Re: [arch-dev-public] Linux 3.14 in [testing]

2014-04-01 Thread Thomas Bächler
Am 02.04.2014 00:20, schrieb Thomas Bächler:
> It may be another short while until I run db-update, but I started
> pushing the 3.14 stuff to [testing].

Okay, pushed everything to [testing] and [community-testing].

The community/rt3562sta did not build. I am not interested in fixing
this crap, so either its maintainer takes care of it shortly, or I'll
drop it when I move this out of testing.




signature.asc
Description: OpenPGP digital signature


[arch-dev-public] Linux 3.14 in [testing]

2014-04-01 Thread Thomas Bächler
It may be another short while until I run db-update, but I started
pushing the 3.14 stuff to [testing]. This release brings some changes to
the configuration.

* Disabled LSMs

There was a long discussion about it, but in the end there were some
concerns and I do not see the point in supporting a feature in the
kernel that we do not provide userspace support for.

I also disabled audit, since it is enabled by default and there is no
kernel switch to change that. I hate that it annoys users who don't use
it - and we don't support it in our base system either (our systemd has
no audit support, just as it has no SMACK or SELinux support).

I kept YAMA, since it's not actually a real LSM, but only provides the
very useful ptrace scope protection - which can be disabled easily if so
desired.

* Disabled x32

I disabled the x32 support - we are not providing any x32 userspace and
there is no point for Arch in doing so. Given that the x32 syscalls
already had one major security flaw, I don't see why this should be enabled.

* Disabled userspace firmware helper support

The fallback firmware helper is now disabled. This forced me to disable
the "Dell BIOS uprgade via sysfs" support, but as far as I can see, that
was broken anyway and nobody used it.

* Made some drivers modular

Some more drivers that were built-in are now modules. Nothing exciting,
just random stuff.

* Enabled infiniband modules

I added the (modular) support for infiniband, as it was requested in a
bug report and it's only modules.

* Changed some kernel hacking options (not a lot)

I changed some things in the kernel hacking section, but can't remember
exactly what. I did not have the time to research why option XYZ was
needed or not, so I didn't feel like switching things around a lot.

* Removed some differences between 32 and 64 bit config

Some drivers were enabled in 32 and disabled in 64, or vice versa. I
think I fixed all those.

* Removed criu patch

I removed the patch that allows CONFIG_CHECKPOINT_RESTORE without
CONFIG_EXPERT. If this option is supposed to be used by end users, then
it should not be labelled CONFIG_EXPERT. As long as it is, I will assume
it is something evil.

* Added the 'simple' framebuffer driver

This driver tries to take over the firmware's framebuffer instead of
enabling the kernel's own generic vesa, uvesa of efi framebuffer. The
non-generic drivers obviously still take precedence and will disable
simplefb.

=

We still apply the following patches:

* Change default log level from 7 to 4

Merging our patch to make that configurable upstream somehow lead to
nothing, since nobody cared.

* Bluetooth: allocate static minor for vhci

It's not yet in 3.14, but I won't have those stupid bug reports
complaining about a harmless message anymore. I'm keeping this patch
until 3.15 is here.

* module: allow multiple calls to MODULE_DEVICE_TABLE() per module
* module: remove MODULE_GENERIC_TABLE

Fixes to module alias setup needed for the i8042 controller aliases to
work right. This is needed since i8042 is now modular, but upstream is slow.

* Revert "syscalls.h: use gcc alias instead of assembler

i686 won't work without it. Still waiting for anything from upstream.
Got a messsage from the patch author to resend my original message, but
no reaction again since then. See https://lkml.org/lkml/2014/1/26/22 for
details.

=

Bugs I've seen so far:

* The cirrus kms driver for qemu fails when booted with OVMF firmware.
Works with the standard qemu BIOS. No idea what's going on here.



signature.asc
Description: OpenPGP digital signature


Re: [arch-dev-public] Drop cronie and logrotate from base?

2014-04-01 Thread Daniel Micay
On 01/04/14 03:30 PM, Andrea Scarpino wrote:
> On Tue 01, April 20:48:16 Florian Pritz wrote:
>> Moving to extra sounds good.
> 
> +1
> 
>> Move it to extra and make it a dep of everything that logs to /var/log
>> by default, optdep for stuff that can be configured to log there. (both
>> assume that the package actually has a logrotate config ofc)
> 
> Is not needed for packages that log to /var/log (e.g. pacman), but for 
> packages that install a logrotate.d script (42 at the moment). I'm not sure 
> if 
> this should be a dep or optdep though.

I think many of these support using syslog instead of writing their own
log file, which might be a better default for at least some of them.
Querying logs in the journal is a joy compared to dealing with custom
format dates and so on in an application-specific log file.



signature.asc
Description: OpenPGP digital signature


Re: [arch-dev-public] Drop cronie and logrotate from base?

2014-04-01 Thread Tom Gundersen
On Tue, Apr 1, 2014 at 9:30 PM, Andrea Scarpino  wrote:
> On Tue 01, April 20:48:16 Florian Pritz wrote:
>> Moving to extra sounds good.
>
> +1

As Gaetan already agreed: +1 from me too.

>> Move it to extra and make it a dep of everything that logs to /var/log
>> by default, optdep for stuff that can be configured to log there. (both
>> assume that the package actually has a logrotate config ofc)
>
> Is not needed for packages that log to /var/log (e.g. pacman), but for
> packages that install a logrotate.d script (42 at the moment).

Yup, this seems good

> I'm not sure if
> this should be a dep or optdep though.

If logging to /var/log is not configurable I'd make it a dep, if it is
I'd make it an optdep...

-t


Re: [arch-dev-public] Drop cronie and logrotate from base?

2014-04-01 Thread Gaetan Bisson
[2014-04-01 20:15:55 +0200] Thomas Bächler:
> * cronie
> 
> Nothing in our default installation uses it anymore and it was disabled
> by default since we switched to systemd. Only a small percentage of our
> users actually use crontabs actively, and for those, pacman -S cronie &&
> systemctl enable cronie is not too much of a hassle.

Sounds good. I'll keep maintaining it for a while.

> * logrotate
> 
> In a default installation, it rotates nothing. It could be added as an
> optdepend to those packages that provide logrotate.d files so people are
> aware that they should install it.

Sounds good to me.

-- 
Gaetan


pgpLHz38iFdp8.pgp
Description: PGP signature


Re: [arch-dev-public] Drop cronie and logrotate from base?

2014-04-01 Thread Andrea Scarpino
On Tue 01, April 20:48:16 Florian Pritz wrote:
> Moving to extra sounds good.

+1

> Move it to extra and make it a dep of everything that logs to /var/log
> by default, optdep for stuff that can be configured to log there. (both
> assume that the package actually has a logrotate config ofc)

Is not needed for packages that log to /var/log (e.g. pacman), but for 
packages that install a logrotate.d script (42 at the moment). I'm not sure if 
this should be a dep or optdep though.

-- 
Andrea
Arch Linux Developer


Re: [arch-dev-public] Drop cronie and logrotate from base?

2014-04-01 Thread Florian Pritz
On 01.04.2014 20:15, Thomas Bächler wrote:
> The other day, Daniel Micary suggested dropping these packages from base
> (potentially even moving them to extra).
> 
> * cronie

Moving to extra sounds good.

> * logrotate

Move it to extra and make it a dep of everything that logs to /var/log
by default, optdep for stuff that can be configured to log there. (both
assume that the package actually has a logrotate config ofc)



signature.asc
Description: OpenPGP digital signature


[arch-dev-public] Drop cronie and logrotate from base?

2014-04-01 Thread Thomas Bächler
The other day, Daniel Micary suggested dropping these packages from base
(potentially even moving them to extra).

* cronie

Nothing in our default installation uses it anymore and it was disabled
by default since we switched to systemd. Only a small percentage of our
users actually use crontabs actively, and for those, pacman -S cronie &&
systemctl enable cronie is not too much of a hassle.

* logrotate

In a default installation, it rotates nothing. It could be added as an
optdepend to those packages that provide logrotate.d files so people are
aware that they should install it.

Opinions?



signature.asc
Description: OpenPGP digital signature


Re: [arch-dev-public] Use systemd timers instead of /etc/cron.{hourly, daily, weekly, monthly}?

2014-04-01 Thread Thomas Bächler
Am 29.03.2014 08:52, schrieb Thomas Bächler:
> Am 28.03.2014 22:26, schrieb Thomas Bächler:
>> Am 28.03.2014 01:01, schrieb Thomas Bächler:
>>> core/logrotate 3.8.7-1  /etc/cron.daily/logrotate
>>> core/man-db 2.6.6-1 /etc/cron.daily/man-db
>>> core/mlocate 0.26-1 /etc/cron.daily/updatedb
>>> core/shadow 4.1.5.1-7   /etc/cron.daily/shadow
>>> extra/pkgstats 2.3-3/etc/cron.weekly/pkgstats
>>
>> After the overall positive response, I converted these. Since none of my
>> machines used any cron jobs, I uninstalled cronie from them.
> 
> I am not sure how this interacts with suspend. My laptop was suspended
> at midnight, and on resume two of my timers fired, but 3 didn't. Maybe
> this is because interaction with suspend is broken, mabe because of
> AccuracySec set to 12h. I need to investigate this issue further.

*shrugs* Seems to work just fine now. All timers fired when I resumed at
work today.




signature.asc
Description: OpenPGP digital signature


Re: [arch-dev-public] Kingsoft Office License

2014-04-01 Thread Lukas Jirkovsky
On Mon, Mar 31, 2014 at 6:01 AM, Felix Yan  wrote:
>
> Hi,
>
> I've got an updated license from Kingsoft, most of the problems should have
> been addressed (except for the PRC export laws problem, which doesn't seem to
> be avoidable, but should not be a problem if I read the laws correctly...)
>
> I've updated the package in AUR to use their general-purpose tarball (.tar.xz
> file). And as for libpng12, they would provide it into the tarball if we were
> going to rip it out from [community] and [multilib], so the package is always
> self-contained and won't introduce any new dependency.
>
> Link to the updated version: https://paste.xinu.at/cDX/
>
> Disclaimer: I'm not working for Kingsoft in any form, or getting anything from
> them as return for the inclusion. The idea to add the office suite to our
> repos was suggested by someone else, and I like the idea because it fills in
> the blank for good MSO compatibility and good Chinese support.
>
> For reference only: 
> http://www.techrepublic.com/blog/10-things/10-reasons-why-kingsoft-office-is-better-than-the-competition/
> (I don't mean that LibreOffice is bad, both the two tools can have their job
> done nicely. I don't want to start a war =P)
>
> At the end, I'll respect your decision if you still think this idea not
> acceptable. I'm sorry for taking up so much time of yours.
>
> Regards,
> Felix Yan

It looks quite OK to me, so I'm supporting this. They have quite good
support for the proprietary formats. Bonus points for that they are
willing to communicate and fix the problems, which isn't that common
with proprietary software.


[arch-dev-public] Signoff report for [testing]

2014-04-01 Thread Arch Website Notification
=== Signoff report for [testing] ===
https://www.archlinux.org/packages/signoffs/

There are currently:
* 9 new packages in last 24 hours
* 0 known bad packages
* 0 packages not accepting signoffs
* 6 fully signed off packages
* 27 packages missing signoffs
* 0 packages older than 14 days

(Note: the word 'package' as used here refers to packages as grouped by
pkgbase, architecture, and repository; e.g., one PKGBUILD produces one
package per architecture, even if it is a split package.)


== New packages in [testing] in last 24 hours (9 total) ==

* gummiboot-44-1 (i686)
* linux-lts-3.10.35-1 (i686)
* gummiboot-44-1 (x86_64)
* linux-lts-3.10.35-1 (x86_64)
* python-setuptools-3.4.1-1 (any)
* fftw-3.3.4-1 (i686)
* refind-efi-0.7.8-1 (i686)
* fftw-3.3.4-1 (x86_64)
* refind-efi-0.7.8-1 (x86_64)


== Incomplete signoffs for [core] (11 total) ==

* ca-certificates-20140325-1 (any)
0/2 signoffs
* groff-1.22.2-6 (i686)
0/1 signoffs
* gummiboot-44-1 (i686)
0/1 signoffs
* linux-lts-3.10.35-1 (i686)
0/1 signoffs
* logrotate-3.8.7-2 (i686)
0/1 signoffs
* man-db-2.6.6-2 (i686)
0/1 signoffs
* mlocate-0.26-2 (i686)
0/1 signoffs
* shadow-4.1.5.1-8 (i686)
0/1 signoffs
* groff-1.22.2-6 (x86_64)
0/2 signoffs
* gummiboot-44-1 (x86_64)
0/2 signoffs
* linux-lts-3.10.35-1 (x86_64)
0/2 signoffs

== Incomplete signoffs for [extra] (16 total) ==

* pkgstats-2.3-4 (any)
0/2 signoffs
* python-setuptools-3.4.1-1 (any)
0/2 signoffs
* apr-util-1.5.3-4 (i686)
0/1 signoffs
* fftw-3.3.4-1 (i686)
0/1 signoffs
* ghostscript-9.14-1 (i686)
0/1 signoffs
* giflib-5.0.6-1 (i686)
0/1 signoffs
* glpk-4.54-1 (i686)
0/1 signoffs
* octave-3.8.1-1 (i686)
0/1 signoffs
* refind-efi-0.7.8-1 (i686)
0/1 signoffs
* apr-util-1.5.3-4 (x86_64)
0/2 signoffs
* fftw-3.3.4-1 (x86_64)
0/2 signoffs
* ghostscript-9.14-1 (x86_64)
0/2 signoffs
* giflib-5.0.6-1 (x86_64)
0/2 signoffs
* glpk-4.54-1 (x86_64)
0/2 signoffs
* octave-3.8.1-1 (x86_64)
0/2 signoffs
* refind-efi-0.7.8-1 (x86_64)
0/2 signoffs


== Completed signoffs (6 total) ==

* file-5.18-1 (i686)
* file-5.18-1 (x86_64)
* logrotate-3.8.7-2 (x86_64)
* man-db-2.6.6-2 (x86_64)
* mlocate-0.26-2 (x86_64)
* shadow-4.1.5.1-8 (x86_64)


== Top five in signoffs in last 24 hours ==