Re: [gentoo-user] Re: Hardened and python 3

2014-03-12 Thread Dustin C. Hatch
On 03/12/2014 10:38 AM, James wrote:
 ...
 So you saying go into package.use and set python2 flag for portage
 resulting in something like this:
 
 [ebuild   R] sys-apps/portage-2.2.8-r1  USE=(ipc) python2* -build -doc
 -epydoc (-pypy2_0) -python3 (-selinux) -xattr LINGUAS=-ru
 PYTHON_TARGETS=python2_7 python3_3 (-pypy2_0) -python2_6 -python3_2
 (-python3_4) 0 kB
 
Yes, exactly. Portage will use whatever the default interpreter is,
unless you have either USE=python2 or USE=python3 (but not both). It
will still its files per PYTHON_TARGETS, but emerge and other commands
will only use the interpreter you specify.

I have this in /etc/portage/package.use/portage on my hardened hosts::

# vim: set ft=gentoo-package-use :

# Dustin C. Hatch admiraln...@gmail.com (09 Jan 2014)
# Force Portage to use Python 2 (required by SELinux module)
sys-apps/portage python2

-- 
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] Hardened and python 3

2014-03-11 Thread Dustin C. Hatch
On 03/11/2014 01:46 PM, James wrote:
 hello,
 
 Last time I researched a gentoo hardened environment, it
 called for the default of Python to still be series 2 of the
 software. I was wondering if anyone had any experience with
 a Hardened Gentoo workstation that was using python 3
 exclusively? 
 
 Some various  other packages still using python 2, but which are not
 formally part of a Hardened Gentoo system, are not of great concern to me.
 
 curiously,
 James
 
 
 
 
The SELinux libraries for Python only exist for Python 2. Without them,
Portage will be unable to e.g. load policy and set file context. You can
have Python 3 installed, and it can be the default interpreter if
sys-apps/portage was built with USE=python2, but you cannot have *only*
Python 3.

-- 
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] do subslots improve user-experience?

2013-11-02 Thread Dustin C. Hatch

On 11/2/2013 07:04, hasufell wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Another round of questioning the users here.

These are good, thank you. Short answer here is no.



more specifically:
* how often do you experience useless rebuilds?
At least one of my machines is constantly wanting to rebuild some 
package or another. Currently, one of my desktops wants to rebuild 
x11-misc/compton with every emerge.



* do you really have a problem with running
revdep-rebuild/haskell-updater/perl-cleaner etc after every emerge?
No, because I typically understand when they're needed and can predict 
when I should use them, which really isn't all that often.



* do you think it's worth the effort to add more stuff to the PM, so
that you don't have to run revdep-rebuild that often?
I think we should have stopped at @preserved-rebuild. It's a sort of 
middle ground between rebuilding things all the time and having a broken 
system. I like it because it allows me to leave some things in a 
semi-broken state until I have time and CPU cycles to dedicate to 
rebuild them (i.e. libreoffice, etc.).



* do you trust the other methods like subslots or preserved-rebuild to
work reliably? (as in: do you still use revdep-rebuild?)
I've been using preserved-rebuild ever since it was backported to 2.1, 
and I don't think I've needed revdep-rebuild since then. I run it 
occasionally, but it's never found anything.




If you want my opinion on subslots:
# grep EMERGE_DEFAULT_OPTS /etc/portage/make.conf
EMERGE_DEFAULT_OPTS=--ignore-built-slot-operator-deps=y
I'm getting closer to this sentiment as well; I'm beginning to think 
they're more trouble than they're worth. I'm getting tired of seeing an 
emerge list of 10 or 15 rebuilds when I'm trying to install something 
brand new because some package in the tree I already have installed has 
changed. If I cared about that package and its dependencies, I would 
have asked for it to be rebuilt/upgraded/whatever, but I don't, I'm 
working on something else right now.


--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] How can I fix wrong boot order?

2013-10-29 Thread Dustin C. Hatch

On 10/29/2013 13:47, Jarry wrote:

Hi Gentoo-users,
I noticed strange message during boot-up of one of my servers:
...
As you see, syslog-ng can not open conection to remote syslog
collector. Reason seems to be quite clear: at the time when
syslog-ng starts, enp3s0 interface is not up (only loopback).
I do not know how this happened, but I think it has something
to do with either sendmail, clamav, or dovecot.

This is boot-up of my other server (syslog-collector) where
neither sendmail nor clamav is installed. As you can see,
boot-up order is correct (network interface before syslog-ng):
...
So how can I fix it on the 1st server, so that syslog-ng starts
after network interface is up?

Jarry



I would probably fix this by adding

rc_need=net

to /etc/conf.d/syslog-ng
--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] Brand new instalation - Network problem

2013-10-26 Thread Dustin C. Hatch

On 10/26/2013 15:44, João Matos wrote:

Hi list,

I`ve just installed a brand new gentoo amd64 and there is this problem:
my Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168
PCI Express Gigabit Ethernet controller (rev 06) is recognized as
*sit0* , but I can't get any IP Adress.
sit0 is a virtual adapter for 6to4, an IPv6 transition mechanism, not a 
real Ethernet adapter.


dhcp takes long and doesn't get any result. dhcpcd doesn't work either.
Even if I choose a manual address I cant ping other devices.
Since sit0 isn't a real adapter, it isn't actually your network card, so 
it isn't connected to anything.


When I used ifconfig, I got something like ipv6 over ipv4, but I will
only need ipv4. So I disabled ipv6 USE flag, but I didn't change
anything. The weird thing is that if I disable the IPV6 kernel support
(manual configuration btw), the network interface (sit0) desappears!

When I reboot the system using a usb botable Ubuntu everything works
fine, using the same hardware/infrastructure.

I have no idea what is going on here, so, please, send me some links.



You need to make sure the driver for your network adapter is compiled in 
to the kernel. I believe for your card, that would be CONFIG_R8169:


Device Drivers  ---
[*] Network device support  ---
[*]   Ethernet driver support  ---
[*]   Realtek devices
* Realtek 8169 gigabit ethernet support

--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] python-3.1.5-r1

2013-08-19 Thread Dustin C. Hatch

On 8/19/2013 21:55, Joseph wrote:

During upgrade a got a message:
!! The following installed packages are masked:
- dev-lang/python-3.1.5-r1::gentoo (masked by: package.mask)
/usr/portage/profiles/package.mask:
# Michał Górny mgo...@gentoo.org (07 Aug 2013)
# These outdated versions of Python are no longer updated or maintained
# properly. Python 2.5 started to become a blocker for Python 3.3.
# Python 3.1 has proved to become unfriendly to writing portable code.
# PyPy is still experimental and we're in process of bringing 2.1.
# The remaining packages are backports of functions that targeted only
# the very specific version. The masked packages will be removed
# in 30 days. Afterwards, ebuild and eclass support for those
# implementations will be removed. Bug #480070.

My default is set to: python2.7 *
Should I remove manually python-3.1.5-r1

You'll want to check which version of Python provides the 3.x system as 
well. Just do `eselect python list --python3`. If python3.1 is shown 
with a *, you need to make sure Python 3.2 is installed (@world updates 
will take care of that, or emerge python:3.2). Then `eselect python set 
python3.2 --python3` and then `python-updater`


hth

--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] IPython with Python3 - what magic am I missing?

2013-06-20 Thread Dustin C. Hatch

On 6/20/2013 02:31, Helmut Jarausch wrote:

Hi,

I'd like start IPython with Python3 as underlying Python interpretor.
GenToo has some magic to invoke IPython which I don't understand.

/usr/bin/ipython is a symlink to /usr/bin/python-exec which is a script
invoking the binary /usr/bin/python-exec-c

I don't have Python3 as standard Python version (too dangerous with
Portage?)

How can I convince IPython to use Python3?

I've tried
python3 /usr/lib64/python3.3/site-packages/spyderlib/widgets/ipython.py
but hits just quits without any visible action.

Many thanks for a hint,
Helmut

If you built dev-python/ipython with PYTHON_TARGETS=python3_2, then 
there will be a /usr/bin/ipython-python3.2 script that will launch 
IPython with the Python 3.2 interpreter, even if the default Python 
implementation is 2.7.


--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] udev upgrade and baselayout 2.2

2013-04-29 Thread Dustin C. Hatch

On 4/29/2013 17:35, fe...@crowfix.com wrote:

I've finally got my system settled enough to look into teh scary udev upgrade.  
Especially I have all data dirs off in their own LVM partitions (/home, /encfs, 
/usr/portage, /var/spool), and a backup of the most recent bootable and runable 
/, so I can boot back to that if I need to and still get email etc. while 
working oout what I screwed up.

Excluding gcc, llvm, various app-emulation packages, videolibs, etc, most of it 
looks innocent enough.


...


Some give me pause:

 =sys-apps/baselayout-2.2

Is baselayout 2.2 necessary for upgrading udev, or just optional?  Could I 
upgrade this without upgrading udev?

I can't comment on baselayout 2.2 yet, as I have been holding off on 
updating it on my systems as well. I have updated them all to at least 
udev 197, though, without too much trouble. If you update to udev 200 
without going through 197, though, make sure you don't forget to ``touch 
/etc/udev/rules.d/80-net-name-slot.rules``, lest you end up with 
ridiculous names for your ethernet devices.



 =sys-boot/grub-2.00-r3:2

I'm running grub 1.  What I have seen of grub 2 doesn't impress me, and 
besides, my bootable backup is on a different disk but relies on the grub 1 
boot setup, and I'd just as soon not upgrade to grub 2 ever if possible.

I too prefer grub 1. You can prevent the upgrade to grub 2 with the 
following::


emerge --deselect grub
emerge --noreplace grub:0

And, just for good measure::

echo '=sys-boot/grub-2'  /etc/portage/package.mask/grub2

Hope this helps

--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] open-vm-tools install fails because I have modules disabled??

2013-04-26 Thread Dustin C. Hatch

On 4/26/2013 15:48, Alan McKinnon wrote:

On 26/04/2013 18:54, Jarry wrote:

On 26-Apr-13 18:41, Alan McKinnon wrote:

On 26/04/2013 18:37, Jarry wrote:

On 26-Apr-13 18:11, Tanstaafl wrote:

compile fails with lots of

...error No Module support in this kernel. Please configure with
CONFIG_MODULES

Please tell me that I'm not going to have to enable modules just so I
can use the vmware tools??


Yes you are. If you want to use vm-tools (open or vmware),
you have to enable kernel modules. And also some strange options
(i.e. vmware-graphics). And as I told you previously, updating
to new kernel is really pain in a**. That's why I got rid of
the whole vm-stuff and I'm happy without it...


Are you aware of module-rebuild rebuild?


Yes I am. Believe me or not, but this did not work.


Nice little scriplet that reduces all that pain to running one single
command after installing a new built kernel.


I mean there is a problem with new kernel version. Not sure
but I suppose open-vm-tools sources are installed into kernel
sources tree. And if you install new kernel, open-vm-tools
sources are not moved to the new kernel-sources tree.
Whenever I installed new kernel-sources and re-created link
/usr/src/linux pointing to the new sources, I had to re-emerge
open-vm-tools too...


I don't use open-vm-tools so I don't know how they work. I do know
vmware and virtualbox's stuff though - basically the same as any
out-of-tree module package. The ebuild takes care of the nitty-gritty
and builds the modules against whatever /usr/src/linux points to. Is
open-vm-tools the same?

Actually, it's open-vm-tools-kmod that builds the kernel module. 
open-vm-tools is the userspace components that do not have to be rebuilt 
after a kernel upgrade. Otherwise, yes, that's exactly how it works.



Deploying a new kernel version is a complex affair anyway. You have to
configure the thing, carefully look out for new and changed config
options, run FOUR make commands, edit grub.conf and do a lot of testing.
Now you have to add one extra tiny little command to the end. It's one
little bullet point in your process.

It isn't really all that complicated, and there are plenty of tools to 
help you automate most of it (i.e. genkernel). The one command you have 
to run at the end is::


emerge -1av /lib/modules

Portage will determine what files in there belong to packages it manages 
and rebuild them. It doesn't take all that long.



Surely you can't be claiming that is a huge problem for you?





--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] PosgreSQL - pg_hba.conf localhost access only

2013-04-24 Thread Dustin C. Hatch

On 4/24/2013 19:23, Joseph wrote:

The above is not correct as users from any machine on a local network
can connect to my database.

In the scenario you described, as Joost explained, the users on your 
network are *not* connecting to your database; they are connecting to a 
website. The web server is connecting to the database on their behalf. 
PostgreSQL's host-based authentication controls only who access the 
database directly, not who access the applications that use it.



If I put a line in pg_hba.conf
host all 127.0.0.1 255.255.255.255 trust


This line is not valid. pg_hba.conf entries take the form

typedatabaseuser[address]   method  [options]

type can be 'local' (connections over a Unix socket), 'host' 
(connections over TCP, maybe using SSL), 'hostssl' (connections over TCP 
using SSL), 'hostnossl' (connections over TCP not using SSL).


To achieve what I think you are looking for, just remove all lines from 
pg_hba.conf except this one::


local   all all trust

This will prevent anyone from connecting to your databases using TCP at 
all. If you really need TCP from the localhost instead of Unix sockets, 
you can also add this line::


hostall all 127.0.0.1/32trust


postgresql will not even starts, I get an error message:
FATAL:  could not load pg_hba.conf
LOG:  invalid IP mask trust: Name or service not known




I would strongly advise you read all of the PostgreSQL documentation 
before you expose a database to the world. Specifically, please read the 
official page about pg_hba.conf[1].


[1] http://www.postgresql.org/docs/9.2/interactive/auth-pg-hba-conf.html

Regards,

--
♫Dustin
http://dustin.hatch.name/



Re: [gentoo-user] Compiling Gentoo for Raspberry Pi (Was: List of base system packages)

2013-02-04 Thread Dustin C. Hatch

On 2/3/2013 23:43, Nilesh Govindrajan wrote:

On Mon, Feb 4, 2013 at 3:14 AM, Dustin C. Hatch admiraln...@gmail.com wrote:

On 2/3/2013 12:24, Nilesh Govindrajan wrote:
Okay, the problem is probably the way PAM tries to link against db. Unless
you need that functionality, I'd go ahead and remove the berkdb USE flag and
try again. You may also want to file a bug.



Nah, I don't need berkdb, I'll do without it.
Did you install emerge/portage on the Pi yet?
Python cannot be cross compiled (it's a hot topic since ages, but very
few people have been successful with that).
So I guess Python would have to be compiled on the Pi itself... the
question is, emerge needs python and python needs emerge?!!?

--
Nilesh Govindrajan
http://nileshgr.com

No, minimalist Pi only has exactly what I need to run it. When I need to 
install additional software, I put the SD card in my desktop and run


armv6j-hardfloat-linux-gnueabi-emerge --root=/mnt/raspberrypi -av $pkg

I do have Python installed on it though. I actually have more than one 
Raspberry Pi, one of which runs a full install of Gentoo from a stage3 
tarball. I've got it set up with DistCC to offload most of the compiling 
to my desktops and servers, so it didn't take too long to build Python 
natively. Once it was built, I just installed the binary on the 
minimalist Pi using the same method as other packages.


--
♫Dustin



Re: [gentoo-user] Compiling Gentoo for Raspberry Pi (Was: List of base system packages)

2013-02-04 Thread Dustin C. Hatch

On 2/4/2013 22:41, Nilesh Govindrajan wrote:

On Tue, Feb 5, 2013 at 12:53 AM, Dustin C. Hatch admiraln...@gmail.com wrote:

No, minimalist Pi only has exactly what I need to run it. When I need to
install additional software, I put the SD card in my desktop and run

armv6j-hardfloat-linux-gnueabi-emerge --root=/mnt/raspberrypi -av $pkg

I do have Python installed on it though. I actually have more than one
Raspberry Pi, one of which runs a full install of Gentoo from a stage3
tarball. I've got it set up with DistCC to offload most of the compiling to
my desktops and servers, so it didn't take too long to build Python
natively. Once it was built, I just installed the binary on the minimalist
Pi using the same method as other packages.



The question is, how did you compile python? You ran a job on one of the Pis?

--
Nilesh Govindrajan
http://nileshgr.com

Yes. Just use the --buildpkg switch, copy the resulting .tbz2 from 
$PKGDIR on the Raspberry Pi to your crossdev host and then use emerge 
--usepkg to install it on your SD card.


--
♫Dustin



Re: [gentoo-user] Compiling Gentoo for Raspberry Pi (Was: List of base system packages)

2013-02-03 Thread Dustin C. Hatch

On 2/3/2013 04:10, Nilesh Govindrajan wrote:

Okay that solved the ebuild problem, but I'm stuck with another problem now -_-


...

/usr/lib/libdb-4.8.so: file not recognized: File format not recognized


Looks like it is trying to use the libdb shared object from the host 
system instead of the sysroot.


How are you calling emerge? Can you post the command you ran that was 
used to install PAM? I don't have PAM on my Raspberry Pi, but I just 
tested cross-compiling it and it worked fine.


--
♫Dustin



Re: [gentoo-user] Compiling Gentoo for Raspberry Pi (Was: List of base system packages)

2013-02-03 Thread Dustin C. Hatch

On 2/3/2013 12:24, Nilesh Govindrajan wrote:

On Sunday 03 February 2013 09:19:58 PM IST, Dustin C. Hatch wrote:

On 2/3/2013 04:10, Nilesh Govindrajan wrote:

Okay that solved the ebuild problem, but I'm stuck with another
problem now -_-


...

/usr/lib/libdb-4.8.so: file not recognized: File format not recognized


Looks like it is trying to use the libdb shared object from the host
system instead of the sysroot.

How are you calling emerge? Can you post the command you ran that was
used to install PAM? I don't have PAM on my Raspberry Pi, but I just
tested cross-compiling it and it worked fine.



Following your blog post you posted a link earlier; calling emerge as -

armv6j-hardfloat-linux-gnueabi-emerge --onlydeps -1 -v $base

It was pulled in as a dependency (for berkdb use flag, set by
default/linux/arm/10.0/armv6j profile)

--
Nilesh Govindarajan
http://nileshgr.com

Okay, the problem is probably the way PAM tries to link against db. 
Unless you need that functionality, I'd go ahead and remove the berkdb 
USE flag and try again. You may also want to file a bug.


--
♫Dustin



Re: [gentoo-user] List of base system packages

2013-02-02 Thread Dustin C. Hatch

On 2/2/2013 04:50, Nilesh Govindrajan wrote:


I'm getting a weird error while trying to compile pam:

  * ERROR: sys-libs/pam-1.1.6-r2 failed (configure phase):
  *   USE Flag 'hppa' not in IUSE for sys-libs/pam-1.1.6-r2
  *
  * Call stack:
  *  ebuild.sh, line   93:  Called src_configure
  *environment, line 3550:  Called use 'hppa'
  *   phase-helpers.sh, line  219:  Called die
  * The specific snippet of code:
  *  die USE Flag '${u}' not in IUSE for
${CATEGORY}/${PF}

How to fix this?

I encountered these types of errors when building as well. It is because 
the embedded profile, which is the profile crossdev selects by 
default, is missing a huge amount of information. I tried defining it 
all in ${PORTAGE_CONFIG_ROOT}/profile but it got to be a chore. I ended 
up switching to the default Linux profile for ARM, which worked much better.


--
♫Dustin



Re: [gentoo-user] List of base system packages

2013-02-02 Thread Dustin C. Hatch

On 2/2/2013 19:43, Nilesh Govindrajan wrote:

On Sat, Feb 2, 2013 at 11:07 PM, Dustin C. Hatch admiraln...@gmail.com wrote:

On 2/2/2013 04:50, Nilesh Govindrajan wrote:



I'm getting a weird error while trying to compile pam:

   * ERROR: sys-libs/pam-1.1.6-r2 failed (configure phase):
   *   USE Flag 'hppa' not in IUSE for sys-libs/pam-1.1.6-r2
   *
   * Call stack:
   *  ebuild.sh, line   93:  Called src_configure
   *environment, line 3550:  Called use 'hppa'
   *   phase-helpers.sh, line  219:  Called die
   * The specific snippet of code:
   *  die USE Flag '${u}' not in IUSE for
${CATEGORY}/${PF}

How to fix this?


I encountered these types of errors when building as well. It is because the
embedded profile, which is the profile crossdev selects by default, is
missing a huge amount of information. I tried defining it all in
${PORTAGE_CONFIG_ROOT}/profile but it got to be a chore. I ended up
switching to the default Linux profile for ARM, which worked much better.

--
♫Dustin



Which means /usr/armv6j-hardfloat-linux-gnueabi/etc/portage/make.profile?

--
Nilesh Govindrajan
http://nileshgr.com


Yeah, change that to point to /usr/portage/profiles/default/linux/arm/10.0

--
♫Dustin



Re: [gentoo-user] List of base system packages

2013-02-01 Thread Dustin C. Hatch

On 2/1/2013 03:17, Nilesh Govindrajan wrote:

So I finally got an SDHC card for my Raspberry Pi.
I'll be preparing a base system on my desktop before booting the Pi
with it (I know there's a stage3 available, but don't want to use it).

How do I get the list of packages which are required for a complete
successful boot?

--
Nilesh Govindrajan
http://nileshgr.com

Depending on how much you want your Raspberry Pi to do, you may find my 
blog post on this subject useful `Minimalist Gentoo for the Raspberry 
Pi`__. I discuss how to cross-compile a minimal system (i.e. no Portage 
or gcc, just what you need to boot up). The first section lists the 
smallest set of packages you need for this.



__ 
http://dustinhatch.tumblr.com/post/38118003177/minimalist-gentoo-for-the-raspberry-pi


--
♫Dustin



Re: [gentoo-user] local overlay problem

2013-01-31 Thread Dustin C. Hatch

On 1/31/2013 20:41, Philip Webb wrote:

Firefox 17.0.2 requires alsa-lib , which I don't want as I don't use sound;
this is still the case with USE=-alsa.

I want to test what happens if I try to compile it without that dep,
so I copied the ebuild to /var/lib/layman/local/www-client/firefox/
 commented the relevant line to remove the RDEPEND.
When I then tried 'ebuild newpkgname...ebuild manifest',
it started to download xillions of little .xpi files into  distfiles ,
apparently  1  for each of the World's many languages
(this didn't happen at my last 'eix-sync').

Can anyone suggest a way to avoid this problem ?

It's downloading those files so it can recalculate the file hashes. When 
running `ebuild file digest`, it has to have all possible files 
available in order to update the Manifest file.


Those languages won't be installed when you actually install your 
modified package. You'll probably want to keep them around until you're 
finished making changes, though.


--
♫Dustin



Re: [gentoo-user] OT: networking and libvirt

2013-01-28 Thread Dustin C. Hatch

On 1/28/2013 17:52, Michael Mol wrote:

On Mon, Jan 28, 2013 at 5:35 PM, Randy Barlow
ra...@electronsweatshop.com wrote:

On 01/20/2013 12:37 AM, William Kenworthy wrote:

So what is usually recommended and works for this scenario?


I personally use a bridged interface that allows my VMs to be on the
physical network. That works out pretty well. In my use case, it's
the same subnet as the host, but it should be possible to use VLANs to
accomplish having them on a separate subnet.
I've got a Gentoo-based libvirt/qemu-kvm host running with several VMs, 
also using bridged TAP adapters. It works really well for servers/other 
always on systems that run in the background. virt-manager can handle 
everything for you, you just have to know the name of the bridge to 
which you want to the VM to join.


There's no requirement that they be on separate layer 2 segments if
you want them to be on separate layer 3 subnets.

Either statically configure the IPs, or:

For IPv4: Have DHCP grant IPs from different pools based on source MAC
or declared hostname.

For IPv6: Use DHCPv6 rather than SLAAC, and follow the same principles
as for DHCP-for-IPv4.

Sure, giving them separate layer 2 segments helps encapsulation (and
may make things easier from an autoconfiguration standpoint,
depending), but it's not strictly necessary from a technology point of
view.

While that's all true, I personally think 802.1Q VLANs are *much* easier 
to configure than DHCP and especially DHCPv6. Definitely sysadmin's 
prerogative, though.

--
:wq


:x

--
♫Dustin



Re: [gentoo-user] Re: udev-197 moves from /usr/lib to /lib

2013-01-11 Thread Dustin C. Hatch

On 1/11/2013 09:14, Nikos Chantziaras wrote:

On 11/01/13 16:04, walt wrote:

This seems to me like very happy news indeed, but I'm interested in
contrary
opinions.  There's a recent thread discussing how udev-197 breaks
lvm2, but
that's a trivial fix once you know about it.

The problem is caused because many apps including lvm2 install their udev
config scripts in /usr/lib/udev/rules.d/ (where they never belonged in
the
first place IMO) and they should instead now go in /lib/udev/rules.d/.
All you need to do is to re-emerge all of those packages *after*
installing
udev-197 and the config scripts will go in the correct place.

You should do this before rebooting the machine because lvm2 won't
work until
its udev scripts are in the correct directory.


Running this command (all in one line):

emerge -p1 $(for p in $(qfile -Cvq $(find /usr/lib/udev/) | sort -u); do
echo =$p; done)

should re-emerge all packages that still have files there.  After that,
/usr/lib/udev should no longer exist.  If it still does, then there are
files in it that don't belong to any package.  Check them manually and
delete them as needed or move them over.  Then delete /usr/lib/udev.




Or, without a loop (easier to read and type, IMHO):

qfile -Cvq /usr/lib/udev | awk '{print =$1}' | xargs emerge -pv

or, using gentoolkit instead of portage-utils (slower, but will not fail 
if the installed version of a package no longer exists):


equery belongs -n /usr/lib/udev | xargs emerge -pv

--
♫Dustin



Re: [gentoo-user] Firefox and ssl

2013-01-04 Thread Dustin C. Hatch

On 1/4/2013 06:45, Robert David wrote:

Hi all,

anyone have problem with firefox and selfsigned ssl? I tryed firefox and
firefox-bin.

Firefox:
Problem loading page: Secure connection failed.

Firefox-bin:
No problem loading page.


I tryed with/without system-sqlite. Rebuild nss. Nothing helped.



Robert David

The only time I've ever seen that error/situation in Firefox was due to 
multiple certificates using the same serial number. Although that may 
not be exactly the problem you are encountering, it may be similar in 
how Firefox deals with what it considers a woefully invalid certificate. 
Have you tried with a fresh profile? You could also try 
renaming/removing the cert8.db and key3.db files in your profile directory.


--
♫Dustin



Re: [gentoo-user] Re: udev downgrade

2013-01-04 Thread Dustin C. Hatch

On 1/4/2013 10:23, James wrote:

Dustin C. Hatch admiralnemo at gmail.com writes:



The problem is you are trying to downgrade sys-fs/udev but not
virtual/udev. If you want to force using udev-171, you need to mask both
the real and virtual atoms. Try this in /etc/portage/package.mask/udev:



  =sys-fs/udev-181
  =virtual/udev-181



Then emerge -avuD1 udev and see if that fixes it.


I get the downgrades you would expect:



  UD ] virtual/udev-171 [196]
UD ] sys-fs/udev-171-r9

I also get some weird companion downgrades:

blocks B  ] x11-libs/qt-script-4.8.2-r:4
(x11-libs/qt-script-4.8.2-r:4 is blocking x11-libs/qt-declarative-4.8.2,
x11-libs/qt-webkit-4.8.2, x11-libs/qt-svg-4.8.2, x11-libs/qt-test-4.8.2,
x11-libs/qt-xmlpatterns-4.8.2, x11-libs/qt-multimedia-4.8.2,
x11-libs/qt-opengl-4.8.2)
[blocks B  ] x11-libs/qt-gui-4.8.4:4
snip

I don't have Qt installed anywhere, so I can't reproduce that problem. I 
also don't see that particular version of qt-script in the tree, so I 
can't be sure, but my guess is some Qt dep that you already have 
installed depends on a newer version of udev than you will be getting 
after the downgrade, thus requiring it to downgrade as well.



and these:

Multiple package instances within a single package slot have been pulled
!!! into the dependency graph, resulting in a slot conflict:

virtual/udev:0

   (virtual/udev-171::gentoo,ebuild scheduled for merge) pulled in by
 virtual/udev-196 required by (sys-fs/lvm2-2.02.88::gentoo, installed)
 =virtual/udev-171 required by (kde-base/kdelibs-4.9.3::gentoo, installed)
 (and 17 more with the same problems)

   (virtual/udev-196::gentoo, installed) pulled in by
 =virtual/udev-180 required by (sys-fs/udev-196-r1::gentoo, installed)
 (and 1 more with the same problem)

sys-fs/udev:0

   (sys-fs/udev-196-r1::gentoo, installed) pulled in by


=sys-fs/udev-196-r1[gudev?,hwdb?,introspection?,keymap?,selinux?,static-libs?]

required by (virtual/udev-196::gentoo, installed)

   (sys-fs/udev-171-r9::gentoo, ebuild scheduled for merge) pulled in by
 ~sys-fs/udev-171[gudev?,hwdb?,introspection?,keymap?,selinux?] required by
(virtual/udev-171::gentoo, ebuild scheduled for merge)

snip

Does this look normal?

Yes, I expected something like that. In all likelihood, you'll need to 
completely remove sys-fs/udev and virtual/udev and then reinstall the 
older version. You'll probably want to do this in single user mode (i.e. 
`rc single`), so running programs don't crash suddenly. A reboot 
afterward is probably a good idea as well.

--
♫Dustin



Re: [gentoo-user] Re: udev downgrade

2013-01-04 Thread Dustin C. Hatch

On 1/4/2013 14:31, Kevin Chadwick wrote:

On Fri, 04 Jan 2013 13:52:29 -0600
Dustin C. Hatch admiraln...@gmail.com wrote:


You'll probably want to do this in single user mode (i.e.
`rc single`), so running programs don't crash suddenly. A reboot
afterward is probably a good idea as well.


I'm interested in what may crash, do you mean after logging out and in
again etc.. I have started and stopped udev in the past during testing
without any apparent problems.

I'm not sure what would crash, if anything. It may very well be fine; I 
was just offering the suggestion just in case. If it were me doing it, 
I'd at least do it on a virtual console and not in an X11 terminal, in 
case your keyboard stops working (which seems unlikely, but I've learned 
that nothing is too crazy to expect when dealing with udev)


--
♫Dustin



Re: [gentoo-user] Re: udev downgrade

2013-01-03 Thread Dustin C. Hatch

On 1/3/2013 20:54, James wrote:

James wireless at tampabay.rr.com writes:



So unless somebody can give me good reason, I'm downgrading to
udev-171 asap on this (only) system running udev 196...
(ps, I like to experiment, but not with udev et. al.)


Long night, when you have to answer your own posts.

Now I get:


emerge -p1u udev

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild UD ] sys-fs/udev-171-r9 [196-r1] USE=rule_generator%*
-action_modeswitch% -build% -debug% -edd% (-extras) -floppy% {-test%}
[blocks B  ] sys-fs/udev-186 (sys-fs/udev-186 is blocking
sys-fs/udev-init-scripts-17-r1)

!!! Multiple package instances within a single package slot have been pulled
!!! into the dependency graph, resulting in a slot conflict:

sys-fs/udev:0

   (sys-fs/udev-196-r1::gentoo, installed) pulled in by


=sys-fs/udev-196-r1[gudev?,hwdb?,introspection?,keymap?,selinux?,static-libs?]

required by (virtual/udev-196::gentoo, installed)

(sys-fs/udev-171-r9::gentoo, ebuild scheduled for merge) pulled in by
 (no parents that aren't satisfied by other packages in this slot)


ideas?


James


The problem is you are trying to downgrade sys-fs/udev but not 
virtual/udev. If you want to force using udev-171, you need to mask both 
the real and virtual atoms. Try this in /etc/portage/package.mask/udev:


=sys-fs/udev-181
=virtual/udev-181

Then emerge -avuD1 udev and see if that fixes it.

--
♫Dustin



Re: [gentoo-user] boot failure using root=LABEL=RAID1root but not LABEL=RAID6root

2013-01-01 Thread Dustin C. Hatch

On 12/31/2012 17:10, Mark Knecht wrote:

On Mon, Dec 31, 2012 at 2:59 PM, J. Roeleveld jo...@antarean.org wrote:

Gentoo Installation, Kernel Panic


OK, thanks. Yes, in the last post of that thread Nilesh states

Since I use grub2-mkconfig to generate the configuration, it's there
with UUID, but it works with LABEL as well, I have tried it.
Also, *don't* build your kernel *without* initramfs, because the
kernel by default doesn't support mounting by LABELs or UUIDs (I think
so, I've had failures w/o initrd).

While I don't know Nilesh's background, I have no reason to really
doubt what he says here I seem to find a lot of posts on the web where
people mount using UUID and they aren't clear as to whether they have
an initramfs or not.

I'll consider this solved for now with one caveat that it's unclear
when you build the initramfs what tools have to be placed within it to
make the following true.

1) No initramfs - mount by device name only

2) With initramfs - mount by device name, label or UUID.

Thanks VERY MUCH for taking the time to find this. I'm removing the
offending option from my grub.config file.

Cheers,
Mark



The other wiki has a page[1] about building an initramfs that includes a 
section on writing a linuxrc script to support exactly that. I have 
since switched to Genkernel, but I used to have a hand-built initramfs 
containing very little besides that script block.


[1] http://en.gentoo-wiki.com/wiki/Initramfs#UUID.2FLABEL_Root_Mounting

--
♫Dustin



Re: [gentoo-user] How do I remove a module from ENLIGHTENMENT_MODULES?

2012-12-19 Thread Dustin C. Hatch

On 12/19/2012 22:15, Nikos Chantziaras wrote:

I want to remove the connman module from ENLIGHTENMENT_MODULES.  I've
put this in my make.conf:

ENLIGHTENMENT_MODULES = -connman

But it doesn't work; emerge complains:

   Invalid '-' operator in non-incremental variable
'ENLIGHTENMENT_MODULES': '-connman'

So how does this work?


Non-incremental variable means it will reset whenever you assign to 
it. Thus, all you need to do is specify only what modules you want; 
anything not specified will be excluded.


--
♫Dustin



Re: [gentoo-user] Re: /usr/share/doc/openrc/net.example not found

2012-12-15 Thread Dustin C. Hatch

On 12/15/2012 02:08, Nuno J. Silva wrote:

On 2012-12-15, Chris Stankevitz wrote:


PS: I'm trying to find a way to prevent dhcpd from updating my ntp.conf


dhcpd? Don't you mean dchpcd (the c stands for *client*, dhcpd would be
the DHCP daemon granting leases to clients)?

If so, and if you don't mind using the same settings for all network
interfaces, have a look at /etc/dhcpcd.conf, which has an option option
ntp_servers. I'd guess that disabling this would do what you want.

Actually, you can use /etc/conf.d/net to turn off receiving NTP 
configuration for just one interface, if you want. The `dhcp_IFACE` 
parameter takes several values, one of which is `nontp`, which will do 
exactly that. For example:


config_eth0=dhcp
dhcp_eth0=nontp

When you find the net.example file, you'll find that documented under 
GENERIC DHCP OPTIONS, about midway through the file.


Regards,

--
♫Dustin



Re: [gentoo-user] Locale generation and keymaps for cross compiliation?

2012-12-13 Thread Dustin C. Hatch

On 12/13/2012 11:58, Nilesh Govindrajan wrote:

Hi,

I have a Raspberry Pi. I have gone through the cross development guides
on gentoo.org and my barebones distro (consisting of chrony, sshd, bash)
is ready (all I did is armv6j-hardfloat-linux-gnueabi-emerge
--root=/mnt/sdcard baselayout bash openssh chrony) which is of course
after setting up the toolchain using crossdev.

Now the problem is, since I'm on amd64 box (and don't have an ARM
emulator), how do I generate the locale [without using an ARM emulator]?
Also, how to go about keymaps? /usr/share/keymaps seems to be missing in
the tree and equery returned no packages owning those files.



I have been wondering the same thing. If you find the answer, please 
share it.


Incidentally, have you been able to boot the system you created as 
described? I am working on a very similar setup, but I haven't been able 
to get bash to work. It complains that it can't find libgcc_s.so.1, and 
I don't want to install GCC on my Raspberry Pi.


Regards,

--
♫Dustin



[gentoo-user] crossdev, alternate root, and build dependencies

2012-12-12 Thread Dustin C. Hatch
I am trying to understand and use crossdev to build Gentoo for my 
Raspberry Pi, and I have a couple of questions. I was able to 
successfully build a toolchain::


crossdev -S -t armv6j-hardfloat-linux-gnueabi

This correctly installed binutils, gcc, glibc, and linux-headers::

equery list cross-armv6j-hardfloat-linux-gnueabi/*
 * Searching for * in cross-armv6j-hardfloat-linux-gnueabi ...
[I-O] [  ] cross-armv6j-hardfloat-linux-gnueabi/binutils-2.22-r1:0
[I-O] [  ] cross-armv6j-hardfloat-linux-gnueabi/gcc-4.5.4:4.5
[I-O] [  ] cross-armv6j-hardfloat-linux-gnueabi/glibc-2.15-r3:2.2
[I-O] [  ] cross-armv6j-hardfloat-linux-gnueabi/linux-headers-3.6:0

I then copied the configuration from 
/usr/armv6j-hardfloat-linux-gnueabi/etc/portage to an alternate 
location, so I could modify it without impacting the crossdev toolchain. 
Next, I started to emerge some ebuilds into a staging directory using 
the following commands::


export CBUILD=$(portageq envvar CHOST)
export PORTAGE_CONFIGROOT=/home/dustin/rpi-build/configroot
export ROOT=/home/dustin/rpi-build/buildroot/
export PORTAGE_TMPDIR=/home/dusitn/rpi-build/tmp
emerge --nodeps baselayout
emerge --onlydeps baselayout

The first pass completed successfully, but the second failed to build 
psmisc::


checking for tgetent in -ltinfo... no
checking for tgetent in -lncurses... no
checking for tgetent in -ltermcap... no
configure: error: Cannot find tinfo, ncurses or termcap libraries

config.log shows this::

configure:3970: checking for tgetent in -lncurses
configure:3995: armv6j-hardfloat-linux-gnueabi-gcc -o conftest -O4
-pipe -mfpu=vfp -mfloat-abi=hard -march=armv6zk -mtune=arm1176jzf-s
-fomit-frame-pointer   conftest.c -lncurses   5
/usr/libexec/gcc/armv6j-hardfloat-linux-gnueabi/ld: cannot find
-lncurses
collect2: ld returned 1 exit status
configure:3995: $? = 1

ncurses did get installed in the alternate root::

ls -1 ${ROOT}lib/libncurses*
/home/dustin/rpi-build/buildroot/lib/libncurses.so.5
/home/dustin/rpi-build/buildroot/lib/libncurses.so.5.9
/home/dustin/rpi-build/buildroot/lib/libncursesw.so.5
/home/dustin/rpi-build/buildroot/lib/libncursesw.so.5.9

Now, I've found that if I install ncurses in /usr/${CHOST} instead of 
${ROOT}, psmisc will build successfully. I am thus confused on where 
things are supposed to be built. The Cross Development Guide says not to 
install pieces of the toolchain in /usr/${CHOST}, but some ebuilds, like 
openrc, have explicit RDEPENDs on them, so emerge pulls them in. I'm not 
sure how to resolve this seeming catch-22 where I can't install runtime 
dependencies in /usr/${CHOST}, but I also can't install build 
dependencies in in ${ROOT}.


I am hoping to have this process scriptable, so my current method of 
just installing missing build dependencies in /usr/${CHOST} after 
something fails won't work. Any pointers would be appreciated.


Thanks,

--
♫Dustin



Re: [gentoo-user] Re: broadcom-sta and the 3.6.x kernel

2012-12-11 Thread Dustin C. Hatch

On 12/11/2012 03:04, Nuno J. Silva wrote:

On 2012-12-07, Mick wrote:

This sounds scary!!!  Isn't there a way of disabling this feature in
the BIOS?


With HP, you don't even get a BIOS setup. You get something that tells
you the processor temperature and possibly lets you change the boot
order.

That's exactly the case with this notebook. No settings whatsoever 
beyond date/time and boot order.

Have you spoken to the HP police to ask what they can do to allow you to
manage the machine you bought from them?  O_O


I guess I could do that too. I find it a bit annoying that they don't
even offer a BIOS setup and then decide to silently flip some of the
settings with BIOS upgrades (like disabling AMD-V...)

This machine is long since out of warranty; they won't even speak to me 
anymore. I was able to use a hex editor to modify the white list at one 
time, but it didn't matter because the hardware radio switch doesn't 
work with different cards, either, leaving the radio in a permanently 
off state.


Someday, I'll get a more professional notebook, but until then, I'm 
stuck with the patched broadcom-sta. It does seem to be working fine for 
now, so I'm not terribly worried. As much as I would prefer to have an 
open source driver, I also need my machine to work.


--
♫Dustin



Re: [gentoo-user] broadcom-sta and the 3.6.x kernel

2012-12-04 Thread Dustin C. Hatch

On 12/3/2012 19:22, Allan Gottlieb wrote:

I believe several on this list use -sta and know many are running 3.6.x.
What do you do?  I should add that at present running 3.5.x is not a
hardship for me.

I have broadcom-sta working on my notebook with kernel-3.6, using the 
patches in #437898. For convenience, you can find them all in my overlay 
(layman -a dustin).


I am actually having better luck with kernel-3.6 than I did with 3.5 
because of several problems in the wl driver with regard to cfg80211. 
Notably, in 3.5 with cfg80211, dmesg was filled with cannot get rssi 
messages, several per minute. That's gone now and wpa_supplicant 
correctly reports receive signal strength.


--
♫Dustin



Re: [gentoo-user] broadcom-sta and the 3.6.x kernel

2012-12-04 Thread Dustin C. Hatch

On 12/4/2012 06:11, Florian Philipp wrote:


Do you actually need broadcom-sta anymore? With the recent kernel
updates more chips work with the in-kernel driver (brcmsmac). But the
config option is well hidden (you need to enable BCMA to even see it).

Yes, I initially tried the b43 driver, which worked, but consistently 
dropped about 5-15% of packets, making it mostly unusable. I also tried 
bcrmsmac and bcrmfmac, and neither of them supported my card (432b). 
Unfortunately, I can't get a different card, either, because I my 
notebook has a whitelist of supported devices in the BIOS, and it 
won't even boot with a mini-pci-e card installed that isn't in that 
list. Thanks, HP :(


Regards,

--
♫Dustin



Re: [gentoo-user] What utility do you use to sync user files?

2012-12-02 Thread Dustin C. Hatch

On 12/2/2012 14:33, Neil Bothwick wrote:

On Sun, 2 Dec 2012 12:21:40 -0500, Randy Westlund wrote:


What utilities do you guys use?  Is there a better way to do this?  It
would be nice to move everything to the background, but I've already
clobbered a few files by calling this in the wrong order


net-misc/unison


I use unison to emulate Windows's offline files feature for several 
subdirectories in ~, and I can say it works really well. It took me 
quite some time to understand all of its options, and it has some very 
strange behavioral quirks which are easily worked around, but I like the 
what I ended up with. I currently have it set up to automatically 
synchronize a couple of locations on my notebook with a share on my file 
server about every five minutes. If the server is unavailable (i.e. I am 
not at home), it exits silently, but will try again at the next 
scheduled time. In the event of file conflicts (i.e. I changed the same 
file on the server and on the notebook between syncs), it sends me an 
email listing the conflicting filenames, and I can look into it later.


--
♫Dustin