Arch Linux User Repository

is it possible to ship pre-built package?

Upstream recommends using docker, for which they have pre-built images (that might also work with podman).

PostgreSQL 18 is coming to the Arch repos. Before upgrading, backup the files for vectorchord and pgvector somewhere, and then follow https://wiki.archlinux.org/title/PostgreSQL#Upgrading_PostgreSQL instructions. (In the next release, I'll also update the postinstall message to recommend changing postgresql.conf instead of doing ALTER SYSTEM SET.)

Also, you may find yourself updating VectorChord in this process. When doing so, remember to follow the migration steps at https://docs.immich.app/administration/postgres-standalone/#updating-vectorchord .

immich-web (localhost/immich-server:2283) used to be broken for some users of this package.

As @yparitcher also noticed, this was most likely caused by the following additions to .gitignore from f4e0aad2c495, which have since be reverted:

src/
pkg/
*.pkg.tar.zst
LICENSES/

The reason—for both this change sometimes and unpredictably breaking the build, and builds under a clean chroot still working—is unknown. I meant to investigate this on 2025-08-19 while updating the package but called it a day due to the unpredictability and long time of building. Help with figuring out why this happened would be greatly appreciated.

You may notice pacman refuse to upgrade this package, saying warning: cannot resolve "vectorchord", a dependency of "immich-server".

This is due to required manual intervention within the immich server database.

Newer versions of immich server have deprecated pgvecto.rs in favor of vectorchord.

Before updating from 1.133.1 or older, please follow steps 1 and 2 of the manual migration steps (should be the second dropdown) at https://immich.app/docs/administration/postgres-standalone/#migrating-to-vectorchord and uninstall pgvecto.rs.

Remember to remove references to "vectors.so" (which is shipped by pgvecto.rs) in shared_preload_libraries before pgvecto.rs in uninstalled. (For vectorchord to work, you'll need to add "vchord.so" to shared_preload_libraries after the upgrade as well.)

After that, you may upgrade this package. Please remember to follow steps 4 and 5 of the manual migration steps after the upgrade is finished to prevent data loss.

@aliu it probably works without hardware acceleration, check immich-server logs. with PrivateDevices=true ffmpeg can't see /dev/dri/renderD128

@dmig I did a little investigation and the current service file works with my VAAPI device.

@Terrrance They are supposed to be skipped; I just keep finding new ways to forget skipping them. (As you may know, updpkgsums currently doesn't preserve skips unless it's an unpinned VCS source. I plan to potentially contribute a patch to updpkgsums for this when I find the time...) Should be fixed now.

@dmig Good points; I'll check this out in an hour.

As the GeoNames data file hashes are often invalidated by unversioned changes upstream, is it worth just setting their hashes as SKIP and/or commiting a fixed copy of the data and refreshing them every so often? (Their sizes are maybe just over the point where it'd be considered bloat to keep them committed here though.)

@aliu this would be the final change:

PrivateDevices=false
SupplementaryGroups=render

/dev/dri/renderD128 has permissions set to 0666, but generally group render gives access to it. PrivateDevices=false may seem too much, but there is so much fuss in configuring HW access for different platforms (originally in Immich), I believe it is a better approach.

@aliu as I understand StartLimit* options, immich doesn't fail fast enough to hit 5 in StartLimitInterval. This is easy to verify: on a fresh install it starts crashing, complaining that it can't create postgres extension vchord (because I don't want to give it super admin privilege). And with default StartLimit* settings this crash-loop is infinite.

Here are more details on what needs to be passed to the service: - https://github.com/immich-app/immich/releases/download/v2.5.3/hwaccel.transcoding.yml - https://github.com/immich-app/immich/releases/download/v2.5.3/hwaccel.ml.yml

I tried BindPaths=/dev/dri:/dev/dri, but that didn't help -- ffmpeg couldn't open the device. Also, on some systems immich user has to be added to the render group.

@dmig I've added the StartLimitIntervalSec bump (default systemd StartLimitBurst is 5, anyone who doesn't like that one should reasonable be able to change the system-wide default) and given the service access to the device groups that seem relevant. Let me know if this works!

Here are my proposed changes for immich-server.service:

# /etc/systemd/system/immich-server.service.d/override.conf
[Unit]
# prevent immich infinite fail-loops
StartLimitIntervalSec=60
StartLimitBurst=3

[Service]
# fix for hardware acceleration
PrivateDevices=false

Looks like the cities500.zip and admin2Codes.txt sources changed, new hashes: cities500.zip: f350b2f2895fdc508a6ce8f7033316d0036d0c3b7bf0fe371cfc956dfeeeb44a admin2Codes.txt: 3c472e403cd746e713406b2e2208ae7f97544cf4cba75725739ca4326a455567

Note that the latest version is 2.5.0; the 2.5.1 tag on GitHub was a hotfix for the Android app.

That said, 2.5.2 just got tagged 12 minutes ago... might have to updpkg very soon