Package Details: devtools-doas 1:1.4.0-1

Git Clone URL: https://aur.archlinux.org/devtools-doas.git (read-only, click to copy)
Package Base: devtools-doas
Description: Tools for Arch Linux package maintainers (patched for opendoas)
Upstream URL: https://gitlab.archlinux.org/archlinux/devtools
Licenses: GPL-3.0-or-later
Conflicts: devtools
Provides: devtools
Submitter: vladaviedov
Maintainer: vladaviedov
Last Packager: vladaviedov
Votes: 4
Popularity: 1.58
First Submitted: 2024-08-24 16:50 (UTC)
Last Updated: 2025-09-18 19:42 (UTC)

Required by (34)

Sources (3)

Latest Comments

rait commented on 2025-12-07 15:07 (UTC)

I didn't, but now I do and it works, thank you for your help!

vladaviedov commented on 2025-12-06 21:26 (UTC)

@rait This typically happens if root is not allowed to use doas. Do you have permit nopass keepenv root in your doas.conf?

rait commented on 2025-12-05 23:12 (UTC) (edited on 2025-12-05 23:20 (UTC) by rait)

Thank you for this package. I prefer to use opendoas over sudo, so I appreciate your effort into helping the Linux community have some diversity in software. That said, I'm sadly struggling to build in a clean chroot with this:

➜ pkgctl build
==> Updating pacman database cache
:: Synchronizing package databases...
 core downloading...
 extra downloading...
 multilib downloading...
==> Building lttoolbox
  ->   repo: extra
  ->   arch: x86_64
  -> worker: rait-8
==> Building lttoolbox for [extra] (x86_64)
doas (rait@Arch) password:
:: Synchronizing package databases...
 core downloading...
 extra downloading...
:: Starting full system upgrade...
 there is nothing to do
==> Building in chroot for [extra] (x86_64)...
==> Synchronizing chroot copy [/var/lib/archbuild/extra-x86_64/root] -> [rait-8]...done
doas: Operation not permitted
==> ERROR: Could not download sources.

Seems like the problem happens here in makechrootpkg:

download_sources() {
    setup_workdir
    chown "$makepkg_user:" "$WORKDIR"

    # Ensure sources are downloaded
    doas -u "$makepkg_user" env \
        GNUPGHOME="$GNUPGHOME" \
        SSH_AUTH_SOCK="$SSH_AUTH_SOCK" \
        SRCDEST="$SRCDEST" \
        BUILDDIR="$BUILDDIR" \
        makepkg --config="$copydir/etc/makepkg.conf" --verifysource -o "${verifysource_args[@]}" ||
        die "Could not download sources."
}

I thought it was caused by running doas as yourself. Trying to "doas -u rait echo a" failed for me, so ironically I had to "permit rait as rait" in doas.conf. But while that command worked, the script itself failed even then. I modified the script temporarily to print out the passed envvars and I got this:

==> Synchronizing chroot copy [/var/lib/archbuild/extra-x86_64/root] -> [rait-1]...done
GUPGHOME = /home/rait/.local/share/gnupg, SSH_AUTH_SOCK = , SRCDEST = /home/rait/git/lttoolbox, BUILDDIR = , copydir = /var/lib/archbuild/extra-x86_64/rait-1, verifysource_args =
doas: Operation not permitted

I'm unsure if it's because of something missing on my side or if the script is erroneous in some way. I'm still a noob and can't tell if it's a problem that all of these are missing. The BUILDDIR one missing sounds like it could cause issues.

vladaviedov commented on 2025-08-11 19:52 (UTC)

@oech3 I cannot understand why this package offends you so much. Yes, I am aware that there are a billion different hacks which will let me bypass the problem. The trend in other Archlinux utils have been to remove the hard dependency on sudo by using PACMAN_AUTH. devtools just happens to be the only one where this has not been implemented yet.

oech3 commented on 2025-08-07 05:47 (UTC)

https://aur.archlinux.org/packages/run0-sudo-shim-git

oech3 commented on 2025-07-19 08:28 (UTC)

Is this only patch shell scripts? If so, is this able to be pacman hook and avoid full build?

vladaviedov commented on 2025-07-13 01:52 (UTC) (edited on 2025-07-13 01:53 (UTC) by vladaviedov)

@oech3 It doesn't matter to me if it's written in C or Rust, I prefer to not use sudo, in general.

I was talking about packages like opendoas-sudo, which provide a symlink and, more importantly, satisfied the dependency for sudo without having the program actually installed on the system. There were a few more which did the same and were removed by AUR maintainers.

There has been some scattered effort to make devtools more agnostic to the different SUID tools. This is something already the case for makepkg, which uses the PACMAN_AUTH variable to choose a SUID program. The patch is something I wrote to contribute to this merge request, but decided to publish as a AUR package meanwhile: https://gitlab.archlinux.org/archlinux/devtools/-/merge_requests/260

oech3 commented on 2025-07-08 04:30 (UTC)

I'm not sure that do you like sudo-rs. But symlinking sudo-rs to $PATH/sudo should work which just ignores --preserve-env.

AUR is not hostile for package with proper upstream URL (e.g. doas-sudo-shim which does not support the flag yet).

It seems there was a requests to support run0 at devtools, but rejected.

vladaviedov commented on 2025-07-08 04:06 (UTC)

@oech3 If I recall correctly, devtools does actually need to pass some environment variables through the sudo calls. Even if that wasn't the case, a wrapper is not an elegant solution, especially with how hostile AUR is to those kind of packages.

oech3 commented on 2025-07-04 16:12 (UTC) (edited on 2025-07-04 16:12 (UTC) by oech3)

I consider most use case of this could be covered by putting $PATH/sudo wrapper removes --preserve-env*.