Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1281432 > unrolled thread

Bug#1126523: ITP: openarc -- ARC (authenticated Received chain) milter

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1126523: ITP: openarc -- ARC (authenticated Received chain) milter Paul Fisher <paul@pfish.zone> - 2026-02-09 21:20 +0100
    Bug#1126523: ITP: openarc -- ARC (authenticated Received chain) milter Thorsten Glaser <tg@debian.org> - 2026-02-09 21:50 +0100
      Bug#1126523: ITP: openarc -- ARC (authenticated Received chain) milter Paul Fisher <paul@pfish.zone> - 2026-02-15 22:10 +0100
        Bug#1126523: ITP: openarc -- ARC (authenticated Received chain) milter Paul Fisher <paul@pfish.zone> - 2026-02-17 23:00 +0100
          Bug#1126523: ITP: openarc -- ARC (authenticated Received chain) milter Thorsten Glaser <tglaser@b1-systems.de> - 2026-03-06 02:30 +0100

#1281432 — Bug#1126523: ITP: openarc -- ARC (authenticated Received chain) milter

When it rains, it pours, I guess. I didn’t notice this ITP or the
previous experimental package when I started on my own OpenARC
adventure last week, so I ended up learning how to make a Debian
package and making babby’s first package for OpenARC myself. It needs
some polish before it is ready for primetime, but I have a version in
an Ubuntu PPA [1] that I have installed on pfish.zone and (I think) is
fully working (check the full headers on this message).

I threw that work up onto Salsa:

https://salsa.debian.org/pfish/openarc

I cribbed a good bit from the OpenDKIM (and OpenDMARC) packaging
process, though I actually built it by starting with the debmake guide
and working from there. You can feel free to steal my work, or I can
fix it up the rest of the way myself (with a little help and
guidance), or you can just do your own thing.

[1]: https://launchpad.net/~thetorpedodog/+archive/ubuntu/openarc/

[toc] | [next] | [standalone]

#1281437

On Mon, 9 Feb 2026, Paul Fisher wrote:

>When it rains, it pours, I guess. I didn’t notice this ITP or the
>previous experimental package when I started on my own OpenARC

;-)

>adventure last week, so I ended up learning how to make a Debian
>package and making babby’s first package for OpenARC myself. It needs
>some polish before it is ready for primetime, but I have a version in
>an Ubuntu PPA [1] that I have installed on pfish.zone and (I think) is
>fully working (check the full headers on this message).

Another one…

>I threw that work up onto Salsa:
>
>https://salsa.debian.org/pfish/openarc

I’m currently looking at Michael’s (which looks pretty good so far)
but can have a look at whether you spotted anything new that would
be good to merge.

Meanwhile I’ve been trying to get a contact to the maintainer of
the package currently in experimental, to perhaps take it over.

bye,
//mirabilos
-- 
/⁀\ The UTF-8 Ribbon
╲ ╱ Campaign against
 ╳  HTML eMail! Also,
╱ ╲ header encryption!

[toc] | [prev] | [next] | [standalone]

#1282321

On Mon, Feb 9, 2026 at 3:38 PM Thorsten Glaser <tg@debian.org> wrote:
> I’m currently looking at Michael’s (which looks pretty good so far)
> but can have a look at whether you spotted anything new that would
> be good to merge.

I think the only really interesting thing I did was to disable
backgrounding so that systemd directly starts the main openarc process
rather than having openarc fork itself and exit immediately:

https://salsa.debian.org/pfish/openarc/-/blob/67f1c6ec1542457fad68ab0c4a419a5045ddd55b/debian/openarc.conf#L37

On the other side, I could also see wanting to have it fork so that
OpenARC, OpenDKIM, and OpenDMARC all behave the same by default.

Overall I would also agree that Michael’s is probably better overall
(which is not surprising, considering that he has, you know,
experience).

[toc] | [prev] | [next] | [standalone]

#1282587

In the course of working on something else I noticed something in the
existing experimental package: it effectively tries to create
/run/openarc twice (once in the postinst script, and then again with
tmpfiles.d). Also, they disagreed on what mode it should be created in
(post-install: 0755, tmpfiles.d: 0750; post-install wins).

Between cleaning up that duplication and using sysusers.d to create
the openarc user, I think we can eliminate the postinst script
entirely. I uploaded a change which uses RuntimeDirectory=openarc to
create /run/openarc, replacing both postinst and tmpfiles. It’s built
on top of Michael’s latest commit:

https://salsa.debian.org/pfish/openarc/-/commit/a3b779ceda51749c88272858c30974b64ce70752

[toc] | [prev] | [next] | [standalone]

#1284846

On Tue, 17 Feb 2026, Paul Fisher wrote:

>(post-install: 0755, tmpfiles.d: 0750; post-install wins).

Except after a reboot. I did wonder about that postinst part,
especially as it references dpkg-statoverride which only works
for directories actually shipped IIUC. Perhaps this was copied
from another package that had a directory elsewhere than /run?

(IMHO correct would be 02750.)

But, yes, getting rid of that postinst would not be bad.

>Between cleaning up that duplication and using sysusers.d to create

I’m… let’s just say not a systemd person.

Perhaps, if Michael and you want to maintain this, and I just
chime in with what I do know, and forward ↔ our tester…

bye,
//Thorsten
-- 
Thorsten Glaser
Linux / Unix Developer
Tel.: +49 160 91168501
E-Mail: tglaser@b1-systems.de

B1 Systems GmbH
Osterfeldstraße 7 / 85088 Vohburg / https://www.b1-systems.de/
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt, HRB 3537

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web