Packages

Description:

• The Arch version of Tracker from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required. OpenRC init script replacement isn’t possible here because Tracker is using a systemd unit file adapted for users instead of system users.

Additional info:

• tracker 1.12.0-2.hyperbola1

$ pacman -Si tracker
Repository      : extra
Name            : tracker
Version         : 1.12.0-2.hyperbola1
Description     : Desktop-neutral user information store, search tool and indexer
Architecture    : x86_64
URL             : https://wiki.gnome.org/Projects/Tracker
Licenses        : GPL
Groups          : gnome
Provides        : None
Depends On      : libtracker-sparql=1.12.0-2.hyperbola1  libsecret  upower  libexif  exempi  poppler-glib  libgsf  enca  libiptcdata  libcue  libosinfo  libnm-glib
                  gtk3  libgxps  taglib  flac  libvorbis  totem-plparser  gst-plugins-base-libs  giflib  libgrss  gvfs
Optional Deps   : nautilus: edit files' tracker tags
Conflicts With  : None
Replaces        : None
Download Size   : 1142.60 KiB
Installed Size  : 8459.00 KiB
Packager        : Scott Adams <haricot@hyperbola.info>
Build Date      : Thu 08 Jun 2017 03:57:24 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/user/tracker-extract.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-miner-apps.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-miner-fs.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-miner-rss.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-store.service is owned by tracker 1.12.0-2.hyperbola1
/usr/lib/systemd/user/tracker-writeback.service is owned by tracker 1.12.0-2.hyperbola1

Steps to reproduce:

• Install package.

Description:

• The Arch version of Vino from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required. OpenRC init script replacement isn’t possible here because Vino is using a systemd unit file adapted for users instead of system users.

Additional info:

• vino 3.22.0-1.hyperbola1

$ pacman -Si vino
Repository      : extra
Name            : vino
Version         : 3.22.0-1.hyperbola1
Description     : A VNC server for the GNOME desktop
Architecture    : x86_64
URL             : https://wiki.gnome.org/Projects/Vino
Licenses        : GPL
Groups          : gnome
Provides        : None
Depends On      : libnotify  libxtst  libsm  telepathy-glib  gtk3  libsecret  avahi  gnutls
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 368.24 KiB
Installed Size  : 2723.00 KiB
Packager        : Scott Adams <haricot@hyperbola.info>
Build Date      : Fri 09 Jun 2017 02:01:33 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/user/vino-server.service is owned by vino 3.22.0-1.hyperbola1

Steps to reproduce:

• Install package.

Description:

• Enable “hidepid” support in /proc filesystem

Additional info:

• mkinitcpio 23-1.hyperbola2

/usr/lib/initcpio/init_functions
----
 mount_setup() {
     mount -t proc proc /proc -o nosuid,noexec,nodev
+    mount /proc -o remount,gid=26,hidepid=2
     mount -t sysfs sys /sys -o nosuid,noexec,nodev
     mount -t devtmpfs dev /dev -o mode=0755,nosuid
     mount -t tmpfs run /run -o nosuid,nodev,mode=0755
     mkdir -m755 /run/initramfs

$ pacman -Si mkinitcpio
Repository      : core
Name            : mkinitcpio
Version         : 23-1.hyperbola2
Description     : Modular initramfs image creation utility, with eudev support
Architecture    : any
URL             : https://projects.archlinux.org/mkinitcpio.git/
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : awk  mkinitcpio-busybox>=1.19.4-2  kmod  util-linux>=2.23  libarchive  coreutils  bash  findutils  grep  filesystem>=2011.10-1  gzip  eudev
Optional Deps   : xz: Use lzma or xz compression for the initramfs image
                  bzip2: Use bzip2 compression for the initramfs image
                  lzop: Use lzo compression for the initramfs image
                  lz4: Use lz4 compression for the initramfs image
                  mkinitcpio-nfs-utils: Support for root filesystem on NFS
Conflicts With  : None
Replaces        : None
Download Size   : 38.60 KiB
Installed Size  : 194.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Tue 27 Feb 2018 12:00:17 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Steps to reproduce:

• On booting.

Description:

• Change the “/proc” filesystem option, reverting FS#1038 .

Additional info:

• openrc 0.28-17

/usr/lib/rc/sh/init.sh
----
-                mount -n -t proc -o noexec,nosuid,nodev,hidepid=2,gid=proc proc /proc
+                mount -n -t proc -o noexec,nosuid,nodev,gid=26,hidepid=2 proc /proc

$ pacman -Si openrc
Repository      : core
Name            : openrc
Version         : 0.28-17
Description     : A dependency based init system that works with the system provided init program
Architecture    : x86_64
URL             : https://wiki.gentoo.org/wiki/Project:OpenRC
Licenses        : BSD2
Groups          : None
Provides        : None
Depends On      : psmisc  pam
Optional Deps   : netifrc: network interface management scripts
                  networkmanager: network connection manager and user applications
Conflicts With  : None
Replaces        : None
Download Size   : 194.10 KiB
Installed Size  : 1727.00 KiB
Packager        : André Silva <emulatorman@hyperbola.info>
Build Date      : Thu 05 Jul 2018 01:37:37 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Steps to reproduce:

• none.

Description:

• The Arch version of system-config-printer from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : system-config-printer
Version         : 1.5.9-2
Description     : A CUPS printer configuration tool and status applet
Architecture    : x86_64
URL             : https://github.com/zdohnal/system-config-printer
Licenses        : GPL
Groups          : None
Provides        : None
Depends On      : python-pycups  python-dbus  python-pycurl  libnotify  python-requests  python-gobject  gtk3  python-cairo
Optional Deps   : python-pysmbc: SMB browser support
                  python-packagekit: to install drivers with PackageKit
                  cups-pk-helper: PolicyKit helper to configure cups with fine-grained privileges
Conflicts With  : None
Replaces        : None
Download Size   : 908.59 KiB
Installed Size  : 7159.00 KiB
Packager        : Andreas Radke <andyrtr@archlinux.org>
Build Date      : Fri 27 Jan 2017 04:18:24 AM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/configure-printer@.service is owned by system-config-printer 1.5.9-2

Steps to reproduce:

• Install package.

Description:

• The Arch version of pkgfile from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : pkgfile
Version         : 17-1
Description     : a pacman .files metadata explorer
Architecture    : x86_64
URL             : http://github.com/falconindy/pkgfile
Licenses        : MIT
Groups          : None
Provides        : None
Depends On      : libarchive  curl  pcre  pacman
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 23.16 KiB
Installed Size  : 47.00 KiB
Packager        : Dave Reisner <dreisner@archlinux.org>
Build Date      : Tue 18 Apr 2017 05:30:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/pkgfile-update.service is owned by pkgfile 17-1
/usr/lib/systemd/system/pkgfile-update.timer is owned by pkgfile 17-1

Steps to reproduce:

• Install package.

Firetools sandbox list shows nothing whenever I use icedove-hardened or iceweasel-uxp-hardened. or vlc, or anything at this point.

Firejail still works, but the sandbox list on the applet, shows nothing.

I don’t really know why though. may need to updated.

dunno. I can wait on this one if need be, but it is kind of annoying.

Description:

Hi guys, there have been minor changes in firejail, we have also published iceweasel-uxp. Given this case, here I publish the relevant updates of the files.

Description:

Hi guys, there have been minor changes in firetools GUI, we have also published iceweasel-uxp. Given this case, here I publish the relevant updates of the files.

Per toxcore official blog, there is a security issue that affects all versions prior to 0.2.3. Users IP will leak if they have public ToxID.
https://blog.tox.chat/2018/04/security-vulnerability-and-new-toxcore-release/

Description:

• The Arch version of pkgfile from the snapshot used by Hyperbola comes with systemd support. Since Hyperbola follows the Init Freedom Campaign , systemd unit files removal is required or create a cron job (scheduled task) to replace it.

Additional info:
* package version(s)
* config and/or log files etc.

Repository      : extra
Name            : pkgfile
Version         : 17-1
Description     : a pacman .files metadata explorer
Architecture    : x86_64
URL             : http://github.com/falconindy/pkgfile
Licenses        : MIT
Groups          : None
Provides        : None
Depends On      : libarchive  curl  pcre  pacman
Optional Deps   : None
Conflicts With  : None
Replaces        : None
Download Size   : 23.16 KiB
Installed Size  : 47.00 KiB
Packager        : Dave Reisner <dreisner@archlinux.org>
Build Date      : Tue 18 Apr 2017 05:30:59 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

/usr/lib/systemd/system/pkgfile-update.service is owned by pkgfile 17-1
/usr/lib/systemd/system/pkgfile-update.timer is owned by pkgfile 17-1

Steps to reproduce:

• Install package.

Description:

Hi guys. From → https://issues.hyperbola.info/index.php?do=details&task_id=1121

Now is necessary rebuild qtox and toxic.

Additional info:

toxic:

ldd $(command -v toxic) | grep 'not found'
	libtoxdns.so.1 => not found
	libtoxencryptsave.so.1 => not found
	libtoxav.so.1 => not found
	libtoxcore.so.1 => not found
	libtoxcrypto.so.1 => not found
	libtoxnetwork.so.1 => not found
	libtoxdht.so.1 => not found
	libtoxnetcrypto.so.1 => not found
	libtoxfriends.so.1 => not found
	libtoxmessenger.so.1 => not found
	libtoxgroup.so.1 => not found

qtox:

ldd $(command -v qtox) | grep 'not found'
	libtoxcore.so.1 => not found
	libtoxav.so.1 => not found
	libtoxencryptsave.so.1 => not found

Description:

Hi dear developers of Hyperbola. I work in the field of web development. I use a lot of javascript and nodejs to compile.
Could they do the nodejs update?. I also mention this because Hyperbola works with LTS packages.

Additional info:

* package version(s)

$ sudo pacman -Si nodejs
Repositorio               : community
Nombre                    : nodejs
Versión                   : 7.10.0-1
Descripción               : Evented I/O for V8 javascript
Arquitectura              : x86_64
URL                       : http://nodejs.org/
Licencias                 : MIT
Grupos                    : Nada
Provee                    : Nada
Depende de                : openssl-1.0  zlib  icu  libuv  http-parser  c-ares
Dependencias opcionales   : npm: nodejs package manager
En conflicto con          : Nada
Remplaza a                : Nada
Tamaño de la descarga     : 4,55 MiB
Tamaño de la instalación  : 18,49 MiB
Encargado                 : Felix Yan <felixonmars@archlinux.org>
Fecha de creación         : mié 03 may 2017 09:50:26 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

$ sudo pacman -Si npm
Repositorio               : community
Nombre                    : npm
Versión                   : 4.5.0-1
Descripción               : A package manager for javascript
Arquitectura              : any
URL                       : https://www.npmjs.com/
Licencias                 : custom:Artistic
Grupos                    : Nada
Provee                    : nodejs-node-gyp
Depende de                : nodejs  semver
Dependencias opcionales   : python2: for node-gyp
En conflicto con          : Nada
Remplaza a                : Nada
Tamaño de la descarga     : 2,72 MiB
Tamaño de la instalación  : 13,98 MiB
Encargado                 : Felix Yan <felixonmars@archlinux.org>
Fecha de creación         : mié 12 abr 2017 22:08:06 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

- NodeJS LTS (includes npm 5.6.0):

* https://nodejs.org/dist/v8.11.3/node-v8.11.3.tar.gz

* https://nodejs.org/dist/v8.11.3/SHASUMS256.txt.asc

Some errors that I suffer when compiling:
- https://stackoverflow.com/questions/46476741/nodejs-util-promisify-is-not-a-function

Since Hyperbola follows the Init Freedom Campaign, systemd unit files removal is required or add OpenRC init scripts to replace it.

Additional info:
* package version(s)

extra/gpsd 3.16-3 [installed]

   GPS daemon and library to support USB/serial GPS devices

* config and/or log files etc.

Additional info:

Steps to reproduce: install it

Description:

Hiawatha contains only systemd files.

It shall be removed and openrc shall be provided

Description:

• needs OpenRC init script and contains systemd file

Additional info:

• umurmur 0.2.16_a-6

umurmur /usr/lib/systemd/system/umurmur.service

Steps to reproduce:

• none

Description:

• OpenRC needs a minor fix (remount proc)

Additional info:

• openrc 0.28-19

openrc /usr/lib/rc/sh/init.sh

—

-        mount -n -t proc -o noexec,nosuid,nodev,gid=proc,hidepid=2 proc /proc
+        mount -n -t proc -o noexec,nosuid,nodev proc /proc
+        mount -n /proc -o remount,gid=26,hidepid=2

Steps to reproduce:

• Boot OpenRC in chroot with unshare

Description:

Nginx web server shall be running with or without the external network, and without NetworkManager.

rc-service nginx start

Additional info:

$ pacman -Si nginx
Repositorio               : extra
Nombre                    : nginx
Versión                   : 1.12.2-2.hyperbola4
Descripción               : Lightweight HTTP server and IMAP/POP3 proxy server, with logger recommendation and OpenRC support
Arquitectura              : x86_64
URL                       : https://nginx.org
Licencias                 : custom
Grupos                    : Nada
Provee                    : Nada
Depende de                : pcre  zlib  openssl  geoip
Dependencias opcionales   : logger: message logging support
En conflicto con          : nginx-mainline
Remplaza a                : nginx-mainline
Tamaño de la descarga     : 478,89 KiB
Tamaño de la instalación  : 1598,00 KiB
Encargado                 : André Silva <emulatorman@hyperbola.info>
Fecha de creación         : lun 11 jun 2018 18:20:12 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

$ pacman -Ql nginx
nginx /etc/
nginx /etc/conf.d/
nginx /etc/conf.d/nginx
nginx /etc/init.d/
nginx /etc/init.d/nginx
nginx /etc/logrotate.d/
nginx /etc/logrotate.d/nginx
nginx /etc/nginx/
nginx /etc/nginx/fastcgi.conf
nginx /etc/nginx/fastcgi_params
nginx /etc/nginx/koi-utf
nginx /etc/nginx/koi-win
nginx /etc/nginx/mime.types
nginx /etc/nginx/nginx.conf
nginx /etc/nginx/scgi_params
nginx /etc/nginx/uwsgi_params
nginx /etc/nginx/win-utf
nginx /usr/
nginx /usr/bin/
nginx /usr/bin/nginx
nginx /usr/share/
nginx /usr/share/licenses/
nginx /usr/share/licenses/nginx/
nginx /usr/share/licenses/nginx/LICENSE
nginx /usr/share/man/
nginx /usr/share/man/man8/
nginx /usr/share/man/man8/nginx.8.gz
nginx /usr/share/nginx/
nginx /usr/share/nginx/html/
nginx /usr/share/nginx/html/50x.html
nginx /usr/share/nginx/html/index.html
nginx /usr/share/vim/
nginx /usr/share/vim/vimfiles/
nginx /usr/share/vim/vimfiles/ftdetect/
nginx /usr/share/vim/vimfiles/ftdetect/nginx.vim
nginx /usr/share/vim/vimfiles/indent/
nginx /usr/share/vim/vimfiles/indent/nginx.vim
nginx /usr/share/vim/vimfiles/syntax/
nginx /usr/share/vim/vimfiles/syntax/nginx.vim
nginx /var/
nginx /var/lib/
nginx /var/lib/nginx/
nginx /var/lib/nginx/proxy/
nginx /var/log/
nginx /var/log/nginx/

Steps to reproduce:

1. Disconnect network. Start computer.

2. Try to start nginx with above command.

Description:

• The filesystem package contains systemd files (/etc/profile.d/locale.sh and /usr/share/factory/) and references in /usr/share/man/man7/hyperbola.7.gz

Additional info:
* package version(s)
* config and/or log files etc.

• Proposal patch to fix the Hyperbola basic configuration man page:

diff --git hyperbola.7.txt hyperbola.7.txt.new
index 842e532..927cf6a 100644
--- hyperbola.7.txt
+++ hyperbola.7.txt.new
@@ -24,14 +24,12 @@ To view available services, use 'rc-status --all'.
 
 HOSTNAME[[H]]
 -------------
-The hostname of the machine can be set using 'hostnamectl set-hostname <hostname>'.
+The hostname of the machine can be set using 'hostname <hostname>' or 'sysctl -w kernel.hostname=<hostname>'.
 It will then be written to /etc/hostname.
 
 LOCALIZATION[[L]]
 -----------------
 Various locales may be enabled in /etc/locale.gen and are generated by 'locale-gen'.
-The system-wide locale to be used can be configured in /etc/locale.conf.
-These settings can be overridden on a per-user basis by keeping a user-specific locale.conf in $HOME/.config/locale.conf.
 The user-specific file will take precedence if it exists.
 
 VIRTUAL CONSOLE[[V]]
@@ -72,15 +70,16 @@ Syslinux is configured in /boot/syslinux/syslinux.cfg.
 MODULES[[M]]
 ------------
 Most modules should be loaded on-demand.
-Modules to be unconditionally loaded at boot can be specified in /etc/modules-load.d/,
+Modules to be unconditionally loaded at boot can be specified in /etc/conf.d/modules,
 and modules to be blacklisted from automatically loading can be configured in /etc/modprobe.d/.
 
 SEE ALSO
 --------
 
-*hostname*(5), *locale.conf*(5), *timezone*(3), *hwclock*(8),
-*fstab*(5), *crypttab*(5), *mkinitcpio*(8), *pacman*(8), *pacman.conf*(5),
-*grub-mkconfig*(8), *syslinux*(1), *modules-load.d*(5), *modprobe.d*(5)
+*hostname*(5), *timezone*(3), *hwclock*(8),
+*fstab*(5), *cryptsetup*(8), *mkinitcpio*(8), *pacman*(8), *pacman.conf*(5),
+*grub-mkconfig*(8), *syslinux*(1), *modprobe.d*(5),
+*openrc*(8), *rc-service*(8), *rc-status*(8), *rc-update*(8)
 
 AUTHORS
 -------

Steps to reproduce:

* Run:

~ man hyperbola

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Description:

Common use case is to have a reverse proxy managing the certificates from let’s encrypt.
If a backend server (behind the reverse proxy) needs to use SSL certificates, this requires to use certbot on the reverse proxy, generate the certificate and to move private key from the reverse proxy to the backend server.

There is another way: sharing NFS drive between servers but this breaks all the security best practices!

Today the “best” way is to SCP the private keys from a the reverse proxy to the backend server, this is not the best way and this needs to be repeated every 3 months before let’s encrypt certificate expires, moving the private key is not a best practice either.

version 0.24 brings a new function --reuse-key to reuse the same private key to renew the certificate, so this private key can stay to the backend server and no need to copy the new private key from the reverse proxy to the backend server because it was not changed during the renew.