Re: [aur-general] TU application - bastelfreak
On October 18, 2020 3:39:41 PM UTC, Tim Meusel via aur-general wrote: >Hi! > >I'm Tim Meusel and I want to spent more time in the Arch Linux >community >and increase the package quality. I first got in touch with open source >some years ago in the Puppet Community [0] where I started to love >Puppet and FOSS. At the moment I'm employed at a big ISP where I >maintain a few thousand systems. My solution of choice for >configuration >management is Puppet because it fulfills all requirements and is easy >to >extend. For a few projects I require up2date systems with modern >software, that's why i choose Arch Linux. Since Puppet was already >present in the company, the Arch Linux boxes were puppetized as well. I >wrote or contributed to multiple packages related to Puppet on Arch >Linux. foxxx0 and shibumi were so kind to continue maintaining them >in the official repositories: > >* puppet [1] >* puppet5 [2] >* facter [3] >* libwhereami [4] >* ruby-deep_merge [5] >* ruby-httpclient [6] >* ruby-sync [7] >* ruby-puppet-resource_api [8] >* ruby-semantic_puppet [9] > >Besides working on open source projects, I spent a huge amount of time >for my second passion, cooking and doing BBQ. From time to time I also >attend ice hockey events as visitor but also as hobby-referee or >player. > >As a trusted user I would like to co-maintain those packages, enable >tests on the PKGBUILDs where tests are currently missing (for example >ruby-puppet-resource_api, ruby-semantic_puppet and Puppet), fix the >remaining namcap warnings (for example on facter and libwhereami) and >also import some other Puppet related tools into the official >repository. Some of them are already in the AUR (not all maintained by >myself): > >* fluent-bit (not Puppet related) [10] >* ruby-gettext-setup [11] >* ruby-minitar [12] >* ruby-puppet_forge [13] >* ruby-rr [14] >* ruby-cri [15] >* ruby-test-unit-rr [16] >* ruby-fast_gettext [17] >* ruby-gettext [18] >* ruby-locale [19] >* ruby-text [20] >* ruby-colored2 [21] >* r10k [22] > >If you check my AUR packages, you might notice the awful ruby-log4r >package. That's a dead project where the source code is gone. It's a >dependency for r10k. I'm "maintaining" ruby-log4r in the AUR, so I can >test and build r10k, but I'm also in contact with the upstream >developers to replace this dead dependency. I've no intention to get >log4r into any official repository. > >I talked to shibumi and hashworks in the past days, both reviewed the >packages and agreed to sponsor my application. > >I'm available on Freenode as bastelfreak. I'm pretty active in >#archlinux.de and #voxpupuli. My GPG key fingerprint is >C10B6298A584A5632E254DA304D659E6BF1C4CC0 > >best regards, Tim > >[0] https://voxpupuli.org >[1] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/puppet >[2] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/puppet5 >[3] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/facter >[4] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/libwhereami >[5] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/ruby-deep_merge >[6] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/ruby-httpclient >[7] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/ruby-sync >[8] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/ruby-puppet-resource_api >[9] >https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/ruby-semantic_puppet >[10] https://aur.archlinux.org/packages/fluent-bit#comment-749760 >[11] >https://aur.archlinux.org/packages/ruby-gettext-setup/#comment-725838 >[12] https://aur.archlinux.org/packages/ruby-minitar/#comment-723296 >[13] >https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=ruby-puppet_forge >[14] https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=ruby-rr >[15] https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=ruby-cri >[16] >https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=ruby-test-unit-rr >[17] >https://aur.archlinux.org/packages/ruby-fast_gettext/#comment-723301 >[18] https://aur.archlinux.org/packages/ruby-gettext/#comment-725388 >[19] https://aur.archlinux.org/packages/ruby-locale/#comment-723294 >[20] https://aur.archlinux.org/packages/ruby-text >[21] https://aur.archlinux.org/packages/ruby-colored2/#comment-771053 >[22] https://aur.archlinux.org/packages/r10k/#comment-770978 Not a TU, but I noticed that the GPG key that signed this application is expired according to my mail client. signature.asc Description: PGP signature
Re: [aur-general] bit torrent AUR
On July 25, 2020 5:06:01 AM UTC, Storm Dragon via aur-general wrote: >Howdy, > >The recent AUR migration got me to wondering how difficult it would be >to set up the AUR as a p2p model with something like bit torrent. I am >not at this point even suggesting that it be implemented, I am more >just curious about the challenges of such a thing. > >Thinking about it, there would have to be some kind of security process >in place to make sure PKGBUILDs were not modified and retrieved from >only one source. Maybe a way to mark certain machines as trusted, >and/or setting a minimum of distributers that must agree on the >validity of the PKGBUILD in question. > >I am by no means an expert on this stuff but if something like this >were done, and if it worked, it could even be expanded to community >packages as well, meaning that any machine with a cache could also >serve as a mirror for those packages. So, is something like this >feasible? > >Thanks, >Storm > >-- >⛈ >Accessible low cost computers for everyone! https://stormux.org >Get my public PGP key: gpg --recv-key 43DDC193 >The great thing about Object Oriented code is that it can make small, >simple problems look like large, complex ones. >"I've seen the tempest in darkest nights I've faced the eyes of Thor" >Stormwarrior - Heading Northe Probably feasible, but it'd be a pain in the ass to update PKGBUILDs for AUR packages and so, not really a great idea. Plus, git already does most of what's needed. Likely, anyone could set up a mirror for the AUR by crawling through it and cloning all the packages, so it's really only centralized because no one bothers mirroring it. I really don't see why you'd want to share it over bit torrent to be honest. signature.asc Description: PGP signature
Re: [aur-general] [arch-dev-public] AUR migration
On July 24, 2020 9:27:06 PM UTC, Eli Schwartz via > >This seems like it could be a reasonable situation for posting to >https://www.archlinux.org/news/ so that people seeing the keys change >understands why and that it's okay. Not everyone follows a-d-p or >aur-general. > >Thoughts? > Agreed. signature.asc Description: PGP signature
Re: [aur-general] know what dependencies in PKGBUILD
On July 23, 2020 8:50:43 PM UTC, Knut Ahlers wrote: >On Thu, Jul 23, 2020 at 10:24 PM Eli Schwartz via aur-general > wrote: >> >> On 7/23/20 4:07 PM, alad via aur-general wrote: >> > >> > On 23/07/2020 15:45, Eli Schwartz via aur-general wrote: >> >> On 7/23/20 9:17 AM, alad via aur-general wrote: >> >>> Am 23/07/2020 um 15:10 schrieb Budi via aur-general: >> h\How to know what dependencies only need to put (surely not >all) >> >>> I proceed as follows: >> >>> >> >>> 1. ignore anything in base-devel >> >> base-devel is for makedepends only, base is for depends. >> > So? base-devel contains programs that can be used during runtime, >like >> > gawk. >> Or 'which', or 'sudo'. >> >> If they are used during runtime, you can't exactly leave them out of >> depends=() on the rationale that people who installed base-devel to >> build packages, won't have errors running it. > >IMO you should add them as omitting packages required to run the >program will cause issues for people. Packages should request >everything they need to run. > >As an example: All AUR packages I'm using on my machines are built on >a CI system in containers. All of them do have a clean environment - >of course containing devel packages. My machines do not have devel >packages installed as long as they are not used for development as >they don't require them. So an AUR package built through the CI system >installed on a machine without devel packages will miss some of its >dependencies and will be broken. > >Also I know of repos maintained by TUs containing AUR packages: For >them the same applies and while in a worst-case szenario I can patch >the build before building it users relying on those AUR repos listed >in the Wiki will get broken packages. > >-- >Knut Ahlers >Software & Infrastructure Developer > >Web & Blog: https://ahlers.me/ >GPG-Key: 0xD34BE99E That's an interesting setup, I'd be curious to know how to set that up? signature.asc Description: PGP signature
Re: [aur-general] Create user
On May 22, 2020 2:29:52 AM UTC, karx via aur-general
wrote:
>Hey,
>
>An application I'm thinking about packaging for AUR requires its own
>user
>to run. Is it ok to be/How would I go about creating a "user" that will
>be
>created on the installer's system when they install the package?
>
>Thanks,
>Yash
I looked up an official package I know creates a user (postgresql) and it seems
to provide this file[1] and install it in the PKGBUILD[2] with the following
line (line 208) :
> install -Dm 644 ${pkgname}.sysusers
> "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
[1]:
https://git.archlinux.org/svntogit/packages.git/tree/trunk/postgresql.sysusers?h=packages/postgresql
[2]:
https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/postgresql
signature.asc
Description: PGP signature
