Package Details: pacman-static 7.0.0.r3.g7736133-9

Git Clone URL: https://aur.archlinux.org/pacman-static.git (read-only, click to copy)
Package Base: pacman-static
Description: Statically-compiled pacman (to fix or install systems without libc)
Upstream URL: https://www.archlinux.org/pacman/
Licenses: GPL-2.0-or-later
Submitter: mazieres
Maintainer: Morganamilo (andreas_baumann)
Last Packager: andreas_baumann
Votes: 57
Popularity: 2.77
First Submitted: 2013-01-09 02:17 (UTC)
Last Updated: 2024-11-23 08:26 (UTC)

Dependencies (5)

Required by (0)

Sources (26)

Pinned Comments

Morganamilo commented on 2022-02-20 18:30 (UTC)

There's now a custom repo and binaries again. Though only for x86_64 currently.

Custom Repo
[pacman-static]
SigLevel = Required
Server = https://pkgbuild.com/~morganamilo/$repo/$arch
Pre compiled binaries

https://pkgbuild.com/~morganamilo/pacman-static/x86_64/bin/

Latest Comments

« First ‹ Previous 1 2 3 4 5 6 7 8 9 .. 13 Next › Last »

andreas_baumann commented on 2024-03-31 09:08 (UTC) (edited on 2024-03-31 09:15 (UTC) by andreas_baumann)

Did I introduce that now with autogen.sh in xz? Checking.. ..didn't build in a clean devtools chroot yet. A, yes. Thanks. Also added git. This is all because autogen.sh in xz needs some more things installed.

deadite66 commented on 2024-03-31 09:01 (UTC) (edited on 2024-03-31 09:04 (UTC) by deadite66)

missing po4a and doxygen makedepends


parallel-tests: installing 'build-aux/test-driver'
+ generate_po4a=y
+ generate_doxygen=y
+ test y '!=' n
+ cd po4a
+ sh update-po
po4a/update-po: The program 'po4a' was not found.
po4a/update-po: Translated man pages were not generated.
==> ERROR: A failure occurred in build().
    Aborting...
 -> error making: pacman-static-exit status 4
 -> Failed to install the following packages. Manual intervention is required:
pacman-static - exit status 4

andreas_baumann commented on 2024-03-31 08:00 (UTC) (edited on 2024-03-31 08:33 (UTC) by andreas_baumann)

Yep, done. Using https://git.tukaani.org/xz.git now. Generating a tarball from git sources directly doesn't contain the backdoored code. And autogen.sh regenerates the autoconf stuff during the build..

yochananmarqos commented on 2024-03-30 19:54 (UTC)

@andreas_baumann: Please use the developer's repo as Arch has done. I know this has all been a confusing mess.

andreas_baumann commented on 2024-03-30 19:25 (UTC) (edited on 2024-03-30 19:32 (UTC) by andreas_baumann)

@BryanLiang: upstream also uses https://git.tukaani.org/xz.git#tag=v${pkgver}") with pkgver=5.6.1. So this is presumably ok to take. But I prefer to wait a little bit for official statements and a 5.6.2 version..

andreas_baumann commented on 2024-03-30 18:40 (UTC)

Another round in the Easter egg hunt for xz 5.4.6, resorting now to the version on SourceForge. Also removed possibly compromised PGP keys.

greyltc commented on 2024-03-30 18:04 (UTC)

Can this please be removed from the package? '22D465F2B4C173803B20C6DE59FCF207FEA7F445') # Jia Tan jiat0218@gmail.com

andreas_baumann commented on 2024-03-30 17:09 (UTC) (edited on 2024-03-30 18:18 (UTC) by andreas_baumann)

@BryanLiang: You don't expect me to use any source tarball I didn't verify myself against the one used in the old pkg source package on archive.org. :-) Fedora happens to have the same tarball for 5.4.6 only, that's why I rather take this one.

BryanLiang commented on 2024-03-30 12:02 (UTC) (edited on 2024-03-30 12:06 (UTC) by BryanLiang)

@andreas_baumann I found a git repo which is still working https://git.tukaani.org/xz.git from a reddit comment.

But I'm not sure the git repo is trusted.

andreas_baumann commented on 2024-03-30 08:41 (UTC) (edited on 2024-03-30 09:31 (UTC) by andreas_baumann)

Strange things happening here with xz:

https://github.com/tukaani-project/xz

This repository has been disabled.

" Access to this repository has been disabled by GitHub Staff due to a violation of GitHub's terms of service. If you are the owner of the repository, you may reach out to GitHub Support for more information. "

More on this https://www.phoronix.com/news/GitHub-Disables-XZ-Repo.

Getting 5.4.6 from Fedora for now. (Could also take them from sources.archive.org, but then the tarball and signature are not easy accessible from there).

Upstream xz 5.6.1 is patched with a versoin from the (for now) not available github repo, so..