RepoJournal
Arch Linux @archlinux
124 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-07-02
stories 55
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

CONNTRACK CRISIS AVERTED: ARCH DEPLOYS SILENT-DROP DETECTION

By RepoJournal · Filed · About Arch Linux · Composed from the cited sources · methodology

Arch infrastructure just plugged a networking time bomb that was silently killing TCP connections on redirect.archlinux.org without anyone knowing.

The conntrack table on the redirect service was filling up faster than anyone realized, and when it hits capacity, the kernel doesn't error out or warn you - it just drops new connections silently [1]. Arch deployed a two-part fix overnight: a Prometheus alert that fires when conntrack entries exceed 80% of the system limit [2], and an immediate increase to the conntrack limit on redirect.archlinux.org itself to prevent the table from filling in the first place [3] [4]. This catches the problem before users do. On the package side, the Haskell ecosystem continues its steady march with data-fix, tasty-inspection-testing, hspec-expectations, and tf-random all moving through staging [5] [6] [7] [8], while fish 4.8.0 hit testing [9] and archweb received a routine update [10].

Action items

References

  1. [1] prometheus: Add alert when conntrack table fills up ↗ archlinux/infrastructure
  2. [2] Merge branch 'add-conntracking-alert' into 'main' ↗ archlinux/infrastructure
  3. [3] Merge branch 'increase-redirect-conntrack-limit' into 'main' ↗ archlinux/infrastructure
  4. [4] Increase conntrack limit for redirect.archlinux.org ↗ archlinux/infrastructure
  5. [5] update haskell-data-fix to 0.3.4-230 in extra-staging-x86_64 archlinux/state ↗
  6. [6] update haskell-tasty-inspection-testing to 0.2.1-465 in extra-staging-x86_64 archlinux/state ↗
  7. [7] update haskell-hspec-expectations to 0.8.4-96 in extra-staging-x86_64 archlinux/state ↗
  8. [8] update haskell-tf-random to 0.5-1222 in extra-staging-x86_64 archlinux/state ↗
  9. [9] update fish to 4.8.0-1 in extra-testing-x86_64 archlinux/state ↗
  10. [10] archweb: Update to latest version ↗ archlinux/infrastructure

$ ls archlinux/reviews/ # the step-back reads

the week in review Kernel v7.2.4-arch1 ships with userns sysctl the month in review August's Arch: AUR hardening, kernel churn, and steady package flow
Full archive → Weekly reviews →

Quick answers

What shipped in Arch Linux on July 2, 2026?
Arch infrastructure just plugged a networking time bomb that was silently killing TCP connections on redirect.archlinux.org without anyone knowing. In total, 55 commits landed.
What were the notable Arch Linux updates?
prometheus: Add alert when conntrack table fills up, Merge branch 'add-conntracking-alert' into 'main', and Merge branch 'increase-redirect-conntrack-limit' into 'main'.
♥

$ log @archlinux --recent

Felix Yan promotes the xmonad stack to extra, moor lands at 2.19.2 50 shipped Synapse 1.161.0 lands in infrastructure, anki promoted to extra 70 shipped Arch ships a CLONE_NEWUSER kill switch in v7.2.6-arch2 59 shipped mise and asusctl land in extra, tracexec hits 1.0 50 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.