On Sat, Dec 31, 2022 at 9:36 PM Allan McRae <[email protected]> wrote:
>
> Happy new year!
>
> I have updated the project descriptions in gitlab and flyspray to
> reflect where bugs should be opened and patches should be submitted.
> ...
> > Some time ago it was decided to migrate the pacman development from the 
> > Mailing
> > List to the Gitlab instance hosted by Arch Linux. The pacman source has 
> > been ...
> >
> > https://gitlab.archlinux.org/pacman/pacman/
> ...
It seems that submitting or commenting on an issue requires an
accounts.archlinux.org sso login, which in turn requires two-factor
authentication.  Seems like a high bar for just submitting or commenting on a

bug.  Accepting submissions from arbitrary unverified emails is a bit lax, but
this seems a bit far in the other direction.  In any case, it should probably be
explained somewhere for folks who aren't active pacman developers.

I'm not sure if there might be a way to make this easier. Perhaps there could
be accounts without tfa that would not have access to various more critical
operations?  Perhaps a forums.archlinux.org account with a verified email
could be used?

On the plus side, even though the sso page you wind up at says that you must
install an authenticator application on a mobile device, that isn't really the
case.  It seems that you can use any android device such as a tablet or a
chromebook.  Or, you can use oauthtool from the linux command line, and avoid
the need for a separate device.

-Jeff

Reply via email to