-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/07/2011 05:27, Michał Górny wrote:
> On Wed, 07 Sep 2011 12:17:21 +0300 Alexey Shvetsov <ale...@gentoo.org> > wrote: > >> Moving things as openrc to /usr/libexec will effectevely barake old >> systems with separtae / and /usr. So it isnt good idea > > Old systems should migrate to initramfs, like it was already pointed out > before. Breakage is already there, you just don't notice it. > I've used a separate /usr on every system I've ever built on Gentoo, and some have filesystems going back years. Never once have I had any issues with separate / and /usr, and none of them use an initramfs. Our own security guide has made this recommendation for as long as I can remember (so one can mark /usr as read-only on production setups, for example). As far as initramfs, is this something that would need to go into the kernel? I hand-build all of my kernels, so any such initramfs package might be better off as a standalone package available on the FS at kernel build time. I also netboot some of my systems, and they have limits on the total size of the kernel image (7.2MB on one, ~40MB on another, etc), hence the need to keep this small or find another way to do things. Are there possibilities about breaking off just a small piece of openrc and putting that into /run (or /boot)? Enough of the core scripts so that it can find /usr and mount it before continuing? - -- Joshua Kinard Gentoo/MIPS ku...@gentoo.org 4096R/D25D95E3 2011-03-28 "The past tempts us, the present confuses us, the future frightens us. And our lives slip away, moment by moment, lost in that vast, terrible in-between." - --Emperor Turhan, Centauri Republic -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) iQIcBAEBAgAGBQJOZ+KrAAoJENsjoH7SXZXjagYP/A9eGlVOw8e0+uZFz7RMo3wD VYP4/oeQ3WMg7MdFX6YH9fbItyifG4szML1k1gIzh3woZrt9l6GWV7Jd0MM9jd9D s26pSe3OhoKTdDImFwSQfQmwX9K6kiDa8K9x/Tj9bD9Z+/513VhpQgN/VH70UarX LW/aoeLFwXx6ppU6WXj2u15e7H/3vkYRMYI+jDKrRxWXybT/IMM55B8mBgpum6dc 6cMNtBy751hYzk4ibszBUuezkbOh+yx/GUFksuBP/1J3u1Vvre7ejH184zvWveMS ZBQtxsaAFz6/fhhhV9QqKy0bQq7V6oTK4QE6DC+BpkhBPkuR2kJ01PyDzZcqr9Lg luSBJMSxpntbfm68P/HH7aQU3VeomSfucBjWcFRAJExd+EFQSLk7Z2s7ijkv2YHk RvMypR8ARxumSj3vQE2XhG9c9GxZWMXF+3X9J7BGqdfBFCJjgOa4sYLnwsAMTtcq jtJHW/dJ+SsJw7wAUeNRZsg+moMCLWknvbgPhd6dcSY36P6TytMMBw4NPbPTs96l wC0zAX6Dk0/rCcm6H0U8FUJw/9MjAgnGG1Jo54ed11e+ePWzTuvLIs4b3OICN0TL Uxr67jsIz5r14JlyaBL0rNCQVMFvjrxO4lhKI62xvLFX334a7uimKReJZIHXOjdt CfygZB6C4kK8hPPbgks1 =Y0sh -----END PGP SIGNATURE-----
