Package Details: sks 1.1.6-4

Git Clone URL: https://aur.archlinux.org/sks.git (read-only)
Package Base: sks
Description: Synchronizing OpenPGP Key Server
Upstream URL: https://bitbucket.org/skskeyserver/sks-keyserver/
Keywords: keyserver sks
Licenses: GPL
Submitter: mortzu
Maintainer: ajdiaz
Last Packager: ajdiaz
Votes: 6
Popularity: 0.000003
First Submitted: 2011-03-02 17:32
Last Updated: 2018-05-11 15:59

Latest Comments

ajdiaz commented on 2018-05-11 15:59

Unfortunately there is no basic conversion to ocaml 4.06, which has some changes related with return types of certain core functions (mainly now return bytes instead of string), and also it's no easy to move cryptokit 1.7 to ocaml-cryptokit package, because ocaml in arch does not support dynamic linking.

I will update the PKGBUILD to force a lower version of ocaml in dependencies. This will not resolve the problem and sks will still no buildable with current arch packages. I guess that we will need to wait to new sks release.

Any idea to resolve that is welcome of course :) Probably we should mark the package out-of-date anyway...

sanerb commented on 2018-03-09 07:26

some changes needed to get this working:

1.) currently due to https://bitbucket.org/skskeyserver/sks-keyserver/issues/55/unbound-module-nat-in-cryptokit-on-ocaml it only works with ocaml 4.05.

Install agetpkg, then:

agetpkg -i ^ocaml 4.05.0; agetpkg -i ^camlp4 4.05

2.) This is also required for sks-recon.service (as root user):

cat > /tmp/sks-recon.service << EOF
[Unit]
Description=Synchronizing key server recon instance
After=network.target remote-fs.target nss-lookup.target sks-db.service

[Service]
Type=simple
User=sks
Group=sks
PIDFile=/var/run/sks/sksrecon.pid
ExecStart=/usr/bin/sks recon
Requires=sks-db.service

[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload

sanerb commented on 2018-02-08 07:38

hey, @ajdiaz -

just a heads-up/FYI, looks like the recent ocaml bump in Arch has caused some problems with upstream.

i've filed a bug here: https://bitbucket.org/skskeyserver/sks-keyserver/issues/55/unbound-module-nat-in-cryptokit-on-ocaml

ajdiaz commented on 2017-10-13 09:39

Thank you @sanerb for the patches and the suggestions. Sorry for delay updating the PKGBUILD.

I added the debian_eventloop fix and your suggestions in systemd services.

sanerb commented on 2017-08-31 04:26

additionally, your systemd service units need some work. Both sks-db.service and sks-recon.service need, under [Service]:

RuntimeDirectory=sks
RuntimeDirectoryMode=0755


I'd also throw Group=sks in the same section as well.

But the RuntimeDirectory is needed so systemd creates the /var/run/sks directory on start, and removes it on stop. Otherwise, you get this (IMPOSSIBLE to figure out and UTTERLY unhelpful) error message:

Fatal error: exception Failure("Failure while binding socket. Probably another socket bound to this address")

sanerb commented on 2017-08-29 22:59

confirmed the debian patch fixes. updated PKGBUILD:

https://pastebin.com/hZ5DvQaa

sanerb commented on 2017-08-29 20:20

File "eventloop.ml", line 133, characters 15-19:
Error: This expression has type ?cloexec:bool -> Unix.file_descr
but an expression was expected of type
Unix.file_descr = Unix.file_descr
make: *** [Makefile:388: eventloop.cmx] Error 2


debian bug confirms: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870150
gentoo bug confirms: https://bugs.gentoo.org/show_bug.cgi?id=625546

there is a patch (which has been proposed upstream), https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=870150;filename=sks.patch;msg=15

ajdiaz commented on 2017-07-04 12:22

Thank you elimpfor for your report. The package release 2 fix the uint32 type error.

Everything should work fine right now.

elimpfor commented on 2017-05-29 01:44

Getting the following while building:
ocamlc -g -c -ccopt "-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong -I/usr/lib/ocaml -I ." stubs-md5.c
stubs-md5.c:21:9: error: unknown type name ‘uint32’
uint32 buf[4];
^~~~~~
stubs-md5.c:22:9: error: unknown type name ‘uint32’
uint32 bits[2];
^~~~~~
make[1]: *** [Makefile:101: stubs-md5.o] Error 2
make[1]: Leaving directory '/home/admin/dd/sks/src/sks-1.1.6/cryptokit-1.7/src'
make: *** [Makefile:292: cryptokit-1.7/src/cr

ajdiaz commented on 2016-09-17 08:21

Package does not build because of invalid GPG signature. The signatured defined in validpgpkeys is not valid for version 1.1.6 [1], instead of that we should use key C90EF1430B3AC0DFD00E6EA541259773973A612A.

[1] https://lists.gnupg.org/pipermail/gnupg-users/2016-August/056398.html

All comments