Packages

Rebuild package against libressl, since it depends on openssl.

$ pacman -Si cgit
Repository      : community
Name            : cgit
Version         : 1.1-2
Description     : A web interface for git written in plain C
Architecture    : x86_64
URL             : http://git.zx2c4.com/cgit/
Licenses        : GPL2
Groups          : None
Provides        : None
Depends On      : openssl  luajit
Optional Deps   : python-pygments: syntax highlighting support
                  python-markdown: about page formated with markdown
                  mime-types: serve file with correct content-type header
Conflicts With  : None
Replaces        : None
Download Size   : 471.36 KiB
Installed Size  : 1172.00 KiB
Packager        : Sergej Pupykin <pupykin.s+arch@gmail.com>
Build Date      : Fri 17 Feb 2017 02:29:44 PM -03
Validated By    : MD5 Sum  SHA-256 Sum  Signature

Description:

Common use case is to have a reverse proxy managing the certificates from let’s encrypt.
If a backend server (behind the reverse proxy) needs to use SSL certificates, this requires to use certbot on the reverse proxy, generate the certificate and to move private key from the reverse proxy to the backend server.

There is another way: sharing NFS drive between servers but this breaks all the security best practices!

Today the “best” way is to SCP the private keys from a the reverse proxy to the backend server, this is not the best way and this needs to be repeated every 3 months before let’s encrypt certificate expires, moving the private key is not a best practice either.

version 0.24 brings a new function --reuse-key to reuse the same private key to renew the certificate, so this private key can stay to the backend server and no need to copy the new private key from the reverse proxy to the backend server because it was not changed during the renew.

Since certbot v0.22.0[0] there’s support for ACMEv2 and Wildcard. This is an important update since wildcard SSL certificates can make server security and maintaince easier by supporting all subdomains of a base domain.

Debian Stretch (stable) uses certbot 0.10.2 but there’s 0.23.0 in stretch-backports repository[1]. So I’d like to request an update or a backport of certbot and its dependencies.

These are the actual packages versions from Hyperbola and Arch:

• certbot (0.23.0-1) / Hyperbola version ⇒ (0.14.0-1) [x]
• python-acme (0.23.0-1) / Hyperbola version ⇒ (0.14.0-1) [x]
• python-configargparse (0.12.0-1) / Hyperbola version ⇒ (0.11.0-2) [=]
• python-parsedatetime (2.4-1) / Hyperbola version ⇒ (2.3-1) [x]
• python-pbr (4.0.2-1) / Hyperbola version ⇒ (3.0.0-1) [<]
• python-pytz (2018.4-1) / Hyperbola version ⇒ (2017.2-1) [<]
• python-zope-component (4.4.1-1) / Hyperbola version ⇒ (4.3.0-2) [=]
• python-zope-event (4.3.0-1) / Hyperbola version ⇒ (4.2.0-2) [=]

NOTE: packages marked with an “[x]” means that the pkg has Debian Stretch backports of the proposed updated version. The “[=]” means that Debian has no backports but uses the same version of the pkg as Hyperbola. The [<] means the Debian Version lower than Hyperbola’s Version.

The packages that may get the update should be only the ones marked with an [x], if we follow the Debian Stretch devel. If certbot gets the update, then the following Arch packages need to be added for obtaining wildcard certificates throught the DNS challenge:

• certbot-dns-cloudflare
• certbot-dns-cloudxns
• certbot-dns-digitalocean
• certbot-dns-dnsimple
• certbot-dns-dnsmadeeasy
• certbot-dns-luadns
• certbot-dns-nsone
• certbot-dns-rfc2136
• certbot-dns-route53

I ommited certbot-dns-google since it’s not compatible with the Hyperbola Packaging Guidelines.

[0] https://community.letsencrypt.org/t/certbot-0-22-0-release-with-acmev2-and-wildcard-support/55061
[1] https://packages.debian.org/search?keywords=certbot

According to their documentation:

In order to use LuaDNS service you’ll need a LuaDNS account and a Git repository.

Sign up for a free LuaDNS account here: https://api.luadns.com/signup
Currently we are supporting the following Git hosting services:
> GitHub
> Bitbucket

GitHub, as everybody knows, was acquired by Microsoft last year (2018)
https://news.microsoft.com/2018/06/04/microsoft-to-acquire-github-for-7-5-billion/

And Bitbucket, like GitHub, is a centralized non-free git service.

There are other packages made for GitHub which haven’t been removed, but as you were deleting the certbot-dns-* packages that depended on a US-based DNS provider company, I thought you may wanted to know this.

cdemu-daemon requires a specific version of vhba-module. Since we are using vhba-module-lts with vhba-module in provides array but without a specific version, it generates the issue. Removing that specific version solves it.

# pacman -S cdemu-daemon
resolving dependencies...
warning: cannot resolve "vhba-module>=20140629", a dependency of "cdemu-daemon"
:: The following package cannot be upgraded due to unresolvable dependencies:
      cdemu-daemon

:: Do you want to skip the above package for this upgrade? [y/N] 
error: failed to prepare transaction (could not satisfy dependencies)
:: cdemu-daemon: requires vhba-module>=20140629

The daemon is not working and the following error-message occurs when trying to starting up:

cdemu: Daemon: D-Bus: failed to get proxy for 'org.freedesktop.DBus' on session bus: Cannot autolaunch D-Bus without X11 $DISPLAY!
Daemon initialization and start failed!

Cataclysm-DDA contains a problematic license[0][1][2] for software.
Uses “Creative Commons Attribution-ShareAlike 3.0 Unported License”.

$ pacman -Si cataclysm-dda
Repository : community
Name : cataclysm-dda
Version : 0.C-3
Description : A post-apocalyptic roguelike.
Architecture : x86_64
URL : http://en.cataclysmdda.com/ Licenses : CCPL:by-sa
Groups : None
Provides : None
Depends On : ncurses lua
Optional Deps : sdl2_image: for tiles

                sdl2_ttf: for tiles
                freetype2: for tiles
                sdl2_mixer: for tiles

Conflicts With : None
Replaces : None
Download Size : 19.33 MiB
Installed Size : 53.32 MiB
Packager : Felix Yan felixonmars@archlinux.org Build Date : Mon 07 Dec 2015 03:14:02 AM -03
Validated By : MD5 Sum SHA-256 Sum Signature

[0]:https://github.com/CleverRaven/Cataclysm-DDA/blob/master/LICENSE.txt [1]:https://creativecommons.org/faq/#can-i-apply-a-creative-commons-license-to-software [2]:https://www.gnu.org/licenses/license-list.html#ccbysa

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Prior version 0.0.25 and below are outdated.

Since version 0.100 and later, there are some changes being redesigned from scratch, added three new weights (including extra bold, light and thin) but not italic or oblique styles, AppStream metadata translations from contributors, and more.

See the version history releases for more details: https://gitlab.gnome.org/GNOME/cantarell-fonts/raw/master/NEWS

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

This package contains vague terminology “Open Source”:

community/bzrtp 1.0.5-1
    Opensource implementation of ZRTP keys exchange protocol

According to:
https://www.gnu.org/distros/free-system-distribution-guidelines.html

We shall avoid vague terminology such as “Open Source”, please see here:
https://www.gnu.org/philosophy/words-to-avoid.html#Open

It would be good example to set to have proper description of packages without using “Open Source”.

eg.

Free software implementation of ZRTP keys exchange protocol

Description:

• replace deprecated GNU Bazaar to Brezy for Canis Major

Additional info:

• bzr 2.7.0-2
• GNU Bazaar will be unmaintained (for now, there are only bug fixes)
• GNU Bazaar only supports Python 2.
• Python 2.7 is the end of the Python 2 line of development. [0]
• There never will be an official Python 2.8 release.
• Or use Tauthon (fork of Python 2.7) as dependency.

Note: It needs a provide: bazaar and brezy

Steps to reproduce:

• broken package

Description:

• needs OpenRC init script (bzr serve), like [git] (git-daemon) and [subversion] (svnserve)

Additional info:

• bzr 2.7.0-2

Note: needs a provide: bazaar

Steps to reproduce:

• none

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Package: https://www.hyperbola.info/packages/community/x86_64/busybox/

https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/

In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.

Patch: https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8

]$ pacman -Si btrfs-progs
Repository : core
Name : btrfs-progs
Version : 4.10.2-1
Description : Btrfs filesystem utilities
Architecture : x86_64
URL : https://btrfs.wiki.kernel.org Licenses : GPL2
Groups : None
Provides : btrfs-progs-unstable
Depends On : glibc libutil-linux e2fsprogs lzo zlib
Optional Deps : None
Conflicts With : btrfs-progs-unstable
Replaces : btrfs-progs-unstable
Download Size : 603.00 KiB
Installed Size : 4022.00 KiB
Packager : Sébastien Luttringer seblu@seblu.net Build Date : Fri 31 Mar 2017 08:20:32 PM -03
Validated By : MD5 Sum SHA-256 Sum Signature

$ pacman -Ql btrfs-progs
btrfs-progs /usr/
btrfs-progs /usr/bin/
btrfs-progs /usr/bin/btrfs
btrfs-progs /usr/bin/btrfs-convert
btrfs-progs /usr/bin/btrfs-debug-tree
btrfs-progs /usr/bin/btrfs-find-root
btrfs-progs /usr/bin/btrfs-image
btrfs-progs /usr/bin/btrfs-map-logical
btrfs-progs /usr/bin/btrfs-select-super
btrfs-progs /usr/bin/btrfs-zero-log
btrfs-progs /usr/bin/btrfsck
btrfs-progs /usr/bin/btrfstune
btrfs-progs /usr/bin/fsck.btrfs
btrfs-progs /usr/bin/mkfs.btrfs
btrfs-progs /usr/include/
btrfs-progs /usr/include/btrfs/
btrfs-progs /usr/include/btrfs/btrfs-list.h
btrfs-progs /usr/include/btrfs/btrfsck.h
btrfs-progs /usr/include/btrfs/crc32c.h
btrfs-progs /usr/include/btrfs/ctree.h
btrfs-progs /usr/include/btrfs/extent-cache.h
btrfs-progs /usr/include/btrfs/extent_io.h
btrfs-progs /usr/include/btrfs/ioctl.h
btrfs-progs /usr/include/btrfs/kerncompat.h
btrfs-progs /usr/include/btrfs/list.h
btrfs-progs /usr/include/btrfs/radix-tree.h
btrfs-progs /usr/include/btrfs/rbtree.h
btrfs-progs /usr/include/btrfs/send-stream.h
btrfs-progs /usr/include/btrfs/send-utils.h
btrfs-progs /usr/include/btrfs/send.h
btrfs-progs /usr/include/btrfs/sizes.h
btrfs-progs /usr/include/btrfs/version.h
btrfs-progs /usr/lib/
btrfs-progs /usr/lib/initcpio/
btrfs-progs /usr/lib/initcpio/hooks/
btrfs-progs /usr/lib/initcpio/hooks/btrfs
btrfs-progs /usr/lib/initcpio/install/
btrfs-progs /usr/lib/initcpio/install/btrfs
btrfs-progs /usr/lib/libbtrfs.so
btrfs-progs /usr/lib/libbtrfs.so.0
btrfs-progs /usr/lib/libbtrfs.so.0.1
btrfs-progs /usr/lib/systemd/
btrfs-progs /usr/lib/systemd/system/
btrfs-progs /usr/lib/systemd/system/btrfs-scrub@.service
btrfs-progs /usr/lib/systemd/system/btrfs-scrub@.timer
btrfs-progs /usr/lib/udev/
btrfs-progs /usr/lib/udev/rules.d/
btrfs-progs /usr/lib/udev/rules.d/64-btrfs-dm.rules
btrfs-progs /usr/share/
btrfs-progs /usr/share/bash-completion/
btrfs-progs /usr/share/bash-completion/completions/
btrfs-progs /usr/share/bash-completion/completions/btrfs
btrfs-progs /usr/share/man/
btrfs-progs /usr/share/man/man5/
btrfs-progs /usr/share/man/man5/btrfs.5.gz
btrfs-progs /usr/share/man/man8/
btrfs-progs /usr/share/man/man8/btrfs-balance.8.gz
btrfs-progs /usr/share/man/man8/btrfs-check.8.gz
btrfs-progs /usr/share/man/man8/btrfs-convert.8.gz
btrfs-progs /usr/share/man/man8/btrfs-debug-tree.8.gz
btrfs-progs /usr/share/man/man8/btrfs-device.8.gz
btrfs-progs /usr/share/man/man8/btrfs-filesystem.8.gz
btrfs-progs /usr/share/man/man8/btrfs-find-root.8.gz
btrfs-progs /usr/share/man/man8/btrfs-image.8.gz
btrfs-progs /usr/share/man/man8/btrfs-inspect-internal.8.gz
btrfs-progs /usr/share/man/man8/btrfs-map-logical.8.gz
btrfs-progs /usr/share/man/man8/btrfs-property.8.gz
btrfs-progs /usr/share/man/man8/btrfs-qgroup.8.gz
btrfs-progs /usr/share/man/man8/btrfs-quota.8.gz
btrfs-progs /usr/share/man/man8/btrfs-receive.8.gz
btrfs-progs /usr/share/man/man8/btrfs-replace.8.gz
btrfs-progs /usr/share/man/man8/btrfs-rescue.8.gz
btrfs-progs /usr/share/man/man8/btrfs-restore.8.gz
btrfs-progs /usr/share/man/man8/btrfs-scrub.8.gz
btrfs-progs /usr/share/man/man8/btrfs-select-super.8.gz
btrfs-progs /usr/share/man/man8/btrfs-send.8.gz
btrfs-progs /usr/share/man/man8/btrfs-show-super.8.gz
btrfs-progs /usr/share/man/man8/btrfs-subvolume.8.gz
btrfs-progs /usr/share/man/man8/btrfs-zero-log.8.gz
btrfs-progs /usr/share/man/man8/btrfs.8.gz
btrfs-progs /usr/share/man/man8/btrfsck.8.gz
btrfs-progs /usr/share/man/man8/btrfstune.8.gz
btrfs-progs /usr/share/man/man8/fsck.btrfs.8.gz
btrfs-progs /usr/share/man/man8/mkfs.btrfs.8.gz

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

community/btchip-udev 2-1
*    Udev rules to connect BTChip wallet to your linux box

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description is referring to operating system, and not to the kernel itself (Linux). It shall be amended.

community/bsd-games 2.17-17
     Linux port of the collection of BSD command line games

See:
https://www.gnu.org/philosophy/words-to-avoid.html#Linux

Description is referring to operating system, and not to the kernel itself (Linux). It shall be amended.

Adapt package in accordance with the Hyperbola Packaging Guidelines to follow the Hyperbola Social Contract .

Description:

The description of the package need to be changed to accommodate:
https://www.gnu.org/philosophy/words-to-avoid.html

To refer to published works as “assets”, or “digital assets”, is even worse than calling them “content” — it presumes they have no value to society except commercial value.

extra/breeze 5.9.5-1 (plasma)
    Artwork, styles and assets for the Breeze visual style for the Plasma Desktop

# Bug

(brasero:1402): WARNING : Could not establish a connection to Tracker: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Tracker1 was not provided by any .service files
Gtk-Message: GtkDialog mapped without a transient parent. This is discouraged.

# Package information

$ sudo pacman -Si brasero
[sudo] password for heckyel: 
Repositorio               : extra
Nombre                    : brasero
Versión                   : 3.12.1-2.hyperbola1
Descripción               : CD/DVD mastering tool
Arquitectura              : x86_64
URL                       : https://wiki.gnome.org/Apps/Brasero
Licencias                 : GPL
Grupos                    : gnome-extra
Provee                    : Nada
Depende de                : gtk3  gst-plugins-good  totem-plparser  cdrkit  cdrdao
                            shared-mime-info  libcanberra  dvd+rw-tools  dconf  libsm
                            libtracker-sparql  libnotify  gvfs
Dependencias opcionales   : libburn: alternative back-end
                            libisofs: libburn back-end
                            dvdauthor: video project
                            vcdimager: video project
En conflicto con          : Nada
Remplaza a                : nautilus-cd-burner
Tamaño de la descarga     : 2,58 MiB
Tamaño de la instalación  : 14,46 MiB
Encargado                 : Scott Adams <haricot@hyperbola.info>
Fecha de creación         : lun 29 may 2017 00:24:19 -05
Validado por              : Suma MD5  Suma SHA-256  Firma

# File attached
pacman -Ql brasero > brasero.txt