Package exists in git but not in AUR?

davidredick · 2018-07-04 21:00:04

Interesting scenario, hopefully someone can explain it to me.

There are git repos for the packages freedink and freedink-data.
That is to say, the command "git clone ssh://aur@aur.archlinux.org/freedink.git" will get stuff.

But if you search for "freedink" on https://aur.archlinux.org you get no results.

I was under the impression that the git warehouse and the website where one in the same.
Is this some sort of AUR3 vs AUR4 mismatch or a case of some sort of bad submission process?

Thank you for your time.

Slithery · 2018-07-04 21:04:36

Did you create the package in the first place?
I receive the following error as I'm not the maintainer...

slithery@red:/tmp$ git clone ssh://aur@aur.archlinux.org/freedink.git
Cloning into 'freedink'...
aur@aur.archlinux.org: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

But you are correct that the repo exists...

slithery@red:/tmp$ git clone https://aur@aur.archlinux.org/freedink.git
Cloning into 'freedink'...
remote: Counting objects: 8, done.
remote: Compressing objects: 100% (8/8), done.
remote: Total 8 (delta 0), reused 8 (delta 0)
Unpacking objects: 100% (8/8), done.

WorMzy · 2018-07-04 21:27:03

Packages that have been 'deleted' are removed from the Web interface, but the git files remain. This is by design. If you want to adopt a 'deleted' package simply clone it, update it, and push it, it will then be listed on the Web interface again (albeit without the votes and comments it had received prior to deletion, I believe).

eschwartz · 2018-07-05 16:08:22

Slithery wrote:

Did you create the package in the first place?
I receive the following error as I'm not the maintainer...

slithery@red:/tmp$ git clone ssh://aur@aur.archlinux.org/freedink.git
Cloning into 'freedink'...
aur@aur.archlinux.org: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

**demystifying how git works**

Using ssh does two things:

1) authenticates your ssh key via your AUR account.
2) blocks *push* access if you're not the maintainer.

You can try this with most git hosters. Anyone with a valid account can use ssh to clone mostly anything. credential *permissions* are only checked for *push* access, and for pull access only in the specific case of, say, "private" repos. If you can clone over unauthenticated git:// or https:// then authenticating over ssh will not suddenly *prevent* you from doing so.

The AUR has no concept of "private" repositories.

Trying to clone over ssh, will first authenticate over ssh, which fails, and then do nothing, because /usr/bin/ssh failed.
Or, it might authenticate over ssh, then succeed and execute:
- for git fetch:
- - git-upload-pack from the ssh shell, a command which requires the fairly innocent read access to a repository on said remote server to find revisions and communicate them back to the ssh connection origin
- for git push
- - git-receive-pack from the ssh shell, a command which requires write access to a repository on said remove server to accept revisions communicated from the ssh connection origin, and write them to disk

Trying to push over git:// is silly, because it has no concept of authentication and who in their right mind gives write access to that. Trying to pull over git:// depends on whether the remote has decided to give the whole world, read access.
Trying to push over https:// has a concept of authentication over https://, and will usually prompt for that (because who in their right mind gives write access without asking for credentials). Trying to pull over https:// depends on whether the remote has decided to give the whole world, read access, and if not, will fall back on prompting for authentication.

But you are correct that the repo exists...

slithery@red:/tmp$ git clone https://aur@aur.archlinux.org/freedink.git
Cloning into 'freedink'...
remote: Counting objects: 8, done.
remote: Compressing objects: 100% (8/8), done.
remote: Total 8 (delta 0), reused 8 (delta 0)
Unpacking objects: 100% (8/8), done.

An https:// url does not need the aur@ bit.

...

As WorMzy said, the AUR, by design, does not ever delete history. The "git warehouse" preserves everything, ever, no matter what, while the website merely provides indexed listings of this as well as additional services like votes and comments that aren't preserved when a package is deleted.

In order to reinstate a package with all the git history (but no comments or votes), you can either

1) push new revisions to the git repository, which is currently ownerless and thus has ssh write permissions for the entire world, at which point the new revisions will trigger the "new package" hook which causes you to register yourself as the owner and receive exclusive write access, then add the website listing, or
2) use the "restore" command via the SSH interface (mentioned at https://wiki.archlinux.org/index.php/Ar … ng_started ), which is identical to 1) except that it triggers the "new package" hook without depending on pushing new changes.

Last edited by eschwartz (2018-07-05 16:10:26)

Arch Linux

#1 2018-07-04 21:00:04

Package exists in git but not in AUR?

#2 2018-07-04 21:04:36

Re: Package exists in git but not in AUR?

#3 2018-07-04 21:27:03

Re: Package exists in git but not in AUR?

#4 2018-07-05 16:08:22

Re: Package exists in git but not in AUR?

Board footer