Re: [aur-general] How the Popularity value is being calculated for a package in the AUR4?

2015-06-12 Thread Marcel Korpel
* Andrejs Mivreņiks m...@gim.fastmail.fm (Fri, 12 Jun 2015 10:26:08 +0300): I noticed that the Popularity colon has been added to the list of packages. What does this value actually mean? How is it being calculated? Lukas on aur-dev: Popularity is the sum of all votes with each vote being

Re: [aur-general] How the Popularity value is being calculated for a package in the AUR4?

2015-06-12 Thread Lukas Fleischer
On Fri, 12 Jun 2015 at 09:43:00, G. Schlisio wrote: Lukas on aur-dev: Popularity is the sum of all votes with each vote being weighted with a factor of 0.98 per day since its creation. thats quite a fast wear-off, i think. after a year, there is virtually nothing left (6e-4 only). does

Re: [aur-general] [AUR4] Support of multiple ssh public keys

2015-06-12 Thread Remi Gacogne
On 06/11/2015 11:59 PM, Giancarlo Razzolini wrote: In the case of stolen/lost, it buy you a lot of time. Or you are aware of some cryptanalisys development I'm not aware of. I am not, but everything depends on your threat model. If you are targeted via an evil-maid, or a cold-boot attack, FDE

Re: [aur-general] AUR4, git, subtrees ELI5?

2015-06-12 Thread Lukas Fleischer
On Fri, 12 Jun 2015 at 01:42:41, Eli Schwartz wrote: [...] That still requires packagers to go through several new hoops. [...] Which ones? Can't think of any apart from generating the key and adding it to the web interface. It literally takes ~1 minute. You need to do the same thing after

[aur-general] Signoff report for [community-testing]

2015-06-12 Thread Arch Website Notification
=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 0 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 9 packages missing signoffs * 4 packages older than 14 days

[aur-general] My AUR4 migration workflow

2015-06-12 Thread Johannes Dewender
Generate .SRCINFO for all packages: $ while read p; do git -C $p filter-branch -f --tree-filter test -f .SRCINFO || mksrcinfo; done ../pkgs Don't do it like that. This creates a .SRCINFO from the first PKGBUILD of the package and doesn't update the file for later commits

Re: [aur-general] How the Popularity value is being calculated for a package in the AUR4?

2015-06-12 Thread G. Schlisio
Lukas on aur-dev: Popularity is the sum of all votes with each vote being weighted with a factor of 0.98 per day since its creation. thats quite a fast wear-off, i think. after a year, there is virtually nothing left (6e-4 only). does this really meet the intention? signature.asc

Re: [aur-general] AUR4, git, subtrees ELI5?

2015-06-12 Thread David Kaylor
On Fri, Jun 12, 2015 at 5:34 AM, Lukas Fleischer lfleisc...@archlinux.org wrote: No. It also does not register a new AUR account or setup your Internet connection. It submits packages to the AUR. As I said before, generating and adding the key is a tiny one-time process and automating it

Re: [aur-general] How the Popularity value is being calculated for a package in the AUR4?

2015-06-12 Thread Martti Kühne
On Fri, Jun 12, 2015 at 1:38 PM, Magnus Therning mag...@therning.org wrote: No, and valuable != popular :) Any popularity contest is going to be biased in some way. This is as good a bias as any other. And let's leave completely out of focus that the bias that is needed for a package to

Re: [aur-general] AUR4, git, subtrees ELI5?

2015-06-12 Thread Lukas Fleischer
On Fri, 12 Jun 2015 at 12:42:30, David Kaylor wrote: On Fri, Jun 12, 2015 at 5:34 AM, Lukas Fleischer lfleisc...@archlinux.org wrote: [...] It is expected (and intended) that some (hopefully not too many) AUR package maintainers back out due to the new system. It is also intended that a

Re: [aur-general] How the Popularity value is being calculated for a package in the AUR4?

2015-06-12 Thread Magnus Therning
On 12 June 2015 at 13:11, LoneVVolf lonew...@xs4all.nl wrote: On 12-06-15 10:01, Lukas Fleischer wrote: Also, we don't care about packages that were very popular a year ago and are no longer used today. Low number of new votes != not used anymore Many high quality, useful packages target

Re: [aur-general] [AUR4] Support of multiple ssh public keys

2015-06-12 Thread Øyvind Heggstad
On Thu, 11 Jun 2015 21:58:33 -0400 David Kaylor dpkay...@gmail.com wrote: On Thu, Jun 11, 2015 at 5:59 PM, Giancarlo Razzolini grazzol...@gmail.com wrote: Em 11-06-2015 17:56, Remi Gacogne escreveu: (FDE and strong passphrases only buy you some time to do it). In the case of

Re: [aur-general] [AUR4] Support of multiple ssh public keys

2015-06-12 Thread Giancarlo Razzolini
Em 12-06-2015 05:15, Remi Gacogne escreveu: I am not, but everything depends on your threat model. If you are targeted via an evil-maid, or a cold-boot attack, FDE may be doomed. Which is why I use secureboot + TPM + this: https://aur.archlinux.org/packages/mkinitcpio-chkcryptoboot/ and this:

[aur-general] AUR4 feature request

2015-06-12 Thread Ralf Mardorf
Hi, it would be nice if users could subscribe to packages, to receive information before a package gets deleted. I noticed that a PKGBUILD I used disappeared, before I could store the PKGBUILD on my machine. $ pacman -Qi libfm-gtk-git Name : libfm-gtk-git Version:

Re: [aur-general] AUR4 feature request

2015-06-12 Thread Justin Dray
I t's neither provided by the old, nor by the new AUR. I never downloaded the PKGBUILD, since I build with yaourt. The old git mirror for AUR 3 never removed old packages, so you can still retrieve it from there. But it would be good to maintain access to old packages on the new AUR as well.

[aur-general] [AUR/bzr-gtk] 'CHKInventoryRepository' object has no attribute

2015-06-12 Thread Nicolas Planel
Hi, As this package didn't have a maintainer, I report you the bug to this mailing list, feel free to forward it to the right destination. Basically a deprecated, already fixed mainstream bug are current in the package bzr-gtk 0.100.0-2 Short backtrace : File

[aur-general] Category... and AUR4

2015-06-12 Thread Pablo Lezaeta Reyes
As discuced countless times, there is a recurrent request to remove Category because is not acurated to the many catoegories that a package could have, is not a translatable part, always there are miscategoriced packages, and so on (even there is a few bugs to improbe and to remove it) the list is

[aur-general] Multiple maintainers

2015-06-12 Thread Pablo Lezaeta Reyes
I try add maandree to comaintain my ponysay-devel-git, I fill the request and press accept but no comaintainer update or message is show and I not see he in the list. Is there a pedior to wait? the co maintainer need to accept the request? how I know the request was send or rejected? this

Re: [aur-general] How the Popularity value is being calculated for a package in the AUR4?

2015-06-12 Thread LoneVVolf
On 12-06-15 10:01, Lukas Fleischer wrote: Also, we don't care about packages that were very popular a year ago and are no longer used today. Low number of new votes != not used anymore Many high quality, useful packages target a specific group of users. Does that make them less valuable ? LVV

Re: [aur-general] AUR4, git, subtrees ELI5?

2015-06-12 Thread Eli Schwartz
On Fri, Jun 12, 2015 at 4:34 AM, Lukas Fleischer lfleisc...@archlinux.org wrote: On Fri, 12 Jun 2015 at 01:42:41, Eli Schwartz wrote: [...] That still requires packagers to go through several new hoops. [...] Which ones? Can't think of any apart from generating the key and adding it to