Foxboron

78 ms·

361.
Cloudflare Package Repository Mirrors(cloudflaremirrors.com)
88 points by Foxboron 6y ago|57 comments
362.
by Foxboron 6y ago
Sure, Arch Linux was bootstrapped with LFS by Judd around 2001/2002. Back then pacman was written bash I think?
363.
Call for Participation – Arch Linux Conf 2020 Online(lists.archlinux.org)
1 points by Foxboron 6y ago|0 comments
364.
Retroarch: Hacker vandalised our buildbot and GitHub organization(patreon.com)
1 points by Foxboron 6y ago|0 comments
365.
by Foxboron 6y ago
Yes, I recently discovered there are signatures for the tarballs. I believe they where not added to the Arch Linux package because they are hidden.
366.
by Foxboron 6y ago
> I'm curious which package managers / repositories allow you to update to the latest version of go as soon as it's released * ? Arch Linux. I just saw the release when I was checking for updated versions of packages I mai
367.
by Foxboron 6y ago
Source tarball: https://storage.googleapis.com/golang/go1.15.src.tar.gz Signature: https://storage.googleapis.com/golang/go1.15.src.tar.gz.asc Signed with `EB4C1BFD4F042F6DDDCCEC917721F63BD38B4796
368.
by Foxboron 6y ago
There has been some interesting progress with bootstrappable builds in regard to the GNU MES C compiler and building GCC. https://salsa.debian.org/reproducible-builds/reproducible-we...
369.
by Foxboron 6y ago
> How many people pin the exact version of a system library they are using? Or of a binary used in the build process. Linux distributions does. Both Debian and Arch Linux embed information about the entire build environment into the buil
370.
by Foxboron 6y ago
> For example, the working group for vulnerability disclosure includes a lot of corporate players, and from what I can tell, not a single security researcher. Only one side of the disclosure process is represented in that working group M
371.
You don’t need reproducible builds(blog.cmpxchg8b.com)
4 points by Foxboron 6y ago|0 comments
372.
Change of treasurer for Manjaro community funds(forum.manjaro.org)
4 points by Foxboron 6y ago|0 comments
373.
by Foxboron 6y ago
>and you support millions I'll be amazed if Arch has a million users. Our napkin math using steam user statistics put us on around 500k-600k users.
374.
by Foxboron 6y ago
>The issue I have with systemd was mainly related to its heaviness not really fitting in with Arch's simplicity. Arch is a pragmatic distribution first and foremost. If we can build systemd, and ship it as-is to have a complete init
375.
by Foxboron 6y ago
> As such I found it sad when even Arch fell to the systemd camp. And it's one of the few things it really enforces, it supports 6 different network initialisation methods for example, where all other distributions just pick one and
376.
by Foxboron 6y ago
There is no recommended networkmanager. `netctl` was explicitly written because systemd didn't have a network daemon. The past 3-4 years the community has in general recommended against using `netctl`. It was never removed from the ISO
377.
by Foxboron 6y ago
Debian has stricter rules regarding packaging and vendoring dependencies. Void and Arch packages LXD in a similar fashion by separating all the C dependencies. However, none of us actually separate out the different Go dependencies, they ar
378.
by Foxboron 6y ago
I did write a bit about my experience packaging LXD for Arch Linux a while back. I got a ping from a Debian dev telling me the Debian dev working on LXD enjoyed the article, and has been trying to pick up on the work again. The linked wiki
379.
by Foxboron 6y ago
> ip=$(dig +short chromecast.lan | tail -n 1) This line requires some mdns server setup I believe. I didn't like running avahi and thought there should be some super simple client for this, but after searching I didn't find an
380.
by Foxboron 6y ago
>And my impression was that the usage was more similar to "master copy" than "master of the plantation". Evidently, this is a relic from bitkeeper which uses the "master/slave" terminology. https:&#x2F
381.
by Foxboron 6y ago
That is sadly what you get with an non-commercial all-volunteer distribution. We only have so much time on our hands and Security Team members are productive members of the community holding several roles. More contributors are always neede
382.
Show HN: sbctl – Secure Boot key manager(github.com)
2 points by Foxboron 6y ago|0 comments
383.
by Foxboron 6y ago
>Maybe I missed something, but the boot partition can and should be encrypted as well (depending on the threat level I suppose). It should be authenticated. You can sorta get there with encrypting boot and keep a boot loader off the main
384.
Reproducible builds progress report #3(lists.archlinux.org)
7 points by Foxboron 6y ago|0 comments
385.
by Foxboron 6y ago
> [...] have different opinions about partioning, e.g. limiting access and execution rights and usage for /var, /tmp you are in for an eternal uphill battle against the decisions of 'upstream' and therefore the '
386.
by Foxboron 6y ago
A bit context on NRKbeta from their website. "NRKbeta is NRKs sandbox for technology and media. We write about media, the internet and new technology with a focus on you as the user, and what we at NRK do in this field. We call it a sa
387.
Improving the Secure Boot user experience(linderud.dev)
2 points by Foxboron 6y ago|0 comments
388.
by Foxboron 6y ago
Spending some time trying to write a native Go API for UEFI. Currently trying to go the PKCS7 signing to work. https://github.com/Foxboron/goefi The end goal is to provide better secure boot tooling for people. This is
389.
Packaging LXD for Arch Linux(linderud.dev)
53 points by Foxboron 6y ago|16 comments
390.
by Foxboron 6y ago
Without too much details. But I personally got into LXD while bootstrapping kubeadm clusters with salt. LXD profiles made it very easy to work with compared to alternatives. It's clearly not production stuff, but it works very well for

More ›