Skip to content
Blame Permalink
  • Lars Grüter's avatar
    261c083a
    Make compatible with pacman 7.0.0 · 261c083a
    Lars Grüter authored 
    by removing the restrictions `CapabilityBoundingSet=` in the systemd
service configuration. The new version of pacman now tries to sandbox
the downloading of new packages. With only `CAP_DAC_OVERRIDE` the
download fails, removing it works again.

The more precise fix would be to figure out which additional
capabilities are needed by pacman 7. But let's be pragmatic here.
Long-term the better approach would be to run pacman as non-root anyway.
But that's a TODO for the future if I ever get around to it.
    261c083a
    Make compatible with pacman 7.0.0
    Lars Grüter authored 
    by removing the restrictions `CapabilityBoundingSet=` in the systemd
service configuration. The new version of pacman now tries to sandbox
the downloading of new packages. With only `CAP_DAC_OVERRIDE` the
download fails, removing it works again.

The more precise fix would be to figure out which additional
capabilities are needed by pacman 7. But let's be pragmatic here.
Long-term the better approach would be to run pacman as non-root anyway.
But that's a TODO for the future if I ever get around to it.
To find the state of this project's repository at the time of any of these versions, check out the tags.