Claude (noether)
522f9c0364
build and publish packages / distcc-avahi-aarch64 (push) Successful in 6s
build and publish packages / mesa-panvk-bifrost-aarch64 (push) Successful in 5s
build and publish packages / mesa-panvk-bifrost-video-aarch64 (push) Successful in 5s
build and publish packages / lmcp-any (push) Successful in 5s
build and publish packages / lmcp-debian (push) Successful in 4s
build and publish packages / claude-his-any (push) Successful in 4s
build and publish packages / aish-any (push) Successful in 4s
build and publish packages / ffmpeg-v4l2-request-aarch64 (push) Successful in 4s
build and publish packages / claude-his-debian (push) Successful in 4s
build and publish packages / aish-debian (push) Successful in 5s
build and publish packages / libva-v4l2-request-fourier-aarch64 (push) Successful in 4s
build and publish packages / reauktion-home-ca-any (push) Successful in 4s
build and publish packages / mpv-fourier-aarch64 (push) Successful in 5s
build and publish packages / reauktion-home-ca-debian (push) Successful in 5s
build and publish packages / ffmpeg-v4l2-request-debian (push) Has been cancelled
build and publish packages / libva-v4l2-request-fourier-debian (push) Has been cancelled
build and publish packages / mpv-fourier-debian (push) Has been cancelled
build and publish packages / daedalus-v4l2-debian (push) Has been cancelled
build and publish packages / daedalus-v4l2-dkms-debian (push) Has been cancelled
build and publish packages / sicd-arch (push) Has been cancelled
build and publish packages / sic-agent-arch (push) Has been cancelled
build and publish packages / sicd-debian (push) Has been cancelled
build and publish packages / sic-agent-debian (push) Has been cancelled
Bumps sicd + sic-agent (arch PKGBUILDs, debian build-deb.sh, both changelogs) to
0.2.0-1 against sic tag v0.2.0 (tarball sha fe0569013da5...). New tarball verified
building all four packages locally (debian amd64 debs + arch verifysource) before push.
What 0.2.0 ships (source git.reauktion.de/marfrit/sic @ 4fcd851):
* Nested targets: sic host/hop1/hop2 cmd peels incus/docker/pct container hops,
resolved via /etc/sic/hosts.toml, built as a netstring onion.
* argv boundaries preserved end to end (length-framed [][]byte, never space-split)
-- the founding guarantee: sic host touch 'a b' stays ONE file.
* Daemon dual-reads v1 and v2 (first-byte dispatch), so pre-0.2.0 clients keep
working during the staged rollout.
* Client forwards stdin AFTER the frame (fixes the v0.1.0 zero-byte trap), ssh -T
binary-safe, exit status inherited.
* Hardened + reviewed (bullpen 964/970): outer-length cap before alloc, per-element
and byte caps, explicit canonical argc (empty "" args representable).
Also removes continue-on-error from the four sic CI jobs (sicd/sic-agent x arch/debian)
so a broken build fails the workflow loudly instead of silently producing nothing --
the reason the sic jobs went unnoticed as never-succeeding since 2026-07-19.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
marfrit-packages
Overlay package repository for the reauktion.de infrastructure.
Published at: https://packages.reauktion.de/
Scope
| Tree | Arches | Notes |
|---|---|---|
| Arch Linux ARM (ALARM) | aarch64 |
primary target — Pi 5, Rock 5, ampere, KU-1255 test rigs |
| Arch Linux | x86_64 |
for nuccies / workstations |
| Debian | arm64, amd64 |
for non-Arch hosts |
MIPS is intentionally unsupported. The Fritz!Box is sacred.
Layout (served at packages.reauktion.de)
packages.reauktion.de/
├── arch/
│ ├── aarch64/{marfrit.db,marfrit.files,*.pkg.tar.{xz,zst}{,.sig}}
│ └── x86_64/...
├── debian/
│ ├── dists/
│ │ ├── bookworm/{Release,InRelease,Release.gpg,main/binary-{arm64,amd64}/...}
│ │ └── trixie/...
│ └── pool/main/...
└── marfrit.gpg # public signing key
Adding the repo (Arch / ALARM)
curl -sO https://packages.reauktion.de/marfrit.gpg
sudo pacman-key --add marfrit.gpg
sudo pacman-key --lsign-key 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C
# Paste at the end of /etc/pacman.conf:
[marfrit]
Server = https://packages.reauktion.de/arch/$arch
SigLevel = Required DatabaseRequired
sudo pacman -Sy
Adding the repo (Debian)
sudo install -m 755 -d /etc/apt/keyrings
curl -s https://packages.reauktion.de/marfrit.gpg | \
sudo gpg --dearmor -o /etc/apt/keyrings/marfrit.gpg
echo "deb [signed-by=/etc/apt/keyrings/marfrit.gpg] https://packages.reauktion.de/debian $(lsb_release -cs) main" | \
sudo tee /etc/apt/sources.list.d/marfrit.list
sudo apt update
Signing key
- Fingerprint:
92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C - UID:
Markus Fritsche (marfrit-repo signing) <mfritsche@reauktion.de> - Expires: 2030-04-13
Key management procedures (renewal, rotation, revocation) live in DokuWiki at private:reauktion:marfrit_repo_key (admin-only).
Layout in this Git repo
marfrit-packages/
├── README.md
├── arch/
│ └── distcc-avahi/ # ALARM distcc with --with-avahi
├── debian/ # (future) Debian source packages
└── .gitea/
└── workflows/
└── build.yml # CI pipeline stub
mfritsche@reauktion.de.