Arch Linux User Repository

I'm missing the man file in this package! community/shellcheck has it

No problem, thanks for your help!

... Aand now I've woken up sufficiently to notice that my prior comment is largely nonsense. The months-old advise posted below has finally been adopted, and we're using the versioned packages now.

Apologies for any inconvenience.

All sorted now. The developer-provided statically linked binary isn't stored at a versioned URL, so this pkgbuild doesn't fail particularly nicely when they bump their version. It'll just start failing the checksum.

Slightly irritating, but it seems to happen only about twice a year.

This isn't installing for me ...

$ pacaur -S shellcheck-static
:: Package shellcheck-static not found in repositories, trying AUR...
:: resolving dependencies...
:: looking for inter-conflicts...

AUR Packages  (1) shellcheck-static-0.6.0-1  

:: Proceed with installation? [Y/n] y
:: Retrieving package(s)...
update complete: /home/josh/.cache/pacaur/shellcheck-static
:: shellcheck-static build files are up-to-date -- skipping
:: Checking shellcheck-static integrity...
==> Making package: shellcheck-static 0.6.0-1 (Fri 02 Aug 2019 10:20:35 AM EDT)
==> Retrieving sources...
  -> Found shellcheck-stable.linux.x86_64.tar.xz
==> Validating source files with sha256sums...
    shellcheck-stable.linux.x86_64.tar.xz ... FAILED
==> ERROR: One or more files did not pass the validity check!
:: Preparing shellcheck-static...
==> Making package: shellcheck-static 0.6.0-1 (Fri 02 Aug 2019 10:20:36 AM EDT)
==> WARNING: Skipping dependency checks.
==> Retrieving sources...
  -> Found shellcheck-stable.linux.x86_64.tar.xz
==> WARNING: Skipping all source file integrity checks.
==> Extracting sources...
  -> Extracting shellcheck-stable.linux.x86_64.tar.xz with bsdtar
==> Sources are ready.
:: failed to verify integrity or prepare shellcheck-static package

Here is a patch

diff --git a/.SRCINFO b/.SRCINFO
index 5c4b947..3f4d960 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,16 +1,15 @@
-# Generated by mksrcinfo v8
-# Sat Feb  9 00:23:00 UTC 2019
 pkgbase = shellcheck-static
    pkgdesc = shellcheck, without the 130MB haskell dependencies
    pkgver = 0.6.0
    pkgrel = 1
+   url = https://shellcheck.net
    arch = x86_64
    license = AGPL3
    depends = gmp
    provides = shellcheck=0.6.0
    conflicts = shellcheck
-   source = https://storage.googleapis.com/shellcheck/shellcheck-stable.linux.x86_64.tar.xz
-   sha256sums = b76c13cd98c41e2239b2d23bda967faba5142650383235ec3614146f52cf920c
+   source = https://storage.googleapis.com/shellcheck/shellcheck-v0.6.0.linux.x86_64.tar.xz
+   sha512sums = d88733e95aea8e970c373a3f677a3eb272f14c12d3e9c93f81463b5fe406b43acdd3046d10c092f40c070a96a5fac1cf7e18b35ed790d76ecced6af32e2c8a85

 pkgname = shellcheck-static

diff --git a/PKGBUILD b/PKGBUILD
index 9bf7767..15c5d4f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,6 +3,7 @@ pkgver=0.6.0
 pkgrel=1
 pkgdesc="shellcheck, without the 130MB haskell dependencies"
 license=("AGPL3")
+url="https://shellcheck.net"
 arch=("x86_64")
 depends=('gmp')
 conflicts=("shellcheck")
@@ -10,8 +11,9 @@ provides=("shellcheck=0.6.0")

 # The statically-linked binary provided by the developer. See:
 # https://github.com/koalaman/shellcheck#installing
-source=("https://storage.googleapis.com/shellcheck/shellcheck-stable.linux.x86_64.tar.xz")
-sha256sums=('b76c13cd98c41e2239b2d23bda967faba5142650383235ec3614146f52cf920c')
+source=("https://storage.googleapis.com/shellcheck/shellcheck-v${pkgver}.linux.${CARCH}.tar.xz")
+# From https://storage.googleapis.com/shellcheck/shellcheck-v${pkgver}.linux.${CARCH}.tar.xz.sha512sum
+sha512sums=('d88733e95aea8e970c373a3f677a3eb272f14c12d3e9c93f81463b5fe406b43acdd3046d10c092f40c070a96a5fac1cf7e18b35ed790d76ecced6af32e2c8a85')

 package() {
     cd "${srcdir}/shellcheck-stable"

• The source provides sha512sums which you can use in the PKGBUILD. It's better to use integrity sums from upstream if they're available.

• It's probably better to use the specific version file (shellcheck-v0.6.0.linux.x86_64.tar.xz.) rather than the "latest" version, as that will make the PKGBUILD not break when the software is updated. It will also solve the problem with overwriting a file with the same name when a new version is built.

v6.0 pkgbuild:

pkgname=shellcheck-static
pkgver=0.6.0
pkgrel=1
pkgdesc="shellcheck, without the 130MB haskell dependencies"
license=("AGPL3")
arch=("x86_64")
depends=('gmp')
conflicts=("shellcheck")
provides=("shellcheck=0.6.0")

# The statically-linked binary provided by the developer. See:
# https://github.com/koalaman/shellcheck#installing
source=("https://storage.googleapis.com/shellcheck/shellcheck-stable.linux.x86_64.tar.xz")
sha256sums=('b76c13cd98c41e2239b2d23bda967faba5142650383235ec3614146f52cf920c')

package() {
    cd "${srcdir}/shellcheck-stable"
    install -Dt "${pkgdir}/usr/bin" "shellcheck"
    install -Dt "${pkgdir}/usr/share/shellcheck" "LICENSE.txt" "README.txt"
}

The source binary is not compatible with i686. Please remove i686 from arch=.

timofonic: You asked for -git/nightly builds. The developer started offering them, soooo - have a PKGBUILD:

https://aur.archlinux.org/packages/shellcheck-git-static

doskoi: The ranty message has been updated to correctly express how irritating Haskell packaging on Arch is at the moment. Thank you.