No, it was happening before I did any of that.
Yes, when I reinstall those it happens again. I wish I had saved the whole output. I know it also happens when I install virtualbox. Also when I install gconf from AUR.
It is possible but I don’t see anything obvious. I haven’t modified it heavily.
You would be surprised. There was a lot of hits just in my .config directory. 
I may have no choice though.
That was the first thing I tried.
I did:
/etc
~/.config
/usr/share/libalpm/hooks
I stole your frogs, the rest of you can keep the monkeys.
Any monkey systemd units, like the monkey http daemon?
systemctl list-units | grep monkey
Is the monkey line being written to pacman log?
Monkey Pacman is a game apparently, no idea if related though.
No
Yes, good thinking.
Here is the list of packages that caused it:
[2020-09-08T17:52:08-0500] [ALPM] upgraded glibc (2.32-3 -> 2.32-4)
[2020-09-08T17:52:08-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:08-0500] [ALPM-SCRIPTLET] Generating locales...
[2020-09-08T17:52:09-0500] [ALPM-SCRIPTLET] en_US.UTF-8... done
[2020-09-08T17:52:09-0500] [ALPM-SCRIPTLET] Generation complete.
[2020-09-08T17:52:11-0500] [ALPM] upgraded systemd (246.3-1 -> 246.4-1)
[2020-09-08T17:52:11-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:24-0500] [ALPM] upgraded libedit (20191231_3.1-1 -> 20191231_3.1-2)
[2020-09-08T17:52:24-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:24-0500] [ALPM] upgraded openssh (8.3p1-3 -> 8.3p1-4)
[2020-09-08T17:52:24-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:27-0500] [ALPM] upgraded flashplugin (32.0.0.414-1 -> 32.0.0.433-1)
[2020-09-08T17:52:27-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:27-0500] [ALPM-SCRIPTLET] :: Flash Player reaches end-of-life on December 31, 2020. After this date,
[2020-09-08T17:52:27-0500] [ALPM-SCRIPTLET] it will be removed from the Arch repos since it is no longer supported.
[2020-09-08T17:52:29-0500] [ALPM] upgraded kwin (5.19.4-1 -> 5.19.5-1)
[2020-09-08T17:52:29-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:31-0500] [ALPM] upgraded ksshaskpass (5.19.4-1 -> 5.19.5-1)
[2020-09-08T17:52:31-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:31-0500] [ALPM] upgraded ksysguard (5.19.4-1 -> 5.19.5-1)
[2020-09-08T17:52:31-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:35-0500] [ALPM] upgraded pepper-flash (32.0.0.414-1 -> 32.0.0.433-1)
[2020-09-08T17:52:35-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:35-0500] [ALPM-SCRIPTLET] :: Flash Player reaches end-of-life on December 31, 2020. After this date,
[2020-09-08T17:52:35-0500] [ALPM-SCRIPTLET] it will be removed from the Arch repos since it is no longer supported.
[2020-09-08T17:52:38-0500] [ALPM] upgraded xorg-server (1.20.9-1 -> 1.20.9-2)
[2020-09-08T17:52:38-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:39-0500] [ALPM] upgraded glusterfs (1:7.6-1 -> 1:8.1-1)
[2020-09-08T17:52:39-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:39-0500] [ALPM-SCRIPTLET] -- Read https://gluster.readthedocs.io/en/latest/Upgrade-Guide/ page!
[2020-09-08T17:52:53-0500] [ALPM] upgraded virtualbox-host-dkms (6.1.12-4 -> 6.1.14-1)
[2020-09-08T17:52:53-0500] [ALPM-SCRIPTLET] monkey
[2020-09-08T17:52:54-0500] [ALPM] upgraded virtualbox (6.1.12-4 -> 6.1.14-1)
[2020-09-08T17:52:54-0500] [ALPM-SCRIPTLET] monkey
Find the first instance and work back, assuming your pacman logs go back that far.
See what packages were introduced between the first monkey “sighting” and the last non monkey “sighting” update.
What’s one of these?
1 ringo@Blackclover ~ % pkgfile monkey
community/brotli-testdata
community/brotli06-testdata
monkey found?
Dunno, but pacman has an option to block these from being run on package install / update.
--noscriptlet
If an install scriptlet exists, do not execute it. Do not use this unless you know what you are
doing.
Is that an .install file which can be included within a PKGBUILD file?
If it is, a grep -R "monkey" /var/lib/pacman might point to something useful.
Some packages contain an .INSTALL file when extracted, which will be executed. The ensuing output is logged with that [ALPM-SCRIPTLET] prefix.
They are saved in /var/lib/pacman/local/$package/install .
Not recommended - these scripts are there for a reason and need to be triggered for proper installation.
glibc install script is reasonably short, triggers the “monkey” output, yet does not contain any line to do so:
$ cat /var/lib/pacman/local/glibc-2.32-4/install
post_upgrade() {
locale-gen
ldconfig -r .
}
Thanks.
Was aware of the .install file, just didn’t associate it with ALPM-SCRIPTLET.
Could re-install one of the relatively insignificant problematic packages (ie pepper-flash) with --noscriptlet and see if mystery monkey appears.
What are the contents of /usr/share/libalpm/hooks/ and /etc/pacman.d/hooks/
There is no destinction between updates and package installation regarding hooks. If a hook is registered to trigger on certain conditions, it will trigger when these conditions are met.
That said - the output in the screenshot is seen way to early. Hooks only get called after all packages have been processed. They are also logged when executed, for example:
[2020-09-06T21:30:47+0200] [ALPM] running 'pacman-cache-cleanup.hook'...
Are you using testing repos?
Which AUR packages are you using?
Nope.
Lots. 
bpytop 1.0.24-1
darktable-lua-scripts-git r790.62e2a79-1
darktable-plugin-enfuse_pro 2.1.6-1
downgrade 8.1.1-1
elisa-git 20.08.1.r47.g62650907-1
imagewriter 1.10.1432200249.1d253d9-11
inxi 3.1.06-1
joplin 1.0.242-1
kde-servicemenus-rootactions 2.9.1-1
kvantum-theme-layan-git r29.ab5b330-1
layan-gtk-theme-git 0.0.0.93d6771-1
layan-kde-git r29.ab5b330-1
looking-glass 2:B1-3
marktext 0.16.2-2
mbuffer 20200505-1
minecraft-launcher 2.1.17417-1
ocs-url 3.1.0-7
onlyoffice-bin 5.6.0-1
opencl-amd 20.30.1109583-1
pikaur 1.6.11-1
popsicle-git 1.1.0.r1.g903614f-1
sayonara-player 1.5.1_stable5-2
slimjet 27.0.7.0-2
softmaker-office-2018-bin 2018.976-1
systemd-kcm 1.2.1-5
tela-icon-theme 2020.06.25-1
ttf-wps-fonts 1.0-5
unigine-heaven 4.0-2
unigine-superposition 1.1-1
vivaldi-widevine 1:4.10.1679.0-1
vmware-component-extractor-git 0.2.b3b995a-3
vmware-keymaps 1.0-1
vmware-workstation 15.5.6-4
vscodium-bin 1.48.2-1
xorg-font-utils 7.6-6
yay 10.0.4-1
yed 1:3.20-1
znapzend 0.20.0-2
Which package manager were you using?
Seems that xorg-font-utils no more exists. If I remember correctly, it has been replaced with other packages.
That issue is so strange that I’d uninstall AUR packages one by one and check if it helps. If not, reinstall that package.
yay
And is your system “pure” EndeavourOS installation or converted from another OS?
Note that this question doesn’t probably help solving it, but just curious…
This is my main workstation so it is Arch.
That being said, “monkey” is a testing phrase I use sometimes so chances are I typed it into a file somewhere accidentally. Which file though has been harder to figure out.
Ah-ha!
Any hooks?
Any aliases or functions related to yay/pacman/etc.?
Some test notifications?
Changed yay source code?
Those came first in mind.