From nobody at parabola.nu Fri Jul 3 04:39:42 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Fri, 03 Jul 2015 04:39:42 -0000 Subject: [Dev] Orphan Pcr package [eudev] marked out-of-date Message-ID: <20150703043942.425.46056@parabola.nu> mittens2001 at tfwno.gf wants to notify you that the following packages may be out-of-date: * eudev 2.1.1-3 [pcr] (i686): https://parabolagnulinux.org/packages/pcr/i686/eudev/ * eudev 2.1.1-3 [pcr] (x86_64): https://parabolagnulinux.org/packages/pcr/x86_64/eudev/ The user provided the following additional text: Current version is 3.1.2-3 From nobody at parabola.nu Fri Jul 3 04:39:55 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Fri, 03 Jul 2015 04:39:55 -0000 Subject: [Dev] Orphan Pcr package [eudev-systemdcompat] marked out-of-date Message-ID: <20150703043955.425.85393@parabola.nu> mittens2001 at tfwno.gf wants to notify you that the following packages may be out-of-date: * eudev-systemdcompat 217-4 [pcr] (i686): https://parabolagnulinux.org/packages/pcr/i686/eudev-systemdcompat/ * eudev-systemdcompat 217-4 [pcr] (x86_64): https://parabolagnulinux.org/packages/pcr/x86_64/eudev-systemdcompat/ The user provided the following additional text: Current version is 221-2. From nobody at parabola.nu Fri Jul 3 08:58:06 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Fri, 03 Jul 2015 08:58:06 -0000 Subject: [Dev] Orphan Libre package [iceweasel] marked out-of-date Message-ID: <20150703085806.426.61667@parabola.nu> demon at krutt.org wants to notify you that the following packages may be out-of-date: * iceweasel 1:38.0.1.deb5-4 [libre] (i686): https://parabolagnulinux.org/packages/libre/i686/iceweasel/ * iceweasel 1:38.0.1.deb5-4 [libre] (x86_64): https://parabolagnulinux.org/packages/libre/x86_64/iceweasel/ * iceweasel-debug 1:38.0.1.deb5-4 [libre] (i686): https://parabolagnulinux.org/packages/libre/i686/iceweasel-debug/ * iceweasel-debug 1:38.0.1.deb5-4 [libre] (x86_64): https://parabolagnulinux.org/packages/libre/x86_64/iceweasel-debug/ The user provided the following additional text: v39 is out. From fauno at endefensadelsl.org Fri Jul 3 15:48:09 2015 From: fauno at endefensadelsl.org (fauno) Date: Fri, 03 Jul 2015 12:48:09 -0300 Subject: [Dev] [donations] [due: 2015-07-10] final draft of agreement between parabola and ceata Message-ID: <87wpyhgs3q.fsf@endefensadelsl.org> hi! i've just met with tiberiu and we finished the draft for the agreement. you can read it here![^0] if there's no serious problems i think we're ok and we can proceed to sign it. let's decide before next friday :) [^0]: https://pad.partidopirata.com.ar/p/Ceata+Parabola -- http://partidopirata.com.ar -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From nobody at parabola.nu Mon Jul 6 19:35:52 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Mon, 06 Jul 2015 19:35:52 -0000 Subject: [Dev] Orphan Libre package [linux-libre] marked out-of-date Message-ID: <20150706193552.426.89791@parabola.nu> ebrasca.ebrasca at gmail.com wants to notify you that the following packages may be out-of-date: * linux-libre 4.0.7_gnu-2 [libre] (i686): https://parabolagnulinux.org/packages/libre/i686/linux-libre/ * linux-libre 4.0.7_gnu-2 [libre] (x86_64): https://parabolagnulinux.org/packages/libre/x86_64/linux-libre/ * linux-libre-docs 4.0.7_gnu-2 [libre] (i686): https://parabolagnulinux.org/packages/libre/i686/linux-libre-docs/ * linux-libre-docs 4.0.7_gnu-2 [libre] (x86_64): https://parabolagnulinux.org/packages/libre/x86_64/linux-libre-docs/ * linux-libre-headers 4.0.7_gnu-2 [libre] (i686): https://parabolagnulinux.org/packages/libre/i686/linux-libre-headers/ * linux-libre-headers 4.0.7_gnu-2 [libre] (x86_64): https://parabolagnulinux.org/packages/libre/x86_64/linux-libre-headers/ The user provided the following additional text: 2015-06-29 - linux stable: 4.1.1 https://kernel.org/ 2015-06-22 - GNU Linux-libre 4.1-gnu http://www.fsfla.org/ikiwiki/selibre/linux-libre/index.en.html Thx From bino at riseup.net Tue Jul 7 17:50:32 2015 From: bino at riseup.net (Albino B Neto) Date: Tue, 07 Jul 2015 14:50:32 -0300 Subject: [Dev] Shell Script AUI Message-ID: <2fb0885ac81822072fdf0c10318f387f@riseup.net> Hi I did installation/testing with aui [0] for Arch Linux, is automatic, simple for beginners (not me). We have problem with the shell script for talking to some users in #archlinux irc, dislikes by automating. The Parabola modifying the code can use? 0 - https://github.com/helmuthdu/aui -- Albino B Neto Parabola GNU/Linux-libre && Arch Linux, User GNU, FSF Latin American GNU.org FSFLA.org @b1n0anb on twitter .. @bino on libreplanetbr From fauno at endefensadelsl.org Tue Jul 7 17:58:04 2015 From: fauno at endefensadelsl.org (fauno) Date: Tue, 07 Jul 2015 14:58:04 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <2fb0885ac81822072fdf0c10318f387f@riseup.net> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> Message-ID: <87a8v7voib.fsf@endefensadelsl.org> Albino B Neto writes: > Hi > > I did installation/testing with aui [0] for Arch Linux, is automatic, > simple for beginners (not me). > > We have problem with the shell script for talking to some users in > #archlinux irc, dislikes by automating. > > The Parabola modifying the code can use? > > 0 - https://github.com/helmuthdu/aui podes hablar en castellano tambien, porque no se entendio nada :P -- :{ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From alfplayer at mailoo.org Tue Jul 7 20:16:38 2015 From: alfplayer at mailoo.org (Esteban Carnevale) Date: Tue, 7 Jul 2015 17:16:38 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <2fb0885ac81822072fdf0c10318f387f@riseup.net> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> Message-ID: <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> Hola. Puedes escribir en portugu?s o espa?ol, y puede ser respondido tambi?n en cualquiera de estos idiomas, que hablamos varios de Parabola. -- Esteban Carnevale From bino at riseup.net Tue Jul 7 20:39:36 2015 From: bino at riseup.net (Albino B Neto) Date: Tue, 7 Jul 2015 17:39:36 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> Message-ID: <559C3908.4010708@riseup.net> On 07/07/2015 05:16 PM, Esteban Carnevale wrote: > Hola. Puedes escribir en portugu?s o espa?ol, y puede ser respondido > tambi?n en cualquiera de estos idiomas, que hablamos varios de Parabola. Brazil, pt_BR. :-) Eu fiz a instala??o/testando com o shell script AUI [0], ? autom?tico, simples para iniciantes (n?o meu caso). N?s temos um problema com o AUI, usu?rios no irc #archlinux n?o gostaram do script automatizado, tira a "beleza" da distro. O que me diz sobre a opni?o ? Eu n?o deixei de concorda, ? um facilitador para usu?rio, mesmo tendo outros distribui??o faceis baseadas em rolling release do Arch e Parabola. No Parabola, modificando o c?digo pode usar ? 0 - https://github.com/helmuthdu/aui -- Albino B Neto Parabola GNU/Linux-libre && Arch Linux, User GNU, FSF Latin American GNU.org FSFLA.org @b1n0anb on twitter .. @bino on libreplanetbr From bino at riseup.net Tue Jul 7 21:01:54 2015 From: bino at riseup.net (Albino B Neto) Date: Tue, 7 Jul 2015 18:01:54 -0300 Subject: [Dev] Mirror Parabola no Brasil Message-ID: <559C3E42.3000608@riseup.net> Oi pessoal No Brasil n?o temos mirror do Parabola GNU/Linux-libre, caso consiga um servidor para realiza??o, pode criar ? -- Albino B Neto Parabola GNU/Linux-libre && Arch Linux, User GNU, FSF Latin American GNU.org FSFLA.org @b1n0anb on twitter .. @bino on libreplanetbr From alfplayer at mailoo.org Tue Jul 7 21:05:10 2015 From: alfplayer at mailoo.org (Esteban Carnevale) Date: Tue, 7 Jul 2015 18:05:10 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <559C3908.4010708@riseup.net> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> <559C3908.4010708@riseup.net> Message-ID: <20150707180510.6fd8515cf208a8a646148da8@mailoo.org> On Tue, 7 Jul 2015 17:39:36 -0300 Albino B Neto wrote: > On 07/07/2015 05:16 PM, Esteban Carnevale wrote: > > Hola. Puedes escribir en portugu?s o espa?ol, y puede ser respondido > > tambi?n en cualquiera de estos idiomas, que hablamos varios de Parabola. > > Brazil, pt_BR. :-) > > Eu fiz a instala??o/testando com o shell script AUI [0], ? autom?tico, > simples para iniciantes (n?o meu caso). > > N?s temos um problema com o AUI, usu?rios no irc #archlinux n?o gostaram > do script automatizado, tira a "beleza" da distro. O que me diz sobre a > opni?o ? Eu n?o deixei de concorda, ? um facilitador para usu?rio, mesmo > tendo outros distribui??o faceis baseadas em rolling release do Arch e > Parabola. > > No Parabola, modificando o c?digo pode usar ? > > 0 - https://github.com/helmuthdu/aui > > -- > Albino B Neto > Parabola GNU/Linux-libre && Arch Linux, User > GNU, FSF Latin American GNU.org FSFLA.org > @b1n0anb on twitter .. @bino on libreplanetbr > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev Creo que ser?a ?til tener ese script en Parabola, y no creo que sea muy dif?cil de adaptar para alguien con algo de experiencia con el shell. Parabola tiene una configuraci?n m?nima por defecto. Creo que es importante que los usuarios nuevos entiendan esto, y que entiendan que aunque logren instalar con un script que simplifique, el mantenimiento de Parabola requiere que el usuario sepa ciertos conceptos igualmente, o sea, estos scripts no sirven realmente para escapar la dificultad de Parabola, sino que hasta pueden evitar que aprendan realizando una instalaci?n manual. -- Esteban Carnevale From emulatorman at riseup.net Tue Jul 7 22:08:46 2015 From: emulatorman at riseup.net (=?UTF-8?B?QW5kcsOpIFNpbHZh?=) Date: Tue, 07 Jul 2015 19:08:46 -0300 Subject: [Dev] Mirror Parabola no Brasil In-Reply-To: <559C3E42.3000608@riseup.net> References: <559C3E42.3000608@riseup.net> Message-ID: <559C4DEE.9070907@riseup.net> On 07/07/2015 06:01 PM, Albino B Neto wrote: > Oi pessoal > > No Brasil n?o temos mirror do Parabola GNU/Linux-libre, caso consiga um > servidor para realiza??o, pode criar ? > Ol? amigo, caso voc? conseguir ? s? enviar a URL pra assim desse jeito eu adicionar ele na parabola-mirrorlist :) Al?m da URL, a gente precisa desta informa??o: # Location: # Responsible: # Work hours: # HTTPS cert SHA1 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From alfplayer at mailoo.org Tue Jul 7 22:15:04 2015 From: alfplayer at mailoo.org (Esteban Carnevale) Date: Tue, 7 Jul 2015 19:15:04 -0300 Subject: [Dev] Mirror Parabola no Brasil In-Reply-To: <559C3E42.3000608@riseup.net> References: <559C3E42.3000608@riseup.net> Message-ID: <20150707191504.8156b66fabf73ec279f6733d@mailoo.org> On Tue, 7 Jul 2015 18:01:54 -0300 Albino B Neto wrote: > Oi pessoal > > No Brasil n?o temos mirror do Parabola GNU/Linux-libre, caso consiga um > servidor para realiza??o, pode criar ? > > -- > Albino B Neto > Parabola GNU/Linux-libre && Arch Linux, User > GNU, FSF Latin American GNU.org FSFLA.org > @b1n0anb on twitter .. @bino on libreplanetbr > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev Puede crearse un mirror con una l?nea de rsync en cron, con aproximadamente 100 GB de espacio. Despu?s puede interesarle a Parabola agregarlo como uno de sus mirrors. -- Esteban Carnevale From fauno at endefensadelsl.org Tue Jul 7 22:17:45 2015 From: fauno at endefensadelsl.org (fauno) Date: Tue, 07 Jul 2015 19:17:45 -0300 Subject: [Dev] Mirror Parabola no Brasil In-Reply-To: <559C4DEE.9070907@riseup.net> References: <559C3E42.3000608@riseup.net> <559C4DEE.9070907@riseup.net> Message-ID: <87r3ojtxx2.fsf@endefensadelsl.org> Andr? Silva writes: > # HTTPS cert SHA1 ? if we're asking for the certificate hash, why don't we put the certs on pacman-mirror so pacman refuses to talk to the mirrors if they suddendly change certs? -- .o?) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From emulatorman at riseup.net Tue Jul 7 22:21:42 2015 From: emulatorman at riseup.net (=?UTF-8?B?QW5kcsOpIFNpbHZh?=) Date: Tue, 07 Jul 2015 19:21:42 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <559C3908.4010708@riseup.net> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> <559C3908.4010708@riseup.net> Message-ID: <559C50F6.9040306@riseup.net> On 07/07/2015 05:39 PM, Albino B Neto wrote: > On 07/07/2015 05:16 PM, Esteban Carnevale wrote: >> Hola. Puedes escribir en portugu?s o espa?ol, y puede ser respondido >> tambi?n en cualquiera de estos idiomas, que hablamos varios de Parabola. > > Brazil, pt_BR. :-) > > Eu fiz a instala??o/testando com o shell script AUI [0], ? autom?tico, > simples para iniciantes (n?o meu caso). > > N?s temos um problema com o AUI, usu?rios no irc #archlinux n?o gostaram > do script automatizado, tira a "beleza" da distro. O que me diz sobre a > opni?o ? Eu n?o deixei de concorda, ? um facilitador para usu?rio, mesmo > tendo outros distribui??o faceis baseadas em rolling release do Arch e > Parabola. > > No Parabola, modificando o c?digo pode usar ? > > 0 - https://github.com/helmuthdu/aui > De fato, eu falei com o icarious da ideia de fazer uma liveCD gr?fica baseando do Manjaro pra iniciantes, al?m do mais eu t? pegando os pacotes pamac e octopi pra ter uma vers?o gr?fica do pacman que tamb?m vem dessa distro, entum t? estudando o source deles pra tirar as refer?ncias do nome da distro pra fazer o "rebranding" e eliminar o suporte de AUR. Voc? o qu? acha disto? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From emulatorman at riseup.net Tue Jul 7 22:25:34 2015 From: emulatorman at riseup.net (=?UTF-8?B?QW5kcsOpIFNpbHZh?=) Date: Tue, 07 Jul 2015 19:25:34 -0300 Subject: [Dev] Mirror Parabola no Brasil In-Reply-To: <87r3ojtxx2.fsf@endefensadelsl.org> References: <559C3E42.3000608@riseup.net> <559C4DEE.9070907@riseup.net> <87r3ojtxx2.fsf@endefensadelsl.org> Message-ID: <559C51DE.7040005@riseup.net> On 07/07/2015 07:17 PM, fauno wrote: > Andr? Silva writes: >> # HTTPS cert SHA1 > > ? if we're asking for the certificate hash, why don't we put the certs > on pacman-mirror so pacman refuses to talk to the mirrors if they > suddendly change certs? > Good idea -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From bino at riseup.net Tue Jul 7 22:34:48 2015 From: bino at riseup.net (Albino B Neto) Date: Tue, 7 Jul 2015 19:34:48 -0300 Subject: [Dev] Mirror Parabola no Brasil In-Reply-To: <559C4DEE.9070907@riseup.net> References: <559C3E42.3000608@riseup.net> <559C4DEE.9070907@riseup.net> Message-ID: <559C5408.1060800@riseup.net> On 07/07/2015 07:08 PM, Andr? Silva wrote: > Ol? amigo, caso voc? conseguir ? s? enviar a URL pra assim desse jeito > eu adicionar ele na parabola-mirrorlist :) > > Al?m da URL, a gente precisa desta informa??o: > > # Location: > # Responsible: > # Work hours: > # HTTPS cert SHA1 Respondendo a todos, pelo que li foram ao mesmo ponto. Estarei dando a maior transpar?ncia sobre a poss?vel mirror no Brasil. Antem?o estou vendo com o pessoal da USP, Linorg [0]. 0 - linorg.usp.br -- Albino B Neto Parabola GNU/Linux-libre && Arch Linux, User GNU, FSF Latin American GNU.org FSFLA.org @b1n0anb on twitter .. @bino on libreplanetbr From bino at riseup.net Wed Jul 8 19:52:30 2015 From: bino at riseup.net (Albino B Neto) Date: Wed, 8 Jul 2015 16:52:30 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <559C50F6.9040306@riseup.net> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> <559C3908.4010708@riseup.net> <559C50F6.9040306@riseup.net> Message-ID: <559D7F7E.8030905@riseup.net> On 07/07/2015 07:21 PM, Andr? Silva wrote: > De fato, eu falei com o icarious da ideia de fazer uma liveCD gr?fica > baseando do Manjaro pra iniciantes, al?m do mais eu t? pegando os > pacotes pamac e octopi pra ter uma vers?o gr?fica do pacman que tamb?m > vem dessa distro, entum t? estudando o source deles pra tirar as > refer?ncias do nome da distro pra fazer o "rebranding" e eliminar o > suporte de AUR. Voc? o qu? acha disto? Acho excelente! O procedimento n?o retirar a base do Parabola de forma alguma, ? um sistema operacional kiss como o Arch Linux (? sua base). Apenas teremos uma alternativa caso o usu?rio tenha dificuldades na instal??o por terminal, a express?o na "unha". O shell script do AUI [0] vai ajudar nesse processo. 0 - https://github.com/helmuthdu/aui -- Albino B Neto Parabola GNU/Linux-libre && Arch Linux, User GNU, FSF Latin American GNU.org FSFLA.org @b1n0anb on twitter .. @bino on libreplanetbr From emulatorman at riseup.net Thu Jul 9 02:39:19 2015 From: emulatorman at riseup.net (=?UTF-8?B?QW5kcsOpIFNpbHZh?=) Date: Wed, 08 Jul 2015 23:39:19 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <559D7F7E.8030905@riseup.net> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> <559C3908.4010708@riseup.net> <559C50F6.9040306@riseup.net> <559D7F7E.8030905@riseup.net> Message-ID: <559DDED7.6010907@riseup.net> On 07/08/2015 04:52 PM, Albino B Neto wrote: > On 07/07/2015 07:21 PM, Andr? Silva wrote: >> De fato, eu falei com o icarious da ideia de fazer uma liveCD gr?fica >> baseando do Manjaro pra iniciantes, al?m do mais eu t? pegando os >> pacotes pamac e octopi pra ter uma vers?o gr?fica do pacman que tamb?m >> vem dessa distro, entum t? estudando o source deles pra tirar as >> refer?ncias do nome da distro pra fazer o "rebranding" e eliminar o >> suporte de AUR. Voc? o qu? acha disto? > > Acho excelente! > > O procedimento n?o retirar a base do Parabola de forma alguma, ? um > sistema operacional kiss como o Arch Linux (? sua base). Apenas teremos > uma alternativa caso o usu?rio tenha dificuldades na instal??o por > terminal, a express?o na "unha". > > O shell script do AUI [0] vai ajudar nesse processo. > > 0 - https://github.com/helmuthdu/aui > Eu n?o disse em nenhum momento de retirar a iso principal da Parabola, o fato ? ter uma alternativa pra iniciantes atrav?s do modo GUI, assim eles podem aprender usar a nossa distro e com o passar do tempo, eles possam aprender usar que nem a gente :) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From fauno at endefensadelsl.org Thu Jul 9 15:07:19 2015 From: fauno at endefensadelsl.org (fauno) Date: Thu, 09 Jul 2015 12:07:19 -0300 Subject: [Dev] Fwd: FSF endorses embedded GNU/Linux distro ProteanOS as fully free Message-ID: <87twtdpdy0.fsf@endefensadelsl.org> -- http://selfdandi.com.ar -------------------- Start of forwarded message -------------------- Date: Thu, 9 Jul 2015 07:10:52 -0300 From: Subject: FSF endorses embedded GNU/Linux distro ProteanOS as fully free -------------- next part -------------- FSF endorses embedded GNU/Linux distro ProteanOS as fully free ============================================================== http://www.fsf.org/news/fsf-endorses-embedded-gnu-linux-distro-proteanos-as-fully-free [The FSF's list](https://www.gnu.org/distros/free-distros.html) consists of ready-to-use full GNU/Linux systems whose developers have made a commitment to follow the [Guidelines for Free System Distributions](https://www.gnu.org/distros/free-system-distribution-guidelines.html). This means each distro includes and steers users toward exclusively free software. All distros on this list reject nonfree software, including firmware "blobs" and nonfree documentation. [ProteanOS](http://proteanos.com) is a new, small, and fast distribution that primarily targets embedded devices, but is also being designed to be part of the boot system of laptops and other devices. The lead maintainer of ProteanOS is P. J. McDermott, who is working closely with the [Libreboot](http://libreboot.org) project and hopes to have ProteanOS be part of the boot system of Libreboot-compatible devices. "ProteanOS combines the ease of installation of a binary distribution with the flexibility of a source distribution or build system: its platform configuration feature allows binary packages to be configured at build-time and run-time for different hardware and use cases," said McDermott. The distro is being independently developed and is not based on other distributions. Users and potential contributors will find a complete toolchain with which the distro can build all of its own packages. Those interested in contributing to ProteanOS can start by [joining the project mailing list](http://lists.proteanos.com) and looking over the [developer documentation](http://proteanos.com/dev/). ### About the Free Software Foundation The Free Software Foundation, founded in 1985, is dedicated to promoting computer users' right to use, study, copy, modify, and redistribute computer programs. The FSF promotes the development and use of free (as in freedom) software -- particularly the GNU operating system and its GNU/Linux variants -- and free documentation for free software. The FSF also helps to spread awareness of the ethical and political issues of freedom in the use of software, and its Web sites, located at fsf.org and gnu.org, are an important source of information about GNU/Linux. Donations to support the FSF's work can be made at . Its headquarters are in Boston, MA, USA. More information about the FSF, as well as important information for journalists and publishers, is at . ### About the GNU Operating System and Linux Richard Stallman announced in September 1983 the plan to develop a free software Unix-like operating system called GNU. GNU is the only operating system developed specifically for the sake of users' freedom. See . In 1992, the essential components of GNU were complete, except for one, the kernel. When in 1992 the kernel Linux was re-released under the GNU GPL, making it free software, the combination of GNU and Linux formed a complete free operating system, which made it possible for the first time to run a PC without non-free software. This combination is the GNU/Linux system. For more explanation, see . ### Media Contacts Joshua Gay Licensing & Compliance Manager Free Software Foundation +1 (617) 542 5942 ### -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- -------------------- End of forwarded message -------------------- -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From erik at kueng.at Thu Jul 9 07:28:17 2015 From: erik at kueng.at (erik) Date: Thu, 09 Jul 2015 09:28:17 +0200 Subject: [Dev] suggestion for repositories Message-ID: <20150709072818.749.qmail@vampire.mech-linz.at> dear team, i am ammazed by the distribution you provide. It is marvelous. I want to suggest a program to be added to the repositories: http://thecoccinella.org/ "Coccinella is a free and open-source cross-platform communication tool with a built-in whiteboard for improved collaboration with other people." best regards, erik From bino at riseup.net Fri Jul 10 00:57:02 2015 From: bino at riseup.net (Albino B Neto) Date: Thu, 9 Jul 2015 21:57:02 -0300 Subject: [Dev] suggestion for repositories In-Reply-To: <20150709072818.749.qmail@vampire.mech-linz.at> References: <20150709072818.749.qmail@vampire.mech-linz.at> Message-ID: <559F185E.3090305@riseup.net> On 07/09/2015 04:28 AM, erik wrote: > http://thecoccinella.org/ > "Coccinella is a free and open-source cross-platform communication tool > with a built-in whiteboard for improved collaboration with other people." Good sugestion. The software is aur of Arch, look page download. We can migrate for Parabola. :-) -- Albino B Neto GNU, FSF Latin American GNU.org FSFLA.org Parabola GNU/Linux-libre && Arch Linux, User @b1n0anb on twitter .. @bino on libreplanetbr From bino at riseup.net Fri Jul 10 01:02:36 2015 From: bino at riseup.net (Albino B Neto) Date: Thu, 9 Jul 2015 22:02:36 -0300 Subject: [Dev] Shell Script AUI In-Reply-To: <559DDED7.6010907@riseup.net> References: <2fb0885ac81822072fdf0c10318f387f@riseup.net> <20150707171638.715b09023ffc6a1775dc547e@mailoo.org> <559C3908.4010708@riseup.net> <559C50F6.9040306@riseup.net> <559D7F7E.8030905@riseup.net> <559DDED7.6010907@riseup.net> Message-ID: <559F19AC.7010900@riseup.net> On 07/08/2015 11:39 PM, Andr? Silva wrote: > ? ter uma alternativa pra iniciantes atrav?s do modo GUI, assim > eles podem aprender usar a nossa distro e com o passar do tempo, eles > possam aprender usar que nem a gente:) Sim, concordo. Teve uma discuss?o na lista Assist [0] sobre o assunto. Acredito que ? um assunto amblo e com boas sugest?es que podem ocorrer. Como queremos o melhor para o usu?rio "leigo" a usar a distribui??o. :-) 0 - https://lists.parabola.nu/pipermail/assist/2015-June/000485.html -- Albino B Neto GNU, FSF Latin American GNU.org FSFLA.org Parabola GNU/Linux-libre && Arch Linux, User @b1n0anb on twitter .. @bino on libreplanetbr From aurelien at hackers.camp Fri Jul 10 08:40:25 2015 From: aurelien at hackers.camp (aurelien) Date: Fri, 10 Jul 2015 10:40:25 +0200 Subject: [Dev] Signed By Unknown Message-ID: <87lheoiex2.fsf@hackers.camp> Hi, After a long fight with Xylon on my Parabola building machine, he find a way to works with nouveau with noaccel nofbaccel. So my building machine is back ... its a bit a walking dead machine ... but works. So, reading https://www.parabola.nu/packages/pcr/any/python2-ssh/ I see that the key is Unknown but if you follow http://pgp.mit.edu:11371/pks/lookup?op=vindex&fingerprint=on&exact=on&search=0x2EC52AC76AEEB6A0 it is the one updated. How solve the unknown trouble? Thanks -- Aur?lien DESBRI?RES -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 818 bytes Desc: not available URL: From fauno at endefensadelsl.org Fri Jul 10 16:36:12 2015 From: fauno at endefensadelsl.org (fauno) Date: Fri, 10 Jul 2015 13:36:12 -0300 Subject: [Dev] [donations] [due: 2015-07-10] final draft of agreement between parabola and ceata In-Reply-To: <87wpyhgs3q.fsf@endefensadelsl.org> References: <87wpyhgs3q.fsf@endefensadelsl.org> Message-ID: <87vbdsnf5v.fsf@endefensadelsl.org> fauno writes: > hi! i've just met with tiberiu and we finished the draft for the > agreement. you can read it here![^0] > > if there's no serious problems i think we're ok and we can proceed to > sign it. > > > let's decide before next friday :) > > > [^0]: https://pad.partidopirata.com.ar/p/Ceata+Parabola ok! i see there's only two comments regarding voluntary termination but i think they're covered by section 7 already. since no one else spoke up, i'm assuming everyone's ok with this and tell tiberiu we can proceed with the signing :) -- :O -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From bino at riseup.net Fri Jul 10 16:53:55 2015 From: bino at riseup.net (Albino B Neto) Date: Fri, 10 Jul 2015 13:53:55 -0300 Subject: [Dev] [donations] [due: 2015-07-10] final draft of agreement between parabola and ceata In-Reply-To: <87vbdsnf5v.fsf@endefensadelsl.org> References: <87wpyhgs3q.fsf@endefensadelsl.org> <87vbdsnf5v.fsf@endefensadelsl.org> Message-ID: Em 2015-07-10 13:36, fauno escreveu: > fauno writes: >> [^0]: https://pad.partidopirata.com.ar/p/Ceata+Parabola > > ok! i see there's only two comments regarding voluntary termination but > i think they're covered by section 7 already. > > since no one else spoke up, i'm assuming everyone's ok with this and > tell tiberiu we can proceed with the signing :) We are establishing the Parabola will now be formal, for receiving donations and thus the payment of taxes in accordance with the law of the governed country? I am sorry, now read this. -- Albino B Neto GNU, FSF Latin American GNU.org FSFLA.org Parabola GNU/Linux-libre && Arch Linux, User @b1n0anb on twitter .. @bino on libreplanetbr From nobody at parabola.nu Sun Jul 12 21:23:23 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Sun, 12 Jul 2015 21:23:23 -0000 Subject: [Dev] Orphan Pcr package [tox-git] marked out-of-date Message-ID: <20150712212323.425.64650@parabola.nu> jackdon at ruggedinbox.com wants to notify you that the following packages may be out-of-date: * tox-git r3418.4b9425f-1 [pcr] (i686): https://parabolagnulinux.org/packages/pcr/i686/tox-git/ * tox-git r3418.4b9425f-1 [pcr] (x86_64): https://parabolagnulinux.org/packages/pcr/x86_64/tox-git/ The user provided the following additional text: toxcore updates frequently. It's time to update it. + build bug: add automake to make deps From nobody at parabola.nu Thu Jul 16 18:40:41 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Thu, 16 Jul 2015 18:40:41 -0000 Subject: [Dev] Orphan Pcr package [rtorrent-color] marked out-of-date Message-ID: <20150716184041.426.47415@parabola.nu> eponskinnay at gmail.com wants to notify you that the following packages may be out-of-date: * rtorrent-color 0.9.4-2 [pcr] (i686): https://parabolagnulinux.org/packages/pcr/i686/rtorrent-color/ * rtorrent-color 0.9.4-2 [pcr] (x86_64): https://parabolagnulinux.org/packages/pcr/x86_64/rtorrent-color/ The user provided the following additional text: sudo pacman -Syu :: Synchronizing package databases... libre is up to date core is up to date extra is up to date community is up to date multilib is up to date pcr is up to date :: Starting full system upgrade... resolving dependencies... looking for conflicting packages... error: failed to prepare transaction (could not satisfy dependencies) :: rtorrent-color: requires libtorrent=0.13.4 From nobody at parabola.nu Sat Jul 18 23:40:28 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Sat, 18 Jul 2015 23:40:28 -0000 Subject: [Dev] Orphan Kernels package [linux-libre-rt] marked out-of-date Message-ID: <20150718234028.426.87521@parabola.nu> biserangeloff at gmail.com wants to notify you that the following packages may be out-of-date: The user provided the following additional text: there is a patch for 4.1 https://www.kernel.org/pub/linux/kernel/projects/rt/4.1/ From fauno at endefensadelsl.org Sun Jul 19 01:20:53 2015 From: fauno at endefensadelsl.org (fauno) Date: Sat, 18 Jul 2015 22:20:53 -0300 Subject: [Dev] Fwd: [arch-dev-public] git packages and checksums Message-ID: <87wpxx9c3u.fsf@endefensadelsl.org> fyi -- }(:= -------------------- Start of forwarded message -------------------- Date: Sat, 18 Jul 2015 10:04:28 -1000 From: Gaetan Bisson Subject: [arch-dev-public] git packages and checksums Hi, As more of our official packages use git sources, I'd like to suggest we always enforce some kind of checksum verification. More specifically, I'd like us to avoid using straightforward source arrays such as: source=("git://github.com/systemd/systemd.git#tag=v$pkgver") md5sums=('SKIP') Instead I suggest we use the full commit hash. In the example above, that'd become something like: _commit=9a50ce20ef60263a6c88c29470ce761fcc424f2d source=("git://github.com/systemd/systemd.git#commit=$_commit") md5sums=('SKIP') Does that sound like a good idea? -- Gaetan -------------------- End of forwarded message -------------------- -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From fauno at endefensadelsl.org Sun Jul 19 01:23:50 2015 From: fauno at endefensadelsl.org (fauno) Date: Sat, 18 Jul 2015 22:23:50 -0300 Subject: [Dev] Fwd: Assist post from kd.new@autistici.org requires approval Message-ID: <87si8l9byx.fsf@endefensadelsl.org> why am i admin on assist@? i'm not even on that list... -- }(:= -------------------- Start of forwarded message -------------------- Subject: Assist post from kd.new at autistici.org requires approval From: assist-owner at lists.parabola.nu Date: Sat, 18 Jul 2015 15:18:37 +0100 -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: not available URL: -------------- next part -------------- An embedded message was scrubbed... From: kd.new at autistici.org Subject: Package Request For PCR Date: Sat, 18 Jul 2015 14:18:28 +0000 Size: 2048 URL: -------------- next part -------------- An embedded message was scrubbed... From: assist-request at lists.parabola.nu Subject: confirm 6e6a284172eabb1708dc56e9d65b770e17b23bd0 Date: Sat, 18 Jul 2015 15:18:37 +0100 Size: 688 URL: -------------- next part -------------- -------------------- End of forwarded message -------------------- -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From fauno at endefensadelsl.org Sun Jul 19 01:26:10 2015 From: fauno at endefensadelsl.org (fauno) Date: Sat, 18 Jul 2015 22:26:10 -0300 Subject: [Dev] [donations] follow up on ceata agreement Message-ID: <87pp3p9bv1.fsf@endefensadelsl.org> hey, so the final document is here[^0]. we're just waiting on fsf for confirmation on their role as default successor, and then we can sign it! [^0]: https://projects.parabola.nu/ceata-agreement.git -- }(:= -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From aurelien at hackers.camp Sun Jul 19 05:33:49 2015 From: aurelien at hackers.camp (aurelien) Date: Sun, 19 Jul 2015 07:33:49 +0200 Subject: [Dev] Fwd: Assist post from kd.new@autistici.org requires approval In-Reply-To: <87si8l9byx.fsf@endefensadelsl.org> (fauno@endefensadelsl.org's message of "Sat, 18 Jul 2015 22:23:50 -0300") References: <87si8l9byx.fsf@endefensadelsl.org> Message-ID: <874ml0hfsy.fsf@hackers.camp> fauno writes: > why am i admin on assist@? i'm not even on that list... bah it is always better than be retired than one for a domain name extension reason ? ? -- Aur?lien DESBRI?RES -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 818 bytes Desc: not available URL: From aurelien at hackers.camp Sun Jul 19 05:37:56 2015 From: aurelien at hackers.camp (aurelien) Date: Sun, 19 Jul 2015 07:37:56 +0200 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87pp3p9bv1.fsf@endefensadelsl.org> (fauno@endefensadelsl.org's message of "Sat, 18 Jul 2015 22:26:10 -0300") References: <87pp3p9bv1.fsf@endefensadelsl.org> Message-ID: <87zj2sg11n.fsf@hackers.camp> fauno writes: > hey, so the final document is here[^0]. we're just waiting on fsf for > confirmation on their role as default successor, and then we can sign > it! > > > > [^0]: https://projects.parabola.nu/ceata-agreement.git A last time I present my point of view against money in a projet. Just from History, one day Emulatorman comes to Parabola and request me to build the kernel, I respond to him something like do it you are free. Does that situation could happen tomorrow? Doing things for money and doing things for knowledge, change the way and waves of minds. Friendly. -- Aur?lien DESBRI?RES -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 818 bytes Desc: not available URL: From mtjm at mtjm.eu Sun Jul 19 08:51:29 2015 From: mtjm at mtjm.eu (=?utf-8?Q?Micha=C5=82_Mas=C5=82owski?=) Date: Sun, 19 Jul 2015 10:51:29 +0200 Subject: [Dev] Fwd: Assist post from kd.new@autistici.org requires approval In-Reply-To: <87si8l9byx.fsf@endefensadelsl.org> (fauno@endefensadelsl.org's message of "Sat, 18 Jul 2015 22:23:50 -0300") References: <87si8l9byx.fsf@endefensadelsl.org> Message-ID: <87zj2sttri.fsf@elros.vpn.mtjm.eu> > why am i admin on assist@? i'm not even on that list... We need list moderators who: - know the languages used on the lists (I don't know Spanish) - approve valid mails - reject too big mails and ones that otherwise shouldn't go to the list - discard spam, at least periodically to clean the moderation queue - receive mails from mailman without list admins getting bounces from them Could someone else admin that list? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 818 bytes Desc: not available URL: From fauno at endefensadelsl.org Sun Jul 19 15:10:10 2015 From: fauno at endefensadelsl.org (fauno) Date: Sun, 19 Jul 2015 12:10:10 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87zj2sg11n.fsf@hackers.camp> References: <87pp3p9bv1.fsf@endefensadelsl.org> <87zj2sg11n.fsf@hackers.camp> Message-ID: <87egk49oa5.fsf@endefensadelsl.org> aurelien writes: > fauno writes: > >> hey, so the final document is here[^0]. we're just waiting on fsf for >> confirmation on their role as default successor, and then we can sign >> it! >> >> >> >> [^0]: https://projects.parabola.nu/ceata-agreement.git > > A last time I present my point of view against money in a projet. > > Just from History, one day Emulatorman comes to Parabola and request me > to build the kernel, I respond to him something like do it you are free. > > Does that situation could happen tomorrow? > > Doing things for money and doing things for knowledge, change the way > and waves of minds. > > Friendly. we haven't reach a consensus on payed developers, so the funds ceata is going to hold for us are for expenses such as domain names, servers, hardware, etc. for what is worth, i understand your point and i've seen it happen a couple times, and i don't want the presence of money to become relations based on money instead of relations of friendship, but i think we're due the point where to be against capitalism, or just against monetarization, we need to work for free here and let us be exploited elsewhere so we can survive and have some idle time. in this respect i think such position naturalizes the homo oeconomicus neo-liberalism wants us all to believe in. we need to be able to be free and live off of it. to me this involves not being exploited elsewhere for a start, and then not having to bring back that exploitation where we are free. i think we can achieve a point where our friendship can be sustained with common goods and not just the will and idle time of everyone! donations are a step forward... but it also means donors obtain that money from their own exploitation. hugs :) -- http://utopia.partidopirata.com.ar/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From lovell.joshyyy at gmail.com Sun Jul 19 22:02:11 2015 From: lovell.joshyyy at gmail.com (Josh Branning) Date: Sun, 19 Jul 2015 23:02:11 +0100 Subject: [Dev] crosstool-ng-libre Message-ID: <55AC1E63.8080300@gmail.com> Hi, There are a few who I spoke to on IRC who already know about this, In order to port to different architectures, a (cross) toolchain is needed. There are many toolchains for the vanilla linux kernel, but few for linux-libre. This is therefore, an attempt at creating crosstool-ng-libre based on crosstool-ng. Hopefully then an arm port can potentially be made of parabola. I have uploaded the progress so-far at as a tar.gz on my home-server (which may or may not be down at different times): http://joshyyy.twilightparadox.com/owncloud/index.php/s/rIC1kRbqsRgZ3el Josh From elcorreo at deshackra.com Sun Jul 19 23:25:03 2015 From: elcorreo at deshackra.com (Jorge Araya Navarro) Date: Sun, 19 Jul 2015 17:25:03 -0600 Subject: [Dev] crosstool-ng-libre In-Reply-To: <55AC1E63.8080300@gmail.com> References: <55AC1E63.8080300@gmail.com> Message-ID: <87zj2ryblc.fsf@abril.charola> You should upload your progress to AUR since they use a git workflow for those packages, so it would be always available for anyone. Josh Branning writes: > Hi, > > There are a few who I spoke to on IRC who already know about this, > > In order to port to different architectures, a (cross) toolchain is > needed. There are many toolchains for the vanilla linux kernel, but few > for linux-libre. This is therefore, an attempt at creating > crosstool-ng-libre based on crosstool-ng. Hopefully then an arm port can > potentially be made of parabola. > > I have uploaded the progress so-far at as a tar.gz on my home-server > (which may or may not be down at different times): > > http://joshyyy.twilightparadox.com/owncloud/index.php/s/rIC1kRbqsRgZ3el > > > Josh > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev -- Pax et bonum. Jorge Araya Navarro. ES: Dise?ador Publicitario, Programador Python y colaborador en Parabola GNU/Linux-libre EN: Ads Designer, Python programmer and contributor Parabola GNU/Linux-libre EO: Anonco grafikisto, Pitino programalingvo programisto kai kontribuanto en Parabola GNU/Linux-libre https://es.gravatar.com/shackra From g4jc at openmailbox.org Mon Jul 20 00:32:11 2015 From: g4jc at openmailbox.org (Luke) Date: Sun, 19 Jul 2015 20:32:11 -0400 Subject: [Dev] My new SSH key for testing Message-ID: <55AC418B.8030405@openmailbox.org> Hello, Per alfplayer I have generated a new ssh key with default settings to test. It is attached and this e-mail has been signed. :) -------------- next part -------------- A non-text attachment was scrubbed... Name: parabolapkg2.pub Type: application/vnd.ms-publisher Size: 396 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: From emulatorman at riseup.net Mon Jul 20 15:09:16 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Mon, 20 Jul 2015 12:09:16 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87egk49oa5.fsf@endefensadelsl.org> References: <87pp3p9bv1.fsf@endefensadelsl.org> <87zj2sg11n.fsf@hackers.camp> <87egk49oa5.fsf@endefensadelsl.org> Message-ID: <55AD0F1C.5000902@riseup.net> On 07/19/2015 12:10 PM, fauno wrote: > > we haven't reach a consensus on payed developers, so the funds ceata is > going to hold for us are for expenses such as domain names, servers, > hardware, etc. > I suggest re-open a consensus about payed Parabola hackers. It should reach a consensus to know that we should do with it after Parabola structuring. I had plans to do a presentation about our distro [0] for health institutions and ONGs to offers a dedicated Parabola technical support for them like GNU Solidario and GNUHealth does, but we need people with dedicated time for it, not enthusiasts only. I would do it inside Parabola because i would see hackers won't have to earn their wages by working anywhere else and would have dedicated time to fix long standing bugs and effort to Parabola (eg: create a stable and secure version for hospitals). I agree use the donations for expenses such as domain names, servers, hardware, etc, because we need structuring to organize our distro first, however i'm against it as a definitive way for our donations. [0]:https://wiki.parabola.nu/Parabola_Presentation -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From emulatorman at riseup.net Mon Jul 20 18:00:08 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Mon, 20 Jul 2015 15:00:08 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87zj2sg11n.fsf@hackers.camp> References: <87pp3p9bv1.fsf@endefensadelsl.org> <87zj2sg11n.fsf@hackers.camp> Message-ID: <55AD3728.1090107@riseup.net> On 07/19/2015 02:37 AM, aurelien wrote: > > Just from History, one day Emulatorman comes to Parabola and request me > to build the kernel, I respond to him something like do it you are free. > > Does that situation could happen tomorrow? > You're right on that point too, i suggest a way to solve it after Parabola structuring: a) Create a stable version based on Manjaro (also with a stable Debian style) with man power with dedicated time and effort on it [0], in my opinion we should have payed Parabola hackers too because it should be focused for servers and health (eg. biological, medical fields and give dedicated support for libre projects like GNUHealth [1]) With a stable version we could help GNUHealth change a paradigm: move away from the reactive Model of Disease, to the proactive Model of Health. There's a article about it [2] b) Our current version that is based on Arch could be maintained by enthusiast hackers that don't needs money for do it and/or don't have dedicated time (eg. it could give opportunities for hackers with amazing skills to test packages from [pcr] and add new cool features ways for Parabola like gnudmd [3]) [0]:https://wiki.parabola.nu/How_to_help [1]:http://health.gnu.org/index.html [2]:https://en.wikibooks.org/wiki/GNU_Health/Preface [3]:https://www.gnu.org/software/dmd/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From fauno at endefensadelsl.org Mon Jul 20 20:44:17 2015 From: fauno at endefensadelsl.org (fauno) Date: Mon, 20 Jul 2015 17:44:17 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <55AD3728.1090107@riseup.net> References: <87pp3p9bv1.fsf@endefensadelsl.org> <87zj2sg11n.fsf@hackers.camp> <55AD3728.1090107@riseup.net> Message-ID: <87y4ia7e5a.fsf@endefensadelsl.org> Andr? Silva writes: > On 07/19/2015 02:37 AM, aurelien wrote: >> >> Just from History, one day Emulatorman comes to Parabola and request me >> to build the kernel, I respond to him something like do it you are free. >> >> Does that situation could happen tomorrow? >> > > You're right on that point too, i suggest a way to solve it after > Parabola structuring: > > a) Create a stable version based on Manjaro (also with a stable Debian > style) with man power with dedicated time and effort on it [0], in my > opinion we should have payed Parabola hackers too because it should be > focused for servers and health (eg. biological, medical fields and give > dedicated support for libre projects like GNUHealth [1]) > With a stable version we could help GNUHealth change a paradigm: move > away from the reactive Model of Disease, to the proactive Model of > Health. There's a article about it [2] > > b) Our current version that is based on Arch could be maintained by > enthusiast hackers that don't needs money for do it and/or don't have > dedicated time (eg. it could give opportunities for hackers with amazing > skills to test packages from [pcr] and add new cool features ways for > Parabola like gnudmd [3]) i wouldn't like a solution like this, because it'll create the rift between payed hackers and communitary development we discussed and feared about a long time ago... with a project that's more of a product, made for professionals for the needs of their costumers, and a pet project developed by and for the community that has bugs no one wants to fix. i **insist** in that if we want to accept money and start covering hardware expenses, developer expenses, and then life expenses, we need to do it as a community and in transparent way. having to create a side project with funding and dedicated people is not the way to do it :) there's people involving a lot of their time in parabola development, and after a while it isn't fun anymore (i did it myself!). i'd be happy to see them make a few bucks for that, but those bucks should be assigned by the community if this project is going to be democratic and fun in the future. having said this, i don't think anyone here is acting or going to act in bad faith, and i've seen emulatorman help a lot of new hackers even though he's also pushing for people to be paid and doing most of the packaging. this is a community project but sometimes it feels like one committed person pulls most of the weight, so please don't forget that ;) -- http://endefensadelsl.org -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From fauno at endefensadelsl.org Mon Jul 20 21:22:13 2015 From: fauno at endefensadelsl.org (fauno) Date: Mon, 20 Jul 2015 18:22:13 -0300 Subject: [Dev] how to become a parabola hacker Message-ID: <87h9oy7ce2.fsf@endefensadelsl.org> i started this page on the wiki so we can have an stardardized answer whenever someone sends public keys out of nowhere :P https://wiki.parabola.nu/How_to_become_a_Parabola_hacker -- }(:= -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From g4jc at openmailbox.org Mon Jul 20 22:37:00 2015 From: g4jc at openmailbox.org (Luke) Date: Mon, 20 Jul 2015 18:37:00 -0400 Subject: [Dev] My new SSH key for testing In-Reply-To: <55AC418B.8030405@openmailbox.org> References: <55AC418B.8030405@openmailbox.org> Message-ID: <55AD780C.3000707@openmailbox.org> This issue, #758, has been resolved. Thanks to fauno pointing out a simple fact: I was not using repo at repo for user. *face-palm* Thanks everyone. :) On 07/19/2015 08:32 PM, Luke wrote: > Hello, > Per alfplayer I have generated a new ssh key with default settings to test. > > It is attached and this e-mail has been signed. :) > > > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: From emulatorman at riseup.net Mon Jul 20 22:45:58 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Mon, 20 Jul 2015 19:45:58 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87y4ia7e5a.fsf@endefensadelsl.org> References: <87pp3p9bv1.fsf@endefensadelsl.org> <87zj2sg11n.fsf@hackers.camp> <55AD3728.1090107@riseup.net> <87y4ia7e5a.fsf@endefensadelsl.org> Message-ID: <55AD7A26.1070403@riseup.net> On 07/20/2015 05:44 PM, fauno wrote: > i wouldn't like a solution like this, because it'll create the rift > between payed hackers and communitary development we discussed and > feared about a long time ago... with a project that's more of a > product, made for professionals for the needs of their costumers, and a > pet project developed by and for the community that has bugs no one > wants to fix. > > i **insist** in that if we want to accept money and start covering > hardware expenses, developer expenses, and then life expenses, we need > to do it as a community and in transparent way. having to create a side > project with funding and dedicated people is not the way to do it :) > > there's people involving a lot of their time in parabola development, > and after a while it isn't fun anymore (i did it myself!). i'd be happy > to see them make a few bucks for that, but those bucks should be > assigned by the community if this project is going to be democratic and > fun in the future. > +1 excellent point of view, i didn't paid attention on that detail -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From ebrasca.ebrasca at gmail.com Tue Jul 21 22:49:01 2015 From: ebrasca.ebrasca at gmail.com (ebrasca.ebrasca) Date: Wed, 22 Jul 2015 00:49:01 +0200 Subject: [Dev] =?utf-8?q?preguntas_sobre_Donaci=C3=B3n_de_dispositivos_arm?= Message-ID: <55AECC5D.4070204@gmail.com> Hola. Tengo en mi casa dos dispositivos ARM Una Raspberry Pi 1 c Una BeagleBone Black rev c Mi pregunta es si os interesa que os done dichos dispositivos para ayudar en el desarrollo del porteo. ?C?mo puedo ayudar y de que forma hacer el envio si resulta que el material que tengo disponible puede ser de utilidad? From lukeshu at sbcglobal.net Thu Jul 23 04:47:05 2015 From: lukeshu at sbcglobal.net (Luke Shumaker) Date: Wed, 22 Jul 2015 22:47:05 -0600 Subject: [Dev] Fwd: [arch-dev-public] git packages and checksums In-Reply-To: <87wpxx9c3u.fsf@endefensadelsl.org> References: <87wpxx9c3u.fsf@endefensadelsl.org> Message-ID: <87egjzcwfq.wl-lukeshu@sbcglobal.net> On Sat, 18 Jul 2015 19:20:53 -0600, fauno wrote: > > [1 ] > [1.1 ] > fyi > > -- > }(:= > > -------------------- Start of forwarded message -------------------- > Date: Sat, 18 Jul 2015 10:04:28 -1000 > From: Gaetan Bisson > Subject: [arch-dev-public] git packages and checksums > > Hi, > > As more of our official packages use git sources, I'd like to suggest we > always enforce some kind of checksum verification. More specifically, > I'd like us to avoid using straightforward source arrays such as: > > source=("git://github.com/systemd/systemd.git#tag=v$pkgver") > md5sums=('SKIP') > > Instead I suggest we use the full commit hash. In the example above, > that'd become something like: > > _commit=9a50ce20ef60263a6c88c29470ce761fcc424f2d > source=("git://github.com/systemd/systemd.git#commit=$_commit") > md5sums=('SKIP') > > Does that sound like a good idea? You mean what I've been enforcing on Parabola packages from the get-go? ;-) -- Happy hacking, ~ Luke Shumaker From lukeshu at sbcglobal.net Thu Jul 23 04:50:21 2015 From: lukeshu at sbcglobal.net (Luke Shumaker) Date: Wed, 22 Jul 2015 22:50:21 -0600 Subject: [Dev] Fwd: [Maintenance] Cron cronic bash -c "/srv/git/update-gitmeta 'Update from cron' 2>&1" In-Reply-To: <87oalf3jqn.fsf@endefensadelsl.org> References: <87oalf3jqn.fsf@endefensadelsl.org> Message-ID: <87d1zjcwaa.wl-lukeshu@sbcglobal.net> On Tue, 19 May 2015 23:23:28 -0600, Nicol?s Reynolds wrote: > > [1 ] > [1.1 ] > > what's this? > > -- > :O > > -------------------- Start of forwarded message -------------------- > From: "(Cron Daemon)" > Auto-Submitted: auto-generated > Date: Wed, 20 May 2015 06:00:01 +0100 (BST) > Subject: [Maintenance] Cron cronic bash -c > "/srv/git/update-gitmeta 'Update from cron' 2>&1" > > Cronic detected failure or error output for the command: > bash -c /srv/git/update-gitmeta 'Update from cron' 2>&1 > > RESULT CODE: 128 > > ERROR OUTPUT: > > STANDARD OUTPUT: > fatal: open /dev/null or dup failed: Permission denied > fatal: open /dev/null or dup failed: Permission denied It's this rearing its head: https://labs.parabola.nu/issues/726 (update-gitmeta is a script to track git-metadata, in the interest of backing up the git repo configuration) -- Happy hacking, ~ Luke Shumaker From nobody at parabola.nu Sat Jul 25 09:04:02 2015 From: nobody at parabola.nu (Parabola Website Notification) Date: Sat, 25 Jul 2015 09:04:02 -0000 Subject: [Dev] Orphan Pcr package [tahoe-lafs] marked out-of-date Message-ID: <20150725090402.429.22343@parabola.nu> mittens2001 at tfwno.gf wants to notify you that the following packages may be out-of-date: * tahoe-lafs 1.10.0-1 [pcr] (any): https://parabolagnulinux.org/packages/pcr/any/tahoe-lafs/ The user provided the following additional text: new package release From fauno at endefensadelsl.org Mon Jul 27 04:22:29 2015 From: fauno at endefensadelsl.org (fauno) Date: Mon, 27 Jul 2015 01:22:29 -0300 Subject: [Dev] Fwd: [arch-dev-public] CFLAGS Message-ID: <87io96xm9m.fsf@endefensadelsl.org> fyi -- http://partidopirata.com.ar -------------------- Start of forwarded message -------------------- From: Allan McRae Date: Mon, 27 Jul 2015 14:15:30 +1000 Subject: [arch-dev-public] CFLAGS We have a couple of bugs open about our CFLAGS. 1) https://bugs.archlinux.org/task/44361 -Remove the no-op --param=ssp-buffer-size=4 switch from CFLAGS Since we moved from -fstack-protector to -fstack-protector-strong, this paramater is unused and can be removed. 2) https://bugs.archlinux.org/task/44362 - Add -fstack-check Read more about this here: https://gcc.gnu.org/onlinedocs/gccint/Stack-Checking.html This is essentially a no-op for most code, so should have no real performance hit. I can not find any benchmarks to demonstrate that though. This would mean: CFLAGS="-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong -fstack-check" Opinions? Allan -------------------- End of forwarded message -------------------- -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From emulatorman at riseup.net Tue Jul 28 19:45:41 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Tue, 28 Jul 2015 16:45:41 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87pp3p9bv1.fsf@endefensadelsl.org> References: <87pp3p9bv1.fsf@endefensadelsl.org> Message-ID: <55B7DBE5.9080909@riseup.net> On 07/18/2015 10:26 PM, fauno wrote: > > hey, so the final document is here[^0]. we're just waiting on fsf for > confirmation on their role as default successor, and then we can sign > it! > > > > [^0]: https://projects.parabola.nu/ceata-agreement.git > Since some days, there isn't answer from them. Could we send a email about it to Richard Stallman directly to speed up the procedure? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From joseph at t67.eu Tue Jul 28 19:52:46 2015 From: joseph at t67.eu (Joseph Graham) Date: Tue, 28 Jul 2015 20:52:46 +0100 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <55B7DBE5.9080909@riseup.net> References: <87pp3p9bv1.fsf@endefensadelsl.org> <55B7DBE5.9080909@riseup.net> Message-ID: <55B7DD8E.40908@t67.eu> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 28/07/15 20:45, Andr? Silva wrote: > On 07/18/2015 10:26 PM, fauno wrote: >> >> hey, so the final document is here[^0]. we're just waiting on >> fsf for confirmation on their role as default successor, and then >> we can sign it! >> >> >> >> [^0]: https://projects.parabola.nu/ceata-agreement.git >> > > Since some days, there isn't answer from them. Could we send a > email about it to Richard Stallman directly to speed up the > procedure? I think he will be VERY angry if you do that. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJVt92OAAoJENtZD3OeWsRYI+4P/RBmI4S2k9dvx9dTHUjOyyPL flTptCIzG4OcrvBIvCTaA047mIvkAGWFYevg85PsxMLSyyFexC33/Joy9XXKcidm Oxjvz5ZXmQ7mDCxtaYAjaOiX7fq4NSzjAtakkIHjl8dXQhmfZe5NkmUTpLpJt6Lr BH5DTqeNsCUOZJxKLfeSuKoj5jgVg17YU3XaZH+X3rHtOYpSBaZWTx/08EGQ7YVk Ll1Rc3xz8eCPhi0X9qAj8Q0kG9Uvezg2i95lQJ/IBWWYuRrz/DILYcv8WxvAW0uK ugqzC5SDQooUyoEqzJTEwCkuvEa2k6/Ckk9nKAPlWMygEeD/vucMPbdvQGq0/pEv UlJ0A0yLqyt4EeQMRs6hmN9TA7/fyCxh8BjL3mHYQPNmg6qYpVheBJAi9hKfhjPB 29w+KLgavBC4r7Qkq9qy1KQR629KY5p8ziCOYzz/3QYb8/v34ZY9uhtFSy2ZyjQG 3HpPorjTeByiE1F72jFCWOdRqTLdU7lQ1ZkfxN60cq0fXy4GBxpoQrMSP5zqdZSk 0Qxpqgtlb4ROUfM4cSnTkoUwPt+GR9VytJWcrggID8KFptxZ/3NstdyJClOmVsrq tG8wqVKK7/kqvAQsN5yQ4NwJedTI95r90YXxu6s7re4ME/VvbGKs14mbvz6pMWTm JM0jopKPzsS2YQGqd92A =HP1S -----END PGP SIGNATURE----- From emulatorman at riseup.net Tue Jul 28 20:01:30 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Tue, 28 Jul 2015 17:01:30 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <55B7DD8E.40908@t67.eu> References: <87pp3p9bv1.fsf@endefensadelsl.org> <55B7DBE5.9080909@riseup.net> <55B7DD8E.40908@t67.eu> Message-ID: <55B7DF9A.4040300@riseup.net> On 07/28/2015 04:52 PM, Joseph Graham wrote: > On 28/07/15 20:45, Andr? Silva wrote: >> On 07/18/2015 10:26 PM, fauno wrote: >>> >>> hey, so the final document is here[^0]. we're just waiting on >>> fsf for confirmation on their role as default successor, and then >>> we can sign it! >>> >>> >>> >>> [^0]: https://projects.parabola.nu/ceata-agreement.git >>> > >> Since some days, there isn't answer from them. Could we send a >> email about it to Richard Stallman directly to speed up the >> procedure? > > I think he will be VERY angry if you do that. > Why? i don't think so, the procedure is in dormant state from days or weeks and it isn't a trivial case for him. Otherwise, we could send a email to Richard Stallman to know what happens with them only, maybe they are having problems to receive emails. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From niitotantei at riseup.net Wed Jul 29 15:41:43 2015 From: niitotantei at riseup.net (Daniel Milewski) Date: Wed, 29 Jul 2015 17:41:43 +0200 Subject: [Dev] [PATCH] pacman-4.2.1-2.parabola2: convert cron job to systemd timer Message-ID: <1438184503.941.10.camel@riseup.net> cronie dependency introduced with pacman-4.2.1-2.parabola1 makes it impossible to use other cron implementations. This week I saw a user on #parabola which couldn't update his system because cronie conflicts with cron. Instead of imposing a specific cron implementation I think it'd be better to use a systemd timer. Timers are already used by other packages like logrotate and man-db. --- libre/pacman/PKGBUILD | 14 +++++++++----- libre/pacman/pacman-keyring.service | 6 ++++++ libre/pacman/pacman-keyring.timer | 11 +++++++++++ libre/pacman/refresh-pacman-keys | 3 --- 4 files changed, 26 insertions(+), 8 deletions(-) create mode 100644 libre/pacman/pacman-keyring.service create mode 100644 libre/pacman/pacman-keyring.timer delete mode 100644 libre/pacman/refresh-pacman-keys diff --git a/libre/pacman/PKGBUILD b/libre/pacman/PKGBUILD index 4fba510..c4cf748 100644 --- a/libre/pacman/PKGBUILD +++ b/libre/pacman/PKGBUILD @@ -6,10 +6,11 @@ # Contributor: M?rcio Silva # Contributor: Nicol?s Reynolds # Contributor: Luke Shumaker +# Contributor: Daniel Milewski pkgname=pacman pkgver=4.2.1 -pkgrel=2.parabola1 +pkgrel=2.parabola2 pkgdesc="A library-based package manager with dependency support" arch=('i686' 'x86_64') url="http://www.archlinux.org/pacman/" @@ -17,7 +18,7 @@ license=('GPL') groups=('base' 'base-devel') depends=('bash' 'glibc' 'libarchive>=3.1.2' 'curl>=7.39.0' 'gpgme' 'pacman-mirrorlist' 'archlinux-keyring' - 'parabola-keyring' 'ca-certificates-cacert' 'cronie') + 'parabola-keyring' 'ca-certificates-cacert') makedepends=('asciidoc') # roundup patch alters docs checkdepends=('python2' 'fakechroot') provides=("$pkgname-contrib") @@ -29,7 +30,8 @@ source=(https://sources.archlinux.org/other/pacman/$pkgname-$pkgver.tar.gz{,.sig ensure-matching-database-and-package-version.patch $pkgname.conf.{i686,x86_64} makepkg.conf - refresh-$pkgname-keys + $pkgname-keyring.service + $pkgname-keyring.timer makepkg-pkgrel-4.patch) md5sums=('2a596fc8f723e99660c0869a74afcf47' 'SKIP' @@ -37,7 +39,8 @@ md5sums=('2a596fc8f723e99660c0869a74afcf47' '9c1454e48b2216b23f931e04d6dab1ee' '7279d086428df483fd60c33f7c88cf3e' 'ce525a9af50f1d9b824806d2e5a4f0c8' - '093f0779ac55ae781ba028ad74b95f84' + '11a5fac02651041e44d65d66c3538030' + '7fb448e0d2b5b22da5ddc0040378efb0' '0ee98dc38ff80ba127772f5104e18e46') validpgpkeys=('6645B0A8C7005E78DB1D7864F99FFE0FEAE999BD') # Allan McRae @@ -108,5 +111,6 @@ package() { install -Dm644 contrib/PKGBUILD.vim "$pkgdir/usr/share/vim/vimfiles/syntax/PKGBUILD.vim" - install -Dm755 "$srcdir/refresh-pacman-keys" "$pkgdir/etc/cron.weekly/refresh-pacman-keys" + install -Dm644 "$srcdir/pacman-keyring.service" "$pkgdir/usr/lib/systemd/system/pacman-keyring.service" + install -Dm644 "$srcdir/pacman-keyring.timer" "$pkgdir/usr/lib/systemd/system/pacman-keyring.timer" } diff --git a/libre/pacman/pacman-keyring.service b/libre/pacman/pacman-keyring.service new file mode 100644 index 0000000..e090734 --- /dev/null +++ b/libre/pacman/pacman-keyring.service @@ -0,0 +1,6 @@ +[Unit] +Description=Refresh pacman keyring + +[Service] +Type=oneshot +ExecStart=/usr/bin/pacman-key --refresh-keys diff --git a/libre/pacman/pacman-keyring.timer b/libre/pacman/pacman-keyring.timer new file mode 100644 index 0000000..137ef7c --- /dev/null +++ b/libre/pacman/pacman-keyring.timer @@ -0,0 +1,11 @@ +[Unit] +Description=Refresh pacman keyring once a week +Documentation=man:pacman-key + +[Timer] +OnCalendar=weekly +AccuracySec=1h +Persistent=true + +[Install] +WantedBy=multi-user.target diff --git a/libre/pacman/refresh-pacman-keys b/libre/pacman/refresh-pacman-keys deleted file mode 100644 index e96dc34..0000000 --- a/libre/pacman/refresh-pacman-keys +++ /dev/null @@ -1,3 +0,0 @@ -#!/bin/bash - -pacman-key --refresh-keys -- Daniel Milewski GPG key ID: 8D43A4A1 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: This is a digitally signed message part URL: From fauno at endefensadelsl.org Wed Jul 29 16:03:41 2015 From: fauno at endefensadelsl.org (fauno) Date: Wed, 29 Jul 2015 13:03:41 -0300 Subject: [Dev] [PATCH] pacman-4.2.1-2.parabola2: convert cron job to systemd timer In-Reply-To: <1438184503.941.10.camel@riseup.net> References: <1438184503.941.10.camel@riseup.net> Message-ID: <87k2tjrlwi.fsf@endefensadelsl.org> Daniel Milewski writes: > cronie dependency introduced with pacman-4.2.1-2.parabola1 makes it > impossible to use other cron implementations. This week I saw a user on > #parabola which couldn't update his system because cronie conflicts > with cron. Instead of imposing a specific cron implementation I think > it'd be better to use a systemd timer. Timers are already used by other > packages like logrotate and man-db. pacman should depend on "cron" rather than just "cronie"... or it could be an optional dependency (you have to enable the crond for it to work no?) where does the output of the timers go? +1 to the timer and leave cron as optional dependency, i think there's people that won't use timers but keep using cron. -- :D -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From emulatorman at riseup.net Wed Jul 29 17:41:08 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Wed, 29 Jul 2015 14:41:08 -0300 Subject: [Dev] [PATCH] pacman-4.2.1-2.parabola2: convert cron job to systemd timer In-Reply-To: <87k2tjrlwi.fsf@endefensadelsl.org> References: <1438184503.941.10.camel@riseup.net> <87k2tjrlwi.fsf@endefensadelsl.org> Message-ID: <55B91034.4050005@riseup.net> On 07/29/2015 01:03 PM, fauno wrote: > Daniel Milewski writes: > >> cronie dependency introduced with pacman-4.2.1-2.parabola1 makes it >> impossible to use other cron implementations. This week I saw a user on >> #parabola which couldn't update his system because cronie conflicts >> with cron. Instead of imposing a specific cron implementation I think >> it'd be better to use a systemd timer. Timers are already used by other >> packages like logrotate and man-db. > > pacman should depend on "cron" rather than just "cronie"... or it could > be an optional dependency (you have to enable the crond for it to work > no?) > > where does the output of the timers go? > > +1 to the timer and leave cron as optional dependency, i think there's > people that won't use timers but keep using cron. > +1 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From fauno at endefensadelsl.org Wed Jul 29 18:55:23 2015 From: fauno at endefensadelsl.org (fauno) Date: Wed, 29 Jul 2015 15:55:23 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <55B7DF9A.4040300@riseup.net> References: <87pp3p9bv1.fsf@endefensadelsl.org> <55B7DBE5.9080909@riseup.net> <55B7DD8E.40908@t67.eu> <55B7DF9A.4040300@riseup.net> Message-ID: <87bneussis.fsf@endefensadelsl.org> Andr? Silva writes: > Why? i don't think so, the procedure is in dormant state from days or > weeks and it isn't a trivial case for him. > Otherwise, we could send a email to Richard Stallman to know what > happens with them only, maybe they are having problems to receive emails. i just wrote to rms, cc'ed hellekin who was originally on this but he's been mia lately :) -- .o?) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From emulatorman at riseup.net Thu Jul 30 02:20:19 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Wed, 29 Jul 2015 23:20:19 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87bneussis.fsf@endefensadelsl.org> References: <87pp3p9bv1.fsf@endefensadelsl.org> <55B7DBE5.9080909@riseup.net> <55B7DD8E.40908@t67.eu> <55B7DF9A.4040300@riseup.net> <87bneussis.fsf@endefensadelsl.org> Message-ID: <55B989E3.8050408@riseup.net> On 07/29/2015 03:55 PM, fauno wrote: > Andr? Silva writes: > >> Why? i don't think so, the procedure is in dormant state from days or >> weeks and it isn't a trivial case for him. >> Otherwise, we could send a email to Richard Stallman to know what >> happens with them only, maybe they are having problems to receive emails. > > i just wrote to rms, cc'ed hellekin who was originally on this but he's > been mia lately :) > cool! thanks fauno :) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From fauno at endefensadelsl.org Thu Jul 30 04:47:02 2015 From: fauno at endefensadelsl.org (fauno) Date: Thu, 30 Jul 2015 01:47:02 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <55B989E3.8050408@riseup.net> References: <87pp3p9bv1.fsf@endefensadelsl.org> <55B7DBE5.9080909@riseup.net> <55B7DD8E.40908@t67.eu> <55B7DF9A.4040300@riseup.net> <87bneussis.fsf@endefensadelsl.org> <55B989E3.8050408@riseup.net> Message-ID: <877fpiqmk9.fsf@endefensadelsl.org> Andr? Silva writes: > On 07/29/2015 03:55 PM, fauno wrote: >> Andr? Silva writes: >> >>> Why? i don't think so, the procedure is in dormant state from days or >>> weeks and it isn't a trivial case for him. >>> Otherwise, we could send a email to Richard Stallman to know what >>> happens with them only, maybe they are having problems to receive emails. >> >> i just wrote to rms, cc'ed hellekin who was originally on this but he's >> been mia lately :) >> > cool! thanks fauno :) rms just replied that they agree to be the default successor but they'll consult a lawyer to see if there's any special wording they may require to add, such as they being able to use the funds as they want. -- http://wiki.hackcoop.com.ar -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From dikasetyaprayogi at gmail.com Thu Jul 30 09:55:29 2015 From: dikasetyaprayogi at gmail.com (Dika Setya Prayogi) Date: Thu, 30 Jul 2015 16:55:29 +0700 Subject: [Dev] package missing Message-ID: virtualbox not yet available in all parabola repo. From ingegnue at riseup.net Thu Jul 30 13:20:49 2015 From: ingegnue at riseup.net (IngeGNUe) Date: Thu, 30 Jul 2015 09:20:49 -0400 Subject: [Dev] package missing In-Reply-To: References: Message-ID: <55BA24B1.9080901@riseup.net> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Virtualbox switched to the Open Watcom compiler, which is proprietary. This is the reason it is not and will never be found on any libre distro. Try QEMU, which supports KVM. On 07/30/15 05:55, Dika Setya Prayogi wrote: > virtualbox not yet available in all parabola repo. > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJVuiSnAAoJEN9nJ5jSz519NEQP/RtxaMauHJuO/d/XnZCpc75n s4cjy7ZgG/kLya/dAroj0hb6gx6iPnTCAz2EYLodRvinr9n13PBun1DfTNbMhWdi Kx9M+E+ooisE3ldYhuZ9+DZyeWHxIyJ0qb2WcNnTlS+M5SQxZb3rw9SI5YawjeGG V8/pbOfc5BkTe8HrGSuKq/gMeHWM8CQUverxEYbbtfDqediYWAhux07eE8FKUIM9 3SCMqvv6cQ9KmgX0zTrAAhigiAY+OySk6szmKticlVmmhrARcLTG7uvja+Q68FTE aiJpDSVc9IRyLWP3X9ps3fNiICVDjd5CFEdNmxAJtyLKSA1e8fzJ3nxg8wGL2dQR YsDpqX/GZRYn0pkHjvH2IFTqVEfOGxix2gqQ1cyaWSkoKD1SllSPZu2/+j5zXUGT I1Bra6oTyEb8ir2Zgmw05vizk9c/2PIDraaBlDvJFOzu4beoi4Kcz+KqQnSLOifw X3ct73xkTN1kUaOz+g5uZ9rVZW2Jr8Q5DqZOFuu/1RUaTjwROcjCnHzqf5b7MqTF 762RIAg7QsnZgKUo71KnnRls9gtUWdyGYtZvh3Pbr/B9kpaErGHJYqYzVl4KmUjn ukhrQem7CpxTFW2ZWsJPl4OKWrS7TjL/LIMLrlBtK1hHlIqGy+svVgbA++gQ3gmF i0OrkeRYOrX3V1s4N7nF =2KV/ -----END PGP SIGNATURE----- From lukeshu at sbcglobal.net Thu Jul 30 14:38:43 2015 From: lukeshu at sbcglobal.net (Luke Shumaker) Date: Thu, 30 Jul 2015 08:38:43 -0600 Subject: [Dev] DNS changes Message-ID: <87io91iubw.wl-lukeshu@sbcglobal.net> Howdy, I've added DNS records for pur.parabola.nu/pur.parabolagnulinux.org. The aurweb4 software isn't deployed there yet, but it's in the works. While I was adding the DNS records, I noticed that labs.parabolagnulinux.org and www.parabolagnulinux.org were both missing SPF/TXT records, so I added those to match their parabola.nu counterparts. On that note, I've written a script to generate the DNS zone files. I'd like to set up a DNS authoritative server to make maintaining the DNS records easier, instead of using the dns.he.net web interface, but that should probably be overseen by someone who has done it before. The script lives in `parabola.nu:~lukeshu/dns/`, for those with SSH (that should be everyone with git access, but adding users from hackers.git to NSS/PAM isn't yet automated, so recently added developers might not be in there). -- Happy hacking, ~ Luke Shumaker From fauno at endefensadelsl.org Thu Jul 30 14:43:29 2015 From: fauno at endefensadelsl.org (fauno) Date: Thu, 30 Jul 2015 11:43:29 -0300 Subject: [Dev] DNS changes In-Reply-To: <87io91iubw.wl-lukeshu@sbcglobal.net> References: <87io91iubw.wl-lukeshu@sbcglobal.net> Message-ID: <87si85puy6.fsf@endefensadelsl.org> Luke Shumaker writes: > Howdy, > > I've added DNS records for pur.parabola.nu/pur.parabolagnulinux.org. > The aurweb4 software isn't deployed there yet, but it's in the works. > > While I was adding the DNS records, I noticed that > labs.parabolagnulinux.org and www.parabolagnulinux.org were both > missing SPF/TXT records, so I added those to match their parabola.nu > counterparts. > > On that note, I've written a script to generate the DNS zone files. > I'd like to set up a DNS authoritative server to make maintaining the > DNS records easier, instead of using the dns.he.net web interface, but > that should probably be overseen by someone who has done it before. > The script lives in `parabola.nu:~lukeshu/dns/`, for those with SSH > (that should be everyone with git access, but adding users from > hackers.git to NSS/PAM isn't yet automated, so recently added > developers might not be in there). what would you use as authoritative server? i've been using nsd with good results (i can even mirror parabola's records). i have a custom nsd generator here: https://github.com/fauno/owns i'll review your script :) -- P) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From mtjm at mtjm.eu Thu Jul 30 18:07:23 2015 From: mtjm at mtjm.eu (=?utf-8?Q?Micha=C5=82_Mas=C5=82owski?=) Date: Thu, 30 Jul 2015 20:07:23 +0200 Subject: [Dev] DNS changes In-Reply-To: <87si85puy6.fsf@endefensadelsl.org> (fauno@endefensadelsl.org's message of "Thu, 30 Jul 2015 11:43:29 -0300") References: <87io91iubw.wl-lukeshu@sbcglobal.net> <87si85puy6.fsf@endefensadelsl.org> Message-ID: <87bnety0x0.fsf@elros.vpn.mtjm.eu> > what would you use as authoritative server? i've been using nsd with > good results (i can even mirror parabola's records). i have a custom > nsd generator here: https://github.com/fauno/owns I use nsd with a custom generator. I have long-term plans to replace the generator by Ansible tasks generating the zone file from various variables for my hosts. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 818 bytes Desc: not available URL: From g4jc at openmailbox.org Thu Jul 30 21:43:00 2015 From: g4jc at openmailbox.org (Luke) Date: Thu, 30 Jul 2015 17:43:00 -0400 Subject: [Dev] Orphan Pcr package [tahoe-lafs] marked out-of-date In-Reply-To: <20150725090402.429.22343@parabola.nu> References: <20150725090402.429.22343@parabola.nu> Message-ID: <55BA9A64.601@openmailbox.org> Hello, Thank you for your report. This package has been updated in PCR. On 07/25/2015 05:04 AM, Parabola Website Notification wrote: > mittens2001 at tfwno.gf wants to notify you that the following packages may be out-of-date: > > > * tahoe-lafs 1.10.0-1 [pcr] (any): https://parabolagnulinux.org/packages/pcr/any/tahoe-lafs/ > > > The user provided the following additional text: > > new package release > > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev > -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: From g4jc at openmailbox.org Thu Jul 30 22:13:32 2015 From: g4jc at openmailbox.org (Luke) Date: Thu, 30 Jul 2015 18:13:32 -0400 Subject: [Dev] New packaging standards/policy discussion Message-ID: <55BAA18C.6060706@openmailbox.org> Hello Everyone, I have come up with a more secure packaging standard which I am currently using for my PCR packages. This is in relation to bug #747 (https://labs.parabola.nu/issues/747) in which Emulatorman suggested I post the idea here for discussion. Currently the build process is as follows: ----- 0) Create an SSH key with any algorithm, and submit to developer mailing list for approval. 1) Create PKGBUILD 2) Sign stuff using MD5 https://wiki.parabola.nu/Package_maintainer_guide#MD5sum_checking 3) git add PKGBUILD; git commit -m "my pkgbuild is being added"; git push 4) sudo libremakepkg / sudo libremakepkg -n your-i686-chroot 5) librestage pcr (or whichever folder your working in) 6) librerelease (binary gets GPG signed) ------ The new build process I am proposing requires only a few additional steps, and increases the integrity of our PKGBUILDs with GPG and better hashing algorithms. 0) Create an SSH key with a minimum standard of RSA-4096 to ensure the server stays secure, password to protect the key also highly recommended. Then send to mailing list for approval. ssh-keygen -t rsa -b 4096 1) Create PKGBUILD 2) Sign stuff manually using SHA512sum and openssl's whirlpool (see my PKGBUILDs for an example of this fail-safe); and import any GPG signatures from upstream as needed, adding them to validpgpkeys field for GPG verification. 3) Sign the PKGBUILD with GPG: gpg --default-key [YOURKEYID] -b PKGBUILD 4) Enable GPG signing in your gitconfig so that our commits are also signed. I've added this one-liner to the wiki already and fauno is also using it. Then simply: git add -f PKGBUILD PKGBUILD.sig; git commit -m "pushing my signed package with signed commit"; git push (same as before) 4) sudo libremakepkg / sudo libremakepkg -n your-i686-chroot [optionally, I would like the binary GPG signing to be done here since it is closest to the build process see Bug #567] 5) librestage pcr 6) librerelease The reason for these changes are 1) MD5 is weak (www.stopusingmd5now.com) and 2) Anyone could tamper with our PKGBUILDs. This allows for PKGBUILDers to be responsible for their files as well as provides integrity in case of a server-side compromise. Also by using this method on upstream (GPG/SHA512/WHIRPOOL) we know that the source files are exactly as they should be prior to building the binary. Gentoo has been using a similar method for their ebuilds for sometime, this simply brings our distro up to their security-hardened standards. If after discussion, it is agreed that this is a better method - I can edit the wiki and include this new standard. I don't think it should be required for older packages but should be used moving forward. Thanks for your consideration! :) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: From fauno at endefensadelsl.org Thu Jul 30 22:32:54 2015 From: fauno at endefensadelsl.org (fauno) Date: Thu, 30 Jul 2015 19:32:54 -0300 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <55BAA18C.6060706@openmailbox.org> References: <55BAA18C.6060706@openmailbox.org> Message-ID: <87vbd1nund.fsf@endefensadelsl.org> Luke writes: > 3) Sign the PKGBUILD with GPG: > gpg --default-key [YOURKEYID] -b PKGBUILD > > 4) Enable GPG signing in your gitconfig so that our commits are also > signed. I've added this one-liner to the wiki already and fauno is also > using it. > Then simply: git add -f PKGBUILD PKGBUILD.sig; git commit -m "pushing my > signed package with signed commit"; git push (same as before) i don't see why signing the pkgbuild is required when signing the whole commit achieves the same thing and is easily verifiable with: git pull --rebase --verify-signatures i'm ok with the other points -- http://partidopirata.com.ar -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From g4jc at openmailbox.org Thu Jul 30 23:05:51 2015 From: g4jc at openmailbox.org (Luke) Date: Thu, 30 Jul 2015 19:05:51 -0400 Subject: [Dev] New packaging standards/policy discussion Message-ID: <55BAADCF.1000101@openmailbox.org> Hmm... Currently I am unable to reproduce a human readable gpg output that verifies the PKGBUILD was created by the packager when using the git pull method. For me nothing displays: user at localhost/packages/abslibre % git pull --rebase --verify-signatures Current branch master is up to date. user at localhost/packages/abslibre % git --version git version 2.5.0 Whereas a GPG signed PKGBUILD displays this during build: | ==> Verifying source file signatures with gpg... | allmydata-tahoe-1.10.1.tar.bz2 ... Passed | PKGBUILD ... Passed and if you include gpg --verify in the PKGBUILD build() process, it will say verified good signature in addition to that. I also find this useful if I just want to build a single package instead of downloading the entire git. I just download PKGBUILD and PKGBUILD.sig then build from that. On 07/30/2015 06:32 PM, fauno wrote: > Luke writes: >> 3) Sign the PKGBUILD with GPG: >> gpg --default-key [YOURKEYID] -b PKGBUILD >> >> 4) Enable GPG signing in your gitconfig so that our commits are also >> signed. I've added this one-liner to the wiki already and fauno is also >> using it. >> Then simply: git add -f PKGBUILD PKGBUILD.sig; git commit -m "pushing my >> signed package with signed commit"; git push (same as before) > i don't see why signing the pkgbuild is required when signing the whole > commit achieves the same thing and is easily verifiable with: git pull > --rebase --verify-signatures > > i'm ok with the other points > > > > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: From icarious at hacari.org Thu Jul 30 23:13:07 2015 From: icarious at hacari.org (Icarious) Date: Fri, 31 Jul 2015 04:43:07 +0530 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <87vbd1nund.fsf@endefensadelsl.org> References: <55BAA18C.6060706@openmailbox.org> <87vbd1nund.fsf@endefensadelsl.org> Message-ID: <20150731044307.dce926b0d2f4afec0232c332@hacari.org> > i don't see why signing the pkgbuild is required when signing the whole > commit achieves the same thing and is easily verifiable with: git pull > --rebase --verify-signatures I think every time we talk on exclusively basing a design just cause we have git, we must remember that its not only Parabola PKGBUILDs we deal with. Most of our PKGBUILDs are inclusive of Packages from Arch too and abslibre `does not` clone them at all. So the user is left with either 1) use abs, 2) Go to Arch's git web interface and individually download them. This argument has been discussed before and I have repeatedly brought it to everyone's attention that we can't have an inconsistent solution like "use git for Parabola's PKGBUILDs, and use Arch's git interface (which does have PKGBUILDs of non-free packages too) for majority of the packages that come from [core], [extra] and [community]". This is a very dirty way of source code management. So before anyone suggests in "IGNORING" abs completely cause " we have git " please do remember the PKGBUILDs that come from Arch. Unless we fix that part, abs remains the "consistent" method of downloading PKGBUILDs without confusing the user and referring them to the non-free arch git interface, and is henceforth important to sign pkgbuilds too. -- Icarious GPG Public Key : 0x4428BA28AA2ACCD2 GPG Fingerprint : 6C37 E88E DD0B F042 7A15 676E 4428 BA28 AA2A CCD2 www.gnuos.in -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 819 bytes Desc: not available URL: From fauno at endefensadelsl.org Thu Jul 30 23:22:23 2015 From: fauno at endefensadelsl.org (fauno) Date: Thu, 30 Jul 2015 20:22:23 -0300 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <20150731044307.dce926b0d2f4afec0232c332@hacari.org> References: <55BAA18C.6060706@openmailbox.org> <87vbd1nund.fsf@endefensadelsl.org> <20150731044307.dce926b0d2f4afec0232c332@hacari.org> Message-ID: <87si85nscw.fsf@endefensadelsl.org> Icarious writes: >> i don't see why signing the pkgbuild is required when signing the whole >> commit achieves the same thing and is easily verifiable with: git pull >> --rebase --verify-signatures > > I think every time we talk on exclusively basing a design just cause we have git, we must remember that its not only Parabola PKGBUILDs we deal with. Most of our PKGBUILDs are inclusive of Packages from Arch too and abslibre `does not` clone them at all. So the user is left with either 1) use abs, 2) Go to Arch's git web interface and individually download them. > > This argument has been discussed before and I have repeatedly brought it to everyone's attention that we can't have an inconsistent solution like "use git for Parabola's PKGBUILDs, and use Arch's git interface (which does have PKGBUILDs of non-free packages too) for majority of the packages that come from [core], [extra] and [community]". This is a very dirty way of source code management. So before anyone suggests in "IGNORING" abs completely cause " we have git " please do remember the PKGBUILDs that come from Arch. Unless we fix that part, abs remains the "consistent" method of downloading PKGBUILDs without confusing the user and referring them to the non-free arch git interface, and is henceforth important to sign pkgbuilds too. should we sign pkgbuilds from arch then? -- .o?) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From hellekin at gnu.org Thu Jul 30 23:26:05 2015 From: hellekin at gnu.org (hellekin) Date: Thu, 30 Jul 2015 20:26:05 -0300 Subject: [Dev] [donations] follow up on ceata agreement In-Reply-To: <87bneussis.fsf@endefensadelsl.org> References: <87pp3p9bv1.fsf@endefensadelsl.org> <55B7DBE5.9080909@riseup.net> <55B7DD8E.40908@t67.eu> <55B7DF9A.4040300@riseup.net> <87bneussis.fsf@endefensadelsl.org> Message-ID: <55BAB28D.7040006@gnu.org> On 07/29/2015 03:55 PM, fauno wrote: > > i just wrote to rms, cc'ed hellekin who was originally on this but he's > been mia lately :) > *** I've been traveling, and still didn't receive an answer, so I guess that writing to rms was good :) Greetings from the old world, == hk From icarious at hacari.org Thu Jul 30 23:28:13 2015 From: icarious at hacari.org (Icarious) Date: Fri, 31 Jul 2015 04:58:13 +0530 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <87si85nscw.fsf@endefensadelsl.org> References: <55BAA18C.6060706@openmailbox.org> <87vbd1nund.fsf@endefensadelsl.org> <20150731044307.dce926b0d2f4afec0232c332@hacari.org> <87si85nscw.fsf@endefensadelsl.org> Message-ID: <20150731045813.743a27c11ccd76cf4b762bb4@hacari.org> > > should we sign pkgbuilds from arch then? > > -- > .o?) Ideally we should. But given that its not possible at the moment, the least we could do is find a balance between "consistent" source code management and security. So as signing git commits "cannot" serve abs users, I think its best to use "gpg --verify PKGBUILD.sig PKGBUILD" instead of encouraging to use two different source code management methods by forcing git "for security". -- Icarious GPG Public Key : 0x4428BA28AA2ACCD2 GPG Fingerprint : 6C37 E88E DD0B F042 7A15 676E 4428 BA28 AA2A CCD2 www.gnuos.in -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 819 bytes Desc: not available URL: From fauno at endefensadelsl.org Thu Jul 30 23:35:56 2015 From: fauno at endefensadelsl.org (fauno) Date: Thu, 30 Jul 2015 20:35:56 -0300 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <20150731045813.743a27c11ccd76cf4b762bb4@hacari.org> References: <55BAA18C.6060706@openmailbox.org> <87vbd1nund.fsf@endefensadelsl.org> <20150731044307.dce926b0d2f4afec0232c332@hacari.org> <87si85nscw.fsf@endefensadelsl.org> <20150731045813.743a27c11ccd76cf4b762bb4@hacari.org> Message-ID: <87pp39nrqb.fsf@endefensadelsl.org> Icarious writes: >> >> should we sign pkgbuilds from arch then? >> >> -- >> .o?) > Ideally we should. But given that its not possible at the moment, the >least we could do is find a balance between "consistent" source code >management and security. So as signing git commits "cannot" serve abs >users, I think its best to use "gpg --verify PKGBUILD.sig PKGBUILD" >instead of encouraging to use two different source code management >methods by forcing git "for security". iirc librerelease signs and uploads pkgbuilds (and other local files) to repo, what's the current use on that? -- P) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From g4jc at openmailbox.org Thu Jul 30 23:43:24 2015 From: g4jc at openmailbox.org (Luke) Date: Thu, 30 Jul 2015 19:43:24 -0400 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <87pp39nrqb.fsf@endefensadelsl.org> References: <55BAA18C.6060706@openmailbox.org> <87vbd1nund.fsf@endefensadelsl.org> <20150731044307.dce926b0d2f4afec0232c332@hacari.org> <87si85nscw.fsf@endefensadelsl.org> <20150731045813.743a27c11ccd76cf4b762bb4@hacari.org> <87pp39nrqb.fsf@endefensadelsl.org> Message-ID: <55BAB69C.5040005@openmailbox.org> On 07/30/2015 07:35 PM, fauno wrote: > Icarious writes: > >>> should we sign pkgbuilds from arch then? >>> >>> -- >>> .o?) >> Ideally we should. But given that its not possible at the moment, the >> least we could do is find a balance between "consistent" source code >> management and security. So as signing git commits "cannot" serve abs >> users, I think its best to use "gpg --verify PKGBUILD.sig PKGBUILD" >> instead of encouraging to use two different source code management >> methods by forcing git "for security". > iirc librerelease signs and uploads pkgbuilds (and other local files) to > repo, what's the current use on that? > > > I think that librerelease only signs the compiled binaries. I've used it several times now and it never signed the PKGBUILDs. If it is intended to do that it may be a non-working or undocumented feature... -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: From dikasetyaprayogi at gmail.com Fri Jul 31 11:27:34 2015 From: dikasetyaprayogi at gmail.com (Dika Setya Prayogi) Date: Fri, 31 Jul 2015 18:27:34 +0700 Subject: [Dev] package missing In-Reply-To: <55BA24B1.9080901@riseup.net> References: <55BA24B1.9080901@riseup.net> Message-ID: Thanks for the explanation. I must be more careful examining something then.Sorry for me being clumsy. 2015-07-30 20.20 GMT+07.00, IngeGNUe : > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Virtualbox switched to the Open Watcom compiler, which is proprietary. > This is the reason it is not and will never be found on any libre > distro. Try QEMU, which supports KVM. > > On 07/30/15 05:55, Dika Setya Prayogi wrote: >> virtualbox not yet available in all parabola repo. >> _______________________________________________ >> Dev mailing list >> Dev at lists.parabola.nu >> https://lists.parabola.nu/mailman/listinfo/dev > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQIcBAEBCAAGBQJVuiSnAAoJEN9nJ5jSz519NEQP/RtxaMauHJuO/d/XnZCpc75n > s4cjy7ZgG/kLya/dAroj0hb6gx6iPnTCAz2EYLodRvinr9n13PBun1DfTNbMhWdi > Kx9M+E+ooisE3ldYhuZ9+DZyeWHxIyJ0qb2WcNnTlS+M5SQxZb3rw9SI5YawjeGG > V8/pbOfc5BkTe8HrGSuKq/gMeHWM8CQUverxEYbbtfDqediYWAhux07eE8FKUIM9 > 3SCMqvv6cQ9KmgX0zTrAAhigiAY+OySk6szmKticlVmmhrARcLTG7uvja+Q68FTE > aiJpDSVc9IRyLWP3X9ps3fNiICVDjd5CFEdNmxAJtyLKSA1e8fzJ3nxg8wGL2dQR > YsDpqX/GZRYn0pkHjvH2IFTqVEfOGxix2gqQ1cyaWSkoKD1SllSPZu2/+j5zXUGT > I1Bra6oTyEb8ir2Zgmw05vizk9c/2PIDraaBlDvJFOzu4beoi4Kcz+KqQnSLOifw > X3ct73xkTN1kUaOz+g5uZ9rVZW2Jr8Q5DqZOFuu/1RUaTjwROcjCnHzqf5b7MqTF > 762RIAg7QsnZgKUo71KnnRls9gtUWdyGYtZvh3Pbr/B9kpaErGHJYqYzVl4KmUjn > ukhrQem7CpxTFW2ZWsJPl4OKWrS7TjL/LIMLrlBtK1hHlIqGy+svVgbA++gQ3gmF > i0OrkeRYOrX3V1s4N7nF > =2KV/ > -----END PGP SIGNATURE----- > > > From fturco at fastmail.fm Fri Jul 31 11:50:23 2015 From: fturco at fastmail.fm (Francesco Turco) Date: Fri, 31 Jul 2015 13:50:23 +0200 Subject: [Dev] package missing In-Reply-To: <55BA24B1.9080901@riseup.net> References: <55BA24B1.9080901@riseup.net> Message-ID: <1438343423.2673314.338116609.52D5F694@webmail.messagingengine.com> On Thu, Jul 30, 2015, at 15:20, IngeGNUe wrote: > Virtualbox switched to the Open Watcom compiler, which is proprietary. > This is the reason it is not and will never be found on any libre > distro. Try QEMU, which supports KVM. I suppose the other reason is that the VirtualBox extension pack is proprietary. From isacdaavid at isacdaavid.info Fri Jul 31 15:08:08 2015 From: isacdaavid at isacdaavid.info (Isaac David) Date: Fri, 31 Jul 2015 10:08:08 -0500 Subject: [Dev] package missing In-Reply-To: References: <55BA24B1.9080901@riseup.net> Message-ID: <1438355288.995.0@plebeian.isacdaavid.info> You can always check the package blacklist[1]. It regulates what packages don't get pulled from Arch, whether Parabola offers a patched version or replacement or nothing, and explains the motive for blacklisting. The your-freedom package is based on it. [1]: https://projects.parabola.nu/blacklist.git/tree/blacklist.txt Le ven. 31 juil. 2015 ? 6:27, Dika Setya Prayogi a ?crit : > Thanks for the explanation. I must be more careful examining something > then.Sorry for me being clumsy. > > 2015-07-30 20.20 GMT+07.00, IngeGNUe : >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA256 >> >> Virtualbox switched to the Open Watcom compiler, which is >> proprietary. >> This is the reason it is not and will never be found on any libre >> distro. Try QEMU, which supports KVM. >> >> On 07/30/15 05:55, Dika Setya Prayogi wrote: >>> virtualbox not yet available in all parabola repo. >>> _______________________________________________ >>> Dev mailing list >>> Dev at lists.parabola.nu >>> https://lists.parabola.nu/mailman/listinfo/dev >> >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v2 >> >> iQIcBAEBCAAGBQJVuiSnAAoJEN9nJ5jSz519NEQP/RtxaMauHJuO/d/XnZCpc75n >> s4cjy7ZgG/kLya/dAroj0hb6gx6iPnTCAz2EYLodRvinr9n13PBun1DfTNbMhWdi >> Kx9M+E+ooisE3ldYhuZ9+DZyeWHxIyJ0qb2WcNnTlS+M5SQxZb3rw9SI5YawjeGG >> V8/pbOfc5BkTe8HrGSuKq/gMeHWM8CQUverxEYbbtfDqediYWAhux07eE8FKUIM9 >> 3SCMqvv6cQ9KmgX0zTrAAhigiAY+OySk6szmKticlVmmhrARcLTG7uvja+Q68FTE >> aiJpDSVc9IRyLWP3X9ps3fNiICVDjd5CFEdNmxAJtyLKSA1e8fzJ3nxg8wGL2dQR >> YsDpqX/GZRYn0pkHjvH2IFTqVEfOGxix2gqQ1cyaWSkoKD1SllSPZu2/+j5zXUGT >> I1Bra6oTyEb8ir2Zgmw05vizk9c/2PIDraaBlDvJFOzu4beoi4Kcz+KqQnSLOifw >> X3ct73xkTN1kUaOz+g5uZ9rVZW2Jr8Q5DqZOFuu/1RUaTjwROcjCnHzqf5b7MqTF >> 762RIAg7QsnZgKUo71KnnRls9gtUWdyGYtZvh3Pbr/B9kpaErGHJYqYzVl4KmUjn >> ukhrQem7CpxTFW2ZWsJPl4OKWrS7TjL/LIMLrlBtK1hHlIqGy+svVgbA++gQ3gmF >> i0OrkeRYOrX3V1s4N7nF >> =2KV/ >> -----END PGP SIGNATURE----- >> >> >> > _______________________________________________ > Dev mailing list > Dev at lists.parabola.nu > https://lists.parabola.nu/mailman/listinfo/dev -------------- next part -------------- An HTML attachment was scrubbed... URL: From fauno at endefensadelsl.org Fri Jul 31 15:22:41 2015 From: fauno at endefensadelsl.org (fauno) Date: Fri, 31 Jul 2015 12:22:41 -0300 Subject: [Dev] package missing In-Reply-To: <1438343423.2673314.338116609.52D5F694@webmail.messagingengine.com> References: <55BA24B1.9080901@riseup.net> <1438343423.2673314.338116609.52D5F694@webmail.messagingengine.com> Message-ID: <87d1z8nygu.fsf@endefensadelsl.org> Francesco Turco writes: > On Thu, Jul 30, 2015, at 15:20, IngeGNUe wrote: >> Virtualbox switched to the Open Watcom compiler, which is proprietary. >> This is the reason it is not and will never be found on any libre >> distro. Try QEMU, which supports KVM. > > I suppose the other reason is that the VirtualBox extension pack is > proprietary. we had vbox without the extensions up to when it became impossible to build from source. maybe we could have a qemu gui that provides virtualbox, so people looking for it at least gets something from pacman? -- -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 584 bytes Desc: not available URL: From emulatorman at riseup.net Fri Jul 31 16:13:19 2015 From: emulatorman at riseup.net (=?windows-1252?Q?Andr=E9_Silva?=) Date: Fri, 31 Jul 2015 13:13:19 -0300 Subject: [Dev] package missing In-Reply-To: <87d1z8nygu.fsf@endefensadelsl.org> References: <55BA24B1.9080901@riseup.net> <1438343423.2673314.338116609.52D5F694@webmail.messagingengine.com> <87d1z8nygu.fsf@endefensadelsl.org> Message-ID: <55BB9E9F.8000602@riseup.net> On 07/31/2015 12:22 PM, fauno wrote: > Francesco Turco writes: > >> On Thu, Jul 30, 2015, at 15:20, IngeGNUe wrote: >>> Virtualbox switched to the Open Watcom compiler, which is proprietary. >>> This is the reason it is not and will never be found on any libre >>> distro. Try QEMU, which supports KVM. >> >> I suppose the other reason is that the VirtualBox extension pack is >> proprietary. > > we had vbox without the extensions up to when it became impossible to > build from source. > > maybe we could have a qemu gui that provides virtualbox, so people > looking for it at least gets something from pacman? I think we could add qtemu [0] and qemu-launcher [1] to the blacklist for technical reasons to add virtualbox in their provides array. [0]:https://www.parabola.nu/packages/community/i686/qtemu/ [1]:https://www.parabola.nu/packages/community/any/qemu-launcher/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From mtjm at mtjm.eu Fri Jul 31 17:19:07 2015 From: mtjm at mtjm.eu (=?utf-8?Q?Micha=C5=82_Mas=C5=82owski?=) Date: Fri, 31 Jul 2015 19:19:07 +0200 Subject: [Dev] package missing In-Reply-To: <87d1z8nygu.fsf@endefensadelsl.org> (fauno@endefensadelsl.org's message of "Fri, 31 Jul 2015 12:22:41 -0300") References: <55BA24B1.9080901@riseup.net> <1438343423.2673314.338116609.52D5F694@webmail.messagingengine.com> <87d1z8nygu.fsf@endefensadelsl.org> Message-ID: <87bnes5jp0.fsf@elros.vpn.mtjm.eu> > maybe we could have a qemu gui that provides virtualbox, so people > looking for it at least gets something from pacman? Don't unless tools using VirtualBox programs work with it too. E.g. if you can use unmodified Vagrant with its boxes with that VirtualBox Parabola provider. No one has checked what's needed to use SeaBIOS with VirtualBox? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 818 bytes Desc: not available URL: From mtjm at mtjm.eu Fri Jul 31 17:24:04 2015 From: mtjm at mtjm.eu (=?utf-8?Q?Micha=C5=82_Mas=C5=82owski?=) Date: Fri, 31 Jul 2015 19:24:04 +0200 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <55BAA18C.6060706@openmailbox.org> (Luke's message of "Thu, 30 Jul 2015 18:13:32 -0400") References: <55BAA18C.6060706@openmailbox.org> Message-ID: <877fpg5jgr.fsf@elros.vpn.mtjm.eu> > 2) Sign stuff manually using SHA512sum and openssl's whirlpool (see my > PKGBUILDs for an example of this fail-safe); and import any GPG > signatures from upstream as needed, adding them to validpgpkeys field > for GPG verification. Fix the tools so no manual work is needed here. > 3) Sign the PKGBUILD with GPG: > gpg --default-key [YOURKEYID] -b PKGBUILD Another manual step; also puts non-source files in the git repo. No code review is in this procedure. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 818 bytes Desc: not available URL: From g4jc at openmailbox.org Fri Jul 31 22:17:43 2015 From: g4jc at openmailbox.org (Luke) Date: Fri, 31 Jul 2015 18:17:43 -0400 Subject: [Dev] New packaging standards/policy discussion In-Reply-To: <877fpg5jgr.fsf@elros.vpn.mtjm.eu> References: <55BAA18C.6060706@openmailbox.org> <877fpg5jgr.fsf@elros.vpn.mtjm.eu> Message-ID: <55BBF407.2020205@openmailbox.org> On 07/31/2015 01:24 PM, Micha? Mas?owski wrote: >> 2) Sign stuff manually using SHA512sum and openssl's whirlpool (see my >> PKGBUILDs for an example of this fail-safe); and import any GPG >> signatures from upstream as needed, adding them to validpgpkeys field >> for GPG verification. > Fix the tools so no manual work is needed here. Upstream bug/patch submitted: https://bugs.archlinux.org/task/45859 It will be as easy as including sha512sum() whirlpoolsum() in the PKGBUILD. > >> 3) Sign the PKGBUILD with GPG: >> gpg --default-key [YOURKEYID] -b PKGBUILD > Another manual step; also puts non-source files in the git repo. > > No code review is in this procedure. I don't see any way around this yet. You could do this in batch if desired. parallel gpg --default-key [yourkey] -b ::: PKGBUILD If people are using abs it pulls PKGBUILD and related source files, adding a .sig allows abs users to validate the PKGBUILD was created by the claimed PKBUILD Maintainer. I consider this better than unsigned package builds since it wouldn't take much to alter a PKGBUILD and re-push. Then someone would need to go back and trace git commits to figure out who. Even then unless the git is signed it'll be very hard to determine how that happened since everyone is using the same git user, and it would be trivially easy to spoof username in gitconfig should an attacker actually gain access. Regarding the code review, thankfully gpg is pretty straight forward since we can use --verify. The only unreviewed portion is my two hash skip functions since it is not possible to hash-check a file you will be altering. (in this case the GPG signature which is created /after/ the PKGBUILD) -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: