Re: [gentoo-user] emerge: The following pkgs are causing rebuilds

2015-12-30 Thread Philip Webb
151230 Harry Putnam wrote:
> emerge output:
>   The following pkgs are causing rebuilds:
>   [list of pkgs]
> I suspect this ground has been covered in depth
> but finding a good discussion of what it means is a different story.
> So, is this bad news?  Or something that needs my attention...?

It doesn't seem to be anything but noise : why does Portage list them ?

-- 
,,
SUPPORT ___//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT`-O--O---'   purslowatchassdotutorontodotca




[gentoo-user] Re: Full system encryption on Gentoo

2015-12-30 Thread Roman Dobosz
On Wed, 30 Dec 2015 07:34:52 +1000
Hans  wrote:

> Is it possible to fully encrypt a Gentoo system as can be done with 
> Fedora, Suse, Arch Linux, Debian and Ubunto without using a unencrypted 
> USB boot stick or unencrypted /boot partition?
> 
> If yes, where can I find instructions that really work on a BIOS only 
> box without UEFI, EFI, systemd using EXT4 file system?

It's definitely possible - for both usb stick or ordinary boot
partition, although it's not quite the same as in distros you've
mentioned, since it require either custom made initramfs or some
utility which would made one for you (like dracut, genkernel etc).

There is several guides which might be useful, just google for one.
It doesn't have to be gentoo specific, since the install procedure is
almost the same, the only difference is the choice of medium for
booting up the encrypted system, bootloader and fstab configuration,
partition layout (with/without lvm) and so on. One of teh most
comprehensive guide about the topic is the Sakaki's EFI Install
Guide [1]. Yeah, I know there is "EFI" word, but it doesn't matter -
you can just skip the part with efi partition and make your own
pendrive (using syslinux) or create unencrypted boot partition :)

[1] https://wiki.gentoo.org/wiki/Sakaki%27s_EFI_Install_Guide

-- 
  -^-  _   something is grinding the emptiness:
   _ /O)_\//   Kohina - 4-Mat - Saturday - C64 (6581r4)
  (_(|__(_(_) grf. http://www.kohina.com



Re: [gentoo-user] major problem after samba update

2015-12-30 Thread lee
cov...@ccs.covici.com writes:

> lee  wrote:
>
>> cov...@ccs.covici.com writes:
>> 
>> > lee  wrote:
>> >
>> >> cov...@ccs.covici.com writes:
>> >> 
>> >> > lee  wrote:
>> >> >
>> >> >> cov...@ccs.covici.com writes:
>> >> >> 
>> >> >> > Hi.  I just upgraded from samba 4.1.x to 4.2.7 and in one of my 
>> >> >> > shares,
>> >> >> > I can not access any subfolders of that share.  It usually gives me 
>> >> >> > some
>> >> >> > kind of windows permission error, or just location not available.
>> >> >> > Windows tells me I can't even display the advanced security settings 
>> >> >> > for
>> >> >> > any folder.  Anyone know what they did and how to fix?  There is a 
>> >> >> > hard
>> >> >> > blocker to downgrading, so maybe something is up.
>> >> >> >
>> >> >> > Thanks in advance for any suggestions.
>> >> >> 
>> >> >> Do they have a changelog which you looked at?  Can you mount these
>> >> >> shares from a Linux client?
>> >> >
>> >> > These are on a Linux server, so there is no problem there.
>> >> 
>> >> Can you definitely mount the share from a remote Linux client without
>> >> problems?
>> >> 
>> >> > Changelog doesn't say anything but the version number.
>> >
>> > I don't have any remote linux client and this is samba, used so that
>> > windows can access the share.
>> 
>> You could make a copy of everything in the inaccessible share, make a
>> new share with settings identical to the settings of the shares that are
>> still accessible when copying has finished, and try to access the new
>> share with a remote client.
>> 
>> If you can access the new share, either something with the old one is
>> weird, or you have changed something like permissions or extended
>> attributes by copying.
>> 
>> 
>> If you cannot access the new share, try a different kernel version (or
>> try a different kernel version first).  I've had a case in which a
>> kernel would freeze/panic when the directory contents of a directory
>> that was exported via NFS were displayed with ls on a NFS client.
>> 
>> IIRC samba uses kernel support on the server.  Perhaps you have a
>> version mismatch between the new samba version and what the kernel
>> supports.
>
> The share is my whole system, so obviously I cannot copy to a new
> share.

You can still try a different kernel, preferably one that is compatible
with the samba version you're using.

Other than that, I don't understand why anyone would try to export the
whole system like that.  It sounds like a recipe for failure to me.



Re: [gentoo-user] Re: Gcc 5.3

2015-12-30 Thread lee
Neil Bothwick  writes:

> On Tue, 29 Dec 2015 19:21:01 +0100, lee wrote:
>
>> > As 4.9.3 is marked stable, I guess that's what'd you get per
>> > default.  
>> 
>> 4.8.5
>> 
>> I'd have to run emerge --sync to know about more recent versions.  How
>> is that supposed to be used, btw?  I only run that when I do want to
>> update everything.  Now if I didn't want to update anything but gcc,
>> could I run emerge --sync and install gcc 5.x without having trouble
>
> Emerge --sync only updates the portage tree, so
>
> emerge --sync
> emerge -a sys-devel/gcc:5
>  
>> with anything else I might install before actually updating everything?
>> So if I'd never explicitly update everything but run emerge --sync
>> frequently, things would be updated over time, occasionally?
>
> No, nothing would get updated. To do that you need to run emerge @world
> after emerge --sync.

Well, yes, but what if want to install a package that hasn't been
installed yet, or re-emerge an installed package with different USE
flags, after updating the portage tree?  Will a more recent version be
installed than would have been installed before the tree was updated,
maybe updating other packages to more recent versions because they are
needed for the new package?

Other distributions usually (want to) update a lot of packages once you
update the information about available packages.

>> > Stuff compiled with older gcc's should run with newer libgcc*[0], but
>> > stuff compililed with a newer gcc might not run with the older
>> > libgcc*. Same goes, with more problems IIRC, for libstdc++.
>> > So beware of that. Apart from that? I'm not aware of problems.  
>> 
>> Uhm ... So I might break the system by switching between compiler
>> versions?
>
> That's highly unlikely as software that has been compiled with the old
> compiler will still work.

And if not?

Just yesterday I tried to update a Fedora install and it failed so that
the machine is now unusable because it only keeps rebooting.  I expected
it to fail, just not that badly ...  If I could find my USB stick, I'd
be putting Gentoo on it now.

> You may find that some programs fail to
> recompile with the new compiler, but I didn't experience that with the
> 4.9>5 step, although I had some that would build with 4.8 but not 4.9.
>
> I have an application which I would like to compile with gcc
>> 5.x just to see if that's even possible.  I could switch, try it, and
>> then switch back.
>
> Exactly, run gcc-config, compile/emerge the program, run gcc-config again.

And what about ccache?  Will it use the new version automatically and
detect that the compiler version has changed so that files in the cache
need to be recompiled?



Re: [gentoo-user] Maybe bug? (glibc related?)

2015-12-30 Thread lee
Elias Diem  writes:

>> Whether this is a bug or not depends on what you're supposed to expect,
>> which I don't know.  If someone would run the test suite on a
>> non-hardened profile and got the same warning from gcc, but vim wouldn't
>> be terminated when the segmentation fault occurs, then I'd be worried.
>
> Ok. Well, I don't know either what to expect. I haven't got 
> enough knowledge to analyse this. I posted it here because I 
> was told so ;-)

Maybe someone knows ...

How do you run the test thing?  I could try and see what happens.



Re: [gentoo-user] major problem after samba update

2015-12-30 Thread covici
lee  wrote:

> cov...@ccs.covici.com writes:
> 
> > lee  wrote:
> >
> >> cov...@ccs.covici.com writes:
> >> 
> >> > lee  wrote:
> >> >
> >> >> cov...@ccs.covici.com writes:
> >> >> 
> >> >> > lee  wrote:
> >> >> >
> >> >> >> cov...@ccs.covici.com writes:
> >> >> >> 
> >> >> >> > Hi.  I just upgraded from samba 4.1.x to 4.2.7 and in one of my 
> >> >> >> > shares,
> >> >> >> > I can not access any subfolders of that share.  It usually gives 
> >> >> >> > me some
> >> >> >> > kind of windows permission error, or just location not available.
> >> >> >> > Windows tells me I can't even display the advanced security 
> >> >> >> > settings for
> >> >> >> > any folder.  Anyone know what they did and how to fix?  There is a 
> >> >> >> > hard
> >> >> >> > blocker to downgrading, so maybe something is up.
> >> >> >> >
> >> >> >> > Thanks in advance for any suggestions.
> >> >> >> 
> >> >> >> Do they have a changelog which you looked at?  Can you mount these
> >> >> >> shares from a Linux client?
> >> >> >
> >> >> > These are on a Linux server, so there is no problem there.
> >> >> 
> >> >> Can you definitely mount the share from a remote Linux client without
> >> >> problems?
> >> >> 
> >> >> > Changelog doesn't say anything but the version number.
> >> >
> >> > I don't have any remote linux client and this is samba, used so that
> >> > windows can access the share.
> >> 
> >> You could make a copy of everything in the inaccessible share, make a
> >> new share with settings identical to the settings of the shares that are
> >> still accessible when copying has finished, and try to access the new
> >> share with a remote client.
> >> 
> >> If you can access the new share, either something with the old one is
> >> weird, or you have changed something like permissions or extended
> >> attributes by copying.
> >> 
> >> 
> >> If you cannot access the new share, try a different kernel version (or
> >> try a different kernel version first).  I've had a case in which a
> >> kernel would freeze/panic when the directory contents of a directory
> >> that was exported via NFS were displayed with ls on a NFS client.
> >> 
> >> IIRC samba uses kernel support on the server.  Perhaps you have a
> >> version mismatch between the new samba version and what the kernel
> >> supports.
> >
> > The share is my whole system, so obviously I cannot copy to a new
> > share.
> 
> You can still try a different kernel, preferably one that is compatible
> with the samba version you're using.
> 
> Other than that, I don't understand why anyone would try to export the
> whole system like that.  It sounds like a recipe for failure to me.

Thanks for your response.

I have been using the same kernel for a while, so I don't think that is
the problem.  Its 4.1 the latest lts.

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

 John Covici
 cov...@ccs.covici.com



[gentoo-user] Re: OT - Midnight Commander and hiding terminal output

2015-12-30 Thread Roman Dobosz
On Tue, 29 Dec 2015 10:00:10 -0700
Skippy  wrote:

> I've been googling to no avail on this one.
>
> When using Midnight Commander, I'll select a file and hit "enter" thus
> opening that file with it's associated program.
>
> Let's say a mp3 file with VLC as that's one I have set up.
>
> It runs, but any error messages from VLC appear in the MC terminal
> window and force the MC display up the screen, thus rendering it unreadable.
>
> I can fix this by exiting VLC and entering "clear" on the command line.
>
> Question is, can I hide all terminal messages when MC is running?  Does
> my question & description make sense?

Just redirect the standard end error output to the void, like:

--- 8< ~/.config/mc/mc.ext ---
include/video2
Open=(mpv -vf-clr %f >/dev/null 2>&1 &)
View=%view{ascii} midentify %f
Edit=if [ -n "$DISPLAY" ]; then (avidemux3_qt4 %f 2>&1 >/dev/null &); fi
--- >8 

so opening the file (pressing enter on the file), or editing it (via
pressing F4) I don;t see any output from neither mpv nor avidemux.
Note, that both of the processes are instantly put to the background
(amperand at the end of the command) so that mc is still operatable.

Hope, that helps :)

--
  -^-  _   something is grinding the emptiness:
   _ /O)_\//   Kohina - Reyn Ouwehand - In Karate - C64 (8580)
  (_(|__(_(_) grf. http://www.kohina.com



Re: [gentoo-user] Kmail2 - I have not given up ... yet

2015-12-30 Thread Mick
On 29 December 2015 at 17:51, J. Roeleveld  wrote:

> On Tuesday, December 29, 2015 04:34:33 PM Mick wrote:
>
> > Can you please advise what GRANTS did you use to create a dedicated
> > postgresql user for akonadi?
>
> Grants?
>

Yes, in the sense that the akonadi user will have certain privileges
granted to be able to create tables, edit them, etc.  I assume your
commands grant all privileges.

I did the following:
> % createuser -P 
> (NOTE: You need to set a password, which is why I use the "-P" option)
>
> % createdb -E UTF8 -O  
>
> My config for this is:
>
> % cat .config/akonadi/akonadiserverrc
> [%General]
> Driver=QPSQL
>
> [QPSQL]
> Name=
> Host=localhost
> Options=
> ServerPath=/usr/bin/pg_ctl
> InitDbPath=/usr/bin/initdb
> StartServer=false
> User=
> Password=
> Port=5432
>
> [Debug]
> Tracer=null
>
> --
> Joost


Having been away from postgres for the best part of 7 years now, it is a
struggle to find my feet again.  As a result I have been chasing my tail on
this task today, not making much progress.  :-(

Ideally, I'd like to keep any akonadi databases in ~/.local/share/akonadi/
for simplicity of backups.  I tried creating a symlink from the default
directory /var/lib/postgresql/9.4/data, but all sort of fs access problems
ensued when I tried to run 'emerge --config dev-db/postgresql:9.4'.  I
tried different ownerships and access rights and eventually I abandoned
this idea just to get things going.  I let pg to install its files in the
default data directory.

Then I created a database and user.  The initial user (akonadidbuser) could
not access the database, so I created a different user the same as my unix
user (michael):

$ psql -U postgres -d postgres
psql (9.4.5)
Type "help" for help.
postgres=# \l
   List of databases
   Name| Owner | Encoding | Collate |Ctype|
Access privileges
---+---+--+-+-+-
 akonadidb | michael | UTF8 | C   | en_GB.UTF-8 | =Tc/michael
 +
   |   |  | | |
michael=CTc/michael
 postgres  | postgres  | UTF8 | C   | en_GB.UTF-8 |
 template0 | postgres  | UTF8 | C   | en_GB.UTF-8 |
=c/postgres+
   |   |  | | |
postgres=CTc/postgres
 template1 | postgres  | UTF8 | C   | en_GB.UTF-8 |
=c/postgres+
   |   |  | | |
postgres=CTc/postgres
(4 rows)


However, when I try to start akonadi it fails because michael is not
allowed to login ...:

Failed to use database "akonadidb"
Database error: "FATAL:  role "michael" is not permitted to log in
QPSQL: Unable to connect"
Trying to create database now...
QSqlDatabasePrivate::removeDatabase: connection 'initConnection' is still
in use, all queries will cease to work.
Database error: Cannot open database.
Last driver error: "QPSQL: Unable to connect"
Last database error: "FATAL:  role "michael" is not permitted to log in
"
Unable to open database "FATAL:  role "michael" is not permitted to log in
QPSQL: Unable to connect"


So eventually, I setup user 'postgres' in
~/.config/akonadi/akonadiserverrc, with no passwd and akonadi was able to
start.  Can you please help me to configure this correctly, so that the
database is saved in my ~/.local fs and akonadi can use it?

This is my akonadiserverrc at the moment:

[%General]
Driver=QPSQL
SizeThreshold=4096
ExternalPayload=false

[QPSQL]
Name=akonadidb
Host=localhost
User=postgres
Password=
Options=
ServerPath=/usr/bin/pg_ctl
InitDbPath=/usr/bin/initdb
StartServer=false
Port=5432

-- 
Regards,
Mick


Re: [gentoo-user] Kmail2 - I have not given up ... yet

2015-12-30 Thread lee
"J. Roeleveld"  writes:

> On Tuesday, December 29, 2015 08:03:25 PM Mick wrote:
>> On Tuesday 29 Dec 2015 17:37:25 lee wrote:
>> > Are we at the point where users are accepting to have to install and
>> > maintain a fully fledged RDBMS just for a single application which
>> > doesn't even need a database in the first place?
>> 
>> Yes, a sad state of affairs indeed.  I was hoping for the last 5-6 years
>> that someone  who can code would come to their senses with this application
>> and agree that not all desktop application use cases require some
>> enterprise level database back end architecture, when a few flat data files
>> have served most users perfectly fine for years.  I mean, do I *really*
>> need a database for less that 60 entries in my address book?!!
>
> I'm no longer convinced a database isn't needed.
> Kmail1 was slower than kmail2 is these days.

We are talking here about a single application.  Are users nowadays
generally willing, inclined and in the position to deploy a RDBMS just
in order to use a single application?  Can they be expected to run
several RDBMSs when the next application comes along and suggests mysql
instead of postgresql?

Ironically, in this case you require the RDBMS to be able to use an
application which is too unstable to be used even without one.  Why not
use a better application for the same purpose instead?  You wouldn't
have to worry about your emails then.



[gentoo-user] snapshots?

2015-12-30 Thread lee
Hi,

soon I'll be replacing the system disks and will copy over the existing
system to the new disks.  I'm wondering how much merit there would be in
being able to make snapshots to be able to revert back to a previous
state when updating software or when installing packages to just try
them out.

To be able to make snapshots, I could use btrfs on the new disks.  When
using btrfs, I could use the hardware RAID-1 as I do now, or I could use
the raid features of btrfs instead to create a RAID-1.


Is it worthwhile to use btrfs?

Am I going to run into problems when trying to boot from the new disks
when I use btrfs?

Am I better off using the hardware raid or software raid if I use btrfs?


The installation/setup is simple: 2x3.5" are to be replaced by 2x2.5",
each 15krpm, 72GB SAS disks, so no fancy partioning is involved.

(I need the physical space to plug in more 3.5" disks for storage.  Sure
I have considered SSDs, but they would cost 20 times as much and provide
no significant advantage in this case.)


I could just replace one disk after the other and let the hardware raid
do it all for me.  A rebuilt takes only 10 minutes or so.  Then I could
convert the file system to btrfs, or leave it as is.  That might even be
the safest bet because I can't miss anything when copying.  (What the
heck do I have it for? :) )


Suggestions?



Re: [gentoo-user] OT: i7-6700, anyone already?

2015-12-30 Thread Stefan G. Weichinger
On 12/15/2015 03:02 PM, Stefan G. Weichinger wrote:
> Am 2015-12-13 um 13:05 schrieb Stefan G. Weichinger:
>> Am 2015-12-13 um 12:50 schrieb Stefan G. Weichinger:
>>> If I pull the mouse down to the bottom of the screen the desktop snaps
>>> into correct place.

For the records and ml-archives:

a later kernel (I am on git-sources now) solved the problem with Gnome
in gentoo.

Right now I am at a complete re-emerge (yes, with portage-tmpdir in RAM)
to get everything performing well.

Ordered plus 8 GB of DDR-RAM just in case ;-)

I am still on stable amd64 right now as I would like to have that box
rather maintenance-free (or at least "low maintenance").

Would using gcc-5.x make a noticeable difference?






[gentoo-user] emerge: The following pkgs are causing rebuilds

2015-12-30 Thread Harry Putnam

emerge output:
  The following pkgs are causing rebuilds:
  [list of pkgs]

I suspect this ground has been covered in depth but finding a good
discussion of what it means is a different story. So, is this bad news?
Or something that needs my attention...?

Maybe someone can point me at some documentation about this.

Is nothing relevant on search term `rebuild' in "man portage".

man emerge has dozens of hits on those search terms but still does not
appear to be relevant.




[gentoo-user] Re: Full system encryption on Gentoo

2015-12-30 Thread Hans

On 31/12/15 09:15, Jeremi Piotrowski wrote:

On Thu, Dec 31, 2015 at 07:45:29AM +1000, Hans wrote:

I can't follow Sakaki's_EFI_Install_Guide. The system will run in
VirtualBox and only have BIOS. No UEFI, EFI, USB stick as boot or key disk.


You should still atleast read the guide to figure out how to get the
encryption part right. You can skip the USB stuff and fallback to BIOS
equivalents of EFI concepts.


I just have to find a way to get the same result using Gentoo with
OpenRC and if possible without LVM.  Entering the pass phrase several
times is no problem.


The steps are more or less the following:

1.  cryptsetup your whole device
2.  mkfs
3.  chroot
4.  install grub with device-mapper flag
5.  install dracut and cryptsetup.
6.  add GRUB_ENABLE_CRYPTODISK=y to /etc/default/grub
7.  grub2-install
8.  set 'hostonly="yes"' in /etc/dracut.conf OR add the output of
`dracut --print-cmdline` to GRUB_CMDLINE_LINUX_DEFAULT in
/etc/default/grub
9.  grub2-mkconfig -o /boot/grub/grub.cfg
10. dracut --regenerate-all

Somewhere between step 3 and 10 you need to build the kernel with atleast the
dm_crypt module. This will lead to you having to enter the password twice -
once when grub starts and once when the initramfs is setting up /.

Check the arch wiki article on the topic [1] for more info, but don't
blindly trust the boot loader part because that is specific to arch's
initramfs generator.

[1]: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system




I have a working VM with Gentoo on LVM on top of LUKS. Works fine in 
change root, Just can't get it to boot. Probably somewhere missed 
something. Will start from scratch using your 10 steps with dracut 
instead of genkernel.


Have a nice New Year
Hans



Re: [gentoo-user] emerge: The following pkgs are causing rebuilds

2015-12-30 Thread Michael Orlitzky
On 12/30/2015 06:54 PM, Harry Putnam wrote:
> 
> emerge output:
>   The following pkgs are causing rebuilds:
>   [list of pkgs]
> 
> I suspect this ground has been covered in depth but finding a good
> discussion of what it means is a different story. So, is this bad news?
> Or something that needs my attention...?
> 

You used to have to run revdep-rebuild to find packages that needed to
be rebuilt after an update. Portage got smarter, and now some of those
rebuilds can be triggered automatically.

It's perfectly normal and expected. The underlying mechanism is subslot
dependencies:

  https://wiki.gentoo.org/wiki/Sub-slots_and_Slot-Operators




[gentoo-user] Re: Full system encryption on Gentoo

2015-12-30 Thread Jeremi Piotrowski
On Thu, Dec 31, 2015 at 07:45:29AM +1000, Hans wrote:
> I can't follow Sakaki's_EFI_Install_Guide. The system will run in 
> VirtualBox and only have BIOS. No UEFI, EFI, USB stick as boot or key disk.

You should still atleast read the guide to figure out how to get the
encryption part right. You can skip the USB stuff and fallback to BIOS
equivalents of EFI concepts.

> I just have to find a way to get the same result using Gentoo with 
> OpenRC and if possible without LVM.  Entering the pass phrase several 
> times is no problem.

The steps are more or less the following:

1.  cryptsetup your whole device
2.  mkfs
3.  chroot
4.  install grub with device-mapper flag
5.  install dracut and cryptsetup.
6.  add GRUB_ENABLE_CRYPTODISK=y to /etc/default/grub
7.  grub2-install
8.  set 'hostonly="yes"' in /etc/dracut.conf OR add the output of 
   `dracut --print-cmdline` to GRUB_CMDLINE_LINUX_DEFAULT in 
   /etc/default/grub
9.  grub2-mkconfig -o /boot/grub/grub.cfg
10. dracut --regenerate-all

Somewhere between step 3 and 10 you need to build the kernel with atleast the
dm_crypt module. This will lead to you having to enter the password twice -
once when grub starts and once when the initramfs is setting up /.

Check the arch wiki article on the topic [1] for more info, but don't
blindly trust the boot loader part because that is specific to arch's
initramfs generator.

[1]: https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system



[gentoo-user] Re: Full system encryption on Gentoo

2015-12-30 Thread Hans
I can't follow Sakaki's_EFI_Install_Guide. The system will run in 
VirtualBox and only have BIOS. No UEFI, EFI, USB stick as boot or key disk.


OpenSuse 42.1 boots from a encrypted single LVM volume on a MSDOS drive, 
single partition, using grub2 as boot manager, and systemd.


I just have to find a way to get the same result using Gentoo with 
OpenRC and if possible without LVM.  Entering the pass phrase several 
times is no problem.


Hans


On 31/12/15 03:53, Roman Dobosz wrote:

On Wed, 30 Dec 2015 07:34:52 +1000
Hans  wrote:


Is it possible to fully encrypt a Gentoo system as can be done with
Fedora, Suse, Arch Linux, Debian and Ubunto without using a unencrypted
USB boot stick or unencrypted /boot partition?

If yes, where can I find instructions that really work on a BIOS only
box without UEFI, EFI, systemd using EXT4 file system?


It's definitely possible - for both usb stick or ordinary boot
partition, although it's not quite the same as in distros you've
mentioned, since it require either custom made initramfs or some
utility which would made one for you (like dracut, genkernel etc).

There is several guides which might be useful, just google for one.
It doesn't have to be gentoo specific, since the install procedure is
almost the same, the only difference is the choice of medium for
booting up the encrypted system, bootloader and fstab configuration,
partition layout (with/without lvm) and so on. One of teh most
comprehensive guide about the topic is the Sakaki's EFI Install
Guide [1]. Yeah, I know there is "EFI" word, but it doesn't matter -
you can just skip the part with efi partition and make your own
pendrive (using syslinux) or create unencrypted boot partition :)

[1] https://wiki.gentoo.org/wiki/Sakaki%27s_EFI_Install_Guide







Re: [gentoo-user] OT: i7-6700, anyone already?

2015-12-30 Thread Stefan G. Weichinger
On 12/30/2015 08:00 PM, Stefan G. Weichinger wrote:

> Would using gcc-5.x make a noticeable difference?

Well, while you all are preparing to reply ...

;-)

... I simply went for it.

unmasked gcc-5.3.0, compiled it, and then recompiled @system and the
kernel ("make localmodconfig" to be curious) with it.

Booted it, snappy, fine!

right now gcc rebuilds itself, some more packages to re-emerge, load at
around 7.5, system usable, audio stream without a hickup.





Re: [gentoo-user] Re: Gcc 5.3

2015-12-30 Thread Paul Colquhoun
On Wed, 30 Dec 2015 17:32:44 lee wrote:
> Neil Bothwick  writes:
> > On Tue, 29 Dec 2015 19:21:01 +0100, lee wrote:
> >> > As 4.9.3 is marked stable, I guess that's what'd you get per
> >> > default.
> >> 
> >> 4.8.5
> >> 
> >> I'd have to run emerge --sync to know about more recent versions.  How
> >> is that supposed to be used, btw?  I only run that when I do want to
> >> update everything.  Now if I didn't want to update anything but gcc,
> >> could I run emerge --sync and install gcc 5.x without having trouble
> > 
> > Emerge --sync only updates the portage tree, so
> > 
> > emerge --sync
> > emerge -a sys-devel/gcc:5
> > 
> >> with anything else I might install before actually updating everything?
> >> So if I'd never explicitly update everything but run emerge --sync
> >> frequently, things would be updated over time, occasionally?
> > 
> > No, nothing would get updated. To do that you need to run emerge @world
> > after emerge --sync.
> 
> Well, yes, but what if want to install a package that hasn't been
> installed yet, or re-emerge an installed package with different USE
> flags, after updating the portage tree?  Will a more recent version be
> installed than would have been installed before the tree was updated,
> maybe updating other packages to more recent versions because they are
> needed for the new package?


You have a couple of options.

First, start with "emerge -p whatever" and see what update would happen with 
no adjustments.

Then try again, but specify the version you want and see if that works: 
"emerge -p =whatever-1.2.3"

If it is still trying to install updated versions of libraries or other 
dependencies, make a file like /etc/portage/package.mask/whatever and block 
anything higher than the library/dependency versions you already have.

A bit more work, but probably not much.

However, if you get too far behind, the versions you want may have been 
removed from the portage tree. This is still not a deal breaker. Old ebuilds 
are available from the Gentoo attic at 
https://sources.gentoo.org/cgi-bin/viewvc.cgi and can be installed in a local 
overlay. (I put mine in 
/usr/local/portage). Just put "PORTDIR_OVERLAY=/usr/local/portage" into 
/etc/portage/make/conf and you should be set.

You could also use the local overlay to just add the updated ebuilds for 
things you do want to upgrade (and required dependency upgrades, etc) but I 
think that would quickly become very unwieldy.



> Other distributions usually (want to) update a lot of packages once you
> update the information about available packages.
> 
> >> > Stuff compiled with older gcc's should run with newer libgcc*[0], but
> >> > stuff compililed with a newer gcc might not run with the older
> >> > libgcc*. Same goes, with more problems IIRC, for libstdc++.
> >> > So beware of that. Apart from that? I'm not aware of problems.
> >> 
> >> Uhm ... So I might break the system by switching between compiler
> >> versions?
> > 
> > That's highly unlikely as software that has been compiled with the old
> > compiler will still work.
> 
> And if not?
> 
> Just yesterday I tried to update a Fedora install and it failed so that
> the machine is now unusable because it only keeps rebooting.  I expected
> it to fail, just not that badly ...  If I could find my USB stick, I'd
> be putting Gentoo on it now.
> 
> > You may find that some programs fail to
> > recompile with the new compiler, but I didn't experience that with the
> > 4.9>5 step, although I had some that would build with 4.8 but not 4.9.
> > 
> > I have an application which I would like to compile with gcc
> > 
> >> 5.x just to see if that's even possible.  I could switch, try it, and
> >> then switch back.
> > 
> > Exactly, run gcc-config, compile/emerge the program, run gcc-config again.
> 
> And what about ccache?  Will it use the new version automatically and
> detect that the compiler version has changed so that files in the cache
> need to be recompiled?

-- 
Reverend Paul Colquhoun, ULC. http://andor.dropbear.id.au/
  Asking for technical help in newsgroups?  Read this first:
 http://catb.org/~esr/faqs/smart-questions.html#intro




Re: [gentoo-user] snapshots?

2015-12-30 Thread Stefan G. Weichinger
On 12/30/2015 10:14 PM, lee wrote:
> Hi,
> 
> soon I'll be replacing the system disks and will copy over the existing
> system to the new disks.  I'm wondering how much merit there would be in
> being able to make snapshots to be able to revert back to a previous
> state when updating software or when installing packages to just try
> them out.
> 
> To be able to make snapshots, I could use btrfs on the new disks.  When
> using btrfs, I could use the hardware RAID-1 as I do now, or I could use
> the raid features of btrfs instead to create a RAID-1.
> 
> 
> Is it worthwhile to use btrfs?

Yes.

;-)

> Am I going to run into problems when trying to boot from the new disks
> when I use btrfs?

Yes.

;-)

well ... maybe.

prepare for some learning curve. but it is worth it!

> Am I better off using the hardware raid or software raid if I use btrfs?

I would be picky here and separate "software raid" from "btrfs raid":

software raid .. you think of mdadm-based software RAID as we know it in
the linux world?

btrfs offers RAID-like redundancy as well, no mdadm involved here.

The general recommendation now is to stay at level-1 for now. That fits
your 2-disk-situation.

> The installation/setup is simple: 2x3.5" are to be replaced by 2x2.5",
> each 15krpm, 72GB SAS disks, so no fancy partioning is involved.
> 
> (I need the physical space to plug in more 3.5" disks for storage.  Sure
> I have considered SSDs, but they would cost 20 times as much and provide
> no significant advantage in this case.)
> 
> 
> I could just replace one disk after the other and let the hardware raid
> do it all for me.  A rebuilt takes only 10 minutes or so.  Then I could
> convert the file system to btrfs, or leave it as is.  That might even be
> the safest bet because I can't miss anything when copying.  (What the
> heck do I have it for? :) )
> 
> 
> Suggestions?

I would avoid converting and stuff.

Why not try a fresh install on the new disks with btrfs?
You can always step back and plug in the old disks.
You could even add your new disks *beside the existing system and set up
a new rootfs alongside (did that several times here).

-

There is nearly no partitioning needed with btrfs (one of the great
benefits).

I never had /boot on btrfs so far, maybe others can guide you with this.

My /boot is plain extX on maybe RAID1 (differs on
laptops/desktop/servers), I size it 500 MB to have space for multiple
kernels (especially on dualboot-systems).

Then some swap-partitions, and the rest for btrfs.

So you will have something like /dev/sd[ab]3 for btrfs then.

Create your btrfs-"pool" with:

# mkfs.btrfs -m raid1 -d raid1 /dev/sda3 /dev/sdb3

Then check for your btrfs-fs with:

# btrfs fi show

Oh: I realize that I start writing a howto here ;-)

In short:

In my opinion it is worth learning to use btrfs.
checksums, snapshots, subvolumes, compression ... bla ...

It has some learning curve, especially with a distro like gentoo.
But it is manageable.

As mentioned here several times I am using btrfs on >6 of my systems for
years now. And I don't look back so far.

-

look up:

https://btrfs.wiki.kernel.org/index.php/Using_Btrfs_with_Multiple_Devices




[gentoo-user] Re: emerge: The following pkgs are causing rebuilds

2015-12-30 Thread walt
On Wed, 30 Dec 2015 18:54:13 -0500
Harry Putnam  wrote:

> emerge output:
>   The following pkgs are causing rebuilds:
>   [list of pkgs]
> 
> I suspect this ground has been covered in depth but finding a good
> discussion of what it means is a different story. So, is this bad
> news?

No, it's good news.

> Or something that needs my attention...?

Most of the time the rebuilds will be handled by portage without user
input.  (Portage is old enough to be smart most of the time.)

What do I mean by "most of the time"?

I can't remember the last time I needed to intervene when I saw the
message "The following pkgs are causing rebuilds"

Why can't I remember the last time I typed the words "I can't
remember"? 

> Maybe someone can point me at some documentation about this.

Sorry, I can't.  But I can still remember how to post a question to
gentoo.user.





Re: [gentoo-user] Full system encryption on Gentoo

2015-12-30 Thread Alex Corkwell
On Wed, Dec 30, 2015 at 07:34:52AM +1000, Hans wrote:
> Hi,
> 
> Is it possible to fully encrypt a Gentoo system as can be done with 
> Fedora, Suse, Arch Linux, Debian and Ubunto without using a unencrypted 
> USB boot stick or unencrypted /boot partition?
> 
> If yes, where can I find instructions that really work on a BIOS only 
> box without UEFI, EFI, systemd using EXT4 file system?
> 
> Hans

I can confirm that it's entirely possible, as I've managed to do it with
my laptop.
I don't remember exactly how I did everything, but here are the main
points of my setup.

Each of the three disks in my laptop is set up with GPT partitions
(although it should work fine with plain old DOS-style partitions).

If you use GPT with BIOS, make sure you leave room for (and create) the
GRUB boot partition (which GRUB stores the stage 2 part of the
bootloader in, since the first stage is limited to only a few hundred
bytes by BIOS standards).
Use 4MiB, just to be safe (a couple MiB is cheap, anyway).
You can read about how to get it set up just right here:


Each disk has a LUKS partition.
GRUB2 supports both AES and Serpent (I have partitions of both)
encryption with LUKS, though I recommend AES.

If you look around on the Gentoo wiki, or around online, you can
probably find how to set up the encrypted partitions.
What I did was:

cryptsetup luksFormat -v -c aes-xts-plain64 -h sha512 -y -s 512 \
--use-random -i 4000 /dev/sda2

This sets the encryption and key derivation algorithms and key size to
pretty secure settings.
The 4000 is the number of milliseconds used to compute the encryption
key from your passphrase.
Feel free to increase/decrease as you like.
You can always change it later (you can add and remove encryption
passphrases from the partition with varying derivation times).

Your partitions will be decrypted at boot, but while setting this all
up, decrypt the partition manually with:

cryptsetup luksOpen /dev/sda2 luks-system

This will ask for your passphrase, and open the partition as
/dev/mapper/luks-system.
If you have multiple disks like I do, just open them all and give them
different names.

On top of LUKS, I've got LVM, because it's all shiny and I like to
resize my partitions every few days without rebooting.
If you're not familiar with it, I recommend reading around in the wiki a
little.

Set up your opened encrypted partitions for LVM (as physical volumes
(PVs)) by running:

pvcreate /dev/mapper/luks-system

If you have multiple disks, run that for each partition.

Now, create a volume group to hold all of your partitions by running:

vgcreate sys_vg /dev/mapper/luks-system [...]

If you have any other disks, add them to the end of that command.
"sys_vg" will be the name of your volume group.
You can use pretty much anything, but I recommend suffixing it with
"_vg" so you're not risking collisions with other stuff in "/dev".
I like to use "HOSTNAME_vg" for mine.

(You may need to run `vgchange -a y` to get your system to load the new
volume group now; I don't quite remember.)

Now, create your partitions (logical volumes (LVs)) with:

lvcreate -L 8GiB -n rootfs sys_vg

Replace "8GiB" with whatever partition size you want, and "rootfs" with
whatever you want to name that partition.
I recommend avoiding '-' in the partition name (and volume group name),
as it sometimes escapes them (?) by turning them into "--", but only in
some places.

The LVs will be in /dev/YOUR_VOLUME_GROUP_NAME.
So, for example, the above will create "/dev/sys_vg/rootfs" as your
logical volume.

At the very least, you'll want a boot partition, a swap partition, and a
root partition.

Try to leave them smaller, rather than using up all of the free space.
With LVM, you can grow filesystems (at least, EXT4 and such) online
(that is, without unmounting and/or rebooting).

(That's because LVM maps blocks between the partition that software
sees, and the (encrypted) PVs.
So, logical volumes don't necessarily need to be contiguous, or even on
the same disk.
LVM takes care of that transparently.)

Leave room in case you want to change your partitioning later, or give a
virtual machine its own LV or something.

Format your filesystems just like in the Gentoo Handbook:

mkfs.ext4 -L rootfs /dev/sys_vg/rootfs
mkfs.ext4 -L boot /dev/sys_vg/boot
mkswap -L swap /dev/sys_vg/swap

Then, mount them just like in the Gentoo Handbook and add them to your
fstab.
(Obviously, use /dev/sys_vg/* instead of /dev/sd?* when mounting.)

All of that is a pretty standard LVM/LUKS setup (except for /boot on
LVM/LUKS).

Now, when you compile your kernel, make sure to enable all of the device
mapper, LVM, and encryption features you need.
If you're not sure what you need, poke around on the Gentoo wiki pages
for LVM and/or LUKS.
You can compile them as either modules or built-in (I use modules),
since you'll need an initramfs anyway.

For your initramfs, I 

Re: [gentoo-user] radeon screen resolution

2015-12-30 Thread john
On Wed, 30 Dec 2015 04:54:48 +0100
 wrote:

> john  wrote:
> 
> > On Tue, 29 Dec 2015 11:05:12 +0200
> > Alan McKinnon  wrote:
> > 
> > > On 29/12/2015 11:01, Mick wrote:
> > > > On Tuesday 29 Dec 2015 02:00:33 waben...@gmail.com wrote:
> > > >
> > > >> There is a kernel option DRM_LOAD_EDID_FIRMWARE. It allows you
> > > >> to specify an EDID data set instead of probing for it. If your
> > > >> problem is caused by broken EDID data, this option maybe will
> > > >> help you to run the monitor at its full resolution.
> > > >>
> > > >> --
> > > >> Regards
> > > >> wabe
> > > >
> > > > How would you know what to specify for EDID data, unless the
> > > > monitor told you what it is?
> > > >
> > > 
> > > or if the monitor manufacturer told you what it should be
> > > 
> > > /alanm
> > > 
> > 
> > I have had a play with that but no success yet. I have followed the
> > howto but no success yet but I think now I will have to find .bin
> > file or settings from manufacturer.
> > 
> > Darn these gaming monitors!
> > 
> > Thanks
> > 
> > John
> 
> When you install x11-misc/read-edid you will get the programs
> get-edid and parse-edid. If you type
> 
>   get-edid | parse-edid
> 
> you will get something like this:
> 
> ===
> 
> 256-byte EDID successfully retrieved from i2c bus 8
> Looks like i2c was successful. Have a good day.
> Checksum Correct
> 
> Section "Monitor"
>   Identifier "U32D970"
>   ModelName "U32D970"
>   VendorName "SAM"
>   # Monitor Manufactured week 20 of 2014
>   # EDID version 1.4
>   # Digital Display
>   DisplaySize 700 390
>   Gamma 2.20
>   Option "DPMS" "true"
>   Horizsync 30-134
>   VertRefresh 56-75
>   # Maximum pixel clock is 540MHz
>   #Not giving standard mode: 1152x864, 75Hz
>   #Not giving standard mode: 1280x800, 60Hz
>   #Not giving standard mode: 1280x720, 60Hz
>   #Not giving standard mode: 1280x1024, 60Hz
>   #Not giving standard mode: 1440x900, 60Hz
>   #Not giving standard mode: 1600x900, 60Hz
>   #Not giving standard mode: 1680x1050, 60Hz
> 
>   #Extension block found. Parsing...
>   Modeline"Mode 2" 148.500 1920 2008 2052 2200 1080
> 1084 1089 1125 +hsync +vsync Modeline "Mode 0" +hsync -vsync 
>   Modeline"Mode 1" +hsync -vsync 
>   Modeline"Mode 3" +hsync +vsync 
>   Option "PreferredMode" "Mode 2"
> EndSection
> 
> ===
> 
> In former times it was possible to insert these informations into
> /etc/X11/xorg.conf. But I'm not sure if this still works nowadays,
> in particular the Modeline definition.
> 
> But maybe you can see if something is wrong with the EDID data of
> your monitor.
> 
> I could also provide you the EDID data from my monitor. Maybe you
> can use it with the DRM_LOAD_EDID_FIRMWARE kernel option. But this
> is just an idea. I have no clue how to do this in detail. :-)
> 
> P.S.:
> When you have only tried x11-drivers/xf86-video-ati then you should
> also try x11-drivers/xf86-video-amdgpu. Maybe this driver works
> better with your monitor. 
> 
> --
> Regards
> wabe
> 
> 
Using get-edid | parse-edid gives the following:

This is read-edid version 3.0.1. Prepare for some fun.
Attempting to use i2c interface
No EDID on bus 1
1 potential busses found: 0
Bus 0 doesn't really have an EDID...
Couldn't find an accessible EDID on this computer.
Attempting to use the classical VBE interface
Partial Read... Try again

interesting. Not sure here about 12c interface but have i2c module
loaded (if that's the correct one???).

I have tried DRM_LOAD_EDID_FIRMWARE
(drs_kms_helper.edid_firmare=edid/mon.bin) kernel option and created
the .bin file from a utility from AMD and still screen resolution is
small and also tried amdgpu with no joy there. 

Think I'll just use another monitor for time being.

I only want to play with weston to see if enlightenment works ok at
version 20.

John






Re: [gentoo-user] Maybe bug? (glibc related?)

2015-12-30 Thread Elias Diem
Hi lee

On 2015-12-29, lee wrote:

> When you perform a strcpy() and overflow the destination buffer, you are
> supposed to experience a segmentation fault.  It shouldn't matter
> whether you run a hardened profile or not for detecting these.

Ok. Thanks for the explanation.

> I imagine it was discovered that a segmentation fault did occur, and
> that it inevitably would occur --- since gcc tells you that one will
> occur when using __builtin___strcpy_chk() --- and the application was
> terminated.  Otherwise, the test would have been unsuccessful.

Ok.

> Whether this is a bug or not depends on what you're supposed to expect,
> which I don't know.  If someone would run the test suite on a
> non-hardened profile and got the same warning from gcc, but vim wouldn't
> be terminated when the segmentation fault occurs, then I'd be worried.

Ok. Well, I don't know either what to expect. I haven't got 
enough knowledge to analyse this. I posted it here because I 
was told so ;-)

-- 
Greetings
Elias