[gentoo-user] preserved-rebuild acting strangely
Hi. I am using gentoo unstable and after this last update when I tried to do emerge @preserved-rebuild I get the following: These are the packages that would be merged, in order: Calculating dependencies done! emerge: there are no ebuilds to satisfy net-libs/xulrunner:1.9. (dependency required by @preserved-rebuild [argument]) I have xulrunner 2.0 installed, although it looks like nothing depends on that package, so I am not sure what is going on. I looked at /var/lib/portage/preserved-rebuild-registrybut can't find xulrunner anywhere in that file. How can I proceed? Thanks in advance for any suggestions. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici cov...@ccs.covici.com
Re: [gentoo-user] Traffic Intensive IPSec Tunnel
On Sunday 12 May 2013 03:37:48 Nick Khamis wrote: Thanks yet again Michael! Enjoy your weekend. N. On 5/11/13, Michael Mol mike...@gmail.com wrote: On 05/11/2013 03:13 PM, Nick Khamis wrote: Hello Everyone, Our service provider requires all connections between us be done through IPSec IKE. From the little bit of research, I found that this is achieved using a system with IPSec kernel modules enabled, along with cryptography modules. On the application level, I saw ipsec tool, OpenSWAN, and OpenVPN. What I was wondering is which should be used for traffic intensive connections in a deployment environment. Without starting any OpenVPN vs OpenSwan debate, we would really like to keep the application level to a minimum. Meaning if we could achieve the tunnel using the required kernel modules, ipsec-tools and iptables, we see that as keeping it simple and effective. Your insight, suggested how-to pages are greatly appreciated. To my knowledge, OpenVPN does not use IPSec. Instead, it encapsulates either IP/IPv6 (tun mode) or layer 2 (tap mode) over TLS. If your service provider requires IPSec and IKE, best forget about OpenVPN. http://www.ipsec-howto.org/x304.html Look under Automatic keyed connections using racoon If your ISP is using IKEv1 Racoon *should* do what you want, but you may need to set up the routes manually. The up/down scripts in /etc/racoon/scripts do not work in my case and I have to set them up with ifconfig and ip. Apparently they work if you use xauth, according to this thread: http://forums.gentoo.org/viewtopic-p-6977674.html Instead, I opted for using StrongSwan, which is *much* better documented, supports additional ciphers, RADIUS, etc. and allocation of IKEv1 pools using a database back end. More importantly it also works with IKEv2 and MOBIKE. With racoon you will have to try racoon2 if you need IKEv2, which was in development back in 2010. You can read a comparison between the *Swans here, but things have moved on since; e.g. StrongSwan supports IKEv1 in Aggressive Mode, OpenSwan supports part of IKEv2, etc: https://lists.strongswan.org/pipermail/users/2010-September/005293.html Ask if you need particular details in setting up your implementation. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Libreoffice Compile
On 11/05/2013 19:53, Silvio Siefke wrote: Hello, is there a way that i can compile Libreoffice on my Desktop System and copy to the Netbook? Because the netbook need long time to compile libreoffice, and the Desktop is little faster. Or can i build a libreoffice Package on Desktop and copy to the netbook? The Netbook is a Samsung NC 10, Atom Processor and the Desktop is a Fujitsu P4. Thank you Greetings Silvio Your desktop is a P4 Your netbook is an Atom Others have noted how CHOST and CFLAGS must match on both machines, otherwise the Atom will probably not run P4 code. This will probably be a huge issue in your life and quite honestly, totally not worth it for just one package. Just install app-office/libreoffice-bin on the netbook instead -- Alan McKinnon alan.mckin...@gmail.com
Re: [gentoo-user] Booting memtest86 from grub2
On Sat, 11 May 2013 16:12:52 -0700, walt wrote: Dale, you didn't describe the symptoms you're seeing, but maybe just seeing how I did it will help: menuentry memtest86 { search -l gentoo64unstable -s root linux ($root)/boot/memtest86/memtest boot } I don't know about memtest86, but memtest86+ installs a menu file in /etc/grub.d, which means grub-mkconfig handles it. % cat /etc/grub.d/39_memtest86+ #!/bin/sh exec tail -n +3 $0 menuentry memtest86+ 4.20 { linux16 /boot/memtest86plus/memtest } menuentry memtest86+ 4.20 (netbsd) { insmod bsd knetbsd /boot/memtest86plus/memtest.netbsd } -- Neil Bothwick Maybe... How much are you bribing me this time? signature.asc Description: PGP signature
Re: [gentoo-user] preserved-rebuild acting strangely
On Sun, 12 May 2013 02:50:44 -0400, cov...@ccs.covici.com wrote: Hi. I am using gentoo unstable and after this last update when I tried to do emerge @preserved-rebuild I get the following: I didn't know Gentoo specifically made an unstable version, it's generally rock solid for me. These are the packages that would be merged, in order: Calculating dependencies done! emerge: there are no ebuilds to satisfy net-libs/xulrunner:1.9. (dependency required by @preserved-rebuild [argument]) I have xulrunner 2.0 installed, although it looks like nothing depends on that package, so I am not sure what is going on. I looked at /var/lib/portage/preserved-rebuild-registrybut can't find xulrunner anywhere in that file. How can I proceed? emerge -cav xulrunner -- Neil Bothwick Excuse for the day: daemons did it signature.asc Description: PGP signature
Re: [gentoo-user] preserved-rebuild acting strangely
Neil Bothwick n...@digimed.co.uk wrote: On Sun, 12 May 2013 02:50:44 -0400, cov...@ccs.covici.com wrote: Hi. I am using gentoo unstable and after this last update when I tried to do emerge @preserved-rebuild I get the following: I didn't know Gentoo specifically made an unstable version, it's generally rock solid for me. Buy unstable I meant ACCEPT_KEYWORDS=~x86 ~amd64 These are the packages that would be merged, in order: Calculating dependencies done! emerge: there are no ebuilds to satisfy net-libs/xulrunner:1.9. (dependency required by @preserved-rebuild [argument]) I have xulrunner 2.0 installed, although it looks like nothing depends on that package, so I am not sure what is going on. I looked at /var/lib/portage/preserved-rebuild-registrybut can't find xulrunner anywhere in that file. How can I proceed? emerge -cav xulrunner I have no ebuilds for xulrunner at all in the tree. But I will try as you suggest because there seems to be nothing dependent on it. Well, that did something good, now its going right along. Thanks so much -- this is a great mailing list. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici cov...@ccs.covici.com
Re: [gentoo-user] preserved-rebuild acting strangely
On 12/05/13 14:29, cov...@ccs.covici.com wrote: Neil Bothwick n...@digimed.co.uk wrote: On Sun, 12 May 2013 02:50:44 -0400, cov...@ccs.covici.com wrote: Hi. I am using gentoo unstable and after this last update when I tried to do emerge @preserved-rebuild I get the following: I didn't know Gentoo specifically made an unstable version, it's generally rock solid for me. Buy unstable I meant ACCEPT_KEYWORDS=~x86 ~amd64 Never, ever add both ~amd64 and ~x86 at the same time in ACCEPT_KEYWORDS. It's either ~amd64 or ~x86, but not BOTH. Otherwise you risk breaking the system as ebuilds make assumptions based on keywords.
Re: [gentoo-user] preserved-rebuild acting strangely
Samuli Suominen ssuomi...@gentoo.org wrote: On 12/05/13 14:29, cov...@ccs.covici.com wrote: Neil Bothwick n...@digimed.co.uk wrote: On Sun, 12 May 2013 02:50:44 -0400, cov...@ccs.covici.com wrote: Hi. I am using gentoo unstable and after this last update when I tried to do emerge @preserved-rebuild I get the following: I didn't know Gentoo specifically made an unstable version, it's generally rock solid for me. Buy unstable I meant ACCEPT_KEYWORDS=~x86 ~amd64 Never, ever add both ~amd64 and ~x86 at the same time in ACCEPT_KEYWORDS. It's either ~amd64 or ~x86, but not BOTH. Otherwise you risk breaking the system as ebuilds make assumptions based on keywords. OK, thanks, I will do that. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici cov...@ccs.covici.com
Re: [gentoo-user] Real qucik question - Copying over kernel configuration for same machines
Thank you!!! On 5/12/13, staticsafe m...@staticsafe.ca wrote: On 5/11/2013 20:39, Nick Khamis wrote: Hello Everyone, Just running an installation on another IBM machine, and wanted to know which kernel config files can we copy over from one machine to another, and have the same exact modules etc copied over. Saw examples for genkern, but we build our own kernels. After copying the files over we like to run make and make modules_install on the new machine. Thanks in Advance, Nick. The .config in the kernel source directory. -- staticsafe O ascii ribbon campaign - stop html mail - www.asciiribbon.org Please don't top post - http://goo.gl/YrmAb Don't CC me! I'm subscribed to whatever list I just posted on.
Re: [gentoo-user] preserved-rebuild acting strangely
130512 cov...@ccs.covici.com wrote: Neil Bothwick n...@digimed.co.uk wrote: On Sun, 12 May 2013 02:50:44 -0400, cov...@ccs.covici.com wrote: I am using gentoo unstable ... I didn't know Gentoo specifically made an unstable version, it's generally rock solid for me. By unstable I meant ACCEPT_KEYWORDS=~x86 ~amd64 That's 'testing', which usually means the ebuild mb slightly awkward, but there are no known bugs; if there were, it wb 'masked'. -- ,, SUPPORT ___//___, Philip Webb ELECTRIC /] [] [] [] [] []| Cities Centre, University of Toronto TRANSIT`-O--O---' purslowatchassdotutorontodotca
Re: [gentoo-user] Booting memtest86 from grub2
Neil Bothwick wrote: On Sat, 11 May 2013 16:12:52 -0700, walt wrote: Dale, you didn't describe the symptoms you're seeing, but maybe just seeing how I did it will help: menuentry memtest86 { search -l gentoo64unstable -s root linux ($root)/boot/memtest86/memtest boot } I don't know about memtest86, but memtest86+ installs a menu file in /etc/grub.d, which means grub-mkconfig handles it. % cat /etc/grub.d/39_memtest86+ #!/bin/sh exec tail -n +3 $0 menuentry memtest86+ 4.20 { linux16 /boot/memtest86plus/memtest } menuentry memtest86+ 4.20 (netbsd) { insmod bsd knetbsd /boot/memtest86plus/memtest.netbsd } That is what I did last. I just emerged the thing and it put the file there. You know I don't reboot often here but this is what it says when I update grub: root@fireball / # /root/grub-update Generating grub.cfg ... Found linux image: /boot/kernel-3.8.7-1 Found linux image: /boot/kernel-3.6.6-1 Found linux image: /boot/kernel-3.5.3-3 done root@fireball / # Shouldn't there be a line for the memtest entry or does it not show that? Maybe it is working and I don't know it yet. lol Oh, I have a script that has the longer command in it with all the nifty options. That's why the command is different. root@fireball / # cat /root/grub-update grub2-mkconfig -o /boot/grub2/grub.cfg root@fireball / # Thanks for the help. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
Re: [gentoo-user] Booting memtest86 from grub2
On Sun, 12 May 2013 07:40:15 -0500, Dale wrote: I don't know about memtest86, but memtest86+ installs a menu file in /etc/grub.d, which means grub-mkconfig handles it. % cat /etc/grub.d/39_memtest86+ #!/bin/sh exec tail -n +3 $0 menuentry memtest86+ 4.20 { linux16 /boot/memtest86plus/memtest } menuentry memtest86+ 4.20 (netbsd) { insmod bsd knetbsd /boot/memtest86plus/memtest.netbsd } That is what I did last. I just emerged the thing and it put the file there. You know I don't reboot often here but this is what it says when I update grub: root@fireball / # /root/grub-update Generating grub.cfg ... Found linux image: /boot/kernel-3.8.7-1 Found linux image: /boot/kernel-3.6.6-1 Found linux image: /boot/kernel-3.5.3-3 done root@fireball / # Shouldn't there be a line for the memtest entry or does it not show that? Maybe it is working and I don't know it yet. lol There are no echo commands in the file, so it doesn't show anything when adding. grub-mkconfig doesn't output anything by default, only the helper scripts generate non-error output Check the contents of grub.cfg. Oh, I have a script that has the longer command in it with all the nifty options. That's why the command is different. root@fireball / # cat /root/grub-update grub2-mkconfig -o /boot/grub2/grub.cfg I do a similar thing, except the script is in /usr/local/bin, where it should be :P, and it checks if /boot is mounted ro and remounts it rw if necessary. -- Neil Bothwick WinErr 019: User error - Not our fault. Is Not! Is Not! signature.asc Description: PGP signature
Re: [gentoo-user] Libreoffice Compile
Correct me if I'm wrong, but it is possible from what I've read to cross compile using distcc. http://www.gentoo.org/doc/en/cross-compiling-distcc.xml seems to describe this in detail, though the article is nearly 7 years old. I would prefer this over a one shot package install since you could offload ALL of your compiles. I have no personal experience with distcc and it may be more of a headache than it is worth. I just know it was one of the options I looked at for a similar issue. On May 12, 2013 5:36 AM, Alan McKinnon alan.mckin...@gmail.com wrote: On 11/05/2013 19:53, Silvio Siefke wrote: Hello, is there a way that i can compile Libreoffice on my Desktop System and copy to the Netbook? Because the netbook need long time to compile libreoffice, and the Desktop is little faster. Or can i build a libreoffice Package on Desktop and copy to the netbook? The Netbook is a Samsung NC 10, Atom Processor and the Desktop is a Fujitsu P4. Thank you Greetings Silvio Your desktop is a P4 Your netbook is an Atom Others have noted how CHOST and CFLAGS must match on both machines, otherwise the Atom will probably not run P4 code. This will probably be a huge issue in your life and quite honestly, totally not worth it for just one package. Just install app-office/libreoffice-bin on the netbook instead -- Alan McKinnon alan.mckin...@gmail.com
Re: [gentoo-user] Booting memtest86 from grub2
Neil Bothwick wrote: On Sun, 12 May 2013 07:40:15 -0500, Dale wrote: I don't know about memtest86, but memtest86+ installs a menu file in /etc/grub.d, which means grub-mkconfig handles it. % cat /etc/grub.d/39_memtest86+ #!/bin/sh exec tail -n +3 $0 menuentry memtest86+ 4.20 { linux16 /boot/memtest86plus/memtest } menuentry memtest86+ 4.20 (netbsd) { insmod bsd knetbsd /boot/memtest86plus/memtest.netbsd } That is what I did last. I just emerged the thing and it put the file there. You know I don't reboot often here but this is what it says when I update grub: root@fireball / # /root/grub-update Generating grub.cfg ... Found linux image: /boot/kernel-3.8.7-1 Found linux image: /boot/kernel-3.6.6-1 Found linux image: /boot/kernel-3.5.3-3 done root@fireball / # Shouldn't there be a line for the memtest entry or does it not show that? Maybe it is working and I don't know it yet. lol There are no echo commands in the file, so it doesn't show anything when adding. grub-mkconfig doesn't output anything by default, only the helper scripts generate non-error output Check the contents of grub.cfg. Well I be darn. ### BEGIN /etc/grub.d/39_memtest86+ ### menuentry memtest86+ 4.20 { linux16 /boot/memtest86plus/memtest } menuentry memtest86+ 4.20 (netbsd) { insmod bsd knetbsd /boot/memtest86plus/memtest.netbsd } ### END /etc/grub.d/39_memtest86+ ### There it be. I wonder if it worked all the other times I tried? Oh, I have a script that has the longer command in it with all the nifty options. That's why the command is different. root@fireball / # cat /root/grub-update grub2-mkconfig -o /boot/grub2/grub.cfg I do a similar thing, except the script is in /usr/local/bin, where it should be :P, and it checks if /boot is mounted ro and remounts it rw if necessary. I keep mine mounted anyway. I'm not a script writer by any means. Next time I reboot, I'll see if it is really there or not. Looks like it is. Thanks much. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
[gentoo-user] dropbox on xfce
any hints how to make dropbox work on xfce? google returned many hits for other distributions, or for gentoo but on kde or gnome. i installed net-misc/dropbox and xfce-extra/thunar-dropbox but all i can do is upload files with a browser on the website (that is, it recognizes i have dropbox installed in my computer). if i run dropbox from the terminal an icon appears on the tray, but it doesn't do anything. a Dropbox directory was created in my home, but it is empty and doesn't show the files i uploaded. thunar-xfce doesn't do anything either. i installed dropbox on a netbook with xubuntu (also running xfce) and it just worked. the Dropbox folder shows my uploaded files, and the tray icon responds. unfortunately i need dropbox to work on a project with some colleagues that are using dropbox to share the files. any help would be very appreciated.
Re: [gentoo-user] Booting memtest86 from grub2
On Sun, 12 May 2013 09:00:04 -0500, Dale wrote: ### END /etc/grub.d/39_memtest86+ ### There it be. I wonder if it worked all the other times I tried? If anyone else had asked that question I'd have said yes :) I do a similar thing, except the script is in /usr/local/bin, where it should be :P, and it checks if /boot is mounted ro and remounts it rw if necessary. I keep mine mounted anyway. I'm not a script writer by any means. As do I, but read-only. It prevents filesystem corruption but, unlike not mounting it, it also avoids the embarrassment of installing a new kernel then wondering why it boots with the old one :) -- Neil Bothwick Bumper Sticker: If you can read this, you are in phaser range. signature.asc Description: PGP signature
Re: [gentoo-user] dropbox on xfce
Hi Luis, I don't se any thunar-dropbox in portage You could install gnome-extra/nautilus-dropbox. I work on xfce and dropbox is launched with xfce starting (dropbox.desktop in ~/.config/autostart) ; everything works fine. Cheers, -- Jacques 2013/5/12 luis jure l...@internet.com.uy any hints how to make dropbox work on xfce? google returned many hits for other distributions, or for gentoo but on kde or gnome. i installed net-misc/dropbox and xfce-extra/thunar-dropbox but all i can do is upload files with a browser on the website (that is, it recognizes i have dropbox installed in my computer). if i run dropbox from the terminal an icon appears on the tray, but it doesn't do anything. a Dropbox directory was created in my home, but it is empty and doesn't show the files i uploaded. thunar-xfce doesn't do anything either. i installed dropbox on a netbook with xubuntu (also running xfce) and it just worked. the Dropbox folder shows my uploaded files, and the tray icon responds. unfortunately i need dropbox to work on a project with some colleagues that are using dropbox to share the files. any help would be very appreciated.
Re: [gentoo-user] Real qucik question - Copying over kernel configuration for same machines
I just realized that we were running 3.5.7 on the older systems, and the current version is 3.7.10. Would I be cutting too many corners to copy over the ..config from the older machine. Thanks in Advance, Nick. On 5/12/13, Nick Khamis sym...@gmail.com wrote: Thank you!!! On 5/12/13, staticsafe m...@staticsafe.ca wrote: On 5/11/2013 20:39, Nick Khamis wrote: Hello Everyone, Just running an installation on another IBM machine, and wanted to know which kernel config files can we copy over from one machine to another, and have the same exact modules etc copied over. Saw examples for genkern, but we build our own kernels. After copying the files over we like to run make and make modules_install on the new machine. Thanks in Advance, Nick. The .config in the kernel source directory. -- staticsafe O ascii ribbon campaign - stop html mail - www.asciiribbon.org Please don't top post - http://goo.gl/YrmAb Don't CC me! I'm subscribed to whatever list I just posted on.
Re: [gentoo-user] Real qucik question - Copying over kernel configuration for same machines
On Sun, 12 May 2013 10:56:50 -0400, Nick Khamis wrote: I just realized that we were running 3.5.7 on the older systems, and the current version is 3.7.10. Would I be cutting too many corners to copy over the ..config from the older machine. That's not a huge step, but you'll have a few questions to answer when you run make oldconfig. BTW please stop top-posting. -- Neil Bothwick I'll never forget the 1st time I ran Windows, but I'm trying... signature.asc Description: PGP signature
Re: [gentoo-user] Real qucik question - Copying over kernel configuration for same machines
Please forgive me! Gmail client from hell!
Re: [gentoo-user] Libreoffice Compile
On 12/05/2013 15:48, William Tomlinson wrote: Correct me if I'm wrong, but it is possible from what I've read to cross compile using distcc. http://www.gentoo.org/doc/en/cross-compiling-distcc.xml seems to describe this in detail, though the article is nearly 7 years old. I would prefer this over a one shot package install since you could offload ALL of your compiles. I have no personal experience with distcc and it may be more of a headache than it is worth. I just know it was one of the options I looked at for a similar issue. First, before I respond, please do not top-post. If Gmail's web-based client makes not top-posting hard then please rather use a different client. distcc is designed to do the same compile over many machines. By design, they all run on the same compiler settings. You do not have this scenario. You need to build on a P4 for Atom. That is not distcc, it is cross-compile - which is a mission to set up properly. If you are building for ARM then it is worth it. But for one package, and only because the Atom builds slow? I doubt it's worth it. Thus, I recommended you simply install libreoffice-bin On May 12, 2013 5:36 AM, Alan McKinnon alan.mckin...@gmail.com mailto:alan.mckin...@gmail.com wrote: On 11/05/2013 19:53, Silvio Siefke wrote: Hello, is there a way that i can compile Libreoffice on my Desktop System and copy to the Netbook? Because the netbook need long time to compile libreoffice, and the Desktop is little faster. Or can i build a libreoffice Package on Desktop and copy to the netbook? The Netbook is a Samsung NC 10, Atom Processor and the Desktop is a Fujitsu P4. Thank you Greetings Silvio Your desktop is a P4 Your netbook is an Atom Others have noted how CHOST and CFLAGS must match on both machines, otherwise the Atom will probably not run P4 code. This will probably be a huge issue in your life and quite honestly, totally not worth it for just one package. Just install app-office/libreoffice-bin on the netbook instead -- Alan McKinnon alan.mckin...@gmail.com mailto:alan.mckin...@gmail.com -- Alan McKinnon alan.mckin...@gmail.com
Re: [gentoo-user] preserved-rebuild acting strangely
On 12/05/2013 13:29, cov...@ccs.covici.com wrote: Neil Bothwick n...@digimed.co.uk wrote: On Sun, 12 May 2013 02:50:44 -0400, cov...@ccs.covici.com wrote: Hi. I am using gentoo unstable and after this last update when I tried to do emerge @preserved-rebuild I get the following: I didn't know Gentoo specifically made an unstable version, it's generally rock solid for me. Buy unstable I meant ACCEPT_KEYWORDS=~x86 ~amd64 These are the packages that would be merged, in order: Calculating dependencies done! emerge: there are no ebuilds to satisfy net-libs/xulrunner:1.9. (dependency required by @preserved-rebuild [argument]) I have xulrunner 2.0 installed, although it looks like nothing depends on that package, so I am not sure what is going on. I looked at /var/lib/portage/preserved-rebuild-registrybut can't find xulrunner anywhere in that file. How can I proceed? emerge -cav xulrunner I have no ebuilds for xulrunner at all in the tree. But I will try as you suggest because there seems to be nothing dependent on it. Well, that did something good, now its going right along. Thanks so much -- this is a great mailing list. xulrunner is no longer in the tree. What I would do is run ldd on everything in lib dirs and grep for xulrunner to find which ancient package wants it. Then rebuild that package. -- Alan McKinnon alan.mckin...@gmail.com
[gentoo-user] gentoo and orca using gnome 3.8
Hi. I am trying to build orca from master which is necessary for gnome 3.8 which I have installed. Orca uses python3.3 and will not even use 3.2. So I emerged 3.3 by putting a keyword ~amd64 in the keywords. Now, how do I get the packages to go in -- the first one which has problems is dev-python/pygobject. I added python3_3 but when I emerge it, the use flags say (-python3_3). There may be others, but how can I get this package to go into python3.3? Thanks in advance for any suggestions. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici cov...@ccs.covici.com
Re: [gentoo-user] dropbox on xfce
hi jacques! thanks for your response. i'm glad it's working for you, it gives me some hope... i'm afraid i need some more help, though. on 2013-05-12 at 16:48 Jacques Montier wrote: I don't se any thunar-dropbox in portage no, i found an ebuild in an overlay. i can't see that it does anything, though. You could install gnome-extra/nautilus-dropbox. could like it is optional? do you have it installed? I work on xfce and dropbox is launched with xfce starting (dropbox.desktop in ~/.config/autostart) ; i'm afraid i don't know exactly how this works. in ~/.config/autostart i have a few files that contain something like: [Desktop Entry] Hidden=false do you mean i should create a similar file named dropbox.desktop? and what about /etc/init.d/dropbox, should i start the service? i also noticed that there's a file /etc/conf.d/dropbox, i had to add my use to DROPBOX_USERS, otherwise there where errors when i tried to launch dropbox. excuse all the questions, but as you see it's not working for me and i don' have much clue what's wrong or how to solve this problem. best, lj
Re: [gentoo-user] Settings for Xeon E3-1200 v2/3rd Gen video card
Problem is that CPU does not have any onboard graphics. For the Xeon you need one ending in 5 (1205/1225/1245) in order to get the onboard gpu. On Fri, May 10, 2013 at 11:04 AM, Walter Dnes waltd...@waltdnes.org wrote: OK, I'm getting serious with the install on my new machine, so here come the questions. lspci -v shows the onboard GPU as... 00:02.0 VGA compatible controller: Intel Corporation Xeon E3-1200 v2/3rd Gen Core processor Graphics Controller (rev 09) (prog-if 00 [VGA controller]) Subsystem: Dell Device 0581 Flags: bus master, fast devsel, latency 0, IRQ 11 Memory at f780 (64-bit, non-prefetchable) [size=4M] Memory at e000 (64-bit, prefetchable) [size=256M] I/O ports at f000 [size=64] Expansion ROM at unassigned [disabled] Capabilities: [90] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [d0] Power Management version 2 Capabilities: [a4] PCI Advanced Features What settings do I use for VIDEO_CARDS= in make.conf? Is intel good enough? Also, any special stuff in make menuconfig? -- Walter Dnes waltd...@waltdnes.org I don't run desktop environments; I run useful applications
Re: [gentoo-user] Settings for Xeon E3-1200 v2/3rd Gen video card
If you don't have the cpu yet, my suggestion is to go with the 1245 v2 as it offers the best bang for the buck. It also includes the HD4000 GPU (same as the i5/i7 Ivy Bridge and with same settings). On Fri, May 10, 2013 at 11:04 AM, Walter Dnes waltd...@waltdnes.org wrote: OK, I'm getting serious with the install on my new machine, so here come the questions. lspci -v shows the onboard GPU as... 00:02.0 VGA compatible controller: Intel Corporation Xeon E3-1200 v2/3rd Gen Core processor Graphics Controller (rev 09) (prog-if 00 [VGA controller]) Subsystem: Dell Device 0581 Flags: bus master, fast devsel, latency 0, IRQ 11 Memory at f780 (64-bit, non-prefetchable) [size=4M] Memory at e000 (64-bit, prefetchable) [size=256M] I/O ports at f000 [size=64] Expansion ROM at unassigned [disabled] Capabilities: [90] MSI: Enable- Count=1/1 Maskable- 64bit- Capabilities: [d0] Power Management version 2 Capabilities: [a4] PCI Advanced Features What settings do I use for VIDEO_CARDS= in make.conf? Is intel good enough? Also, any special stuff in make menuconfig? -- Walter Dnes waltd...@waltdnes.org I don't run desktop environments; I run useful applications
Re: [gentoo-user] gentoo and orca using gnome 3.8
Am 12.05.2013 18:12, schrieb cov...@ccs.covici.com: Hi. I am trying to build orca from master which is necessary for gnome 3.8 which I have installed. Orca uses python3.3 and will not even use 3.2. So I emerged 3.3 by putting a keyword ~amd64 in the keywords. Now, how do I get the packages to go in -- the first one which has problems is dev-python/pygobject. I added python3_3 but when I emerge it, the use flags say (-python3_3). There may be others, but how can I get this package to go into python3.3? Thanks in advance for any suggestions. I too run gnome 3.8. I have no problem merging orca (3.6.3-r1). What error do you get when trying to merge orca? Maybe search bugs.gentoo.org. signature.asc Description: OpenPGP digital signature
[gentoo-user] Which mysql USE flag do I need - mysql or mysqlnd?
Hi All, I am looking at an aged php installation and noticed that there is a mysqlnd USE flag, which I have not enabled. From the mysql documentation it seems that mysqlnd is attracting most development and features. Then I had a look here and it is not mentioned: http://overlays.gentoo.org/proj/php/wiki/ManagingExtensions What would you advise that I use these days? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] gentoo and orca using gnome 3.8
Michael Hampicke m...@hadt.biz wrote: Am 12.05.2013 18:12, schrieb cov...@ccs.covici.com: Hi. I am trying to build orca from master which is necessary for gnome 3.8 which I have installed. Orca uses python3.3 and will not even use 3.2. So I emerged 3.3 by putting a keyword ~amd64 in the keywords. Now, how do I get the packages to go in -- the first one which has problems is dev-python/pygobject. I added python3_3 but when I emerge it, the use flags say (-python3_3). There may be others, but how can I get this package to go into python3.3? Thanks in advance for any suggestions. I too run gnome 3.8. I have no problem merging orca (3.6.3-r1). What error do you get when trying to merge orca? Maybe search bugs.gentoo.org. ] I am trying to run orca from master which is a different version and requires python3.3. When I did not have it, it said no suitable python interpreter and now it is complaining it can't find module gi. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici cov...@ccs.covici.com
Re: [gentoo-user] Booting memtest86 from grub2
Neil Bothwick wrote: On Sun, 12 May 2013 09:00:04 -0500, Dale wrote: ### END /etc/grub.d/39_memtest86+ ### There it be. I wonder if it worked all the other times I tried? If anyone else had asked that question I'd have said yes :) Well, it is spring here so I shutdown today and did some serious blowing out of the dust. One thing about the Cooler Master HAF-932 case, lots of air flow, quite a bit of dust too. Anyway, when I booted up again, there sat memtest86+ in the menu. I selected it and you won't guess the result. Yep. Error message. Can I shoot it now? :-/ I can't copy and paste so bear with my fat fingers. error: too small lower memory 0x9100 0x98400 Put to use my pitiful google skills and found out this is quite common. That makes me feel better. It isn't JUST me. Downgrading memtest thingy and trying a older version. After that, I'll try some other tester thingy. If that fails, remove the file and use my USB stick thingy. I do a lot of thingys when things ain't going right. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
[gentoo-user] Gcc compiling, is this normal?
Howdy, I been noticing something weird when I upgrade gcc. Is this normal? root@fireball / # genlop -c Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 6 seconds. ETA: 24 minutes and 27 seconds. Currently merging 3 out of 5 * net-misc/curl-7.30.0 current merge time: 7 seconds. ETA: 18 minutes and 50 seconds. Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 7 seconds. ETA: 21 minutes and 14 seconds. root@fireball / # I'm not worried about curl. It just happened to be there. This is the list of packages it is supposed to update: root@fireball / # emerge -uvaDN world These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild R] sys-devel/gcc-4.5.4:4.5 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -lto -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild R] sys-devel/gcc-4.4.7:4.4 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild U ] net-misc/curl-7.30.0 [7.29.0-r1] USE=ipv6 ssl threads -adns -idn -kerberos -ldap -metalink -rtmp -ssh -static-libs {-test} CURL_SSL=openssl -axtls -cyassl -gnutls -nss -polarssl 0 kB [ebuild U ] app-misc/tmux-1.8 [1.6] USE=-vim-syntax 0 kB [ebuild U ~] kde-base/kdelibs-4.10.3-r2:4 [4.10.3:4] USE=3dnow alsa bzip2 fam handbook jpeg2k lzma mmx nls opengl (policykit) semantic-desktop spell sse sse2 ssl udev udisks upower zeroconf -acl (-altivec) (-aqua) -debug -doc -kerberos -openexr {-test} 0 kB Total: 5 packages (3 upgrades, 2 reinstalls), Size of downloads: 0 kB Would you like to merge these packages? [Yes/No] y I noticed this one or twice before. It is compiling the same compiler version twice when it should be upgrading/recompiling two *different* versions. I read before that gcc compiles three times or something but the thing is, it can compile for HOURS and never finish. Usually I stop it and restart emerge and it compiles as it should, one for each version and finishes as it should time wise. I once started the upgrade and went to take a nap. I woke up around 5 or 6 hours later to find gcc compiling twice on the same version. Even libreoffice only takes a hour or so. Anyone else see this before? Now to go stop this one and get it to update right and not take all week. Thanks. Dale :-) :-) -- I am only responsible for what I said ... Not for what you understood or how you interpreted my words!
Re: [gentoo-user] Gcc compiling, is this normal?
On 12/05/2013 23:16, Dale wrote: Howdy, I been noticing something weird when I upgrade gcc. Is this normal? root@fireball / # genlop -c Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 6 seconds. ETA: 24 minutes and 27 seconds. Currently merging 3 out of 5 * net-misc/curl-7.30.0 current merge time: 7 seconds. ETA: 18 minutes and 50 seconds. Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 7 seconds. ETA: 21 minutes and 14 seconds. root@fireball / # I'm not worried about curl. It just happened to be there. This is the list of packages it is supposed to update: root@fireball / # emerge -uvaDN world These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild R] sys-devel/gcc-4.5.4:4.5 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -lto -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild R] sys-devel/gcc-4.4.7:4.4 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild U ] net-misc/curl-7.30.0 [7.29.0-r1] USE=ipv6 ssl threads -adns -idn -kerberos -ldap -metalink -rtmp -ssh -static-libs {-test} CURL_SSL=openssl -axtls -cyassl -gnutls -nss -polarssl 0 kB [ebuild U ] app-misc/tmux-1.8 [1.6] USE=-vim-syntax 0 kB [ebuild U ~] kde-base/kdelibs-4.10.3-r2:4 [4.10.3:4] USE=3dnow alsa bzip2 fam handbook jpeg2k lzma mmx nls opengl (policykit) semantic-desktop spell sse sse2 ssl udev udisks upower zeroconf -acl (-altivec) (-aqua) -debug -doc -kerberos -openexr {-test} 0 kB Total: 5 packages (3 upgrades, 2 reinstalls), Size of downloads: 0 kB Would you like to merge these packages? [Yes/No] y I noticed this one or twice before. It is compiling the same compiler version twice when it should be upgrading/recompiling two *different* versions. I read before that gcc compiles three times or something but the thing is, it can compile for HOURS and never finish. Usually I stop it and restart emerge and it compiles as it should, one for each version and finishes as it should time wise. I once started the upgrade and went to take a nap. I woke up around 5 or 6 hours later to find gcc compiling twice on the same version. Even libreoffice only takes a hour or so. Anyone else see this before? Now to go stop this one and get it to update right and not take all week. What have you got in world for gcc? What's in make.conf? gcc's build system does cause gcc tro be built three times[1], but that's internal to gcc and has nothing to do with portage. There should still only be one emerge for a SLOT. If it's doing the same package twice, then the files in /var/tmp/portage are liable to get continually clobbered and who knows what will happen. [1] The logic goes something like this: it's a compiler, so the code it produces must be consistently identical for identical inputs. So, the current compiler builds gcc, giving version Y built by version X. That instance of gcc in turn builds a gcc, giving version Y built by version Y. Now you should have two copies of the same version of gcc, and they should be identical, plus the output code must also be identical. The gcc builds system checks for this by actually doing compiles and comparing the results. I've gotten a bit hazy on what specific bits actually do what, but that's the general concept. But all this rebuilding is internal and you only see it if you examine the console output scrolling by, it will never show up in any portage tools. -- Alan McKinnon alan.mckin...@gmail.com
Re: [gentoo-user] Real qucik question - Copying over kernel configuration for same machines
On Sat, May 11, 2013 at 08:39:02PM -0400, Nick Khamis wrote Hello Everyone, Saw examples for genkern, but we build our own kernels. After copying the files over we like to run make and make modules_install on the new machine. Since the new machine will probably have a newer kernel, I suggest 1) copy /usr/src/linux/.config from the working machine to the new machine 2) run make oldconfig 3) then run male and make modules_install make oldconfig will give you a chance to set values for options in the newer kernel that don't exist in the older kernel. -- Walter Dnes waltd...@waltdnes.org I don't run desktop environments; I run useful applications
Re: [gentoo-user] Gcc compiling, is this normal?
On Sun, 12 May 2013 23:27:48 +0200 Alan McKinnon wrote: On 12/05/2013 23:16, Dale wrote: Howdy, I been noticing something weird when I upgrade gcc. Is this normal? root@fireball / # genlop -c Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 6 seconds. ETA: 24 minutes and 27 seconds. Currently merging 3 out of 5 * net-misc/curl-7.30.0 current merge time: 7 seconds. ETA: 18 minutes and 50 seconds. Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 7 seconds. ETA: 21 minutes and 14 seconds. root@fireball / # I'm not worried about curl. It just happened to be there. This is the list of packages it is supposed to update: root@fireball / # emerge -uvaDN world These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild R] sys-devel/gcc-4.5.4:4.5 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -lto -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild R] sys-devel/gcc-4.4.7:4.4 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild U ] net-misc/curl-7.30.0 [7.29.0-r1] USE=ipv6 ssl threads -adns -idn -kerberos -ldap -metalink -rtmp -ssh -static-libs {-test} CURL_SSL=openssl -axtls -cyassl -gnutls -nss -polarssl 0 kB [ebuild U ] app-misc/tmux-1.8 [1.6] USE=-vim-syntax 0 kB [ebuild U ~] kde-base/kdelibs-4.10.3-r2:4 [4.10.3:4] USE=3dnow alsa bzip2 fam handbook jpeg2k lzma mmx nls opengl (policykit) semantic-desktop spell sse sse2 ssl udev udisks upower zeroconf -acl (-altivec) (-aqua) -debug -doc -kerberos -openexr {-test} 0 kB Total: 5 packages (3 upgrades, 2 reinstalls), Size of downloads: 0 kB Would you like to merge these packages? [Yes/No] y I noticed this one or twice before. It is compiling the same compiler version twice when it should be upgrading/recompiling two *different* versions. I read before that gcc compiles three times or something but the thing is, it can compile for HOURS and never finish. Usually I stop it and restart emerge and it compiles as it should, one for each version and finishes as it should time wise. I once started the upgrade and went to take a nap. I woke up around 5 or 6 hours later to find gcc compiling twice on the same version. Even libreoffice only takes a hour or so. Anyone else see this before? Now to go stop this one and get it to update right and not take all week. What have you got in world for gcc? What's in make.conf? gcc's build system does cause gcc tro be built three times[1], but that's internal to gcc and has nothing to do with portage. There should still only be one emerge for a SLOT. If it's doing the same package twice, then the files in /var/tmp/portage are liable to get continually clobbered and who knows what will happen. [1] The logic goes something like this: it's a compiler, so the code it produces must be consistently identical for identical inputs. So, the current compiler builds gcc, giving version Y built by version X. That instance of gcc in turn builds a gcc, giving version Y built by version Y. Haven't you left out the third compile? Let me rephrase the 3 builds. 1) gcc-X builds gcc-Y giving gcc-Y1 2) gcc-Y1 builds gcc-Y giving gcc-Y2 3) gcc-Y2 builds gcc-Y giving gcc-Y3 gcc-Y1 and gcc-Y2 are likely to be different (since they were build by gcc-X and gcc-Y which are likely to have optimizations). gcc-Y2 and gcc-Y3 should be identical (since both were built by gcc-Y) Now you should have two copies of the same version of gcc, and they should be identical, plus the output code must also be identical. The gcc builds system checks for this by actually doing compiles and comparing the results. I've gotten a bit hazy on what specific bits actually do what, but that's the general concept. But all this rebuilding is internal and you only see it if you examine the console output scrolling by, it will never show up in any portage tools. -- Alan McKinnon alan.mckin...@gmail.com
Re: [gentoo-user] Gcc compiling, is this normal?
Alan McKinnon wrote: On 12/05/2013 23:16, Dale wrote: Howdy, I been noticing something weird when I upgrade gcc. Is this normal? root@fireball / # genlop -c Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 6 seconds. ETA: 24 minutes and 27 seconds. Currently merging 3 out of 5 * net-misc/curl-7.30.0 current merge time: 7 seconds. ETA: 18 minutes and 50 seconds. Currently merging 2 out of 5 * sys-devel/gcc-4.4.7 current merge time: 7 seconds. ETA: 21 minutes and 14 seconds. root@fireball / # I'm not worried about curl. It just happened to be there. This is the list of packages it is supposed to update: root@fireball / # emerge -uvaDN world These are the packages that would be merged, in order: Calculating dependencies... done! [ebuild R] sys-devel/gcc-4.5.4:4.5 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -lto -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild R] sys-devel/gcc-4.4.7:4.4 USE=gtk mudflap (multilib) nls nptl openmp (-altivec) -cxx -doc (-fixed-point) -fortran -gcj (-hardened) (-libssp) -multislot -nopie -nossp -objc -objc++ -objc-gc {-test} -vanilla (-graphite%) 0 kB [ebuild U ] net-misc/curl-7.30.0 [7.29.0-r1] USE=ipv6 ssl threads -adns -idn -kerberos -ldap -metalink -rtmp -ssh -static-libs {-test} CURL_SSL=openssl -axtls -cyassl -gnutls -nss -polarssl 0 kB [ebuild U ] app-misc/tmux-1.8 [1.6] USE=-vim-syntax 0 kB [ebuild U ~] kde-base/kdelibs-4.10.3-r2:4 [4.10.3:4] USE=3dnow alsa bzip2 fam handbook jpeg2k lzma mmx nls opengl (policykit) semantic-desktop spell sse sse2 ssl udev udisks upower zeroconf -acl (-altivec) (-aqua) -debug -doc -kerberos -openexr {-test} 0 kB Total: 5 packages (3 upgrades, 2 reinstalls), Size of downloads: 0 kB Would you like to merge these packages? [Yes/No] y I noticed this one or twice before. It is compiling the same compiler version twice when it should be upgrading/recompiling two *different* versions. I read before that gcc compiles three times or something but the thing is, it can compile for HOURS and never finish. Usually I stop it and restart emerge and it compiles as it should, one for each version and finishes as it should time wise. I once started the upgrade and went to take a nap. I woke up around 5 or 6 hours later to find gcc compiling twice on the same version. Even libreoffice only takes a hour or so. Anyone else see this before? Now to go stop this one and get it to update right and not take all week. What have you got in world for gcc? root@fireball / # cat /var/lib/portage/world | grep gcc sys-devel/gcc:4.4 sys-devel/gcc:4.5 root@fireball / # I generally keep two versions. Got bit once. Long time ago but still, no fun to fix. What's in make.conf? This is the USE line. I'm not sure if you want all the rest. Rest is normal stuff, pretty much. lol USE=3dnow 3dnowext X a52 acpi alsa aml apng automount avahi \ bash-completion bzip2 -cairo cddb cdr chroot cleartype clucene corefonts \ cups curl dbus declarative dri dvd dvdr embedded escreen esd \ exif faac ffmpeg fontconfig -fortran gif gimp gkrellm gphoto2 \ gtk hbci hddtemp iostats ipv6 java javascript jbig jpeg2k \ justify kde kmod libwww logrotate loop-aes lvm lzma \ mdnsresponder-compat melt mmx mmxext mng mp3 mplayer mysql nls nsplugin \ nvidia offensive ofx opengl openrc parport pdf pdfimport \ policykit ppds ppp qt4 sasl seamonkey semantic-desktop sift smp \ sse sse2 sse4a syslog tcl threads tiff tk truetype type1 udev \ usb vcd webkit win32codecs wma wmf yahoo zeroconf -acl \ -bluetooth -branding -doc -dts -eds -fftw -gcj -gnome -jabber \ -jingle -ldap -musepack -openldap -oss -otr sqlite -sqlite3 -theora \ -v41 -xulrunner -h -crypt -cxx gcc's build system does cause gcc tro be built three times[1], but that's internal to gcc and has nothing to do with portage. There should still only be one emerge for a SLOT. If it's doing the same package twice, then the files in /var/tmp/portage are liable to get continually clobbered and who knows what will happen. [1] The logic goes something like this: it's a compiler, so the code it produces must be consistently identical for identical inputs. So, the current compiler builds gcc, giving version Y built by version X. That instance of gcc in turn builds a gcc, giving version Y built by version Y. Now you should have two copies of the same version of gcc, and they should be identical, plus the output code must also be identical. The gcc builds system checks for this by actually doing compiles and comparing the results. I've gotten a bit hazy on what specific bits actually do what, but that's the general concept. But all this rebuilding is internal and you only see it if
[gentoo-user] gettext missing symlink message
I ran into this today while installing Gentoo on my new machine. making executable: usr/lib64/preloadable_libintl.so .[33;01m * .[39;49;00mQA Notice: Missing soname symlink(s): .[33;01m * .[39;49;00m .[33;01m * .[39;49;00m usr/lib64/libgnuintl.so.8 - preloadable_libintl.so .[33;01m * .[39;49;00m https://bugs.gentoo.org/show_bug.cgi?id=374545 was opened in July of 2011 (YES!!!). I don't want to bug the developers. My questions are... 1) does it cause any problems? 2) is the appropriate workaround to... cd /usr/lib64 ln -s preloadable_libintl.so libgnuintl.so.8 -- Walter Dnes waltd...@waltdnes.org I don't run desktop environments; I run useful applications
Re: [gentoo-user] Traffic Intensive IPSec Tunnel
You can read a comparison between the *Swans here, but things have moved on since; e.g. StrongSwan supports IKEv1 in Aggressive Mode, Aggressive mode with pre-shared keys is vulnerable to offline dictionary attack so you might as well use main mode. If for some reason you have to use aggressive mode use a long randomly generated PSK.
Re: [gentoo-user] Traffic Intensive IPSec Tunnel
On Monday 13 May 2013 03:13:27 Adam Carter wrote: You can read a comparison between the *Swans here, but things have moved on since; e.g. StrongSwan supports IKEv1 in Aggressive Mode, Aggressive mode with pre-shared keys is vulnerable to offline dictionary attack so you might as well use main mode. If for some reason you have to use aggressive mode use a long randomly generated PSK. Indeed it is vulnerable, because the hash of the PSK is sent out in the initial handshake. This can be captured by eavesdropping and cracked by brute force off line. As suggested long keys help, especially if they are changed often. It is best, however, to not use a PSK at all and instead set up SSL certificates for VPN gateway and client machines authentication and RSA encryption. This makes it easy to revoke a single SSL certificate if a client is compromised, instead of having to change PSKs for any number of machines that are using the VPN network. -- Regards, Mick smime.p7s Description: S/MIME cryptographic signature