Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 23/07/20 06:45, Walter Dnes wrote: > ...does indeed pull in sphinx. If I didn't know any better, I'd say > that Lennart is behind this. Anyhow, I've managed to avoid llvm > altogether (USE="-llvm"), so I don't have that problem. I think you might find sphinx is a dependency of the kernel ... Iirc all of the kernel doc is slowly being switched to sphinx. Cheers, Wol
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Thursday, 23 July 2020 06:45:27 BST Walter Dnes wrote: > I assume you're on unstable? Yes, I needed it for zoom. > ACCEPT_KEYWORDS="~amd64" USE="-doc -libffi -ncurses emerge -pv > =sys-devel/llvm-10.0.1 > > ...does indeed pull in sphinx. If I didn't know any better, I'd say > that Lennart is behind this. Anyhow, I've managed to avoid llvm > altogether (USE="-llvm"), so I don't have that problem. I don't have that option, as my video card driver requires llvm. -- Regards, Peter.
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Thu, Jul 23, 2020 at 01:45:27AM -0400, Walter Dnes wrote: > ACCEPT_KEYWORDS="~amd64" USE="-doc -libffi -ncurses emerge -pv > =sys-devel/llvm-10.0.1 > > ...does indeed pull in sphinx. If I didn't know any better, I'd say > that Lennart is behind this. Anyhow, I've managed to avoid llvm > altogether (USE="-llvm"), so I don't have that problem. As in most other Sphinx-utilising packages, it is listed in the BDEPEND variable, meaning that it is only required during the building of the package [1]. If `emerge -c` isn't removing what you would expect, try something like `emerge -cv dev-python/sphinx` to see the explicit reverse-dependencies blocking the removal. [1] https://devmanual.gentoo.org/general-concepts/dependencies/index.html#build-dependencies -- Ashley Dixon suugaku.co.uk 2A9A 4117 DA96 D18A 8A7B B0D2 A30E BF25 F290 A8AA signature.asc Description: PGP signature
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Wed, Jul 22, 2020 at 04:13:10PM +0100, Peter Humphrey wrote > On Wednesday, 22 July 2020 14:59:01 BST Walter Dnes wrote: > > On Wed, Jul 22, 2020 at 09:46:34AM +0100, Peter Humphrey wrote > > > > > So it doesn't even depend on the doc USE flag. > > > > Strange. On my system... > > > > But if you upgrade to 10.0.1, as I did today, you'll find things have > changed. > At least, I did. I assume you're on unstable? ACCEPT_KEYWORDS="~amd64" USE="-doc -libffi -ncurses emerge -pv =sys-devel/llvm-10.0.1 ...does indeed pull in sphinx. If I didn't know any better, I'd say that Lennart is behind this. Anyhow, I've managed to avoid llvm altogether (USE="-llvm"), so I don't have that problem. -- Walter Dnes I don't run "desktop environments"; I run useful applications
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-21 12:00, Grant Edwards wrote:
>
> That only requires 6 new packages (two of them are
> acct-{user,group}/polkitd, so it's only 4 new "real" packages. Of
> course every self-respecting package needs to install at least one new
> programming language -- this time it's dev-lang/spidermonkey. :/
>
> Sheesh.
>
You can get rid of a few of those with
sys-auth/elogind -policykit
sys-auth/pambase elogind
in package.use, if you don't need whatever it is that policykit does.
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Wednesday, 22 July 2020 14:59:01 BST Walter Dnes wrote: > On Wed, Jul 22, 2020 at 09:46:34AM +0100, Peter Humphrey wrote > > > So it doesn't even depend on the doc USE flag. > > Strange. On my system... But if you upgrade to 10.0.1, as I did today, you'll find things have changed. At least, I did. -- Regards, Peter.
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Wed, Jul 22, 2020 at 09:46:34AM +0100, Peter Humphrey wrote > > So it doesn't even depend on the doc USE flag. > Strange. On my system... == USE="-doc" emerge -pv llvm [i660][root][~] USE="-doc" emerge -pv llvm These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild N ] sys-devel/llvm-common-10.0.0::gentoo 117,974 KiB [ebuild N ] sys-devel/llvm-10.0.0:10::gentoo USE="libffi ncurses -debug -doc -exegesis -gold -libedit -test -xar -xml -z3" LLVM_TARGETS="AMDGPU BPF NVPTX (X86) -AArch64 -ARC -ARM -AVR -Hexagon -Lanai -MSP430 -Mips -PowerPC -RISCV -Sparc -SystemZ -WebAssembly -XCore" 173 KiB USE="doc" emerge -pv llvm These are the packages that would be merged, in order: Calculating dependencies... done! emerge: there are no ebuilds built with USE flags to satisfy ">=media-libs/gd-2.0.34:=[fontconfig,jpeg,png,truetype,zlib]". !!! One of the following packages is required to complete your request: - media-libs/gd-2.3.0::gentoo (Change USE: +fontconfig) (dependency required by "media-gfx/graphviz-2.42.3::gentoo" [ebuild]) (dependency required by "dev-python/sphinx-3.0.4::gentoo[doc]" [ebuild]) (dependency required by "sys-devel/llvm-10.0.0::gentoo[doc]" [ebuild]) (dependency required by "llvm" [argument]) It looks like "doc" is set somewhere in one of... - make.conf - package.use - your profile - default inherited by the llvm ebuild I've just added "-doc" to USE in make.conf. It's now up to... USE="10bit X apng ffmpeg jpeg opengl png szip truetype x264 x265 xorg threads webp -acl -arping -berkdb -bindist -caps -cracklib -crypt -doc -elogind -filecaps -gallium -gdbm -graphite -iconv -introspection -ipc -iptables -ipv6 -libav -libglvnd -llvm -manpager -nls -openmp -pam -pch -sendmail -tcpd -udev -udisks -unicode -xinerama" -- Walter Dnes I don't run "desktop environments"; I run useful applications
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Wed, Jul 22, 2020 at 01:25:01PM -, Grant Edwards wrote > On 2020-07-22, Ashley Dixon wrote: > > On Wed, Jul 22, 2020 at 02:29:48AM -, Grant Edwards wrote: > >> Yes, that's what I did months ago, and everything worked fine with > >> Xorg using the "suid" flag and without consolekit or elogind -- until > >> this morning, when pam refused to upgrade unless I set the elogind USE > >> flag. > > > > Look at REQUIRED_USE in sys-auth/pambase ebuild [1]: > > REQUIRED_USE="?? ( consolekit elogind systemd )" > > > > I.e., "zero or one of `consolekit`, `elogind`, or `systemd` must be set, > > but not several". > > Right. Contrary to what the news article says, you can not just enable > 'suid' on xorg-server and run without consolekit/elogind/systemd. I'm doing that right now, so yes it does work. Please re-read Ashley Dixon's post... "zero or one of". I have zero of them set. -- Walter Dnes I don't run "desktop environments"; I run useful applications
[gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-22, Walter Dnes wrote: >> >> Users who do not wish to use logind interface or have rare hardware >> >> that does not use KMS and because of that, require root privileges >> >> to operate, can manually re-enable 'suid' and disable 'elogind' USE >> >> flags in order to preserve the previous behavior. >> >> Yes, that's what I did months ago, and everything worked fine with >> Xorg using the "suid" flag and without consolekit or elogind -- until >> this morning, when pam refused to upgrade unless I set the elogind USE >> flag. > > The news item said that to retain old behaviour you need to do *BOTH* > - set x11-base/xorg-server suid (which I did in package.use) > - set "-elogind" (which I did in USE in make.conf) Except starting yesterday, pam no longer allows that. > BTW, I have pam totally masked out... I used to run without pam, but something required it a while back. Maybe I should look into removing pam again. -- Grant
[gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-22, Ashley Dixon wrote: > On Wed, Jul 22, 2020 at 02:29:48AM -, Grant Edwards wrote: >> Yes, that's what I did months ago, and everything worked fine with >> Xorg using the "suid" flag and without consolekit or elogind -- until >> this morning, when pam refused to upgrade unless I set the elogind USE >> flag. > > Look at REQUIRED_USE in sys-auth/pambase ebuild [1]: > REQUIRED_USE="?? ( consolekit elogind systemd )" > > I.e., "zero or one of `consolekit`, `elogind`, or `systemd` must be set, but > not > several". [2] Right. Contrary to what the news article says, you can not just enable 'suid' on xorg-server and run without consolekit/elogind/systemd. -- Grant
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Tuesday, 21 July 2020 16:23:35 BST Peter Humphrey wrote:
> On Tuesday, 21 July 2020 15:47:25 BST Neil Bothwick wrote:
> > Sync, re-emerge bind-tools and try again. The man pages are now
> > downloaded as a separate tarball, so Sphinx and deps are not longer
> > needed.
>
> And lo! 17 packages were removed by depclean!
And woe! Sphinx is pulled back in again by llvm today. :(
# less $(equery w llvm)
RDEPEND
--->8
$(python_gen_any_dep '
dev-python/sphinx[${PYTHON_USEDEP}]
doc? ( dev-python/recommonmark[${PYTHON_USEDEP}] )
')"
So it doesn't even depend on the doc USE flag.
--
Regards,
Peter.
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Wed, Jul 22, 2020 at 02:29:48AM -, Grant Edwards wrote > On 2020-07-22, Walter Dnes wrote: > > > > According to news item > > https://www.gentoo.org/support/news-items/2020-06-24-xorg-server-dropping-default-suid.html > > > > * xorg-server will no longer be "suid" *BY DEFAULT* > > * that means *THE DEFAULT* is to require a logind server like systemd > > or elogind > > > > The news item also says... > > > >> Users who do not wish to use logind interface or have rare hardware > >> that does not use KMS and because of that, require root privileges > >> to operate, can manually re-enable 'suid' and disable 'elogind' USE > >> flags in order to preserve the previous behavior. > > Yes, that's what I did months ago, and everything worked fine with > Xorg using the "suid" flag and without consolekit or elogind -- until > this morning, when pam refused to upgrade unless I set the elogind USE > flag. The news item said that to retain old behaviour you need to do *BOTH* - set x11-base/xorg-server suid (which I did in package.use) - set "-elogind" (which I did in USE in make.conf) BTW, I have pam totally masked out... [i660][root][~] cat /etc/portage/package.mask/package.mask sys-apps/pv sys-auth/pambase sys-libs/pam virtual/pam Years ago, back when pam was default on the Gentoo install, it was to many users what HAL was to Dale, causing problems galore. The root of the problem was that pam provided "enhanced security" for some apps by changing to a different config file for the app, using different config specs. You could run "man " and do all the Google searches you wanted, but you always ended up with instructions for configuring the "un-pam-ified" version, not the "pam-ified" version. "Everything you know is wrong". So I fell into the habit of removing pam right after installation. And the reason I mask out "sys-apps/pv" is because too many times when I want to run "emerge -pv " I did "emerge pv " which has a *TOTALLY* different meaning. -- Walter Dnes I don't run "desktop environments"; I run useful applications
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Wed, Jul 22, 2020 at 02:29:48AM -, Grant Edwards wrote: > Yes, that's what I did months ago, and everything worked fine with > Xorg using the "suid" flag and without consolekit or elogind -- until > this morning, when pam refused to upgrade unless I set the elogind USE > flag. Look at REQUIRED_USE in sys-auth/pambase ebuild [1]: REQUIRED_USE="?? ( consolekit elogind systemd )" I.e., "zero or one of `consolekit`, `elogind`, or `systemd` must be set, but not several". [2] Run `quse -Ip sys-auth/pambase | grep -E 'consolekit|elogind|systemd'` to check the USE-flags with which you're asking Portage to build pambase. [1] https://gitweb.gentoo.org/repo/gentoo.git/tree/sys-auth/pambase/pambase-20200618.ebuild#n19 [2] https://devmanual.gentoo.org/ebuild-writing/variables/index.html#eapi-5 -- Ashley Dixon suugaku.co.uk 2A9A 4117 DA96 D18A 8A7B B0D2 A30E BF25 F290 A8AA signature.asc Description: PGP signature
[gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-22, Walter Dnes wrote:
> On Tue, Jul 21, 2020 at 04:00:21PM -, Grant Edwards wrote
>>
>> Before I can try that, I apparently have to enable the elogind USE
>> flag because of somthing else that changed since I sync'ed yesterday.
>>
>> That only requires 6 new packages (two of them are
>> acct-{user,group}/polkitd, so it's only 4 new "real" packages. Of
>> course every self-respecting package needs to install at least one new
>> programming language -- this time it's dev-lang/spidermonkey. :/
>>
>> Sheesh.
>
> According to news item
> https://www.gentoo.org/support/news-items/2020-06-24-xorg-server-dropping-default-suid.html
>
> * xorg-server will no longer be "suid" *BY DEFAULT*
> * that means *THE DEFAULT* is to require a logind server like systemd
> or elogind
>
> The news item also says...
>
>> Users who do not wish to use logind interface or have rare hardware
>> that does not use KMS and because of that, require root privileges
>> to operate, can manually re-enable 'suid' and disable 'elogind' USE
>> flags in order to preserve the previous behavior.
Yes, that's what I did months ago, and everything worked fine with
Xorg using the "suid" flag and without consolekit or elogind -- until
this morning, when pam refused to upgrade unless I set the elogind USE
flag.
--
Grant
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Tue, Jul 21, 2020 at 09:30:07PM -0400, Walter Dnes wrote: > According to news item > https://www.gentoo.org/support/news-items/2020-06-24-xorg-server-dropping-default-suid.html > > * xorg-server will no longer be "suid" *BY DEFAULT* > * that means *THE DEFAULT* is to require a logind server like systemd > or elogind > > The news item also says... > > > Users who do not wish to use logind interface or have rare hardware > > that does not use KMS and because of that, require root privileges > > to operate, can manually re-enable 'suid' and disable 'elogind' USE > > flags in order to preserve the previous behavior. However, please > > note that this is heavily discouraged to run X server as root due > > to security reasons. The 'suid' USE flag will remain as optional > > opt-in for the need of legacy hardware. > > I've set "x11-base/xorg-server glamor suid udev xorg" in package.use > and "-elogind" in make.conf, and no additional packages are required. I > used to start with USE="-*" but I don't do that anymore. Instead I use > > USE="10bit X apng ffmpeg jpeg opengl png szip truetype x264 x265 xorg threads > webp -acl -arping -berkdb -bindist -caps -cracklib -crypt -elogind -filecaps > -gallium -gdbm -graphite -iconv -introspection -ipc -iptables -ipv6 -libav > -libglvnd -llvm -manpager -nls -openmp -pam -pch -sendmail -tcpd -udev -udisks > -unicode -xinerama" There was a big argument about it over on Gentoo-Dev. It essentially reduced to the point that although most Gentoo users are still going to want "suid" (in the absence of systemd/elogind or another fancy login manager), Portage should provide good, non-anti-pattern, secure defaults for _new_ users, however much of an inconvenience it may be for existing users who run X with `startx`. I generally agree with them on this point; "suid" is horribly outdated, however ubiquitous (especially for minimalist systems). https://www.mail-archive.com/gentoo-dev@lists.gentoo.org/msg89536.html -- Ashley Dixon suugaku.co.uk 2A9A 4117 DA96 D18A 8A7B B0D2 A30E BF25 F290 A8AA signature.asc Description: PGP signature
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Tue, Jul 21, 2020 at 04:00:21PM -, Grant Edwards wrote
>
> Before I can try that, I apparently have to enable the elogind USE
> flag because of somthing else that changed since I sync'ed yesterday.
>
> That only requires 6 new packages (two of them are
> acct-{user,group}/polkitd, so it's only 4 new "real" packages. Of
> course every self-respecting package needs to install at least one new
> programming language -- this time it's dev-lang/spidermonkey. :/
>
> Sheesh.
According to news item
https://www.gentoo.org/support/news-items/2020-06-24-xorg-server-dropping-default-suid.html
* xorg-server will no longer be "suid" *BY DEFAULT*
* that means *THE DEFAULT* is to require a logind server like systemd
or elogind
The news item also says...
> Users who do not wish to use logind interface or have rare hardware
> that does not use KMS and because of that, require root privileges
> to operate, can manually re-enable 'suid' and disable 'elogind' USE
> flags in order to preserve the previous behavior. However, please
> note that this is heavily discouraged to run X server as root due
> to security reasons. The 'suid' USE flag will remain as optional
> opt-in for the need of legacy hardware.
I've set "x11-base/xorg-server glamor suid udev xorg" in package.use
and "-elogind" in make.conf, and no additional packages are required. I
used to start with USE="-*" but I don't do that anymore. Instead I use
USE="10bit X apng ffmpeg jpeg opengl png szip truetype x264 x265 xorg threads
webp -acl -arping -berkdb -bindist -caps -cracklib -crypt -elogind -filecaps
-gallium -gdbm -graphite -iconv -introspection -ipc -iptables -ipv6 -libav
-libglvnd -llvm -manpager -nls -openmp -pam -pch -sendmail -tcpd -udev -udisks
-unicode -xinerama"
--
Walter Dnes
I don't run "desktop environments"; I run useful applications
[gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-21, Grant Edwards wrote: > On 2020-07-21, Peter Humphrey wrote: >> On Tuesday, 21 July 2020 15:47:25 BST Neil Bothwick wrote: >> >>> Sync, re-emerge bind-tools and try again. The man pages are now >>> downloaded as a separate tarball, so Sphinx and deps are not longer >>> needed. >> >> And lo! 17 packages were removed by depclean! > > Before I can try that, I apparently have to enable the elogind USE > flag because of somthing else that changed since I sync'ed > yesterday. That only requires 6 new packages [...] After that, X wouldn't start... another half-hour of googling and experimentation... switch my 'x' alias from using 'xinit' to 'startx', and now X is working again. ... and emerge --depclean removes all of the sphinx packages along with Babel, jinja, and a few others! So, I gained back the ground I lost yesterday to bind-tools, but lost some ground to elogind et alia. -- Grant
[gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-21, Peter Humphrey wrote:
> On Tuesday, 21 July 2020 15:47:25 BST Neil Bothwick wrote:
>
>> Sync, re-emerge bind-tools and try again. The man pages are now
>> downloaded as a separate tarball, so Sphinx and deps are not longer
>> needed.
>
> And lo! 17 packages were removed by depclean!
Before I can try that, I apparently have to enable the elogind USE flag
because of somthing else that changed since I sync'ed yesterday.
That only requires 6 new packages (two of them are
acct-{user,group}/polkitd, so it's only 4 new "real" packages. Of
course every self-respecting package needs to install at least one new
programming language -- this time it's dev-lang/spidermonkey. :/
Sheesh.
--
Grant
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Tuesday, 21 July 2020 15:47:25 BST Neil Bothwick wrote: > Sync, re-emerge bind-tools and try again. The man pages are now > downloaded as a separate tarball, so Sphinx and deps are not longer > needed. And lo! 17 packages were removed by depclean! -- Regards, Peter.
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Tue, 21 Jul 2020 15:03:41 - (UTC), Grant Edwards wrote: > > The man pages are now downloaded as a separate tarball, so Sphinx > > and deps are not longer needed. > > Wow, that's impressive service! One nit-picking, whiney post on the > mailing list and the "problem" gets fixed in a matter of hours. :) Give some credit to the person that suggested including pre-compiled man pages, whoever that was... -- Neil Bothwick How do you know when it's time to tune your bagpipes? pgpFbzhAgwltf.pgp Description: OpenPGP digital signature
[gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-21, Neil Bothwick wrote: > On Tue, 21 Jul 2020 13:08:16 - (UTC), Grant Edwards wrote: > >> > These are build-only dependencies so "emerge --depclean" can remove >> > them after you install bind-tools. >> >> Except it doesn't. I did an "emerge --depclean" after updating >> bind-tools, and sphinx et al were not removed. > > Sync, re-emerge bind-tools and try again. I will as soon as yesterday's emerge -auvND finishes. Chromium got updated, and that build time is measured in days rather than minutes. > The man pages are now downloaded as a separate tarball, so Sphinx > and deps are not longer needed. Wow, that's impressive service! One nit-picking, whiney post on the mailing list and the "problem" gets fixed in a matter of hours. :) -- Grant
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On Tue, 21 Jul 2020 13:08:16 - (UTC), Grant Edwards wrote: > > These are build-only dependencies so "emerge --depclean" can remove > > them after you install bind-tools. > > Except it doesn't. I did an "emerge --depclean" after updating > bind-tools, and sphinx et al were not removed. Sync, re-emerge bind-tools and try again. The man pages are now downloaded as a separate tarball, so Sphinx and deps are not longer needed. -- Neil Bothwick SITCOM: Single Income, Two Children, Oppressive Mortgage pgp4NwdiMzCRb.pgp Description: OpenPGP digital signature
Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-21 13:08:16, Grant Edwards wrote: > On 2020-07-20, Michael Orlitzky wrote: > > > These are build-only dependencies so "emerge --depclean" can remove them > > after you install bind-tools. > > Except it doesn't. I did an "emerge --depclean" after updating > bind-tools, and sphinx et al were not removed. > The logic (and documentation) is incomprehensible to me, but this behavior depends on --with-bdeps and some related arguments to emerge.
[gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
On 2020-07-20, Michael Orlitzky wrote: > These are build-only dependencies so "emerge --depclean" can remove them > after you install bind-tools. Except it doesn't. I did an "emerge --depclean" after updating bind-tools, and sphinx et al were not removed. -- Grant
