Re: [aur-general] Wrong E-Mail Adress at registration used

[Lukas Fleischer via aur-general]

On Sat, 10 Oct 2020 at 08:14:01, Matthias 'garionion' Detsch via aur-general 
wrote:
> Would it be possible, that someone could please unlock "my" username?

Done, please use [1] to send yourself a password reset email. Your may
also want to consider adding a backup email address to your profile,
just in case you lose access to your inbox in the future.

[1] https://aur.archlinux.org/passreset/

Re: [aur-general] Resignation as Trusted User

[Lukas Fleischer via aur-general]

On Tue, 08 Sep 2020 at 10:44:53, Filipe Laíns via aur-general wrote:
> I think he should be set as 'Developer', not normal user.

Done.

[aur-general] aurweb 5.0.0 released

[Lukas Fleischer via aur-general]

Dear aurweb contributors and users,

aurweb 5.0.0 has just been released!

You can now add a secondary email address that can be used to recover
your account in case access to the primary email address is lost. Reset
keys for an account are always sent to both the primary and the backup
email address. Most other changes were internal.

Shout-out to Frédéric Mangano-Tarumi for doing some amazing work on the
backend!

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v5.0.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] Traceback from aurweb upon git push

[Lukas Fleischer via aur-general]

On Mon, 10 Feb 2020 at 17:18:16, Chris Billington via aur-general wrote:
> remote: raise child_exception_type(errno_num, err_msg, err_filename)
> remote: PermissionError: [Errno 13] Permission denied: ''

Should be fixed. Sorry for the inconvenience.

Re: [aur-general] git push failed 8-(

[Lukas Fleischer via aur-general]

On Thu, 30 Jan 2020 at 13:34:41, J. Scheurich wrote:
> $ git clone ssh://a...@archlinux.org/white_dune.git

It's a...@aur.archlinux.org, not a...@archlinux.org.

[aur-general] AUR VCS cleanup

[Lukas Fleischer via aur-general]

Here's a list of VCS duplicates reported by `aurdupes -V`. I did not
check for false positives. Maybe somebody can go through that list and
either delete all obsolete packages or file deletion requests:

1pass (VCS)
* 1pass-git http://aur.archlinux.org/packages/1pass-git/
* 1pass-hg http://aur.archlinux.org/packages/1pass-hg/
abc (VCS)
* abc-git http://aur.archlinux.org/packages/abc-git/
* abc-hg http://aur.archlinux.org/packages/abc-hg/
abcl (VCS)
* abcl-git http://aur.archlinux.org/packages/abcl-git/
* abcl-svn http://aur.archlinux.org/packages/abcl-svn/
arm-frc-linux-gnueabi-frcmake (VCS)
* arm-frc-linux-gnueabi-frcmake-git 
http://aur.archlinux.org/packages/arm-frc-linux-gnueabi-frcmake-git/
* arm-frc-linux-gnueabi-frcmake-hg 
http://aur.archlinux.org/packages/arm-frc-linux-gnueabi-frcmake-hg/
blackbox (VCS)
* blackbox-cvs http://aur.archlinux.org/packages/blackbox-cvs/
* blackbox-git http://aur.archlinux.org/packages/blackbox-git/
bmdc (VCS)
* bmdc-bzr http://aur.archlinux.org/packages/bmdc-bzr/
* bmdc-git http://aur.archlinux.org/packages/bmdc-git/
boost-numeric-bindings (VCS)
* boost-numeric-bindings-git 
http://aur.archlinux.org/packages/boost-numeric-bindings-git/
* boost-numeric-bindings-svn 
http://aur.archlinux.org/packages/boost-numeric-bindings-svn/
caff (VCS)
* caff-git http://aur.archlinux.org/packages/caff-git/
* caff-svn http://aur.archlinux.org/packages/caff-svn/
cpu-g (VCS)
* cpu-g-bzr http://aur.archlinux.org/packages/cpu-g-bzr/
* cpu-g-git http://aur.archlinux.org/packages/cpu-g-git/
daphne (VCS)
* daphne-git http://aur.archlinux.org/packages/daphne-git/
* daphne-svn http://aur.archlinux.org/packages/daphne-svn/
dovecot2-antispam (VCS)
* dovecot2-antispam-git http://aur.archlinux.org/packages/dovecot2-antispam-git/
* dovecot2-antispam-hg http://aur.archlinux.org/packages/dovecot2-antispam-hg/
drawterm (VCS)
* drawterm-git http://aur.archlinux.org/packages/drawterm-git/
* drawterm-hg http://aur.archlinux.org/packages/drawterm-hg/
dsf2flac (VCS)
* dsf2flac-git http://aur.archlinux.org/packages/dsf2flac-git/
* dsf2flac-svn http://aur.archlinux.org/packages/dsf2flac-svn/
electricsheep (VCS)
* electricsheep-git http://aur.archlinux.org/packages/electricsheep-git/
* electricsheep-svn http://aur.archlinux.org/packages/electricsheep-svn/
git-remote (VCS)
* git-remote-bzr http://aur.archlinux.org/packages/git-remote-bzr/
* git-remote-hg http://aur.archlinux.org/packages/git-remote-hg/
golded-plus (VCS)
* golded-plus-cvs http://aur.archlinux.org/packages/golded-plus-cvs/
* golded-plus-git http://aur.archlinux.org/packages/golded-plus-git/
gsignond-plugin-lastfm (VCS)
* gsignond-plugin-lastfm-bzr 
http://aur.archlinux.org/packages/gsignond-plugin-lastfm-bzr/
* gsignond-plugin-lastfm-git 
http://aur.archlinux.org/packages/gsignond-plugin-lastfm-git/
gvim (VCS)
* gvim-git http://aur.archlinux.org/packages/gvim-git/
* gvim-hg http://aur.archlinux.org/packages/gvim-hg/
heirloom-doctools (VCS)
* heirloom-doctools-cvs http://aur.archlinux.org/packages/heirloom-doctools-cvs/
* heirloom-doctools-git http://aur.archlinux.org/packages/heirloom-doctools-git/
heirloom-ex-vi (VCS)
* heirloom-ex-vi-cvs http://aur.archlinux.org/packages/heirloom-ex-vi-cvs/
* heirloom-ex-vi-git http://aur.archlinux.org/packages/heirloom-ex-vi-git/
inferno (VCS)
* inferno-git http://aur.archlinux.org/packages/inferno-git/
* inferno-hg http://aur.archlinux.org/packages/inferno-hg/
itk (VCS)
* itk-cvs http://aur.archlinux.org/packages/itk-cvs/
* itk-git http://aur.archlinux.org/packages/itk-git/
libtermkey (VCS)
* libtermkey-bzr http://aur.archlinux.org/packages/libtermkey-bzr/
* libtermkey-git http://aur.archlinux.org/packages/libtermkey-git/
lingot (VCS)
* lingot-git http://aur.archlinux.org/packages/lingot-git/
* lingot-hg http://aur.archlinux.org/packages/lingot-hg/
makehuman (VCS)
* makehuman-git http://aur.archlinux.org/packages/makehuman-git/
* makehuman-hg http://aur.archlinux.org/packages/makehuman-hg/
markmywords (VCS)
* markmywords-bzr http://aur.archlinux.org/packages/markmywords-bzr/
* markmywords-git http://aur.archlinux.org/packages/markmywords-git/
midori (VCS)
* midori-bzr http://aur.archlinux.org/packages/midori-bzr/
* midori-git http://aur.archlinux.org/packages/midori-git/
mozilla-firefox-sync-server (VCS)
* mozilla-firefox-sync-server-git 
http://aur.archlinux.org/packages/mozilla-firefox-sync-server-git/
* mozilla-firefox-sync-server-hg 
http://aur.archlinux.org/packages/mozilla-firefox-sync-server-hg/
mtx (VCS)
* mtx-git http://aur.archlinux.org/packages/mtx-git/
* mtx-svn http://aur.archlinux.org/packages/mtx-svn/
openbor (VCS)
* openbor-git http://aur.archlinux.org/packages/openbor-git/
* openbor-svn http://aur.archlinux.org/packages/openbor-svn/
oscam (VCS)
* oscam-git http://aur.archlinux.org/packages/oscam-git/
* oscam-svn http://aur.archlinux.org/packages/oscam-svn/
python (VCS)
* python-git http://aur.archlinux.org/packages/python-git/
* python-svn http://aur.archlinux.org/packages/python-svn/
python-

[aur-general] AUR cleanup

[Lukas Fleischer via aur-general]

Here's an up-to-date list of duplicates reported by `aurdupes -A`. I did
not check for false positives. Maybe somebody can go through that list
and either remove duplicate packages or file deletion requests. I'll
post a separate list with VCS duplicates.

atlassian-plugin-sdk
* atlassian-plugin-sdk http://aur.archlinux.org/packages/atlassian-plugin-sdk/
* atlassian-plugin-sdk-latest 
http://aur.archlinux.org/packages/atlassian-plugin-sdk-latest/
cx
* cx http://aur.archlinux.org/packages/cx/
* cx-latest http://aur.archlinux.org/packages/cx-latest/
domoticz
* domoticz http://aur.archlinux.org/packages/domoticz/
* domoticz-latest http://aur.archlinux.org/packages/domoticz-latest/
dontpanic
* dontpanic [community]
* dontpanic-latest http://aur.archlinux.org/packages/dontpanic-latest/
dpkg
* dpkg [community]
* dpkg http://aur.archlinux.org/packages/dpkg/
firefox-i18n-ca-valencia
* firefox-i18n-ca-valencia [extra]
* firefox-i18n-ca-valencia 
http://aur.archlinux.org/packages/firefox-i18n-ca-valencia/
guile-bytestructures
* guile-bytestructures [extra]
* guile-bytestructures http://aur.archlinux.org/packages/guile-bytestructures/
icewm-themes
* icewm-themes http://aur.archlinux.org/packages/icewm-themes/
* icewm-themes-new http://aur.archlinux.org/packages/icewm-themes-new/
jabref
* jabref http://aur.archlinux.org/packages/jabref/
* jabref-latest http://aur.archlinux.org/packages/jabref-latest/
mruby
* mruby [community]
* mruby http://aur.archlinux.org/packages/mruby/
mse-mtg
* mse-mtg http://aur.archlinux.org/packages/mse-mtg/
* mse-mtg-new http://aur.archlinux.org/packages/mse-mtg-new/
nyacc
* nyacc [extra]
* nyacc http://aur.archlinux.org/packages/nyacc/
opensmtpd-filter-rspamd
* opensmtpd-filter-rspamd [community]
* opensmtpd-filter-rspamd 
http://aur.archlinux.org/packages/opensmtpd-filter-rspamd/
perl-locale-codes
* perl-locale-codes [community]
* perl-locale-codes http://aur.archlinux.org/packages/perl-locale-codes/
plymouth-theme-arch-logo
* plymouth-theme-arch-logo 
http://aur.archlinux.org/packages/plymouth-theme-arch-logo/
* plymouth-theme-arch-logo-new 
http://aur.archlinux.org/packages/plymouth-theme-arch-logo-new/
python-flask-compress
* python-flask-compress [community]
* python-flask-compress http://aur.archlinux.org/packages/python-flask-compress/
python-ordered-set
* python-ordered-set [extra]
* python-ordered-set http://aur.archlinux.org/packages/python-ordered-set/
python-pytest-pylint
* python-pytest-pylint [community]
* python-pytest-pylint http://aur.archlinux.org/packages/python-pytest-pylint/
python2-ordered-set
* python2-ordered-set [extra]
* python2-ordered-set http://aur.archlinux.org/packages/python2-ordered-set/
sigrok-firmware-fx2lafw
* sigrok-firmware-fx2lafw [community]
* sigrok-firmware-fx2lafw 
http://aur.archlinux.org/packages/sigrok-firmware-fx2lafw/
skycoin
* skycoin http://aur.archlinux.org/packages/skycoin/
* skycoin-latest http://aur.archlinux.org/packages/skycoin-latest/
smlnj
* smlnj [community]
* smlnj [multilib]
svt-vp9
* svt-vp9 [community]
* svt-vp9 http://aur.archlinux.org/packages/svt-vp9/
teamviewer
* teamviewer http://aur.archlinux.org/packages/teamviewer/
* teamviewer-latest http://aur.archlinux.org/packages/teamviewer-latest/
treeify
* treeify [community]
* treeify http://aur.archlinux.org/packages/treeify/
typora
* typora http://aur.archlinux.org/packages/typora/
* typora-latest http://aur.archlinux.org/packages/typora-latest/

atlassian-plugin-sdk
* atlassian-plugin-sdk
* http://aur.archlinux.org/packages/atlassian-plugin-sdk/
* atlassian-plugin-sdk-latest
* http://aur.archlinux.org/packages/atlassian-plugin-sdk-latest/
cx
* cx http://aur.archlinux.org/packages/cx/
* cx-latest http://aur.archlinux.org/packages/cx-latest/
domoticz
* domoticz http://aur.archlinux.org/packages/domoticz/
* domoticz-latest http://aur.archlinux.org/packages/domoticz-latest/
dontpanic
* dontpanic [community]
* dontpanic-latest http://aur.archlinux.org/packages/dontpanic-latest/
dpkg
* dpkg [community]
* dpkg http://aur.archlinux.org/packages/dpkg/
firefox-i18n-ca-valencia
* firefox-i18n-ca-valencia [extra]
* firefox-i18n-ca-valencia
* http://aur.archlinux.org/packages/firefox-i18n-ca-valencia/
guile-bytestructures
* guile-bytestructures [extra]
* guile-bytestructures
* http://aur.archlinux.org/packages/guile-bytestructures/
icewm-themes
* icewm-themes http://aur.archlinux.org/packages/icewm-themes/
* icewm-themes-new http://aur.archlinux.org/packages/icewm-themes-new/
jabref
* jabref http://aur.archlinux.org/packages/jabref/
* jabref-latest http://aur.archlinux.org/packages/jabref-latest/
mruby
* mruby [community]
* mruby http://aur.archlinux.org/packages/mruby/
mse-mtg
* mse-mtg http://aur.archlinux.org/packages/mse-mtg/
* mse-mtg-new http://aur.archlinux.org/packages/mse-mtg-new/
nyacc
* nyacc [extra]
* nyacc http://aur.archlinux.org/packages/nyacc/
opensmtpd-filter-rspamd
* opensmtpd-filter-rspamd [community]
* opensmtpd-filter-rspamd
* http://aur.archlinux.org/packages/opensmtpd

Re: [aur-general] aur client

[Lukas Fleischer via aur-general]

On Wed, 30 Oct 2019 at 11:04:07, Alberto Salvia Novella wrote:
> Would it be good enough for you if I renamed it from "aur" to 
> "aur-client"? So at least it won't sound like the AUR itself?

We currently only block aur and aurweb. There is some gray area but I'd
suggest to use another name that does not belong to the set
aur{,web}{,-cli,-client}. These are all names we would potentially use
for an official client and might decide to delete anytime.

Re: [aur-general] aur client

[Lukas Fleischer via aur-general]

On Tue, 29 Oct 2019 at 16:07:34, Alberto Salvia Novella wrote:
> Lukas Fleischer:
> > Another one is that we'd prefer you to not use a name that sounds very
> > official for a very unofficial project.
> That sounds reasonable in theory, but in practice it does nothing. The 
> software does its work nicely, and there's no official alternative that 
> does such thing. Plus being in the AUR implicitly suggests it's unofficial.
> 
> So it doesn't matter 
> <https://signalvnoise.com/archives2/it_just_doesnt_matter.php>, it's 
> just for the political correctness. I could name it "aup", but really, 
> what's the deal? I simply thought that typing "aur get" would be more 
> meaningful to the end user, but whatever.
> 
> Another alternative is that you name what criteria such program shall 
> meet to be considered official. And see if we can get to a common ground.

A third option is that we do not want an official implementation of this
feature and still ask you not to use a name that makes it look like
something official.

It's not just for "political correctness". Often enough, we are dealing
with users reporting bugs against official projects when the actual
issue is with some unofficial AUR helper. Giving another project such a
misleading name is likely a step in the wrong direction.

Re: [aur-general] aur client

[Lukas Fleischer via aur-general]

On Tue, 29 Oct 2019 at 11:20:27, Alberto Salvia Novella via aur-general wrote:
> That would make sense if the package was misleading, but "aur" is an aur 
> client for publishing to the AUR. It couldn't have clearer naming.

There are other reasons you might not want to use this name.

One is conflicts with other popular programs (you want your program to
be co-installable alongside other packages).

Another one is that we'd prefer you to not use a name that sounds very
official for a very unofficial project. We decided to add "aur" to our
blacklist. Feel free to reupload your package under another name.

[aur-general] aurweb 4.8.0 released

[Lukas Fleischer via aur-general]

Dear aurweb contributors and users,

This is a bit of a late announcement but we are pleased to announce that
aurweb 4.8.0 has been released last week!

Several bugs have been fixed, we made some significant performance
improvements by caching results of expensive database queries, and a
simple CAPTCHA has been added to combat the growing number of spam
accounts.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.8.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] Spammers in AUR user comments

[Lukas Fleischer via aur-general]

On Thu, 11 Apr 2019 at 15:13:32, Daniel M. Capella via aur-general wrote:
> On April 5, 2019 7:54:44 AM EDT, NicoHood  wrote:
> >Should and how can we better protect ourselves from spam comments?
> 
> Perhaps we should add CAPTCHA for account registrations.

IIRC, we had an issue with spam bots several years ago. We tried adding
a CAPTCHA back then and it did not help (which, of course, does not
imply that CAPTCHAs do not work in general).

The issue was eventually resolved by requiring users to confirm their
email address and set an initial password from the confirmation email
before using their accounts. If this no longer works and massive
spamming continues to be a problem, I am open to trying other techniques
again.

That being said, I think we should first figure out whether spammer
account creation is automated or done manually this time.

Lukas

Re: [aur-general] pushing new package to aur fails

[Lukas Fleischer via aur-general]

On Sun, 20 Jan 2019 at 21:48:46, Eli Schwartz via aur-general wrote:
> [...]
> > remote: Traceback (most recent call last):
> > remote:   File "hooks/update", line 11, in 
> > remote: load_entry_point('aurweb==4.7.0', 'console_scripts',
> > 'aurweb-git-update')()
> > remote:   File
> > "/usr/lib/python3.7/site-packages/aurweb-4.7.0-py3.7.egg/aurweb/git/update.py",
> > line 306, in main
> > remote: KeyError: 'pkgbase'
> [...]
> You must have the PKGBUILD and .SRCINFO available in every commit -- you
> are not permitted to first commit a README and only afterwards add the
> actual AUR contents.

We do have a check in our update hook that walks every commit can
explicitly checks for .SRCINFO and PKGBUILD. I wonder why that check
does not trigger a warning (assuming that the missing files are the
actual issue).

In any case, we should avoid exceptions in the hook and probably
safeguard against this situation.

Lukas

Re: [aur-general] About bullying in our community

[Lukas Fleischer via aur-general]

Dear community,

I am writing on behalf of the Arch Linux team.

Despite the initial radio silence, we have been talking about this
thread internally and we are still discussing the consequences.

We apologize for any emails and actions from our team which may have
been inappropriate or disrespectful. We are also sorry for not stepping
in publicly earlier but we tried to avoid making a drama out of this
with too many people joining in.

Moderation is off again, however, as Giancarlo mentioned, we do not
think any further comments on people's behavior on this list add any
value and we kindly ask you to focus your efforts on other stuff. We
will work it out internally. People make mistakes. We learn from it, try
to improve and move on.

Best regards,
Lukas

Re: [aur-general] Wrong ownership notification

[Lukas Fleischer via aur-general]

On Fri, 10 Aug 2018 at 10:47:02, Eli Schwartz via aur-general wrote:
> On 8/10/18 4:44 AM, Florian Bruhin wrote:
> [...]
> > However, the package never was orphaned, and at least in the AUR
> > webinterface I'm still listed as a maintainer... huh?
> 
> You're not the only one, I gave a patch to lfleischer via IRC a couple
> days ago IIRC.

I never received that message and I nearly missed this email as well.
Please report bugs to the bug tracker and send patches to the aur-dev
mailing list. Thanks!

Regards,
Lukas

[aur-general] aurweb 4.7.0 released

[Lukas Fleischer via aur-general]

Dear aurweb contributors and users,

We are pleased to announce that aurweb 4.7.0 has been released!

New features are the possibility to search by depends as well as an API
rate limit in the RPC interface. Moreover, co-maintainers can now remove
themselves from the co-maintainer list.

This release also includes several fixes and improvements to the comment
and notification features, as well as other bug fixes.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.7.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] [tu-bylaws] [PATCH] Clarify the process for Special Removal of an inactive TU

[Lukas Fleischer via aur-general]

On Sun, 21 Jan 2018 at 21:40:43, Xyne wrote:
> On 2018-01-21 10:04 +0100
> Lukas Fleischer via aur-general wrote:
> 
> >So you suggest to remove the first part of the condition (before the
> >"OR") altogether?
> 
> I made no such suggestion.

By your logic, there is no situation where the first part of the
condition applies but the second part (after the "OR") does not. So we
could as well remove the part before the "OR" -- and, if that were the
case, we would have removed the statement before the amendment of the
bylaws.

If what I am saying is not true, there might be a misunderstanding: in
this case, please describe a situation where only the part before the
"OR" applies but the part after the "OR" does not.

> And again, the intention of the current bylaws was not to disregard voting as
> an activity. The first part was to speed up the process for TUs who show no
> visible online activity (i.e. TUs who have abandoned Arch completely, for
> whatever reason), and the second part was to remove those who prevent the
> establishment of quorum. A TU who votes is clearly still logging in to his or
> her account and not preventing quorum. So yeah, a TU who does nothing but vote
> for over a year should be removed, but by a regular removal process, which the
> bylaws already handle.

Makes no sense. See above. We would not have listed all the details of
what TU inactivity means if inactivity always implies the part after the
"OR".

> 
> Btw, we discussed this together over 4 years ago and we were in agreement then
> about both the intention and the formulation. Here's a message in which you
> clearly agreed with this intention:
> 
> https://lists.archlinux.org/pipermail/aur-general/2013-August/024783.html

I did agree that inactivity should be a sufficient condition for special
removal. I did never agree that inactivity requires not voting. In that
email, I even explained that I understand "work on the AUR" as
"uploading, updating and deleting packages".

In fact, even if you really want to be pedantic and take everything in
the bylaws literally, the first condition before the "OR" applies if a
Trusted User does nothing but vote: in today's terminology, the "AUR" is
the "Arch User Repository" (the collection of packages uploaded and
maintained by users) and the web interface is called "aurweb", see [1].
So, while voting is a TU action performed in aurweb, it is clearly not
"any action that required TU privileges on the AUR" because the AUR
(package collection) is not touched.

Regards,
Lukas

[1] https://git.archlinux.org/aurweb.git/plain/README

Re: [aur-general] [tu-bylaws] [PATCH] Clarify the process for Special Removal of an inactive TU

[Lukas Fleischer via aur-general]

On Sun, 21 Jan 2018 at 04:24:49, Xyne wrote:
> > The intent of the first sectionm before the "OR", is to measure any sort of
> > activity. Updating a package, voting or posting a comment shows that the TU
> > is still logging in to the AUR and thus active in some sense. The point of
> > the first section was to provide a way to remove TUs who had simply
> > disappeared. This is as it should be. There is no mandated TU quota for
> > package actions.
> 
> > The intent of the second section, after the "OR", is to ensure that TUs who
> > repeatedly disregard votes and possibly prevent quorum from being 
> > established
> > can be removed.
> 
> The special removal procedure was only added to handle special cases where the
> TU has clearly abandoned Arch altogether (no detectable activity in the last
> two months) or the TU has simply ignored votes and thus jeopardized quorum,
> again over a period of two months or more.
> 
> The normal procedure should be used to remove a TU who has not impeded other
> TUs in their mission and who has been active within the last two months, which
> gives them time to offer an explanation or a resignation.

So you suggest to remove the first part of the condition (before the
"OR") altogether?

Re: [aur-general] Special Removal of an Inactive TU: speps

[Lukas Fleischer via aur-general]

On Sun, 21 Jan 2018 at 04:07:06, Xyne wrote:
> Doug Newgard via aur-general wrote:
> 
> >Yes, it is a bit ambiguous. The discussion in #archlinux-tu concluded that 
> >the
> >voting being an the AUR was just happenstance and intent of the section was
> >that voting not be included in point 2. With many/most of the most active TUs
> >participating or present for that discussion, I would conclude that the 
> >general
> >understanding of this section was followed in this case and the motions have
> >passed.
> 
> I disagree. The intent of the first sectionm before the "OR", is to measure 
> any
> sort of activity. Updating a package, voting or posting a comment shows that
> the TU is still logging in to the AUR and thus active in some sense. The point
> of the first section was to provide a way to remove TUs who had simply
> disappeared. This is as it should be. There is no mandated TU quota for 
> package
> actions.

I find it ridiculous to call Trusted Users active ("in some sense") if
all they do is vote. The actual job of a Trusted User is to maintain the
AUR and the [community] repository. Imagine a world where all Trusted
Users would do nothing but add/remove new Trusted Users; neither the AUR
nor [community] are touched by anyone. Would you call such a group of
Trusted Users active? I doubt so.

Also, as I already mentioned in another reply, the intent of the current
statement in the bylaws is quite clear: voting should not be considered
as some sort of activity in the first section before the "OR". If you
count voting as activity, the condition "not active OR not voting" for
special removal makes no sense: "voting" implies "active", so "not
active" implies "not voting" and the statement "not active OR not
voting" is equivalent to "not voting". This means that the whole section
before the "OR" is unnecessary. I do not think we would have voted for
an amendment of the bylaws adding unnecessary junk.

I really hope we will not start reading and writing our bylaws like
pedantic lawyers, where every single formulation has to be chosen very
carefully. Voting is just a tiny part of the things we do, our main
focus should be on improving Arch Linux as a distribution.

Regards,
Lukas

Re: [aur-general] Special Removal of an Inactive TU: speps

[Lukas Fleischer via aur-general]

On Thu, 18 Jan 2018 at 22:05:10, Thorsten Toepper wrote:
> [...]
> Whether the votes happens in the AUR web interface or on a separate
> private mailing list is unimportant for the real process I agree, just
> at the moment it's the AUR webinterface and the second point is simply
> not too well formulated, in it's current form this also includes the
> votes and therefore in case someone participated in a vote both blocks
> are neglected. So the "either" "or" doesn't really work here.
> 
> Rephrasing the bylaw to something like
> 
> "performed any action that required TU privileges on the AUR
> (*excluding* participation in votes for there is below rule)"
> [...]

Due to lack of time, I did not follow the whole discussion, so please
excuse me for potentially addressing things that are resolved already.

Using common sense, the bylaws are pretty clear. It makes no sense to
count TU voting as an "action that required TU privileges". Otherwise,
the statement after the "OR" would imply the statements before the "OR",
making the extra part "who has not voted in a consecutive series of
voting periods [...]" superfluous.

That said, I would appreciate any efforts to improve the wording, just
to avoid future confusion and discussion.

Best regards,
Lukas

Re: [aur-general] AUR account registration failed

[Lukas Fleischer via aur-general]

On Mon, 01 Jan 2018 at 16:51:42, Mauro Santos via aur-general wrote:
> On 01-01-2018 14:33, Ian Bashford wrote:
> > Hi Lukas,
> > 
> > Thanks for replying quickly.  I haven't received your direct mail either...
> > (I've checked spam).
> > It should be the same address I'm using to post to the list.
> > 
> 
> You said you have registered with ianbashford  \at/ gmail.com but you
> are posting from ian \at/ bashford.net. Double check that you own and
> are using the correct emails.

And your AUR account actually uses ibashford, not ianbashford, as
local-part of the Gmail address.

Regards,
Lukas

Re: [aur-general] AUR account registration failed

[Lukas Fleischer via aur-general]

On Mon, 01 Jan 2018 at 14:56:01, Ian Bashford wrote:
> I tried creating an aur account ianb, registered for ianbashford  \at/
> gmail.com
> I didn't receive the confirmation mail, and password resets don't send
> anything either.
> Would an admin be able to see what's wrong?

Replied off-list.

[aur-general] aurweb 4.6.0 released

[Lukas Fleischer via aur-general]

Dear aurweb contributors and users,

We are pleased to announce the release of aurweb 4.6.0!

This release brings a lot of improvements to the comment functionality.
You can now use basic Markdown syntax to format your comments. Commit
hashes to the Git repository of the package and references to Flyspray
tickets are converted to links automatically. Long comments are
collapsed and can be expanded on demand.

We also made some changes not immediately visible to the end user,
including several security fixes, a safety mechanism to prevent Trusted
Users from accidentally performing non-fast-forward pushes and a public
API to retrieve a list of registered account names.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.6.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] git push - Permissions denied

[Lukas Fleischer]

On Wed, 05 Apr 2017 at 08:01:19, Bruno Pagani via aur-general wrote:
> Hum… Didn’t think about searching for the $pkgbase. This kind of things
> should not happen, right? Maybe the git interface should check the
> presence of a pkgname in .SRCINFO (as well as mismatches with the
> PKGBUILD for all sorts of things)?

We cannot parse PKGBUILD files, so we cannot ensure that the .SRCINFO
meta data matches the PKGBUILD (not being able to parse PKGBUILD files
was the reason .SRCINFO was introduced in the first place).

Checking for at least one package in the update hook sounds like a good
idea to me. I will look into it, thanks!

> 
> This would block such commits:
> https://aur.archlinux.org/cgit/aur.git/commit/?h=libcs50&id=57fe3f6e5de6e1ab398e6c48ced4adba0ae8d57e
> 
> Bruno
> 

Re: [aur-general] git push - Permissions denied

[Lukas Fleischer]

On Wed, 05 Apr 2017 at 03:43:11, Dan B via aur-general wrote:
> Package: aur.archlinux.org/libcs50
> 
> >  » git push
> > Enter passphrase for key '/home/krakn/.ssh/id_rsa':
> > git-receive-pack: permission denied: krakn
> > fatal: Could not read from remote repository.
> >
> > Please make sure you have the correct access rights and the repository 
> > exists.
> 
> Remotes are as follows (I am able to clone the repository):
> 
> >  » git remote -v
> > origin ssh://a...@aur.archlinux.org/libcs50 (fetch)
> > origin ssh://a...@aur.archlinux.org/libcs50 (push)
> 
> I have no problems pushing to my other repositories. Is there
> something on the backend that might be preventing the push?

Well, the Git repository and the package base already exist [1, 2] and
are maintained by somebody else. It is kind of strange that there is no
package assigned to that package base, though (.SRCINFO does not contain
a pkgname entry).

[1] https://aur.archlinux.org/cgit/aur.git/?h=libcs50
[2] https://aur.archlinux.org/pkgbase/libcs50

Re: [aur-general] Aur password reset link doesn't send mail

[Lukas Fleischer]

Hello Taha,

On Wed, 29 Mar 2017 at 01:08:16, Taha Konuk via aur-general wrote:
> I want to reset my aur login password but after I enter my email address to
> get a reset link I don't receive the mail. My account is on this mail. Can
> you guys help me?

Maybe you mistyped your email address in the password reset form? I just
requested another password reset link for your email address and checked
the mail server logs to make sure the email was sent. If you still do
not receive anything, please check your email client configuration and
your spam filter.

Regards,
Lukas

[aur-general] aurweb 4.5.1 released

[Lukas Fleischer]

Hello,

We are pleased to announce aurweb 4.5.1, the first maintenance release
for 4.5. The official aurweb setup [1] has already been updated.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.5.1
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] aurweb 4.5.0 released

[Lukas Fleischer]

On Wed, 01 Mar 2017 at 06:51:23, Pablo Roberto Lezaeta Reyes via aur-general 
wrote:
> Ack, translations! I don't remember an anouncement about the string freeze,
> so now many languages have missing string, but better just wait until 4.5.1
> to let the teams catch the 4.5 new strings.

I know, the 4.5.0 release was rushed a bit, mostly due to time
constraints on my side. We will have a string freeze for 4.5.1 soon.

> 
> But My question is "what is the order used for short the packages?"

I don't quite understand your question. If you are talking about your
packages on the dashboard, they are sorted by last update time. If you
are talking about the default sort order on the package search page:
They are sorted by popularity if you visit the page without a search
query and sorted alphabetically otherwise.

Re: [aur-general] Can't register an AUR account

[Lukas Fleischer]

On Sun, 26 Feb 2017 at 19:41:53, Antonio Gutierrez via aur-general wrote:
> Hi all,
> 
> I'm trying to create an account in the AUR, I fill in the data and hit
> Create, but I just get this undescriptive error at the top:
> 
> Error trying to create account, *'chibby0ne'*.
> [...]
> Any ideas?

Should be fixed now, see [1]. Thanks for reporting!

[1] https://lists.archlinux.org/pipermail/aur-dev/2017-February/004292.html

[aur-general] aurweb 4.5.0 released

[Lukas Fleischer]

Dear aurweb contributors and users,

aurweb 4.5.0 has just been released.

You will notice that after logging in, the home page is now replaced by
a dashboard which shows your flagged packages and your recent package
requests, followed by a list of your packages. There also is a list of
packages you co-maintain which hopefully makes co-maintainers' lives
easier. Moreover, co-maintainers of packages now receive out-of-date
notifications.

In your account settings, you can now specify a timezone which will be
used to format dates and times throughout the whole aurweb interface.

The most notable internal improvements were made in password security.
The minimum password length was bumped to 8 characters. Passwords are
now hashed using bcrypt instead of MD5. The conversion from MD5 to
bcrypt is done automatically when logging in. We thus recommend to log
out of the aurweb interface and log in again.

There were also improvements to the SSH interface, including new
commands to vote for packages and flag packages out-of-date.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.5.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] AUR-account: lost pw/e-mail

[Lukas Fleischer]

On Sat, 25 Feb 2017 at 16:48:58, Oluf Lorenzen wrote:
> i lost my password and e-mail for the user 'finkregh'.

There is no account with that user name. You can register at [1].

[1] https://aur.archlinux.org/register/

Re: [aur-general] Need a reset link

[Lukas Fleischer]

On Mon, 13 Feb 2017 at 02:51:03, Nobabs27 via aur-general wrote:
> Hi, I need a reset link for the account "Nobabs27" on the AUR, but I can't 
> receive the email because Yahoo.

I sent you a new password to your Yahoo email address. Please change it
again after logging in.

Thanks,
Lukas

[aur-general] Voting Results (was: TU Application: Baptiste Jonglez)

[Lukas Fleischer]

On Wed, 07 Dec 2016 at 08:05:59, Lukas Fleischer wrote:
> [...]
> The discussion period is over. Please cast your votes at [1].
> [...]

The voting period has ended. The results are:

* Yes: 24
* No: 4
* Abstain: 11

This means that the proposal has been accepted.

Congratulations, Baptiste, and welcome aboard!

I already upgraded your AUR account. Please go through the TODO list for
new Trusted Users [1] to learn about the next steps.

Regards,
Lukas

[1] 
https://wiki.archlinux.org/index.php?title=AUR_Trusted_User_Guidelines#TODO_list_for_new_Trusted_Users

Re: [aur-general] TU Application: Baptiste Jonglez

[Lukas Fleischer]

On Mon, 28 Nov 2016 at 07:33:16, Baptiste Jonglez wrote:
> I would like to apply to become a TU.  Lukas Fleischer has kindly accepted
> to sponsor my application.
> [...]
> Don't hesitate if you have any questions, or comments on my AUR packages!

The discussion period is over. Please cast your votes at [1].

[1] https://aur.archlinux.org/tu/?id=89

Re: [aur-general] TU Application: Baptiste Jonglez

[Lukas Fleischer]

On Mon, 28 Nov 2016 at 07:33:16, Baptiste Jonglez wrote:
> I would like to apply to become a TU.  Lukas Fleischer has kindly accepted
> to sponsor my application.

I confirm that I sponsor Baptiste.

I have worked with him several times in the past; among other things he
contributed several patches to calcurse back in 2012 [1]. He is
knowledgable and I think he will be a great addition to the team!

Let the discussion period begin!

[1] http://git.calcurse.org/calcurse.git/log/?qt=author&q=Baptiste+Jonglez


signature.asc
Description: signature

Re: [aur-general] Co-maintainers not receiving flag-out-of-date notification mails?

[Lukas Fleischer]

On Sun, 13 Nov 2016 at 10:10:52, Chi-Hsuan Yen via aur-general wrote:
> I'm the co-maintainer of depot-tools-git. [1] Two weeks ago that package is
> flagged as out-of-date, but I didn't receive any notification mail - not in
> Spam either. For other packages that I'm the only maintainer, out-of-date
> notifications are well sent. Is it an aurweb bug or just an accident that
> my inbox losts the mail?

I am not sure whether I would call it a bug since there is no
specification on the recipients of notification emails. I agree that it
makes sense to send out-of-date notifications to co-maintainers as well,
though. I submitted a patch here [1].

[1] https://lists.archlinux.org/pipermail/aur-dev/2016-November/004171.html

Re: [aur-general] Missing Co-Maintainer Search Criteria on AUR

[Lukas Fleischer]

On Sat, 05 Nov 2016 at 10:00:35, NicoHood wrote:
> I think adding a manual co-maintain filter is enough for now (option 2
> without special UI). I do not really need a special button etc, just
> somehow an option to show the packages. This way the feature could be
> implemented possibly simple while keeping the UI idea open for now.
> (However I like the idea of the "Packages I Co-Maintain" section idea).

Simply adding new filters before thinking ahead is something I would
rather avoid, though. If we find a better UI later (maybe something like
the split maintainers page I suggested), we cannot silently drop the
co-maintainer filter again because links and scripts might already use
it. For the same reason, we still have that legacy "Exact name" filter
instead of being consistent with archweb now.

Make a plan, then implement -- not the other way round...

Re: [aur-general] Missing Co-Maintainer Search Criteria on AUR

[Lukas Fleischer]

On Fri, 04 Nov 2016 at 22:24:32, Johannes Löthberg via aur-general wrote:
> This belongs on either the bugtracker[0] or aur-dev rather than 
> aur-general.  Essentially the reason there isn't currently support for 
> it is that both me and Lukas has been rather busy lately, but we'd 
> gladly accept patches for it!

I actually wanted to implement this a while ago but deferred it because
I had problems finding a good UI. The two straightforward options are:

1. Adjust the maintainer filter such that it also looks for
   co-maintainers... Which would essentially result in packages you
   co-maintain being listed under "My Packages".

2. Add a new co-maintainer filter. Then, in addition to "My Packages",
   add a "Packages I Co-Maintain" link.

I do not like the first option because packages you co-maintain differ
from "your" packages. Co-maintainers do not have the same privileges as
maintainers.

I also do not really like the second option. Adding more and more
options and links clutters the UI and makes things inconvenient. For
example, we added a filter for exact package name searches in commit
1c55e6b (Add option to search for exact name matches only (fixes
FS#23556)., 2011-04-06). I wish we had implemented it the way archweb
does it [1] back then. It is much more intuitive and clear.

Transferring this idea to co-maintainer search, maybe the "My Packages"
page should have two sections: A list with packages one maintains,
followed by a second table of packages one co-maintains. It is not
entirely clear how to implement this as part of the package search,
especially when it comes to pagination. So, many topics to discuss
before coming up with a patch...

[1] https://www.archlinux.org/packages/?q=linux

[aur-general] aurweb 4.4.1 released

[Lukas Fleischer]

Just for the record: The first maintenance release for aurweb 4.4 was
released yesterday and the official setup [1] was upgraded.

For a comprehensive list of changes, consult the Git log [2], and please
report bugs to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.4.1
[3] https://bugs.archlinux.org/index.php?project=2

[aur-general] aurweb 4.4.0 released

[Lukas Fleischer]

Dear list,

I am sending this a bit later than usual -- aurweb 4.4.0 was released
yesterday and the official aurweb setup [1] was upgraded a couple of
hours ago.

You can now change package ownership using the SSH interface, check the
new commands in the `ssh a...@aur.archlinux.org help` output for details.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

Wish you all a nice Sunday!

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.4.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] I can't upgrade my package

[Lukas Fleischer]

On Sat, 01 Oct 2016 at 21:34:02, Lukas Fleischer wrote:
> Note the additional hyphen. One could argue that git-serve should
> support both notations, however, for a short-term fix, you should figure
> out why Git sends `git receive-pack` instead of `git-receive-pack`.

Even better: I just added a patch to support `git receive-pack` to our
live setup. Please try again.

Re: [aur-general] I can't upgrade my package

[Lukas Fleischer]

On Sat, 01 Oct 2016 at 21:07:29, Juan Martínez wrote:
> [...]
> debug1: Remote: Forced command.
> debug1: Remote: Port forwarding disabled.
> debug1: Remote: X11 forwarding disabled.
> debug1: Remote: PTY allocation disabled.
> debug1: Remote: Forced command.
> debug1: Remote: Port forwarding disabled.
> debug1: Remote: X11 forwarding disabled.
> debug1: Remote: PTY allocation disabled.
> debug1: Sending environment.
> debug1: Sending env LANG = es_AR.UTF-8
> debug1: Sending command: git receive-pack '/with-git.git'

Ok, this is what I thought. This line should be

debug1: Sending command: git-receive-pack '/with-git.git'

Note the additional hyphen. One could argue that git-serve should
support both notations, however, for a short-term fix, you should figure
out why Git sends `git receive-pack` instead of `git-receive-pack`.

The output of `git config -l` might be useful. In particular, you want
to look for remote..receivepack in that list. Or maybe something
adds --receive-pack to the `git push` command.

Regards,
Lukas

Re: [aur-general] I can't upgrade my package

[Lukas Fleischer]

On Sat, 01 Oct 2016 at 20:38:11, Juan Martínez wrote:
> El sáb, 01-10-2016 a las 20:25 +0200, Lukas Fleischer escribió:
> > On Sat, 01 Oct 2016 at 19:57:55, Juan Martínez wrote:
> [...]
> Arch:
> git version 2.10.0
> 
> Lubuntu (also tried from here since i have the same keys and all):
> git version 2.7.4

Could you run `GIT_SSH_COMMAND="ssh -v" git push` instead of `git push`
and paste the output, please?

Re: [aur-general] I can't upgrade my package

[Lukas Fleischer]

On Sat, 01 Oct 2016 at 19:57:55, Juan Martínez wrote:
> El sáb, 01-10-2016 a las 12:53 -0500, Doug Newgard escribió:
> > On Sat, 01 Oct 2016 14:42:22 -0300
> > Juan Martínez  wrote:
> [...]
> [mrat@mrat with-git]$ git push
> Enter passphrase for key '/home/mrat/.ssh/aur': 
> invalid command: git
> Try `ssh a...@aur.archlinux.org help` for a list of commands.
> fatal: Could not read from remote repository.
> 
> Please make sure you have the correct access rights
> and the repository exists.

Are you using any special Git implementation? Any wrappers around Git?
Any aliases? What is the output of `git --version`?

Re: [aur-general] Send Package to AUR

[Lukas Fleischer]

On Mon, 22 Aug 2016 at 18:21:48, Rafael Fontenelle wrote:
> 2016-08-22 13:12 GMT-03:00 Tiago R. Lampert :
> [...]
> I notice the following snippet:
> 
> > remote: error: invalid pkgbase: jsql-injection, expected package_name
> > remote: error: hook declined to update refs/heads/master

This looks like you are using the wrong URI for the remote. It should be

ssh://a...@aur.archlinux.org/jsql-injection.git/

while

ssh://a...@aur.archlinux.org/package_name.git/

seems to be what you are using.

It can be changed by running `git remote set-url origin [...]`.

Regards,
Lukas

[aur-general] aurweb 4.3.0 released

[Lukas Fleischer]

Dear aurweb contributors and users,

aurweb 4.3.0 was released earlier today. Unfortunately, there were some
issues with the new database backend which prevented users from
accessing the SSH/Git interface of the official aurweb setup [1] for a
couple of hours. A patch [2] has been submitted to the aur-dev mailing
list and everything should work fine again now. We apologize for any
inconvenience.

For a comprehensive list of changes, please consult the Git log [3]. As
usual, bugs should be reported to the aurweb bug tracker [4].

[1] https://aur.archlinux.org/
[2] https://lists.archlinux.org/pipermail/aur-dev/2016-August/004101.html
[3] https://projects.archlinux.org/aurweb.git/log/?id=v4.3.0
[4] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] aur-general Digest, Vol 142, Issue 15

[Lukas Fleischer]

On Sat, 13 Aug 2016 at 14:23:42, Dwarf wrote:
> > You can send a mail containing 'password' in the message body to
> > 'aur-general-request'. You should get your password in the reply.
> Thanks for the suggestion, but I forgot to clarify that it's for the
> AUR, not the mailing list.

You should at least tell us the user name or the email address you used.
The one you are sending this email from is not linked to any account.
Feel free to send me the details off-list.

Re: [aur-general] There are too many unreachable loose objects; run 'git prune' to remove them.

[Lukas Fleischer]

On Wed, 01 Jun 2016 at 12:10:49, Florian Bruhin wrote:
> Hi,
> 
> whenever I push something to the AUR since some days (even a new repo with a
> single commit) I get:
> 
> error: The last gc run reported the following. Please correct the 
> root cause
> and remove gc.log.
> Automatic cleanup will not be performed until the file is removed.
> 
> warning: There are too many unreachable loose objects; run 'git 
> prune' to remove them.
> 
> It seems to be harmless (i.e. the package is uploaded anyways), but
> it's kind of confusing - it seems this is something wrong on the
> server, and not my local git repo?

I just triggered a cleanup script to prune unreachable objects. The
warning should be gone.

Regards,
Lukas

[aur-general] Duplicates in the AUR/[community]/[extra]

[Lukas Fleischer]

I did not run aurdupes for a while and in the meantime, the list of
packages being both in the AUR and in the official repositories grew
quite large (almost 100 packages!):

bandit
* bandit [community]
* bandit http://aur.archlinux.org/packages/bandit/
chinese-calendar
* chinese-calendar [community]
* chinese-calendar http://aur.archlinux.org/packages/chinese-calendar/
docbook-dsssl
* docbook-dsssl [extra]
* docbook-dsssl http://aur.archlinux.org/packages/docbook-dsssl/
docbook-sgml31
* docbook-sgml31 [extra]
* docbook-sgml31 http://aur.archlinux.org/packages/docbook-sgml31/
docbook-utils
* docbook-utils [extra]
* docbook-utils http://aur.archlinux.org/packages/docbook-utils/
docker-machine
* docker-machine [community]
* docker-machine http://aur.archlinux.org/packages/docker-machine/
gnome-todo
* gnome-todo [extra]
* gnome-todo http://aur.archlinux.org/packages/gnome-todo/
graphene
* graphene [extra]
* graphene http://aur.archlinux.org/packages/graphene/
gspell
* gspell [extra]
* gspell http://aur.archlinux.org/packages/gspell/
haskell-aeson-better-errors
* haskell-aeson-better-errors [community]
* haskell-aeson-better-errors
* http://aur.archlinux.org/packages/haskell-aeson-better-errors/
haskell-base-unicode-symbols
* haskell-base-unicode-symbols [community]
* haskell-base-unicode-symbols
* http://aur.archlinux.org/packages/haskell-base-unicode-symbols/
haskell-blaze-builder
* haskell-blaze-builder [community]
* haskell-blaze-builder
* http://aur.archlinux.org/packages/haskell-blaze-builder/
haskell-bower-json
* haskell-bower-json [community]
* haskell-bower-json
* http://aur.archlinux.org/packages/haskell-bower-json/
haskell-boxes
* haskell-boxes [community]
* haskell-boxes http://aur.archlinux.org/packages/haskell-boxes/
haskell-byteable
* haskell-byteable [community]
* haskell-byteable http://aur.archlinux.org/packages/haskell-byteable/
haskell-cipher-aes
* haskell-cipher-aes [community]
* haskell-cipher-aes
* http://aur.archlinux.org/packages/haskell-cipher-aes/
haskell-cryptohash
* haskell-cryptohash [community]
* haskell-cryptohash
* http://aur.archlinux.org/packages/haskell-cryptohash/
haskell-data-accessor
* haskell-data-accessor [community]
* haskell-data-accessor
* http://aur.archlinux.org/packages/haskell-data-accessor/
haskell-data-hash
* haskell-data-hash [community]
* haskell-data-hash http://aur.archlinux.org/packages/haskell-data-hash/
haskell-digest
* haskell-digest [community]
* haskell-digest http://aur.archlinux.org/packages/haskell-digest/
haskell-equivalence
* haskell-equivalence [community]
* haskell-equivalence
* http://aur.archlinux.org/packages/haskell-equivalence/
haskell-fclabels
* haskell-fclabels [community]
* haskell-fclabels http://aur.archlinux.org/packages/haskell-fclabels/
haskell-hlint
* haskell-hlint [community]
* haskell-hlint http://aur.archlinux.org/packages/haskell-hlint/
haskell-hunit
* haskell-hunit [community]
* haskell-hunit http://aur.archlinux.org/packages/haskell-hunit/
haskell-lifted-base
* haskell-lifted-base [community]
* haskell-lifted-base
* http://aur.archlinux.org/packages/haskell-lifted-base/
haskell-mmorph
* haskell-mmorph [community]
* haskell-mmorph http://aur.archlinux.org/packages/haskell-mmorph/
haskell-monad-control
* haskell-monad-control [community]
* haskell-monad-control
* http://aur.archlinux.org/packages/haskell-monad-control/
haskell-monadrandom
* haskell-monadrandom [community]
* haskell-monadrandom
* http://aur.archlinux.org/packages/haskell-monadrandom/
haskell-pattern-arrows
* haskell-pattern-arrows [community]
* haskell-pattern-arrows
* http://aur.archlinux.org/packages/haskell-pattern-arrows/
haskell-polyparse
* haskell-polyparse [community]
* haskell-polyparse http://aur.archlinux.org/packages/haskell-polyparse/
haskell-resourcet
* haskell-resourcet [community]
* haskell-resourcet http://aur.archlinux.org/packages/haskell-resourcet/
haskell-setlocale
* haskell-setlocale [community]
* haskell-setlocale http://aur.archlinux.org/packages/haskell-setlocale/
haskell-statevar
* haskell-statevar [community]
* haskell-statevar http://aur.archlinux.org/packages/haskell-statevar/
haskell-stmonadtrans
* haskell-stmonadtrans [community]
* haskell-stmonadtrans
* http://aur.archlinux.org/packages/haskell-stmonadtrans/
haskell-transformers-base
* haskell-transformers-base [community]
* haskell-transformers-base
* http://aur.archlinux.org/packages/haskell-transformers-base/
haskell-vault
* haskell-vault [community]
* haskell-vault http://aur.archlinux.org/packages/

Re: [aur-general] [RFC] Limit the height of AUR comments

[Lukas Fleischer]

On Mon, 07 Mar 2016 at 06:03:53, Mark Weiman wrote:
> [...]
> It's rather frowned upon to post monolithic comments of that nature. Assuming
> your change makes it so that comments are in their own scrollable box if 
> they're
> too long, it would be a change I'd be for.
> [...]

For dependencies, there is some JavaScript code to collapse long lists.
Maybe we could do the same with comments: If a comment gets too long,
collapse using JS and add a "Display full comment..." link.

[aur-general] aurweb 4.2.0 released

[Lukas Fleischer]

Dear aurweb contributors and users,

We are pleased to announce aurweb 4.2.0. The official aurweb setup [1]
has already been upgraded.

Even though this is only a minor release, the list of new features is
longer than usual, which is mostly because we started working on various
different requests that have been lying around for a long time. I
divided the changes into four categories:

* Package Handling: Providers from the official repositories are now
  recognized and broken dependencies are highlighted in the web
  interface (note that this particular feature already went live [1] a
  while ago, even though it was not part of any official release yet).
  As an alternative to using the web interface, it is possible to change
  package base keywords via SSH (check `ssh a...@aur.archlinux.org help`
  for details) and we switched to python-srcinfo for parsing package
  metadata (thanks to Johannes Löthberg for starting this project and
  for providing aurweb patches).

* Notifications: Users are now notified when they are added to (resp.
  removed from) the co-maintainer list of a repository. You can
  optionally subscribe to package update notifications from the new
  notification settings area on the account edit page.

* Comments: Package base comments can be pinned (thanks to Mark Weiman
  for implementing this) and Trusted Users as well as developers can
  undelete comments that were removed earlier (thanks to Marcel Korpel).

* RPC: There was a complete overhaul of the RPC interface (now at v5).
  The documentation can be found at [2].

For a comprehensive list of changes, please consult the Git log [3]. As
usual, bugs should be reported to the aurweb bug tracker [4].

[1] https://aur.archlinux.org/
[2] https://aur.archlinux.org/rpc/
[3] https://projects.archlinux.org/aurweb.git/log/?id=v4.2.0
[4] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] Now there is real Spam in the AUR comments - Was: Misuse of AUR (yaourt) comments

[Lukas Fleischer]

On Fri, 12 Feb 2016 at 18:30:04, Tinu Weber wrote:
> [...]
> There is also spam (from today) on
> https://aur.archlinux.org/packages/atom-editor/
> And there seems to be another spam comment on the yaourt page right now.
> 

Thanks for reporting! I deleted those comments and suspended the
account.

> Is there any anti-spam measure for registering AUR accounts like on the
> BBS? I don't remember anymore. If not, it would be good idea to add
> something like that.

Yes, we verify email addresses of newly created accounts. This feature
was introduced when we had spam issues in 2013 [1] and it was the only
effective countermeasure at that moment (we temporarily had CAPTCHAs
which did not work well). Obviously, it does not help against people
manually posting spam but we cannot do much against that, apart from
suspending accounts and blocking IP addresses.

Regards,
Lukas

[1] https://lists.archlinux.org/pipermail/aur-dev/2013-March/002400.html

Re: [aur-general] qtikz-git

[Lukas Fleischer]

Hi Stefan,

On Sun, 07 Feb 2016 at 18:41:19, Stefan Husmann wrote:
> Hello,
> 
> I hav uploaded a package qtikz-git to AUR and got no error message doing so, 
> but the package did not show up in AUR.
> 
> Should I open a bug report for this?
> [...]

Looking at the .SRCINFO file [1], there does not seem to be any package.
The package base details page is available at [2]. What did you use to
generate the meta data? If it was `makepkg --printsrcinfo`, you should
probably file a bug against pacman.

Regards,
Lukas

[1] https://aur.archlinux.org/cgit/aur.git/tree/.SRCINFO?h=qtikz-git
[2] https://aur.archlinux.org/pkgbase/qtikz-git/

Re: [aur-general] Why is the package version still the old one?

[Lukas Fleischer]

On Sun, 29 Nov 2015 at 12:55:02, Iru Cai wrote:
> On Sun, Nov 29, 2015 at 7:41 PM, Johannes Dewender  wrote:
> 
> > On 29/11/15 12:18, Iru Cai wrote:
> > > I updated babl-git, gegl-git, and gimp-git to AUR. Why are the version
> > > of these packages still the old one? The version in depends is also
> > > not updated.
> >
> > You need to update the .SRCINFO. You usually do this with running
> > "mksrcinfo" (either manually before the commit or a as a pre-commit hook).
> >
> Thanks. I forgot to do it.
> [...]

Out of curiosity: aurweb usually displays the message

remote: warning: .SRCINFO unchanged. The package database will not be 
updated!

when you try to push changes without updating .SRCINFO. Did the message
not appear when you tried to push? Was it not clear enough? Did it get
lost in the other messages printed during `git push`?

Re: [aur-general] Issues Pushing

[Lukas Fleischer]

On Wed, 07 Oct 2015 at 12:58:27, Lukas Fleischer wrote:
> On Wed, 07 Oct 2015 at 09:41:31, David Phillips wrote:
> > Okay, good to know it's being worked on. I seem to recall the TU who
> > looked at it mentioning that using separate repositories would use up
> > more disc space but avoid this issue?
> > 
> 
> Slightly more disc space on the server, yes. One idea was to use
> $GIT_OBJECT_DIRECTORY, though, which means that we could still use a
> shared object storage. We would only need to store the refs separately.
> 
> The other possibility is to tell Git to not advertise refs outside the
> currently selected namespace. I am not entirely sure whether that is a
> good idea and whether it would be accepted upstream, though.
> [...]

We temporarily enabled a undocumented Git setting to suppress these
unneeded advertisements. Git 2.7 will probably officially support hiding
refs outside the current namespace which we will enable as soon as 2.7
is out and the aurweb hosting server is upgraded.

Regards,
Lukas

Re: [aur-general] Email address too long for login page?

[Lukas Fleischer]

On Mon, 02 Nov 2015 at 05:44:44, Eli Schwartz wrote:
> On Sun, Nov 1, 2015 at 11:31 PM, David Phillips 
> wrote:
> 
> > Is it just me, or is the field marked "Username or email address" on
> > the AUR login page setting a character limit below the length of my
> > email address?
> >
> > I will assume it's setting the maximum input length to that of some
> > other limit, like a maximum username length? If so, then perhaps this
> > field should be marked for usernames only and not username or email
> > address…
> >
> >
> > Cheers
> >
> 
> I think the current limit is 64 characters for both, but an update last
> week [1] changed this to 265. That isn't yet in the released version.
> 
> If the email address you used to send this message ^^ is the same one you
> tried using on the AUR, then I don't think there should be a problem.
> [...]

Actually, the database limit was 64 characters but the length limit of
the input field was much lower (16 characters by default) before d52b2f5
(Support long email addresses, 2015-10-25). Will be fixed in the next
release.

Re: [aur-general] Half Deleted Package?

[Lukas Fleischer]

On Thu, 08 Oct 2015 at 15:34:37, David Manouchehri wrote:
> Why did it automatically get adopted by me even though I never successfully
> pushed anything?

When pushing to a nonexistent (hidden) repository, a new package base is
created. This happens *before* Git is invoked. At this point, we do not
know whether the push is rejected, a no-op or actually updates a ref.

Re: [aur-general] Half Deleted Package?

[Lukas Fleischer]

On Thu, 08 Oct 2015 at 07:14:44, Niccolò Maggioni wrote:
> It seems that I can clone the repo, but don't have the permission to push
> to it. What happened? I'd be glad to hand the package over to a another
> maintainer, but this situation is... weird.
> [...]

It was adopted by David [1].

[1] https://aur.archlinux.org/pkgbase/pam_u2f-git/

Re: [aur-general] Half Deleted Package?

[Lukas Fleischer]

On Thu, 08 Oct 2015 at 06:54:20, Niccolò Maggioni wrote:
> I created the package just before the AUR4 transition, but it somehow got
> lost during the upgrade. I'll try to delete any leftover, I'll report back
> in a few hours!
> [...]

It is not possible to remove the Git repository. If you want to restore
the package base, you can either use

ssh a...@aur.archlinux.org restore pam_u2f-git

or simply clone the repository, make some changes and push.

Re: [aur-general] Issues Pushing

[Lukas Fleischer]

On Wed, 07 Oct 2015 at 09:41:31, David Phillips wrote:
> Okay, good to know it's being worked on. I seem to recall the TU who
> looked at it mentioning that using separate repositories would use up
> more disc space but avoid this issue?
> 

Slightly more disc space on the server, yes. One idea was to use
$GIT_OBJECT_DIRECTORY, though, which means that we could still use a
shared object storage. We would only need to store the refs separately.

The other possibility is to tell Git to not advertise refs outside the
currently selected namespace. I am not entirely sure whether that is a
good idea and whether it would be accepted upstream, though.

> I may be wrong, but this seems like quite a large/important problem/flaw to 
> me.
> 
> I feel like this may have been discussed before—Is there a thread I've
> missed on the ML which covers this discussion?
> 

No, this hasn't been discussed in public yet.

> Thanks

Re: [aur-general] Issues Pushing

[Lukas Fleischer]

On Wed, 07 Oct 2015 at 06:40:36, David Phillips wrote:
> [...]
> I committed changes to an already-established AUR package, and
> attempted to push these commits. Running `git push` on my slow
> connection just hangs. 'Impatient me' killed it after 5 minutes of
> hanging. Trying to push from a faster connection, I found it uploaded
> almost instantly. Setting GIT_TRACE_PACKET=1 when running `git push`
> showed up a (warning: large) log [1] showing that git is being sent a
> bunch of refs (?), presumably for packages which aren't even mine.
> 
> On a slow connection, this makes updating AUR packages to impossible.
> It takes a solid 20 minutes for the push to complete for me. I won't
> maintain AUR packages if this is the way it's going to be. Even though
> faster connections solve the time problem, it then becomes an issue of
> the amount of data transferred needlessly.
> 
> Why is this happening? IIRC, the IRC folk mentioned something about
> the underlying structure of the git repository at the AUR end, but I
> don't know enough about this stuff to say either way.
> 

Exactly. Internally, we use one huge Git repository to store all AUR
packages and gitnamespaces(7) to make that single repository look like
different repositories to the outside world. One situation where this
does not work is ref advertisement. As you noticed, all refs of the
internal repository (i.e. the HEAD refs of each package) are advertised.
We are working on improving that.

> 
> Log, xzipped for size reasons. Unpacks to ~82 000 lines.
> [1] https://ptpb.pw/XmET

Re: [aur-general] Registration problem

[Lukas Fleischer]

On Sat, 03 Oct 2015 at 15:23:43, Duru Can Celasun wrote:
> [...]
> > I don't think so. Did you test whether that email address really works
> > by manually sending a test email? If that works, you can request another
> > password reset email at [1].
> 
> 
> Yes, the address works. No, using the reset form manually doesn't work either.
> 

There was a configuration problem with the aurweb notification module.
Should be fixed now.

> >
> >> I've also tried registering a third account without the plus sign, but
> >> it says my ssh key is already in use.
> >>
> >
> > You cannot use the same SSH key for different accounts.
> >
> >> Can someone help please?
> >>
> >> Thanks.
> >
> > [1] https://aur.archlinux.org/passreset/
> 
> Can you at least delete the dcelasun2 account so I can add my second
> ssh key to my primary account?
> 
> Thanks.

Done!

Regards,
Lukas

Re: [aur-general] Registration problem

[Lukas Fleischer]

On Sat, 03 Oct 2015 at 14:27:55, Duru Can Celasun wrote:
> I was trying to register a second AUR account with my Gmail so I can
> use multiple SSH keys, but for some reason I never received the
> password reset email.
> 

You don't need a second account for that. You can specify multiple SSH
keys (just copy multiple lines into the text box).

> I've used dcelasun+a...@gmail.com for the second account, so maybe the
> "+" had something to do with it?
> 

I don't think so. Did you test whether that email address really works
by manually sending a test email? If that works, you can request another
password reset email at [1].

> I've also tried registering a third account without the plus sign, but
> it says my ssh key is already in use.
> 

You cannot use the same SSH key for different accounts.

> Can someone help please?
> 
> Thanks.

[1] https://aur.archlinux.org/passreset/

[aur-general] aurweb 4.1.1 released

[Lukas Fleischer]

Hello,

We are pleased to announce that aurweb 4.1.1 has been released. The
official aurweb setup [1] has already been updated.

This is a maintenance release that includes several hotfixes, the most
important one fixing the multiinfo command of the RPC interface.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.1.1
[3] https://bugs.archlinux.org/index.php?project=2

[aur-general] aurweb 4.1.0 released

[Lukas Fleischer]

Hello,

We are pleased to announce that aurweb 4.1.0 has been released. The
official aurweb setup [1] has already been updated.

Special thanks to Marcel Korpel who, among other things, made various
improvements to the package comments interface. You can now edit
comments!

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.1.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] pacapong disappeared

[Lukas Fleischer]

On Fri, 02 Oct 2015 at 21:21:12, Jozef Riha wrote:
> hello,
> 
> i am (or was) a maintainer of pacapong. certainly not a state of the art
> pkbuild - but it was not completely useless. anyway, the pkgbuild seems to
> have been deleted without giving me any notice or explanation.
> 
> $ git status
> On branch master
> Your branch is based on 'origin/master', but the upstream is gone.
>   (use "git branch --unset-upstream" to fixup)
> nothing to commit, working directory clean
> 
> makes me kinda wonder. should i be monitoring all packages i maintain or
> what is going on?
> [...]

Are you sure you submitted that package to AUR 4.0.0 after June 8th,
2015? The Git repository of a package base is always kept, even if a
Trusted User deletes the package base itself.

Regards,
Lukas

Re: [aur-general] Request from aur3

[Lukas Fleischer]

On Sat, 26 Sep 2015 at 08:17:08, XavierCLL wrote:
> I get it!
> 
> but why this package not show in
> https://aur.archlinux.org/packages/?O=0&K=insync-dolphin
> 
> the user created the repository but not submitted the package?
> [...]

Exactly. See FS#46279.

[1] https://bugs.archlinux.org/task/46279

Re: [aur-general] AUR repos and git subtrees

[Lukas Fleischer]

On Mon, 17 Aug 2015 at 21:09:28, Eli Schwartz wrote:
> [...]
> So, comparing my subtree split of fanficfare I get a root commit at:
> 69c3f0eec7fe3ce2983dec09b5dcba5a02d9169c
> In the AUR, the root commit is:
> 3c5d51989c6d14feea568ba6627dd9e5e7492f67
> 
> git diff them, they're identical trees.
> The commit messages are the same, the author and commit info are identical.
> [...]

And both commits do not have any ancestors?

If you execute `git cat-file commit ` (using 69c3f0e, respectively
3c5d519 as commit hashes), are the outputs exactly the same (diff(1)
them)?

Re: [aur-general] fbterm-git has an AUR git repo, but it isn't available in the web view?

[Lukas Fleischer]

On Thu, 13 Aug 2015 at 20:07:06, Giancarlo Razzolini wrote:
> Em 13-08-2015 14:58, ShadowKyogre escreveu:
> > But when I try to visit the corresponding overview page, it says that
> > it's not found. 
> 
> This package was deleted (hidden). If you increase the pkgrel, create a
> .SRCINFO file and push it, it will create a new version on AUR and you
> automatically become the new maintainer for it.
> [...]

I am also working on a command to resurrect a package without having to
push a new commit.

Re: [aur-general] Deletion of orphaned packages on AUR4

[Lukas Fleischer]

On Wed, 12 Aug 2015 at 05:49:58, Doug Newgard wrote:
> [...]
> You're making one massive and incorrect assumption: that packages that don't
> have an official "Maintainer" listed are broken. But you have no idea why
> they're orphaned.
> 
> In my case, I have some that I'm actively trying to get maintainers for; in 
> the
> mean time, I'm looking after them even though they are listed as being
> orphaned. Is this not to be allowed now? Should all "orphan" packages in
> the official repos be deleted, just assume nobody is looking after them? I
> updated one package just a few days before it was randomly deleted. There's
> other stories further up in this thread about them being deleted after only a
> few hours, all with no notice.
> 

I consider this a slight abuse of the orphan/disown functionality.
Wikipedia defines orphan as

[...] a child whose parents are dead or have abandoned them
permanently.

In my opinion, orphan packages should be defined analogously: Packages
which have been abandoned permanently by their former maintainers. I
didn't know that some people used package disowning the way you
described it. Thanks for bringing that to my attention.

Even if we disregard the etymology of the word, I still do not think
that "disown but keep maintaining" is a good idea. It makes it quite
hard to distinguish between "real" orphans and "maintained" orphans.
Also, the maintainer information is the first point of contact when
issues with the package arise. Hiding it like that doesn't seem like a
good idea. So maybe we need to improve the way changing maintainership
works. Having a "Give up for adoption" button (that keeps the current
maintainer while allowing anybody to adopt the package) in addition to
"Disown" is one possibility. I am open to other suggestions.

Maybe you could at least add yourself as a co-maintainer for now. Or if
you are really *actively* trying to find new maintainers, it probably
wouldn't hurt if you were listed as a maintainer until you find
somebody.

By the way: Yes, "orphan" packages in the official repositories are
deleted from time to time. We have so-called Midyear Cleanups and
Christmas Cleanup where exactly that is done (although I think we didn't
have them for a while for some reason)...

Regards,
Lukas

Re: [aur-general] Deletion of orphaned packages on AUR4

[Lukas Fleischer]

Hi,

There seems to be quite some confusion about the package migration
process and about package deletion. I would like to clarify my point of
view. Hopefully it serves as a basis for discussion (i.e. technical
discussion without attacking anybody personally).

As already mentioned a couple of times, cleaning up the AUR was one of
the incentives for having users resubmit their packages. This has
several advantages:

* Working packages: New users are confused when an AUR package does not
  build. However, packages are often broken because of being outdated or
  unmaintained.

* Less clutter: Working packages are easier to find. Package statistics
  are not distorted.

* Storage: Less space used for packages that do not work. On the AUR
  server and on mirrors.

So please do not upload packages any packages to AUR 4.0.0, unless you
are interested in maintaining them. If a package has not been
resubmitted to the AUR 4.0.0, the maintainer did not care about it for
at least two months. Please either decide to maintain such a package or
wait for somebody else willing to do so.

Along these lines, it might also make sense to generally delete packages
that have been unmaintained for a long time. Maybe have a script to
automatically remove packages that have been orphaned for a couple of
months. Note that we do keep the Git repositories of deleted packages,
so if anybody wants to maintain the package later, he can always clone
the repository of the deleted package, fix the package and simply push
it afterwards. We are also working on a command to revive deleted
packages without having to add a new commit. Package deletion is
equivalent to "hiding it from the website", it does not mean that the
package and all its Git history are gone. Orphaning a package is a
preliminary stage that only tags a package without hiding it.

The "missing dependency" argument was brought up a couple of times. If
you discover such a case, please contact the maintainer of the package
that requires the missing package and ask him to submit it as well. You
should only maintain an AUR package if you are using it, so everybody
should be interested in maintaining dependencies of their packages as
well (unless they are maintained by somebody else already, of course).

Regards,
Lukas

Re: [aur-general] aurweb 4.0.0 released

[Lukas Fleischer]

On Sat, 08 Aug 2015 at 15:14:14, Jakub Klinkovský wrote:
> [...]
> As far as I remember, it was discussed that the old packages from AUR3 will
> still be available in an archive. Is it the aur-mirror.git [4] or something
> else? We were thinking to replace the currently broken links to AUR packages 
> on
> the wiki with links to the archive to divide the heap of broken links into
> "obsolete" and "obsolete, but still findable" parts. For this to work, we 
> need a
> fixed URL with variable part corresponding to the package name. And for easy
> maintenance with a bot, we would need a list of packages in the archive for 
> fast
> searching, e.g. something like [5]. Is this possible or do you have some other
> recommendations?
> 

After all, I am not sure whether we should create an official archive
hosted on aur.archlinux.org or just refer to an "inofficial" archive
like aur-mirror.git. As Doug already mentioned, I am currently on
vacation. I will have to think of that (and possibly implement an
archive) when I am back home. Meanwhile, other opinions are welcome.

If you plan to redirect broken Arch Wiki links to the archive, please
make sure that it is obvious that these packages are abandoned. They are
likely to break or be out-of-date for months.

> [4] http://pkgbuild.com/git/aur-mirror.git/
> [5] https://aur.archlinux.org/packages.gz
> 
> -- 
> jlk

Re: [aur-general] Why can't I search the packages not migrated to AUR4?

[Lukas Fleischer]

On Sat, 08 Aug 2015 at 17:52:55, Iru Cai wrote:
> Hi,
> 
> I found some packages original in AUR3 can't be search in AUR4, but
> actually the package web page is in AUR4.
> 

I just removed all package bases that have not been re-uploaded to AUR
4.0.0.

> Iru Cai

[aur-general] aurweb 4.0.0 released

[Lukas Fleischer]

Hello,

We are pleased to announce that aurweb 4.0.0 has been released. The
official aurweb setup [1] has already been updated.

The most exciting change in this release is that Git repositories are
now used for AUR packages. This new feature comes along with some other
nice additions, such as an SSH interface for registered AUR users.

For a comprehensive list of changes, please consult the Git log [2]. As
usual, bugs should be reported to the aurweb bug tracker [3].

[1] https://aur.archlinux.org/
[2] https://projects.archlinux.org/aurweb.git/log/?id=v4.0.0
[3] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] Request to remove a commit on AUR4

[Lukas Fleischer]

On Thu, 23 Jul 2015 at 09:45:46, Ting-Wei Lan wrote:
> I forgot 'git push --force' was no longer allowed in AUR4. I forgot to 
> include .SRCINFO changes in the last commit, and I can no longer do 'git 
> subtree push' to fix it because the pushed commit was rebased. I cannot 
> use 'git reflog' and 'git reset' to go back to the old commit because I 
> have pushed changes to other packages after rebasing. It seems the only 
> way to fix it myself is doing 'git subtree pull', but it will cause the 
> history become very ugly.
> [...]

I haven't used Git subtrees a lot but can't you simply rewrite the
history of your "super repository" (e.g. using `git rebase -i`) and drop
the latest `git subtree pull` import of the package base, then add a
fixup commit that adds the .SRCINFO and run `git subtree pull` once
again?

Re: [aur-general] forgot the username for my AUR account

[Lukas Fleischer]

On Tue, 14 Jul 2015 at 15:32:46, Dennis Værum wrote:
> the account is registered under this mail and I can get a link to reset 
> the accounts password, but I still need the username. Can someone send 
> the username to this mail?

If you use the password reset form from the aur4 subdomain [1], your
user name will be mentioned in the confirmation email.

Regards,
Lukas

[1] https://aur4.archlinux.org/passreset/

Re: [aur-general] AUR4 keywords in PKGBUILD?

[Lukas Fleischer]

On Sun, 12 Jul 2015 at 18:07:37, Ido Rosen wrote:
> Is it possible currently to set the keywords/tags in the PKGBUILD
> itself instead of on the website?  (Previously, we had to set
> categories on the AUR website, but that felt suboptimal.)  e.g. a
> keywords=('cats' 'dogs' ...); variable?
> 

No.

> Or, alternatively, would people be amenable to adding an ssh command
> in the AUR git-shell to add/remove/set keywords?

Sounds like a nice suggestion to me. Could you please file a FR on the
bug tracker?

Re: [aur-general] We've got a spam issue in our AUR

[Lukas Fleischer]

On Sun, 12 Jul 2015 at 17:54:10, Daniel Micay wrote:
> On 12/07/15 11:24 AM, Andrejs Mivreņiks wrote:
> > Hi,
> > 
> > The user instmania[1] has posted spam links in the comments section
> > of almost every recently updated package. For example [2]
> > 
> > [1] https://aur4.archlinux.org/account/instmania/
> > [2] https://aur4.archlinux.org/packages/warthunder/
> 
> I submitted a patch to remove the incentive to do this:
> 
> https://lists.archlinux.org/pipermail/aur-dev/2015-July/003608.html
> 
> It would be nice to implement the registration question we have on the
> forums and wiki too.
> 

We introduced a similar (even harder and quickly changing) question the
last time we had issues with a spam bot. It didn't help, the spammer
revamped his bot within a couple of minutes, see [1]. Our next
countermeasure was to require email confirmations on registration (and
preventing the same email address from being used twice) which worked
fine. Obviously, all that doesn't help when a human registers himself.

The only additional thing I can think of is some flood control
mechanism which does not fix the problem itself but helps reducing the
degree of damage...

[1] https://lists.archlinux.org/pipermail/aur-dev/2013-March/002438.html

Re: [aur-general] We've got a spam issue in our AUR

[Lukas Fleischer]

On Sun, 12 Jul 2015 at 18:25:47, Andrejs Mivreņiks wrote:
> Hi,
> 
> Suspending the account is good, though what about messages? Are they
> going to be removed? Also there is totally no spam protection that I know of 
> at
> this moment in AUR, at some point it might turn out to be a bigger problem 
> than
> that today.
> [...]

I deleted all 15 comments the user posted. Given that only a very low
number of packages were affected, I suspect that he copy-pasted the
message manually. There is really nothing we can do about that (apart
from disabling comments)...

Re: [aur-general] Merge request braid -> braid-hib

[Lukas Fleischer]

On Thu, 09 Jul 2015 at 15:34:07, Sam S. wrote:
> I uploaded my previous AUR package "braid" to AUR4 under the new name
> "braid-hib".
> 
> Can comments and votes be merged please?

Please file a merge request using the "File Request" link from the
package actions box.

[aur-general] Adopt orphan packages on AUR 4 now!

[Lukas Fleischer]

Hi,

it is July 8th (anywhere on earth) now, so I just disowned all packages
that were not uploaded to aur4.archlinux.org yet.

Feel free to adopt and resubmit your favorite packages!

Regards,
Lukas

Re: [aur-general] Cannot log in to AUR, probably due to forgotten username

[Lukas Fleischer]

On Thu, 02 Jul 2015 at 10:28:22, Roey Darwish Dror wrote:
> Although I just reset my password in AUR I still cannot log in using the
> new password. IIRC my username is r-darwish, but I might have forgotten it.

Replied off-list.

Re: [aur-general] How to list packages on AUR4?

[Lukas Fleischer]

On Sat, 27 Jun 2015 at 14:58:55, Jakub Klinkovský wrote:
> Hi,
> 
> the bot for updating the links to official and AUR packages on the wiki [1][2]
> has been using [3] to get the list of packages present on the AUR. While there
> is also [4] for the AUR4 branch, it seems in fact to be a list of AUR (not 4)
> packages (e.g. my packages which have not been transferred yet are in both
> lists). Is this feature being dropped, is it a bug or have I just missed
> something?
> 

Should be fixed now, thanks for reporting!

> [1] https://wiki.archlinux.org/index.php/User:Lahwaacz.bot
> [2] 
> https://github.com/lahwaacz/wiki-scripts/blob/master/update-package-templates.py
> [3] https://aur.archlinux.org/packages.gz
> [4] https://aur4.archlinux.org/packages.gz
> 
> -- 
> jlk

Re: [aur-general] [AURv4] Shallow HTTPS clones do not work

[Lukas Fleischer]

On Mon, 22 Jun 2015 at 21:05:58, Chris Warrick wrote:
> I’m trying to create a shallow clone of an AURv4 repository with
> `--depth 1`, but I can’t get it to work.
> 
> $ git clone https://aur4.archlinux.org/pkgbuilder.git/
> Cloning into 'pkgbuilder'...
> remote: Counting objects: 23, done.
> remote: Compressing objects: 100% (17/17), done.
> remote: Total 23 (delta 6), reused 22 (delta 6)
> Unpacking objects: 100% (23/23), done.
> Checking connectivity... done.
> $ rm -rf pkgbuiilder
> $ git clone https://aur4.archlinux.org/pkgbuilder.git/ --depth 1
> Cloning into 'pkgbuilder'...
> error: RPC failed; result=18, HTTP code = 200
> fatal: The remote end hung up unexpectedly
> 

Interesting. According to the curl(1) man page, exit code 18 means

Partial file. Only a part of the file was transferred.

Could you file a report on the aurweb bug tracker [1] please?

> Shallow clones work fine when performed over SSH.
> 
> -- 
> Chris Warrick 
> PGP: 5EAAEA16

[1] https://bugs.archlinux.org/index.php?project=2

Re: [aur-general] Deleted account on AUR and unable to recreate on AUR4

[Lukas Fleischer]

On Mon, 15 Jun 2015 at 23:37:16, Daniel Sandman wrote:
> So I fucked up I was going to move over my AUR packages to AUR4. 
> Couldn't log in on AUR4 and I wanted to make a new user anyway. So I 
> deleted my account on on AUR. Now I am unable to recreate it on AUR4 as 
> I use the same email address. Is there any sane way to fix this?

You can delete your user on aur4.archlinux.org and create a new one.

Regards,
Lukas

Re: [aur-general] merging of aur3 comments into aur4

[Lukas Fleischer]

On Sun, 14 Jun 2015 at 13:43:13, Joakim Hernberg wrote:
> Are there plans to merge comments made on aur3 into aur4 at the end of
> the transition period?  Seems like users still like to leave comments
> on aur3, and even if not all that important, it might be useful to have
> them merged when aur4 goes live.
> 

No, there is a big fat red warning on the aur.archlinux.org front page
that

Any changes to the AUR, including package submissions, comments and
votes, made after 2015-06-08 will be lost!

We cannot merge comments easily as there would be conflicts with
comments added on aur4.archlinux.org in the meantime.

> -- 
> 
>Joakim

Re: [aur-general] Multiple maintainers

[Lukas Fleischer]

On Sun, 14 Jun 2015 at 05:55:39, Pablo Lezaeta Reyes wrote:
> [...]
> If you go [1] you only see me as maintainer, no mention ahta ther is
> another maintainer.
> If is intended that the detals not show maintainer, then you could concider
> make that "maintainers" show all the mainainter, so if a problem arrise,
> the user could know that there is more than 1 guy that can fix the package.
> 

I just implemented FS#45313, so that co-maintainers are now displayed on
the package details page.

> [1] https://aur4.archlinux.org/packages/ponysay-devel-git/
> -- 
> *Pablo Lezaeta*

Re: [aur-general] registration with wrong email

[Lukas Fleischer]

On Sat, 13 Jun 2015 at 19:45:03, respiranto wrote:
> Hi,
> 
> Some days ago, I wanted to register an AUR account but unfortunately 
> used the wrong email address (respira...@icloud.de instead of .com).
> Since the mail with the password has been sent to the wrong email adress 
> (which is probably not existing), I am not able to change the 
> email-adress nor to delete the account to create a new one with the 
> desired username respiranto.
> [...]

I fixed the email address. You can request a new password on [1].

[1] https://aur4.archlinux.org/passreset/

Re: [aur-general] Category... and AUR4

[Lukas Fleischer]

On Sat, 13 Jun 2015 at 01:52:31, Pablo Lezaeta Reyes wrote:
> As discuced countless times, there is a recurrent request to remove
> Category because is not acurated to the many catoegories that a package
> could have, is not a translatable part, always there are miscategoriced
> packages, and so on (even there is a few bugs to improbe and to remove it)
> the list is long if you read the thread across the years.
> 
> Now with AUR4, this camp finaly will be updated to reflect a propper
> categorization (maybe imtating the availabe categories in Debian or Ubuntu)
> and make it translatable or will be dropped finally for joy of some and sad
> of others?
> 

I just submitted a patch to aur-dev to replace categories with keywords.
I will update aur4.archlinux.org to include that patch soon.

> also "Learn more" is not tranlatable string in the fromnt page.
> 

Looks like a bug. Will submit a patch soon. Thanks!

> -- 
> *Pablo Lezaeta*

Re: [aur-general] Multiple maintainers

[Lukas Fleischer]

On Sat, 13 Jun 2015 at 01:56:37, Pablo Lezaeta Reyes wrote:
> I try add "maandree" to comaintain my "ponysay-devel-git", I fill the
> request and press accept but no "comaintainer update" or message is show
> and I not see he in the list.
> 
> Is there a pedior to wait? the co maintainer need to accept the request?
> how I know the request was send or rejected? this intended behavoid (or
> whatever the ortography)? how co-maintainership requests is handled in the
> aurweb scripting?
> [...]

I just checked and he appears in the list for me. Not sure why you did
not (do not?) see him.

Re: [aur-general] AUR4, git, subtrees ELI5?

[Lukas Fleischer]

On Fri, 12 Jun 2015 at 12:42:30, David Kaylor wrote:
> On Fri, Jun 12, 2015 at 5:34 AM, Lukas Fleischer 
> wrote:
> [...]
> > It is expected (and intended) that some (hopefully not too many) AUR
> > package maintainers back out due to the new system. It is also intended
> > that a huge number of packages is not imported into the new AUR and
> > anything that automatically transfers packages is undesirable. We only
> > want users to resubmit their stuff if they want to take care of it in
> > the future. Think of it as a huge AUR cleanup.
> >
> 
> And finally, you state your position; cull the herd. Again, I don't
> disagree, but it's usually best to state intentions from the very
> beginning. So make sure that statement is at the very head of the wiki
> related to the transition to AUR4. "Basic working knowledge of Git is
> expected of all AUR package maintainers. Otherwise, sod off."

"Culling the herd" (using your words, even though I dislike that
metaphor) is something that always happens when you introduce a new
system. Users need time to get used to it, some of them back out. Just
to clarify: We don't want to make the AUR a place for elitists and we
are trying to make it as convenient as possible for users to continue
contributing. On the other hand, though, we also want to use the chance
of having to reimport all packages to improve the overall quality of the
AUR (less broken and unmaintained packages, less clutter). We also need
to keep an eye on maintainability: I am the only regular aurweb
contributor these days.

Regarding your request to state intentions from the very beginning, the
first sentence in the AUR 4 section of the Arch wiki is:

Since release 4.0.0, aurweb uses Git repositories for AUR packages
which means that the package submission process is a bit different.

In my opinion, that makes it pretty obvious that maintainers need to
know or learn Git. If you disagree, feel free to improve that section,
it is a wiki!

Regards,
Lukas

Re: [aur-general] AUR4, git, subtrees ELI5?

[Lukas Fleischer]

On Fri, 12 Jun 2015 at 01:42:41, Eli Schwartz wrote:
> [...]
> That still requires packagers to go through several new hoops.
> [...]

Which ones? Can't think of any apart from generating the key and adding
it to the web interface. It literally takes ~1 minute. You need to do
the same thing after creating an account on a Git hosting platform like
GitHub.

> And I can see the benefit of allowing tarball uploads for the same reason
> that the AUR3 included a web interface for adding new packages (rather than
> having a hard requirement for using a helper).
> e.g. uploading changes from another computer while traveling.
> 
> What happens if the package already exists? Say, the packager switches to a
> new computer.
> 

What's the issue here? `git clone` will clone the existing repository.
Might want to use some options such that it doesn't actually check out
HEAD. Or have another command to pull changes before submitting.

If you work on two machines in parallel, you will get a merge conflict
or a denied push, sure. But that's an inherent issue. When using the
tarball submission process you would overwrite changes from the other
machine which is way worse than something telling you that there is
something wrong.

> Does the tool also setup an ssh key and add that key to the packager's
> account?
> 

No. It also does not register a new AUR account or setup your Internet
connection. It submits packages to the AUR. As I said before, generating
and adding the key is a tiny one-time process and automating it doesn't
pay off.

> [...]
> I would like to see a method for submitting a tarball, having the aurweb
> checkout the package's master branch, overwrite the index with the tarball
> contents,  and commit that with a generic message.
> (e.g. "upgpkg: ${pkgname} ${pkgver}-${pkgrel}").
> 
> Aside from the need to actually spend time implementing that, is there any
> reason not to?
> [...]

Just to name a few issues:

* We would have to reintroduce the Archive::Tar library which we had
  several issues with in the past and were very happy to get rid of.

* You need to be very careful when extracting tarballs. It is quite easy
  to build ZIP bombs. This is one of the reasons we only extracted the
  PKGBUILD (and no other files) when the AUR submissions still required
  uploading source tarballs. What you suggest would require extracting
  everything, though.

* We would have to create checkouts for the Git repositories that are
  submitted via tarballs. We put a lot of time into making the storage
  as space efficient as possible, using a shared object storage with
  gitnamespaces. We can currently store the ~1 packages uploaded so
  far with <40MB disk usage. Creating checkouts would mean that this
  increases by a factor of ~20. Creating and destroying checkouts on the
  fly is also quite ugly and something I would like to avoid.

* The AUR web interface is written in PHP, the Git backend is written in
  Python. We would either have to duplicate all the sanity checks or
  create some weird interface between the tools that involves reading
  and converting error messages from the standard file descriptors.

Also, I do not understand all the fuss about Git. We don't expect people
to be a Git expert. There are a lot of tutorials and there are detailed
explanations in the Arch wiki. You should be able to submit a package by
only copy-pasting snippets from the wiki without even understanding what
is going on.

If people really refuse to learn the five most basic Git commands, they
better don't maintain any AUR packages. Maintaining packages means that
you are willing to understand basic packaging and VCS tools. Tracking
down issues with a package often involves using the upstream VCS and
nowadays, most projects use Git.

It is expected (and intended) that some (hopefully not too many) AUR
package maintainers back out due to the new system. It is also intended
that a huge number of packages is not imported into the new AUR and
anything that automatically transfers packages is undesirable. We only
want users to resubmit their stuff if they want to take care of it in
the future. Think of it as a huge AUR cleanup.

Regards,
Lukas

Re: [aur-general] How the "Popularity" value is being calculated for a package in the AUR4?

[Lukas Fleischer]

On Fri, 12 Jun 2015 at 09:43:00, G. Schlisio wrote:
> > Lukas on aur-dev: "Popularity is the sum of all votes with each vote
> > being weighted with a factor of 0.98 per day since its creation."
> 
> thats quite a fast wear-off, i think.
> after a year, there is virtually nothing left (6e-4 only).
> does this really meet the intention?
> 

Yes. The main purpose of the popularity field is to give very popular
newcomers a chance to appear on the front page. Also, we don't care
about packages that were very popular a year ago and are no longer used
today. If a package is still interesting, it will continuously receive
new votes such as is the case with yaourt.

Regards,
Lukas

Re: [aur-general] AUR4, git, subtrees ELI5?

[Lukas Fleischer]

On Thu, 11 Jun 2015 at 21:39:52, Florian Bruhin wrote:
> * Joakim Hernberg  [2015-06-11 21:03:50 +0200]:
> > On Thu, 11 Jun 2015 13:36:54 -0500
> > Eli Schwartz  wrote:
> [...]
> > > The suggestion was made that perhaps a tarball upload could be added
> > > which would create automatic commits to the git repository.
> > > Hopefully, something like that could be added, it would allow people
> > > who don't want to deal with the added complexity to continue on as
> > > though nothing had ever happened.
> > 
> > IMO this would be a good idea.
> 
> FWIW, +1 here as well.
> 
> I love git so I'm excited about all the new possibilites and feel like
> it's a very good improvement - but I can see how this makes it harder
> for people who'd prefer not getting into git just to contribute to the
> AUR.
> [...]

I am against adding anything that involves uploading a tarball. I am not
averse to including a set of utilities to help with working with to AUR
to [community], though (as long as there isn't anything similar to a
package manager for the AUR -- please let's not discuss this here).

There could be a simple tool called aur-pkgsubmit that roughly does the
following:

1. Check whether the current directory is the top-level directory of a
   Git repository, otherwise initialize a new repository.

2. Run `mksrcinfo` or something equivalent.

3. `git add` the PKGBUILD, .SRCINFO and other source files.

4. Commit the changes with a predefined commit message that can be
   edited. If the HEAD commit is not pushed yet, amend the previous
   commit instead of creating a new one.

5. Setup Git remotes according to the package base name, unless
   configured already.

6. Push the changes.

Users not knowing Git would be able to just update their PKGBUILDs and
run that tool to submit the package, without even knowing that Git is
used under the hood.

What do you think?

Regards,
Lukas

Re: [aur-general] [AUR4] Support of multiple ssh public keys

[Lukas Fleischer]

On Thu, 11 Jun 2015 at 21:18:11, Yuki Chiba wrote:
> Hi,
> 
> I prefer to use individual ssh public keys on different
> machines, but I could register only single key in my profile
> on aur4.archlinux.org.
> 

Just out of curiosity: Is there any reason for using different SSH keys
per machine (for the same server)? Or is it really just a preference?

> Is there any chance to support multiple ssh public keys like
> github[1] or Bitbucket[2]?
> 

That would not be too hard to implement. I might add it before the final
4.0.0 release.

> [1] 
> https://help.github.com/articles/generating-ssh-keys/#step-4-add-your-ssh-key-to-your-account
> [2] 
> https://confluence.atlassian.com/display/BITBUCKET/Add+an+SSH+key+to+an+account
> 
> Best regards,
> Yuki Chiba
> -- 
> Yuki Chiba
> yuki.from.ak...@gmail.com

Re: [aur-general] Error submitting to aur4

[Lukas Fleischer]

On Wed, 10 Jun 2015 at 09:01:05, Alexander Görtz wrote:
> Hi,
> 
> I lately have adopted an aur package "google-authenticator-libpam-git". But 
> if 
> I try to add it to the new aur4 I get:
> 
> > git-receive-pack: permission denied: nylocx
> > fatal: Could not read from remote repository.
> > 
> > Please make sure you have the correct access rights
> > and the repository exists.
> 
> I suspect that this is due to the reservation of packages for their old 
> maintainer. Is it possible to transfer the ownership of the package to me in 
> the new aur so I can push the package?
> 

Yes, as mentioned in the notification email and on the wiki, just wait
until July 8th. All packages that have not been resubmitted until then
will be disowned.

> Thanks,
> Alex

Re: [aur-general] KeyError(key)

[Lukas Fleischer]

That sounds like a bug to me. Could you please upload your repository
somewhere else (e.g. on GitHub) and file a bug report on [1]?

Thanks,
Lukas

[1] https://bugs.archlinux.org/index/proj2

Re: [aur-general] Should I request deletion for packages in this transition period?

[Lukas Fleischer]

On Tue, 09 Jun 2015 at 06:25:43, Oon-Ee Ng wrote:
> I'm only now looking at the AUR4 migration guidelines, and I only have
> a few packages so I've been uploading to AUR4 manually.
> 
> However, in the process I've found old packages which I no longer use
> or wish to maintain. Some of which should may be deletion candidates.
> 
> Of course, those all belong to me and hence aren't (yet) in AUR4. The
> announcement email I got stated that after August 8th all packages in
> the AUR will remain archived for reference. Should I request a
> deletion before that (for those packages which it really does not make
> sense to keep around) to reduce clutter, or will it really not make a
> difference?
> 

No, the package request feature on aur.archlinux.org is disabled. Just
don't submit those packages to aur4.archlinux.org.

Regards,
Lukas

Re: [aur-general] [AUR4] View list of orphans

[Lukas Fleischer]

On Mon, 08 Jun 2015 at 16:55:32, G. Schlisio wrote:
> [...]
> in AUR4 i tried this as well, but just got a "Error retrieving package
> list.". Searching for maintainer "orphan" does not work as well.
> is this a bug, a feature or am i missing something here?
> [...]

Fixed, thanks for reporting!

Re: [aur-general] Error pushing a PKGBUILD with split packages

[Lukas Fleischer]

On Mon, 08 Jun 2015 at 16:48:27, Chris Warrick wrote:
> [...]
> Should I litter AURv4 with outdated packages and file requests, or
> what?  Is there really no better way to do this?
> [...]

I noticed that you already fixed this. For everyone else: Note that you
do not need to upload a dummy package to file a merge request. You can
access hidden package (base) details pages of packages not uploaded to
AUR 4.0.0 by directly specifying the URL and then use the package
actions box.

If you have any suggestions on how to improve the process of replacing
multiple packages with a split package (that prevents package
hijacking), please let me know.

Regards,
Lukas