<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet type="text/xsl" href="../assets/xml/rss.xsl" media="all"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Knowledge Base (Posts about news)</title><link>https://bgstack15.ddns.net/blog/</link><description></description><atom:link href="https://bgstack15.ddns.net/blog/categories/news.xml" rel="self" type="application/rss+xml"></atom:link><language>en</language><copyright>Contents © 2022 &lt;a href="mailto:bgstack15@gmail.com"&gt;bgstack15&lt;/a&gt; 
&lt;a rel="license" href="https://creativecommons.org/licenses/by-sa/4.0/"&gt;
&lt;img alt="Creative Commons License BY-SA"
style="border-width:0; margin-bottom:12px;"
src="https://bgstack15.ddns.net/.images/l_by-sa_4.0_88x31.png"&gt;&lt;/a&gt;</copyright><lastBuildDate>Sat, 05 Nov 2022 13:15:40 GMT</lastBuildDate><generator>Nikola (getnikola.com)</generator><docs>http://blogs.law.harvard.edu/tech/rss</docs><item><title>krb5-auth-dialog and the news</title><link>https://bgstack15.ddns.net/blog/posts/2022/11/05/krb5-auth-dialog-and-the-news/</link><dc:creator>bgstack15</dc:creator><description>&lt;p&gt;With the most recent month's OS updates for Devuan GNU+Linux, I discovered that &lt;a href="https://bgstack15.ddns.net/blog/posts/2021/02/22/show-kerberos-ticket-status-in-system-tray/"&gt;krb5-auth-dialog&lt;/a&gt; has now been updated for the first time in 4+ years!&lt;/p&gt;
&lt;p&gt;The GNOME people have now removed the tray icon, which is the entire reason I wanted the software! So I downgraded to krb5-auth-plugin=3.26.1-4 and that now behaves like I want it to.&lt;/p&gt;
&lt;p&gt;I was perusing /r/linux (that's a subreddit, if the syntax is unfamiliar to you) and came across &lt;a href="https://old.reddit.com/r/Purism/comments/ykblx7/purism_kerberos_authentication_on_the_librem_5/"&gt;Kerberos authentication on the Librem 5&lt;/a&gt; which links to a Purism &lt;a href="https://puri.sm/posts/kerberos-authentication-on-the-librem-5/"&gt;blog post&lt;/a&gt; by Guido Günter, one of the maintainers of krb5-auth-dialog. The screenshots in his article about kerberos on a Purism phone show krb5-auth-dialog, updated for a GTK4 and mobile world! I'm sure his changes fit nicely with that paradigm, and it's good that the software is still maintained.&lt;/p&gt;
&lt;p&gt;That being said, its modern incarnation is useless on a real workstation so I reverted it. I had to download it and store it in a local apt repository.&lt;/p&gt;
&lt;p&gt;Maybe someday I will fork krb5-auth-dialog into krb5-auth-trayicon and merge any changes (such as build with meson instead of GNU Make) that do not relate to deleting the tray icon. There are &lt;a href="https://gitlab.gnome.org/GNOME/krb5-auth-dialog/-/compare/3.26.1...v43.0?from_project_id=414"&gt;122 commits&lt;/a&gt; and 119029 lines in the git diff between branches.&lt;/p&gt;</description><category>devuan</category><category>gtk</category><category>kerberos</category><category>news</category><category>updates</category><guid>https://bgstack15.ddns.net/blog/posts/2022/11/05/krb5-auth-dialog-and-the-news/</guid><pubDate>Sat, 05 Nov 2022 13:07:04 GMT</pubDate></item><item><title>Depending on third-party packages or repos</title><link>https://bgstack15.ddns.net/blog/posts/2019/12/22/depending-on-third-party-packages-or-repos/</link><dc:creator>bgstack15</dc:creator><description>&lt;p&gt;A recent incident has caught my attention, where a Ubuntu PPA owner decided to
&lt;a href="https://old.reddit.com/r/linux/comments/eamh3n/jonathon_f_removed_his_popular_ppas_from_public/"&gt;restrict access to his
PPAs&lt;/a&gt;
after some bad feelings he got from an interaction with a stingy company. As
many in the reddit thread commented, it is unwise to pull in dependencies from
third-parties. You cannot always expect them to remain available, or always
trust them. In fact, you probably &lt;a href="https://it.slashdot.org/story/19/06/08/1940204/how-npm-stopped-a-malicious-upstream-code-update-from-stealing-cryptocurrency"&gt;shouldn't trust
them&lt;/a&gt;. Obviously, there
is a wide spectrum of opinions on the topic. This isn't a moral issue, but it
is an important possibly business-continuity one.&lt;/p&gt;
&lt;h2&gt;Disclosures for my public repositories&lt;/h2&gt;
&lt;p&gt;I package some programs myself, for
&lt;a href="https://copr.fedorainfracloud.org/coprs/bgstack15/stackrpms/"&gt;Fedora/CentOS&lt;/a&gt;
and &lt;a href="https://build.opensuse.org/project/show/home:bgstack15"&gt;Devuan ceres&lt;/a&gt;. Of
course they have dependencies, and a few even have some third-party
dependencies. For some of my projects, I have actually taken the effort to
package up their dependencies as well so my repositories are sufficient (with
main distro repos of course) for the actual package I care about. I made the
decision on CentOS 6, because I don't actually have any extant systems myself,
that I will rely on third-party repositories for some key dependencies. I am
uncertain this information is publicly viewable on the copr, and I do not wish
to hide it. The copr front page shows that the various repos are "[Modified]"
but they do not provide links to what additional repositories they depend on.
And the EPEL8 dependencies are because there were no official repos hosting
certain packages yet, but that should rectified over time.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://copr-be.cloud.fedoraproject.org/results/bgstack15/stackrpms/epel-6-i386/"&gt;copr://bgstack15/stackrpms/epel-6-i386&lt;/a&gt;&lt;ul&gt;
&lt;li&gt;&lt;a href="https://copr-be.cloud.fedoraproject.org/results/ewdurbin/pythons-el6/epel-6-%24basearch/"&gt;copr://ewdurbin/pythons-el6 &lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://copr-be.cloud.fedoraproject.org/results/mlampe/devtoolset-7/epel-6-%24basearch/"&gt;copr://mlampe/devtoolset-7 &lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;a href="https://copr-be.cloud.fedoraproject.org/results/bgstack15/stackrpms/epel-8-x86_64/"&gt;copr://bgstack15/stackrpms/epel-8-x86_64&lt;/a&gt;&lt;ul&gt;
&lt;li&gt;https://download.fedoraproject.org/pub/epel/playground/$releasever/Everything/$basearch/os&lt;/li&gt;
&lt;li&gt;My own repo for a few things that couldn't be built on copr because of weird dependency issues at the time: http://example.no-ip.biz/repo/rpm/ (redacted). Of course I trust this one, but should you?&lt;/li&gt;
&lt;li&gt;&lt;a href="https://copr.fedorainfracloud.org/coprs/nikitines/XFCE/"&gt;copr://nikitines/XFCE&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Holiday greetings&lt;/h2&gt;
&lt;p&gt;Also, happy holidays or Merry Christmas or whatever holiday greetings you
want. This post was originally published on December 22, 2019 so it's the last
one before Christmas.&lt;/p&gt;</description><category>dependencies</category><category>news</category><category>rant</category><category>repo</category><category>trust</category><guid>https://bgstack15.ddns.net/blog/posts/2019/12/22/depending-on-third-party-packages-or-repos/</guid><pubDate>Sun, 22 Dec 2019 14:12:56 GMT</pubDate></item></channel></rss>