[arch-general] [News] DigitalOcean "supporting" Arch Linux

2018-09-26 Thread Eduardo Machado via arch-general
Hi folks,

Firstly, i am not a digitalocean affiliated, but i use their services.
A long time ago, Arch Linux was one the supported OSes, latter they dropped
this support.
Now, although it is not officially supported again they just launched the
ability to upload Custom Images into DigitalOcean. You can now import the
OS of your choice directly into DigitalOcean and start a Droplet. [1]


[1] https://blog.digitalocean.com/custom-images/
---
   Eduardo M. Machado


Re: [arch-general] libxfont: removing fontsproto breaks dependency 'fontsproto>=2.1.3'

2018-02-14 Thread Eduardo Machado via arch-general
Thanks for all your thoughts.
it will help me try something to better maintain my boxes.


Re: [arch-general] libxfont: removing fontsproto breaks dependency 'fontsproto>=2.1.3'

2018-02-14 Thread Eduardo Machado via arch-general
2018-02-10 1:55 GMT-02:00 Doug Newgard via arch-general <
arch-general@archlinux.org>:

> Not gremlins, just an old package that never got cleaned out. Pacman
> doesn't do
> this automatically.
>

Sorry to hijack this trhead,

but so that pacman does not clean automagically this kind of packages. What
is the recommended way to keep a clean box?


Re: [arch-general] systemd new dependencies impede using OpenRC

2015-07-06 Thread Eduardo Machado
2015-07-02 18:46 GMT-03:00 Daniel Micay danielmi...@gmail.com:

  Now, it would be technically possible to replace *systemd* in base with a
  generic init-system which could be provided by both *systemd* and
 *openrc*,
  but that would make things much more complicated and *much* more effort
 to
  maintain.

 Packages don't have a dependency on systemd because they need an init
 system. They have a dependency on systemd IPC interfaces and/or
 libraries not provided by openrc. If they depend on systemd without
 needing something like this, it's a (very minor) bug to report.

 Supporting alternative implementations of those interfaces (like
 Debian's systemd-shim) would mean a lot of extra work across the
 distribution.

 Arch supports one specific /bin/sh implementation, one standard C
 library, one standard C++ library, one C++ exception model, one
 toolchain for building the system, etc. It also tends to only support
 one specific implementation of a command-line utility as the main tool
 and others have to be namespaced. Packages like util-linux/coreutils
 aren't split into little pieces and there's no equivalent to
 update-alternatives. Sure, packages like musl, libc++, libc++abi and
 busybox are in the repositories but not in a way that can actually
 replace anything in the base system, it just lives alongside it without
 being used by any other packages.

 Arch only ever supported one init system until the transition period to
 systemd where it supported two. The old initscripts adopted systemd
 utilities like systemd-tmpfiles before going away anyway, and the old
 scripts were still supported. It was convergence to a single supported
 init system rather than two choices for the base system living alongside
 each other.

 Making technical decisions and then going through with them with proper
 integration into other packages is the only way that things are going to
 be polished. The alternative is a *lot* of extra complexity, development
 effort and bugs.


Hi Daniel,

i wanna apologize if i misspelled something and made more damage than good.

And this post of yours is what i am certain that all the users would like
to see, and i have to commed.
It was a kind of polite and really technical note.

I know that when we work in projects like this, we work almost for love,
it's demanding and sometimes we get frustrating with the feeling that our
work are not getting recognized.
I'm sure it is not the case for anyone here, but when we see a phrase like
the user opinion has no weight it generates the same feeling that i tried
to describe above.

Note that I am not advocating any solution. but what i would like to hear
is that de devs heard the users, technically and non-technically opinions,
weighted them with the pros and cons, and them choosed a solution with some
benefits.

Didn't you agree that this is a really better statement? ;)


Best regards, and again, sorry, i didn't want to polemize.


Re: [arch-general] systemd new dependencies impede using OpenRC

2015-07-02 Thread Eduardo Machado
2015-07-02 10:24 GMT-03:00 Daniel Micay danielmi...@gmail.com:

 On 01/07/15 02:36 PM, João Miguel wrote:
  First of all, thank you for such a quick reply.
 
  Now, I don't want to preach. But I will not pretend I chose Arch Linux at
  random. I chose it for many reasons, an important one of them being that
  I liked the Arch Way, it made sense to me, and it seemed you were
  following it. Now it seems to belong to a forgotten past.
 
  On Wed, Jul 01, 2015 at 10:34:01AM -0400, Daniel Micay wrote:
  Arch is as much a systemd-based distribution as it is a Pacman-based
  distribution at this point. (...)
  Is it now? https://wiki.archlinux.org/index.php/The_Arch_Way

 That's an unprotected page on the wiki, not an authoritative source on
 anything to do with the distribution.

 Arch has always been a simple distribution in terms of the developer
 perspective, not the user one. Using systemd made it simpler than ever
 in that regard because much more work is taken care of by both the
 systemd developers and all of the projects shipping unit files.

 It has never been a minimalist distribution. Splitting packages is rare
 compared to other distributions, and dependencies aren't made optional
 whenever possible.


I disagree, it is indeed a minimalist, i only install what i want. ok, it
can be not the most minimalist, but it is, in a good deal.



 It has also never been a distribution offering much user freedom /
 choice compared to Gentoo and even Debian. There are very few cases
 where there are multiple packages offering different configurations of
 the same project. There's no equivalent to update-alternatives or the
 comparable uses of USE flags. Changing /bin/sh from Bash will be broken,
 as will changing the python symlink to point to python2 instead of
 python3 even though this works on some other distributions. It doesn't
 strive to offer choices like this, and never has. It would mean a *lot*
 more complexity on the development side of things along with major
 deviations from upstream.

 Arch is the *opposite* of a user-centric freedom. The opinion of users
 has no weight here. Only the developers have an opinion, and there
 aren't voting systems as there are in Debian. Technical decisions are
 made based on merit via consensus among the developers, not popularity.


WHAT? The opinion of users has no weight here ?!?!?!
I came to Arch because th way it is built and marketed looked like a real
community and user centric, user centric not to be as easy as pushing a
button, but in the way that i can install, configure, and use it the way i
want to.
Is that real?

If Arch is becoming a personal distribution to attend the developers, so
let it clrealy in the website, so we consider choosing a new way.
But to realize such an affirmation is a little bit dismotivating at minimum.

Although this subject, i wanna thanks the devs; because everyone knows it a
hard work and Arch devs always did a great work.

The real POINT here is that, ANY decision made (not only systemd) have its
pros and cons, but when someone ask for something different or question
that, it is wise to listen, think, and answer in an polite way.
Recently i am seeing much rage in talks, i think i will be better, and
constructive, to filter better the words so that we can have a kind of a
talk.



  it is not simple, not minimalist, and not user-centric.

 Certainly not minimalist, but those other two claims are questionable.

 Arch has *never* been minimalist... a Linux kernel with every module
 available and every feature enabled at least when there's no non-bloat
 related cost, feature-packed/complex GNU tools, nearly all optional
 features enabled across all the packages, etc.

  However, making so many packages depend on it so that any basic desktop
  usage (in the case of the util-linux dependency, even non-graphical
 usage)
  does break one principle listed in the aforementioned page: freedom. In
  fact, I ought to quote it:

 Arch is the opposite of a distribution with lots of user freedom. Users
 will come and go based on whether they like the technical decisions made
 by the developers. The popularily of those decisions has no impact on
 how things are done, regardless of how vocal users are about it.

  Nonetheless, respecting the quoted principle, I could easily replace
  systemd by OpenRC when I chose to. Note that just last month, over 3
  years had passed after systemd was adopted, and I could still use
  OpenRC. Now, for whatever reason, the principle was broken without
  notice. I'd expect news or an email in this mailing list, to which I've
  been paying close attention (though I knew less than the authors about
  most problems...).

 You can still use it, it's just becoming increasing more difficult at a
 pretty steady pace. Those packages didn't suddenly pick up systemd
 dependencies in the past few weeks / months anyway. The version control
 logs disprove the claim that there are many recent changes.

  Upstreams are 

Re: [arch-general] python mysql bindings.

2014-11-05 Thread Eduardo Machado
2014-11-05 1:15 GMT-02:00 Evgeniy Alekseev darkarca...@mail.ru:

 At Tuesday 04 November 2014 10:27:16 Eduardo Machado wrote:
  i was building a python package that depends on an mysql binding for
  python, and i was looking about mysql-python [1], but when looking
  upstream [2] the page has a link to a new website [3].
  At this new website, the author states that the package is a legacy
 version
  (the source used in the Arch[1]), and the new one was renamed to moist
  and has a new source [4].

 If you are looking for mysql bindings you can use python-mysql-connector
 [1]
 for some cases which supports python2 and python3.

 1. https://www.archlinux.org/packages/python-mysql-connector/


Thank you both for the clarification.

I will try the python-mysql-connector to see if it is compatible.


[arch-general] python mysql bindings.

2014-11-04 Thread Eduardo Machado
Hi,

i was building a python package that depends on an mysql binding for
python, and i was looking about mysql-python [1], but when looking
upstream [2] the page has a link to a new website [3].
At this new website, the author states that the package is a legacy version
(the source used in the Arch[1]), and the new one was renamed to moist
and has a new source [4].

So, i ask if this is a case of outdated package or it can be considered
updated, although it's a legacy version?

And i would like to know if some TU has interest to provide the new one, if
not, i will gladly create an AUR package.
Best regards,

mawcomw


Re: [arch-general] gnome videos 3.12

2014-06-28 Thread Eduardo Machado

 I had a similar problem and discovered that my (gtk- or shell-)theme
 was outdated. Update your themes or try it with the default gnome theme.


Indeed, it was the theme... Simple, but it tricked me.
Thanks for the tip.


Re: [arch-general] linux 3.15.1-1 and blank screen on boot

2014-06-28 Thread Eduardo Machado
@Carlo

 ​h​ave you installed this driver xf86-video-ati?


yes, i am using the open driver.

@Anthony
This seems to be similar to a problem that occurred about 3 months ago
and was fixed by  a later upgrade of systemd.

https://bbs.archlinux.org/viewtopic.php?id=178450

Didn't helped.

@Martti Kühne

The logs... Sorry i am late...
I found two itens that could help...
I almost sure that its the display-manager.service problem... But didn't
get the why!


















*Jun 22 10:02:59 x systemd[1]: systemd 213 running in system mode. (+PAM
-AUDIT -SELINUX -IMA -SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ +SECCOMP
-APPARMOR) Jun 22 10:02:59 x systemd[1]: Detected architecture 'x86-64'.Jun
22 10:02:59 x systemd[1]: Set hostname to x.Jun 22 10:02:59 x systemd[1]:
Cannot add dependency job for unit display-manager.service, ignoring: Unit
display-manager.service failed to load: No such file or directory. ...Jun
22 10:03:23 x colord[581]: Profile added: Virtual_PDF_Printer-Gray..Jun 22
10:03:23 x colord[581]: Profile added: Virtual_PDF_Printer-RGB..Jun 22
10:03:23 x colord[581]: /usr/lib/colord/colord-sane: error while loading
shared libraries: libsane.so.1: cannot open shared object file: No such
file or directory Jun 22 10:03:23 x colord[581]: (colord:581): Cd-WARNING
**: failed to get session [pid 364]: Erro desconhecido -2Jun 22 10:03:23 x
colord[581]: Device added: cups-Virtual_PDF_PrinterJun 22 10:03:23 x
systemd[1]: Started CUPS Printing Service. -- Subject: Unit cups.service
has finished start-up-- Defined-By: systemd-- Support:
http://lists.freedesktop.org/mailman/listinfo/systemd-devel
http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit
cups.service has finished starting up.-- -- The start-up result is done.*


Thanks for the help.


[arch-general] linux 3.15.1-1 and blank screen on boot

2014-06-23 Thread Eduardo Machado
After the last kernel update, when the mahine is booting, i see some info
on scrren, but when the frame buffer starts it became blank.
But the system finish to boot, the monitor is on, and i can blindly log in.

After i downgraded the kernel package everything worked fine again.

Anyone with something like this? It is a bug or something?


best regeards,
---
   Eduardo M. Machado


[arch-general] gnome videos 3.12

2014-06-23 Thread Eduardo Machado
Hi,

after the last upgrade of gnome (including it's video software), this video
app has no menu. When i click on the configurations button it does not show
the menu for the configurations.

Anyone with the same problem or now how to work around?

thanks,
---
   Eduardo M. Machado.


Re: [arch-general] gnome videos 3.12

2014-06-23 Thread Eduardo Machado
2014-06-23 10:08 GMT-03:00 Martti Kühne mysat...@gmail.com:

 On Mon, Jun 23, 2014 at 3:06 PM, Eduardo Machado
 eduardo.mach...@gmail.com wrote:
  Hi,
 
  after the last upgrade of gnome (including it's video software), this
 video
  app has no menu. When i click on the configurations button it does not
 show
  the menu for the configurations.
 


 What video app? There are plenty of those...


the default one of the gnome (https://wiki.gnome.org/Apps/Videos)!
It's name is videos (not a straight name, but...). I remeber now, it was
formely known as totem.


Re: [arch-general] linux 3.15.1-1 and blank screen on boot

2014-06-23 Thread Eduardo Machado
2014-06-23 10:18 GMT-03:00 Tobias Powalowski 
tobias.powalow...@googlemail.com:

 Am 23.06.2014 15:07, schrieb Martti Kühne:
  On Mon, Jun 23, 2014 at 3:04 PM, Eduardo Machado
  eduardo.mach...@gmail.com wrote:
  After the last kernel update, when the mahine is booting, i see some
 info
  on scrren, but when the frame buffer starts it became blank.
  But the system finish to boot, the monitor is on, and i can blindly log
 in.
 
 
  Logs can be searched using journalctl and likely grep. What gfx
  driver do you have in place?
  I'd be interested in those messages too, they're likely in the logs.
 
  cheers!
  mar77i
 https://bugs.archlinux.org/task/40899


I am not using intel card. i am using an onboard ATI card and the
open-source driver.
And to solve i had only to downgrade the linux package.

As soon as i came to the machine again i will catch the logs.


Re: [arch-general] CA certifcates

2014-05-29 Thread Eduardo Machado
2014-05-29 5:30 GMT-03:00 Timothée Ravier sios...@gmail.com:

 On 29/05/2014 04:30, Eduardo Machado wrote:
  But... This week, after a system upgrade both Firefox and Chrome,
  stopped to reflect this, even after i did all the above process
  again.
 
  Firefox and Chrome are not using the ca-certificates package? Is
  there a way to do what i'm trying to do (a central point to manage
  certificates for all apps, especially browsers)?

 Fedora has been working on something close to what you'd want: one place
 to manage all certificates:

 http://fedoraproject.org/wiki/Features/SharedSystemCertificates

 I don't know how hard it would be integrate this into Arch Linux.


I will study this so i can help. Anyone already looking into this?

But what was strange for me was that doing the steps i listed above it
worked at Arch some months ago...

Do you know where Firefox or Chrome look for this list of CA certs?



  And, a last question, is there a way to run a script after a
  specific package upgrade?

 I think this has been discussed at some point but this hasn't been
 implemented yet as far as I remember.

 --
 Timothée Ravier


Thanks for the answer.


[arch-general] CA certifcates

2014-05-28 Thread Eduardo Machado
Hi,

some months ago i needed to setup a Certificate Authority and add it's root
certificate to the client machines, so i figured out and added the CA
certificate to /usr/share/ca-certificates, edited the
/etc/ca-certificates.conf to reflect this and them run
update-ca-certificates --fresh --verbose.

this added the CA to the SSL certs and generated the file with all the
certificates in /etc/ssl/certs/ca-certificates.crt

So when i used Firefox and Chrome, it reflected this and the server
certificate was validated.

But... This week, after a system upgrade both Firefox and Chrome, stopped
to reflect this, even after i did all the above process again.

Firefox and Chrome are not using the ca-certificates package? Is there a
way to do what i'm trying to do (a central point to manage certificates for
all apps, especially browsers)?

And, a last question, is there a way to run a script after a specific
package upgrade?

Thanks,
---
   Eduardo M. Machado


Re: [arch-general] [Classroom] Intro. to PKGBUILD class - April 19th

2014-04-23 Thread Eduardo Machado
2014-04-19 19:05 GMT-03:00 fsckd fsckdae...@gmail.com:

 Class is over. :) Those of you who missed it, don't worry. Logs are
 available.

 9:30 UTC class
 https://archwomen.org/media/project_classroom/classlogs/
 2014-04-19-pkgbuilds_09%3a30-UTC.txt

 16:00 UTC class
 https://archwomen.org/media/project_classroom/classlogs/
 2014-04-19-pkgbuilds_16%3a00-UTC.txt

 Regards,
 fsckd


Really thanks!


Re: [arch-general] Apache 2.4 - Pierre was right, a post on the front page is needed

2014-04-03 Thread Eduardo Machado
2014-04-02 17:10 GMT-03:00 David C. Rankin drankina...@suddenlinkmail.com:


   Thanks for the hard work, and so far, the sky hasn't fallen since the
 apache
 2.4 update. Just don't get rid of mod_php, mod_fastcgi + php-fpm isn't a
 drop in
 replacement in all cases.


I am planning to publish a mod_php (php-zts) compatible with apache 2.4
threaded mpm. I will publish it in AUR after a few more tests.

I wish to contribute for the exactly same reason, the php-fpm isn't a drop
in replacement. In my case, it will increase my work on configuration and
maintenance.


Re: [arch-general] [arch-dev-public] Upgrading Apache to 2.4

2014-03-11 Thread Eduardo Machado
2014-03-10 15:21 GMT-03:00 Anatol Pomozov anatol.pomo...@gmail.com:

 Hi

 On Fri, Mar 7, 2014 at 1:10 AM, Sebastiaan Lokhorst
 sebastiaanlokho...@gmail.com wrote:
  Thanks for taking the effort to finally update Apache!
 
  When trying to start Apache with PHP, I get the same error as Rene.
 
  Just to be clear, what is the recommended way to run Apache+PHP now? Will
  mod_php5 will still be supported?

 Ok, it seems that main source of questions is php-apache package that
 causes Apache is running a threaded MPM, but your PHP Module is not
 compiled to be threadsafe.  You need to recompile PHP. error at
 apache start.

 The answer is that you need to switch apache MPM from default
 mod_mpm_event to slower but mod_php-compatible mod_mpm_prefork.  See
 more information in at wiki page
 https://wiki.archlinux.org/index.php/LAMP#Troubleshooting
 BTW kudos to our users who already updated wiki for Apache2.4!

 And of course anyone is welcome to create a threadsafe version of
 php-apache in AUR so it can be used with mpm_event.


I was studying the php package to build an php fully compatible with apache
2.4.
I understand that php is the base package and the others are split packages
(many)...

So, would you know if it is necessary to rebuilt all the php packages or
only the php-apache?
Thanks in advance.

A question, i saw some references [1] that the apache MPM can be
dinamically changed. Is it true in Arch?


[1] http://kb.parallels.com/en/113007


Re: [arch-general] Packages Verified with MD5

2014-01-14 Thread Eduardo Machado
2014/1/12 Taylor Hornby ha...@defuse.ca

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On 01/12/2014 01:56 PM, Kyle Terrien wrote:
  On 01/12/2014 12:40 PM, Taylor Hornby wrote:
  I guess I just don't understand what happens when I type
  pacman -S firefox. Does that run the PKGBUILD on my system,
  or does it download and install pre-compiled (and signed)
  Firefox binaries that were created by one of the Arch
  developers using the PKGBUILD?
  pacman -S firefox installs a pre-compiled binary maintained by an
  Arch Dev. On the other hand, PKGBUILDs are for building packages.
 
  And the official firefox package is cryptographically signed by
  the package maintainer (not Mozilla).
 
  Hopefully, that clears things up.

 Thank you, that makes so much more sense!

 So, really, the vulnerability only exists while the Arch dev (or
 package maintainer or whatever they're called) is building the
 package. Once they do, and sign it, all Arch users will verify their
 signature to make sure they get the same file the Arch dev created.

 That's not so bad, then, since you can't really do any better unless
 the upstream source (Mozilla) signs their files, and the package
 maintainer has their public key.


I think this could yet be a problem if the sys admin wants to build all of
it's system.
Then he will fall into the same problem with the AUR PKGBUILDs, or am i
wrong?


Re: [arch-general] ArchWiki: bad rendering on Android devices

2013-12-11 Thread Eduardo Machado
Em 07/12/2013 17:15, Jakub Klinkovský j@gmx.com escreveu:

 On 06.12.13 at 16:53, Lukas Jirkovsky wrote:
  On Fri, Dec 6, 2013 at 4:39 PM, Jakub Klinkovský j@gmx.com wrote:
   Hi,
  
   I've noticed some pretty bad rendering of ArchWiki on my Nexus 7 -
see the
   screenshots in [1].
 
  The indentation is fine on Firefox for Android, but it has a different
  problem – the menu uses too large font, so almost every menu entry
  spans over several lines.
 
  Lukas

 Even on wikipedia.org the text is indented from right side (when
requested the
 desktop version). This is pretty annoying because most wikis don't have a
mobile
 version. Plus on tablets the mobile version does not make sense anyway.

 This sounds like an issue with webkit then, so it boils down to whether
it's
 easier to fix webkit or provide a workaround for MediaWiki...

 --
 Jakub Klinkovský (Lahwaacz)

There is an Arch Wiki app at play.google.com that shows everything in
suitable way.

Note: i am not the mantainer of this app.


Re: [arch-general] SELinux packages status update

2013-11-05 Thread Eduardo Machado
2013/11/3 Timothée Ravier sios...@gmail.com

 Hi,

 I've updated all the SELinux related packages in the AUR. I've changed
 most packages names to better fit with upstream names and AUR naming
 policy (selinux-pam - pam-selinux; selinux-usr-libselinux -
 libselinux). I'll keep the old ones a week or two, just in case, then
 I'll ask for deletion.

 I've only tested those packages in SELinux _disabled_ mode as currently
 there aren't any usable policy. I'll be working on this from now on.

 Status of core packages that requires patches or rebuild:

 * linux:  rebuild. bug opened in the Arch bugtracker;
 * coreutils:  rebuild (links with libselinux);
 * cronie: rebuild '--with-selinux' flag;
 * findutils:  need SELinux patch, can be upstreamed, but is upstream
   still alive ?
 * openssh:rebuild '--with-selinux' flag;
 * pambase:configuration changes to add pam_selinux.so;
 * pam:rebuild '--enable-selinux' flag for Linux-PAM, patch for
   pam_unix2, which only removes a function already
   implemented in a library elsewhere. Is there an
   upstream here? I couldn't find one;
 * psmisc: small patch, already upstream. Will be in version 22.21;
 * shadow: rebuild '-lselinux' and '--with-selinux' flags;
 * sudo:   rebuild '--with-selinux' flag;
 * systemd:rebuild '--enable-selinux' flag;
 * util-linux: rebuild '--with-selinux' flag;

 Total:

 1 rebuild as-is,
 8 rebuild with additional flags/config,
 3 rebuild with patches required (with one already upstream and two
 potentially dead upstream).

 I think this looks good!

 Suggestions for packages are welcomed as AUR comments or issues on
 GitHub: https://github.com/Siosm/siosm-selinux

 A repository with signed packages for x86-64 only is available at
 http://repo.siosm.fr/siosm-selinux/ (See
 https://tim.siosm.fr/repositories/ if you need instructions or GPG
 public key).

 I'll also update the Arch Wiki SELinux page soon.

 I'll setup an other repository for the SELinux policy as soon as I have
 something which can boot in enforcing mode.

 Cheers,

 Tim


I have to congratulate you and all devs for the really great work.
A big thanks!


Re: [arch-general] Arch Linux on servers?

2013-07-10 Thread Eduardo Machado
2013/7/10 Sébastien Luttringer se...@seblu.net

 On Tue, Jul 9, 2013 at 12:13 PM, M Saunders oka...@gmail.com wrote:
  which has some useful tips. But it'd be interesting to hear from
  people running Arch on production servers, how well it works for them
  and what (if any) problems they've faced.
 

 I've 9 personal servers running Archlinux (previously under debian)
 and I plan to move about ~250 professional hypervisor under Arch this
 year.
 Let me share the following experiences with you.

 1) Use the minimum set of packages
 This will save you from updating useless packages and give you a
 better view of what your server use.
 As there is only few packages, don't rush to update them when there is
 major change on it.

 2) Do your sysadmin homework
 Before updating, check archlinux.org for announcements.
 During update  read pacman output.[1]
 After updating, look for pacsave/pacorig/pacnew files.

 Supervise your packages. I use munin with the following plugins[2][3]

 3) Use a versioned kernel
 One of the most wanted expectation on a server is to avoid reboot.
 Arch official kernel is too often updated for a server _and_ cannot be
 installed without breaking the running kernel (modules mismatch).
 To workaround this I build custom kernels, with the version in the
 name[4] and I use a meta package[5] which push new version
 automatically and clean the old one. So I can update my server, and at
 the next reboot the last kernel will be selected.

 4) Detect daemon upgrade
 When you update your system, some libraries or binaries can be updated
  and your running programs still use the old version.
 This give the bad feeling that your software are up-to-date. But it's
 false.
 Of course you can reboot your server to be sure after each update.
 It's too long and give the feeling to hunt fly with a tank.

 I use the following script[6] which list services (systemd speaking)
 which need to be restarted.

 # checkservcies -l # list services to restart
 # checkservices -r # restart it

 5) Detect server reboot
 I track my server reboot with the following software[7]. Btw, this is
 not a solution for 250 servers.

 6) Use your repository to spread your custom packages
 For personal packages or taken from AUR, using a custom repository[8}
 will simplify your job.
 You compile your soft in one place, no need  to have gcc or base-devel
 on your servers.
 Update is automatically propagate as official repository.
 You can easily override official package (not recommended).
 You could use a base meta package[9] to have all the basics software
 on all your servers.
 This will prepare you to become an archlinux TU or Dev.

 7) Security
 Debian is not more secure because their softwares are old. It's a lie.
 Check the number of open flaw in the security bug tracker[10].
 If you want to be in a secure environment stay up-to-date, don't use
 debian stable, use debian sid. So Archlinux is a good alternative.

 Regards,

 [1] Please note, that is not a pleasure for a package maintainer to
 add a message in his package. So read it.
 [2] https://github.com/seblu/archutils/blob/master/archlinux-pacfiles
 [3] https://github.com/seblu/archutils/blob/master/archlinux-packages
 [4] https://github.com/seblu/archpkg/blob/master/linux-seblu/PKGBUILD
 [5] https://github.com/seblu/archpkg/blob/master/linux-seblu-meta/PKGBUILD
 [6] https://github.com/seblu/archutils/blob/master/checkservices
 [7] https://github.com/seblu/mailboot
 [8] https://seblu.net/a/seblu/x86_64/
 [9] https://github.com/seblu/archpkg/blob/master/base-seblu/PKGBUILD
 [10] https://security-tracker.debian.org/tracker/status/release/stable

 --
 Sébastien Seblu Luttringer
 https://www.seblu.net
 GPG: 0x2072D77A



This all were valuable lessons, thanks to share.

At this point i am thinking that the initial question was a great start to
discuss and share stability an security techniques for an Arch install.


[arch-general] After updating mkinitcpio generates a image without modules

2013-06-26 Thread Eduardo Machado
Hi,

after the last grub update (with kernel 3,9,7) when the pacman runs to
build the new boot images, pacman output many errors with modules not being
found. The log is attached.

I tried to chroot from a livecd and tried to reinstall all the packages,
tried to downgrade the kernel and nothing reverted the problem.

I cannot figured out why the modules are not being found...

Anyone can help me with this?

Thanks in advance.
---
   Eduardo M. Machado
resolving dependencies...
looking for inter-conflicts...

Packages (1): linux-3.9.7-1

Total Installed Size:   63.98 MiB
Net Upgrade Size:   0.00 MiB

checking keyring...
checking package integrity...
loading package files...
checking for file conflicts...
checking available disk space...
reinstalling linux...
 Updating module dependencies. Please wait ...
 Generating initial ramdisk, using mkinitcpio.  Please wait...
== Building image from preset: /etc/mkinitcpio.d/linux.preset: 'default'
  - -k /boot/vmlinuz-linux -c /etc/mkinitcpio.conf -g /boot/initramfs-linux.img
== Starting build: 3.9.7-1-ARCH
  - Running build hook: [base]
  - Running build hook: [udev]
  - Running build hook: [autodetect]
  - Running build hook: [modconf]
  - Running build hook: [block]
== ERROR: module not found: `sr_mod'
== ERROR: module not found: `sd_mod'
== ERROR: module not found: `pata_atiixp'
== ERROR: module not found: `pata_acpi'
== ERROR: module not found: `ahci'
== ERROR: module not found: `ata_generic'
== ERROR: module not found: `ohci_hcd'
== ERROR: module not found: `ehci_pci'
== ERROR: module not found: `sd_mod'
  - Running build hook: [filesystems]
== ERROR: module not found: `ext4'
  - Running build hook: [keyboard]
== ERROR: module not found: `ohci_hcd'
== ERROR: module not found: `ehci_pci'
== ERROR: module not found: `hid_generic'
== ERROR: module not found: `usbhid'
  - Running build hook: [fsck]
  - Running build hook: [shutdown]
  - Running build hook: [usr]
== WARNING: No modules were added to the image. This is probably not what you 
want.
== Creating xz initcpio image: /boot/initramfs-linux.img
== WARNING: errors were encountered during the build. The image may not be 
complete.
== Building image from preset: /etc/mkinitcpio.d/linux.preset: 'fallback'
  - -k /boot/vmlinuz-linux -c /etc/mkinitcpio.conf -g 
/boot/initramfs-linux-fallback.img -S autodetect
== Starting build: 3.9.7-1-ARCH
  - Running build hook: [base]
  - Running build hook: [udev]
  - Running build hook: [modconf]
  - Running build hook: [block]
== ERROR: module not found: `eata'
== ERROR: module not found: `dmx3191d'
== ERROR: module not found: `scsi_transport_sas'
== ERROR: module not found: `bnx2fc'
== ERROR: module not found: `ufshcd'
== ERROR: module not found: `ufshcd_pci'
== ERROR: module not found: `a100u2w'
== ERROR: module not found: `ips'
== ERROR: module not found: `sr_mod'
== ERROR: module not found: `mvumi'
== ERROR: module not found: `virtio_scsi'
== ERROR: module not found: `arcmsr'
== ERROR: module not found: `fnic'
== ERROR: module not found: `fdomain'
== ERROR: module not found: `tmscsim'
== ERROR: module not found: `initio'
== ERROR: module not found: `tcm_qla2xxx'
== ERROR: module not found: `qla2xxx'
== ERROR: module not found: `BusLogic'
== ERROR: module not found: `scsi_dh_alua'
== ERROR: module not found: `scsi_dh_hp_sw'
== ERROR: module not found: `scsi_dh_emc'
== ERROR: module not found: `scsi_dh'
== ERROR: module not found: `scsi_dh_rdac'
== ERROR: module not found: `sd_mod'
== ERROR: module not found: `bnx2i'
== ERROR: module not found: `sg'
== ERROR: module not found: `be2iscsi'
== ERROR: module not found: `qlogicfas408'
== ERROR: module not found: `megaraid'
== ERROR: module not found: `lpfc'
== ERROR: module not found: `3w_9xxx'
== ERROR: module not found: `pmcraid'
== ERROR: module not found: `libiscsi'
== ERROR: module not found: `scsi_transport_srp'
== ERROR: module not found: `scsi_transport_spi'
== ERROR: module not found: `mvsas'
== ERROR: module not found: `qla4xxx'
== ERROR: module not found: `advansys'
== ERROR: module not found: `mpt3sas'
== ERROR: module not found: `libcxgbi'
== ERROR: module not found: `cxgb3i'
== ERROR: module not found: `cxgb4i'
== ERROR: module not found: `stex'
== ERROR: module not found: `scsi_tgt'
== ERROR: module not found: `iscsi_boot_sysfs'
== ERROR: module not found: `st'
== ERROR: module not found: `libsas'
== ERROR: module not found: `iscsi_tcp'
== ERROR: module not found: `raid_class'
== ERROR: module not found: `csiostor'
== ERROR: module not found: `3w_sas'
== ERROR: module not found: `libosd'
== ERROR: module not found: `osd'
== ERROR: module not found: `gdth'
== ERROR: module not found: `scsi_mod'
== ERROR: module not found: `libfc'
== ERROR: module not found: `sym53c8xx'
== ERROR: module not found: `isci'
== ERROR: module not found: `libsrp'
== ERROR: module not found: `osst'
== ERROR: module not found: `pm8001'
== ERROR: module not found: `ch'
== ERROR: module not found: `hv_storvsc'
== ERROR: module not