Re: [gentoo-user] microcode applied?

[Max Zettlmeißl]

> How do you build the microcode into the kernel? The only
> place I can see to do that in menuconfig is under Device Drivers; there's no
> such field under Firmware.

The Device Drivers section is exactly where the microcode is included.
CONFIG_EXTRA_FIRMWARE is the relevant symbol.

Re: [gentoo-user] microcode applied?

[Max Zettlmeißl]

> Since I dont know where look up firmware version numbers i'm in the dark.

You can use MC Extractor to extract the metadata associated with the
AMD microcode updates.

The microcode_amd.bin which is part of
sys-kernel/linux-firmware-20180103-r1 contains the following microcode
updates:

CPUID   Version
00100F22 0183
00100F20 0184
00100F62 01C7
00100F43 01C8
00100F81 01D9
00100F80 01DA
00100F41 01DB
00100FA0 01DC
00200F31 0232
00300F10 0327
00500F10 0529
00500F20 05000119

According to your first message your CPU is likely to have either the
ID 00100F21 or the ID 00100F2A.
It seems like there are no microcode updates for your specific CPU
bundled in linux-firmware.

Re: [gentoo-user] microcode applied?

[Max Zettlmeißl]

> The contents of cpuinfo is the same as the messages in dmesg. What does that
> imply?

Your BIOS or EFI might already install the same version or a later
version than what the microcode package provides. Although the second
case is highly unlikely.
The update might also just not get applied properly.

You should check whether the actual microcode version is the version
which you expect.

How are you trying to apply the microcode?
The best way to update your processor's microcode is via early
microcode loading.
You can either use an initrd or build the microcode into your kernel
image. I prefer the latter.

Re: [gentoo-user] microcode applied?

[Max Zettlmeißl]

> Does the absence of a "microcode updated" message in dmesg imply that the
> microcode was not updated?

Not necessarily.

> Is there a way to turn on debugging?

The easiest way to check whether the microcode update was applied
correctly would be to check the microcode version in /proc/cpuinfo

Re: [gentoo-user] Q: pp requires --uesr option t hat doesn't exist?

[Max Zettlmeißl]

$ pip install --user awscli
or $ pip2.7 install --user awscli works.

Merry Christmas.


On 24 December 2017 at 21:54, Steven Lembark  wrote:
>
> This should have been simple: Install AWS client command line tools.
> Catch: Installing it with AWS' example tells me to use the "--user"
> option, though not why, and supplying --user with or without an
> argument tells me there is no such switch.
>
> I'd prefer not maintaining this stuff as SU, rather set up a group
> with access to the necessary libarary areas in Python.
>
> $ pip install awscli
> ERROR: (Gentoo) Please run pip with the --user option to avoid breaking 
> python-exec
>
> $ pip --user install awscli
>
> Usage:
>   pip  [options]
>
> no such option: --user
>
> $ pip --user=lembark install awscli
>
> Usage:
>   pip  [options]
>
> no such option: --user
>
> Examining the output from "pip --help" gives me lots of no "--user"
> in the output, which makes sense if there are no users. Using
> "--verbose" didn't tell me anything useful either.
>
> Say I want users in the "adm" group to maintain the Python libs,
> I'll need to ( find  | xargs chgrp adm; find 
> -type d | xargs chmod 02775; find  -type f | xargs
> chmod g+w ).
>
> Q: Whare are the python lib's stored?
>
> Python itself only tells me:
>
> $ python -V
> Python 3.4.5
>
> not the paths.
>
> Or, for that matter, does anyone know how to avoid the "--user"
> requirement using pip?
>
> thanks
>
> --
> Steven Lembark   1505 National Ave
> Workhorse Computing Rockford, IL 61103
> lemb...@wrkhors.com+1 888 359 3508
>

Re: [gentoo-user] Re: CoreOS vulnerability inherited from Gentoo?

[Max R.D. Parmer]

On Thu, Jun 2, 2016, at 06:44, James wrote:
> Neil Bothwick  digimed.co.uk> writes:
> 
> 
> > > Does this mean we need to do anything to improve the security of our
> > > systems?
> 
> > The report seems to be saying that the problem is caused by using the
> > Gentoo default config, which assumes a Gentoo environment. So  it's fine
> > on Gentoo. But it won't hurt to run glsa-check from time to time (my sync
> > script does it every time and mails me if there's a problem).
> 
> Which file contains the purported malaised default configration?
> I just want to manually inspect it and verify for myself.

/etc/pam.d/system-auth which is provided by pambase:
https://gitweb.gentoo.org/proj/pambase.git/

Re: [gentoo-user] CoreOS vulnerability inherited from Gentoo?

[Max R.D. Parmer]

On Tue, May 31, 2016, at 11:07, Max R.D. Parmer wrote:
> On Tue, May 31, 2016, at 10:44, Mick wrote:
> > On Tuesday 31 May 2016 16:30:27 James wrote:
> > >  Here is an interesting read::
> > > 
> > > Security brief: CoreOS Linux Alpha remote SSH issue
> > > May 19, 2016 · By Matthew Garrett
> > > 
> > > 
> > > 
> > > Gentoo defaults to ending the PAM configuration with an optional 
> > > pam_permit.
> > > 
> > > This meant that failing both pam_unix and pam_sss on CoreOS systems would
> > > surprisingly result in authentication succeeding, and access being 
> > > granted.
> > > 
> > > The operator user was not used by CoreOS, but existed because it exists in
> > > the Gentoo Portage system from which CoreOS is derived.
> > > 
> > > 
> > > Full read [1]. It kinda shows that CoreOS is derived from Gentoo
> > > and not ChromeOS; at least when time to blame a security lapse 
> > > elsewhere
> > > 
> > > 
> > > enjoy,
> > > James
> > > 
> > > [1] https://coreos.com/blog/
> > 
> > Does this mean we need to do anything to improve the security of our
> > systems?
> 
> The interaction seems to be problematic when SSSD is introduced to the
> mix, as the SSSD documentation seems to assume a fallthrough to
> pam_permit.so. With a merely empty user password, I cannot trigger this
> issue. I will have to try with an expired account and a locked account
> later.
> 
> the pam_permit.so line was introduced here:
> https://gitweb.gentoo.org/proj/pambase.git/commit/?id=ac9023eecfe3c13d212c548bb9d5d1b42a4e044b
> 
> At the very least, it does seem like it ought to be pam_deny.so instead.
> 
> I wonder if this issue is still even relevant for Kerberos users?
> https://bugs.gentoo.org/show_bug.cgi?id=93 
> 

Yeah -- doesn't work with a locked or expired account either.

Re: [gentoo-user] CoreOS vulnerability inherited from Gentoo?

[Max R.D. Parmer]

On Tue, May 31, 2016, at 10:44, Mick wrote:
> On Tuesday 31 May 2016 16:30:27 James wrote:
> >  Here is an interesting read::
> > 
> > Security brief: CoreOS Linux Alpha remote SSH issue
> > May 19, 2016 · By Matthew Garrett
> > 
> > 
> > 
> > Gentoo defaults to ending the PAM configuration with an optional pam_permit.
> > 
> > This meant that failing both pam_unix and pam_sss on CoreOS systems would
> > surprisingly result in authentication succeeding, and access being granted.
> > 
> > The operator user was not used by CoreOS, but existed because it exists in
> > the Gentoo Portage system from which CoreOS is derived.
> > 
> > 
> > Full read [1]. It kinda shows that CoreOS is derived from Gentoo
> > and not ChromeOS; at least when time to blame a security lapse elsewhere
> > 
> > 
> > enjoy,
> > James
> > 
> > [1] https://coreos.com/blog/
> 
> Does this mean we need to do anything to improve the security of our
> systems?

The interaction seems to be problematic when SSSD is introduced to the
mix, as the SSSD documentation seems to assume a fallthrough to
pam_permit.so. With a merely empty user password, I cannot trigger this
issue. I will have to try with an expired account and a locked account
later.

the pam_permit.so line was introduced here:
https://gitweb.gentoo.org/proj/pambase.git/commit/?id=ac9023eecfe3c13d212c548bb9d5d1b42a4e044b

At the very least, it does seem like it ought to be pam_deny.so instead.

I wonder if this issue is still even relevant for Kerberos users?
https://bugs.gentoo.org/show_bug.cgi?id=93 

Re: [gentoo-user] Surviving perl-5.24.0

[Max R.D. Parmer]

On Mon, May 23, 2016, at 10:50, Thanasis wrote:
> On 05/23/2016 08:27 PM, Max R.D. Parmer wrote:
> 
> >
> > Then everything rolls along 'til dying with this:
> >> installman: Can't open cpan/podlators/blib/script/pod2man: No such file or 
> >> directory
> >> ABORTED
> >
> > Surprising to have this build fail like this when I've done it
> > elsewhere. Odd.
> >
> 
> https://bugs.gentoo.org/show_bug.cgi?id=583848
> 
> This is a bug in sys-devel/make-4.2  either downgrade make or 
> install the package with MAKEOPTS set to -j1
> 

Ahh brilliant! Emerging perl with MAKEOPTS=-j1 worked like a charm.

That bug report had eluded my weak Monday search-fu, thanks so much!

Re: [gentoo-user] Surviving perl-5.24.0

[Max R.D. Parmer]

On Fri, May 20, 2016, at 16:33, walt wrote:
> I spent most of today updating from perl-5.22 to perl-5.24 because so
> many packages failed to install.  I ran perl-cleaner about a hundred
> times and tried emerge -ac in between, which always failed because it
> falsely accused me of not doing emerge -auND.
> 
> Finally I got through the perl update and noticed a message saying
> 'emerge -auND --with-bdeps=y is the ultimate way to update...' so I
> added the '--with-bdeps=y' and another twenty perl-related packages got
> rebuilt after I thought I was done.
> 
> Now I'm really done, I think, but I'm afraid to reboot this machine.
> 
> 

I had the perl 5.24 update go off without a hitch on three other boxes,
but this morning I'm having a heck of a time upgrading it on #4.

Everything appears to go fine until:
> Couldn't copy cpan/podlators/blib/script/pod2man to 
> /var/tmp/portage/dev-lang/perl-5.
> 24.0/image//usr/bin/pod2man: No such file or directory
> Couldn't chmod 755 
> /var/tmp/portage/dev-lang/perl-5.24.0/image//usr/bin/pod2man: No s
> uch file or directory
> /usr/bin/pod2text
> Couldn't copy cpan/podlators/blib/script/pod2text to 
> /var/tmp/portage/dev-lang/perl-5
> .24.0/image//usr/bin/pod2text: No such file or directory
> Couldn't chmod 755 
> /var/tmp/portage/dev-lang/perl-5.24.0/image//usr/bin/pod2text: No 
> such file or directory
> /usr/bin/pod2usage
> Couldn't copy cpan/Pod-Usage/blib/script/pod2usage to 
> /var/tmp/portage/dev-lang/perl-
> 5.24.0/image//usr/bin/pod2usage: No such file or directory
> Couldn't chmod 755 
> /var/tmp/portage/dev-lang/perl-5.24.0/image//usr/bin/pod2usage: No
> such file or directory

Then everything rolls along 'til dying with this:
> installman: Can't open cpan/podlators/blib/script/pod2man: No such file or 
> directory
> ABORTED

Surprising to have this build fail like this when I've done it
elsewhere. Odd.

--
0x7D964D3361142ACF

Re: [gentoo-user] freeSwitch

[Max R.D. Parmer]

On Wed, Apr 27, 2016, at 15:17, Stroller wrote:
> 
> > On Wed, 27 April 2016, at 3:21 pm, Michael Mol  wrote:
> > ...
> > I have a Freeswitch install on a (non-Gentoo) box at a client. That client 
> > has 
> > recently moved to a different PBX product. I will not willingly install 
> > another 
> > Freeswitch setup, and my full rant as to why would be a multi-part blog 
> > post.
> 
> I really want to read this.
> 
> Stroller.
> 
> 

I would also be interested (if it helps to know you'd have an audience).

I've been looking at freeswitch and asterisk for an OSTN implementation.
At a glance, freeswitch seemed like it might be the better design (but
surely experience tells the real story). I'll give kamailio a look now
too.

--
0x7D964D3361142ACF

Re: [gentoo-user] In search of an XMPP client with OTR

[Max R.D. Parmer]

Hello Meino, perhaps this will help:
https://github.com/maxrp/profanity-overlay

Profanity is a great client IMO. There's another called Jackline
(written in OCaml) that is pretty cool and supports OTR too.

--
0x7D964D3361142ACF

On Sun, Apr 17, 2016, at 02:20, meino.cra...@gmx.de wrote:
> Hi,
> 
> I am looking for a XMPP client with OTR support. I prefer
> programs like mutt rather than the GUI-heavy things...
> 
> I tried centerim but it does not recognized my F keys and
> seems to be a little old too (?).
> 
> Then I tried profnity and followed the instructions from here:
> http://www.profanity.im/install.html
> but it seems no longer in the overlay "stuff" as it was not
> found while trying to emerge it.
> 
> What other client is a recommended XMPP client on Linux with OTR support
> -
> the stronger its privacy approach the better...;)
> 
> Thank you very much in advance for any help!
> Best regards,
> Meino
> 
> 
> 
> 

Re: [gentoo-user] Re: Encrypted cell 2 gentoo

[Max R.D. Parmer]

The recipients mail server could still see the message in plaintext.

If you are concerned your correspondent's mail server might be used to
try to read their messages then another layer of encryption is needed
that only the recipient themselves can decrypt and that would be
GPG/PGP.

It depends on your particular needs whether that extra step is needed.

--
0x7D964D3361142ACF

On Mon, Mar 28, 2016, at 13:45, cov...@ccs.covici.com wrote:
> If you have your own mta and use imap-s won't that do it?
> 
> Max R.D. Parmer <m...@trystero.is> wrote:
> 
> > Ahh, OK. So secure communications between all these clients.
> > 
> > The two big players for client-side encryption for email or messaging
> > data would be GPG and OTR; for VoIP you would want to look into ZRTP.
> > There are several clients that support these three protocols on all the
> > platforms you've listed (though support for ZRTP is across the board
> > pretty rare).
> > 
> > Unfortunately, I'm not aware of any single cohesive guide to tie it
> > altogether.
> > 
> > --
> > 0x7D964D3361142ACF
> > 
> > On Mon, Mar 28, 2016, at 09:13, James wrote:
> > > Max R.D. Parmer  trystero.is> writes:
> > > 
> > > 
> > > 
> > > 
> > > > Do I understand correctly that you're looking to set up a Gentoo server
> > > > as a "hub" from which you can retrieve your mail using any of your
> > > > client systems?
> > > 
> > > Not really. Yes that has to work but... What I want to read up on 
> > > and test is encrypted (secure) communications between the (2) major
> > > cell phone types and whatever client on a gentoo workstation. The 
> > > goal is good security, that is reasonable to setup and manage
> > > and allows folks to use any of those 3 devices to exchange encrypted
> > > mail.
> > > Suppose I had a friend that has an ios phone. What page do I send him to
> > > to encrypt his emails? What will work with thunderbird, sylpheed, etc.
> > > Some discussion, url links that I can refer others to and then
> > > recommendations.
> > > 
> > > > If I understood correctly, interoperability should be easy because
> > > > mostly it comes down to IMAP/SMTP/POP3 and support for those protocols
> > > > is pretty good across lots of applications. But maybe I got it wrong?
> > > 
> > > What I want to do is find documents that at least provide an overview
> > > of which specific apps to put on a cell phone (android or ios) some
> > > example configs and then a few docs on the gentoo side.
> > > 
> > > Free or do you buys those apps from a vendor on the cell phones?
> > > Which ones are better, i.e. more trusted or have different algos
> > > for encryptions (bit-lenght etc). May, I just need to find
> > > a forum where this is routinely discuss to see what's new, what's
> > > not secure, what may be prohibited by whom, etc etc.
> > > 
> > > 
> > > OK?
> > > 
> > > James  
> > > 
> > > 
> > > 
> > > 
> > 
> 
> -- 
> Your life is like a penny.  You're going to lose it.  The question is:
> How do
> you spend it?
> 
>  John Covici
>  cov...@ccs.covici.com
> 

Re: [gentoo-user] Re: Encrypted cell 2 gentoo

[Max R.D. Parmer]

I think the paper on Intel issues Mick is referring to is the one I
linked not too long ago:
http://blog.invisiblethings.org/papers/2015/x86_harmful.pdf

It seems like you're looking for something like the EFF's "surveillance
self-defense"[1] site but with some stuff specific to Gentoo.

[1]: https://ssd.eff.org/

--
0x7D964D3361142ACF

On Mon, Mar 28, 2016, at 10:25, James wrote:
> Mick  gmail.com> writes:
> 
> > > Ahh, OK. So secure communications between all these clients.
> > > The two big players for client-side encryption for email or messaging
> > > data would be GPG and OTR; 
> 
> Good 2 know. I'll keep searching for docs. 
> 
> > Also S/MIME encryption of the email message body using SSL certificates 
> > achieves the same end result (i.e. encrypted payload) as GnuPG offers.  
> > For GPG you may need a plugin (e.g. enigmail on T'bird) or something 
> > similar for phone clients, but S/MIME is usually available by default for
> >  most email clients and platforms.
> 
> OK, so maybe I'll test out a few devices, provide some feedback and then
> seen about a (gentoo wiki) page. If the community is not interested in 
> that I bet these guys would put up some sort of community cook-book on
> this topic:: [1] 
> 
> Dont know who they are, but they seem to be on the right track,
> and they big on Gentoo!
> 
> > A word of caution:  Snowden warned us that the end devices do not ossess 
> > strong enough randomness generators to ensure that the encryption they 
> > perform cannot be reverse engineered.
> 
> Intel has long been hiding extra hardware inside of their processors, for
> a
> variety of nefarious activities. Here is a link where they now let the
> retail world in on what has been going on for decades [2].
> 
> This is why the US gov keeps hyping how bad security is, so the gov can
> take
> steps and the sub-contract out the details for billions (it's the new
> cold
> war and we have to be scared enough to get the govs to protect us, right?
> And all of that horse_feathers
> 
> Anyone doing gate/register design/validations with Intel parts, decades
> ago,
> stumbled into areas of the the intel chips with hidden hardware. Just
> slice
> them and put them under any high res scanner nowadays Sadly,
> everybody
> in the chip bidness does this routinely now. SoCs are all full
> of this crap.
> 
> The old AT phone switches (think 3B2) had this sort of 'undefined
> hardware'. Nothing new 'signal intercept' is good to search on, but most
> of the Intel (get the pun?) has been scrubbed form the internet on 
> 'signal intercept'; particularly the Rf stuff.
> 
> > A recent article shared on this M/L also showed that anything with Intel 
> > inside® can be deemed as intentionally weakened to enable potential 
> > interference with our privacy.
> 
> Got that link handy? Part of the SSL v2 v3 stuff? I was hoping somebody
> would write up a summary, and  detail action plans from a gentoo
> workstation, gentoo server and gentoo-cluster perspective on the state
> of SSL.* issues.  
> 
> > Therefore treat your encrypted communications and their content with  
> > caution, because you don't know how private these may remain in the 
> > future.
> 
> Kinda like a very gorgeous woman, with a low credit score (yak yak yhak)?
> Or like an 'old bug' flying towards the light (ZAP)?
> Certainly, but, the low rent hacks might be held at bay a little longer.
> Still, we should make the effort to streamline and document pathways,
> with
> ample warnings of cautions.
> 
> 
> [1] https://wiki.installgentoo.com/index.php/Encryption
> 
> [2]
> http://www.extremetech.com/extreme/184828-intel-unveils-new-xeon-chip-with-integrated-fpga-touts-20x-performance-boost
> 
> 

Re: [gentoo-user] Re: Encrypted cell 2 gentoo

[Max R.D. Parmer]

Ahh, OK. So secure communications between all these clients.

The two big players for client-side encryption for email or messaging
data would be GPG and OTR; for VoIP you would want to look into ZRTP.
There are several clients that support these three protocols on all the
platforms you've listed (though support for ZRTP is across the board
pretty rare).

Unfortunately, I'm not aware of any single cohesive guide to tie it
altogether.

--
0x7D964D3361142ACF

On Mon, Mar 28, 2016, at 09:13, James wrote:
> Max R.D. Parmer  trystero.is> writes:
> 
> 
> 
> 
> > Do I understand correctly that you're looking to set up a Gentoo server
> > as a "hub" from which you can retrieve your mail using any of your
> > client systems?
> 
> Not really. Yes that has to work but... What I want to read up on 
> and test is encrypted (secure) communications between the (2) major
> cell phone types and whatever client on a gentoo workstation. The 
> goal is good security, that is reasonable to setup and manage
> and allows folks to use any of those 3 devices to exchange encrypted
> mail.
> Suppose I had a friend that has an ios phone. What page do I send him to
> to encrypt his emails? What will work with thunderbird, sylpheed, etc.
> Some discussion, url links that I can refer others to and then
> recommendations.
> 
> > If I understood correctly, interoperability should be easy because
> > mostly it comes down to IMAP/SMTP/POP3 and support for those protocols
> > is pretty good across lots of applications. But maybe I got it wrong?
> 
> What I want to do is find documents that at least provide an overview
> of which specific apps to put on a cell phone (android or ios) some
> example configs and then a few docs on the gentoo side.
> 
> Free or do you buys those apps from a vendor on the cell phones?
> Which ones are better, i.e. more trusted or have different algos
> for encryptions (bit-lenght etc). May, I just need to find
> a forum where this is routinely discuss to see what's new, what's
> not secure, what may be prohibited by whom, etc etc.
> 
> 
> OK?
> 
> James  
> 
> 
> 
> 

Re: [gentoo-user] Encrypted cell 2 gentoo

[Max R.D. Parmer]

Do I understand correctly that you're looking to set up a Gentoo server
as a "hub" from which you can retrieve your mail using any of your
client systems?

If I understood correctly, interoperability should be easy because
mostly it comes down to IMAP/SMTP/POP3 and support for those protocols
is pretty good across lots of applications. But maybe I got it wrong?

--
0x7D964D3361142ACF

On Mon, Mar 28, 2016, at 08:21, James wrote:
> Hello,
> 
> I've been googling for some guides on setting up encrypted mail
> on a gentoo system and specifically how you would set up the apple
> or android phone on the other end. Lots to read. Guidance on the
> applications (both cell phone and the gentoo workstations. I guess
> that inter-operability is what I'm most curious about. I'm not running a 
> MTA, but I could if that helps?
> 
> 
> 
> 

Re: [gentoo-user] The war continues.

[Max R.D. Parmer]

Wow, sounds like you've been having a rough time.

I think if you chunk things up into tiny pieces of logs, and take the
issues on one at a time, you will be able to solve your problems. That
said, if you would like to send us the last month or so of your
emerge.log, we might be able to help focus your efforts.

Until you have everything building cleanly and working as you hoped, I
would avoid doing any new portage syncs just to keep from having an
issue where the set of problems you're looking at might shift
dramatically. This way you can look at the problems one at a time then
eliminate them before new problems come up. Similarly, unless you see a
problem where a program is complaining about not being able to load a
shared object, I would just put off the revdep-rebuild until you've
successfully updated.


It looks like you have two distinct problems in the messages you posted
here, a problem with asciidoc and another with kwin and mesa.

On asciidoc I think a good first step would be setting
PYTHON_SINGLE_TARGET="python2_7" if you haven't already, I see that in
the make.conf you posted at the end of February[1] you have
PYTHON_SINGLE_TARGET="python3_5". Could you give changing
python_single_target a try and report back? I know it will not solve all
your issues, but at least it should reduce the amount of negative
feedback emerge is giving you.

Also, is the script ./pretendupdate something like "emerge --pretend
--verbose --all --newuse @world"?


[1]: https://marc.info/?l=gentoo-user=145668323000774=p3
--
0x7D964D3361142ACF

On Thu, Mar 17, 2016, at 08:12, William Ernesto Cárdenas Gómez wrote:
> El jue, 17-03-2016 a las 10:55 -0400, Alan Grimes escribió:
> > My effort to update my syestem continues unabated. =\
> > 
> > One problem is that every time revdep-rebuild is run, it always
> > rebuilds
> > all of libreoffice, an 8-hour build. WTF, seriously, WTF?
> > 
> > I made the mistake of syncing portage again and was thrown back into
> > useflag hell:
> > 
> > I tried to fix it by setting wayland, gles2 and egl to default
> > because
> > they were breaking other packages.
> > 
> > 
> > I don't even know how to read the current error message:
> > 
> > ##
> > 
> > tortoise ~ # ./pretendupdate
> > 
> > These are the packages that would be merged, in order:
> > 
> > Calculating dependencies... done!
> > 
> > !!! Multiple package instances within a single package slot have been
> > pulled
> > !!! into the dependency graph, resulting in a slot conflict:
> > 
> > media-libs/mesa:0
> > 
> >   (media-libs/mesa-11.1.2-r1:0/0::gentoo, ebuild scheduled for merge)
> > pulled in by
> > (no parents that aren't satisfied by other packages in this slot)
> > 
> >   (media-libs/mesa-11.1.2-r1:0/0::gentoo, installed) pulled in by
> > media-libs/mesa[egl,gbm,gles2?,wayland] required by
> > (kde-plasma/kwin-5.5.5:5/5::gentoo, ebuild scheduled for merge)
> >   
> > ^^^  
> >   
> > 
> > 
> > It might be possible to solve this slot collision
> > by applying all of the following changes:
> >    - media-libs/mesa-11.1.2-r1 (Change USE: +wayland +gles2)
> > 
> > 
> > !!! The ebuild selected to satisfy "app-text/asciidoc" has unmet
> > requirements.
> > - app-text/asciidoc-8.6.9-r2::gentoo USE="graphviz -examples
> > -highlight
> > -test" ABI_X86="64" PYTHON_SINGLE_TARGET="-pypy -python2_7"
> > PYTHON_TARGETS="python2_7 -pypy"
> > 
> >   The following REQUIRED_USE flag constraints are unsatisfied:
> > exactly-one-of ( python_single_target_pypy
> > python_single_target_python2_7 )
> > 
> >   The above constraints are a subset of the following complete
> > expression:
> > exactly-one-of ( python_single_target_pypy
> > python_single_target_python2_7 ) python_single_target_pypy? (
> > python_targets_pypy ) python_single_target_python2_7? (
> > python_targets_python2_7 )
> > 
> > (dependency required by "net-misc/tor-0.2.8.1_alpha::gentoo"
> > [installed])
> > (dependency required by "@selected" [set])
> > (dependency required by "@world" [argument])
> > tortoise ~ #
> > 
> > #
> > 
> > Current state of mind: put a live hand grenade in to the computer and
> > walk away.
> > 
> > I've been using Gentoo Every day now for ten years. This is an
> > entirely
> > New level of bullshit. =(
> > 
> > 
> > Modest list of complete and utter FAIL:
> > 
> > 
> > 
> > tortoise portage # tree -L 2
> > .
> > ├── app-office
> > │   └── texmacs-1.99.2-r1
> > ├── dev-libs
> > │   ├── libcdio-0.93
> > │   └── libcdio-paranoia-0.93_p1
> > ├── dev-qt
> > │   └── qtwebkit-5.5.1-r1
> > ├── kde-apps
> > │   └── kdesdk-kioslaves-15.12.2
> > ├── kde-plasma
> > │   ├── oxygen-5.5.5
> > │   └── oxygen-fonts-5.4.3
> > ├── media-gfx
> > │   └── fontforge-20150824
> > ├── media-libs
> > │   ├── opencv-3.1.0-r2
> > │   └── x264-0.0.20151011
> > └── media-video
> > └── vcdimager-0.7.24
> > 
> > 

Re: [gentoo-user] pvcreate on LUKS container -> 'Device not found'

[Max R.D. Parmer]

On Tue, Mar 8, 2016, at 15:06, Frank Steinmetzger wrote:
> On Wed, Mar 09, 2016 at 12:02:23AM +0100, Frank Steinmetzger wrote:
> 
> > > If you would like to get rid of the /run/lvm/lvmetad.socket error just
> > > start lvm with "service lvm start". I still get the error when starting
> > > up but it still works.
> > 
> > I noticed that and quickly found /etc/init.d/lvmetad, but since I'm doing
> > only the setup on this PC, I don't realler bother.
> 
> I would actually prefer a simple partition table within the luks
> container.
> I have no real need for the flexibility of LVM and it would only embiggen
> the required initramfs and make the boot process more complex.
> But folks on IRC told me was not possible.
> 
> -- 
> Gruß | Greetings | Qapla’
> Please do not share anything from, with or about me with any social
> network.
> 
> There are things of which I do not even talk to myself.

Frank, I can attest that it is possible to have an encrypted root
without involving LVM. I have done this on Gentoo and other distros many
times. In fact, it can be a bit easier to deal with if you don't need
the LVM flexibility within your dm-crypt container and truly it is one
less thing to forget about when you are setting up your initrd/grub
config.

You are doing things in a reasonable order it seems to me. First you
create the partition table, then you luksFormat the partition which is
to be encrypted (presumably leaving /boot unencrypted), and then you run
pvcreate on the encrypted partition (although if you do not wish to use
lvm, you should just run mkfs on the dm-crypt device in /dev/mapper).

LVM can be nice, though, as it lets you have a multitude of logical
volumes all within a single encrypted disk partition (otherwise maybe
you would have everything on one partition and your system would fail if
/var got full, or you would have several separately encrypted partitions
which could cause other troubles).

Generally you can ignore those lvmetad messages as they don't
necessarily stop the command from succeeding.

Could you send us the output of "stat `readlink -f /dev/mapper/lvm`" (or
in your first example, "stat `readlink -f /dev/mapper/tp`")? I am
interested to see that the file exists and has the correct attributes
after you perform your `cryptsetup luksOpen` operation. The files in
/dev/mapper are symlinks to /dev/dm-* devices, this will resolve the
symlink and then run stat on the real underlying dm-* device.

Hope this helps,
Max

--
0x7D964D3361142ACF

Re: [gentoo-user] [OT] Any thoughts on Intel Skylake SGX?

[Max R.D. Parmer]

It seems like SGX is intertwined with the Intel Management Engine,
Chapter 4 in Joanna Rutkowska's "Intel x86 considered harmful"[1] (pp.
35) goes in-depth on the potential issues with Intel ME.

That same book has some light discussion on SGX (pp. 20) but it seems
like, if you are concerned about ME eavesdropping, SGX wouldn't stop
that (at least as of October 2015).

If you are feeling paranoid but want an Intel chip, I would recommend
you choose the pre-vPro/AMT systems (sandybridge or earlier, iirc). I
tend to think Intel ME is a very real risk for some users and will
remain so until users are more empowered to dictate it's operation and
until there are good public audits of it's code, and most importantly,
the ability to disable it.

Hopefully in a couple years we will have access to good quality laptops
running on RISC-V.

[1]: http://blog.invisiblethings.org/papers/2015/x86_harmful.pdf
-- 
0x7D964D3361142ACF

On Tue, Feb 23, 2016, at 15:34, Frank Steinmetzger wrote:
> Hello list
> 
> so I was about to treat myself to a new Thinkpad. After malware, backdoor
> and BIOS rootkit stories at Lenovo’s (which to my knowledge were all
> Windows-only problems) I already started looking elsewhere and even
> considered bying a used model which existed before all this modern crap
> came
> along, but always came back yet for lack of better alternatives.
> 
> Today the new Skylake lineup which I’ve been awaiting since January
> finally
> appeared in the Lenovo online shop. Conincidentally also today¹, I found
> out
> about the next thing since TPM, Secure Boot & Co: the SGX (Software Guard
> Extension) instruction set which is part of all Skylake chips².
> 
> The way I understood it is that it can be used to create private areas in
> memory that are inaccessible to any other program, even the operating
> system. Since it’s based on cryptographic signatures and Intel being the
> sole supplier of licences and signature keys, there are those who fear
> that
> Intel will – over time – gain unparalleled control over what we can and
> cannot run on our machines and that we will not be able to check what
> runs
> on our systems anymore. (Well, such fears are not really new to begin
> with).
> 
> 
> Infos are spare b/c it just hit the market a short wile ago, and I’m no
> expert by far. Thus I seek guidance. With states and corporations
> sniffing
> at our every step as they are already, can I – in your considered opinion
> –
> still buy a Skylake device with good concience?
> 
> Am I seeing things too bleak in the context of constant attacks on open
> systems which – when puzzled together – give a horrible picture of our
> future in a society that doesn’t care as long as Facebook works?
> 
> Or don’t I have to worry about it because this will only play a role in
> the
> walled gardens of contemporary commercial consuming interfaces (formerly
> known as operating systems, AKA Windows) or servers?
> 
> 
> Ew, I wanted to ask a simple question. Instead, I needed 30 minutes to
> write
> half a short story. Sorry and thanks for your time.
> 
> 
> ¹ German news article:
>   
> http://www.heise.de/security/meldung/Kritik-an-Intels-Sicherheits-Architektur-Software-Guard-Extensions-3089439.html
> ² https://en.wikipedia.org/wiki/Software_Guard_Extensions
> -- 
> Gruß | Greetings | Qapla’
> Please do not share anything from, with or about me with any social
> network.
> 
> This message was written using only recycled electrons.
> Email had 1 attachment:
> + signature.asc
>   1k (application/pgp-signature)

Re: [gentoo-user] glibc security issue

[Max R.D. Parmer]

Yes, looks like it is:
https://security.gentoo.org/glsa/201602-02

-- 
0x7D964D3361142ACF

On Wed, Feb 17, 2016, at 08:48, meino.cra...@gmx.de wrote:
> Hi,
> 
> I found this
> http://www.heise.de/newsticker/meldung/glibc-Dramatische-Sicherheitsluecke-in-Linux-Netzwerkfunktionen-3107621.html
> 
> and the daily update contains an update to glibc.
> Is this the patch, which fixes that problem?
> 
> Best regards,
> Meino
> 
> 
> 

Re: [gentoo-user] Cheapest dedicated gentoo servers?

[Max Kremmel]

On Sat, 03 Sep 2011, Nilesh Govindarajan wrote:

 On 09/03/2011 04:26 AM, Adam Carter wrote:
  I'm looking for dedicated server providers whose rates are low, support
  Gentoo and most importantly are reliable. Service should be stable.
  Location is not important, but preferable in EU.
  
  Amazon EC2 does Gentoo... Big name may help you sell to management.
  
 
 @everyone,
 I already know about a VPS provider, with reliability, and Gentoo
 support. Been with them since 2008. cheapvps.co.uk, if you're
 interested. They have xen, kvm  openvz (us-only).
 
 For dedicated I know just one for now- hetzner.de, who allows you to
 install your own os (you're provided with a rescue system).
 
 If you know any more dedicated providers, please reply. I'll compare
 their rates :)
 Definition of cheap is fairly relative :)
 
 -- 
 Nilesh Govindarajan
 http://nileshgr.com
 

next to hetzner.de in germany i know ovh.de:
http://www.ovh.de/items/distributionen/gentoo.xml?sort=all

not sure if they meet your 'low rates' limit. they seem to have decent
connection speeds some of which have a 'lossless' tag in their names.
not entirely sure what that means though.

x

[gentoo-user] Gnome File Browser - smaller Symbols

[Max]

Hi,

I think the main toolbar of the gnome filemanager uses up far to much
space. So I'd like to make it smaller. Is there any way to do that? I
would be happy with the text and no icons as well, or smaller icons and
no text.

cu
Max

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] webcam

[Max]

Hi,

That doesn't sound too bad. How you test the cam?

cu
Max



On Sat, 2008-05-03 at 11:43 +0100, Gavin Seddon wrote:
 Hi
 It's nearly there
 I get
 'lsmod
 Module  Size  Used by
 uvcvideo   40580  0
 compat_ioctl32  1536  1 uvcvideo
 videodev   27520  1 uvcvideo
 v4l1_compat12036  2 uvcvideo,videodev
 extreme video # lsusb
 Bus 005 Device 001: ID 1d6b:0001
 Bus 001 Device 006: ID 058f:6362 Alcor Micro Corp. Hi-Speed 21-in-1 
 Flash Card Reader/Writer (Internal/External)
 Bus 001 Device 005: ID 13fd:1650
 Bus 001 Device 002: ID 05e3:0608 Genesys Logic, Inc. USB-2.0 4-Port HUB
 Bus 001 Device 003: ID 046d:08ce Logitech, Inc. QuickCam Pro 5000
 Bus 001 Device 001: ID 1d6b:0002
 Bus 002 Device 001: ID 1d6b:0002
 Bus 006 Device 001: ID 1d6b:0001
 Bus 008 Device 001: ID 1d6b:0001
 Bus 004 Device 002: ID 046d:0a02 Logitech, Inc.
 Bus 004 Device 001: ID 1d6b:0001
 Bus 007 Device 001: ID 1d6b:0001
 Bus 003 Device 001: ID 1d6b:0001'
 the camera is detected.  But, lsmod doesn't see my quickcam as I think 
 it should.  Can anyone help pls?
 g

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] webcam

[Max]

Hi,

If you mean a logitech 5000, this page may helps you:

http://linux-uvc.berlios.de/

I don't know the cam, but had no problem with old quickcams or spca5xx
chipset based ones on gentoo. Just make sure you have V4L enables in
your kernel config.

cu
Max



On Fri, 2008-05-02 at 16:03 +0100, Gavin Seddon wrote:
 Hi
 Sorry about this.
 
 lsusb sees my logptech 5000 webcam.  I've configured according to
 
 http://gentoo-wiki.com/HOWTO_Install_a_webcam
 but there's no light on.
 
 Can anypne help pls?
 g

-- 
gentoo-user@lists.gentoo.org mailing list

[gentoo-user] Thrustmaster RCS

[Max]

Hello,

in my old Macintosh days I had this very nice Thrustmaster flight
control system. It came with a joystick, a throttle control and pedals.
The joystick itself is ADB based and doesn't work whithout an adapter or
an old Mac.

However the pedals are equipped with a standard gameport connector and
it says it's compatible to Mac OS and Windows 95 ... so i am sure Linux
can handle it somehow.

I'd like to use it with an emu10k1 based Creative Soundblaster Live! to
controll the rudder of X-Plane simulated aircraft.

I've compiled the kernel (2.6.24-r4) modules for the joystick interface.
A USB based X52 works fine for X-Plane, but i have no live signs from
the pedals yet. I didn't find much about the pedals (Thrustmaster RCS)
on Google or anywhere else yet.

Any ideas how to make this old piece of equipment working?

cu
Max

-- 
gentoo-user@lists.gentoo.org mailing list

[gentoo-user] Streamtuner doesn't show Shoutcast genres

[Max]

Hello

I use streamtuner to tune into Shoutcast streams. Usually it shows a
list with genry categorys which is very usefull. But since a while I can
only access the Top Streams List and thats the end of it, no more
categorys.

I tried to reset the app by deleting the setting directory, without any
success. On google I found some reports about the problem, but no
solution. None of them where gentoo related. Any ideas?

cu
Max

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] unixODBC econf failure

[Max]

Bonjour Alain,

the first thing you should try, is to add the line 

media-plugins/gst-plugins-alsa

into your /etc/portage/package.keywords and maybe in
your /etc/portage/package.unmaks file.

For mor information go to this page:
http://gentoo-wiki.com/TIP_package.keywords

I guess that should do the job in your case. Good luck!

cu
Max

--

On Sun, 2008-03-23 at 11:49 +0100, [EMAIL PROTECTED] wrote:
 Selon Max [EMAIL PROTECTED]:
 
  Hello,
 
  After updating gnutls revdep-rebuild would like to update an awfull lot
  of packages, including unixODBC. So far no problem but unixODBC does not
  compile. After a while it comes up with the following error message:
 
 
  Same here, except that rev-dep rebuild complains :
 
 Calculating dependencies -
 !!! All ebuilds that could satisfy =media-plugins/gst-plugins-alsa-0.8.11 
 have
 been masked.
 
 emerge --info says:
 
 Portage 2.1.4.4 (default-linux/amd64/2006.1/desktop, gcc-4.1.2, 
 glibc-2.6.1-r0,
 2.6.24-gentoo-r3 x86_64)
 =
 System uname: 2.6.24-gentoo-r3 x86_64 AMD Athlon(tm) 64 X2 Dual Core Processor
 3800+
 Timestamp of tree: Sun, 23 Mar 2008 09:17:01 +
 ccache version 2.4 [enabled]
 app-shells/bash: 3.2_p17-r1
 dev-java/java-config: 1.3.7, 2.1.4
 dev-lang/python: 2.4.4-r9
 dev-python/pycrypto: 2.0.1-r6
 dev-util/ccache: 2.4-r7
 sys-apps/baselayout: 1.12.11.1
 sys-apps/sandbox:1.2.18.1-r2
 sys-devel/autoconf:  2.13, 2.61-r1
 sys-devel/automake:  1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
 sys-devel/binutils:  2.18-r1
 sys-devel/gcc-config: 1.4.0-r4
 sys-devel/libtool:   1.5.26
 virtual/os-headers:  2.6.23-r3
 ACCEPT_KEYWORDS=amd64
 CBUILD=x86_64-pc-linux-gnu
 CFLAGS=-march=athlon64 -O2 -pipe
 CHOST=x86_64-pc-linux-gnu
 CONFIG_PROTECT=/etc /usr/kde/3.5/env /usr/kde/3.5/share/config
 /usr/kde/3.5/shutdown /usr/share/config
 CONFIG_PROTECT_MASK=/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf
 /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/
 /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo 
 /etc/texmf/web2c
 /etc/udev/rules.d
 CXXFLAGS=-march=athlon64 -O2 -pipe
 DISTDIR=/usr/portage/distfiles
 FEATURES=ccache distlocks metadata-transfer parallel-fetch sandbox sfperms
 strict unmerge-orphans userfetch
 GENTOO_MIRRORS=http://213.186.33.37/gentoo-distfiles/ http://194.117.143.72
 ftp://pandemonium.tiscali.de/pub/gentoo/ ftp://194.117.143.71/mirrors/gentoo
 ftp://194.117.143.72/mirrors/gentoo;
 LANG=[EMAIL PROTECTED]
 LC_ALL=[EMAIL PROTECTED]
 LINGUAS=fr fr_FR en
 MAKEOPTS=-j3
 PKGDIR=/usr/portage/packages
 PORTAGE_RSYNC_OPTS=--recursive --links --safe-links --perms --times 
 --compress
 --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles
 --exclude=/local --exclude=/packages
 PORTAGE_TMPDIR=/var/tmp
 PORTDIR=/usr/portage
 SYNC=rsync://rsync.europe.gentoo.org/gentoo-portage
 USE=X acpi alsa amd64 apache2 arts berkdb cairo cdr cli cracklib crypt cups
 dbus dri dvd dvdr dvdread eds emboss encode esd ethereal examples fam firefox
 fortran gdbm gif gnome gpm gstreamer gtk gtk2 hal iconv imagemagick ipv6 
 isdnlog
 java javascript jpeg kde ldap mad midi mikmod mp3 mpeg mudflap ncurses nls 
 nptl
 nptlonly nsplugin offensive ogg opengl openmp oss pam pcre pda pdf perl png 
 ppds
 pppd python qt qt3 qt4 quicktime readline reflection scanner sdl session 
 sockets
 spell spl ssl svg symlink tcpd threads tk truetype unicode vorbis xml xorg xv
 zlib ALSA_CARDS=ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci
 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m
 maestro3 trident usb-audio via82xx via82xx-modem ymfpci 
 ALSA_PCM_PLUGINS=adpcm
 alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug 
 ladspa
 lfloat linear meter mulaw multi null plug rate route share shm softvol
 APACHE2_MODULES=actions alias auth_basic auth_digest authn_anon authn_dbd
 authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile
 authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd
 deflate dir disk_cache env expires ext_filter file_cache filter headers ident
 imagemap include info log_config logio mem_cache mime mime_magic negotiation
 proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so
 speling status unique_id userdir usertrack vhost_alias ELIBC=glibc
 INPUT_DEVICES=keyboard mouse KERNEL=linux LCD_DEVICES=bayrad cfontz
 cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text LINGUAS=fr fr_FR en
 USERLAND=GNU VIDEO_CARDS=radeon
 Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS,
 PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS,
 PORTDIR_OVERLAY
 
 gcc-config -l:
 [1] x86_64-pc-linux-gnu-4.1.2 *
  Help...


-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] unixODBC econf failure

[Max]

Hello Alan,

thanks for the reply. I tried to compile it external and it worked
after i deactivated the gui (--disable-gui). So i removed the gnome USE
flag and was able to install it.

Disabling the sandbox feature didn't lead to success.

Thanks a lot for your help!

cu
Max



On Sun, 2008-03-23 at 10:03 +0200, Alan McKinnon wrote:
 On Saturday 22 March 2008, Max wrote:
  Hello Alan,
 
  thanks for your instant reply. Answers below the questions.
 
 Hi Max,
 
 Your settings seem sane, there's nothing outlandish in there.
 
 The cannot create executables error seems quite generic in practise - 
 I've never had it myself but google shows various reasons, all 
 amounting to gcc can't run properly.
 
 Top of the list is sandbox, whichis in your FEATURES. A few tests to 
 determine what is going on:
 
 1. Unpack unixODBC somewhere and manually config and compile unixODBC to 
 test the toolchain
 2. Remove sandbox from FEATURES and try again
 
 alan
 


-- 
gentoo-user@lists.gentoo.org mailing list

[gentoo-user] libgnutls.so.13 missing [SOLVED]

[Max]

Hello,

I just resoved the unixODBC problem after the gnutls update yesterday,
and got another problem now.

gnome-extra/gnome-keyring-manager-2.20.0 failed to build because
libgnutls.so.13 is missing. Of course i tried it with a symlink to the
installed /usr/lib64/libgnutls.so.26.1.3 and ldconfig.

At a closer look i foult out that this is related to gnome-vfs. If you
have the same problem, recompile the realted packages like gnome-vfs and
you should not have any more trouble.

cu
Max

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] libgnutls.so.13 missing [SOLVED]

[Max]

Hi Rumen,

I ran just revdep-rebuild and had the problem as soon as the gnome
keyring app was compiled. The number of packages here is about the same
(44 on a gnome only system).

I can't find the meaning of -p in the man page. What does it mean?

cu
Max

 Hi,
 
 Maybe it's better to run 'revdep-rebuild -i -p' first.
 Had to rebuild some  40 packages after gnutls upgrade.
 HTH. Rumen


-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] Basic video editor in portage?

[Max]

Hello Grant,

I think Kino is what you want. I have cinellera here, but thats a bit of
an overkill as well. A Gnome alternative is PiTiVi
(http://pitivi.sourceforge.net/).

cu
Max



On Sun, 2008-03-23 at 12:22 -0700, Grant wrote:
 I have some video clips I'd like to trim the beginning and end from.
 Is there a simple tool that will do this?  I'm emerging lives but I
 think it's overkill for this.
 
 - Grant

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] unixODBC econf failure

[Max]

Hello Alan,

sorry for the delay, I wanted to finish the revdep-rebuild. Even on my
fast P4D this took a while.

Anyway, you where right, the unixODBC problem disappeared after fixing
the gnome-vfs package. It merged well with the gnome flag this time.

Thank you for your help.

cu
Max

On Sun, 2008-03-23 at 16:08 +0200, Alan McKinnon wrote:
 On Sunday 23 March 2008, Max wrote:
  Hello Alan,
 
  thanks for the reply. I tried to compile it external and it worked
  after i deactivated the gui (--disable-gui). So i removed the gnome
  USE flag and was able to install it.
 
  Disabling the sandbox feature didn't lead to success.
 
  Thanks a lot for your help!
 
 Hi Max,
 
 You don't say if you got unixODBC  working with the gui again or not. I 
 suppose though that resolving those later issues you had fixed unixODBC 
 as well ?
 
 
 
 -- 
 Alan McKinnon
 alan dot mckinnon at gmail dot com


-- 
gentoo-user@lists.gentoo.org mailing list

[gentoo-user] unixODBC econf failure

[Max]

Hello,

After updating gnutls revdep-rebuild would like to update an awfull lot
of packages, including unixODBC. So far no problem but unixODBC does not
compile. After a while it comes up with the following error message:


...
checking for x86_64-pc-linux-gnu-gcc... x86_64-pc-linux-gnu-gcc
checking for C compiler default output file name... 
configure: error: C compiler cannot create executables
See `config.log' for more details.

!!! Please attach the following file when seeking support:
!!! 
/var/tmp/portage/dev-db/unixODBC-2.2.12/work/unixODBC-2.2.12/gODBCConfig/config.log
 * 
 * ERROR: dev-db/unixODBC-2.2.12 failed.
 * Call stack:
 *   ebuild.sh, line   49:  Called src_compile
 * environment, line 2622:  Called econf 'src_compile'
'src_compile' '--host=x86_64-pc-linux-gnu'
'--with-odbc=/var/tmp/portage/dev-db/unixODBC-2.2.12/work/unixODBC-2.2.12' 
'--enable-static'
 *   ebuild.sh, line  513:  Called die
 * The specific snippet of code:
 *  die econf failed
 *  The die message:
 *   econf failed
 * 
 * If you need support, post the topmost build error, and the call stack
if relevant.
 * A complete build log is located at
'/var/tmp/portage/dev-db/unixODBC-2.2.12/temp/build.log'.
 * The ebuild environment file is located at
'/var/tmp/portage/dev-db/unixODBC-2.2.12/temp/environment'.
 * 
...

The following gcc is installed:

sys-devel/gcc-4.1.2  USE=doc fortran gcj gtk ip28 ip32r10k mudflap
multislot nls objc objc++ objc-gc (-altivec) -bootstrap -build -d
(-hardened) -libffi (-multilib) (-n32) (-n64) -nocxx -test -vanilla

Some information about the system:

CPU: Intel P4D Processor Family 15
Gentoo: AMD64

CFLAGS=-march=nocona -O2 -pipe -fomit-frame-pointer
CXXFLAGS=${CFLAGS}

Kernel: gentoo 2.6.24-r3

If any further information is needed to solve the problem i'll be glad
to provide it. Thank you a lot in advance.

cu
Max

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] What is the preferred gentoo way to list all packages w/ multiple versions installed?

[Max Lorenz]

On 9/19/06, David Grant [EMAIL PROTECTED] wrote:




On 9/18/06, Wolfgang Liebich [EMAIL PROTECTED] wrote:
 Hi,
 I have an older gentoo systen which accumulated some cruft over the time
 - I have to clean it up :-)
 I want to list all installed SLOTTED packages where more than one
 version is installed. The old (deprecated) qpkg had the option --dups.
 What is the new! shiny! way of doing that?:-)


Try dep from udept (from ecatmur's overlay). Use layman to get it:

emerge -va layman
layman -a ecatmur
emerge -va udept
dep --help


udept is in portage now, just emerge it.
--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] XDM / GDM hangs when logging in.

[Max Lorenz]

Hi,

On 8/18/06, Samuel Baldwin [EMAIL PROTECTED] wrote:
snip

On the side, is it possible to customize the appearance of XDM (I know I can
for GDM)?


http://daimeria.com/linhowtos/xdm.php
--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] -unicode USE flag

[Max Lorenz]

Hi,

On 5/13/06, Mark Knecht [EMAIL PROTECTED] wrote:

Hi,
   I wonder if anyone could explain the USE flag 'unicode' better than
the Gentoo description located here:

http://www.gentoo.org/dyn/use-index.xml

unicode Adds support for Unicode

   I think the person who wrote this knows too much. ;-)

   What is unicode and why might an end user want it or need it?


This guide explains it pretty good:
http://www.gentoo.org/doc/en/utf-8.xml



Thanks,
Mark


HTH,
Max

--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] mediawiki: Enabling uploads?

[Max Lorenz]

Hi,

On 4/7/06, Alexander Skwar [EMAIL PROTECTED] wrote:
 Hello!

 For my wiki site, I'd like to enable uploads. To do so, I
 *added* lines

 $wgDisableUpload = false;
 $wgDisableUploads = false;

 to my LocalSettings.php.

From =1.5 it's the other way around, like so:
$wgEnableUploads = true;

see:
http://www.mediawiki.org/wiki/Configuring_file_uploads


 Alexander Skwar
Max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Cannot resolve a virtual package name to an ebuild.

[Max Lorenz]

Hi,

On 2/25/06, David Corbin [EMAIL PROTECTED] wrote:
 trombone dcorbin # emerge -uav portage

 These are the packages that I would merge, in order:

 Calculating dependencies -!!! Cannot resolve a virtual package name to an
 ebuild.
 !!! This is a bug, please report it. (virtual/libintl-0)
 --

 Is there someone way I can work around this?  I don't seem to be able to
 emerge anything.

Your portage is too old, see bug #114798. Try it without the -u, i.e.:
# emerge -av portage
and then sync again.

 David
HTH,
Max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Where has Aqua Datastudio gone?

[Max Lorenz]

Hi Wolfgang,

On 2/20/06, Wolfgang Liebich [EMAIL PROTECTED] wrote:
 Hi,
 I'm developing DB centered JAVA apps, so I tried out Aqua Datastudio (a
 DB frontent written in pure JAVA), and was rather satisfied w/ it. BUT
 now the ebuild for that app (dev-db/aqua-data-studio) has gone, w/o a
 trace. What happened?

see bug 63257[1]. There's also e new ebuild which seems to be better,
at least that's what the reporter said, bug 120719[2].

HTH,
Max

[1] http://bugs.gentoo.org/63257
[2] http://bugs.gentoo.org/120719

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] ebuilds gone to the happy hunting-grounds

[Max Lorenz]

On 2/13/06, Uwe Thiem [EMAIL PROTECTED] wrote:
 On 13 February 2006 11:11, Ciaran McCreesh wrote:
  On Sun, 12 Feb 2006 21:30:13 +0200 Uwe Thiem [EMAIL PROTECTED] wrote:
  | while trying to fix some other problems involving revdep-rebuild, I
  | stumbled over some ebuilds no longer in portage but still installed
  | on my system.
  |
  | How can I get rid of that stuff? I mean emerge --unmerge
  | dead-package won't do it because the ebuild doesn't exist any more.
 
  It will unless you installed said package a very long time ago. Portage
  keeps a copy of the ebuild in the vdb when you install something.

 Apparently, I did install it a very long time ago because emerge told me it
 didn't know it. :-(

Well, then grab the ebuild from cvs:
http://viewcvs.gentoo.org/

 Uwe
Max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] python: stack smashing attack in function sha_done()

[Max Lorenz]

Hi,

On 2/5/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
 I have this problem on emerge package and I don't know the cause.

 emerge --oneshot subversion
 Calculating dependencies ...done!
  emerge (1 of 1) dev-util/subversion-1.3.0 to /
 python: stack smashing attack in function sha_done()
 Aborted

 emerge bash
 Calculating dependencies ...done!
  emerge (1 of 1) app-shells/bash-3.1_p7 to /
  checksums files   ;-) bash-3.1_p7.ebuild
  checksums files   ;-) bash-3.0-r12.ebuild
  checksums files   ;-) bash-3.1_p5-r2.ebuild
  checksums files   ;-) bash-3.0-r14.ebuild
  checksums files   ;-) bash-2.05b-r11.ebuild
  checksums files   ;-) bash-3.0-r11.ebuild
  checksums files   ;-) bash-3.0-r13.ebuild
  checksums files   ;-) files/digest-bash-3.0-r11
  checksums files   ;-) files/digest-bash-3.0-r12
  checksums files   ;-) files/digest-bash-3.0-r13
  checksums files   ;-) files/digest-bash-3.0-r14
 python: stack smashing attack in function sha_done()
 Aborted

I think you need to update to the latest version of pycrypto, see Bug #120846.

HTH,
Max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] 2.6.15 gentoo-sources emerge

[Max Lorenz]

On 1/6/06, Paweł Madej [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Mark Knecht wrote:
  Hi,
 I noticed this line as I was emerging gentoo-sources this morning.
  (Yuk...4:30AM this morning...) Is it a problem?
 
  * Applying 4905_alpha-sysctl-uac.patch (-p0+) ...
   [ ok ]
  awk: cmd. line:1: fatal: cannot open file
  `/home/portage_temp/portage/gentoo-sources-2.6.15/work/linux-2.6.15-gentoo/include/linux/version.h'
  for reading (No such file or directory)
 
  Thanks,
  Mark
 

 I think you should file a bug on bugzilla.gentoo.org so the problem
 could be seen by kernel developers

https://bugs.gentoo.org/show_bug.cgi?id=113261

Max :)

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] realtime-preemption patch

[Max]

Hi,

On 11/1/05, karlos [EMAIL PROTECTED] wrote:
 could you point me to a list where all the patches are listed, as I really
 don't know what patches are applied to gentoo-sources.#?

http://dev.gentoo.org/~dsd/genpatches/

  k

Cheers,
Max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Switch from devfs to udev?

[Max]

Because no one mentioned it. There is also a Gentoo udev Guide:

http://www.gentoo.org/doc/en/udev-guide.xml

max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] trying to compile a 2.6 hardened-sources kernel (moving from a 2.4) -- getting gr_task_is_cabable undefined reference

[Max]

Hi Chad,

is your kernel hardened-sources-2.6.11-r12 by any chance? Judging from
the error messages it is. You need to use 2.6.11-r13, r12 is buggy.
See bug #93022 [1]

hth,
Max

[1] https://bugs.gentoo.org/show_bug.cgi?id=93022

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] removing gnome

[Max]

On 5/17/05, Cheryl Homiak [EMAIL PROTECTED] wrote:
 I can't find any revdep-rebuild command.
Hi Cheryl,

revdep-rebuild is in the gentoolkit packgage, just emerge gentoolkit.

hth,
max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Linux-headers and Kernels? What goes with who?

[Max]

Hi Michael,
what Carian said, and this thread gives some good explanations:

http://thread.gmane.org/gmane.linux.gentoo.server/2139

hth, max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fglrxconfig question

[Max]

Greetings,

not sure about the illegal instruction issue, but with a Radeon 9250
you can use the drivers provided by xorg, I think, for 3D goodness
etc. and don't need to use fglrx. Have a look at this:

http://www.gentoo.org/doc/en/dri-howto.xml

HTH
max

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] kde-base/kdelibs-3.3.2-r8 failing compilation

[Max revolt]

looks like they need a version of gcc that you dont haveor can be
found..

i686-pc-linux-gnu-g++: //usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.5/libstdc
++.so: No such file or directory



Em Dom, 2005-05-01 às 16:51 +, Vittorio escreveu:
 The compilation of kde-base/kdelibs-3.3.2-r8 dies with the following message:
 ..
 echo dummy.cpp
 /bin/sh ../libtool --silent --mode=compile --tag=CXX 

  
 -DHAV
 E_CONFIG_H -I. -I. -I.. -I../dcop -I../kio/kssl -I./.. -I../dcop -I../libltdl 
 -I
 ../kdefx -I../kdecore -I../kdeui -I../kio -I../kio/kio -I../kio/kfile -I.. 
 -I/us
 r/qt/3/include -I. -I/usr/kde/3.3/include   -D_LARGEFILE64_SOURCE 
 -DQT_THREAD_SU
 PPORT  -D_REENTRANT  -Wnon-virtual-dtor -Wno-long-long -Wundef -ansi 
 -D_XOPEN_SO
 URCE=500 -D_BSD_SOURCE -Wcast-align -Wconversion -Wchar-subscripts -Wall -W 
 -Wpo
 inter-arith -Wwrite-strings -DNDEBUG -DNO_DEBUG -O2 -O2 -mcpu=i686 
 -march=pentiu
 m4 -fomit-frame-pointer -Wformat-security -Wmissing-format-attribute 
 -fno-except
 ions -fno-check-new -fno-common  -DQT_CLEAN_NAMESPACE -DQT_NO_ASCII_CAST 
 -DQT_NO
 _STL -DQT_NO_COMPAT -DQT_NO_TRANSLATION  -c -o dummy.lo dummy.cpp
 /bin/sh ../libtool --silent --mode=link --tag=CXX i686-pc-linux-gnu-g++  
 -Wnon-v
 irtual-dtor -Wno-long-long -Wundef -ansi -D_XOPEN_SOURCE=500 -D_BSD_SOURCE 
 -Wcas
 t-align -Wconversion -Wchar-subscripts -Wall -W -Wpointer-arith 
 -Wwrite-strings
 -DNDEBUG -DNO_DEBUG -O2 -O2 -mcpu=i686 -march=pentium4 -fomit-frame-pointer 
 -Wfo
 rmat-security -Wmissing-format-attribute -fno-exceptions -fno-check-new 
 -fno-com
 mon  -DQT_CLEAN_NAMESPACE -DQT_NO_ASCII_CAST -DQT_NO_STL -DQT_NO_COMPAT 
 -DQT_NO_
 TRANSLATION-o libkio.la -rpath /usr/kde/3.3/lib -version-info 6:0:2 
 -no-unde
 fined -Wl,--no-undefined -Wl,--allow-shlib-undefined -L/usr/lib 
 -L/usr/qt/3/lib
 -L/usr/kde/3.3/lib   dummy.lo kssl/libkssl.la kio/libkiocore.la 
 kio/libksycoca.l
 a bookmarks/libkbookmarks.la 
 kfile/libkfile.la ../kdeui/libkdeui.la ../kdesu/lib
 kdesu.la ../kwallet/client/libkwalletclient.la -lz -lfam
 i686-pc-linux-gnu-g++: 
 //usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.5/libstdc++.so: 
 No such file or directory
 make[3]: *** [libkio.la] Error 1
 make[3]: Leaving directory 
 `/var/tmp/portage/kdelibs-3.3.2-r8/work/kdelibs-3.3.2/kio'
 make[2]: *** [all-recursive] Error 1
 make[2]: Leaving directory 
 `/var/tmp/portage/kdelibs-3.3.2-r8/work/kdelibs-3.3.2/kio'
 make[1]: *** [all-recursive] Error 1
 make[1]: Leaving directory 
 `/var/tmp/portage/kdelibs-3.3.2-r8/work/kdelibs-3.3.2'
 make: *** [all] Error 2
 
 !!! ERROR: kde-base/kdelibs-3.3.2-r8 failed.
 !!! Function kde_src_compile, Line 166, Exitcode 2
 
 
 What should I do?
 Vittorio
 

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] emerge gnome looking for automake-1.7

[Max revolt]

did you try to use only 

emerge automake

??


Em Seg, 2005-05-02 às 01:15 +1000, Richard Watson escreveu:
 Hi - emerge gnome is now giving me the following error
 
 am-wrapper: /usr/bin/automake-1.7 is missing or not executable please try
 emerging the correct version
 
 I checked /usr/bin and automake-1.7 is not present. 1.5 and 1.9 are but
 when I ...
 
 # emerge sys-dev/automake-1.7
 
 Calculating dependencies   
 
 !!! Problem in sys-dev/automake-1.7 dependencies.
 !!! Specific key requires an operator (sys-dev/automake-1.7) (try adding an
 '=') exceptions
 
 Any help would be really appreciated.
 
 Thanks, Richard
 
 -- 
 No virus found in this outgoing message.
 Checked by AVG Anti-Virus.
 Version: 7.0.308 / Virus Database: 266.11.0 - Release Date: 29/04/2005
  
 
 

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Who vets the gentoo front page ads?

[Max]

On 4/19/05, Ciaran McCreesh [EMAIL PROTECTED] wrote: 
 No no no no no. Bugzilla is for Gentoo things.
 
 Well, then how about vendors.gentoo.org?

max

-- 
gentoo-user@gentoo.org mailing list