8.125. Pacman-7.0.0

The Pacman package contains programs for simulating superuser privileges.

Approximate build time: 0.1 SBU
Required disk space: 25.9 MB

8.125.1. Installation of Pacman

Create the PKGBUILD for the Pacman package with the following commands:

mkdir /sources/pacman
cd /sources/pacman
cat > PKGBUILD << "REALEOF"
# Maintainer: Linux From Scratch <lfs-dev@lists.linuxfromscratch.org>

pkgname="pacman"
pkgver="7.0.0"
pkgrel="1"
pkgdesc="A library-based package manager with dependency support"
arch=('x86'
      'x86_64')
url="https://sources.archlinux.org/"
license=('GPLv2')
groups=('core')
depends=('bash'
         'curl'
         'glibc'
         'gpgme'
         'libarchive')
makedepends=('asciidoc'
             'libxslt')
backup=('etc/pacman.conf'
        'etc/makepkg.conf')
source=("https://sources.archlinux.org/other/pacman/pacman-7.0.0.tar.xz"
        "https://www.linuxfromscratch.org/~dj/pacman-hooks-20210910.tar.xz"
        "makepkg.conf"
        "pacman.conf")
md5sums=('e17ef35f24ad3b3dd3f8ee963554ba37'
         '721fd08ae68cae1a0f0f849436c51145'
         ''
         '')
noextract=('pacman-hooks-20210910.tar.xz')
prepare()
  cd "${pkgname}-${pkgver}"
  # Extract collection of pacman hooks that are useful for LFS
  tar -xf ../pacman-hooks-20210910.tar.xz
}

build(){
  cd "${pkgname}-${pkgver}"
  meson --prefix=/usr \
        --buildtype=plain \
        -Dscriptlet-shell=/usr/bin/bash \
        -Dldconfig=/usr/bin/ldconfig \
        build
  meson compile -C build
}

check() {
  cd "${pkgname}-${pkgver}"
  meson test -C build

  # Install pacman hooks
  # These aren't needed on SysV
  rm -f pacman-hooks-20210910/hooks/*systemd*
  rm -f pacman-hooks-20210910/hooks/dbus-reload.hook
  rm -f pacman-hooks-20210910/scripts/*systemd*

  sed '/^Target/s@/\*@/*.info*@' -i \
     pacman-hooks-20210910/hooks/texinfo-install.hook
  install -vdm755 /usr/share/libalpm/{hooks,scripts}/
  install -vm644  pacman-hooks-20210910/hooks/* \
                  "${pkgdir}/usr/share/libalpm/hooks/"
  install -vm755  pacman-hooks-20210910/scripts/* \
                  "${pkgdir}/usr/share/libalpm/scripts/"
}

package(){
  cd "${pkgname}-${pkgver}"
  DESTDIR="${pkgdir}" meson install -C build
  # Install pacman hooks
  # These aren't needed on SysV
  rm -f pacman-hooks-20210910/hooks/*systemd*
  rm -f pacman-hooks-20210910/hooks/dbus-reload.hook
  rm -f pacman-hooks-20210910/scripts/*systemd*

  sed '/^Target/s@/\*@/*.info*@' -i \
     pacman-hooks-20210910/hooks/texinfo-install.hook
  install -vdm755 /usr/share/libalpm/{hooks,scripts}/
  install -vm644  pacman-hooks-20210910/hooks/* \
                  "${pkgdir}/usr/share/libalpm/hooks/"
  install -vm755  pacman-hooks-20210910/scripts/* \
                  "${pkgdir}/usr/share/libalpm/scripts/"
}
REALEOF

Create the default pacman.conf:

cat > pacman.conf << "REALEOF"
# /etc/pacman.conf
#
# See the pacman.conf(5) manpage for option and repository directives

#
# GENERAL OPTIONS
#
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir     = /
#DBPath      = /var/lib/pacman/
#CacheDir    = /var/cache/pacman/pkg/
#LogFile     = /var/log/pacman.log
#GPGDir      = /etc/pacman.d/gnupg/
#HookDir     = /etc/pacman.d/hooks/
HoldPkg     = pacman glibc
#XferCommand = /usr/bin/curl -L -C - -f -o %o %u
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
Architecture = auto

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
#IgnorePkg   =
#IgnoreGroup =

#NoUpgrade   =
#NoExtract   =

# Misc options
#UseSyslog
#Color
#TotalDownload
CheckSpace
#VerbosePkgLists

# By default, pacman accepts packages signed by keys that its local keyring
# trusts (see pacman-key and its man page), as well as unsigned packages.
SigLevel    = Required DatabaseOptional
LocalFileSigLevel = Optional
#RemoteFileSigLevel = Required

# NOTE: You must run `pacman-key --init` before first using pacman; the local
# keyring can then be populated with the keys of all official Arch Linux
# packagers with `pacman-key --populate archlinux`.

#
# REPOSITORIES
#   - can be defined here or included from another file
#   - pacman will search repositories in the order defined here
#   - local/custom mirrors can be added here or in separate files
#   - repositories listed first will take precedence when packages
#     have identical names, regardless of version number
#   - URLs will have $repo replaced by the name of the current repo
#   - URLs will have $arch replaced by the name of the architecture
#
# Repository entries are of the format:
#       [repo-name]
#       Server = ServerName
#       Include = IncludePath
#
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
#

# An example of a disabled remote package repository with multiple servers
# available. To enable, uncomment the following lines. You can add preferred
# servers immediately after the header and they will be used before the
# default mirrors.
#[core]
#SigLevel = Required
#Server = ftp://ftp.example.com/foobar/$repo/os/$arch/
# The file referenced here should contain a list of 'Server = ' lines.
#Include = /etc/pacman.d/mirrorlist

# An example of a custom package repository.  See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs

[Main]
SigLevel = Optional TrustAll
Server = file:///srv/pacman/repos/Main

[Extra]
SigLevel = Optional TrustAll
Server = file:///srv/pacman/repos/Extra
REALEOF

Create the default makepkg.conf:

cat > makepkg.conf << "REALEOF"
# /etc/makepkg.conf

#########################################################################
# SOURCE ACQUISITION
#########################################################################
#
#-- The download utilities that makepkg should use to acquire sources
#  Format: 'protocol::agent'
DLAGENTS=('file::/usr/bin/curl -qgC - -o %o %u'
          'ftp::/usr/bin/curl -qgfC - --ftp-pasv --retry 3 --retry-delay 3 -o %o %u'
          'http::/usr/bin/curl -qgb "" -fLC - --retry 3 --retry-delay 3 -o %o %u'
          'https::/usr/bin/curl -qgb "" -fLC - --retry 3 --retry-delay 3 -o %o %u'
          'rsync::/usr/bin/rsync --no-motd -z %u %o'
          'scp::/usr/bin/scp -C %u %o')

# Other common tools:
# /usr/bin/snarf
# /usr/bin/lftpget -c
# /usr/bin/wget

#-- The package required by makepkg to download VCS sources
#  Format: 'protocol::package'
VCSCLIENTS=('bzr::breezy'
            'fossil::fossil'
            'git::git'
            'hg::mercurial'
            'svn::subversion')

#########################################################################
# ARCHITECTURE, COMPILE FLAGS
#########################################################################
#
CARCH="x86_64"
CHOST="x86_64-pc-linux-gnu"

#-- Compiler and Linker Flags
#CPPFLAGS=""
CFLAGS="-march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions \
        -Wp,-D_FORTIFY_SOURCE=3 -Wformat -Werror=format-security \
        -fstack-clash-protection -fcf-protection \
        -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"
CXXFLAGS="$CFLAGS -Wp,-D_GLIBCXX_ASSERTIONS"
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed -Wl,-z,relro -Wl,-z,now \
         -Wl,-z,pack-relative-relocs"
LTOFLAGS="-flto=auto"
#-- Make Flags: change this for DistCC/SMP systems
#MAKEFLAGS="-j2"
#-- Debugging flags
DEBUG_CFLAGS="-g"
DEBUG_CXXFLAGS="$DEBUG_CFLAGS"

#########################################################################
# BUILD ENVIRONMENT
#########################################################################
#
# Makepkg defaults: BUILDENV=(!distcc !color !ccache check !sign)
#  A negated environment option will do the opposite of the comments below.
#
#-- distcc:   Use the Distributed C/C++/ObjC compiler
#-- color:    Colorize output messages
#-- ccache:   Use ccache to cache compilation
#-- check:    Run the check() function if present in the PKGBUILD
#-- sign:     Generate PGP signature file
#
BUILDENV=(!distcc color !ccache check !sign)
#
#-- If using DistCC, your MAKEFLAGS will also need modification. In addition,
#-- specify a space-delimited list of hosts running in the DistCC cluster.
#DISTCC_HOSTS=""
#
#-- Specify a directory for package building.
#BUILDDIR=/tmp/makepkg

#########################################################################
# GLOBAL PACKAGE OPTIONS
#   These are default values for the options=() settings
#########################################################################
#
# Makepkg defaults:
# OPTIONS=(!strip docs libtool staticlibs emptydirs !zipman !purge !debug !lto !autodeps)
#  A negated option will do the opposite of the comments below.
#
#-- strip:      Strip symbols from binaries/libraries
#-- docs:       Save doc directories specified by DOC_DIRS
#-- libtool:    Leave libtool (.la) files in packages
#-- staticlibs: Leave static library (.a) files in packages
#-- emptydirs:  Leave empty directories in packages
#-- zipman:     Compress manual (man and info) pages in MAN_DIRS with gzip
#-- purge:      Remove files specified by PURGE_TARGETS
#-- debug:      Add debugging flags as specified in DEBUG_* variables
#-- lto:        Add compile flags for building with link time optimization
#-- autodeps:   Automatically add depends/provides
#
OPTIONS=(strip docs !libtool !staticlibs emptydirs !zipman purge !debug !lto !autodeps)

#-- File integrity checks to use. Valid: ck, md5, sha1, sha224, sha256, sha384, sha512, b2
INTEGRITY_CHECK=(sha256)
#-- Options to be used when stripping binaries. See `man strip' for details.
STRIP_BINARIES="--strip-all"
#-- Options to be used when stripping shared libraries. See `man strip' for details.
STRIP_SHARED="--strip-unneeded"
#-- Options to be used when stripping static libraries. See `man strip' for details.
STRIP_STATIC="--strip-debug"
#-- Manual (man and info) directories to compress (if zipman is specified)
MAN_DIRS=({usr{,/local}{,/share},opt/*}/{man,info})
#-- Doc directories to remove (if !docs is specified)
DOC_DIRS=(usr/{,local/}{,share/}{doc,gtk-doc} opt/*/{doc,gtk-doc})
#-- Files to be removed from all packages (if purge is specified)
PURGE_TARGETS=(usr/{,share}/info/dir .packlist *.pod)
#-- Directory to store source code in for debug packages
DBGSRCDIR="/usr/src/debug"
#-- Prefix and directories for library autodeps
LIB_DIRS=('lib:usr/lib' 'lib32:usr/lib32')

#########################################################################
# PACKAGE OUTPUT
#########################################################################
#
# Default: put built package and cached source in build directory
#
#-- Destination: specify a fixed directory where all packages will be placed
#PKGDEST=/home/packages
#-- Source cache: specify a fixed directory where source files will be cached
#SRCDEST=/home/sources
#-- Source packages: specify a fixed directory where all src packages will be placed
#SRCPKGDEST=/home/srcpackages
#-- Log files: specify a fixed directory where all log files will be placed
#LOGDEST=/home/makepkglogs
#-- Packager: name/email of the person or organization building packages
#PACKAGER="John Doe <john@doe.com>"
#-- Specify a key to use for package signing
#GPGKEY=""

#########################################################################
# COMPRESSION DEFAULTS
#########################################################################
#
COMPRESSGZ=(gzip -c -f -n)
COMPRESSBZ2=(bzip2 -c -f)
COMPRESSXZ=(xz -c -z -)
COMPRESSZST=(zstd -c -z -q -)
COMPRESSLRZ=(lrzip -q)
COMPRESSLZO=(lzop -q)
COMPRESSZ=(compress -c -f)
COMPRESSLZ4=(lz4 -q)
COMPRESSLZ=(lzip -c -f)

#########################################################################
# EXTENSION DEFAULTS
#########################################################################
#
PKGEXT='.pkg.tar.xz'
SRCEXT='.src.tar.xz'

#########################################################################
# OTHER
#########################################################################
#
#-- Command used to run pacman as root, instead of trying sudo and su
PACMAN_AUTH=()
REALEOF

As was done with the GlibC package, we are creating files in the source array on the fly, so we'll need to update the MD5 Sums:

updpkgsums

Prepare the build directory for the pacman user and build the package:

chown -R root:pacman .
chmod 2775 .
chmod 664 PKGBUILD
su pacman -c 'makepkg -L --nodeps'

Add the newly created package to the central package repository:

cp pacman-7.0.0-1-$(uname -m).pkg.tar.xz \
   /srv/pacman/repos/LFS/
repo-add /srv/pacman/repos/LFS/LFS.db.tar.xz \
         /srv/pacman/repos/LFS/pacman-7.0.0-1-$(uname -m).pkg.tar.xz

Update the local cache and install the Pacman package:

pacman -Syu
pacman -S pacman --overwrite \* -dd --noconfirm

Finally, copy the source files into the source repository and clean up the build directory:

mkdir /srv/pacman/source/LFS/pacman
cp PKGBUILD /srv/pacman/source/LFS/pacman
cd /sources
rm -rf pacman

8.125.2. Contents of Pacman

Installed programs: makepkg, makepkg-template, pacman, pacman-conf, pacman-db-upgrade, pacman-key, repo-add, repo-elephant, repo-remove, testpkg, and vercmp
Installed libraries: libalpm.so
Installed directories: /usr/share/makepkg, /usr/share/pacman, and /srv/pacman/repos

Short Descriptions

makepkg

is a script to automate the building of packages.

makepkg-template

is a script to ease the work of maintaining multiple similar PKGBUILDs.

pacman

is a package management utility that tracks installed packages on a Linux system.

pacman-conf

is a utility for parsing the pacman configuration file and returning script-friendly output.

pacman-db-upgrade

is a tool to upgrade the local pacman database to a newer format.

pacman-key

is a wrapper script for GnuPG used to manage pacman’s keyring.

repo-add

is a tool to update a package database by reading a built package file.

repo-elephant

is an internal devleoper command not intended for users or sysadmins.

repo-remove

is a tool to update a package database by removing the package name specified on the command line.

testpkg

is a utility to test a pacman package for validity.

vercmp

is a utility to determine the relationship between two given version numbers.

libalpm.so

is the primary library for package management functions.