What laptop's do you guys like? (Polarian) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 22 Jul 2023 10:26:51 -0400 > From: Wesley Kerfoot <wjak56(a)gmail.com> > Subject: Re: SSH Error in libcrypto > To: Silvio Siefke <siefke_listen(a)web.de> > Cc: Martin Rys <spleefer90(a)gmail.com>, > arch-general(a)lists.archlinux.org > Message-ID: > <CAM=4j-7XppSbsTsT8QPPL0Y5Hf1EFSM8hEORn_A5OUt5FBe7JQ(a)mail.gmail.com> > Content-Type: multipart/alternative; > boundary="000000000000a5aeed0601142c11" > > You should check that your hard drive isn't failing before reinstalling > everything. That sounds like a symptom of a bad disk if multiple files are > empty that shouldn't be. > > On Sat, Jul 22, 2023, 9:41 AM Silvio Siefke <siefke_listen(a)web.de> wrote: > >> >> Am 22.07.23 um 15:23 schrieb Martin Rys: >>> What's the output of `file ~/.ssh/siefke_key; ls -lah ~/.ssh/siefke_key`? >>> >> All 0 byte files. Much 0 byte files. I not understand what happen here >> but I think I need to reinstall Arch Linux. >> >> Silvio >> >

1 0

Can I "vote" for updating an outdated package?
by Carl Lei 24 Jul '23

24 Jul '23

Hi there, My actual problem is that strongswan 5.9.10 has a bug [1] that affects interoperability with Apple iOS client. Upstream has a fix [2] for it which should be available in 5.9.11, but our package is flagged out-of-date on 12 June, over a month ago; well this is not a terribly long time, but since such cases do not qualify as bugs, I don't know if things are going well. Is there some kind of "voting" system that I can click to inform our TUs, to help prioritize updating packages in such cases? [1] https://github.com/strongswan/strongswan/discussions/1613 [2] https://github.com/strongswan/strongswan/commit/3d0d3f5d028a0c630f89cb4fec5…

2 4

Fw: ANN: arch-log: a tool for quickly checking package commit logs for Arch & AUR
by Matthew Sexton 22 Jul '23

22 Jul '23

Forwarded to list because my client did a dumb. ________________________________ From: Matthew Sexton <matthew(a)asylumtech.com> Sent: Sunday, July 16, 2023 7:45 PM To: René Neumann <lists(a)necoro.eu> Subject: Re: ANN: arch-log: a tool for quickly checking package commit logs for Arch & AUR Hello! I actually found this quite nifty and appreciate you creating it. I have no idea how often I'll actually use it, but your aur package has my vote. I can't seem to finish any of my pet projects. Go you! ________________________________ From: René Neumann <lists(a)necoro.eu> Sent: Sunday, July 16, 2023 2:49 PM To: arch-general(a)lists.archlinux.org <arch-general(a)lists.archlinux.org> Subject: Re: ANN: arch-log: a tool for quickly checking package commit logs for Arch & AUR Ah, I forgot the fourth point: I had fun writing it. Don't forget that the "I had an idea for a fun toy project" is what starts/drives most of our OSS ecosystem, including the start of Linux itself :) - René Am 16.07.23 um 20:41 schrieb René Neumann: > Am 16.07.23 um 18:14 schrieb Polarian: >> You can simply use git clone to clone the repository from the dumb >> http frontend, and then use git log to show the logs, I do not see why >> this needs to be wrapped with a script as it is already a simple >> process to do. > > First: I'd need the repo URL for cloning (mind that this is different > between AUR repos and Arch repos). So I'd need a script to automate it¹ > > Second: I don't want to have all the repos lying around, when all I need > is to see the log. > > Third: Nobody is forcing you to use the tool. I needed it for myself and > wanted to share it, in case anyone else fancies it. > > - René > > ¹ NB: I have such a script already, for when I actually intend to clone > a repo.

3 2

SSH Error in libcrypto
by Silvio Siefke 22 Jul '23

22 Jul '23

Hello, I try to connect remote maschines over SSH but with all servers I become message: Load key ".ssh/siefke_key": error in libcrypto siefke(a)192.168.2.250: Permission denied (publickey,gssapi-keyex,gssapi-with-mic). With -vvv OpenSSH_9.3p2, OpenSSL 3.1.1 30 May 2023 debug2: resolve_canonicalize: hostname 192.168.2.250 is address debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/home/siefke/.ssh/known_hosts' debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/home/siefke/.ssh/known_hosts2' debug3: ssh_connect_direct: entering debug1: Connecting to 192.168.2.250 [192.168.2.250] port 12500. debug3: set_sock_tos: set socket 3 IP_TOS 0x48 debug1: Connection established. debug1: identity file .ssh/siefke_key type -1 debug1: identity file .ssh/siefke_key-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.3 debug1: Remote protocol version 2.0, remote software version OpenSSH_8.4p1 Debian-5+deb11u1 debug1: compat_banner: match: OpenSSH_8.4p1 Debian-5+deb11u1 pat OpenSSH* compat 0x04000000 debug2: fd 3 setting O_NONBLOCK debug1: Authenticating to 192.168.2.250:12500 as 'siefke' debug3: put_host_port: [192.168.2.250]:12500 debug3: record_hostkey: found key type ED25519 in file /home/siefke/.ssh/known_hosts:1 debug3: load_hostkeys_file: loaded 1 keys from [192.168.2.250]:12500 debug1: load_hostkeys: fopen /home/siefke/.ssh/known_hosts2: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug3: order_hostkeyalgs: have matching best-preference key type ssh-ed25519-cert-v01(a)openssh.com, using HostkeyAlgorithms verbatim debug3: send packet: type 20 debug1: SSH2_MSG_KEXINIT sent debug3: receive packet: type 20 debug1: SSH2_MSG_KEXINIT received debug2: local client KEXINIT proposal debug2: KEX algorithms: sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: compression ctos: none,zlib(a)openssh.com,zlib debug2: compression stoc: none,zlib(a)openssh.com,zlib debug2: languages ctos: debug2: languages stoc: debug2: first_kex_follows 0 debug2: reserved 0 debug2: peer server KEXINIT proposal debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: compression ctos: none debug2: compression stoc: none debug2: languages ctos: debug2: languages stoc: debug2: first_kex_follows 0 debug2: reserved 0 debug1: kex: algorithm: curve25519-sha256 debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305(a)openssh.com MAC: <implicit> compression: none debug1: kex: client->server cipher: chacha20-poly1305(a)openssh.com MAC: <implicit> compression: none debug3: send packet: type 30 debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug3: receive packet: type 31 debug1: SSH2_MSG_KEX_ECDH_REPLY received debug1: Server host key: ssh-ed25519 SHA256:2L6kf42fJXVTes8cWAEHSSXeXVG/bvO1FjBO6kNOUPg debug3: put_host_port: [192.168.2.250]:12500 debug3: put_host_port: [192.168.2.250]:12500 debug3: record_hostkey: found key type ED25519 in file /home/siefke/.ssh/known_hosts:1 debug3: load_hostkeys_file: loaded 1 keys from [192.168.2.250]:12500 debug1: load_hostkeys: fopen /home/siefke/.ssh/known_hosts2: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: Host '[192.168.2.250]:12500' is known and matches the ED25519 host key. debug1: Found key in /home/siefke/.ssh/known_hosts:1 debug3: send packet: type 21 debug2: ssh_set_newkeys: mode 1 debug1: rekey out after 134217728 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug3: receive packet: type 21 debug1: SSH2_MSG_NEWKEYS received debug2: ssh_set_newkeys: mode 0 debug1: rekey in after 134217728 blocks debug3: ssh_get_authentication_socket_path: path '/run/user/1500/keyring/ssh' debug1: get_agent_identities: bound agent to hostkey debug1: get_agent_identities: ssh_fetch_identitylist: agent contains no identities debug1: Will attempt key: .ssh/siefke_key explicit debug2: pubkey_prepare: done debug3: send packet: type 5 debug3: receive packet: type 7 debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,sk-ssh-ed25519@openssh.com,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,webauthn-sk-ecdsa-sha2-nistp256@openssh.com> debug3: receive packet: type 6 debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug3: send packet: type 50 debug3: receive packet: type 51 debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic debug3: start over, passed a different list publickey,gssapi-keyex,gssapi-with-mic debug3: preferred publickey,keyboard-interactive,password debug3: authmethod_lookup publickey debug3: remaining preferred: keyboard-interactive,password debug3: authmethod_is_enabled publickey debug1: Next authentication method: publickey debug1: Trying private key: .ssh/siefke_key Load key ".ssh/siefke_key": error in libcrypto debug2: we did not send a packet, disable method debug1: No more authentication methods to try. siefke(a)192.168.2.250: Permission denied (publickey,gssapi-keyex,gssapi-with-mic). With mac it works, with pi in other way it works. I not understand what happen here. Thank you for help Silvio

3 3

Arch Linux installing.
by Source Code 19 Jul '23

19 Jul '23

Sorry, but I just wanna ask something, it looks like stupid question but I need to get an answer. Here, I have to point the sda2 with EFI, right? Not sd7, which will be empty for the new Arch LInux? I just wanna not make mistakes:) *Device Start End Sectors Size Type* /dev/sda1 2048 616447 614400 300M Windows recovery environment /dev/sda2 616448 821247 204800 100M EFI System /dev/sda3 821248 1083391 262144 128M Microsoft reserved /dev/sda4 1083392 362373119 361289728 172,3G Microsoft basic data /dev/sda5 362373120 812933119 450560000 214,8G Microsoft basic data /dev/sda6 812933120 836370431 23437312 11,2G Linux swap /dev/sda7 836370432 976771071 140400640 66,9G Linux filesystem

5 8

Re: Arch linux installing process
by Ralf Mardorf 18 Jul '23

18 Jul '23

On Tue, 2023-07-18 at 22:57 +0600, Source Code wrote: > But I use EFI and I don’t understand what I should write where … > [snip] > Arch wiki does not tell me this secret. Hi, please reply to the mailing list! I'm sorry, I don't understand your problem. I'm _not_ using legacy BIOS boot, my Intel's GPU doesn't allow this. Grub2 handles all the EFI things for me. I only added the path to the installed microcode to grub.cfg's initrd line. initrd /boot/intel-ucode.img /boot/initramfs-linux.img I can't comment on secure boot, since this is disabled on my machine. You cannot use one of the ways described by https://wiki.archlinux.org/title/microcode#Loading_microcode ? "1Loading microcode 1.1Microcode built in the initramfs 1.2Early loading 1.2.1Unified kernel images 1.2.2Initrd images 1.2.2.1Enabling early microcode loading in custom kernels 1.2.2.2GRUB 1.2.2.3systemd-boot 1.2.2.4EFISTUB 1.2.2.5rEFInd 1.2.2.5.1Manual boot stanzas 1.2.2.6Syslinux 1.2.2.7LILO 1.2.2.8Limine" Have you tested anything from this? Regards, Ralf

1 0

Re: Arch linux installing process
by Ralf Mardorf 18 Jul '23

18 Jul '23

On Tue, 2023-07-18 at 20:17 +0600, Source Code wrote: > Now I use cfdisk and I saw type of sda: Linux swap, > linux root x86-64 and Linux file system. And I wanna > know the difference between linux root x86-64 and Linux > file system. > Now I think to leave just Linux swap and Linux root x86-64. Hi, please reply to the mailing list. This is again quasi the same I already wrote before: https://wiki.archlinux.org/title/partitioning#UEFI/GPT_layout_example You need a "/boot or /efi" partition. You should use a "Linux swap" and you need a "Linux x86-64 root (/)". This root directory can use different file systems, such as ext4, but maybe you want a copy on write file system. https://wiki.archlinux.org/title/file_systems I'm sorry, but I don't know how to use cfdisk. If you don't want to use command line, I recommend to use a live media providing GParted. This isn't what I'm using: https://gparted.org/liveusb.php I'm using an USB stick with https://www.ventoy.net/en/index.html . If I need GParted on a live media, I just run e.g. a persistent Xubuntu or any other ISO copied to the Ventoy USB stick. Regards, Ralf

3 4