[arch-dev-public] A contrib repository

Morten Linderud foxboron at archlinux.org
Wed Sep 11 21:10:58 UTC 2019


On Wed, Mar 27, 2019 at 11:14:17PM +0100, Morten Linderud via arch-dev-public wrote:
> Going to try figure out the packaging bit through the weekend.

And one long weekend later and we have "archlinux-contrib" in [community]!

There are currently a few scripts available.

- checkservices
    Originally writen by seblu, and commited to contrib by Giancarlo, it checks
    which services needs to be restarted after packages have been updated.

- co-maintainers
    It queries archweb and helps you figure out which of your packages has how
    many co-maintainers. It's useful in the case where you are going on vacation
    and want to produce a list of packages which currently only has you as the
    maintainer.

- review 
    Helps you download PKGBUILDs from an AUR maintainer. This is useful if you
    want to review TU candidates.

- compose-asa
    Aids security team members composing the advisory email locally.

- security-tracker-check
    Checks stdin for CVEs and cross-checks with our security tracker if they
    have been added or not. Useful if you are looking over oss-security emails
    :)

svenstaro also wrote a `offline-build` tool that went into contrib. Eli polished
it and moved it to devtools after some work. Jelle also has a pull-request
working on "repo-sec-checker" checks if there are binaries in a package/repo
which does not have the appropriate security hardening applied.

It should be noted that all of this is currently being packaged to
`/usr/share/archlinux/contrib` as it seems like an better idea to not clutter
peoples paths with misc tools.

I'll be super happy if people contribute other misc scripts, and everyone that
wishes will be added to the github org and can handle pull-requests.

-- 
Morten Linderud
PGP: 9C02FF419FECBE16
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.archlinux.org/pipermail/arch-dev-public/attachments/20190911/53987d44/attachment.sig>


More information about the arch-dev-public mailing list