Re: [arch-general] SQLite Session Extension

[Florian Pritz via arch-general]

On Thu, Jul 18, 2019 at 08:05:18PM -0800, Adam Levy via arch-general 
 wrote:
> Forgive me if this is not the proper channel. I could have messaged
> the maintainer Andreas Radke directly but wasn't sure of the
> appropriate convention for such a question.

It's generally best to create a bug report/feature request on our bug
tracker. Also, if you know it, it certainly makes the maintainer's
decision easier if you mention which, if any, new dependencies are
needed. I guess in this case it's probably enough to add the option and
no dependencies are required, but if you ran a test build you probably
know better.

Florian


signature.asc
Description: PGP signature

Re: [arch-general] Test Message for DMARC Checking (Please Ignore)

[Florian Pritz via arch-general]

On Wed, Jan 30, 2019 at 06:41:54PM +0100, Jayesh Badwaik via arch-general 
 wrote:
> Test Message

If you just want to test if your DMARC verifier works, there are a few
possibilities listed here[1] under the "Message Validation" heading.
These are probably more helpful that what you get from using this
mailing list. At least the NIST tester can also generate broken mails
that will fail validation.

[1] https://dmarc.org/resources/deployment-tools/

If you believe there is a problem with our mailing lists or DKIM/DMARC
handling, please contact postmas...@archlinux.org,
listown...@archlinux.org or the -owner address of the respective list.

Florian


signature.asc
Description: PGP signature

Re: [arch-general] https://lists.archlinux.org/

[Florian Pritz via arch-general]

On Sat, Nov 10, 2018 at 05:36:08AM +0100, Ralf Mardorf via arch-general 
 wrote:
> mails to mail...@lists.archlinux.org [1] are rejected.

Thanks for the notification. It should work again now.

Florian


signature.asc
Description: PGP signature

Re: [arch-general] Reboot-less Computers

[Florian Pritz via arch-general]

On Sun, Oct 28, 2018 at 05:43:28PM +0100, Jayesh Badwaik via arch-general 
 wrote:
> I am looking at possibilities to have a setup which does not need to be 
> restarted at all and can be live patched. I have seen this old post:

I think that if your system is important enough that it shall never go
down even for a few minutes, what you really want is additional
redundancy in form of a high availability setup. Your hardware and
software can fail at any time and then it doesn't matter if you can
hotpatch your kernel or not. If you have a HA system, it doesn't matter
if you reboot or not because the other node(s) take(s) care of the work
for the time being.

Also sometimes the power fails and if you don't reboot your machines
regularly, they may not come back on after that (ask any bigger data
center). If you reboot regularly, chances are higher that you spread out
any problems and resolve them before all machines are rebooted at once.

If you want to do it for science, all I can say is that I think there are
more interesting/important problems than this, but YMMV.

Well, and then there's the issue that you need to specifically create
the patches and that you can't patch everything because that's just way
too much work, but that has already been mentioned by others in this
thread.

Florian


signature.asc
Description: PGP signature

Re: [arch-general] How to delete user from bugs.archlinux.org

[Florian Pritz via arch-general]

On Mon, Oct 15, 2018 at 06:56:36PM +0200, scootergrisen via arch-general 
 wrote:
> How do i delete my user/account from https://bugs.archlinux.org/ ?

This has been handled on IRC in the meantime.

Florian


signature.asc
Description: PGP signature

Re: [arch-general] [off-list] update today causes avantfax_hourly cron: Exec format error?

[Florian Pritz via arch-general]

On Sat, Sep 01, 2018 at 03:31:15PM +0100, Jonathon Fernyhough 
 wrote:
> While I've had my own run-ins while getting to grips with "the Arch
> approach" (for want of a better phrase), I'd never resort to making
> personal attacks, via a mailing list or otherwise.
> 
> Taking your own advice, wouldn't it be easier for you to ignore these posts?
> 
> Or possibly even better - why don't you provide the help you think is
> needed, in a way which meets your expectations of how this help should
> be provided?
> 
> "Model good practice" instead of "do as I say, not as I do"? That way
> your input might be seen as a little more constructive.

All very good points. Let's think a bit more about what we post here and
not let emotions run wild. If you are emotional, feel free to wait a day
before sending the mail. We don't deal with issues that require
immediate reactions here.

However, this thread appears so have outlived its usefulness. After
internal discussion I've put the list of moderation for now. Any further
replies to this thread will not get through. The moderation will be
removed once I feel like everyone got the message (likely a few days).

Thanks for continuing to try to make this a better list!

Florian



signature.asc
Description: PGP signature

Re: [arch-general] Where is paccache

[Florian Pritz via arch-general]

It's now part of pacman-contrib. You can find stuff like that by using
pkgfile.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Can't connect to the Arch Linux website

[Florian Pritz via arch-general]

On 10.02.2018 16:46, thepouar--- via arch-general wrote:
> Had this problem for a few days, first noticed when I tried searching for a
> package. my ip address is 172.7.224.99.

Your IP is not being blocked by us. Could you tell me which URL you are
trying to reach? Also please run `getent ahosts $domain` and `mtr
--report --report-wide --show-ips --aslookup --report-cycles 100
$domain` and show me the output with $domain being "www.archlinux.org"
or "aur.archlinux.org" or similar.

FWIW I'm unable to ping you directly from multiple locations. Do you
have ping replies disabled or should that work?

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] AUR account creation issues

[Florian Pritz via arch-general]

On 27.11.2017 01:32, Tegan Burns wrote:
> I was trying to register an account on aur.archlinux.org but I never
> received a confirmation email.

Replied off-list.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] [arch-dev-public] Switching the bugtracker to Bugzilla

[Florian Pritz via arch-general]

On 19.11.2017 16:24, Eli Schwartz wrote:
> We cannot migrate to git because no one has put in the work necessary to
> properly rewrite dbscripts. 

Just to clarify: Gabriel Souza Franco (gbsf) has put quite a lot of work
into this and some others have also worked on parts, but we haven't yet
assembled all these parts or come up with a migration plan. It's a
complex process and the people with sufficient access to deal with it
are sadly quite busy. Additionally svn works well enough for our use
case and other, more pressing, issues get priority. Git is certainly not
forgotten and work will continue, but it may take a while until it's done.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Cannot delete chroot directory

[Florian Pritz via arch-general]

On 08.11.2017 09:47, Simon Doppler wrote:
> When I tried to delete the directory (with rm -rf) but I could only delete 
> all 
> the files it contained. It did not work either after a reboot.

If you run btrfs, this is a btrfs subvolume which you need to remove
with `btrfs subvolume delete`.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] JOB | Permanent Database Engineer (the Netherlands or remote)

[Florian Pritz via arch-general]

On 04.09.2017 14:33, James Tobin via arch-general wrote:
> Hello, I'm working with an employer that is looking to hire

This is not a recruitment list. Please take such mails elsewhere.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] pacman doesn't show download progress

[Florian Pritz via arch-general]

On 16.08.2017 21:47, SET wrote:
> Le mercredi 16 août 2017 20:48:59 CEST Bartłomiej Piotrowski a écrit :
> 
>> Which mirror was it? We will try to contact them about the issue.
>> 
>> B
> 
> It is :
>  http://archlinux.mirrors.ovh.net/archlinux/$repo/os/$arch

I've notified the mirror admin. I'll post here again if I know more.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Mirrors not syncing?

[Florian Pritz via arch-general]

On 22.05.2017 00:36, Steven Noonan wrote:
> None of the mirrors are listed as "successfully syncing mirrors", or even
> as "out of sync mirrors" for that matter.

Thanks for the notification. The mirrors and the data collection are
fine, it's just an issue with displaying the data. We are looking into it.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] [Questions] Questions from past project and ideas fomr -dev-public that get silence.

[Florian Pritz via arch-general]

On 30.04.2017 17:30, Jude DaShiell wrote:
> 
> 
> Sent from BlueMail for iPhone
> On Apr 30, 2017 at 9:31 AM, Alexander Harrigan 
>  wrote:
> 
> I think the problem is lack of information about statuses of various projects.
> Users can't disticnt between something that is being worked on slowly because
> [...]
> 
> On On Sun, Apr 30, 2017 at 08:33 AM, Bartłomiej Piotrowski
> bpiotrow...@archlinux.org wrote:
> 
>  On 2017-04-30 09:43, Pablo Roberto Lezaeta Reyes via arch-general wrote:
> 
>   During this and the end of previous year some ideas and projects
> were
> 

I can't tell what is quoted and what you wrote in that mail or if you
put your reply into the quoted parts. Please try to send readable mails
by following the tips here:
https://lists.archlinux.org/pipermail/arch-general/2014-August/036950.html

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Tobias Powalowski and his nonsensical maintenance decisions

[Florian Pritz via arch-general]

On 28.04.2017 14:40, fnodeuser wrote:
> you continue to place pkgs in the testing repo that do not require any 
> further testing.

Thank you for showing that you do not understand our repository policy.

All [core] packages go to [testing] first to ensure that we do not
completely break anyone's system. This has happened before and funnily
enough it happened with a kernel that did not boot for anyone. Because
of this [testing] has been created. You really managed to come up with
the best example here.

> for what reasons, exactly, do the linux 4.10.13 and hwids 20170328 pkgs need 
> to be in
> testing for 4+ days?

I am not sure on which planet you live and how many hours a day has for
you, but on Earth those packages have been in testing for roughly 7
hours (2017-04-28 07:57 UTC and 2017-04-28 08:17 UTC).

As for the reasoning, see above.

> also, you did not replace git:// with git+https:// in the hwids PKGBUILD 
> file. github
> has HTTPS enabled for everything.

While this specific suggestion is correct, the way it has been presented
here and in the past is not. Context matters, and if you annoy people
they will stop listening to you.

I have put you on moderation. If you continue annoying us like this
there will be further consequences. Consider this your final warning.
There will not be another.

Florian



signature.asc
Description: OpenPGP digital signature

[arch-general] Webserver maintenance downtime

[Florian Pritz via arch-general]

Hi,

Our web server (apollo.archlinux.org) appears to experience some
hardware issues and will be checked by the ISP shortly. Please expect a
downtime of up to 14 hours.

The following services will be affected: bugs, planet, security, www
(main website)

Other services (wiki, bbs, mailinglists) are not affected by this.

I'm sorry for the inconvenience.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Cannot reach archive.archlinux.org from behind a working proxy

[Florian Pritz via arch-general]

On 10.04.2017 13:56, SanskritFritz via arch-general wrote:
> Is it possible that my work IP address where I connect from (195.184.167.238)
> gets rejected at archive.archlinux.org?

We do not reject any traffic, but we did migrate the archive to a new
server at the beginning of April. Maybe the proxy does not check the
domain, but only allows traffic to a specific IP?

Also the new server redirects all traffic to https. I do not know if the
old one did this as well, but I assume it did not. Does the proxy only
allow plain http traffic without ssl?

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Is arch-announce mailig list dead?

[Florian Pritz via arch-general]

On 16.03.2017 18:41, Anast Gramm via arch-general wrote:
> So, what's going on with the mailing list?

Thanks for reporting this problem.

We've forgotten to migrate the service that creates those mails. It will
be resolved soon. Likely either by implementing the sending function
directly into the website or reinstalling the service.

Florian




signature.asc
Description: OpenPGP digital signature

Re: [arch-general] group install

[Florian Pritz via arch-general]

On 05.01.2017 13:24, Ralf Mardorf wrote:
> Actually I shouldn't have replied to your request and instead ban your
> email address.

Good thing you can't ban people from this list. I could, but I'll give
you another chance to not hit reply the next time you'd want to write a
reply like this.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Stronger Hashes for PKGBUILDs

[Florian Pritz via arch-general]

On 26.12.2016 13:12, NicoHood wrote:
> So we needed to verify the source otherwise. But there was no real
> option as md5/sha1 is broken

I fully agree that using stronger hashes is generally a good idea, but
please stop being ridiculous.

> and his internet is too slow to download it
> again via torrent. 

If you put your file at the location where the torrent client downloads
the file to, it will detect this and check the existing file contents.

Also, you know that torrent also uses SHA1 hashes internally, right?

> The ArchLinux website connects via https. His mirror that he used did
> not (http or ftp).

https or not, the mirror admin has full control and can easily change
the files. Please stop being pedantic and look at the bigger picture.
Then you'd also see that it's much easier for an attacker to target our
website and change the hashes there than trying to find an
md5/sha1/filesize collision and then getting that file to you via
one/all of our mirrors without having access to our servers.

There are many trade offs and attack vectors when it comes to security.
Don't focus on a single one. You could have improved a lot with all the
dedication and time you put into these discussions if you worked on
other things with more impact.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Please fastly update packages not using the generic readline *.so

[Florian Pritz via arch-general]

On 14.11.2016 20:44, Sebastian Lau via arch-general wrote:
> nullptr ~ % cinnamon &
> [1] 
> cinnamon: error while loading shared libraries: libreadline.so.6: cannot 
> open shared object file: No such file or directory
> [1]  +  exit 127   cinnamon
> nullptr ~ % LD_PRELOAD=/usr/lib/libreadline.so cinnamon &

Nope. Nope. Nope. Don't do that.

The entire point of the number that everyones likes to ignore is that if
the number changes the library is NOT (ABI) compatible.

If you force your program to use a different version it may work and
break *at the same time*, cause a butterfly to die, throw errors,
silently delete everything on your system, upload all your files to the
internet or eat your cat. NEVER run software with an incorrect library.

The only point of the unversioned symlink is to allow the linker to find
the version of the library it should link against. It is NOT some kind
of "generic" library.

If you really need the old library for some software, either install a
package that provides it or extract it from the old library package (not
tracked by the package manager so not advised).

If you see anyone else giving advice like this, please correct them. I'd
really like to never see this be done again.

Loading an incorrect library version is not a fix and it's not a
temporary workaround. It's just wrong.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Mirror issue

[Florian Pritz via arch-general]

On Friday, September 16, 2016 7:20:46 PM CEST Jordyn Carattini via arch-
general wrote:
> I keep getting http error 502 from the archlinux.polymorf.fr, I've been
> getting this error for the past month. Also sorry if I'm not posting this
> in the right place.

If you still experience the problem, please provide more details. Ideally 
provide a curl command that reproduces the issue and the output you get.

Florian


signature.asc
Description: This is a digitally signed message part.

Re: [arch-general] Unable to release package

[Florian Pritz via arch-general]

On Wednesday, August 24, 2016 6:01:22 PM CEST Nicola Squartini via arch-
general wrote:
> Trying to release electron-1.3.4-1, I issued /community/db-update
> on repos.archlinux.org but I get:
> 
> ==> WARNING: Repo [community] (i686) is already locked by sourceballs. 
>   -> Retrying in 10 seconds...
> 
> repeating. Is there something wrong with the db?

sourceballs, ftpdir-cleanup and one dev's db-update apparently managed to get 
into a deadlock situation.

I've killed some processes and removed a couple of stale locks. You should be 
able to run db-update again now.

PS: I've whitelisted you on arch-dev-public since I forgot that when you 
became a TU. Also arch-dev-public or arch-devops are better places for such 
problems than arch-general. I generally don't look at mails on arch-general as 
often.

Florian


signature.asc
Description: This is a digitally signed message part.

Re: [arch-general] Arch Linux in Embedded Projects

[Florian Pritz via arch-general]

On Thursday, August 11, 2016 11:28:47 AM CEST Compy wrote:
> I've been looking at that, I was more or less just curious as to whether
> or not people know of prior uses of Arch Linux for embedded projects
> that use x86 motherboards.

I'm running Arch on my router which uses this board[1]. That's it though. 
There's nothing really special about the box apart from the slow cpu (well the 
whole thing draws 7W under load so that's to be expected), the small form 
factor and the serial connection instead of a vga port.

Works just fine and does what you'd expect it to do.

[1] http://www.pcengines.ch/apu2c4.htm

Florian

signature.asc
Description: This is a digitally signed message part.

Re: [arch-general] ML is being sent to Spam by Gmail

[Florian Pritz via arch-general]

On 16.06.2016 03:46, Eli Schwartz via arch-general wrote:
> On 06/08/2016 03:45 PM, Florian Pritz via arch-general wrote:
>> Now that is something I totally missed when I read their guidelines, but
>> it certainly sounds like it could be the cause of these problems. I have
>> just switched the server to deliver mails to gmail.com (only that
>> domain, no others) via IPv4. Please tell me if you see any improvement
>> during the next few days.
> 
> So far so good. A week later and I haven't seen any more Arch ML emails
> going to spam.

Since we didn't have too much traffic on the list in that week, what's
the situation like now? Have you seen any more list traffic go to spam
or is this fixed now?

Florian




signature.asc
Description: OpenPGP digital signature

Re: [arch-general] packer vs packer-io

[Florian Pritz via arch-general]

On 23.06.2016 16:04, Andre "Osku" Schmidt via arch-general wrote:
> I would like to provide the user a single command to build "my" software
> (eg. make), but am not sure what i should do.

If there are pkg-config files or similar to detect the correct settings,
use those. Otherwise, just default to whatever is most common and
provide a configure option or environment variable (when you only have a
makefile) to change the value. Feel free to add a sanity check that for
example looks at the --version output if there is something like that.
If you add that, include an option to disable it though. It might break
in the future depending on what you look for.

Also, you want the distro maintainers to package your software for you.
They know what to do and they do stuff like this all the time. You don't
have to waste time on creating packages yourself or ask normal users to
install from source. Experienced users will be capable of changing a
configure option if they really need to build from source. Normal users
should use packages maintained by their distro.

Also kind of fitting: http://kmkeen.com/maintainers-matter/

HTH,
Florian




signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Problems after recent pacman update

[Florian Pritz via arch-general]

On 17.06.2016 21:24, pete nikolic via arch-general wrote:
>  ldconfig: File /usr/lib/libKF5KMahjongglib.so is empty, not checked.
> ldconfig: File /usr/lib/libKF5KDEGamesPrivate.so is empty, not checked.
> ldconfig: File /usr/lib/libKF5ActivitiesExperimentalStats.so.1 is empty, not 
> checked.
> ldconfig: File /usr/lib/libkonsoleprivate.so.16.04.2 is empty, not checked.

Run pacman -Qkk and reinstall all broken packages or just reinstall
everything. Also run `sync` after upgrading. Sounds like either your
system crashed shortly after the upgrade or you shut down and the shut
down didn't properly flush the filesystem cache. I'm not sure why, but
sometimes that happens. I just run sync every time now...

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Possible reflector https problem?

[Florian Pritz via arch-general]

On 15.06.2016 19:37, Francis Gerund via arch-general wrote:
> sudo reflector --verbose --country 'United States' -l 200 -p https --sort
> rate --save /etc/pacman.d/mirrorlist
> 
> The result, only one source (has been 5 or 6 sources before):

We have migrated our repos to a new server and the cronjob that created
the lastsync file was broken and wrote incorrect data which archweb
couldn't deal with. Apparently reflector only looks at mirrors with 100%
completion in archweb so pretty much all mirrors that sync at least
every 6 hours will be ignored because they have at least one bad check run.

I think archweb calculates the value over the last 72 hours so things
should get back to normal in a few days.

Florian




signature.asc
Description: OpenPGP digital signature

Re: [arch-general] ML is being sent to Spam by Gmail

[Florian Pritz via arch-general]

On 08.06.2016 17:18, Eli Schwartz via arch-general wrote:
> In one, I see:
> Authentication-Results: luna.archlinux.org;
> dkim=fail reason="signature verification failed" (2048-bit key)
> header.d=dray-be.20150623.gappssmtp.com
> header.i=@dray-be.20150623.gappssmtp.com header.b=lZvs/tYM

That's weird, but it's difficult to tell what part of the mail changed.
I'm also not sure when that header is being generated. Opendkim doesn't
seem to verify mails consistently for me and so far I haven't managed to
figure out why because debugging features also don't seem to work properly.

> In another, I see the line:
> Authentication-Results: luna.archlinux.org; dkim=none

Well, that's entirely fine. Not everyone supports DKIM.

> I noticed that. It is slightly frustrating since most things seem to
> come from the mailing list rather than the original sender...

That is unfortunate indeed, but there is really no good solutions to
this apart from not changing the mail in any way which is also not a
good solution for us given people rely on the way our lists behave
(subject prefix, reply-to).

Mailman has an option to wrap messages into a new message which might
fix this problem, but I'd first have to investigate client support and
test that feature.

As I posted in another part of this thread, I've switched gmail.com
delivery to IPv4. Let's see if that changes anything.

Florian



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] ML is being sent to Spam by Gmail

[Florian Pritz via arch-general]

On 08.06.2016 11:18, Maarten de Vries wrote:
> ​Gmail imposes more strict checks on email coming in over IPv6, with​
> the rationale that IPv6 enabled machines are more modern and thus should
> be configured properly for newer verification techniques.

Now that is something I totally missed when I read their guidelines, but
it certainly sounds like it could be the cause of these problems. I have
just switched the server to deliver mails to gmail.com (only that
domain, no others) via IPv4. Please tell me if you see any improvement
during the next few days.



signature.asc
Description: OpenPGP digital signature

Re: [arch-general] [arch-dev-public] Arch Linux website down

[Florian Pritz via arch-general]

On 01.06.2016 11:36, Florian Pritz via arch-dev-public wrote:
> We are currently experiencing some technical problems with the webserver
> for archlinux.org, bugs.archlinux.org, patchwork.archlinux.org. We are
> working on it, but resolving this problem could take a while.

The machine is back online and all services should be working normally.
If you notice any problems please contact us.

Please note that DNS has been switched to another server temporarily to
display a maintenance page. It may take up to an hour (assuming everyone
honors the TTL in DNS) until you can reach the website again.

Florian



signature.asc
Description: OpenPGP digital signature

[arch-general] Arch Linux website down

[Florian Pritz via arch-general]

Hi,

We are currently experiencing some technical problems with the webserver
for archlinux.org, bugs.archlinux.org, patchwork.archlinux.org. We are
working on it, but resolving this problem could take a while.

The mailinglists, AUR, wiki and forums are hosted on a different machine
and are still available.

If you want to download an Arch Linux ISO, you can still do that via our
mirrors. If you don't know any mirror URL, you can use this one:
https://mirrors.kernel.org/archlinux/iso/

We are sorry for the inconvenience.

Florian




signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Yahoo mail problems (was [aur-general] No notification for out-of-date package)

[Florian Pritz via arch-general]

On 16.01.2016 05:38, Natu wrote:
> You don't say what yahoo's reject message is, ...

I guess it's possible that some users simply marked mailing list mails
as spam and we got blacklisted because of that. The reject message is this:

421 4.7.1 [TS03] All messages from 5.9.250.164 will be permanently
deferred; Retrying will NOT succeed. See
https://help.yahoo.com/kb/postmaster/SLN3436.html

> but I suspect you may be
> having issues with DMARC/DKIM and mailman's forwarding of DKIM
> signed messages.

I've finally gotten around to setting up and testing DMARC for my domain
and I've set up mailman to munge From for DMARC messages.

Sadly, I still haven't heard back from yahoo, but I guess their
postmaster@ address really just goes to /dev/null. Too bad.

I don't know when yahoo will start accepting mail again though and from
a quick look at the log it seems that they always reject the mail
directly at MAIL FROM time or don't even accept the connection/let it
time out. That also means they will probably not notice that we've
changed the configuration for DMARC mails.

Thanks for your input I guess, but this will probably not be resolved
any time soon.



signature.asc
Description: OpenPGP digital signature