Upload source files to https://sources.archlinux.org

frealgagu · 2018-03-13 13:35:47

I'm currently the maintainer of package "pcsxr" and I've noticed than older maintainers were using the sources from "https://sources.archlinux.org/other/community/pcsxr/".
However the package was flagged out because there is a more recent version of pcsxr.
There is no an official place with the sources of this package and https://pcsxr.codeplex.com does not reference to any place to download it.
I've found this sources in other distributions such as debian (http://http.debian.net/debian/pool/main … rig.tar.xz) or RPM formats (https://pkgs.org/download/pcsxr)
But I don't want to depend of the availability of that sources in other distribution web page.

Is there any way to request an upload to https://sources.archlinux.org of this sources and be called from my PKGBUILD directly?

Thanks in advance.

Fredy García

Trilby · 2018-03-13 13:54:54

The archlinux url you refer to is for packages in the main repo for which licensing requires that the source code be made available. That's it.

frealgagu wrote:

There is no an official place with the sources of this package and https://pcsxr.codeplex.com does not reference to any place to download it.

If the source isn't available anywhere, how would you build it? It must be *somewhere* or the whole conversation is pointless.

But the second half of the quoted statement is wrong. When I go to that page there is a big purple button reading "download archive". It works.

frealgagu wrote:

But I don't want to depend of the availability of that sources in other distribution web page.

Why not? It looks like upstream has abandonned this, and their page just happens to be archived. Why trust an archive over debian?

Last edited by Trilby (2018-03-13 14:07:28)

frealgagu · 2018-03-13 14:32:37

Trilby wrote:

When I go to that page there is a big purple button reading "download archive". It works.

This download contains no source code tarball, it contains a compiled of discussions and issues as well.

Trilby wrote:

Why trust an archive over debian?

It's not about trust in debian or not, it's about to have a arch community related place to download the tarball.

Trilby wrote:

The archlinux url you refer to is for packages in the main repo for which licensing requires that the source code be made available

That means that pcsxr was in some moment a package in community repository and that's the reason it appears in https://sources.archlinux.org/other/community/pcsxr ?

If the last statement is true then I'll use the rpm web page containing the source tarball.

Thanks for your reply.

Trilby · 2018-03-13 15:08:41

frealgagu wrote:

This download contains no source code tarball, it contains a compiled of discussions and issues as well.

It does contain the source code. It also contains discussions and issues, but the source code is all there. It's just not a convenient way to get it.

frealgagu wrote:

If the last statement is true then I'll use the rpm web page containing the source tarball.

That is true, and that is a good idea.

eschwartz · 2018-03-13 15:49:12

https://sources.archlinux.org/ exists for two reasons:

1) As Trilby said, some licensing schemes require that the same legal entity hosting the binaries, must also host their own copies of the source code. This is the "sources/" directory. It is auto-created via `makepkg --source` and auto-cleaned when the corresponding package is updated/removed.

2) Some packages have no sane way to download sources, and the official packages are therefore built from self-hosted code uploaded by the discretion of the Developer or Trusted User. This is the "other/" directory, and is manually created by the Dev or Trusted User, and cleaned up if and when the creator feels like it.

Regardless of all of this, the sources.archlinux.org resource is only available to Developers and Trusted Users, and is intended to only be used for official repository packages. For AUR packages, you are perfectly capable of re-hosting it yourself using github, we are not offering shell accounts to all Arch users so they can access our repo server and upload random files to an "AUR" directory.

Debian is pretty reliable for this, so I don't see a problem anyways. They've always hosted orig.tar.xz for literally any package they have, and they keep them around I think forever -- they don't drop packages from stable Debian releases, and they have some pretty old still-supported releases, so at an absolute minimum they will keep it around for quite a long time indeed.

Arch Linux

#1 2018-03-13 13:35:47

Upload source files to https://sources.archlinux.org

#2 2018-03-13 13:54:54

Re: Upload source files to https://sources.archlinux.org

#3 2018-03-13 14:32:37

Re: Upload source files to https://sources.archlinux.org

#4 2018-03-13 15:08:41

Re: Upload source files to https://sources.archlinux.org

#5 2018-03-13 15:49:12

Re: Upload source files to https://sources.archlinux.org

Board footer