Arch Linux User Repository

I’ve updated to 2025.9.0 and the SSO Plugin to the matching version 0.4.0. Tested this as well, seems to run fine in my setup.

Since 2025.6.0, install-onlyoffice.sh will only install the latest version of onlyoffice by default. This breaks opening old documents after the update, as you always need the old version when converting the documents to the new version.

This can be fixed with the following patch, which always forces all versions to be installed:

diff --git a/PKGBUILD b/PKGBUILD
index 40088a3..3536c79 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -21,11 +21,18 @@ options=(!strip) # There are no ELF files, no need to strip anything.
 source=("$pkgname-$pkgver.tar.gz::$url/archive/$pkgver.tar.gz"
         "$pkgname.service"
         "$pkgname.sysusers"
-        "$pkgname.tmpfiles")
+        "$pkgname.tmpfiles"
+        "install-all-onlyoffice-versions.patch")
 sha256sums=('4ea42bfa4cfc65b6c6d0be40deec673b95a252a162b7e0df236bdc12a5a7f033'
             '792da71f113aa15177a654e08a31dabd9be864ceb42f64d55cc46d18875c475b'
             '999a271d64b75c7c447fdb21486b27463c04679677e57ea9551a3b0429c618f6'
-            '986c1a67e5a00b9a766798933f1774995736a0ed345427509bdc522ad71d7e93')
+            '986c1a67e5a00b9a766798933f1774995736a0ed345427509bdc522ad71d7e93'
+            'c1b46d768eb13c3673a944c0190ae063831229bc5f8db7a3eec402f1a2a2c0e7')
+
+prepare() {
+    cd "$pkgname-$pkgver"
+    patch -Np1 -i ../install-all-onlyoffice-versions.patch # Needed to be able to convert old documents
+}

 build() {
     cd "$pkgname-$pkgver"
diff --git a/install-all-onlyoffice-versions.patch b/install-all-onlyoffice-versions.patch
new file mode 100644
index 0000000..b213cd6
--- /dev/null
+++ b/install-all-onlyoffice-versions.patch
@@ -0,0 +1,17 @@
+diff -ura cryptpad-2025.6.0.orig/install-onlyoffice.sh cryptpad-2025.6.0.new/install-onlyoffice.sh
+--- cryptpad-2025.6.0.orig/install-onlyoffice.sh   2025-07-09 17:51:42.000000000 +0200
++++ cryptpad-2025.6.0.new/install-onlyoffice.sh    2025-08-24 16:57:26.860420254 +0200
+@@ -27,10 +27,10 @@
+ 
+     ask_for_license
+ 
+-    # Check if 'oldest_needed_version' is already set, if not, set it to v8
++    # Check if 'oldest_needed_version' is already set, if not, set it to v1
+     if [ -z "${PROPS['oldest_needed_version']+set}" ]; then
+-        echo "'oldest_needed_version' is not set. Setting it to v8."
+-        set_prop "oldest_needed_version" "v8"
++        echo "'oldest_needed_version' is not set. Setting it to v1."
++        set_prop "oldest_needed_version" "v1"
+     else
+         echo "'oldest_needed_version' is already set to ${PROPS['oldest_needed_version']}. No changes made."
+     fi

The package is broken as of the latest update, due to this commit upstream. It's now necessary to install the src folder, too. Alas, this is the fix:

diff --git a/PKGBUILD b/PKGBUILD
index c271896..96cf474 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -49,7 +49,7 @@ package() {

     # Cryptpad
     install -Dt "$pkgdir/usr/share/webapps/$pkgname" package.json server.js
-    cp -rt "$pkgdir/usr/share/webapps/$pkgname" customize.dist lib node_modules scripts www
+    cp -rt "$pkgdir/usr/share/webapps/$pkgname" customize.dist lib node_modules scripts src www

     # Config
     sed -e "s|\(Path: '\)\./|\1/var/lib/cryptpad/|" \

They temporarily added a modified tweetnacl build to their source, see here. This causes the node_modules and www/components folder to have a symlink to the source directory of that in build folder. Overall, this breaks the package.

A solution is to copy the folder to node_modules during package() and then symlink the second location to that, e.g.

diff --git a/PKGBUILD b/PKGBUILD
index 2e9dcd9..bf112d3 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -51,6 +51,12 @@ package() {
     install -Dt "$pkgdir/usr/share/webapps/$pkgname" package.json server.js
     cp -rt "$pkgdir/usr/share/webapps/$pkgname" customize.dist lib node_modules scripts www

+    # Fix tweetnacl
+    rm "$pkgdir/usr/share/webapps/$pkgname/node_modules/tweetnacl"
+    cp -r "$srcdir/$pkgname-$pkgver/src/tweetnacl" "$pkgdir/usr/share/webapps/$pkgname/node_modules/tweetnacl"
+    rm "$pkgdir/usr/share/webapps/$pkgname/www/components/tweetnacl"
+    ln -s "/usr/share/webapps/$pkgname/node_modules/tweetnacl" "$pkgdir/usr/share/webapps/$pkgname/www/components/tweetnacl"
+
     # Config
     sed -e "s|\(Path: '\)\./|\1/var/lib/cryptpad/|" \
         -e "s|'/var/lib/cryptpad/data/logs'|false|" \

Done. Thanks for the patch and sorry for the delay!

@buzo Would it be possible to merge klemens' patch to include OnlyOffice?

I uploaded the SSO plugin for cryptpad to AUR. If you like, you could add it as an optdepends. https://aur.archlinux.org/packages/cryptpad-sso

I just updated from 5.7.0 to 2024.6.0 and I can no longer open my spreadsheets. It seems like since 2024.3.0 OnlyOffice is no longer included by default and needs to be download with a script?

Edit: Calling the new script seems to work fine. The following patch solves the issue for me (though it produces some "Package contains reference to $srcdir" warnings, which could be fixed by removing the www/common/onlyoffice/dist/*/.git files which are not needed anyway):

diff --git a/PKGBUILD b/PKGBUILD
index cd6eefe..22b086a 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -4,13 +4,13 @@

 pkgname=cryptpad
 pkgver=2024.6.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Realtime collaborative visual editor with zero knowlege server"
 arch=('any')
 url="https://github.com/$pkgname/$pkgname"
 license=(AGPL-3.0-or-later)
 depends=(nodejs)
-makedepends=(npm git)
+makedepends=(npm git unzip)
 optdepends=('nginx: HTTP server providing TLS'
             'certbot: Let’s Encrypt – automatically receive and install X.509 certificates to enable TLS'
             'certbot-nginx: Nginx plugin for Let’s Encrypt client')
@@ -31,6 +31,7 @@ build() {
     export NODE_ENV=production
     npm install --cache "$srcdir"/npm-cache
     npm run install:components --cache "$srcdir"/npm-cache
+    ./install-onlyoffice.sh --accept-license
 }

 package() {

@buzo @ChrisTX I see the cryptpad:http combinations for e.g. blob, however, the combination cryptpad:cryptpad and 0750 still does not allow read access for nginx for e.g. blob, so login is still prohibited in the current situation. At least on my machine, so please recheck. Thanks.