RepoJournal
Arch Linux

@archlinux

The Arch Linux org — the rolling distro and the developers who run it

Pick a date

  1. Wed 20 may
  2. Thu 21 may
  3. Sat 23 may
  4. Sun 24 may
  5. Mon 25 may
  6. Tue 26 may
  7. Thu 28 may
  8. Fri 29 may
  9. Sat 30 may
  10. Sun 31 may
  11. Mon 1 jun
  12. Mon 8 jun
  13. Tue 9 jun
  14. Wed 10 jun
  15. Thu 11 jun
  16. Fri 12 jun
  17. Sat 13 jun
  18. Sun 14 jun
  19. Mon 15 jun
  20. Tue 16 jun
  21. Wed 17 jun
  22. Thu 18 jun
  23. Fri 19 jun
  24. Sat 27 jun
  25. Sun 28 jun
  26. Mon 29 jun
  27. Tue 30 jun
  28. Wed 1 jul
  29. Thu 2 jul
  30. Today 3 jul

The Wire · Showcase

CONNTRACK CRISIS AVERTED: ARCH DEPLOYS SILENT-DROP DETECTION

By RepoJournal · Filed · About Arch Linux

Arch infrastructure just plugged a networking time bomb that was silently killing TCP connections on redirect.archlinux.org without anyone knowing.

The conntrack table on the redirect service was filling up faster than anyone realized, and when it hits capacity, the kernel doesn't error out or warn you - it just drops new connections silently [1]. Arch deployed a two-part fix overnight: a Prometheus alert that fires when conntrack entries exceed 80% of the system limit [2], and an immediate increase to the conntrack limit on redirect.archlinux.org itself to prevent the table from filling in the first place [3] [4]. This catches the problem before users do. On the package side, the Haskell ecosystem continues its steady march with data-fix, tasty-inspection-testing, hspec-expectations, and tf-random all moving through staging [5] [6] [7] [8], while fish 4.8.0 hit testing [9] and archweb received a routine update [10].

Action items

References

  1. [1] prometheus: Add alert when conntrack table fills up archlinux/infrastructure
  2. [2] Merge branch 'add-conntracking-alert' into 'main' archlinux/infrastructure
  3. [3] Merge branch 'increase-redirect-conntrack-limit' into 'main' archlinux/infrastructure
  4. [4] Increase conntrack limit for redirect.archlinux.org archlinux/infrastructure
  5. [5] update haskell-data-fix to 0.3.4-230 in extra-staging-x86_64 archlinux/state
  6. [6] update haskell-tasty-inspection-testing to 0.2.1-465 in extra-staging-x86_64 archlinux/state
  7. [7] update haskell-hspec-expectations to 0.8.4-96 in extra-staging-x86_64 archlinux/state
  8. [8] update haskell-tf-random to 0.5-1222 in extra-staging-x86_64 archlinux/state
  9. [9] update fish to 4.8.0-1 in extra-testing-x86_64 archlinux/state
  10. [10] archweb: Update to latest version archlinux/infrastructure

FAQ

What changed in Arch Linux on July 2, 2026?
Arch infrastructure just plugged a networking time bomb that was silently killing TCP connections on redirect.archlinux.org without anyone knowing.
What should Arch Linux teams do about it?
Monitor conntrack alert in Prometheus for any services with similar patterns • Watch fish 4.8.0 in testing for any shell integration issues before promotion
Which Arch Linux repositories shipped on July 2, 2026?
archlinux/infrastructure, archlinux/state

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.