Re: [arch-general] Telinit?

2020-08-16 Thread Christian Hesse
David Rosenstrauch  on Sun, 2020/08/16 14:59:
> On 2020-08-15 2:53 pm, David Rosenstrauch wrote:
> > Anyone know what happened to the "telinit" shortcut?  It used to be
> > included in systemd-sysvcompat
> > (https://wiki.archlinux.org/index.php/Systemd#systemd-sysvcompat) but
> > seems like it recently got removed.  Was it removed upstream?  (And if
> > so, anyone know why?)  
> 
> I looked into this a bit more, and it looks like this was not an 
> upstream change.  Rather, it was removed in Arch in this commit: 
> https://github.com/archlinux/svntogit-packages/commit/9ca7c019fe8f59505cf1f6dc4163e146f3e777a7#diff-8d0411b338c83cd8cd8ad9d9db127101
> 
> @eworm:   Any explanation as to why this was removed?

Upstream does no longer install it by default.

https://github.com/systemd/systemd/commit/6589a56972d9afe9d860889f11cb9c8e6cb8a60c

Do we still need it?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpJh1Bu82Vmh.pgp
Description: OpenPGP digital signature


Re: [arch-general] R: Eduroam madness with iwd

2020-01-23 Thread Christian Hesse
Riccardo Paolo Bestetti via arch-general  on Thu,
2020/01/23 08:37:
> I'm going to have another chance at testing this on Monday. What else could
> I try?

Possibly missing something like this?

EAP-Identity=anonym...@unipmn.it
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpzPgweC4TCt.pgp
Description: OpenPGP digital signature


Re: [arch-general] Eduroam madness with iwd

2020-01-22 Thread Christian Hesse
Riccardo Paolo Bestetti via arch-general  on Wed,
2020/01/22 11:45:
> And the following error in the system journal:
> failed to load /home/random/.cat_installer/ca.pem

The certificate can not be loaded as iwd.service has ProtectHome=yes set.
Move it to a location where iwd can read it.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpVB2VSg30tV.pgp
Description: OpenPGP digital signature


Re: [arch-general] Many timers now running at boot. How to make them run later?

2019-11-21 Thread Christian Hesse
"David C. Rankin"  on Thu, 2019/11/21 12:13:
> I wonder why systemd doesn't do this by default?

It's not systemd to blame. The timer unit files are shipped by the respective
projects, like util-linux, man-db, mlocate, shadow, logrotate, ...
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpGKlV36T7RC.pgp
Description: OpenPGP digital signature


Re: [arch-general] Many timers now running at boot. How to make them run later?

2019-11-21 Thread Christian Hesse
"David C. Rankin"  on Thu, 2019/11/21 04:08:
> [...]
>
>   What is the best way to modify this scheme to prevent, e.g.
> logrotate.time, man-db.timer and shadow.timer all trying to run on boot?
> I'd rather set them up to run a 5:00 localtime as I would with cronnie. But
> I do want to use the systemd timer, so what is the best way to configure
> the systemd timer to schedule these things to run at a convenient time
> instead of all firing on boot?

I've created systemd configuration overlay snippets for this, for example
/etc/systemd/system/man-db.timer.d/RandomizedDelaySec.conf:

[Timer]
RandomizedDelaySec=30min

Create a file for every timer you want to delay.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpPckiK7pIMN.pgp
Description: OpenPGP digital signature


Re: [arch-general] New kernel packages and mkinitcpio hooks? What does this mean to the average user?

2019-11-11 Thread Christian Hesse
"David C. Rankin"  on Mon, 2019/11/11 04:50:
> The only changes I see in the mkinitcpio.pacnew file
> is that all double-quotes have been replaced by parenthesis, e.g.

That is a change back from March 2017 and appeared in mkinitcpio v24:

https://git.archlinux.org/mkinitcpio.git/commit/?id=c5ad00c2e565eaae8e8b02b92d7f193852008c80
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpgwIZNvpsTh.pgp
Description: OpenPGP digital signature


Re: [arch-general] New kernel packages and mkinitcpio hooks

2019-11-11 Thread Christian Hesse
Ondřej Hruška  on Mon, 2019/11/11 09:18:
> Hi,
> I have a question regarding the kernel changes.
> 
> It sounds like it might break my dm-crypt/luks setup with un-encrypted
> /boot partition, if the kernel is not in /boot anymore? Are there
> migration steps needed? I set it up exactly following the wiki.
> 
> It is my understanding that it is the kernel who handles the password
> prompt and decryption. Or am I misunderstanding how it works?

You have (sd-)encrypt hook in your mkinitcpio configuration. That does the
work and that does not change. No extra action is to be taken.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpD9i2_sRugl.pgp
Description: OpenPGP digital signature


Re: [arch-general] Silent boot with systemd and sd-encrypt initcpio hooks

2019-10-28 Thread Christian Hesse
Sefa Eyeoglu  on Mon, 2019/10/28 10:06:
> On Montag, 28. Oktober 2019 09:46:57 CET Christian Hesse wrote:
> > Sefa Eyeoglu via arch-general  on Sun,
> > 2019/10/27
> > 15:37:  
> > > [...]
> > > As you can see, I have an encrypted root partition. Before switching to
> > > systemd hooks, after typing the decryption password on boot there was no
> > > additional output. Now there is always the full systemd log where it
> > > says "Starting [unit]..." and so on.
> > > [...]  
> > 
> > If a unit takes too long to start systemd switches to verbose mode for
> > possible issue diagnose. Everything is correct and you take too long to
> > type your passphrase. ;)  
> 
> Thanks for the info.
> 
> Is there an easy way to set the timeout?

From man systemd(1):

   systemd.show_status
   Takes a boolean argument or the constant auto. Can be also
   specified without an argument, with the same effect as a positive
   boolean. If enabled, the systemd manager (PID 1) shows terse
   service status updates on the console during bootup.  auto
   behaves like false until a unit fails or there is a significant
   delay in boot. Defaults to enabled, unless quiet is passed as
   kernel command line option, in which case it defaults to auto. If
   specified overrides the system manager configuration file option
   ShowStatus=, see systemd-system.conf(5). However, the process
   command line option --show-status= takes precedence over both
   this kernel command line option and the configuration file
   option.

So you can disable this functionality, but not sure if you can set a timeout.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp1DLU97gM6k.pgp
Description: OpenPGP digital signature


Re: [arch-general] Silent boot with systemd and sd-encrypt initcpio hooks

2019-10-28 Thread Christian Hesse
Sefa Eyeoglu via arch-general  on Sun, 2019/10/27
15:37:
> [...]
> As you can see, I have an encrypted root partition. Before switching to 
> systemd hooks, after typing the decryption password on boot there was no 
> additional output. Now there is always the full systemd log where it says 
> "Starting [unit]..." and so on.
> [...]

If a unit takes too long to start systemd switches to verbose mode for
possible issue diagnose. Everything is correct and you take too long to type
your passphrase. ;)
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpf5ut59oe8C.pgp
Description: OpenPGP digital signature


Re: [arch-general] Resetting pacman-key Still Asks to Import.

2019-10-27 Thread Christian Hesse
Ralph Corderoy  on Sun, 2019/10/27 11:14:
> Hi,
> 
> I have an Arch Linux laptop that hasn't been updated in a long time,
> mainly because it started to lock-up after a few minutes uptime,
> requiring a power cycle.  I'm now trying to update all its packages in
> the hope the lock-ups have gone, and if not to have a more modern base
> for diagnosis.
> 
> A ‘pacman -Syuw’ took a few goes but signature checking had problems, as
> did trying to update signatures.  I resorted to
> https://wiki.archlinux.org/index.php/Pacman/Package_signing#Resetting_all_the_keys
> that appeared to succeed.
> 
> The next attempt at ‘pacman -Syuw’ gets to
> 
> Total Download Size:  0.00 MiB
> 
> :: Proceed with download? [Y/n] 
> (250/250) checking keys in keyring
> [#]
> 100% downloading required keys... :: Import PGP key
> 2048R/02FD1C7A934E614545849F19A6234074498E9CEE, "Christian Hesse (Arch
> Linux Package Signing) ", created: 2011-08-12? [Y/n]
> (250/250) checking package integrity
>
> [#]
> 100% error: dav1d: signature from "Levente Polyak (anthraxx)
> " is invalid :: File
> /var/cache/pacman/pkg/dav1d-0.4.0-1-x86_64.pkg.tar.xz is corrupted (invalid
> or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y
> error: libpulse: signature from "Jan Alexander Steffens (heftig)
> " is invalid :: File
> /var/cache/pacman/pkg/libpulse-13.0-2-x86_64.pkg.tar.xz is corrupted
> (invalid or corrupted package (PGP signature)). Do you want to delete it?
> [Y/n] 
> 
> This looks very similar to where I've been before.  The next attempt to
> download those, now deleted, packages does no better.  I'm going to
> https://wiki.archlinux.org/index.php/Pacman/Package_signing#Disabling_signature_checking
> but would still like to understand what I should attempt instead.

If the system is not too old just updating the package archlinux-keyring may
bring you back into business.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpB7l3tdRnLM.pgp
Description: OpenPGP digital signature


Re: [arch-general] Linux 5.3 - Virtualbox 5.2.32 modules fail to build - upstream bug opened

2019-09-19 Thread Christian Hesse
"David C. Rankin"  on Thu, 2019/09/19 20:12:
> All,
> 
>   Note to anyone is still using Virtualbox 5.2.32 (that can't move to Ver. 6
> due to headless behavior with Windows guests), on update to Linux 5.3,
> virtualbox models fail to build using dkms.
> 
> Upstream bug filed: https://www.virtualbox.org/ticket/18949
> 
> (make.log attached to bug report)
> 

We had to patch VirtualBox 6.0.12 as well. Probably you need something
like this:
https://git.archlinux.org/svntogit/community.git/tree/trunk/015-linux-5-3.patch?h=packages/virtualbox
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpcuvaMrBY6U.pgp
Description: OpenPGP digital signature


Re: [arch-general] Acceso remoto consola (simil Teamviewer)

2019-08-07 Thread Christian Hesse
[ snipped a lot of Spanish (?) text ]

If I get this right you are searching for something that works like
Teamviewer, but for a terminal/console connection.

I'd suggest to have a look at "tmate". It's a fork of tmux and handles the
remote part via ssh.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp3m9Vi7VODr.pgp
Description: OpenPGP digital signature


Re: [arch-general] Mariadb Tables Still Compatible with Backup Server Running Earlier Version?

2019-06-28 Thread Christian Hesse
"David C. Rankin"  on Thu, 2019/06/27 21:29:
> This is more a general question following the mariadb feature update to
> 10.4.6-1. Do the tables remain compatible with servers running earlier
> versions of mariadb?

You should not expect the binary format to be compatible.

> What happens if a backup from an earlier version has to be rolled into the
> new version?

That should work without problem. Just make sure to run mariadb-upgrade again.

> Or more importantly, can a backup from the new version be used to update
> servers running earlier versions of mariadb?

This should be handled with care. Most dumps should work - as long as you do
not use features not available in earlier versions.
You should *not* restore the mysql schema into an older server.

> (I have the same database running on Arch with backup handled by openSuSE,
> still running 10.0.35)

Hmm... Wondering what this means. You run mysqldump from an openSuSE system
or is the older mariadb server involved?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp5GHig8yto6.pgp
Description: OpenPGP digital signature


Re: [arch-general] Maria update

2019-06-28 Thread Christian Hesse
mick howe via arch-general  on Fri, 2019/06/28
01:37:
> Could not create the upgrade info file '/var/lib/mysql/mysql_upgrade_info'
> in the MariaDB Servers datadir, errno: 13

What's the permission of /var/lib/mysql directory? I guess these were borked
before without being noticed. My systems have 0700 with mysql:mysql.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp54SrhRghLU.pgp
Description: OpenPGP digital signature


Re: [arch-general] mariadb package outdate for over a month

2018-12-18 Thread Christian Hesse
Florijan Hamzic via arch-general  on Tue,
2018/12/18 21:00:
> a working 10.3 exist in AUR and so far it workes very well in my environment
> https://aur.archlinux.org/packages/mariadb-10.3

The remaining issue is that zerofill support in libmariadb is broken.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpjgGBauTthi.pgp
Description: OpenPGP digital signature


Re: [arch-general] MariaDB package version

2018-09-29 Thread Christian Hesse
Genes Lists via arch-general  on Thu, 2018/09/27
09:36:
> On 9/27/18 7:04 AM, leoutat...@gmx.fr wrote:
> 
> >> If you have further news, feel free to share. :)
> >>  
> > Mariadb 10.2 and 10.3 are available in all distro except Arch
> > https://downloads.mariadb.org/mariadb/repositories/#mirror=cnrs  
> 
> The link Eli provided references lots of client programs having problems 
> - but I didn't find a list of which client programs.

We encountered random failures in different client... And did not record an
exact list. Possibly most of this was fixed in later version - I did not
check in detail.

I do build packages for recent versions of MariaDB from time to time. Still
failing is perl-dbd-mysql with its extensive test suite, that was my primary
test case.

Due to unaddressed issues with MariaDB (and Unicode) the original DBD::mysql
was forked into DBD::MariaDB [0]. Possibly we should have a look on whether or
not replacing this package is an option... But if I understand correctly this
brings new incompatibility.

[0] https://metacpan.org/pod/DBD::MariaDB
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpvt4oo4OlKh.pgp
Description: OpenPGP digital signature


Re: [arch-general] [arch-dev-public] removed mariadb 10.1.27 from [testing]

2017-09-27 Thread Christian Hesse
Genes Lists via arch-general  on Wed, 2017/09/27
09:31:
> On Tue, 2017-09-26 at 23:06 +0200, Christian Hesse wrote:
> > ...
> > We tried to upgrade to MariaDB 10.2.6, which ended in a disaster. The
> > client
> > library has been renamed from libmysqlclient to libmariadb and it has
> > seen
> > structural changes for data types. Programs fail to link or - if they
> > do
> > link - crash or misbehave, including data corruption.
> > 
> > I do not see any way to upgrade any time soon. IMHO data structures
> > have to
> > be made opaque in favor of accessing data via functions.
> >   
> 
> Thanks - so it's clear - are you saying that the recommended method of
> running[1] mysql_upgrade does not in fact work properly?
> 
> [1]
> https://mariadb.com/kb/en/library/upgrading-from-mariadb-101-to-mariadb-102/

No, mysql_upgrade updates the table data (schema 'mysql'), that's not a
problem. The server itself works just fine.

But API/ABI in library /usr/lib/libmariadb.so and header files
in /usr/include/mysql/ changed. Lots of programs break because of this.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpzVHzWiU4z5.pgp
Description: OpenPGP digital signature


Re: [arch-general] [arch-dev-public] removed mariadb 10.1.27 from [testing]

2017-09-26 Thread Christian Hesse
Genes Lists via arch-general  on Tue, 2017/09/26
16:41:
> On Tue, 2017-09-26 at 21:28 +0200, Christian Hesse wrote:
> > Hello everybody,
> > 
> > after the release of 10.1.27 upstream was made aware of a regression,
> > so
> > the release has been pulled from the downloads system. The fix will
> > be
> > in 10.1.28.
> > I removed mariadb 10.1.27 packages from [testing].  
> 
> Thank you Christian - related note - can you share  thoughts around
> 10.2?

We tried to upgrade to MariaDB 10.2.6, which ended in a disaster. The client
library has been renamed from libmysqlclient to libmariadb and it has seen
structural changes for data types. Programs fail to link or - if they do
link - crash or misbehave, including data corruption.

I do not see any way to upgrade any time soon. IMHO data structures have to
be made opaque in favor of accessing data via functions.

OpenSSL suffered a similar problem, which has been solved with version 1.1.0.
MariaDB upstream would have to do something similar.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp3LbLpCjJXc.pgp
Description: OpenPGP digital signature


Re: [arch-general] systemd on bios computer

2017-07-05 Thread Christian Hesse
Jude DaShiell  on Tue, 2017/07/04 14:52:
> When doing a systemd upgrade I get:
> (3/7) Upgrading systemd-boot...
> Couldn't find EFI system partition. It is recommended to mount it to 
> /boot. Alternatively, use --path= to specify path to mount point.
> error: command failed to execute correctly
> Are either of the above alternatives even viable for a real bios machine? 
> This one got built when efi was somewhere on the drawing board or maybe 
> before efi ever got to the drawing board.

Just a guess as I have never seen this before... Did you install package
systemd-boot-pacman-hook from AUR? Remove that...
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp2TW7YrsMje.pgp
Description: OpenPGP digital signature


Re: [arch-general] Virtualbox pxe boot fails and freeze system

2016-09-27 Thread Christian Hesse
Maykel Franco via arch-general  on Tue,
2016/09/27 15:19:
> Hi, I have a virtualbox, version 5.1.6. When boot the VM from PXE, fails
> with error unknown and my archlinux freeze...
> 
> Anybody with these problem??

I had PXE issue with 5.1.[024]. The guest had stalling connections.
Everything works just fine with 5.1.6.

What is your guest hardware configuration? I am using paravirtualized network
in bridged mode here.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp3y5g6SJClT.pgp
Description: OpenPGP digital signature


Re: [arch-general] Opinions on PowerShell?

2016-08-18 Thread Christian Hesse
Hunter Connelly via arch-general  on Thu,
2016/08/18 21:28:
> On Thu, Aug 18, 2016 at 09:00:33PM -0400, Eli Schwartz via arch-general
> wrote:
> > Why would anyone want to use an overly-verbose scripting language like
> > PowerShell as an interactive shell, **unless it was their only option**?  
> 
> While I tend to prefer Unix-style shells, there are *some* things that
> PowerShell does better.
> 
> Here's an example I found on Reddit in the thread about this on /r/linux.
> Both of the following commands find the size and name of the three largest
> files in a directory.
> 
> Bash:ls -l | sed 's/ \+/,/g' | cut -d',' -f 5,9 | sort -g | tail -3

ls -1 --sort=size | head -n3

> PowerShell:  ls -file | sort -pr length | select length, name -l 3
> 
> What seems to be the most noticable difference is that PowerShell, being an
> object-oriented language, pipes objects instead of raw text. I think this
> might make many things easier while writing scripts.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpNqCq7bbbh8.pgp
Description: OpenPGP digital signature


Re: [arch-general] Package are signed... but pacman doesn't like them...?

2016-07-04 Thread Christian Hesse
Giovanni 'ItachiSan' Santini  on Mon,
2016/07/04 11:58:
> Il 03/07/2016 23:50, Christian Hesse ha scritto:
> > 
> > The db file is just a simple tar archive, compressed with gzip. Unzip it
> > and you will find a directory for every package. Every directory contains
> > the file 'desc' at least. Within the file you should find a line
> > '%PGPSIG%', followed by a single line containing the signature.
> > Looks like the build service breaks this line, which confuses pacman.
> >   
> 
> I've opened an issue and created a pull request, as I made some
> experiments with perl in order to have the script working; the issue
> (now closed) is here:
> https://github.com/openSUSE/open-build-service/issues/1907
> 
> Now, pacman recognises the key and accepts the package, but it still
> complains a little, saying that the signature format is unsupported:
> 
> --- Terminal output starts here
> $ LANG=C sudo pacman -Sy dpkg
> :: Synchronizing package databases...
>  ... sync stuff here ...
> resolving dependencies...
> looking for conflicting packages...
> 
> Packages (1) dpkg-1.17.25-1
> 
> Total Download Size:   1.46 MiB
> Total Installed Size:  9.20 MiB
> 
> :: Proceed with installation? [Y/n]
> :: Retrieving packages...
>  dpkg-1.17.25-1-x86_64   1492.1 KiB   $speed 00:00 [--] 100%
> (1/1) checking keys in keyring [--] 100%
> error: dpkg: unsupported signature format(0/1)
> checking package integrity [co  o  o  o  o  o
> (1/1) checking package integrity   [--] 100%
> (1/1) loading package files[--] 100%
>  ... installation stuff here ...
> --- Terminal output ends here
> 
> Why does pacman give that error?
> As it marks it as an error, but it install the package anyways...!

We have three places where this can come from...

https://git.archlinux.org/pacman.git/tree/lib/libalpm/signing.c#n1008
https://git.archlinux.org/pacman.git/tree/lib/libalpm/signing.c#n1038
https://git.archlinux.org/pacman.git/tree/lib/libalpm/signing.c#n1045

Not sure what goes wrong here. Is source of the build service available? How
do they sign the packages?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpTkPQ6f9lva.pgp
Description: OpenPGP digital signature


Re: [arch-general] Package are signed... but pacman doesn't like them...?

2016-07-03 Thread Christian Hesse
Giovanni 'ItachiSan' Santini via arch-general  on
Sun, 2016/07/03 10:09:
> Good morning,
> some days ago I found a nice service called "Open Build Service", which
> allows all kind of packagers, including also Arch ones, to have
> different repos of their packages, having them built online.
> This is awesome for me, as some of them require heavy building time.
> 
> I fought a bit against the service, in order to make the GPG public key
> to be uploaded to a key server, in order to allow users to add it
> properly to pacman-key.
> 
> Now, I am facing a really strange issue: I've added the key to pacman
> keyring, using:
> 
> sudo pacman-key -r 05E0A765C649DE23
> sudo pacman-key --lsign-key 05E0A765C649DE23
> 
> Database syncing works properely and the signature is verified...
> But for packages it is not.
> Every time it gives an error as this:
> 
> $pkgname-$pkgver   $pkgsize  $dw_speed 00:00 [] 100%
> (1/1) checking keys in keyring   [] 100%
> error: $pkgname: unsupported signature format(0/1) checking package
> integrity
> (1/1) checking package integrity [] 100%
> error: GPGME error: No data
> 
> I tried to download the public key and adding to my personal GPG
> keyring. Verifying the packages signatures works perfectly. To try this,
> I fetched the .sig file online and used the GPG --verify command.
> Any hints?
> 
> Now, the needed data.
> My personal repo configuration for pacman
> 
> [home_ItachiSan_archlinux_Arch_Extra]
> Server =
> http://download.opensuse.org/repositories/home:/ItachiSan:/archlinux/Arch_Extra/$arch
> 
> The public key mentioned above:
> http://keyserver.ubuntu.com/pks/lookup?op=get&fingerprint=on&search=0x05E0A765C649DE23
> or
> http://keyserver.ubuntu.com/pks/lookup?op=vindex&search=home%3AItachiSan&fingerprint=on
> 
> Sorry to be so verbose. :<
> Thanks in advance!

Looks like the build service produces invalid db files,
home_ItachiSan_archlinux_Arch_Extra.db in your case.

The db file is just a simple tar archive, compressed with gzip. Unzip it and
you will find a directory for every package. Every directory contains the
file 'desc' at least. Within the file you should find a line '%PGPSIG%',
followed by a single line containing the signature.
Looks like the build service breaks this line, which confuses pacman.

To verify you can extract the db file, make your changes and create a new
one. Do not forget to remove the db signature (or resign).

BTW, It's pretty simple why the db signature is valid: It is used as-is. The
package signatures in your repository are useless, though. The signatures are
stored withing the db file, as seen above.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpKFoLSPyleS.pgp
Description: OpenPGP digital signature


Re: [arch-general] Problem with pacman hooks, alphabetic order.

2016-05-19 Thread Christian Hesse
LoneVVolf  on Thu, 2016/05/19 17:24:
> On 14-05-16 01:15, Carsten Feuls wrote:
> > Hello Everybody,
> >
> > I have some trouble with pacman hooks.
> > Arch is going to use pacman hooks in every package.
> > etckeeper was one of the first package that use pacman hooks, without any
> > trouble.
> > But now it becomes more tricky to run.
> > My Problem is that the pacman hooks run in alphabetic order.
> > And not in a Prirority order.
> >
> > How this problem could be solved?
> > Yes I know I can number every hook but I prefer a more upstream 
> > solution..
> >
> >
> > Sincerly Yours
> > Carsten Feuls
> >  
> 
> I do think there may be better way to solve this then adding a priority 
> system for hooks.
> 
> this is current trigger used by etckeeper hooks :
> [Trigger]
> Operation = Install
> Operation = Upgrade
> Operation = Remove
> Type = Package
> Target = *
> 
> I think the purpose of etckeeper is to keep track of changes in the /etc 
> folder, right?
> 
> How about using this as trigger :
> 
> [Trigger]
> Operation = Install
> Operation = Upgrade
> Operation = Remove
> Type = File
> Target = /etc/*

That is what current version does. Well, except that the install root is
omitted, so correct target is just 'etc/*'.

But that does not solve the problem: Think of etckeeper hook runs
first, followed by ca-certificates hook. The changes are not committed.
That's why we want prefix for order, so etckeeper hook can run last.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpbtiMdeLjid.pgp
Description: OpenPGP digital signature


Re: [arch-general] Problem with pacman hooks, alphabetic order.

2016-05-18 Thread Christian Hesse
Carsten Feuls  on Sat, 2016/05/14 01:15:
> Hello Everybody,
> 
> I have some trouble with pacman hooks.
> Arch is going to use pacman hooks in every package.
> etckeeper was one of the first package that use pacman hooks, without any 
> trouble.
> But now it becomes more tricky to run.
> My Problem is that the pacman hooks run in alphabetic order.
> And not in a Prirority order.

Want to try etckeeper 1.18.3.r27.geeae1aa-1?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpvWQX1kex8W.pgp
Description: OpenPGP digital signature


Re: [arch-general] terminal

2016-03-19 Thread Christian Hesse
Sebastiaan Lokhorst  on Wed, 2016/03/16 15:24:
> This is a known bug in Linux 4.4.[1]
> It should be fixed in 4.5, which is in [testing] now, so you can try it out.
> 
> [1] https://bugs.freedesktop.org/show_bug.cgi?id=93483

This bug you referenced is marked as duplicate, this is the real one:

https://bugs.freedesktop.org/show_bug.cgi?id=93822

However Linux 4.5 crashes even worse for me...
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpD71506m1d1.pgp
Description: OpenPGP digital signature


Re: [arch-general] Htop 2.0 fonts

2016-02-16 Thread Christian Hesse
Garmine 42  on Tue, 2016/02/16 18:33:
> Hi!
> 
> Since the update to 2.0 the usage graphs use nonexisting fonts - both
> TTY and uxterm show the "empty box" unicode character instead of the
> fonts shown on htop 2.0 screenshots.
> 
> I did not find any missing dependency for htop on my system.
> 
> Do anyone else have this issue?
> 
> Any ideas? Shall I install a new font for this? If so, which one?
> 
> Thank you in advance.

Make sure your locales support UTF-8 and select a terminal font that has
braille character. Terminus (package terminus-font) works perfectly fine.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgp6BSawZmfsc.pgp
Description: OpenPGP digital signature


Re: [arch-general] grub

2015-11-26 Thread Christian Hesse
flow  on Sun, 2015/11/08 16:34:
> Is it possible to boot archlinux-2015.11.01-dual.iso (and install then)
> with grub?

For me the boot entry looks like this:

menuentry "Arch Linux ISO image" --class arch --class gnu-linux --class gnu 
--class os --class tool {
insmod iso9660
loopback loop /archlinux/archlinux.iso
linux (loop)/arch/boot/x86_64/vmlinuz archisobasedir=arch img_dev=/dev/sdaX 
img_loop=/archlinux/archlinux.iso archisodevice=/dev/loop0 copytoram=y quiet
initrd (loop)/arch/boot/intel-ucode.img (loop)/arch/boot/x86_64/archiso.img
}

Should work just fine...
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp90m4AHKTyD.pgp
Description: OpenPGP digital signature


Re: [arch-general] suckless-terminal (st) in community - is there an issue with st-255color terminfo and tmux?

2015-11-26 Thread Christian Hesse
Oon-Ee Ng  on Thu, 2015/11/26 11:37:
> I'm really glad st is now in community, though I find it slightly odd
> its orphaned even though it's just been moved.

Probably Sergej forgot to adopt... Nothing to worry about.

> Anyway, on the upgrade my terminal would not start, and I tracked that
> down to the default config.h setting termname to 'st-256color'
> 
> Changing that to 'stterm-256color' means it doesn't crash on startup
> anymore. It's because I start tmux automatically in terminal.
> 
> The problem with 'st' is that the name is nigh-on un-google-able...
> anyone else knows about this issue or has hit it before?

Is your system up-to-date? You need recent ncurses.

% pacman -Q ncurses
ncurses 6.0-3
% pacman -Ql ncurses | grep st-256color
ncurses /usr/share/terminfo/s/st-256color

-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp2bezI8dtPI.pgp
Description: OpenPGP digital signature


Re: [arch-general] Kernel NULL pointer and crash - raid bug in 4.1.6 - and fix

2015-09-21 Thread Christian Hesse
Tobias Powalowski  on Thu, 2015/09/03 17:08:
> Am 03.09.2015 um 15:03 schrieb Genes Lists:
> > I (and others) have enocuntered a pretty nasty raid bug that crashes
> > the machine running current 4.1.x stable. It seems a commit is
> > available but not yet in 4.1.6.
> >
> > (commit 49895bcc7e566ba455eb2996607d6fbd3447ce16)
> >
> > Seems like it is in 4.2 tho.
> >
> > Not sure it's worth patching 4.1.6 with this if 4.2 is imminent - but
> > it may be - it kills the machine and has caused some file lossage.
> >
> > Bugzilla:
> >
> >Upstream: https://bugzilla.kernel.org/show_bug.cgi?id=103711
> >Arch: https://bugs.archlinux.org/task/46188
> >
> > Tobias - what do you suggest best way to proceed - skip as 4.2 is out
> > or patch 4.1.6?
> >
> > Thanks
> >
> > gene/
> Uploading 4.2 to testing now, so no need to patch 4.1.x.

Uh, we have linux-lts 4.1.7-2 in [core], which has this RAID5 issue, no?

Can we get a fix there?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpIcgtryUc2j.pgp
Description: OpenPGP digital signature


Re: [arch-general] Cannot install bacula-client error unknown public key

2015-08-06 Thread Christian Hesse
Maykel Franco  on Thu, 2015/08/06 13:01:
> Hi, I try install bacula-client in my archlinux but I get this error:
> 
>   -> Found bacula-fd.service
> ==> Validating source files with sha256sums...
> bacula-7.0.5.tar.gz ... Passed
> bacula-7.0.5.tar.gz.sig ... Skipped
> bacula-fd.service ... Passed
> ==> Verifying source file signatures with gpg...
> bacula-7.0.5.tar.gz ... FAILED (unknown public key 9E98BF3210A792AD)
> ==> ERROR: One or more PGP signatures could not be verified!
> ==> ERROR: Makepkg was unable to build bacula-client.
> ==> Restart building bacula-client ? [y/N]
> 
> 
> How can resolve it?
> 
> Thanks in advanced.

gpg --recv-key 9E98BF3210A792AD

-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp9E9dV6oaio.pgp
Description: OpenPGP digital signature


Re: [arch-general] at times when booting system-logind fails and system hangs

2015-04-30 Thread Christian Hesse
Javier Vasquez  on Wed, 2015/04/29 15:40:
> I haven't identified under which circumstances, when booting the
> system hangs, and the only thing that can be related to that is the
> message:
> 
> Failed to start Login Service
> 
> Of course the recommendation to see the output of:
> 
> systemctl status systemd-logind.service
> 
> Is useless when that happens.  That because the system hangs.
> 
> A phisical hard power down is what I've done, and then usually by
> starting the system again everything works.
> 
> Has anyone experienced this?  Any suggestion?

Possibly this is related:

FS#44016 - [systemd] journald regression in v219 makes boot hang
https://bugs.archlinux.org/task/44016

You could try to rebuild system with patches included, see my upload of
systemd.diff.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpYKOD7fQdCt.pgp
Description: OpenPGP digital signature


Re: [arch-general] git bug? (2.3.4-1)

2015-03-25 Thread Christian Hesse
Magnus Therning  on Wed, 2015/03/25 13:47:
> On Wed, Mar 25, 2015 at 12:47:30PM +0100, Christian Hesse wrote:
> > Magnus Therning  on Wed, 2015/03/25 12:36:
> > > I thought I'd ask here before raising a ticket.
> > > 
> > > Is anyone else seeing this behaviour with git 2.3.4-1:
> > > 
> > > ~~~
> > > [I] % git fetch
> > > ssh: Could not resolve hostname build01:: Name or service not known
> > > fatal: Could not read from remote repository.
> > > 
> > > Please make sure you have the correct access rights
> > > and the repository exists.
> > > ~~~
> > > 
> > > Downgrading to 2.3.3-1 "solves" it.
> > 
> > What does the URL look like? You can get it for origin with:
> > 
> > % git remote show origin
> > 
> > I suppose you use a non-standard ssh port (or specified it nevertheless)
> > with host:port, no? man git-clone tells us to use something like:
> > 
> > ssh://[user@]host.xz[:port]/path/to/repo.git/
> 
> It looks like this:
> 
> ssh://build01.evidente.local:/home/husqvarna/git/evi-cst.git
> 
> Nothing non-standard about that and it has worked fine with every
> version of git I've used the last 6 months or so, until the upgrade to
> 2.3.4... I really don't expect the format of remotes to change when
> going from 2.3.3 to 2.3.4!

This should read:

ssh://build01.evidente.local/home/husqvarna/git/evi-cst.git

So try to remove the colon after the hostname...

URL parsing changed from v2.3.3 to v2.3.4. It should not break, but probably
it was never intended to work the way you used it.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp5UGtiReN7v.pgp
Description: OpenPGP digital signature


Re: [arch-general] git bug? (2.3.4-1)

2015-03-25 Thread Christian Hesse
Magnus Therning  on Wed, 2015/03/25 12:36:
> I thought I'd ask here before raising a ticket.
> 
> Is anyone else seeing this behaviour with git 2.3.4-1:
> 
> ~~~
> [I] % git fetch
> ssh: Could not resolve hostname build01:: Name or service not known
> fatal: Could not read from remote repository.
> 
> Please make sure you have the correct access rights
> and the repository exists.
> ~~~
> 
> Downgrading to 2.3.3-1 "solves" it.

What does the URL look like? You can get it for origin with:

% git remote show origin

I suppose you use a non-standard ssh port (or specified it nevertheless) with
host:port, no? man git-clone tells us to use something like:

ssh://[user@]host.xz[:port]/path/to/repo.git/
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpeVtjujz1OH.pgp
Description: OpenPGP digital signature


Re: [arch-general] postfix 3.0.0-3 in testing wont start

2015-03-20 Thread Christian Hesse
Genes Lists  on Fri, 2015/03/20 10:13:
> On 03/19/2015 07:51 PM, Gaetan Bisson wrote:
> > [2015-03-19 19:36:35 -0400] Genes Lists:
> >> fatal: /usr/lib/postfix/postfix-script: No such file o
> >
> > $ /usr/lib/postfix/bin/postfix-script
> > This script must be run by the postfix command.
> > Do not run directly.
> >
> Yah sorry i wasn't clear - that is the error I get when running 
> systemctl start postfix
> 
> 
> I am not running anything by hand.
> 
> The above error is revealed by journalctl -xe
> 
> The problem seems to be that file does not exist:
> 
> # ls -l /usr/lib/postfix/postfix-script
> ls: cannot access /usr/lib/postfix/postfix-script: No such file or directory

I did not yet install postfix from testing, so just a guess... Does it help
to run

systemctl daemon-reload

to make systemd reload its unit files before restarting postfix?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp2ph1lWJrQl.pgp
Description: OpenPGP digital signature


Re: [arch-general] gpg source validation for kernel.org style signatures

2015-01-05 Thread Christian Hesse
Daniel Micay  on Mon, 2015/01/05 04:01:
> On 04/01/15 05:03 PM, Doug Newgard wrote:
> > On Sun, 4 Jan 2015 22:05:21 +0100
> > Christian Hesse  wrote:
> > 
> >> Hello everybody,
> >>
> >> pacman 4.2.0 gained support for verifying source tarballs with
> >> kernel.org style signature. Some (even essential) packages could
> >> benefit from that, linux and git come to mind.
> >>
> >> How to handle this? Report a bug for every package? Provide a list
> >> here?
> > 
> > A lot of it is already happening:
> > https://www.archlinux.org/todo/validpgpkeys-integrity-check/
> > 
> > If you want it added to a package that isn't on that list, the bug
> > tracker is probably the best bet. Note that the linux package already
> > has it.
> > 
> > Doug
> 
> That rebuild is just to fix packages that were already using GPG
> signatures and need the fingerprint(s) added. There are a lot that could
> be using them and aren't yet. This could likely be automated to a large
> extent.
> 
> Using a script to detect if HTTPS works for fetching the sources along
> with checking for signature files by appending .asc and .sig seems like
> a promising plan.

I do not think we need HTTPS, though it does not hurt. If anybody tries to
fool us with man-in-the-middle via HTTP we should detect that just fine with
broken signatures (given signatures are provided...).

Appending .sign may help as well. In fact for an example file archive.tar.xz
we may want to check for {${FILE},${FILE%.(xz|bz2|gz)}}.{asc,sig,sign}

$ export FILE=archive.tar.xz
$ echo {${FILE},${FILE%.(xz|bz2|gz)}}.{asc,sig,sign}
archive.tar.xz.asc
archive.tar.xz.sig
archive.tar.xz.sign
archive.tar.asc
archive.tar.sig
archive.tar.sign
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpz4qFs3pEPe.pgp
Description: OpenPGP digital signature


Re: [arch-general] gpg source validation for kernel.org style signatures

2015-01-04 Thread Christian Hesse
Doug Newgard  on Sun, 2015/01/04 16:03:
> On Sun, 4 Jan 2015 22:05:21 +0100
> Christian Hesse  wrote:
> 
> > Hello everybody,
> > 
> > pacman 4.2.0 gained support for verifying source tarballs with
> > kernel.org style signature. Some (even essential) packages could
> > benefit from that, linux and git come to mind.
> > 
> > How to handle this? Report a bug for every package? Provide a list
> > here?
> 
> A lot of it is already happening:
> https://www.archlinux.org/todo/validpgpkeys-integrity-check/

This is about validpgpkeys array. Glad to see this happen, but it is not what
I was speaking about: If the tar archive (instead of the compressed archive)
was signed pacman < 4.2.0 could not check. That is why you can not find these
with grep.

> If you want it added to a package that isn't on that list, the bug
> tracker is probably the best bet. Note that the linux package already
> has it.

Ah, I can see it on the website, but abs did not yet sync it. Thanks!
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpODpnyo7XzR.pgp
Description: OpenPGP digital signature


[arch-general] gpg source validation for kernel.org style signatures

2015-01-04 Thread Christian Hesse
Hello everybody,

pacman 4.2.0 gained support for verifying source tarballs with kernel.org
style signature. Some (even essential) packages could benefit from that,
linux and git come to mind.

How to handle this? Report a bug for every package? Provide a list here?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpGZMWSvwfUj.pgp
Description: OpenPGP digital signature


Re: [arch-general] Opening symlinks in tmpfs as root fails!

2014-12-30 Thread Christian Hesse
Christian Hesse  on Tue, 2014/12/30 13:42:
> Mohammad_AlSaleh  on Tue, 2014/12/30 14:36:
> > Hello.
> > 
> > I just came across some weird behavior.
> > 
> > A small testcase:
> > 
> > cd /tmp # should be tmpfs
> > touch tfile
> > ln -s tfile tlink
> > cat tlink
> > 
> > When cat executes, it returns with success(0). But, if cat is executed
> > as root, it fails with a permission denied error.
> > 
> > What's really happening is, the open() syscall fails with EACCESS when
> > the file is a symlink in a tmpfs-mounted dir. But only fails when run
> > as root!
> > 
> > I'm assuming this is a bug. Can anyone confirm it?
> 
> This is expected as /tmp has the sticky bit set.
> 
> https://wiki.ubuntu.com/Security/Features#Symlink_restrictions

As this was related to Ubuntu and pathes do not match... You can control the
behavior via proc filesystem:

/proc/sys/fs/protected_symlinks

Or simply use sysctl:

sysctl -w fs.protected_symlinks=0

If you want to make this permanent add the entry to configuration file
in /etc/sysctl.d/.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpGPw7AAJgn9.pgp
Description: OpenPGP digital signature


Re: [arch-general] Opening symlinks in tmpfs as root fails!

2014-12-30 Thread Christian Hesse
Mohammad_AlSaleh  on Tue, 2014/12/30 14:36:
> Hello.
> 
> I just came across some weird behavior.
> 
> A small testcase:
> 
> cd /tmp # should be tmpfs
> touch tfile
> ln -s tfile tlink
> cat tlink
> 
> When cat executes, it returns with success(0). But, if cat is executed
> as root, it fails with a permission denied error.
> 
> What's really happening is, the open() syscall fails with EACCESS when
> the file is a symlink in a tmpfs-mounted dir. But only fails when run
> as root!
> 
> I'm assuming this is a bug. Can anyone confirm it?

This is expected as /tmp has the sticky bit set.

https://wiki.ubuntu.com/Security/Features#Symlink_restrictions
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpUH6618DYNf.pgp
Description: OpenPGP digital signature


Re: [arch-general] [aur-general] Arch Linux Trusted User application Christian Hesse

2014-12-30 Thread Christian Hesse
Marcel Korpel  on Tue, 2014/12/30 11:57:
> * Christian Hesse  (Tue, 30 Dec 2014 11:12:45 +0100):
> > this year I received an extra Christmas present: Bartłomiej
> > Piotrowski asked me to apply to become an Arch Linux trusted user.
> > Just some days later Ike Devolder had the same in mind - as I already
> > have a sponsor he promised to give his vote. Thanks!
> 
> Congrats!

Thanks!

> I think you should apply on aur-general, not on this list.

Yeah, looks like... TUs handle [community], for me this is more than AUR
which made me think arch-general is the correct list. Thanks for the hint.

So please do not reply here, I will repost to aur-general.

> And if I was a TU, I would definitely vote for you, you've been of
> great help in the past!

Thanks again!
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpReq93qCdsc.pgp
Description: OpenPGP digital signature


[arch-general] Arch Linux Trusted User application Christian Hesse

2014-12-30 Thread Christian Hesse
Hello Arch Linux community,

this year I received an extra Christmas present: Bartłomiej Piotrowski asked
me to apply to become an Arch Linux trusted user. Just some days later Ike
Devolder had the same in mind - as I already have a sponsor he promised to
give his vote. Thanks!

My name is Christian Hesse (aka eworm), I was born in 1982 and I live in
Germany. I work for an educational institution, with FOM (Fachhochschule für
Ökonomie und Management) being the most prominent part. My work includes
networking and Linux stuff. Most Linux servers are Debian based, some machines
even run Arch.
In my free time I fly radio controlled helicopters, take photographs, read
books, go geocaching, meet friends, ...

My first contact with Linux was about 1998 when SuSE Linux 6.8 (or similar,
not perfectly sure) was offered by my school in a special deal. I installed
it but did not manage to get the X server running. Some time later I bought
a SuSE Linux 7.0 package, installed it and abandoned the well known
proprietary operating system. I am a free software enthusiast since these
days.
Some SuSE versions later I was annoyed by Yast overwriting my configuration
files over and over again... I decided do install LFS (Linux from scratch)
and learned a lot, changed to Gentoo to get a package manager and finally
installed Arch Linux in... Hmm... January 2010? ... for a serious system.
I felt in love with this great distribution and its package manager pacman.
To date I am perfectly happy. My main system is still running my first Arch
Linux installation (though this installation survived at least three
notebooks...).

I started maintaining packages in AUR [0] soon. Within four and a half year
the number increased to over 200, still counting.
I would like to move some of these to [community]: MySQL Workbench comes in
mind with 274 votes, LibreCAD and various Yubikey related packages being
other candidates. Hopefully PackageKit will be prepared for prime time again
soon.

My main focus is on system administration, but I do have an attitude to
programming. A number of open source projects includes changes by me, some
just being bug fixes, some introducing new features. I do not want to bore
you, so I will not list them here.
I even have started some projects on my own [1][2]. Dynamic QR
code on website anybody? Or desktop notifications for journal entries, netlink
or block device changes? Some projects are specific to Arch Linux. Want to
share pacman cache on local network? Full disk encryption with mkinitcpio and
Yubikey?

On community events I got in contact with the Linux Professional Institute. 
Nowadays I am member of LPI German e.V. [3] and working as proctor taking
certification exams.
Additionally my co-author Michael Gisbers and I wrote a German book ("Linux
Essentials. Vorbereitung auf die Prüfung des Linux Professional Institute")
for Linux Essentials exam preparation, published at Open Source Press [4].

I am going to marry next month, so do not expect me to be too active until
the end of January. Nevertheless I would be pleased to join the team now and
enhance Arch Linux in the future.
Thanks a lot to all of you for considering my application.

Best Regards,
Chris

[0] https://aur.archlinux.org/packages/?SeB=m&K=eworm
[1] https://github.com/eworm-de
[2] http://git.eworm.de/
[3]
http://www.lpice.eu/lpi-partner/lpi-ev/die-mitglieder-des-lpi-e-v/christian-hesse.html
[4] http://www.opensourcepress.de/de/autoren/Christian-Hesse
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp4jNhf6o6gS.pgp
Description: OpenPGP digital signature


[arch-general] expac in [extra]

2014-12-29 Thread Christian Hesse
Hello everybody,

pacman 4.2.0-5 moved to [core] this morning. Can anybody please move expac 4-3
to [extra] as well? Thanks!
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpOhdAtZmqkl.pgp
Description: OpenPGP digital signature


Re: [arch-general] Multithreaded XZ

2014-12-21 Thread Christian Hesse
Jan Alexander Steffens  on Mon, 2014/12/22 08:07:
> On Dec 22, 2014 8:00 AM, "Christian Hesse"  wrote:
> > For Arch packages there is nothing that requires repeatable output.
> 
> Yes, there is. Package signatures are made using the compressed package.
> Delta packages work by patching the uncompressed package and then
> recompressing it. If the compressor works differently the verification of
> the product will fail. I'm not sure xdelta3 in smart enough to compensate,
> or if the needed information is even there.

Ah, ok... Never used delta packages. You are right then.

But the same applies for other compression options, no? How is gzip
compression speed (-1...9 --fast --best) handled?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpyY0BN9PnQz.pgp
Description: OpenPGP digital signature


Re: [arch-general] Multithreaded XZ

2014-12-21 Thread Christian Hesse
Jan Alexander Steffens  on Mon, 2014/12/22 04:08:
> On Mon, Dec 22, 2014 at 3:25 AM, Mark Lee  wrote:
> > Now that xz is multithreaded (not available in Arch Repos yet); I was
> > wondering if package building and installing would, by default,
> > utilize multiple threads.

Sure. I do use the multi-threaded version since the end of 2011 with my
xz-git package [0] from AUR.
Worked perfectly since then.

> It won't, since the output of XZ in multi-threaded mode is different
> from single-threaded mode. This will break anything relying on getting
> repeatable output from compression.

Yes, the output is different (and usually a little larger) for streams larger
than block-size. But that does not matter. Every xz version can decompress
every xz-compressed stream - including those created with multi-threaded xz.

For Arch packages there is nothing that requires repeatable output.
Building a package will generate new output one way or another - even a
changed package file timestamp will change the output.
Or did I get you wrong here?

> I'm not even sure it's possible to
> run XZ in multi-threaded mode with a single thread. xz -T1 uses
> single-threaded mode. xz -T1 --block-size=24M is also different from
> xz -T2 --block-size=24M.
>
> Multi-threaded decompression also requires a stream created using
> multi-threaded mode.

Yes. But it falls back to single-threaded mode without complaints.

[0] https://aur.archlinux.org/packages/xz-git/
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp5Lhbu19lxm.pgp
Description: OpenPGP digital signature


Re: [arch-general] gnupg 2.1 not stable

2014-12-18 Thread Christian Hesse
Ido Rosen  on Wed, 2014/12/17 09:03:
> From gnupg.org:
> "2.0.26 is the stable version suggested for most users,
> 2.1.1 is the brand-new modern version with support for ECC and many
> other new features,
> and 1.4.18 is the classic portable version."

Marking version 2.1 stable would include some new features like elliptic
curves. Possibly these features do include bugs and issues - that is why the
modern branch is not yet ready for every day use in enterprise distributions,
etc.

What I like about Arch Linux is its early adoption of new features,
releases, ...
For package file verification we do not rely on elliptic curves and the like.
So I think we are perfectly fine with this.

Some rough edges need to be fixed in gnupg and other software. But that is
what happens if the software is actively used by early adopters.
I did fix some problems with git test suite (that is why git 2.2.0 took
longer to enter our repositories) - now it is ready for everybody to use it
with gnupg 2.1.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp1ydvvIjkXK.pgp
Description: OpenPGP digital signature


Re: [arch-general] mkinitcpio hook systemd 217-2

2014-10-31 Thread Christian Hesse
Jonathan Hudson  on Fri, 2014/10/31 17:30:
> On Fri, 31 Oct 2014 16:34:18 +0100, Christian Hesse wrote:
> 
> >Hello everybdoy,
> >
> >just installed systemd 217-2, building a systemd-enabled initramfs I get:
> >
> >  -> Running build hook: [systemd]
> >==> ERROR: file not found: `/init'
> >
> >Let's see whether or not this breaks boot. :D
> 
> Breaks boot for me, big time. Kernel panic. Thankful for backups. 

I decided to fix this before reboot. ;)

The problem ist fixed in systemd 217-3.

For recovery I would suggest:

* Boot with rescue system
* chroot into the system
* update to systemd 217-3 (or make changes [0] manually)
* run mkinitcpio -p linux
* reboot

[0]
https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/systemd&id=73e82c81b34f49123d924d71c561689806d0ae35
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpGn45Rp4Noa.pgp
Description: OpenPGP digital signature


[arch-general] mkinitcpio hook systemd 217-2

2014-10-31 Thread Christian Hesse
Hello everybdoy,

just installed systemd 217-2, building a systemd-enabled initramfs I get:

  -> Running build hook: [systemd]
==> ERROR: file not found: `/init'

Let's see whether or not this breaks boot. :D
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgp5hnBKlBskt.pgp
Description: OpenPGP digital signature


Re: [arch-general] stunnel 5.06-1 vs systemd

2014-10-30 Thread Christian Hesse
Genes Lists  on Thu, 2014/10/30 08:52:
> On 10/30/2014 08:27 AM, Christian Hesse wrote:
> 
> > Possibly /var/run is no longer linked to ../run?
> > You should change the path in /usr/lib/tmpfiles.d/stunnel.conf from
> > "/var/run/stunnel" to "/run/stunnel".
> 
>I did check that and /var/run is indeed linked to /run.

Or it creates /var/run/stunnel, then removes /var/run to link it
against ../run? I would suggest to fix pathes, then try again.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpwFj3M6FMlW.pgp
Description: OpenPGP digital signature


Re: [arch-general] stunnel 5.06-1 vs systemd

2014-10-30 Thread Christian Hesse
Genes Lists  on Thu, 2014/10/30 08:23:
>2) There is a tmpfiles snippet:
> 
> # cat /usr/lib/tmpfiles.d/stunnel.conf
> d /var/run/stunnel 0770 stunnel stunnel -
> 
>   3) So the question now is why was /run/stunnel not created at boot?
> 
>   journal only has this reference to tmpfiles:

Did not check, but...

Possibly /var/run is no longer linked to ../run?
You should change the path in /usr/lib/tmpfiles.d/stunnel.conf from
"/var/run/stunnel" to "/run/stunnel".
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpkgjOd5Upm0.pgp
Description: OpenPGP digital signature


Re: [arch-general] [arch-dev-public] Changes to microcode updates

2014-10-27 Thread Christian Hesse
Damjan Georgievski  on Thu, 2014/10/23 19:40:
> On 12 October 2014 14:28, Thomas Bächler  wrote:
> > Intel released a new microcode update that disables an instruction on
> > Haswell CPUs. However, Linux doesn't handle this very well and in
> > combination with our glibc version, this essentially crashes your system.
> >
> > The solution is to use the "new" early microcode update mechanism that
> > was introduced almost two years ago ([1]). This means we need to build
> > microcode support into the kernel.

Works perfectly here: Just concatenating the ucode and default initramfs into
one file, then boot that with grub.

Details can be found here:
https://bugs.archlinux.org/task/42354#comment129209

May be worth it to change mkinitcpio to combine the two files...

> from that documentation I didn't understand why can't the microcode be
> part of the standard /boot/initramfs-linux.img in ArchLinux?

Just tested, that does not work.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


pgpXLolCGNmis.pgp
Description: OpenPGP digital signature


Re: [arch-general] Issues when updating mysql-connector-c++

2014-09-18 Thread Christian Hesse
Christian Hesse  on Thu, 2014/09/18 10:01:
> Marcel Korpel  on Thu, 2014/09/18 05:49:
> > [ 47%] Building CXX object
> > test/framework/CMakeFiles/test_framework.dir/start_options.cpp.o
> > Linking CXX executable driver_test
> > ../driver/libmysqlcppconn.so.7.1.1.4: undefined reference to
> > `mysql_options4' collect2: error: ld returned 1 exit status
> 
> This has been introduced in MySQL 5.6.6 and is not available in MariaDB.
> 
> Looks like this does not do anything essential (it is skipped by macros if
> compiled with libmysqlclient < 5.6.6), so I disable it for mysql-workbench.

BTW, this should be fixed in MariaDB 10.0.14 [0]. Perhaps we should backport
the fix and apply to our mariadb (libmariadbclient) package.

[0] https://mariadb.atlassian.net/browse/MDEV-6638
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] Issues when updating mysql-connector-c++

2014-09-18 Thread Christian Hesse
Marcel Korpel  on Thu, 2014/09/18 05:49:
> [ 47%] Building CXX object
> test/framework/CMakeFiles/test_framework.dir/start_options.cpp.o
> Linking CXX executable driver_test
> ../driver/libmysqlcppconn.so.7.1.1.4: undefined reference to
> `mysql_options4' collect2: error: ld returned 1 exit status

This has been introduced in MySQL 5.6.6 and is not available in MariaDB.

Looks like this does not do anything essential (it is skipped by macros if
compiled with libmysqlclient < 5.6.6), so I disable it for mysql-workbench.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] pacman-key issue

2014-09-09 Thread Christian Hesse
Frank Zimmermann  on Tue, 2014/09/09
22:39:
> 
> 
> Am Di, 9. Sep, 2014 um 10:37 schrieb Yamakaky :
> > At a last resort, you can remove /etc/pacman.d/gnupg, then run 
> > `pacman-key --init` and `pacman-key --populate archlinux`.
> 
> Did that, how long is pacman-key --init supposed to run? After approx 
> 30min with no changes in /etc/pacman.d/gnupg I stopped it and tried to 
> populate the keyring with the reported errors.

Is this a virtual machine? Random entropy may be limited there. Try to
generate some entropy (e.g. by typing on your keyboard) or start haveged, the
entropy harvesting daemon.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] [PATCH 1/1] systemd: restart services after update

2014-06-11 Thread Christian Hesse
Leonid Isaev  on Wed, 2014/06/11 12:13:
> Hi,
> 
> On Wed, Jun 11, 2014 at 12:15:18PM +0200, Christian Hesse wrote:
> > Date: Wed, 11 Jun 2014 12:15:18 +0200
> > From: Christian Hesse 
> > To: arch-general 
> > Cc: Christian Hesse 
> > Subject: [arch-general] [PATCH 1/1] systemd: restart services after update
> > X-Mailer: git-send-email 2.0.0
> > 
> > From: Christian Hesse 
> > 
> > ---
> >  systemd.install | 6 ++
> >  1 file changed, 6 insertions(+)
> > 
> > diff --git a/systemd.install b/systemd.install
> > index 5c370f7..11e97bc 100644
> > --- a/systemd.install
> > +++ b/systemd.install
> > @@ -27,6 +27,12 @@ maybe_reexec() {
> >  
> >if sd_booted; then
> >  systemctl --system daemon-reexec
> > +
> > +for SERVICE in systemd-journald systemd-logind systemd-machined
> > systemd-networkd systemd-resolved systemd-udevd; do
> > +  if systemctl is-active ${SERVICE} >/dev/null; then
> > +systemctl restart ${SERVICE}
> > +  fi
> > +done
> >fi
> >  }
> 
> Are you sure it's a good idea to restart things like that? Because this
> assumes that these daemons are independent -- is this a valid assumption?
> It seems that systemctl daemon-reexec _should_ reexec itself and its flock
> of helpers...

I do not know if it is a good idea...

At least restarting systemd-udevd manually did not have a bad impact.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


[arch-general] [PATCH 1/1] systemd: restart services after update

2014-06-11 Thread Christian Hesse
From: Christian Hesse 

---
 systemd.install | 6 ++
 1 file changed, 6 insertions(+)

diff --git a/systemd.install b/systemd.install
index 5c370f7..11e97bc 100644
--- a/systemd.install
+++ b/systemd.install
@@ -27,6 +27,12 @@ maybe_reexec() {
 
   if sd_booted; then
 systemctl --system daemon-reexec
+
+for SERVICE in systemd-journald systemd-logind systemd-machined 
systemd-networkd systemd-resolved systemd-udevd; do
+  if systemctl is-active ${SERVICE} >/dev/null; then
+systemctl restart ${SERVICE}
+  fi
+done
   fi
 }
 
-- 
2.0.0



[arch-general] Restart systemd related services on update

2014-06-11 Thread Christian Hesse
Hello everybody,

on systemd package update systemd.install is run, which calls 'systemctl
--system daemon-reexec'. This replaces pid 1 with a new process of updated
systemd.

However systemd comes with a lot of helper daemons (systemd-udevd,
systemd-journald, systemd-logind, ...). These are not restarted. For
systemd-213-9 systemd-udevd has a device-mapper fix that takes place only if
system is rebooted or 'systemd restart systemd-udevd' is run manually.
Any reason this is not done automatically?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] mkinitcpio systemd hook

2014-06-04 Thread Christian Hesse
Yamakaky  on Wed, 2014/06/04 09:29:
> Hi
> 
> For the 207 systemd release, the mkinitcpio's hook for systemd is broken 
> when used with the lvm2 one. It was nearly a year ago, any improvement ?

Package lvm2 provides hook sd-lvm2. You should use that when using systemd
enabled initramfs.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] static libraries in packages

2014-05-14 Thread Christian Hesse
Antonio Rojas  on Wed, 2014/05/14 11:51:
> Christian Hesse wrote:
> 
> > I think gcc, glibc, llvm and friends are ok. But zlib, mupdf,
> > mysql/mariadb and some others should go away.
> 
>  There was a to-do list to cleanup all static libs, so all remaining ones 
> are there for a reason. Check the changelogs for the specific reasons for 
> each package, e.g.
> 
> https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/zlib&id=83d05088a1cb1b56561b9ebe365d18d033752c72

Is it possible to fix binutils testsuite?

Remember the security flaws in zlib? Does anybody know what package has been
built against static zlib?

> https://projects.archlinux.org/svntogit/community.git/commit/trunk?h=packages/mupdf&id=c34f53eeb8efd6b4b033c2fdc58d0a329efdeeef

This brings the static libraries back, but there is no reason.

libmariadbclient ships with static libraries because a package from AUR
(neko) requires it. I think anybody should fix neko, but shipping official
packages with static libraries in this situation is just stupid.

Removing static libraries (and keeping them away!) should be treated more
strict.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] static libraries in packages

2014-05-14 Thread Christian Hesse
Doug Newgard  on Wed, 2014/05/14 03:38:
> On 2014-05-14 03:23, Christian Hesse wrote:
> > Hello everybody,
> > 
> > I just opened a bug report about libmariadbclient package shipping with 
> > static
> > libraries [0]. Taking a look at my libs dir I found some more...
> > 
> > # ll /usr/lib/*.a | wc -l
> > 210
> > 
> > Any reason packages start shipping static libraries again? Or is there 
> > any
> > build system with wrong settings in makepkg.conf?
> > 
> > [0] https://bugs.archlinux.org/task/40352
> 
> They were specifically re-enabled in libmariadbclient, not sure why, 
> though.
> 
> https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/mariadb&id=74ef541c06d70e373ce90dbae2e507185914651f
> 
> I only have 36 on my system, most related to gcc or glibc. What are all 
> of yours?

# pacman -Qoq /usr/lib/*.a | sort | uniq -c
  2 binutils
  1 bison
 36 boost
 24 clang
  1 dialog
  1 e2fsprogs
  1 elfutils
  3 gcc-multilib
 11 glibc
  2 gnu-efi-libs
  1 iproute2
  1 jansson
  1 libbsd
  1 libemu
  1 libgnome-sharp
  4 libmariadbclient
  1 libxp
  4 live-media
 97 llvm
  1 lrzip
  2 mupdf
  1 nss
  1 openobex
  1 orbit2
  1 qt4
  3 qt5-base
  1 qt5-tools
  1 ruby
  1 sdl
  1 tcl
  1 tk
  1 yasm
  1 zlib

I think gcc, glibc, llvm and friends are ok. But zlib, mupdf, mysql/mariadb
and some others should go away.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


[arch-general] static libraries in packages

2014-05-14 Thread Christian Hesse
Hello everybody,

I just opened a bug report about libmariadbclient package shipping with static
libraries [0]. Taking a look at my libs dir I found some more...

# ll /usr/lib/*.a | wc -l
210

Any reason packages start shipping static libraries again? Or is there any
build system with wrong settings in makepkg.conf?

[0] https://bugs.archlinux.org/task/40352
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


[arch-general] linux 3.14.2-1 and toolchain

2014-05-01 Thread Christian Hesse
Hello everybody,

linux 3.14.2-1 has been compiled with new toolchain, gcc 4.9.0 explicitly.
Now that it is in [core] compiling modules breaks... The new toolchain should
be moved as soon as possible.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] libpng 1.6.7 broken?

2013-12-03 Thread Christian Hesse
Simon Perry  on Tue, 2013/12/03 21:56:
> On 03/12/13, Christian Hesse wrote:
> 
> | I think libpng is right, and the image is broken. You can use pngfix
> (which | is part of libpng package) to fix the image:
> 
> Why does everything else that I listed display it properly though?

As you already noticed: Because it uses another version of libpng.

> I can't exactly use pngfix on images dynamically generated via a PHP
> forum.

I think you have three possibilities:

* The image is not generated dynamically but stored in a database. Simply
  update the image with the fixed one.
* The image is generated dynamically. Probably your server uses a version of
  libpng which is really old... Consider updating.
* File a bug report for libpng upstream.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] libpng 1.6.7 broken?

2013-12-03 Thread Christian Hesse
Simon Perry  on Tue, 2013/12/03 21:23:
> Hi all,
> 
> This following is an example of a thumbnail generated on a forum I help run.
> 
> This image: http://i.imgur.com/XxaSVKa.png
> 
> - Works in Firefox 25.0.1 on Windows 7
> - Works in Chrome 31.0.1650.57 m on Windows 7
> - Works in IE 10 on Win 7
> - Works in the Win 7 photo viewer
> - Works in Firefox for Android
> - Works in Chrome for Android
> 
> - Broken in Firefox 25.0.1 on Arch
> - Broken in Chromium 31.0.1650.57 on Arch
> - Broken when trying to load it into gpicview, The GIMP etc on Arch.
> 
> From what I can tell from here:
> 
> https://hg.mozilla.org/releases/mozilla-release/file/d20d499b219f/media/libpng/png.h
> 
> Firefox 25.0.1 for Windows appears to be built statically against libpng
> 1.5.17.
> 
> Any advice on where to report this, or what the best course of action
> is? If any of the devs have reported bugs to the libpng guys before,
> then I'd appreciate some help.

I think libpng is right, and the image is broken. You can use pngfix (which
is part of libpng package) to fix the image:

$ pngfix --out=XxaSVKa2.png XxaSVKa.png
IDAT TFB default 12 15 35843 67312 XxaSVKa.png

After that every application using libpng should be able to load the new png
file.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] [arch-dev-public] Dropping LXDM

2013-09-11 Thread Christian Hesse
Gaetan Bisson  on Tue, 2013/09/10 21:21:
> [2013-09-11 08:56:42 +0200] Bartłomiej Piotrowski:
> > On 2013-09-11 00:53, Allan McRae wrote:
> > > Also "thanks to its developers and recent changes in package" and
> > > "during 2 years since last release" make zero sense taken together.
> > 
> > What exactly doesn't make sense? The fact that LXDM is based on
> > ConsoleKit and even with git patch is unable to utilize logind correctly?
> 
> Upstream seems pretty active; do you mean that all the problems we have
> with our package are still present in git master? If not, we should try
> to convince upstream to make a release - and if they are not willing to
> we can always package a git snapshot.

I vote for this.

A lot of issues have been resolved in git master, some by myself. I have not
followed the changes in community package but used the git package from AUR
instead. It works great for me so far.

Some time ago dgod (the developer) stated he "would like to release it, but
the lxde release team has some problems to release it". He also thinks one
should not wait for a release but using git is stable enough.
I do not have any more information, but contacting him may be worth it. For
me git is just fine, I do understand packagers do prefer releases, though. ;)
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] Integrating Virus Scanning for Packages Handled by Pacman

2013-04-25 Thread Christian Hesse
Denis A. Altoé Falqueto  on Wed, 2013/04/24 17:18:
> I would say that the best way to assure you're using the correct file,
> as intended by the original developers, is to use digital signatures
> to check the sources. Not all projects sign their releases, but for
> those who do, you can use makepkg's support for GPG signature
> checking.

I do know some projects which sign their packages buy Arch PKGBUILDs do not
use them. Package 'postfix' is an example. Do the developers want bug reports
about that?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] [arch-dev-public] pacman-4.1

2013-04-05 Thread Christian Hesse
Leonidas Spyropoulos  on Fri, 2013/04/05 08:23:
> On Thu, Apr 4, 2013 at 11:25 PM, Allan McRae  wrote:
> > On 05/04/13 07:42, Sébastien Luttringer wrote:
> >> On Mon, Apr 1, 2013 at 8:39 AM, Allan McRae  wrote:
> >>
> >>> Hi,
> >>>
> >>> Pacman-4.1.0 is released and in the [testing] repos.  See my blog [1]
> >>> for details of what is new in this release.
> >>>
> >> With this commit[1], can we assume that install script should now be
> >> written in bash?
> >>
> >>
> >> [1]
> >> https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/pacman&id=b41b136a374fc85c559e06120b5dc82cd4d5aa28
> >>
> >
> > What did you think it was written in previously?  We have always used
> > bashisms.
> >
> > Allan
> >
> 
> I saw in the makepkg.conf that there are new COMPRESS vars. Any of
> these support parallel compression (thread level) like 7zip? And if
> yes, how can I enable them?

Yes, sure. ;)
I have:

COMPRESSGZ=(pigz -c -f -n)
COMPRESSBZ2=(pbzip2 -c -f)
COMPRESSXZ=(xz -T0 -c -z)

This requires these to be installed:

pigz 2.3-1
pbzip2 1.1.8-1
xz-git 5.1.2alpha.22.g5ea900c-1

xz-git is from AUR and supports parallel compression.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


[arch-general] mysqld (MySQL and MariaDB) polling

2013-02-25 Thread Christian Hesse
Hello everybody,

based on the thread "[RFC] Migration to MariaDB" in arch-dev-public by
Bartłomiej Piotrowski I started playing with MySQL and MariaDB. I noticed
both were polling every second:

<... futex resumed> )   = -1 ETIMEDOUT (Connection timed out)
futex(0x1d48050, FUTEX_WAKE_PRIVATE, 1) = 0
gettimeofday({1361806174, 246573}, NULL) = 0
futex(0x1d4808c, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME,
2849, {1361806175, 246573000},  

Searching Google I found that the problem may be caused by the leap second,
though the load is not as high as some articles describe. (Continues polling
vs. one poll a second.)

However the polling stops as soon as I manually set the time with date -s and
it start again if I run ntpdate to sync the time. As this is a notebook I
rebooted more than once since the leap second happened. ;)

What is going on? This is a mobile system, so it would be great to get rid of
mysqld eating my battery power.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] signature from "Thorsten Tpper " is unknown trust

2013-01-28 Thread Christian Hesse
William Giokas <1007...@gmail.com> on Sun, 2013/01/27 15:56:
> On Sun, Jan 27, 2013 at 03:19:14PM +0530, Sudaraka Wijesinghe wrote:
> > error: libdbi: signature from "Thorsten T��pper
> > " is unknown trust
> > error: libdbi-drivers: signature from "Thorsten T��pper
> > " is unknown trust
> > error: failed to commit transaction (invalid or corrupted package)
> > Errors occurred, no packages were upgraded.
> > 
> > I already tried removing the keys and recreating them using pacman-key.
> > And also cleared pacman cache so the the package is downloaded again.
> > 
> > Does this indicate tampering/file corruption or an expired key?
> > 
> > Should I file a bug report? (this is a community package)
> > 
> > Thanks.
> 
> Thorsten's gpg key expired a few days ago, but he has uploaded a new
> one. Run 
> 
> # pacman-key --refresh-keys
> 
> to get his new key (and also any other keys that happen to be out of
> date.

Running this from cron from time to time makes sense in my opinion. I've
already added this on my systems some time ago, though this is not the
default. Any objections adding this to pacman package?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] Help with making a bootable usbkey from arch for ssd drive firmware update

2013-01-16 Thread Christian Hesse
Mike Cloaked  on Wed, 2013/01/16 10:18:
> On Wed, Jan 16, 2013 at 6:56 AM, Christian Hesse  wrote:
> 
> > Mike Cloaked  on Tue, 2013/01/15 21:57:
> > > [...]
> > > If anyone can help advise on how to make a bootable usbkey to execute
> > this,
> > > I would really appreciate it.
> >
> > I do have the same drive and I updated the firmware booting the image off
> > grub. All just need is a working grub (2.0 here) installation and syslinux
> > (for memdisk). (Though doing it with syslinux should work as well.)
> >
> > The grub.cfg should have a config section that looks like this:
> >
> > menuentry "Update Crucial M4" {
> > set root='(hd0,1)'
> > linux16 /memdisk floppy
> > initrd16 /boot2880.img
> > }
> >
> > If the files are in place (probably in /boot/) the image should boot and
> > you
> > can successfully update the drives firmware.
> >
> > Mounting the boot image, modifying it or installing freedos is not
> > necessary.
> >
> 
> Thanks Christian - it sounds like you are running grub off the system
> already installed to the internal drive?  If that is the case then maybe I
> will have to install arch to the internal drive first and then add in the
> grub entries to execute the firmware update and boot to them?
> 
> However it would be nice to be able to run grub (2) off a usbkey and
> execute the firmware update before installing arch to the internal drives
> which then already have the updated ssd firmware.

Does not matter where grub is installed to. It just has to find and boot the
files.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] Help with making a bootable usbkey from arch for ssd drive firmware update

2013-01-15 Thread Christian Hesse
Mike Cloaked  on Tue, 2013/01/15 21:57:
> [...]
> If anyone can help advise on how to make a bootable usbkey to execute this,
> I would really appreciate it.

I do have the same drive and I updated the firmware booting the image off
grub. All just need is a working grub (2.0 here) installation and syslinux
(for memdisk). (Though doing it with syslinux should work as well.)

The grub.cfg should have a config section that looks like this:

menuentry "Update Crucial M4" {
set root='(hd0,1)'
linux16 /memdisk floppy
initrd16 /boot2880.img
}

If the files are in place (probably in /boot/) the image should boot and you
can successfully update the drives firmware.

Mounting the boot image, modifying it or installing freedos is not necessary.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] [arch-dev-public] Big changes to LVM2 in testing

2012-11-04 Thread Christian Hesse
Thomas Bächler  on Fri, 2012/11/02 11:31:
> Am 02.11.2012 10:59, schrieb Christian Hesse:
> > Thomas Bächler  on Thu, 2012/11/01 15:34:
> >> Am 01.11.2012 15:22, schrieb Christian Hesse:
> >>> Thomas Bächler  on Thu, 2012/11/01 02:05:
> >>>> I discovered some new awesomeness in LVM2 (okay, not THAT new, but
> >>>> still, so far unknown to me).
> >>>
> >>> Just to be sure and as "in testing" can lead to some confusion... This
> >>> has been enabled in 2.02.98-2?
> >>
> >> Yes, correct.
> > 
> > Now that we have bigger changes to the package... How about moving
> > everything to /usr/ and getting rid of the complicated configure call?
> > 
> > I have not tested myself yet, but it should work. I think this is a big
> > step forward for the usr-move in Arch.
> 
> Sounds like a good idea. Sadly, the configure will not become much simpler.

You are right, it does not...

However 2.02.98-3 works for me like a charm. Thanks!
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] [arch-dev-public] Big changes to LVM2 in testing

2012-11-02 Thread Christian Hesse
Thomas Bächler  on Thu, 2012/11/01 15:34:
> Am 01.11.2012 15:22, schrieb Christian Hesse:
> > Thomas Bächler  on Thu, 2012/11/01 02:05:
> >> I discovered some new awesomeness in LVM2 (okay, not THAT new, but
> >> still, so far unknown to me).
> > 
> > Just to be sure and as "in testing" can lead to some confusion... This has
> > been enabled in 2.02.98-2?
> 
> Yes, correct.

Now that we have bigger changes to the package... How about moving everything
to /usr/ and getting rid of the complicated configure call?

I have not tested myself yet, but it should work. I think this is a big step
forward for the usr-move in Arch.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


Re: [arch-general] [arch-dev-public] Big changes to LVM2 in testing

2012-11-01 Thread Christian Hesse
Thomas Bächler  on Thu, 2012/11/01 02:05:
> I discovered some new awesomeness in LVM2 (okay, not THAT new, but
> still, so far unknown to me).

Just to be sure and as "in testing" can lead to some confusion... This has
been enabled in 2.02.98-2?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] [linux] ext4 data corruption bug

2012-10-24 Thread Christian Hesse
Dave Reisner  on Wed, 2012/10/24 08:23:
> On Wed, Oct 24, 2012 at 02:00:01PM +0200, Christian Hesse wrote:
> > Hello everybody,
> > 
> > a thread has been started on lkml discussing a serious ext4 data
> > corruption bug in latest stable kernels. [0]
> > 
> > Looks like the root cause is not really clear so far. Reverting the
> > commit in question should fix the problem though.
> > 
> > [0] https://lkml.org/lkml/2012/10/23/690
>
> Why would you suggest a revert and that "the root cause is not really
> clear" when tytso has already proposed a fix along with a detailed
> explanation of why the bug occurs?

Tytso writes about Eric reviewing his patch:

> Until then, it should also be fine to just revert that commit on the
> other stable kernels.

Though later in the thread Tytso writes:

> P.S.  This is a list of all of the commits between v3.6.1 and v3.6.2
> (there were no ext4-related changes between v3.6.2 and v3.6.3), and a
> quick analysis of the patch.  The last commit, 14b4ed2, is the only
> one that I could see as potentially being problematic, which is why
> I've been pushing so hard on this one even though my original analysis
> doesn't seem to be correct, and Eric and I can't see how the change in
> 14b4ed2 could be causing the fs corruption.

So it looks like nobody really knows what to do best...
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


[arch-general] [linux] ext4 data corruption bug

2012-10-24 Thread Christian Hesse
Hello everybody,

a thread has been started on lkml discussing a serious ext4 data corruption
bug in latest stable kernels. [0]

Looks like the root cause is not really clear so far. Reverting the commit in
question should fix the problem though.

[0] https://lkml.org/lkml/2012/10/23/690
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] lib -> usr/lib move, glibc and curl

2012-08-21 Thread Christian Hesse
Paul Gideon Dann  on Tue, 2012/08/21 11:01:
> On Tuesday 21 Aug 2012 11:05:07 Christian Hesse wrote:
> > Oh, the commands in the wiki exclude curl now. Did not notice that.
> > 
> > I am fine with the situation, I can deal with these things. Hopefully
> > others will read the wiki. :D
> 
> For those like me that followed the news article's instructions first and
> ran into the curl issue, I fixed this by coping the old curl package (that
> was just replaced) from /var/cache/pacman/pkg into an empty subdirectory in
> my home directory and unpacked it.  Then, as root I replaced the 
> /usr/lib/libcurl.so.4.2.0 library with the one found in the package.  This 
> fixed pacman, allowing me to downgrade curl properly with "pacman -U".
> 
> The rest can then be done as described on the wiki page.

That is exactly what I did. ;)

And do not forget to reinstall curl to have the recent version in place.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] lib -> usr/lib move, glibc and curl

2012-08-21 Thread Christian Hesse
Thomas Bächler  on Tue, 2012/08/21 10:43:
> Am 21.08.2012 10:25, schrieb Christian Hesse:
> > pacman -Syud --ignore glibc
> > 
> > and ended in a broken package manager. pacman is linked against libcurl,
> > which is compiled against glibc 2.16.0 and includes versioned symbols.
> > Luckily I had an old curl package around to temporarily fix the problem
> > and update the system.
> > 
> > Others may be out of luck, so... Do you think this needs some more
> > investigation?
> 
> This is known, and I don't think we can properly fix it, at least not
> anymore.

Oh, the commands in the wiki exclude curl now. Did not notice that.

I am fine with the situation, I can deal with these things. Hopefully others
will read the wiki. :D
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


signature.asc
Description: PGP signature


[arch-general] lib -> usr/lib move, glibc and curl

2012-08-21 Thread Christian Hesse
Hello everybody,

I just updated an old system and had to go through the lib -> usr/lib move. I
did an

pacman -Syud --ignore glibc

and ended in a broken package manager. pacman is linked against libcurl,
which is compiled against glibc 2.16.0 and includes versioned symbols.
Luckily I had an old curl package around to temporarily fix the problem and
update the system.

Others may be out of luck, so... Do you think this needs some more
investigation?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] How do you extract version from pacman?

2012-07-27 Thread Christian Hesse
Oon-Ee Ng  on Fri, 2012/07/27 11:33:
> Thanks to Morris and Christian (karol too, but rather not have an
> additional package). Can't seem to find a reference to this specific
> behaviour on the pacman manpage, unfortunately, but it'll simplify my
> script.
> 
> Looks like there's no way not to have the last -4 included though, but
> since that's version reference and quite important, I guess no way
> around me having to sed it out. Thanks again =)

Or use cut for that as well:

$ pacman -Q virtualbox | cut -d' ' -f2 | cut -d- -f1
4.1.18
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] lib -> usr/lib

2012-07-26 Thread Christian Hesse
Christian Hesse  on Thu, 2012/07/26 12:46:
> Christian Hesse  on Thu, 2012/07/26 10:27:
> > Rodrigo Rivas  on Thu, 2012/07/26 10:18:
> > > On Thu, Jul 26, 2012 at 8:53 AM, Jayesh Badwaik
> > > wrote:
> > > 
> > > > Why will /opt have to go?
> > > >
> > > 
> > > Well, then:
> > > 
> > > /opt -> /usr/opt
> > > 
> > > And everyone will be happy :)
> > > 
> > > BTW, will there be the move from /bin to /usr/bin in the foreseeable
> > > future?
> > 
> > Good question. I can not remember having seen and recent plans on it.
> > 
> > This gives an idea about which packages still have files in /bin/:
> > 
> > $ pacman -Qoq /bin/* | sort | uniq
> > 
> > And the same for /sbin/:
> > 
> > $ pacman -Qoq /sbin/* | sort | uniq
> > 
> > No single file that does not belong to a package here... Good conditions
> > for a smooth update. ;)
> 
> That said i still have two files linked from /usr/sbin/ to /sbin/...
> 
> /usr/sbin/dhcpcd -> /sbin/dhcpcd
> /usr/sbin/ip -> /sbin/ip
> 
> When are these supposed to go away or completely moved to /usr/?

I was wrong, there are some more:

/bin/ping6 -> /usr/bin/ping6
/bin/awk -> gawk
/bin/gawk -> /usr/bin/gawk
/bin/ping -> /usr/bin/ping
/bin/hostname -> /usr/bin/hostname
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] lib -> usr/lib

2012-07-26 Thread Christian Hesse
Christian Hesse  on Thu, 2012/07/26 10:27:
> Rodrigo Rivas  on Thu, 2012/07/26 10:18:
> > On Thu, Jul 26, 2012 at 8:53 AM, Jayesh Badwaik
> > wrote:
> > 
> > > Why will /opt have to go?
> > >
> > 
> > Well, then:
> > 
> > /opt -> /usr/opt
> > 
> > And everyone will be happy :)
> > 
> > BTW, will there be the move from /bin to /usr/bin in the foreseeable
> > future?
> 
> Good question. I can not remember having seen and recent plans on it.
> 
> This gives an idea about which packages still have files in /bin/:
> 
> $ pacman -Qoq /bin/* | sort | uniq
> 
> And the same for /sbin/:
> 
> $ pacman -Qoq /sbin/* | sort | uniq
> 
> No single file that does not belong to a package here... Good conditions
> for a smooth update. ;)

That said i still have two files linked from /usr/sbin/ to /sbin/...

/usr/sbin/dhcpcd -> /sbin/dhcpcd
/usr/sbin/ip -> /sbin/ip

When are these supposed to go away or completely moved to /usr/?
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] How do you extract version from pacman?

2012-07-26 Thread Christian Hesse
Morris  on Thu, 2012/07/26 11:24:
> On Thu, Jul 26, 2012 at 11:19 AM, Oon-Ee Ng  wrote:
> 
> > With the new virtualbox update I had to obtain virtualbox version in a
> > script (and of course, virtualbox binary doesn't have a sane --version
> > parameter...).
> >
> > Anyway, its pretty simple to pacman -Qi virtualbox | grep -e
> > "^Version" | awk '{print $3}' | sed 's|-.||'
> >
> > Perhaps it may be nice to have a pacman flag to obtain just the
> > version string. I'll file a feature request, but before that anyone
> > has an comments on why it would be useless or a bad idea?
> >
> 
> you could just use:
> $ pacman -Q virtualbox | awk '{print $2}'
> 4.1.18-4

Or the same with cut:

$ pacman -Q virtualbox | cut -d' ' -f2
4.1.18-4

Getting the complete package information is not required.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] lib -> usr/lib

2012-07-26 Thread Christian Hesse
Rodrigo Rivas  on Thu, 2012/07/26 10:18:
> On Thu, Jul 26, 2012 at 8:53 AM, Jayesh Badwaik
> wrote:
> 
> > Why will /opt have to go?
> >
> 
> Well, then:
> 
> /opt -> /usr/opt
> 
> And everyone will be happy :)
> 
> BTW, will there be the move from /bin to /usr/bin in the foreseeable future?

Good question. I can not remember having seen and recent plans on it.

This gives an idea about which packages still have files in /bin/:

$ pacman -Qoq /bin/* | sort | uniq

And the same for /sbin/:

$ pacman -Qoq /sbin/* | sort | uniq

No single file that does not belong to a package here... Good conditions for a
smooth update. ;)
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] Upcoming changes to virtualbox

2012-07-24 Thread Christian Hesse
Sébastien Luttringer  on Mon, 2012/07/23 02:01:
> Some changes will be introduced in the next package release of virtualbox.

This is when virtualbox 4.1.20 is released? Have not seen anything in the
testing repos yet.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] Upcoming changes to virtualbox

2012-07-23 Thread Christian Hesse
Sébastien Luttringer  on Mon, 2012/07/23 03:04:
> On Mon, Jul 23, 2012 at 2:17 AM, Karol Babioch  wrote: 
> > Are there systemd unit files for this?
>
> Not yet. Patch welcomed.

There are, please take a look at AUR package dkms-systemd.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] python needs /usr/include/?

2012-07-21 Thread Christian Hesse
Rodrigo Rivas  on Sat, 2012/07/21 00:36:
> On Sat, Jul 21, 2012 at 12:25 AM, Rodrigo Rivas  > wrote:
> 
> > On Fri, Jul 20, 2012 at 8:32 PM, Christian Hesse  wrote:
> >
> >> Hello everybody,
> >>
> >> I am creating live media and want to reduce size. After
> >> removing /usr/include/ wicd fails to start because of a missing header
> >> file.
> >>
> >
> > Do you know which one is trying to read?
> > If not, you could try running it with `strace` to see what it is looking
> > for:
> >
> 
> Replying to myself, the file it reads is
> `/usr/include/python2.7/pyconfig.h`  (for python2).
> 
> You can see the relevant code in the deeps of the initialization routines
> of the python library, sysconfig.py:
> 
> # load the installed pyconfig.h:
> config_h = get_config_h_filename()
> try:
> with open(config_h) as f:
> parse_config_h(f, vars)
> except IOError, e:
> msg = "invalid Python installation: unable to open %s" % config_h
> if hasattr(e, "strerror"):
> msg = msg + " (%s)" % e.strerror
> raise IOError(msg)
> 
> It seems to be used to discover the configuration of the current python
> installation.
> 
> Just copying this file to your live media should be enough to make it
> happy. Or alternatively, you might modify the sysconfig.py to read the file
> from other place (`/usr/lib/python2.7` for example).

At the moment I do this

find /usr/include/ -type f -and -name -not "pyconfig.h" -delete
find /usr/include/ -type d -empty -delete

instead of a simple "rm -r /usr/include/".

However the question is whether or not Arch should move the file
to /usr/lib/python2.7/. As said before, my understanding is that files with
configuration data used for runtime should not live in /usr/include/.
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


[arch-general] python needs /usr/include/?

2012-07-20 Thread Christian Hesse
Hello everybody,

I am creating live media and want to reduce size. After
removing /usr/include/ wicd fails to start because of a missing header file.
Is this expected behavior? I thought /usr/include/ is only needed for
compilation and not as runtime dependency. 
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] Updating AUR package with pacman

2012-07-19 Thread Christian Hesse
Don deJuan  on Thu, 2012/07/19 09:53:
> On 07/19/2012 09:52 AM, Christian Hesse wrote:
> > Thorsten Jolitz  on Thu, 2012/07/19 18:44:
> >> [...] So this would render my git-clone of the AUR repo superfluous,
> >> [...]
> >
> > Oh, wait! Is AUR accessible via git? That would be really great!
> >
> 
>  From the wiki:
>   Git Repo
> 
> A Git Repo of the AUR is maintained by Thomas Dziedzic providing package 
> history among other things. It is updated at least once a day. To clone 
> the repository (several hundred MB):
> 
> $ git clone git://pkgbuild.com/aur-mirror.git

Nice!

Though I would prefer a rsync interface. I do not need package history and
would like to save the disk space...
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] Updating AUR package with pacman

2012-07-19 Thread Christian Hesse
Thorsten Jolitz  on Thu, 2012/07/19 18:44:
> [...] So this would render my git-clone of the AUR repo superfluous, [...]

Oh, wait! Is AUR accessible via git? That would be really great!
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] Quick question about post-MBR gap?

2012-07-18 Thread Christian Hesse
mike cloaked  on Wed, 2012/07/18 19:40:
> I am planning a test install using the new arch-install-scripts via
> the latest netinstall images from releng (from today's date).
> 
> I know that for a system where I blow away all previous disc
> partitions and partition from scratch I can create a 2MiB partition
> (using MBR and NOT GPT partitioning) before the first formatted
> partition on the HD and install grub2 during the base install.
> However can someone please tell me explicitly if, for a system with
> only BIOS (no UEFI at all), and no GPT partitioning but just plain old
> MBR partitioning - is the recommended 2MiB post-MBR gap still a
> "requirement" for that specific situation for grub2 to work? I can't
> find that as an explicit statement in any of the documentation that I
> have read for installs/grub2/partitioning! i.e. does grub2 still need
> to embed the core.img file in the post-MBR gap as the preferred and
> dev recommended approach in this case?
> 
> The reason I would like to have that explicit answer is that if I want
> to install arch on a machine which has a pre-existing NTFS partition,
> and possibly host-protected partition as well for Windows recovery, at
> the start of the drive, then if the 2MiB post-MBR gap is a requirement
> (rather than a nicety) for grub2 with BIOS and MBR partitioning (but
> no GPT partitioning or UEFI) then unless the drive is re-partitioned
> and the NTFS partition reduced in size and moved out by 2MiB then
> there could be problems? However doing that partition jinking about
> might itself lead to a few issues!
> 
> I am going to do an install with new partitioning on an old laptop to
> check that I can successfully use the new install system (without AIF)
> and hopefully that will work, but I also have other machines with
> existing and important (to me) Windows partitions that I would really
> like to NOT corrupt when installing arch to the partitions on their
> drives.
> 
> The other reason I am asking this question is that I also have
> existing dual boot laptops with Windows XP and arch with BIOS and MBR
> partitioning - and at some point it would presumably be sensible to
> move from the existing grub to grub2 - and on these systems where I
> have already checked that there is only a 64 sector post-MBR gap -
> will this lead to problems if I change from grub to grub2 if I don't
> change the partitions to have a 2MiB post-MBR gap?
> 
> Thanks for any help on this - I have been doing reading and trying to
> prepare without looking an idiot and being a good arch admin, but
> there is quite a lot to read and I still can't find the answer to the
> explicit question above!

Grub 2.x is fine with embedding its core.img into about 31kB. That is
starting sector 2 directly after the MBR and having first partition start at
sector 63. (Old disk alignment to cylinders, you should not use that -
especially with hard drives with 4k blocks or SSDs.)

However this could become a problem if core.img increases with time. I think
even the wrong compiler flags are enough to exceed the limit.

You are perfectly fine if your partitions are aligned to 1MB-Boundaries. Grub
has 1023 sectors to embed its core.img.

Having GPT partition table you need a BIOS boot partition (type EF02) that
Grub uses to embed its core.img. Note that the GPT partition table itself
starts from sector 2, so you should not write anything there!
However you should note that only Windows 7 64 Bit can boot from GPT
partition table on UEFI Hardware. Every other MS OS is out of luck. (At least
without faking anything, you could use gptsync for example.)

Hope that helps...
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] Glibc 2.16.0-2 and /lib problem : the answer ;)

2012-07-08 Thread Christian Hesse
DR  on Sun, 2012/07/08 23:37:
> On Sun, Jul 8, 2012 at 5:17 AM, Christian Hesse  wrote:
> 
> > Jonathan Hudson  on Sat, 2012/07/07 17:00:
> > > On Sat, 07 Jul 2012 17:35:56 +0200, Arno Gaboury wrote:
> > >
> > > >On 07/07/2012 05:27 PM, fredbezies wrote:
> > > >> Well, Tom gave the answer. Boot on rescue-CD / rescue USB-key.
> > > >>
> > > >> Remove /lib.
> > > >>
> > > >> And create a symlink : ln -sf /usr/lib lib
> > > >>
> > > >> I think there will be a lot of problem for a lot of users when glibc
> > > >> 2.16.0-x will be uploaded on core.
> > > >>
> > > >> Well, I think I have to do this mistake. I *do* know that forcing
> > > >> wasn't a good idea :|
> > > >>
> > > >As I will need to do the update too, can someone explain briefly  in
> > > >this list what shoule be done to avoid such a situation?
> > > >
> > > >TY in advance.
> > > >
> > >
> > > It may still fail
> > >
> > > error: extract: not overwriting dir with file lib
> > > error: problem occurred while upgrading glibc
> > > call to execv failed (No such file or directory)
> > > error: command failed to execute correctly
> > > error: could not commit transaction
> > > error: failed to commit transaction (transaction aborted)
> > > Errors occurred, no packages were upgraded.
> > >
> > > At this the machine is toast. Hope magic-sysreq is enabled, and you
> > > have rescue disk ...
> >
> > Same problem here. (Though I have a rescue system on disk, so no real
> > hurt.)
> >
> > /lib still existed in filesystem, though it was empty.
> >
> The simplest solution might be: /usr/lib/ld-2.16.so ln -s /usr/lib /lib
> Haven't tested that, though.

I think you need to specify full path to ln then:

/usr/lib/ld-2.16.so /bin/ln -s /usr/lib /lib

or use busybox:

busybox ln -s /usr/lib /lib

However this does not help if it comes to your mind after you closed the root
terminal. ;)
-- 
main(a,b){char*/*Schoene Gruesse */c="B?IJj;M"
"EHCX:;";for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] Glibc 2.16.0-2 and /lib problem : the answer ;)

2012-07-07 Thread Christian Hesse
Jonathan Hudson  on Sat, 2012/07/07 17:00:
> On Sat, 07 Jul 2012 17:35:56 +0200, Arno Gaboury wrote:
> 
> >On 07/07/2012 05:27 PM, fredbezies wrote:
> >> Well, Tom gave the answer. Boot on rescue-CD / rescue USB-key.
> >>
> >> Remove /lib.
> >>
> >> And create a symlink : ln -sf /usr/lib lib
> >>
> >> I think there will be a lot of problem for a lot of users when glibc
> >> 2.16.0-x will be uploaded on core.
> >>
> >> Well, I think I have to do this mistake. I *do* know that forcing
> >> wasn't a good idea :|
> >>
> >As I will need to do the update too, can someone explain briefly  in 
> >this list what shoule be done to avoid such a situation?
> >
> >TY in advance.
> >
> 
> It may still fail 
> 
> error: extract: not overwriting dir with file lib
> error: problem occurred while upgrading glibc
> call to execv failed (No such file or directory)
> error: command failed to execute correctly
> error: could not commit transaction
> error: failed to commit transaction (transaction aborted)
> Errors occurred, no packages were upgraded.
> 
> At this the machine is toast. Hope magic-sysreq is enabled, and you
> have rescue disk ...

Same problem here. (Though I have a rescue system on disk, so no real hurt.)

/lib still existed in filesystem, though it was empty.
-- 
main(a,b){char*/*Schoene Gruesse */c="B?IJj;M"
"EHCX:;";for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] drop slim in favor of lightdm

2012-05-09 Thread Christian Hesse
Christian Hesse  on Tue, 2012/05/08 10:35:
> Any thoughts on that?

Ok, some notes from myself...

There were two reasons why I did not use lxdm:

* I thought it did not work with challenge response authentication via pam.
  Obviously this is not true: You can enter the password only only, but it is
  tested for every pam prompt. So I can enter unix password or oath token -
  both work.
  The only "problem" is that it does not show the pam message ("One-time
  password (OATH) for ..." - but I can live with that.

* I had trouble interactively selecting a session from lxdm. It took me some
  time to find the cause: The greeter did not give session type to lxdm when
  no language selection dropdown was shown.
  I fixed that (see https://bugs.archlinux.org/task/29814), now everything
  works fine.

Additionally it seems to fix a problem with mouse cursor...

So for now I will stick with lxdm I think. Thus I am fine with not having
lightdm in the official repos.
-- 
main(a,b){char*/*Schoene Gruesse */c="B?IJj;M"
"EHCX:;";for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] drop slim in favor of lightdm

2012-05-08 Thread Christian Hesse
Allan McRae  on Tue, 2012/05/08 19:14:
> On 08/05/12 18:35, Christian Hesse wrote:
> > Hello everybody,
> > 
> > slim has some known security weaknesses (for example it has no separate
> > greeter process thus the graphical interface is running with super user
> > privileges) and a lot of open bugs. Additionally it does not support
> > latest packages (consolekit and friends) out of the box.
> > Though lately the SVN got some commits and a new version has been released
> > the arch package has not been updated since it was flagged out of date in
> > February.
> > 
> > I propose to drop slim from [extra] and replace it with lightdm and
> > lightdm-gtk-greeter. This is a very active project with responsive
> > upstream developer. Security is a key feature and it integrates with
> > latest desktop techniques really well. The AUR package for lightdm has
> > 259 votes at the time of writing.
> > 
> > Any thoughts on that?
> 
> https://bugs.archlinux.org/index.php?string=slim
> 
> Seems to be a severe lack of bug reports made if there are so many
> issues with it...

The upstream bug tracker [0] has a lot more... And for some of them patches
exist [1] but never got included.

However, I would not mind to keep it. But I vote for moving lightdm to
[extra] or [community] as well.

[0] http://developer.berlios.de/bugs/?group_id=2663
[1] http://developer.berlios.de/patch/?group_id=2663
-- 
main(a,b){char*/*Schoene Gruesse */c="B?IJj;M"
"EHCX:;";for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] drop slim in favor of lightdm

2012-05-08 Thread Christian Hesse
John Hutchison  on Tue, 2012/05/08 03:53:
> Am 08.05.2012 03:35, schrieb Christian Hesse:
> > I propose to drop slim from [extra] and replace it with lightdm and 
> > lightdm-gtk-greeter.
> 
> Why not just provide both?

I would be just fine with that. ;)

Though it is not a good idea to ship packages with security flaws in general.
-- 
main(a,b){char*/*Schoene Gruesse */c="B?IJj;M"
"EHCX:;";for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


[arch-general] drop slim in favor of lightdm

2012-05-08 Thread Christian Hesse
Hello everybody,

slim has some known security weaknesses (for example it has no separate
greeter process thus the graphical interface is running with super user
privileges) and a lot of open bugs. Additionally it does not support latest
packages (consolekit and friends) out of the box.
Though lately the SVN got some commits and a new version has been released
the arch package has not been updated since it was flagged out of date in
February.

I propose to drop slim from [extra] and replace it with lightdm and
lightdm-gtk-greeter. This is a very active project with responsive upstream
developer. Security is a key feature and it integrates with latest desktop
techniques really well. The AUR package for lightdm has 259 votes at the time
of writing.

Any thoughts on that?
-- 
main(a,b){char*/*Schoene Gruesse */c="B?IJj;M"
"EHCX:;";for(a/*Chris   get my mail address:*/=0;b=c[a++];)
putchar(b-1/(/*   gcc -o sig sig.c && ./sig*/b/42*2-3)*42);}


Re: [arch-general] LVM on LUKS and fsck

2012-05-05 Thread Christian Hesse
Mauro Santos  on Sun, 2012/05/06 03:16:
> I have decided to give encryption a shot and I have started with some
> bootable usb disks I have as emergency/recovery media.
> 
> Everything works and partitions seem to mount just fine, but during boot
> in the fsck fase, root is apparently checked twice and home apparently
> doesn't get checked.
> 
> root: clean, 177630/524288 files, 1430174/2097152 blocks
> boot: clean, 34/65536 files, 50998/262144 blocks
> root: clean, 12450/2162688 files, 7055618/8649728 blocks
> 
> Using dumpe2fs to check how many blocks my root and home volumes have I
> can confirm that the first root line really corresponds to root and the
> second root line corresponds to home.
> 
> Does anyone know if this is a (known) bug or am I missing something?
> 
> My partition/volumes setup is as follows:
> 
> boot
> luks
> -lvm
> --root
> --swap
> --home
> 
> menu.lst:
> title  Arch Linux
> root   (hd0,0)
> kernel /vmlinuz-linux root=/dev/lvmvol/root
> cryptdevice=/dev/disk/by-uuid/d9cfc224-4ece-489b-a231-f5a5a876354f:luksvol
> ro quiet
> initrd /initramfs-linux.img
> 
> fstab:
> UUID=b4a938a4-1a49-42dc-9535-472ef264 /boot ext2 defaults,noatime 0 1
> /dev/lvmvol/root / ext4 defaults,noatime 0 1
> /dev/lvmvol/home /home ext4 defaults,noatime 0 2
> /dev/lvmvol/swap none swap defaults 0 0
> 
> mkinitcpio.conf:
> MODULES=""
> BINARIES=""
> FILES=""
> HOOKS="base udev usb usbinput keymap encrypt lvm2 autodetect pata scsi
> sata filesystems"
> 
> 

I suppose everything is fine except that your home partition has label "root".

tune2fs -L home /dev/path/to/home
-- 
Best regards,
Chris
 O< ascii ribbon campaign
   stop html mail - www.asciiribbon.org


Re: [arch-general] Package signing: database signatures?

2012-03-05 Thread Christian Hesse
Florian Pritz  on Mon, 05 Mar 2012 10:42:15 +0100:
> On 05.03.2012 10:39, Christian Hesse wrote:
> > Hello everybody,
> > 
> > afaik, database files in official repositories are not signed yet. Are
> > they?
> > 
> > This forces one to set SigLevel to 'Optional' instead of 'Required'. Now
> > if anybody wants to provide an infected package he/she only needs to
> > provide no signature at all and the package is happily accepted, no?
> > 
> > So when will database files from official packages be signed?
> > 
> > And even more interesting: Does it make sense to add a new option
> > 'PkgRequired'? This could force valid signatures for packages and make it
> > optional for database files.
> 
> You should read pacman.conf(5) "PACKAGE AND DATABASE SIGNATURE CHECKING"
> and use "Optional PackageRequired"

I misread the lines about combining of the options and prefixes.
My fault, I am perfectly happy now. ;)

Sorry for the noise!
-- 
Best regards,
Chris
 O< ascii ribbon campaign
   stop html mail - www.asciiribbon.org


[arch-general] Package signing: database signatures?

2012-03-05 Thread Christian Hesse
Hello everybody,

afaik, database files in official repositories are not signed yet. Are they?

This forces one to set SigLevel to 'Optional' instead of 'Required'. Now if
anybody wants to provide an infected package he/she only needs to provide no
signature at all and the package is happily accepted, no?

So when will database files from official packages be signed?

And even more interesting: Does it make sense to add a new option
'PkgRequired'? This could force valid signatures for packages and make it
optional for database files.
-- 
Best regards,
Chris
 O< ascii ribbon campaign
   stop html mail - www.asciiribbon.org


  1   2   >