Did I introduce that now with autogen.sh in xz? Checking.. ..didn't build in a clean devtools chroot yet. A, yes. Thanks. Also added git. This is all because autogen.sh in xz needs some more things installed.
Search Criteria
Package Details: pacman-static 6.1.0-9
Package Actions
| Git Clone URL: | https://aur.archlinux.org/pacman-static.git (read-only, click to copy) |
|---|---|
| Package Base: | pacman-static |
| Description: | Statically-compiled pacman (to fix or install systems without libc) |
| Upstream URL: | https://www.archlinux.org/pacman/ |
| Licenses: | GPL |
| Submitter: | mazieres |
| Maintainer: | Morganamilo (andreas_baumann) |
| Last Packager: | andreas_baumann |
| Votes: | 46 |
| Popularity: | 1.50 |
| First Submitted: | 2013-01-09 02:17 (UTC) |
| Last Updated: | 2024-06-13 09:27 (UTC) |
Dependencies (5)
- pacman (pacman-pbAUR, pacman-fancy-progress-gitAUR, pacman-gitAUR)
- git (git-gitAUR) (make)
- kernel-headers-musl (make)
- meson (meson-gitAUR) (make)
- musl (musl-gitAUR) (make)
Required by (0)
Sources (33)
- ca-dir.patch
- git+https://git.tukaani.org/xz.git#tag=v5.6.2
- https://curl.haxx.se/download/curl-8.8.0.tar.gz
- https://curl.haxx.se/download/curl-8.8.0.tar.gz.asc
- https://github.com/c-ares/c-ares/releases/download/cares-1_29_0/c-ares-1.29.0.tar.gz
- https://github.com/c-ares/c-ares/releases/download/cares-1_29_0/c-ares-1.29.0.tar.gz.asc
- https://github.com/facebook/zstd/releases/download/v1.5.6/zstd-1.5.6.tar.zst
- https://github.com/facebook/zstd/releases/download/v1.5.6/zstd-1.5.6.tar.zst.sig
- https://github.com/libarchive/libarchive/releases/download/v3.7.4/libarchive-3.7.4.tar.xz
- https://github.com/libarchive/libarchive/releases/download/v3.7.4/libarchive-3.7.4.tar.xz.asc
- https://github.com/nghttp2/nghttp2/releases/download/v1.62.1/nghttp2-1.62.1.tar.xz
- https://gitlab.archlinux.org/pacman/pacman/-/releases/v6.1.0/downloads/pacman-6.1.0.tar.xz
- https://gitlab.archlinux.org/pacman/pacman/-/releases/v6.1.0/downloads/pacman-6.1.0.tar.xz.sig
- https://gnupg.org/ftp/gcrypt/libassuan/libassuan-2.5.7.tar.bz2
- https://gnupg.org/ftp/gcrypt/libassuan/libassuan-2.5.7.tar.bz2.sig
- https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.49.tar.bz2
- https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.49.tar.bz2.sig
- https://sourceware.org/pub/bzip2/bzip2-1.0.8.tar.gz
- https://sourceware.org/pub/bzip2/bzip2-1.0.8.tar.gz.sig
- https://www.gnupg.org/ftp/gcrypt/gpgme/gpgme-1.23.2.tar.bz2
- https://www.gnupg.org/ftp/gcrypt/gpgme/gpgme-1.23.2.tar.bz2.sig
- https://www.openssl.org/source/openssl-3.3.1.tar.gz
- https://www.openssl.org/source/openssl-3.3.1.tar.gz.asc
- https://zlib.net/zlib-1.3.1.tar.gz
- https://zlib.net/zlib-1.3.1.tar.gz.asc
- openssl-3.0.7-no-atomic.patch
- pacman-static-drop-result-warn.patch
- pacman-static-fix-debugedit.patch
- pacman-static-fix-msg-unknown-key.patch
- pacman-static-make-aligned-titles.patch
- pacman-static-man-gitlab.patch
- pacman-static-repo-add-parseopts.patch
- revertme-makepkg-remove-libdepends-and-libprovides.patch
andreas_baumann commented on 2024-03-31 09:08 (UTC) (edited on 2024-03-31 09:15 (UTC) by andreas_baumann)
deadite66 commented on 2024-03-31 09:01 (UTC) (edited on 2024-03-31 09:04 (UTC) by deadite66)
missing po4a and doxygen makedepends
parallel-tests: installing 'build-aux/test-driver'
+ generate_po4a=y
+ generate_doxygen=y
+ test y '!=' n
+ cd po4a
+ sh update-po
po4a/update-po: The program 'po4a' was not found.
po4a/update-po: Translated man pages were not generated.
==> ERROR: A failure occurred in build().
Aborting...
-> error making: pacman-static-exit status 4
-> Failed to install the following packages. Manual intervention is required:
pacman-static - exit status 4
andreas_baumann commented on 2024-03-31 08:00 (UTC) (edited on 2024-03-31 08:33 (UTC) by andreas_baumann)
Yep, done. Using https://git.tukaani.org/xz.git now. Generating a tarball from git sources directly doesn't contain the backdoored code. And autogen.sh regenerates the autoconf stuff during the build..
yochananmarqos commented on 2024-03-30 19:54 (UTC)
@andreas_baumann: Please use the developer's repo as Arch has done. I know this has all been a confusing mess.
andreas_baumann commented on 2024-03-30 19:25 (UTC) (edited on 2024-03-30 19:32 (UTC) by andreas_baumann)
@BryanLiang: upstream also uses https://git.tukaani.org/xz.git#tag=v${pkgver}") with pkgver=5.6.1. So this is presumably ok to take. But I prefer to wait a little bit for official statements and a 5.6.2 version..
andreas_baumann commented on 2024-03-30 18:40 (UTC)
Another round in the Easter egg hunt for xz 5.4.6, resorting now to the version on SourceForge. Also removed possibly compromised PGP keys.
greyltc commented on 2024-03-30 18:04 (UTC)
Can this please be removed from the package? '22D465F2B4C173803B20C6DE59FCF207FEA7F445') # Jia Tan jiat0218@gmail.com
andreas_baumann commented on 2024-03-30 17:09 (UTC) (edited on 2024-03-30 18:18 (UTC) by andreas_baumann)
@BryanLiang: You don't expect me to use any source tarball I didn't verify myself against the one used in the old pkg source package on archive.org. :-) Fedora happens to have the same tarball for 5.4.6 only, that's why I rather take this one.
BryanLiang commented on 2024-03-30 12:02 (UTC) (edited on 2024-03-30 12:06 (UTC) by BryanLiang)
@andreas_baumann I found a git repo which is still working https://git.tukaani.org/xz.git from a reddit comment.
But I'm not sure the git repo is trusted.
andreas_baumann commented on 2024-03-30 08:41 (UTC) (edited on 2024-03-30 09:31 (UTC) by andreas_baumann)
Strange things happening here with xz:
https://github.com/tukaani-project/xz
This repository has been disabled.
" Access to this repository has been disabled by GitHub Staff due to a violation of GitHub's terms of service. If you are the owner of the repository, you may reach out to GitHub Support for more information. "
More on this https://www.phoronix.com/news/GitHub-Disables-XZ-Repo.
Getting 5.4.6 from Fedora for now. (Could also take them from sources.archive.org, but then the tarball and signature are not easy accessible from there).
Upstream xz 5.6.1 is patched with a versoin from the (for now) not available github repo, so..
Pinned Comments
Morganamilo commented on 2022-02-20 18:30 (UTC)
There's now a custom repo and binaries again. Though only for x86_64 currently.
Custom Repo
Pre compiled binaries
https://pkgbuild.com/~morganamilo/pacman-static/x86_64/bin/