Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Mick
On Friday 19 Aug 2011 23:08:06 Dale wrote:
 Gregory Woodbury wrote:
  The initramfs is a container for modules and stuff need to bring up
  the system before the mounts of
  / and /boot.If all the drivers are built-in to the kernel (or at
  least the minimum required drivers are built-in)
  then the initramfs isn't necessary.
  
  Passing parameters to the kernel is a different issue entirely.
  
  My grub.conf line is:
  kernel /vmlinuz-3.0.3-gentoo root=/dev/sda2
  
  pata_it821x.noraid=1
  
  with the pata_it821x driver built-in for the kenel to find a set of
  older IDE drives on the IT8212 card I have installed.
  
  IIRC the initramfs is built with the mkinitrd command.  I haven't had
  to use it so I could be wrong.
 
 Update with new info.  With udev needing some things in /usr, and /var,
 you will need a init* if /usr and /var is not on / in the near future.
 Yea, real neat.  Some need it already just depends on what is installed
 from what I read.

Give us a link please Dale.

2/3 of my boxen have both /usr and/var on separate partitions and I never had 
to use initramfs (other than boot splash - or whatever it happens to be called 
this month).

-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Dale

Mick wrote:

On Friday 19 Aug 2011 23:08:06 Dale wrote:
   

Gregory Woodbury wrote:
 

The initramfs is a container for modules and stuff need to bring up
the system before the mounts of
/ and /boot.If all the drivers are built-in to the kernel (or at
least the minimum required drivers are built-in)
then the initramfs isn't necessary.

Passing parameters to the kernel is a different issue entirely.

My grub.conf line is:
 kernel /vmlinuz-3.0.3-gentoo root=/dev/sda2

pata_it821x.noraid=1

with the pata_it821x driver built-in for the kenel to find a set of
older IDE drives on the IT8212 card I have installed.

IIRC the initramfs is built with the mkinitrd command.  I haven't had
to use it so I could be wrong.
   

Update with new info.  With udev needing some things in /usr, and /var,
you will need a init* if /usr and /var is not on / in the near future.
Yea, real neat.  Some need it already just depends on what is installed
from what I read.
 

Give us a link please Dale.

2/3 of my boxen have both /usr and/var on separate partitions and I never had
to use initramfs (other than boot splash - or whatever it happens to be called
this month).

   


It was discussed on -dev so far.  This is the subject line:

Warn users not to do separate /usr partition without proper initramfs 
in the handbook?


I think it will apply to /var to at some point.  I think it sucks.  I 
have /var on a separate partition and want to put /usr on one to but not 
now.


I think it can be found on gmane.com.  Again, it is on -dev and yes I 
raised my objections to this but it is UPSTREAM from Gentoo.  Dang 
Fedora or something.  ;-)


Dale

:-)  :-)



Re: [gentoo-user] move to xfce and forget kde and gnome

2011-08-20 Thread Alan McKinnon
On Sat 20 August 2011 00:02:15 Walter Dnes did opine thusly:
 On Sat, Aug 20, 2011 at 01:34:33AM +0100, Peter Humphrey wrote
 
  Interesting - thanks! It found an unused library file (qdbm)
  here that nothing else had.
  
  One suggestion: I'd create cleanscript in /tmp rather than
  wherever I happened to be at the time.
 
   Question... how many people have /tmp on a partition that's
 mounted noexec?  That could be a problem.

Add a variable at the top to define the bin directory to use. Then 
users can change it to whatever suits them.

/tmp is a good default, except when it's mounted noexec.
Same for ~

Almost every reasonable choice will have times when it's not good, so 
rather shift the responsibility over to the end user :-)


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] {OT} rdiff-backup: push or pull?

2011-08-20 Thread Alan McKinnon
On Fri 19 August 2011 12:58:10 Grant did opine thusly:
  Is the purpose of the Host block in .ssh/config to store the
  hostname of the backup server so it doesn't need to be used
  directly in the rdiff-backup command?
  
  It forces key-based authentication when connecting to the backup
  server. The default is password-based, which obviously won't
  work in a cron job.
 I don't use an .ssh/config at all and I'm not prompted for a
 password if the keys are in place.  My sshd_config is pretty much
 default and my normal user is prompted for a password.


sshd can use various schemes for user authentication. The overall 
process is:

user connects
user is authenticated somehow
user's shell is launched

The middle step is highly variable. sshd can do all of it itself using 
only keys, or it could be happy with password authentication, it can 
even use PAM and obey whatever yes/no result PAM comes back with. 

sshd runs as root (therefore with access to /etc/shadow) so it could 
even validate passwords itself if it wanted, bypassing login and PAM 
entirely. This is of course a silly idea, but still technically 
feasible.
.
.ssh/config is only useful when the user desires options different 
from the global defaults in /etc/ssh/sshd_config, or wants to do extra 
actions for specific destination hosts



 
  Why create a password for the backup user?  Doesn't that open
  up the possibility of someone logging in as that user, when
  otherwise the account would only be used for backing up
  files?
  
  It might work without one; in these instructions the
  machine-to-be-backed-up never connects to the backup server as
  root, and so you need a way to SCP stuff to the backup server.
  I usually use a `pwgen 16` password for these accounts and then
  immediately forget it, so nobody will log in to them for a few
  billion years at least.
  
  Does key-based authentication work with no password? I've never
  tried.
 It does! :)
 
 - Grant
-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Alan McKinnon
On Sat 20 August 2011 02:17:06 Dale did opine thusly:
  Update with new info.  With udev needing some things in /usr,
  and /var, you will need a init* if /usr and /var is not on /
  in the near future. Yea, real neat.  Some need it already
  just depends on what is installed from what I read.
 
   
 
  Give us a link please Dale.
  
  2/3 of my boxen have both /usr and/var on separate partitions
  and I never had to use initramfs (other than boot splash - or
  whatever it happens to be called this month).
 
 
 
 It was discussed on -dev so far.  This is the subject line:
 
 Warn users not to do separate /usr partition without proper
 initramfs  in the handbook?
 
 I think it will apply to /var to at some point.  I think it
 sucks.  I  have /var on a separate partition and want to put /usr
 on one to but not now.

Eh? That's fucking braindead. It also violates everything udev ever 
intended to do.

/usr and /var on separate partitions, plus a custom kernel without an 
initramfs is *exactly* the most common use case for Gentoo


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] netqmail blocks maildrop requiered by qmail-scanner.

2011-08-20 Thread Eray Aslan
On Thu, Aug 18, 2011 at 08:47:08PM -0700, fe...@crowfix.com wrote:
 Someone told me to set -tools for maildrop in package.use.  I looked
 up what that does but forget now, so presumably it's not terribly
 important on my system.  Still puzzling.

maildrop, netqmail, courier-imap all install the same file(s) leading to a
file collision.  See bug #61116 for the gory details.  Basically, with
-tools, we do not intall them.

Tying conflicting files to a USE flag does not make me happy either but
it was better than status quo.  An argument can be made though to not
enable the tools flag by default.

-- 
Eray Aslan e...@gentoo.org


signature.asc
Description: Digital signature


Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Dale

Alan McKinnon wrote:

On Sat 20 August 2011 02:17:06 Dale did opine thusly:
   

It was discussed on -dev so far.  This is the subject line:

Warn users not to do separate /usr partition without proper
initramfs  in the handbook?

I think it will apply to /var to at some point.  I think it
sucks.  I  have /var on a separate partition and want to put /usr
on one to but not now.
 

Eh? That's fucking braindead. It also violates everything udev ever
intended to do.

/usr and /var on separate partitions, plus a custom kernel without an
initramfs is *exactly* the most common use case for Gentoo


   


I wish you could convince the devs of that.  I already have /var on its 
own and was planning to put /usr on its own.  I'm not now tho.  Looks 
like /, /boot, /home and that's it for the OS part.  It downright sucks.


You planning to explain this to the devs?  Maybe you will have better 
luck.  They said it is a dev from Fedora that started this . . . . 
crap.  ;-)


Dale

:-)  :-)



Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Alan McKinnon
On Sat 20 August 2011 03:48:18 Dale did opine thusly:
 Alan McKinnon wrote:
  On Sat 20 August 2011 02:17:06 Dale did opine thusly:
  It was discussed on -dev so far.  This is the subject line:
  
  Warn users not to do separate /usr partition without proper
  initramfs  in the handbook?
  
  I think it will apply to /var to at some point.  I think it
  sucks.  I  have /var on a separate partition and want to put
  /usr on one to but not now.
  
  Eh? That's fucking braindead. It also violates everything udev
  ever intended to do.
  
  /usr and /var on separate partitions, plus a custom kernel
  without an initramfs is *exactly* the most common use case for
  Gentoo
 I wish you could convince the devs of that.  I already have /var on
 its own and was planning to put /usr on its own.  I'm not now tho. 
 Looks like /, /boot, /home and that's it for the OS part.  It
 downright sucks.
 
 You planning to explain this to the devs?  Maybe you will have
 better luck.  They said it is a dev from Fedora that started this .
 . . . crap.  ;-)


I'll spend some time I don't have reading the archives, then see.


-- 
alan dot mckinnon at gmail dot com



[gentoo-user] Software for LCD Data Center

2011-08-20 Thread czernitko
Hello list!
I've recently bought LCD television from Panasonic (TX-L32E30E Viera). It is
connected to my home LAN and it should be able to access data on local
computers using some Data Center feature. From what I've heard, it is
something little bit different than common NFS/Samba sharing. It should be
natively supported by Win7 and there may be some applications for WinXP.
Unfortunately no applications were shipped on CD with the telly. I wonder
whether there is some way to connect my home Gentoo server to the telly? Is
there any linux application/specific Samba configuration/...? Have anyone
tried anything similar?

Peter


Re: [gentoo-user] move to xfce and forget kde and gnome

2011-08-20 Thread Peter Humphrey
On Saturday 20 August 2011 09:07:17 Alan McKinnon wrote:

 Add a variable at the top to define the bin directory to use. Then
 users can change it to whatever suits them.
 
 /tmp is a good default, except when it's mounted noexec.
 Same for ~
 
 Almost every reasonable choice will have times when it's not good, so
 rather shift the responsibility over to the end user :-)

Or, as Pandu said, clean up afterwards.

Not knocking your work, Walter - I like the script and I'm grateful.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Gregory Woodbury
On Sat, Aug 20, 2011 at 4:48 AM, Dale rdalek1...@gmail.com wrote:


 I wish you could convince the devs of that.  I already have /var on its own
 and was planning to put /usr on its own.  I'm not now tho.  Looks like /,
 /boot, /home and that's it for the OS part.  It downright sucks.

 You planning to explain this to the devs?  Maybe you will have better luck.
  They said it is a dev from Fedora that started this . . . . crap.  ;-)


What's more, the Fedora dev who did this sh** believes that it's a
religious issue and refuses to discuss it. (personal experience)
He ignores the historical reasons, the advantages of separate partitions,
and even signed off on a bugzilla discussion as WONTFIX.


Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Mick
On Saturday 20 Aug 2011 09:57:46 Alan McKinnon wrote:
 On Sat 20 August 2011 03:48:18 Dale did opine thusly:
  Alan McKinnon wrote:
   On Sat 20 August 2011 02:17:06 Dale did opine thusly:
   It was discussed on -dev so far.  This is the subject line:
   
   Warn users not to do separate /usr partition without proper
   initramfs  in the handbook?
   
   I think it will apply to /var to at some point.  I think it
   sucks.  I  have /var on a separate partition and want to put
   /usr on one to but not now.
   
   Eh? That's fucking braindead. It also violates everything udev
   ever intended to do.
   
   /usr and /var on separate partitions, plus a custom kernel
   without an initramfs is *exactly* the most common use case for
   Gentoo
  
  I wish you could convince the devs of that.  I already have /var on
  its own and was planning to put /usr on its own.  I'm not now tho.
  Looks like /, /boot, /home and that's it for the OS part.  It
  downright sucks.
  
  You planning to explain this to the devs?  Maybe you will have
  better luck.  They said it is a dev from Fedora that started this .
  . . . crap.  ;-)
 
 I'll spend some time I don't have reading the archives, then see.

The very reason I use Gentoo is BECAUSE I don't like RHL.  :(

I still have to use CentOS on a server and curse every time it won't work like 
Gentoo.  Can't they just leave us alone?
-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread David W Noon
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, 20 Aug 2011 03:48:18 -0500, Dale wrote about Re:
[gentoo-user] /dev/sda* missing at boot:

[snip]
I wish you could convince the devs of that.  I already have /var on
its own and was planning to put /usr on its own.  I'm not now tho.
Looks like /, /boot, /home and that's it for the OS part.  It
downright sucks.

I have also been following the discussion on gentoo-dev, although I
currently only lurk there.  I was going to register and post with a
suggestion that everything should be on the root partition; that way we
could rename it C: and be compliant with the industry standard.

However, it gets worse: one cannot safely fsck a partition or logical
volume once it has been mounted.  As things currently stand, there are
no statically linked fsck modules for ext2/3/4, as static linkage was
dropped from e2fsprogs about 3 years ago.  This means for fsck to run
inside an initramfs or intrd, the image will have to contain glibc,
libpthread and a whole slew of other large libraries in order to run
e2fsck with dynamic linkage.  The initramfs will end up being *many*
times larger than the kernel itself. [On my systems, the vmlinuz file
is only about 1.8 megs, and glibc alone makes that look really puny.]

Welcome to progress.
- -- 
Regards,

Dave  [RLU #314465]
==
dwn...@ntlworld.com (David W Noon)
==
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (GNU/Linux)

iEYEARECAAYFAk5Pr8QACgkQRQ2Fs59Psv+S8ACeMadMIjobzT61nCWoVrlqz0Pz
t50AoLZ83Jgw16BIWg7CD2tCb8hrdRzf
=gDyo
-END PGP SIGNATURE-


Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Mick
On Saturday 20 Aug 2011 13:59:42 David W Noon wrote:
 On Sat, 20 Aug 2011 03:48:18 -0500, Dale wrote about Re:
 [gentoo-user] /dev/sda* missing at boot:
 
 [snip]
 
 I wish you could convince the devs of that.  I already have /var on
 its own and was planning to put /usr on its own.  I'm not now tho.
 Looks like /, /boot, /home and that's it for the OS part.  It
 downright sucks.
 
 I have also been following the discussion on gentoo-dev, although I
 currently only lurk there.  I was going to register and post with a
 suggestion that everything should be on the root partition; that way we
 could rename it C: and be compliant with the industry standard.
 
 However, it gets worse: one cannot safely fsck a partition or logical
 volume once it has been mounted.  As things currently stand, there are
 no statically linked fsck modules for ext2/3/4, as static linkage was
 dropped from e2fsprogs about 3 years ago.  This means for fsck to run
 inside an initramfs or intrd, the image will have to contain glibc,
 libpthread and a whole slew of other large libraries in order to run
 e2fsck with dynamic linkage.  The initramfs will end up being *many*
 times larger than the kernel itself. [On my systems, the vmlinuz file
 is only about 1.8 megs, and glibc alone makes that look really puny.]
 
 Welcome to progress.

This is madness.  Is there anything we can do to stop it?
-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Pandu Poluan
Wel...

... the Gentoo project can always fork e2fsprogs ...

... but who will maintain it, then?

Rgds,


On 2011-08-20, Mick michaelkintz...@gmail.com wrote:
 On Saturday 20 Aug 2011 13:59:42 David W Noon wrote:
 On Sat, 20 Aug 2011 03:48:18 -0500, Dale wrote about Re:
 [gentoo-user] /dev/sda* missing at boot:

 [snip]

 I wish you could convince the devs of that.  I already have /var on
 its own and was planning to put /usr on its own.  I'm not now tho.
 Looks like /, /boot, /home and that's it for the OS part.  It
 downright sucks.

 I have also been following the discussion on gentoo-dev, although I
 currently only lurk there.  I was going to register and post with a
 suggestion that everything should be on the root partition; that way we
 could rename it C: and be compliant with the industry standard.

 However, it gets worse: one cannot safely fsck a partition or logical
 volume once it has been mounted.  As things currently stand, there are
 no statically linked fsck modules for ext2/3/4, as static linkage was
 dropped from e2fsprogs about 3 years ago.  This means for fsck to run
 inside an initramfs or intrd, the image will have to contain glibc,
 libpthread and a whole slew of other large libraries in order to run
 e2fsck with dynamic linkage.  The initramfs will end up being *many*
 times larger than the kernel itself. [On my systems, the vmlinuz file
 is only about 1.8 megs, and glibc alone makes that look really puny.]

 Welcome to progress.

 This is madness.  Is there anything we can do to stop it?
 --
 Regards,
 Mick



-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/



Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread Alan McKinnon
On Sat 20 August 2011 14:29:15 Mick did opine thusly:
 On Saturday 20 Aug 2011 13:59:42 David W Noon wrote:
  On Sat, 20 Aug 2011 03:48:18 -0500, Dale wrote about Re:
  [gentoo-user] /dev/sda* missing at boot:
  
  [snip]
  
  I wish you could convince the devs of that.  I already have
  /var on its own and was planning to put /usr on its own.  I'm
  not now tho. Looks like /, /boot, /home and that's it for the
  OS part.  It downright sucks.
  
  I have also been following the discussion on gentoo-dev,
  although I currently only lurk there.  I was going to register
  and post with a suggestion that everything should be on the
  root partition; that way we could rename it C: and be compliant
  with the industry standard.
  
  However, it gets worse: one cannot safely fsck a partition or
  logical volume once it has been mounted.  As things currently
  stand, there are no statically linked fsck modules for
  ext2/3/4, as static linkage was dropped from e2fsprogs about 3
  years ago.  This means for fsck to run inside an initramfs or
  intrd, the image will have to contain glibc, libpthread and a
  whole slew of other large libraries in order to run e2fsck with
  dynamic linkage.  The initramfs will end up being *many* times
  larger than the kernel itself. [On my systems, the vmlinuz file
  is only about 1.8 megs, and glibc alone makes that look really
  puny.]
  
  Welcome to progress.
 
 This is madness.  Is there anything we can do to stop it?

Fork.


-- 
alan dot mckinnon at gmail dot com



[gentoo-user] stage3.1 USE flags, okay to 'ignore' differences?

2011-08-20 Thread Pandu Poluan
I hope someone can shed me some light here.

I keep finding myself doing time-consuming emerges for my Gentoo
(virtual) systems (e.g., gcc-4.5.3, glibc-2.13, emerge -e, and so on).
So, I found myself wanting to build a so-called 'stage3.1' tarball
(i.e., a stage3 tarball *plus* the things I did all this time).

Now, my systems have different USE flags, depending on its usage. So
my question is:

Can I just disregard the differences in USE flags for my stage3.1
(e.g., just use the most-minimal amount of USE flags) and do an emerge
-avuND @system @world for every system having a different set of USE
flag? Or should I make one stage3.1 tarball for each USE flag
combination?

Rgds,


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/



Re: [gentoo-user] /dev/sda* missing at boot

2011-08-20 Thread David W Noon
On Sat, 20 Aug 2011 20:58:53 +0700, Pandu Poluan wrote about Re:
[gentoo-user] /dev/sda* missing at boot:

 On 2011-08-20, Mick michaelkintz...@gmail.com wrote:
[snip]
  This is madness.  Is there anything we can do to stop it?

[top posting corrected]
 Wel...
 
 ... the Gentoo project can always fork e2fsprogs ...
 
 ... but who will maintain it, then?

I will be working on this next week.  I hope to resurrect the old
e2fsck.static program by late in the week, as the Makefile recipes
seem to be still there, but the target is no longer on the list.
-- 
Regards,

Dave  [RLU #314465]
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
dwn...@ntlworld.com (David W Noon)
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*


signature.asc
Description: PGP signature


Re: [gentoo-user] stage3.1 USE flags, okay to 'ignore' differences?

2011-08-20 Thread Alan McKinnon
On Sat 20 August 2011 22:13:07 Pandu Poluan did opine thusly:
 I hope someone can shed me some light here.
 
 I keep finding myself doing time-consuming emerges for my Gentoo
 (virtual) systems (e.g., gcc-4.5.3, glibc-2.13, emerge -e, and so
 on). So, I found myself wanting to build a so-called 'stage3.1'
 tarball (i.e., a stage3 tarball *plus* the things I did all this
 time).
 
 Now, my systems have different USE flags, depending on its usage. So
 my question is:
 
 Can I just disregard the differences in USE flags for my stage3.1
 (e.g., just use the most-minimal amount of USE flags) and do an
 emerge -avuND @system @world for every system having a different
 set of USE flag? Or should I make one stage3.1 tarball for each USE
 flag combination?

Either way works. All you have here is a classic case of finding the 
sweet spot that is maximum commonality and minimum hassle to tweak it.

Only you can define where that sweet spot is, as the answer relies on 
things like how much resources you have to re-compile, the number of 
re-emerging to be done, and how little (or much) tolerance you have.

To get a real answer you'd have to give full details on your new 
tarball, USE flags, and how the actual machines using them differ. 
Then describe the impact of those changes and which bits you are happy 
with. I then doubt many people would bother reading and responding :-)

Personally, I consider anything that needs glibc, gcc and the bulk of 
@system to be rebuild to be a PITA and I'd be making different 
tarballs for those once. But if the list of remerges is say 30 perl 
packages then I wouldn't bother and just stick with one tarball as 
that update is about 4 minutes worth of time. But that's just me.


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Software for LCD Data Center

2011-08-20 Thread Mick
On Saturday 20 Aug 2011 10:40:37 czernitko wrote:
 Hello list!
 I've recently bought LCD television from Panasonic (TX-L32E30E Viera). It
 is connected to my home LAN and it should be able to access data on local
 computers using some Data Center feature. From what I've heard, it is
 something little bit different than common NFS/Samba sharing. It should be
 natively supported by Win7 and there may be some applications for WinXP.
 Unfortunately no applications were shipped on CD with the telly. I wonder
 whether there is some way to connect my home Gentoo server to the telly?
 Is there any linux application/specific Samba configuration/...? Have
 anyone tried anything similar?
 
 Peter

Look into:

* media-video/ushare
 Available versions:  
~   1.1a ~amd64 ~x86 [dlna nls]
 Homepage:http://ushare.geexbox.org/
 Description: uShare is a UPnP (TM) A/V  DLNA Media Server

it should work once you connect a wireless (USB?) adaptor to your TV and sort 
out connections across the LAN.

HTH.
-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


[gentoo-user] Do you block outbound ports?

2011-08-20 Thread Grant
I like the policy of blocking all ports in and out with a firewall and
only opening the ones you need.  Bittorrent makes that difficult since
it connects out to unpredictable ports.  Do you block outbound ports
with a firewall or only inbound?

- Grant



[gentoo-user] Mercurial Server

2011-08-20 Thread Nilesh Govindarajan
Hi,

I managed to configure mercurial-server on my gentoo vps, and add my
public key for the root user to it.

I can ssh to hg@myvps.

But this is what I get when I run hg clone ssh://hg@myvps/hgadmin:

running ssh hg@myvps hg -R hgadmin serve --stdio
remote: Traceback (most recent call last):
remote:   File /usr/share/mercurial-server/hg-ssh, line 76, in module
remote: dispatch.dispatch(['-R', repo, 'serve', '--stdio'])
remote:   File
/usr/lib64/python2.7/site-packages/mercurial/dispatch.py, line 31, in
dispatch
remote: if req.ferr:
remote: AttributeError: 'list' object has no attribute 'ferr'
abort: no suitable response from remote hg!

Any clues?

-- 
Nilesh Govindarajan
http://nileshgr.com



Re: [gentoo-user] Do you block outbound ports?

2011-08-20 Thread Alan McKinnon
On Sat 20 August 2011 10:38:43 Grant did opine thusly:
 I like the policy of blocking all ports in and out with a firewall
 and only opening the ones you need.  Bittorrent makes that
 difficult since it connects out to unpredictable ports.  Do you
 block outbound ports with a firewall or only inbound?

For the most part only inbound. Blocking outbound is pretty much 
pointless as a security measure.

You cannot control what people will want to connect to outbound. Every 
time you think you have a complete list, someone will come along and 
provide you with heaps of reasons as to why their request is legit 
(and it usually is!)

What you can control completely is the services you offer and on what 
ports, therefore inbound firewalls make sense.

That's not to say we don't use outbound firewalls at all, we do - as a 
policy measure. Outbound port 25 is blocked so that people will use my 
relays instead. I trust them to play nice, they trust me to keep the 
service up. For us, this works well. But as a security measure the 
entire model falls apart as soon as someone with a clue comes along. I 
have this game I play with our firewall/security people where I get to 
look smug. Tool of choice? ssh

The security benefits from outbound connections to my mind are:
warm-and-fuzzy security
cover-your-ass security
just-do-whatever-the-damn-auditor-says-so-he-can-stfu security
i-don't-know-what-i'm-doing security

but almost never real security. That's better done with permanent ACLs 
on the routers.

-- 
alan dot mckinnon at gmail dot com



[gentoo-user] Re: Do you block outbound ports?

2011-08-20 Thread Nikos Chantziaras

On 08/20/2011 08:38 PM, Grant wrote:

I like the policy of blocking all ports in and out with a firewall and
only opening the ones you need.  Bittorrent makes that difficult since
it connects out to unpredictable ports.  Do you block outbound ports
with a firewall or only inbound?


I block neither in nor outbound.  I don't run any kind of firewall 
because its whole point is interfering with network traffic  :-P





Re: [gentoo-user] systemd

2011-08-20 Thread Stefan G. Weichinger
Am 18.08.2011 00:54, schrieb Sebastian Beßler:

 I'd be happy to discuss these things with you gentoo-users.
 
 I will use that offer and will keep you, and everyone else here, up 
 to date and posted.

looking fwd to your report.
greets, Stefan





Re: [gentoo-user] systemd

2011-08-20 Thread Sebastian Beßler
As always when I want to do anything like this there comes something
more important along and occupies all of my time.

So migration to systemd is stoped for now.
Hope I will come to it soon.

Greets
Sebastian

Am 20.08.2011 22:22, schrieb Stefan G. Weichinger:
 looking fwd to your report.
 greets, Stefan



signature.asc
Description: OpenPGP digital signature


[gentoo-user] emerging glib fails to create .la files

2011-08-20 Thread Philip Webb
I've run into a strange problem updating my netbook.
I merged  glib-2.28.8  successfully as part of a Revdep-Rebuild job,
it being a dep for one of the pkgs in the R-R list.
However after that, merging  gtk+-2.24.4  librsvg-2.34.0  libglade-2.6.4
all failed with a libtool error : libtool: link: /usr/lib/libgio-2.0.0.la
is not a valid libtool archive or ditto for  libgobject ;
indeed, those files do not exist in the netbook,
but in my already updated desktop machine,  glib  did create them.
The  glib  merge msgs did include a recommendation to remerge  dbus-glib ,
but that required  dbus   that too failed with a similar libtool error !
I tried remerging  glib , but it still didn't create the needed  .la  files.

The only item thrown up by Google was a Gentoo forum thread
re a different problem, but recent  suggesting  gcc  needed updating
or users could run into problems with Gnome-type apps.
I'm presently updating to  gcc-4.4.5  (previously 4.4.3),
but that will take   3 hr  in the netbook, so any advice is welcome.

-- 
,,
SUPPORT ___//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT`-O--O---'   purslowatchassdotutorontodotca




Re: [gentoo-user] Mercurial Server

2011-08-20 Thread Matthew Finkel
On Sat, Aug 20, 2011 at 1:51 PM, Nilesh Govindarajan
cont...@nileshgr.comwrote:

 Hi,

 I managed to configure mercurial-server on my gentoo vps, and add my
 public key for the root user to it.

 I can ssh to hg@myvps.

 But this is what I get when I run hg clone ssh://hg@myvps/hgadmin:

 running ssh hg@myvps hg -R hgadmin serve --stdio
 remote: Traceback (most recent call last):
 remote:   File /usr/share/mercurial-server/hg-ssh, line 76, in module
 remote: dispatch.dispatch(['-R', repo, 'serve', '--stdio'])
 remote:   File
 /usr/lib64/python2.7/site-packages/mercurial/dispatch.py, line 31, in
 dispatch
 remote: if req.ferr:
 remote: AttributeError: 'list' object has no attribute 'ferr'
 abort: no suitable response from remote hg!

 Any clues?

 --
 Nilesh Govindarajan
 http://nileshgr.com


I started to write some questions for you to answer, but then I decided I'd
see if anyone else was having this issue [0]. Maybe that'll help. It looks
like a bug that should be filed.

[0]
http://stackoverflow.com/questions/6730735/troubles-with-mercurial-1-9-and-ssh


Re: [gentoo-user] Do you block outbound ports?

2011-08-20 Thread Paul Hartman
On Sat, Aug 20, 2011 at 12:38 PM, Grant emailgr...@gmail.com wrote:
 I like the policy of blocking all ports in and out with a firewall and
 only opening the ones you need.  Bittorrent makes that difficult since
 it connects out to unpredictable ports.  Do you block outbound ports
 with a firewall or only inbound?

I don't block anything outbound, but my ISP does (mostly MS-stuff that
I don't care about). I do, however, occasionally block all outgoing
just to see what the logs show, so I'm aware of what's happening. But
I don't actively monitor that outbound traffic.

I block everything inbound and only open what's specifically needed. I
use denyhosts and fail2ban to block bad guys from all ports.



[gentoo-user] Hoping someone can help explain distcc to me

2011-08-20 Thread Paul Hartman
Hi,

I have a fast desktop computer and a slow laptop. Both are ~amd64
Gentoo. After some of the recent discussions about Gentoo on slow
devices, I thought I'd dust off the laptop and try to bring it up to
date.

I'd like to use distcc to make the desktop do all the compiling during
emerges. I've never been able to get distcc working properly, or, at
least, I've never been able to get it working to the point where using
distcc is any faster than not using it at all.

Desktop: 192.168.0.100
Laptop: 192.168.0.107

My goal is to just don't use the laptop at all. Do all compiling on
the desktop. So far, while it appears to be working (some things are
being compiled on the desktop, a very insignificant amount -- CPU
usage on the desktop is basically 0% during emerges on the laptop),
compile times are no better than just compiling everything on the
laptop. The laptop still has 100% CPU activity during emerges. I
realize the laptop is still going to do work during emerges, but
thought at least distcc might be able to help offload most of the
heavy part (the compiling).

Both machines contain distcc in FEATURES. It's not using
-march=native. I've tried various -jN values with no real difference
in performance.

On the desktop, /etc/conf.d/distcc contains (among other things):
DISTCCD_OPTS=${DISTCCD_OPTS} --allow 192.168.0.0/24
DISTCCD_OPTS=${DISTCCD_OPTS} --listen 192.168.0.100

And /etc/distccd/hosts contains:
192.168.0.0/24

On the laptop, /etc/conf.d/distcc contains (among other things):
DISTCCD_OPTS=${DISTCCD_OPTS} --allow 192.168.0.0/24
DISTCCD_OPTS=${DISTCCD_OPTS} --listen 192.168.0.107

And /etc/distccd/hosts contains:
192.168.0.100

Does anyone know any tricks or can tell me if I'm doing something
wrong? How much of a speed-up should I realistically expect? Should
distcc be able to exploit the fast machine to the fullest of its
abilities?

Thanks



Re: [gentoo-user] emerging glib fails to create .la files : PS

2011-08-20 Thread Philip Webb
Yes, I did run 'lafilefixer --justfixit', but it had no effect.

-- 
,,
SUPPORT ___//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT`-O--O---'   purslowatchassdotutorontodotca




Re: [gentoo-user] emerging glib fails to create .la files

2011-08-20 Thread Dale

Philip Webb wrote:

I've run into a strange problem updating my netbook.
I merged  glib-2.28.8  successfully as part of a Revdep-Rebuild job,
it being a dep for one of the pkgs in the R-R list.
However after that, merging  gtk+-2.24.4  librsvg-2.34.0  libglade-2.6.4
all failed with a libtool error : libtool: link: /usr/lib/libgio-2.0.0.la
is not a valid libtool archive or ditto for  libgobject ;
indeed, those files do not exist in the netbook,
but in my already updated desktop machine,  glib  did create them.
The  glib  merge msgs did include a recommendation to remerge  dbus-glib ,
but that required  dbus  that too failed with a similar libtool error !
I tried remerging  glib , but it still didn't create the needed  .la  files.

The only item thrown up by Google was a Gentoo forum thread
re a different problem, but recent  suggesting  gcc  needed updating
or users could run into problems with Gnome-type apps.
I'm presently updating to  gcc-4.4.5  (previously 4.4.3),
but that will take  3 hr  in the netbook, so any advice is welcome.

   


This is based on a quick read of your post.  If you are just now 
noticing that .la files are missing, you are in for a treat.  They have 
been removing .la files for quite some time now.


I would suggest running revdep-rebuild and it may take a few times.  I'm 
not sure if using a 2.2 version of portage would help on this or not.


Dale

:-)  :-)



Re: [gentoo-user] emerging glib fails to create .la files

2011-08-20 Thread Philip Webb
110820 Dale wrote:
 This is based on a quick read of your post.

Thanks for trying to help, but perhaps a bit too quick (smile) ?

 If you are just now noticing that .la files are missing,
 they have been removing .la files for quite some time now.

As I said, the files were created by the same 'glib' for my desktop.

 I would suggest running revdep-rebuild and it may take a few times.

As I said, I was in the midst of emerging the results of 'R-R --pretend',
when I got into this jam (it couldn't decide the pkg order anyway).

 I'm not sure if using a 2.2 version of portage would help on this or not.

My desktop machine uses 2.1.10.3  there's no similar problem there,
so that seems unlikely to help.

I did update 'gnuconfig', which supports 'libtool',
so perhaps I need to remerge 'libtool',
but that still doesn't explain the missing .la files,
which I can only emphasise were created in my desktop machine.

-- 
,,
SUPPORT ___//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT`-O--O---'   purslowatchassdotutorontodotca




Re: [gentoo-user] Hoping someone can help explain distcc to me

2011-08-20 Thread Peter Humphrey
On Saturday 20 August 2011 23:56:08 Paul Hartman wrote:

 I have a fast desktop computer and a slow laptop. Both are ~amd64
 Gentoo. After some of the recent discussions about Gentoo on slow
 devices, I thought I'd dust off the laptop and try to bring it up to
 date.
 
 I'd like to use distcc to make the desktop do all the compiling during
 emerges. I've never been able to get distcc working properly, or, at
 least, I've never been able to get it working to the point where using
 distcc is any faster than not using it at all.

Your laptop isn't sending its compilation jobs to your desktop. Have you 
used gkrellm or similar to check for network traffic?

I think I'd take a different approach, one that I dare say you can 
anticipate. By all means take the advice you're about to be offered to get 
distcc working, but why not create a chroot on your desktop, NFS export the 
packages directory from the laptop to it and do the whole job there? Then 
return to the laptop and emerge -k. It does need more keystrokes but it uses 
far less CPU. You just need to copy /var/lib/portage/world, make.conf and 
the /etc/portage tree to the chroot before you start.

I did once get distcc working, but as Neil has observed re Atoms, a lot of 
work is still done before compilation is farmed out to the distcc server, 
rather diluting the benefit of distributed compilation.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



Re: [gentoo-user] Hoping someone can help explain distcc to me

2011-08-20 Thread Paul Hartman
On Sat, Aug 20, 2011 at 7:35 PM, Peter Humphrey
pe...@humphrey.ukfsn.org wrote:
 On Saturday 20 August 2011 23:56:08 Paul Hartman wrote:

 I have a fast desktop computer and a slow laptop. Both are ~amd64
 Gentoo. After some of the recent discussions about Gentoo on slow
 devices, I thought I'd dust off the laptop and try to bring it up to
 date.

 I'd like to use distcc to make the desktop do all the compiling during
 emerges. I've never been able to get distcc working properly, or, at
 least, I've never been able to get it working to the point where using
 distcc is any faster than not using it at all.

 Your laptop isn't sending its compilation jobs to your desktop. Have you
 used gkrellm or similar to check for network traffic?

Well, there are definitely some distcc jobs going to the desktop, I
see them, it's just that they finish so fast and there's a long time
between them. The logs indicate it is successfully compiling things.
But, it is in no way saturating the resources of the desktop, which is
what I was (perhaps naively) hoping to see.

 I think I'd take a different approach, one that I dare say you can
 anticipate. By all means take the advice you're about to be offered to get
 distcc working, but why not create a chroot on your desktop, NFS export the
 packages directory from the laptop to it and do the whole job there? Then
 return to the laptop and emerge -k. It does need more keystrokes but it uses
 far less CPU. You just need to copy /var/lib/portage/world, make.conf and
 the /etc/portage tree to the chroot before you start.

 I did once get distcc working, but as Neil has observed re Atoms, a lot of
 work is still done before compilation is farmed out to the distcc server,
 rather diluting the benefit of distributed compilation.

That was going to be my next approach if distcc just doesn't do enough. :)

Could I just export the entire laptop - everything from the root
directory and below - and chroot into that over the network? Then I
wouldn't even need to emerge -k...



Re: [gentoo-user] Hoping someone can help explain distcc to me

2011-08-20 Thread victor romanchuk

 Both machines contain distcc in FEATURES. It's not using
 -march=native. I've tried various -jN values with no real difference
 in performance.

only client (your laptop) machine should be distcc featured. for server
(desktop) that feature is useless

 On the desktop, /etc/conf.d/distcc contains (among other things):
 DISTCCD_OPTS=${DISTCCD_OPTS} --allow 192.168.0.0/24
 DISTCCD_OPTS=${DISTCCD_OPTS} --listen 192.168.0.100

this is server distcc daemon configuration, one just instructs daemon on what
network interface to listen for incoming connections (interface with ip
192.168.0.100 in your case) and filter incoming distcc connections by source
address: allow only those coming from local network machines with ip addresses
192.168.0.1 to 192.168.0.254

then distccd have to be started: /etc/init.d/distccd start

 And /etc/distccd/hosts contains:
 192.168.0.0/24

this file configures distcc client behavior (actually the configuration can be
complex, see distcc man page for details), but in trivial case (for home
computing) it might look like:

192.168.0.100/6 127.0.0.1/1

e.g the client is able to send up to 6 distcc jobs to 192.168.0.100 and limit to
one job at local machine. client's /etc/make.conf has to have distcc feature
enabled (FEATURES=distcc). surely you can play with job distribution rules
around the network. `distcc --show-hosts` command displays what you configured.
the number of cuncurrently running jobs (-j flag) has to be not less than sum of
local and remote jobs

i had noticed that distcc is peevish about CFLAGS: these should be compatible on
both client and server. in my case i made these similar on both machines (laptop
is core2duo and desktop is core2quad; both are running  amd64 arch)

yet another way to install packages on weak notebook running it on the same arch
as desktop runs, - is to create binaries at powerful machine (while emerging or
with quickpkg utility) and share $PKGDIR with laptop

hth



[gentoo-user] [Gentoo install] Disk full at 35%?

2011-08-20 Thread Hilco Wijbenga
Hi all,

It's been quite a few years but I decided to try another Gentoo
install (on a VirtualBox instance). I wanted to try out some new
things...

I created a ton of partitions including /usr (I want to see if I can
get that to work), /portage, and /distfiles. The idea was to mount
/portage on top of /usr and /distfiles on top of /portage. This all
works fine.

However, when I try to extract the Portage snapshot, I get No space
left on device a long way into the untar process. According to df
/portage (i.e. /mnt/gentoo/usr/portage) is only 35% full. In fact, not
a single partition or mount is even close to full (except for
/mnt/static, the DVD).

If I untar directly to /usr (after unmounting /portage), everything
works fine. If I then try to copy or move to /portage, I get the No
space left on device again. And at the same place.

Does anyone know what's going on here? I didn't realize I was doing
such strange things. At least not this early on. :-)

Cheers,
Hilco



Re: [gentoo-user] [Gentoo install] Disk full at 35%?

2011-08-20 Thread covici

Hilco Wijbenga hilco.wijbe...@gmail.com wrote:

 Hi all,
 
 It's been quite a few years but I decided to try another Gentoo
 install (on a VirtualBox instance). I wanted to try out some new
 things...
 
 I created a ton of partitions including /usr (I want to see if I can
 get that to work), /portage, and /distfiles. The idea was to mount
 /portage on top of /usr and /distfiles on top of /portage. This all
 works fine.
 
 However, when I try to extract the Portage snapshot, I get No space
 left on device a long way into the untar process. According to df
 /portage (i.e. /mnt/gentoo/usr/portage) is only 35% full. In fact, not
 a single partition or mount is even close to full (except for
 /mnt/static, the DVD).
 
 If I untar directly to /usr (after unmounting /portage), everything
 works fine. If I then try to copy or move to /portage, I get the No
 space left on device again. And at the same place.
 
 Does anyone know what's going on here? I didn't realize I was doing
 such strange things. At least not this early on. :-)

See if  you are out of inodes. The only way to get the inodes that I am
aware of is to  debugfs to the partition and do stat from within -- if
there is a better way please let me know.  But why not use lvm?


-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

 John Covici
 cov...@ccs.covici.com



Re: [gentoo-user] Hoping someone can help explain distcc to me

2011-08-20 Thread Peter Humphrey
On Sunday 21 August 2011 02:08:51 Paul Hartman wrote:

 Could I just export the entire laptop - everything from the root
 directory and below - and chroot into that over the network? Then I
 wouldn't even need to emerge -k...

No, I tried that and got myself tied in knots - well, actually it was the 
whole portage tree that I exported, not the entire system. I forget what 
went wrong now, but it's definitely cleaner to tell the server to build the 
packages and the client to install from them. The emerge -k step is quick 
too, and you have the advantage that you can see whether the packages are 
actually there, unless you've switched colours off or not specified -v. (I 
once found that they weren't there, which prompted me to go looking for the 
config problem. Like Dale, I'm quite a good tester!)

You just have to make sure that the chroot is identical to the client.

-- 
Rgds
Peter   Linux Counter 5290, 1994-04-23



Re: [gentoo-user] emerging glib fails to create .la files : SOLVED

2011-08-20 Thread Philip Webb
110820 Philip Webb wrote:
 I've run into a strange problem updating my netbook.
 I merged  glib-2.28.8  successfully as part of a Revdep-Rebuild job,
 it being a dep for one of the pkgs in the R-R list.
 However after that, merging  gtk+-2.24.4  librsvg-2.34.0  libglade-2.6.4
 all failed with a libtool error : libtool: link: /usr/lib/libgio-2.0.0.la
 is not a valid libtool archive or ditto for  libgobject ;
 indeed, those files do not exist in the netbook,
 but in my already updated desktop machine,  glib  did create them.

After I updated  gcc  libtool , the other pkgs merged with no problem.
Dale's reply contained a hint : .la files have been dropped,
so the latest  libtool  doesn't look for them presumably;
it still leaves the puzzle why they're present in the desktop machine.

-- 
,,
SUPPORT ___//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT`-O--O---'   purslowatchassdotutorontodotca




Re: [gentoo-user] Mercurial Server

2011-08-20 Thread Nilesh Govindarajan
On 08/21/2011 03:43 AM, Matthew Finkel wrote:
 On Sat, Aug 20, 2011 at 1:51 PM, Nilesh Govindarajan
 cont...@nileshgr.comwrote:
 
 Hi,

 I managed to configure mercurial-server on my gentoo vps, and add my
 public key for the root user to it.

 I can ssh to hg@myvps.

 I started to write some questions for you to answer, but then I decided I'd
 see if anyone else was having this issue [0]. Maybe that'll help. It looks
 like a bug that should be filed.
 
 [0]
 http://stackoverflow.com/questions/6730735/troubles-with-mercurial-1-9-and-ssh
 

Well, that page contains the answer as well. Thanks :-)
It's a dispatch API change.

-- 
Nilesh Govindarajan
http://nileshgr.com



Re: [gentoo-user] emerging glib fails to create .la files

2011-08-20 Thread Dale

Philip Webb wrote:

110820 Dale wrote:
   

This is based on a quick read of your post.
 

Thanks for trying to help, but perhaps a bit too quick (smile) ?

   


I was actually on the puter to check the weather before leaving.  I did 
want to try at least.  From the other post, it appears I did offer a 
hint that helped tho.  That's good enough sometimes.  Wish I had a hint 
to the next lotto numbers.  o_O


Dale

:-)  :-)



Re: [gentoo-user] Hoping someone can help explain distcc to me

2011-08-20 Thread Dale

Peter Humphrey wrote:

On Sunday 21 August 2011 02:08:51 Paul Hartman wrote:

   

Could I just export the entire laptop - everything from the root
directory and below - and chroot into that over the network? Then I
wouldn't even need to emerge -k...
 

No, I tried that and got myself tied in knots - well, actually it was the
whole portage tree that I exported, not the entire system. I forget what
went wrong now, but it's definitely cleaner to tell the server to build the
packages and the client to install from them. The emerge -k step is quick
too, and you have the advantage that you can see whether the packages are
actually there, unless you've switched colours off or not specified -v. (I
once found that they weren't there, which prompted me to go looking for the
config problem. Like Dale, I'm quite a good tester!)

You just have to make sure that the chroot is identical to the client.

   


Since you mentioned me.  I wish I could set up a quicky from my 4 core 
64 bit machine to compile 32 bit packages for a older 2GHz machine that 
belongs to a friend.  I was going to put Mandriva on it but the CD won;t 
boot up properly.  It stops at starting udev.  Gr.


How hard is it to set up a 64 bit machine to compile programs for a 32 
bit system?


Dale

:-)  :-)



Re: [gentoo-user] Hoping someone can help explain distcc to me

2011-08-20 Thread Matthew Finkel
On Sat, Aug 20, 2011 at 10:46 PM, Dale rdalek1...@gmail.com wrote:

 Peter Humphrey wrote:

 On Sunday 21 August 2011 02:08:51 Paul Hartman wrote:



 Could I just export the entire laptop - everything from the root
 directory and below - and chroot into that over the network? Then I
 wouldn't even need to emerge -k...


 No, I tried that and got myself tied in knots - well, actually it was the
 whole portage tree that I exported, not the entire system. I forget what
 went wrong now, but it's definitely cleaner to tell the server to build
 the
 packages and the client to install from them. The emerge -k step is quick
 too, and you have the advantage that you can see whether the packages are
 actually there, unless you've switched colours off or not specified -v. (I
 once found that they weren't there, which prompted me to go looking for
 the
 config problem. Like Dale, I'm quite a good tester!)

 You just have to make sure that the chroot is identical to the client.




 Since you mentioned me.  I wish I could set up a quicky from my 4 core 64
 bit machine to compile 32 bit packages for a older 2GHz machine that belongs
 to a friend.  I was going to put Mandriva on it but the CD won;t boot up
 properly.  It stops at starting udev.  Gr.

 How hard is it to set up a 64 bit machine to compile programs for a 32 bit
 system?

 Dale

 :-)  :-)


It's actually quite easy. IIRC, when I did it last, the only difference is
that when you chroot into the subsystem you need prefix the command with
linux32, e.g. linux32 chroot /path/to/chroot /bin/bash


Re: [gentoo-user] [Gentoo install] Disk full at 35%?

2011-08-20 Thread Paul Hartman
On Sat, Aug 20, 2011 at 8:41 PM, Hilco Wijbenga
hilco.wijbe...@gmail.com wrote:
 However, when I try to extract the Portage snapshot, I get No space
 left on device a long way into the untar process. According to df
 /portage (i.e. /mnt/gentoo/usr/portage) is only 35% full. In fact, not
 a single partition or mount is even close to full (except for
 /mnt/static, the DVD).

Try df -i to check your inode usage.



Re: [gentoo-user] [Gentoo install] Disk full at 35%?

2011-08-20 Thread Hilco Wijbenga
On 20 August 2011 18:52,  cov...@ccs.covici.com wrote:
 Hilco Wijbenga hilco.wijbe...@gmail.com wrote:

 Hi all,

 It's been quite a few years but I decided to try another Gentoo
 install (on a VirtualBox instance). I wanted to try out some new
 things...

 I created a ton of partitions including /usr (I want to see if I can
 get that to work), /portage, and /distfiles. The idea was to mount
 /portage on top of /usr and /distfiles on top of /portage. This all
 works fine.

 However, when I try to extract the Portage snapshot, I get No space
 left on device a long way into the untar process. According to df
 /portage (i.e. /mnt/gentoo/usr/portage) is only 35% full. In fact, not
 a single partition or mount is even close to full (except for
 /mnt/static, the DVD).

 If I untar directly to /usr (after unmounting /portage), everything
 works fine. If I then try to copy or move to /portage, I get the No
 space left on device again. And at the same place.

 Does anyone know what's going on here? I didn't realize I was doing
 such strange things. At least not this early on. :-)

 See if  you are out of inodes. The only way to get the inodes that I am
 aware of is to  debugfs to the partition and do stat from within -- if
 there is a better way please let me know.  But why not use lvm?

Yes, df -i says /portage is out of inodes. I've never run into that
before. I reran mke2fs to increase the inode count and that fixed
things.

Would LVM somehow prevent these sort of things from happening? LVM
doesn't affect inode usage, does it? What exactly are the advantages
of LVM? Is it just that it's easier to resize LVM partitions after the
fact? (That would, of course, already be very useful.)



Re: [gentoo-user] [Gentoo install] Disk full at 35%?

2011-08-20 Thread Hilco Wijbenga
On 20 August 2011 20:05, Paul Hartman paul.hartman+gen...@gmail.com wrote:
 On Sat, Aug 20, 2011 at 8:41 PM, Hilco Wijbenga
 hilco.wijbe...@gmail.com wrote:
 However, when I try to extract the Portage snapshot, I get No space
 left on device a long way into the untar process. According to df
 /portage (i.e. /mnt/gentoo/usr/portage) is only 35% full. In fact, not
 a single partition or mount is even close to full (except for
 /mnt/static, the DVD).

 Try df -i to check your inode usage.

Yes, thanks, I had just found out about df -i myself. :-)



Re: [gentoo-user] [Gentoo install] Disk full at 35%?

2011-08-20 Thread Nilesh Govindarajan
On 08/21/2011 09:00 AM, Hilco Wijbenga wrote:
 Yes, df -i says /portage is out of inodes. I've never run into that
 before. I reran mke2fs to increase the inode count and that fixed
 things.
 

Sorry for the drop in, but I never knew that mke2fs can increase the
number of inodes!
I think I'll now place the portage tree on an ext2 disk image to speed
up things, / has got fragmented badly due to portage tree :-\
Thanks man!

-- 
Nilesh Govindarajan
http://nileshgr.com



Re: [gentoo-user] Do you block outbound ports?

2011-08-20 Thread Pandu Poluan
I can feel for 'just-do-whatever-the-damn-auditor-says-so-he-can-stfu' :)

I don't really block incoming traffic; instead, I use the TARPIT
target (xtables-addons) to make the lifes of portscanners suck ;)

Rgds,


On 2011-08-21, Alan McKinnon alan.mckin...@gmail.com wrote:
 On Sat 20 August 2011 10:38:43 Grant did opine thusly:
 I like the policy of blocking all ports in and out with a firewall
 and only opening the ones you need.  Bittorrent makes that
 difficult since it connects out to unpredictable ports.  Do you
 block outbound ports with a firewall or only inbound?

 For the most part only inbound. Blocking outbound is pretty much
 pointless as a security measure.

 You cannot control what people will want to connect to outbound. Every
 time you think you have a complete list, someone will come along and
 provide you with heaps of reasons as to why their request is legit
 (and it usually is!)

 What you can control completely is the services you offer and on what
 ports, therefore inbound firewalls make sense.

 That's not to say we don't use outbound firewalls at all, we do - as a
 policy measure. Outbound port 25 is blocked so that people will use my
 relays instead. I trust them to play nice, they trust me to keep the
 service up. For us, this works well. But as a security measure the
 entire model falls apart as soon as someone with a clue comes along. I
 have this game I play with our firewall/security people where I get to
 look smug. Tool of choice? ssh

 The security benefits from outbound connections to my mind are:
 warm-and-fuzzy security
 cover-your-ass security
 just-do-whatever-the-damn-auditor-says-so-he-can-stfu security
 i-don't-know-what-i'm-doing security

 but almost never real security. That's better done with permanent ACLs
 on the routers.

 --
 alan dot mckinnon at gmail dot com




-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/



Re: [gentoo-user] [Gentoo install] Disk full at 35%?

2011-08-20 Thread Hilco Wijbenga
On 20 August 2011 21:21, Nilesh Govindarajan cont...@nileshgr.com wrote:
 On 08/21/2011 09:00 AM, Hilco Wijbenga wrote:
 Yes, df -i says /portage is out of inodes. I've never run into that
 before. I reran mke2fs to increase the inode count and that fixed
 things.

 Sorry for the drop in, but I never knew that mke2fs can increase the
 number of inodes!
 I think I'll now place the portage tree on an ext2 disk image to speed
 up things, / has got fragmented badly due to portage tree :-\

Well, for the record, I'm not using ext2 but ext3 (mke2fs -j).
Although, now that I think about it, I suppose there's not much point
in having the Portage tree on a journaled FS.

If you run man mke2fs, you should check out -N and -i. It was
trial-and-error (for me, anyway) to find the right number. Presumably,
-I fits in there somewhere as well. Do note that it only works when
creating the FS, you can't change the inode count dynamically.