Misaka13514-AUR/repo

This repository is an unofficial Arch Linux user repository, contains the packages I maintain or co-maintain in AUR, and many other packages that I use.

Powered by lilac.

Usage

Add the following lines to /etc/pacman.conf:

[apeiria]
# Primary server
# User -> OneDrive (Redirected by Cloudflare)
Server = https://aur.apeiria.net/$arch

# Experimental server (may improve connectivity in some regions)
# User -> Cloudflare -> OneDrive
Server = https://aur-cloudflare.apeiria.net/$arch
# User -> Fastly -> Cloudflare -> OneDrive
Server = https://aur-fastly.apeiria.net/$arch

Add my GPG key to the pacman keyring and trust it:

sudo pacman-key --recv-keys 293B93D8A471059F85D716A65BA92099D9BE2DAA
sudo pacman-key --lsign-key 293B93D8A471059F85D716A65BA92099D9BE2DAA

Web index: https://aur.apeiria.net/x86_64/
Archived packages: https://aur.apeiria.net/archive/
Build logs: https://build.apeiria.net/

Issues

• Flag package OUT-OF-DATE by submitting new issues (please follow the template).
  • If the new release is within less than a day, please be patient and wait for up to one day; our bot is likely going to build a new one soon.
• If there is something wrong with provided packages, please submit issues of desired type.

Security

Not all packages in this repository are the same as those in AUR, they have not been thoroughly vetted. Any use of the provided files is at your own risk.

If you find any security issues, please report them to me via email: Misaka13514 at gmail dot com.

Package Integrity

GPG Key (Web of Trust–based trust model)

Packages are signed with my GPG key:

$ gpg --list-keys --with-subkey-fingerprint Misaka13514
pub   ed25519 2023-01-01 [SC] [expires: 2030-01-01]
      293B93D8A471059F85D716A65BA92099D9BE2DAA
sub   cv25519 2023-01-01 [E] [expires: 2030-01-01]
      60B8CFF2C1E82F6B2627A1D76B71F8EC272CFDCF
sub   ed25519 2023-01-01 [A] [expires: 2030-01-01]
      64EBC7BB5FCB344C088D8E11FB305A6788613226
sub   ed25519 2023-01-01 [S] [expires: 2030-01-01]
      D633F6584ECB7AD762166144B4F6D57F0FC9507E

The subkey with the fingerprint D633F6584ECB7AD762166144B4F6D57F0FC9507E is used by GitHub Actions to sign built packages automatically. I will revoke this subkey if it is ever compromised.

The signature is verified by pacman by default when you install the package. You can verify the signature manually by running the following command:

$ gpg --verify path/to/package.pkg.tar.zst.sig path/to/package.pkg.tar.zst

GitHub Attestation (Hosted CI-based trust model)

All packages are built on GitHub Actions. Attestations are published as verifiable provenance and integrity guarantees for each build.

These packages meet the requirements for SLSA v1.0 Build Level 2. You are encouraged to review the build instructions and verify the attestation before trusting the result:

$ gh attestation verify -R Misaka13514-AUR/repo path/to/package.pkg.tar.zst

Repository Availability

The repository is completely built with free platforms (see Architecture). If any of them goes down, or the repository is attacked, the repository will be unavailable. I will try my best to keep the repository online, but I cannot guarantee it.

If you are concerned about the availability of the repository, you can mirror it to your own server: OneDrive share link (read-only).

All files in the repository are stored on OneDrive, which is scanned by Microsoft for malware and viruses. Seems I cannot bypass this scan, if there is a false positive (e.g. nuclei-templates is flagged because there is webshell in it), you will need to download the file manually from the OneDrive share link above, and then install it with pacman -U.

Architecture

flowchart RL
  subgraph USER ["👤 User"]
    USER_PAC["🐧 pacman"]
    USER_WEB["🌐 web"]
  end

  subgraph DEV ["🧙 Maintainer"]
    DEV_MAIL["📬 email"]
    DEV_WEB["🌐 web"]
  end

  subgraph CF ["☁️ Cloudflare Workers"]
    subgraph CF_OD ["📂 Misaka13514-AUR/<br>ODIndex"]
      CF_OD_REPO["📦 apeiria repository"]
      CF_OD_DIR["🖼️ frontend"]
      CF_OD_LOG["📜 lilac log"]
    end
    CF_BUILD["🛠️ Misaka13514-AUR/<br>build-logs"]
  end

  subgraph OD ["🗂️ OneDrive"]
    subgraph OD_PUB ["🌍 Public"]
      OD_REPO["📦 apeiria repository"]
      OD_LOG["📜 lilac log"]
    end
    subgraph OD_PRIV ["🔒 Private"]
      OD_FILE["📄 lilac file"]
    end
  end

  subgraph GA ["⚙️ GitHub Actions"]
    LILAC["🤖 archlinuxcn/lilac"]
  end

  subgraph GH ["🐙 GitHub"]
    GH_REPO["📁 Misaka13514-AUR/<br>repo"]
  end

  subgraph SP ["🛢️ Supabase"]
    SP_DB["🛢️ lilac database"]
  end

  subgraph MG ["📤 Mailgun"]
    MG_MAIL["📧 email sending"]
  end

  subgraph NET ["🌐 Internet"]
    NET_SRC["🗃️ package source"]
    AUR["📁 AUR"]
  end

  %% User data flow
  OD_REPO == Microsoft Graph API ==> CF_OD_REPO
  OD_REPO == Microsoft Graph API ==> CF_OD_DIR
  CF_OD_REPO == HTTPS ===> USER_PAC
  CF_OD_DIR == HTTPS ===> USER_WEB

  %% Maintainer data flow
  OD_LOG == Microsoft Graph API ==> CF_OD_LOG
  MG_MAIL == SMTP ====> DEV_MAIL
  SP_DB == PostgreSQL ===> CF_BUILD
  CF_OD_LOG == HTTPS ==> CF_BUILD
  CF_BUILD == HTTPS ==> DEV_WEB
  CF_OD_LOG -- HTTPS --> DEV_WEB

  %% Developer data flow
  LILAC == rclone ==> OD_LOG
  LILAC <== rclone ==> OD_REPO
  LILAC <== rclone ==> OD_FILE
  LILAC <== PostgreSQL ==> SP_DB
  LILAC == SMTP ==> MG_MAIL
  GH_REPO <==> LILAC
  NET_SRC ==> LILAC
  AUR <==> LILAC

Loading

If you are interested in building your own repository with GitHub Actions without using lilac, you can check out the following projects:

• clansty/arch-build
• arch4edu/cactus

Acknowledgments

Thanks to all contributors:

Thanks to the following projects and services for their support:

• Arch Linux
  The best Linux distribution.

• AUR
  World's largest software repository maintained by thousands of users like me.

• archlinuxcn/lilac
  The build bot. Thanks to @lilydjwg for developing it.

• GitHub
  Platform for hosting the code and CI/CD.

• Cloudflare
  CDN and serverless platform.

  • Misaka13514-AUR/ODIndex Proxy for the OneDrive API.
  • Misaka13514-AUR/build-logs Provide lilac build logs. Thanks to @imlonghao for the original code.

• OneDrive
  5TB cloud storage for hosting the packages. Thanks to @mzwing for providing the E5 subscription.

• Supabase
  Database for storing the lilac build logs.

• Mailgun
  Email service for sending lilac error reports.

• Fastly
  Optional CDN for serving the packages.