AUR (en) - pygtk

Search Criteria

Package Details: pygtk 2.24.0-12

Git Clone URL:	https://aur.archlinux.org/pygtk.git (read-only, click to copy)
Package Base:	pygtk
Description:	Python bindings for the GTK widget set
Upstream URL:	http://www.pygtk.org
Keywords:	GTK Python widget
Licenses:	LGPL
Submitter:	arojas
Maintainer:	ragouel
Last Packager:	ragouel
Votes:	26
Popularity:	11.18
First Submitted:	2020-03-29 19:09
Last Updated:	2020-05-19 15:03

Git Clone URL:

https://aur.archlinux.org/pygtk.git (read-only, click to copy)

Package Base:

pygtk

Description:

Python bindings for the GTK widget set

Upstream URL:

http://www.pygtk.org

Keywords:

GTK Python widget

Licenses:

Submitter:

arojas

Maintainer:

ragouel

Last Packager:

ragouel

Votes:

Popularity:

11.18

First Submitted:

2020-03-29 19:09

Last Updated:

2020-05-19 15:03

Latest Comments

1 2 3 4 5 Next › Last »

daniel_shub commented on 2020-05-19 00:29

@zman0900 I think the point is that it is unlikely that someone maliciously replaces the patches but does not modify the PKGBUILD since they are downloaded as a bundle. Silent corruption should be caught when you clone the git repository, but is probably technically a possibility. Ideally the patches and the PKGBUILD would be signed, but in practice, the Arch way is buyer beware. You should be reading the PKGBUILD and associated files and make sure you know what they are doing.

zman0900 commented on 2020-05-18 23:58

How so? Without them, file integrity is not checked. Patches could be silently corrupted or maliciously replaced and it would go unnoticed.

ragouel commented on 2020-05-18 23:43

@zman0900 because they are redundant.

zman0900 commented on 2020-05-18 17:05

Why are checksums skipped on the patch files?

eschwartz commented on 2020-04-26 08:37

What's the actual command you ran?

ragouel commented on 2020-04-26 08:14

What Operating System are you using ?

thumbless commented on 2020-04-26 08:07

I just get error: missing package metadata When trying to install this.

eschwartz commented on 2020-04-21 15:12

Hmm, this could be because gitlab generated patches have the server's running git version embedded in the footer, and they've updated their server. Kind of silly... :(

If the current version of the patch is git added to the AUR repository it should continue to work with no modifications to the PKGBUILD, and be proof against this in the future.

spdyn1 commented on 2020-04-21 13:29

@fdo10 : in order to compile, you need to : sha512sum 4aaa48eb80c6802aec6d03e5695d2a0ff20e0fc2.patch if you decide to trust it, and edit the PKGBUILD file accordingly (replace the 2nd "sha512sums") Hope it helps. sp

fdo10 commented on 2020-04-21 12:02

I'm getting this error while trying to install:

user@hostname git clone https://aur.archlinux.org/pygtk.git

user@hostname ~/pygtk $ makepkg -si
==> Making package: pygtk 2.24.0-12 (di 21 apr 2020 13:21:20)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found pygtk-2.24.0.tar.bz2
  -> Found 4aaa48eb80c6802aec6d03e5695d2a0ff20e0fc2.patch
  -> Found python27.patch
  -> Found fix-leaks-of-pango-objects.patch
==> Validating source files with sha512sums...
    pygtk-2.24.0.tar.bz2 ... Passed
    4aaa48eb80c6802aec6d03e5695d2a0ff20e0fc2.patch ... FAILED
    python27.patch ... Passed
    fix-leaks-of-pango-objects.patch ... Passed
==> ERROR: One or more files did not pass the validity check!

Arch Linux User Repository