This can fail if the tarball indicated by base_cache_tar() is incorrect
or corrupted for some reason. Also switch to bsdtar(1) for consistency.

Signed-off-by: Evangelos Foutras <evangelos@foutrelis.com>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Remove PrivateUsers=yes from paccache.service

See merge request !13

src/paccache.service.in:
As `PrivateUsers=yes` sets up a separate namespace (also for root), all
files are therefore owned by `nobody` to the paccache script and it is
not able to remove any files.

See `PrivateUsers=` in
https://man.archlinux.org/man/systemd.exec.5#SANDBOXING for further
details.

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Switch to EditorConfig from Vim modelines

See merge request pacman/pacman-contrib!9

- Filetype detection occurs automatically after changing the AsciiDoc
  filetype to .adoc from .txt.

- `"let b:current_syntax = 'PKGBUILD'` appears to have no effect.

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Vim: Add ISC and OFL as special licenses

Closes #4

See merge request pacman/pacman-contrib!11

Fixes #4

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

paccache: Use more accurate --min-a/mtime description

Closes #5

See merge request pacman/pacman-contrib!10

.. taken from the --help message.

Thanks to Patrick Smits (@ps0

) for reporting this. Fixes #5

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Update contribution guidelines to use GitLab

See merge request pacman/pacman-contrib!8

Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

checkupdates: fix long option parse check for nosync

See merge request !7

Missed updating this entry from the name of norefresh I used initially.

Add more entries to .gitignore

See merge request pacman/pacman-contrib!6

checkupdates: Provide --nosync option

See merge request !2

PKGBUILD.vim improvements

See merge request pacman/pacman-contrib!5

fix paccache.service

Closes #2

See merge request pacman/pacman-contrib!3

it isn't needed when CPUSchedulingPolicy is set to idle

Frederik “Freso” S. Olesen authored Nov 30, 2021 and Alexander Epaneshnikov committed Dec 07, 2021

RestrictAddressFamilies used to not have an option to restrict all
address families, but systemd 249 introduced a special value "none"
exactly for this purpose.

Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com>

Frederik “Freso” S. Olesen authored Nov 30, 2021 and Alexander Epaneshnikov committed Dec 07, 2021

The SystemCallFilter group @system-service includes some calls
that are necessary for the service unit to run, that are not
included in @file-system.

Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com>

Adds an option to not attempt to sync the CHECKUPDATES_DB. This provides
a way to very quickly get a list of outdated packages provided there is
a different mechanism to update CHECKUPDATES_DB already in place such as
a crontab entry or systemd.timer.

Signed-off-by: Samir Benmendil <me@rmz.io>

Addresses https://lists.archlinux.org/pipermail/pacman-contrib/2021-August/000382.html



Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Thiago Perrotta authored Jul 31, 2021 and Daniel M. Capella committed Aug 02, 2021

`pacman -Fy` is a modern replacement for `pkgfile`[1].

This service/timer makes `pacman -Fy` have feature parity with
`pkgfile`.

The unit files were based on both pkgfile and paccache, for consistency
with the existing ecosystem.

Context: https://bbs.archlinux.org/viewtopic.php?pid=1981076

[1]: https://wiki.archlinux.org/title/Pacman#Search_for_a_package_that_contains_a_specific_file



Signed-off-by: Thiago Perrotta <tbperrotta@gmail.com>
Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Denton Liu authored Apr 01, 2021 and Daniel M. Capella committed Jul 27, 2021

In 19ab4fac (pacdiff: Add option to use sudo/sudoedit to manage files,
2021-03-27), pacdiff was taught to accept -s to run various commands
with $SUDO. This introduced many instances of $SUDO in merge_file()
where most of them are unnecessary.

In particular, it is not necessary to $SUDO to write the temporary files
as /tmp should be writable by all[0][1].

Also, the usage of sudoedit when comparing the original file with the
merge result is unnecessary. This is because root permissions are not
really required since users should not write to the original file
anyway. The merged file will be used to overwrite the original file at
the end of the function anyway.

Remove these unnecessary usages of $SUDO.

[0]: https://unix.stackexchange.com/a/71625
[1]: https://serverfault.com/a/427290



Signed-off-by: Denton Liu <liu.denton@gmail.com>
Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Frederik “Freso” S. Olesen authored Jul 09, 2021 and Daniel M. Capella committed Jul 27, 2021

The unit will be run in the background and is not essential for systems
to operate, so giving it the lowest priority will help make it less
disruptive on its system.

Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com>
Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Frederik “Freso” S. Olesen authored Jul 09, 2021 and Daniel M. Capella committed Jul 27, 2021

Adds a number of sandboxing and other hardening options to the
paccache.service file.

Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com>
Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>

Eli Schwartz authored May 21, 2021 and Daniel M. Capella committed Jul 27, 2021

In the event there are no sources, there won't be sums either. awk won't
find any to remove and replace inline, so it tries to print "" at the
end of the file, and merely adds superfluous newlines.

Abort early instead, since updpkgsums cannot be expected to process such
a file.

Signed-off-by: Eli Schwartz <eschwartz@archlinux.org>
Signed-off-by: Daniel M. Capella <polyzen@archlinux.org>