Arch Linux User Repository

gpg --keyserver keyserver.ubuntu.com --recv-keys 699BF3055B0A49224EFDE7C72D7479A531451088

Thanks to older comments, problem with unknown pgp key is solved. Had to enter

gpg --keyserver keyserver.ubuntu.com --recv-keys 699BF3055B0A49224EFDE7C72D7479A531451088

I tried several keyservers, but keyserver.ubuntu.com was the right one.

The conflicting ausweisapp2 package does not exist anymore.

The application cannot be installed due to existing files in the file system if the ausweisapp2 package is already installed. In the PKGBUILD, conflicts=('ausweisapp2') must also be set so that the user is prompted to uninstall the ausweisapp2 package during installation. Only a replaces=('ausweisapp2') is insufficient in this case because sysupgrade is currently the only pacman operation that utilizes this field. A normal sync or upgrade will not use its value.

Please switch to https://aur.archlinux.org/packages/ausweisapp

http-parser will be replaced soon. There are no security issues at the moment. Don't be afraid.:-)

That is a good observation. Checking the source code reveals that it is using a copy of that library bundled with the sources. This, for sure, does not solve your worries about potential security vulnerabilities in unmaintained code, but it, in fact, makes the dependencies of an external library that is not used at all pointless.

UPDATE: I need to correct myself partially. The build does use the external http-parser library if installed and falls back to its own copy if it is missing. In that sense, the only criteria which one to take is whether we put more trust in the application provider to provide security fixes when needed in their own copy or the AUR package that provides http-parser since it was dropped from extra.

I would like to kindly suggest that the http-parser dependency should be removed. Following the link to the AUR repository and to the upstream repository reveals that the http-parser library is archived and is not unmaintained. Given that it is a c http-parser I do not think it is a great idea depend on it. Also I am not sure why the dependency exists in the first place since just removing it leads to now issues during package creation. And running it I can not see any issues as well …

gpg --keyserver keyserver.ubuntu.com --recv-keys 699BF3055B0A49224EFDE7C72D7479A531451088

“2” was removed from the name of the app and the GitHub repository URL in November 2023. Please consider renaming the package and the URL in the PKGBUILD.

I had to add the following flags to the PKGBUILD file in the cmake command:

-DOPENSSL_ROOT_DIR=/usr \
-DOPENSSL_LIBRARIES=/usr/lib/libcrypto.so \
-DOPENSSL_INCLUDE_DIR=/usr/include/openssl \

This was necessary to avoid the error: Your OpenSSL library looks incompatible.

Your problem isn't the pandoc package (you're welcome to continue using it if you think it's appropriate), but rather that you're not building the installation packages the way Arch intended. In a clean chroot, you're (as the name suggests) in a clean and minimal installation environment where only what's needed to create the installation packages exists. Most importantly, this provides a consistent environment where the community can track bugs; if everyone uses their own installation environment, as you can see in this case, that's not possible. Others (like me) haven't installed the pandoc package and therefore don't encounter this error.

You are right, I specifically installed pandoc-bin also in my chroot base because it provides pandoc and is much faster to satisfy than the normal pandoc with all its haskell dependencies and since many packages use pandoc to build their documentation, I figured this would be a worthwhile thing to do. I understand that this is not something that AUR packages do not need to expect, even though I find the behavior a bit odd.

Regardless, it has been a while since I relied on the normal pandoc package so I might just try again to see if the situation has improved.