[gentoo-user] /var/tmp on tmpfs

[gevisz]

I never used tmpfs for portage TMPDIR before and now decided to give it a try.

I have 8GB of RAM and 12GB of swap on a separate partition.

Do I correctly understood https://wiki.gentoo.org/wiki/Portage_TMPDIR_on_tmpfs
that I can safely set in the fstab the size of my tmpfs to 12GB so
that the chromium
could be emerged in tmpfs (using the swap) without the need to set notmpfs.conf
for chromium and the likes.

And I am going to set the whole /var/tmp/ on tpmfs instead of just
/var/tmp/portage
Is it ok?

Re: [gentoo-user] Re: /var/tmp on tmpfs

[gevisz]

2018-02-08 19:47 GMT+02:00 Nikos Chantziaras :
> On 08/02/18 19:11, gevisz wrote:
>>
>> I never used tmpfs for portage TMPDIR before and now decided
>> to give it a try.
>>
>> I have 8GB of RAM and 12GB of swap on a separate partition.
>>
>> Do I correctly understood
>> https://wiki.gentoo.org/wiki/Portage_TMPDIR_on_tmpfs
>> that I can safely set in the fstab the size of my tmpfs to 12GB so
>> that the chromium
>> could be emerged in tmpfs (using the swap) without the need to set
>> notmpfs.conf
>> for chromium and the likes.
>>
>> And I am going to set the whole /var/tmp/ on tpmfs instead of just
>> /var/tmp/portage
>> Is it ok?
>
>
> If you're not using ccache, then you don't need /var/tmp to be on tmpfs. You
> should only put /var/tmp/portage on tmpfs.

Thank you for the reply.

I do not use ccache, and in my /var/tmp I only have /var/tmp/portage
and /var/tmp/genkernel (I use genkernel to generate initramfs image).

I never use emerge and genkernel at the same time. So, why not to put
the whole /var/tmp into one tmpfs?

> If you do use ccache, then you need to mount both /var/tmp and
> /var/tmp/portage as tmpfs. Although if you end up swapping, it's probably
> going to be slower than not using tmpfs. So unless you have something like
> 32GB of RAM, it might be best to use notmpfs.conf for Chromium anyway.
>
> (Although I didn't benchmark swap vs notmpfs.conf. Swap being slower than
> notmpfs.conf is just an educated guess.)

Re: [gentoo-user] Re: /var/tmp on tmpfs

[gevisz]

2018-02-08 20:13 GMT+02:00 Rich Freeman :
> On 08/02/18 19:11, gevisz wrote:
>>
>> I never used tmpfs for portage TMPDIR before and now decided to give it a
>> try.
>>
>> I have 8GB of RAM and 12GB of swap on a separate partition.
>>
>> Do I correctly understood
>> https://wiki.gentoo.org/wiki/Portage_TMPDIR_on_tmpfs
>> that I can safely set in the fstab the size of my tmpfs to 12GB so
>> that the chromium could be emerged in tmpfs (using the swap)
>>  without the need to set notmpfs.conf for chromium and the likes.
>
> You can try it, but for Chromium these days you might find that still
> doesn't perform great.  I have 16GB of RAM (no swap) and have moved
> back to building on SSD for that one package (with ccache to help).
>
> In an ideal world swap would STILL be better than building on disk,
> because it gives the kernel fewer constraints around what gets written
> to disk.

> Anything written to disk MUST end up on the disk within the dirty
> writeback time limit.  Anything written to tmpfs doesn't ever have to
> end up on disk, and if it is swapped the kernel need not do it in any
> particular timeframe.  Also, the swapfile doesn't need the same kinds
> of integrity features as a filesystem, which probably lowers the cost
> of writes somewhat (if nothing else after a reboot there is no need to
> run tmpreaper on it).

> So, swapping SHOULD still be better than building on disk, because any
> object file that doesn't end up being swapped is a saved disk IO, and
> the stuff that does get swapped will hopefully get written at a more
> opportune time vs forcing the kernel to stop what is doing after 30s
> (by default) to make sure that something gets written no matter what
> (if it wasn't deleted before then).

Thank you for the reply.

I probably try a pure tmpfs + swap solution. If it fails some day, I will
then add notmpfs exceptions.

However, it probably won't be sooner than
# emerge --update --deep --with-bdeps=y --newuse --backtrack=90 --ask
world --exclude chromium
fails because of the "--exclude chromium" part :), as I have already compiled
the recent vertion of chromium with /var/tmp/portage on the hard disk and
it took more than 24 hours on my old AMD Athlon X2 with j2 option. :(

Re: [gentoo-user] /var/tmp on tmpfs

[gevisz]

2018-02-08 21:17 GMT+02:00 Dale :
> gevisz wrote:
>> I never used tmpfs for portage TMPDIR before and now decided to give it a 
>> try.
>>
>> I have 8GB of RAM and 12GB of swap on a separate partition.
>>
>> Do I correctly understood 
>> https://wiki.gentoo.org/wiki/Portage_TMPDIR_on_tmpfs
>> that I can safely set in the fstab the size of my tmpfs to 12GB so
>> that the chromium
>> could be emerged in tmpfs (using the swap) without the need to set 
>> notmpfs.conf
>> for chromium and the likes.
>>
>> And I am going to set the whole /var/tmp/ on tpmfs instead of just
>> /var/tmp/portage
>> Is it ok?
>
> I have 16GBs of memory here and have /var/tmp/portage/ on tmpfs, no
> ccache.  With the growing size of packages, I've had to put several on
> regular spinning rust to make sure enough space is available.  This is
> my list, so far.
>
> www-client/firefox
> www-client/seamonkey
> app-office/libreoffice
> sys-devel/gcc
> dev-qt/qtwebengine
> dev-qt/qtwebkit

Thank you for your reply and the notmpfs exception list.
I think it would be helpfull not only for me.

> Those are the ones that tend to run into space problems.  Keep in mind,
> I have twice the memory you have.  As someone else pointed out, if you
> start using swap, that generally defeats the purpose of tmpfs.
>
> While I'm sure plenty of packages will make good use of portage being on
> tmpfs, there will be quite a few that will have space problems.  You
> will need to be ready to make exceptions for those as they show up but
> those in my list are certainly ones that you may want to add before
> trying.  There could be exceptions to this based on your habits and
> memory requirements for other things but that is my experience so far.
>
> Hope that helps.
>
> Dale
>
> :-)  :-)
>

Re: [gentoo-user] Re: /var/tmp on tmpfs

[gevisz]

2018-02-08 23:57 GMT+02:00 Rich Freeman :
> On Thu, Feb 8, 2018 at 4:52 PM, gevisz  wrote:
>>
>> However, it probably won't be sooner than
>> # emerge --update --deep --with-bdeps=y --newuse --backtrack=90 --ask
>> world --exclude chromium
>> fails because of the "--exclude chromium" part :), as I have already compiled
>> the recent vertion of chromium with /var/tmp/portage on the hard disk and
>> it took more than 24 hours on my old AMD Athlon X2 with j2 option. :(
>>
>
> Honestly I doubt that tmpfs will make much difference since this is
> probably CPU-bound.

Thank you for your reply.

You probably will be surprised, but the main reason I am trying to use
tmpfs for /var/tmp/ is not because I want to make emerging chromium
faster (I have no hope about that because read somewhere that it will
make compilation only 10 percent faster) but because I have not too
much free space on / (sometimes in the past chromium refused to build
in the similar conditions) and because of that either have to move /var/tmp
to the separate partition anyway or try to use tmpfs + swap and, if it fails,
to move to the separate partition only /var/tmp/portage/notmpfs

> Using the jumbo-build option probably will help a lot more - but it
> will use even more RAM and might make a tmpfs impractical for you.  I
> bet that jumbo-build on a spinning disk will be faster for you than
> not using that option on a tmpfs.  But, there is only one way to be
> sure.

Re: [gentoo-user] Re: /var/tmp on tmpfs

[gevisz]

2018-02-09 0:19 GMT+02:00 Nikos Chantziaras :
> On 08/02/18 23:31, gevisz wrote:
>>
>> I do not use ccache, and in my /var/tmp I only have /var/tmp/portage
>> and /var/tmp/genkernel (I use genkernel to generate initramfs image).
>>
>> I never use emerge and genkernel at the same time. So, why not to put
>> the whole /var/tmp into one tmpfs?
>
>
> Well, someone here posted that /var/tmp is supposed to persist between
> reboots.

In this case it would be nice to hear a reason.
That's why I have asked if it does not harm.

> Anyway, I don't think it's going to make any difference in system
> performance when putting /var/tmp on tmpfs. There's almost nothing in there.
> Putting /var/tmp/portage on tmpfs is what's going to help with emerges. It
> will give a bit better emerge times as well as lower fragmentation on your
> disk.
>
>

Re: [gentoo-user] Re: /var/tmp on tmpfs

[gevisz]

2018-02-09 0:50 GMT+02:00 Tsukasa Mcp_Reznor :
> From: freemanr...@gmail.com  on behalf of Rich
> Freeman 
> Sent: Thursday, February 8, 2018 5:38 PM
> To: gentoo-user@lists.gentoo.org
> Subject: Re: [gentoo-user] Re: /var/tmp on tmpfs
>
> Just adding my 2 cents EMERGE_DEFAULT_OPTS="--fail-clean" helps
> a ton with tmpfs.

Thank you for the suggestion! Already added it to my make.conf.

> As for the athlon x2 system, consider using distcc, I've been using it for
> quite awhile, I don't think it helps with the ram usage

I am using -march=native in CFLAGS/CXXFLAGS and because of this
reluctant to use distcc, but it is a good idea too.

Re: [gentoo-user] /var/tmp on tmpfs

[gevisz]

2018-02-09 10:11 GMT+02:00 Neil Bothwick :
> On Thu, 8 Feb 2018 23:18:19 +, Wol's lists wrote:
>
>> > More specifically, /var/tmp is traditionally supposed to be
>> > non-volatile (across reboots).
>> >
>> > Comparatively the contents of /tmp can be volatile (across reboots).
>> >
>> > I would advise against mounting /var/tmp on tmpfs.
>> >
>> EMPHATICALLY YES.
>>
>> /tmp is defined as being volatile - stuff can disappear at any time.
>>
>> /var/tmp is defined as the place where programs store stuff like crash
>> recovery files. Mounting it tmpfs is going to screw up any programs
>> that reply on that *defined* behaviour to recover after a crash.
>>
>> Mounting /var/tmp/portage as tmpfs is perfectly fine as far as I know -
>> I do it myself.
>
> Why mess around with another tmpfs? Just set PORTAGE_TMPDIR="/tmp" in
> make.conf. Job done!

It is an interesting idea. But why it is not done by default then?

Can somebody think of a situation when it should not be done?

My /tmp is not on tmpfs currently. Only /run

May be, it is not a good idea to put /mnt on tmpfs at the time of
Spector and Meltdown?

Re: [gentoo-user] /var/tmp on tmpfs

[gevisz]

2018-02-09 3:24 GMT+02:00 Dale :
>
> In my experience, once swap starts getting used, it gets slow, sometimes
> to the point that a response may take several seconds or more.  When I
> compile without tmpfs at all, which means everything is on disk, it's
> rare that I can even tell it is using that IO for the drive.

Thank you for the information. It is always good to know the downside
of your decision. In this case, of using the swap.

So far, I never saw my swap busy, even when running VirtualBox with
half of my RAM assigned to it.

> The catch is, take advice from different folks and weigh all the
> options, then test things to see what works best.  It may be that one
> part of your post helps, another part from mine, another part from
> someone else and in the end, it leaves settings that work.  Well, on
> that system and for that person at least.  ;-)

Yes. I am greatfull to all who wrote to this thread. :)

Re: [gentoo-user] Re: /var/tmp on tmpfs

[gevisz]

2018-02-09 3:50 GMT+02:00 Dale :
> gevisz wrote:
>>
>> You probably will be surprised, but the main reason I am trying to use
>> tmpfs for /var/tmp/ is not because I want to make emerging chromium
>> faster (I have no hope about that because read somewhere that it will
>> make compilation only 10 percent faster) but because I have not too
>> much free space on / (sometimes in the past chromium refused to build
>> in the similar conditions) and because of that either have to move /var/tmp
>> to the separate partition anyway or try to use tmpfs + swap and, if it fails,
>> to move to the separate partition only /var/tmp/portage/notmpfs
>>
>
>
> I think you can tell emerge/portage to build that specific program on
> another disk.  You just have to tell it where, sort of the same way you
> tell it to build on disk instead of tmpfs.  I've never done it but it
> should work the same way.  Just make sure the permissions are right.
>
> My thinking.  Let's say you have chromium that won't fit on the usual
> disk.  Tell emerge/portage to build chromium in another directory that
> is on another disk.
>
> /etc/portage/env/largedisk.conf
> PORTAGE_TMPDIR="/var/tmp/largedisk"
>
> /etc/portage/package.env/package.env
> www-client/chromium  ../env/largedisk.conf
>
> Once you have those files set up to work, then make sure you have your
> large disk mounted at /var/tmp/largedisk and I would think it would
> work.  Anytime you emerge chromium, it should do that in
> /var/tmp/largedisk.  Only question is, do you have another disk to try
> this on???

Yes. I still have an unused 4th primary partition on the same hard disk.
I am going to make it extended and create 3 more partitions on it:
one — for /var/tmp/notmfs, another — for /var/log and the 3rd one —
for some unpredictable purposes like installing a rescue system.
Still have not decided on their size, file system and mount options
but it would be another question in a separate thread, when I come to it.

I am currently building a new and shiny :) Gentoo system on the
1st primery partion of this disk, that actually contained old /var/tmp,
because I am a bit afraid to update my old and still working Gentoo
system on the same hard disk that I have not updated for about 9 months.

Moreover, I have changed profile from not used for a long time
default/linux/amd64/13.0/desktop/gnome
one to
default/linux/amd64/17.0/desktop/
and already found out a lot of not wise solutions like alsa + pulseaudio
with initrc and the likes that I currently trying to avoid.

> Anyone think that wouldn't work???  Basically, you are just telling
> emerge/portage to build somewhere else and it shouldn't care where that
> is, tmpfs or disk.  Right?

It is exactly what suggested in the "Per-package choices at compile time"
section of the "Portage TMPDIR on tmpfs” Gentoo wiki. So it should work. :)

Re: [gentoo-user] Re: /var/tmp on tmpfs

[gevisz]

2018-02-09 4:15 GMT+02:00 Ian Zimmerman :
> On 2018-02-09 01:15, Wol's lists wrote:
>
>> > Care to cite an example of such a program in the Gentoo repo?  I
>> > certainly can't think of any, and I've been running with /var/tmp on
>> > tmpfs for over a decade.
>>
>> I don't know of any.
>
> vim?
>
> Although that choice was recently criticized on the oss-security list,
> Bram the BDFL seems to be sticking with it.

Ok, thank you for the information.

You have convinced me to stick with the standard. :)

[gentoo-user] Are VirtualBox moduli loaded by themselves?

[gevisz]

In VirtualBox Gentoo wiki is written that, to run VirtualBox, one should
emerge app-emulation/virtualbox-modules and load them into memory
either by using modprobe or by adding the following line
modules="vboxdrv vboxnetadp vboxnetflt vboxpci"
into /etc/conf.d/modules

I did nothing of mentioned above (except for emerging virtualbox-modules,
of course) but nevertheless lsmod shows that all virtualbox-modules are
loaded just after the boot (without even asking me if I need them):
$ lsmod
ModuleSize  Used by
vboxpci   12846  0
vboxnetadp18502  0
vboxnetflt   17028  0
vboxdrv  361873 3 vboxnetadp,vboxnetflt,vboxpci
kvm_amd2159235  0
kvm 4807421 kvm_amd
irqbypass 28081 kvm

Can anybody explain me who loads virtualbox-modules without my consent
and how I can make them loaded only when I need them (just before I am going
to run VirtualBox, which I do not so often)?

Re: [gentoo-user] Are VirtualBox moduli loaded by themselves?

[gevisz]

2018-03-05 23:35 GMT+02:00 Neil Bothwick :
> On Mon, 5 Mar 2018 22:40:00 +0200, gevisz wrote:
>
>> Can anybody explain me who loads virtualbox-modules without my consent
>> and how I can make them loaded only when I need them (just before I am
>> going to run VirtualBox, which I do not so often)?
>
> The ebuild installs /usr/lib/modules-load.d/virtualbox.conf which causes
> the modules to be loaded by systemd-modules-load.service. Systemd gives
> priority to similarly names files in /etc so creating an
> empty /etc/modules-load.d/virtualbox.conf should prevent them loading,
> although I'm basing that on the man page rather than actual experience.

Thank you for your reply.

My system indeed has file /usr/lib/modules-load.d/virtualbox.conf
file and it indeed lists all virtualbox modules.

And, indeed, creating directory /etc/modules-load.d/ and an empty
/etc/modules-load.d/virtualbox.conf file precludes loading virtualbox
moduli during boot

The only problem here is that I do not use systemd, only openrc.

So, https://wiki.gentoo.org/wiki/VirtualBox is outdated?
At least with respect to its OpenRC part.

And why at all OpenRC uses the systemd config files?

Ah, yes, /etc/init.d/modules-load
"loads a list of modules from systemd-compatible locations".
Ok. But the problem is that I cannot find any symlink to this file
from any subdirectory of /etc/runlevels/

> You could also disable the service if you don't want any
> non-hotplugged modules loaded at boot.

So, I do not know how to disable this service.

Re: [gentoo-user] Are VirtualBox moduli loaded by themselves?

[gevisz]

2018-03-06 11:37 GMT+02:00 J. Roeleveld :
> On Tuesday, March 6, 2018 10:21:43 AM CET gevisz wrote:
>> 2018-03-05 23:35 GMT+02:00 Neil Bothwick :
>> > On Mon, 5 Mar 2018 22:40:00 +0200, gevisz wrote:
>> >> Can anybody explain me who loads virtualbox-modules without my consent
>> >> and how I can make them loaded only when I need them (just before I am
>> >> going to run VirtualBox, which I do not so often)?
>> >
>> > The ebuild installs /usr/lib/modules-load.d/virtualbox.conf which causes
>> > the modules to be loaded by systemd-modules-load.service. Systemd gives
>> > priority to similarly names files in /etc so creating an
>> > empty /etc/modules-load.d/virtualbox.conf should prevent them loading,
>> > although I'm basing that on the man page rather than actual experience.
>>
>> Thank you for your reply.
>>
>> My system indeed has file /usr/lib/modules-load.d/virtualbox.conf
>> file and it indeed lists all virtualbox modules.
>>
>> And, indeed, creating directory /etc/modules-load.d/ and an empty
>> /etc/modules-load.d/virtualbox.conf file precludes loading virtualbox
>> moduli during boot
>>
>> The only problem here is that I do not use systemd, only openrc.
>>
>> So, https://wiki.gentoo.org/wiki/VirtualBox is outdated?
>> At least with respect to its OpenRC part.
>>
>> And why at all OpenRC uses the systemd config files?
>>
>> Ah, yes, /etc/init.d/modules-load
>> "loads a list of modules from systemd-compatible locations".
>> Ok. But the problem is that I cannot find any symlink to this file
>> from any subdirectory of /etc/runlevels/
>>
>> > You could also disable the service if you don't want any
>> > non-hotplugged modules loaded at boot.
>>
>> So, I do not know how to disable this service.
>
> It is a dependency for "modules", which is (on my system) in the boot
> runlevel.

Yes, this is the case for my system. Thank you.

Re: [gentoo-user] Are VirtualBox moduli loaded by themselves?

[gevisz]

2018-03-06 15:28 GMT+02:00 Rich Freeman :
> IMO disabling module autoloading by openrc seems like trying to kill a
> fly with a shotgun.  Just disable the configuration file that loads
> the particular modules that you don't want autoloaded, as was already
> suggested.  Then when you install something else whose modules you do
> want to load you won't spend six hours trying to figure out why it
> doesn't work, because nobody helping you realized that you modified
> the default openrc config.

Yes, I will probably stick with the empty /etc/modules-load.d/virtualbox.conf
file solution.

> I mean, if you really don't like it I guess you can also stick the
> autoload script in INSTALL_MASK, which seems to be the go-to solution
> around here when some optional functionality bothers you...

And thank you for pointing out to this possibility.

P.S. I also thank all who have replied to this thread.

[gentoo-user] New xorg-proto package blocks everything else.

[gevisz]

It seems that newly introduced x11-base/xorg-proto-2018.4 package
blocks everything else. What to do?
Is there better option in this case than unmerging xorg-server?
Thank you.

# emerge --update --deep --with-bdeps=y --newuse --backtrack=90 --ask world

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild U  ] sys-apps/rename-1.3-r2 [1.3]
[ebuild U  ] sys-devel/autoconf-archive-2017.09.28 [2017.03.21]
[ebuild U  ] app-misc/pax-utils-1.2.3 [1.2.2-r2]
[ebuild U  ] sys-apps/sandbox-2.13 [2.12]
[ebuild  N ] x11-base/xorg-proto-2018.4
[ebuild U  ] x11-proto/xproto-7.0.31-r1 [7.0.31]
[blocks b  ] =x11-proto/scrnsaverproto-1.1 required by
(x11-base/xorg-server-1.19.5-r1:0/1.19.5::gentoo, installed)

>=x11-proto/scrnsaverproto-1.2.2-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?]
(>=x11-proto/scrnsaverproto-1.2.2-r1[abi_x86_64(-)]) required by
(x11-libs/libXScrnSaver-1.2.2-r1:0/0::gentoo, installed)

  (x11-base/xorg-proto-2018.4:0/0::gentoo, ebuild scheduled for merge)
pulled in by
x11-base/xorg-proto required by
(x11-proto/presentproto-1.1-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/xproto-7.0.31-r1:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/dri3proto-1.0-r1:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/kbproto-1.0.7-r1:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/xf86dgaproto-2.1-r3:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/compositeproto-0.4.2-r2:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/dri2proto-2.8-r2:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/xcmiscproto-1.2.2-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/xineramaproto-1.2.1-r2:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/resourceproto-1.2.0-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/inputproto-2.3.2-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/damageproto-1.2.1-r2:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/randrproto-1.5.0-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/videoproto-2.3.3-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/bigreqsproto-1.1.2-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/renderproto-0.11.1-r2:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/fixesproto-5.0-r2:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/glproto-1.4.17-r2:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/xf86bigfontproto-1.2.0-r2:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/xf86driproto-2.1.1-r2:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/trapproto-3.4.3-r1:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/xf86vidmodeproto-2.3.1-r2:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/fontsproto-2.1.3-r1:0/0::gentoo, ebuild scheduled for
merge)
x11-base/xorg-proto required by
(x11-proto/xextproto-7.3.0-r1:0/0::gentoo, ebuild scheduled for merge)
x11-base/xorg-proto required by
(x11-proto/recordproto-1.14.2-r2:0/0::gentoo, ebuild scheduled for
merge)


For more information about Blocked Packages, please refer to the following
section of the Gentoo Linux x86 Handbook (architecture is irrelevant):

https://wiki.gentoo.org/wiki/Handbook:X86/Working/Portage#Blocked_packages

Re: [gentoo-user] New xorg-proto package blocks everything else.

[gevisz]

2018-03-25 15:50 GMT+03:00 Neil Bothwick :
> On Sun, 25 Mar 2018 15:19:33 +0300, gevisz wrote:
>
>> It seems that newly introduced x11-base/xorg-proto-2018.4 package
>> blocks everything else. What to do?
>> Is there better option in this case than unmerging xorg-server?
>> Thank you.
>>
>> # emerge --update --deep --with-bdeps=y --newuse --backtrack=90 --ask world
>>
>> These are the packages that would be merged, in order:
>>
>> Calculating dependencies... done!
>> [ebuild U  ] sys-apps/rename-1.3-r2 [1.3]
>> [ebuild U  ] sys-devel/autoconf-archive-2017.09.28 [2017.03.21]
>> [ebuild U  ] app-misc/pax-utils-1.2.3 [1.2.2-r2]
>> [ebuild U  ] sys-apps/sandbox-2.13 [2.12]
>> [ebuild  N ] x11-base/xorg-proto-2018.4
...
>> [blocks B  ] > ("> x11-base/xorg-proto-2018.4)
>>
>>  * Error: The above package list contains packages which cannot be
>>  * installed at the same time on the same system.
>
> The only hard block here appears to be xscrnsaverproto, unmerge that and
> the rest should take care of themselves. I had all the soft blocks today
> but not that one, and everything worked fine.

Unmerging the scrnsaverproto package did not changed the message from
portage. However, adding --exclude scrnsaverproto --exclude chromium
to the command above helped a bit. So, now, I have the following:

# emerge --update --deep --with-bdeps=y --newuse --backtrack=100 --ask
world --exclude chromium

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild  N ] x11-proto/scrnsaverproto-1.2.2-r1  USE="-doc"
ABI_X86="(64) -32 (-x32)"
[blocks B  ] =x11-proto/scrnsaverproto-1.2.2-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_ppc_32(-)?,abi_ppc_64(-)?,abi_s390_32(-)?,abi_s390_64(-)?]
(>=x11-proto/scrnsaverproto-1.2.2-r1[abi_x86_64(-)]) required by
(x11-libs/libXScrnSaver-1.2.2-r1:0/0::gentoo, installed)
>=x11-proto/scrnsaverproto-1.1 required by
(x11-base/xorg-server-1.19.5-r1:0/1.19.5::gentoo, installed)

For more information about Blocked Packages, please refer to the following
section of the Gentoo Linux x86 Handbook (architecture is irrelevant):

https://wiki.gentoo.org/wiki/Handbook:X86/Working/Portage#Blocked_packages

# revdep-rebuild
 * This is the new python coded version
 * Please report any bugs found using it.
 * The original revdep-rebuild script is installed as revdep-rebuild.sh
 * Please file bugs at: https://bugs.gentoo.org/
 * Collecting system binaries and libraries
 * Checking dynamic linking consistency

Your system is consistent

# emerge --depclean --backtrack=120 --ask

 * Always study the list of packages to be cleaned for any obvious
 * mistakes. Packages that are part of the world set will always
 * be kept.  They can be manually added to this set with
 * `emerge --noreplace `.  Packages that are listed in
 * package.provided (see portage(5)) will be removed by
 * depclean, even if they are part of the world set.
 *
 * As a safety measure, depclean will not remove any packages
 * unless *all* required dependencies have been resolved.  As a
 * consequence of this, it often becomes necessary to run
 * `emerge --update --newuse --deep @world` prior to depclean.

Calculating dependencies... done!
 * Dependencies could not be completely resolved due to
 * the following required packages not being installed:
 *
 *   >=x11-proto/scrnsaverproto-1.2.2-r1[abi_x86_64(-)] pulled in by:
 * x11-libs/libXScrnSaver-1.2.2-r1
 *
 * Have you forgotten to do a complete update prior to depclean? The
 * most comprehensive command for this purpose is as follows:
 *
 *   emerge --update --newuse --deep --with-bdeps=y @world
 *
 * Note that the --with-bdeps=y option is not required in many
 * situations. Refer to the emerge manual page (run `man emerge`)
 * for more information about --with-bdeps.
 *
 * Also, note that it may be necessary to manually uninstall
 * packages that no longer exist in the portage tree, since it may
 * not be possible to satisfy their dependencies.

I don't think that old chromium package is a culprit here but will try
to unmerge it as well.

Any more ideas?

Re: [gentoo-user] New xorg-proto package blocks everything else.

[gevisz]

2018-03-25 20:38 GMT+03:00 gevisz :
> 2018-03-25 15:50 GMT+03:00 Neil Bothwick :
>> On Sun, 25 Mar 2018 15:19:33 +0300, gevisz wrote:
>>
>>> It seems that newly introduced x11-base/xorg-proto-2018.4 package
>>> blocks everything else. What to do?
>>> Is there better option in this case than unmerging xorg-server?
>>> Thank you.
>>>
>>> # emerge --update --deep --with-bdeps=y --newuse --backtrack=90 --ask world
>>>
>>> These are the packages that would be merged, in order:
>>>
>>> Calculating dependencies... done!
>>> [ebuild U  ] sys-apps/rename-1.3-r2 [1.3]
>>> [ebuild U  ] sys-devel/autoconf-archive-2017.09.28 [2017.03.21]
>>> [ebuild U  ] app-misc/pax-utils-1.2.3 [1.2.2-r2]
>>> [ebuild U  ] sys-apps/sandbox-2.13 [2.12]
>>> [ebuild  N ] x11-base/xorg-proto-2018.4
> ...
>>> [blocks B  ] >> (">> x11-base/xorg-proto-2018.4)
>>>
>>>  * Error: The above package list contains packages which cannot be
>>>  * installed at the same time on the same system.
>>
>> The only hard block here appears to be xscrnsaverproto, unmerge that and
>> the rest should take care of themselves. I had all the soft blocks today
>> but not that one, and everything worked fine.
>
> Unmerging the scrnsaverproto package did not changed the message from
> portage. However, adding --exclude scrnsaverproto --exclude chromium
> to the command above helped a bit. So, now, I have the following:
>
> # emerge --update --deep --with-bdeps=y --newuse --backtrack=100 --ask
> world --exclude chromium
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies... done!
> [ebuild  N ] x11-proto/scrnsaverproto-1.2.2-r1  USE="-doc"
> ABI_X86="(64) -32 (-x32)"
> [blocks B  ]  (" x11-base/xorg-proto-2018.4)
>
>  * Error: The above package list contains packages which cannot be
>  * installed at the same time on the same system.
>
>   (x11-base/xorg-proto-2018.4:0/0::gentoo, installed) pulled in by
> x11-base/xorg-proto required by
> (x11-proto/renderproto-0.11.1-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xf86bigfontproto-1.2.0-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/glproto-1.4.17-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/fixesproto-5.0-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xproto-7.0.31-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/dri2proto-2.8-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/compositeproto-0.4.2-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/randrproto-1.5.0-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/inputproto-2.3.2-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/resourceproto-1.2.0-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/videoproto-2.3.3-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/kbproto-1.0.7-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/fontsproto-2.1.3-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xf86vidmodeproto-2.3.1-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/trapproto-3.4.3-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xf86driproto-2.1.1-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/damageproto-1.2.1-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/recordproto-1.14.2-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xineramaproto-1.2.1-r2:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/presentproto-1.1-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xcmiscproto-1.2.2-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xf86dgaproto-2.1-r3:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/xextproto-7.3.0-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/bigreqsproto-1.1.2-r1:0/0::gentoo, installed)
> x11-base/xorg-proto required by
> (x11-proto/dri3proto-1.0-r1:0/0::gentoo, installed)
>
>   (x11-proto/scrnsaverproto-1.2.2-r1:0/0::gentoo, ebuild scheduled for
> merge) pulled in by
> 
> >=x11-proto/scrnsaverproto-1.2.2-r1[abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x

Re: [gentoo-user] New xorg-proto package blocks everything else.

[gevisz]

2018-03-25 21:40 GMT+03:00 Franz Fellner :
> Just a stupid question: Did you add =scrnsaverproto-1.2.2-r1 to
> package.mask?

No. Actually, I do not need screensaver at all.

> Because the -r2 is stable and nothing should prevent it from being merged...

But something does prevent it from being merged.

> I am running partly testing and the time xorg-proto was added I had to deal
> with hard blocks which I circumvented by un-keywording (remove from
> package.accept-keywords) and selectively masking.

I have not understood the above comment.
But I prefer to stick with stable versions of all packages.

> 2018-03-25 20:58 GMT+03:00 gevisz :
>>
>> 2018-03-25 20:38 GMT+03:00 gevisz :
>> > 2018-03-25 15:50 GMT+03:00 Neil Bothwick :
>> >> On Sun, 25 Mar 2018 15:19:33 +0300, gevisz wrote:
>> >>
>> >>> It seems that newly introduced x11-base/xorg-proto-2018.4 package
>> >>> blocks everything else. What to do?
>> >>> Is there better option in this case than unmerging xorg-server?
>> >>> Thank you.
>> >>>
>> >>> # emerge --update --deep --with-bdeps=y --newuse --backtrack=90 --ask
>> >>> world
>> >>>
>> >>> These are the packages that would be merged, in order:
>> >>>
>> >>> Calculating dependencies... done!
>> >>> [ebuild U  ] sys-apps/rename-1.3-r2 [1.3]
>> >>> [ebuild U  ] sys-devel/autoconf-archive-2017.09.28 [2017.03.21]
>> >>> [ebuild U  ] app-misc/pax-utils-1.2.3 [1.2.2-r2]
>> >>> [ebuild U  ] sys-apps/sandbox-2.13 [2.12]
>> >>> [ebuild  N ] x11-base/xorg-proto-2018.4
>> > ...
>> >>> [blocks B  ] > >>> ("> >>> x11-base/xorg-proto-2018.4)
>> >>>
>> >>>  * Error: The above package list contains packages which cannot be
>> >>>  * installed at the same time on the same system.
>> >>
>> >> The only hard block here appears to be xscrnsaverproto, unmerge that
>> >> and
>> >> the rest should take care of themselves. I had all the soft blocks
>> >> today
>> >> but not that one, and everything worked fine.
>> >
>> > Unmerging the scrnsaverproto package did not changed the message from
>> > portage. However, adding --exclude scrnsaverproto --exclude chromium
>> > to the command above helped a bit. So, now, I have the following:
>> >
>> > # emerge --update --deep --with-bdeps=y --newuse --backtrack=100 --ask
>> > world --exclude chromium
>> >
>> > These are the packages that would be merged, in order:
>> >
>> > Calculating dependencies... done!
>> > [ebuild  N ] x11-proto/scrnsaverproto-1.2.2-r1  USE="-doc"
>> > ABI_X86="(64) -32 (-x32)"
>> > [blocks B  ] > > ("> > x11-base/xorg-proto-2018.4)
>> >
>> >  * Error: The above package list contains packages which cannot be
>> >  * installed at the same time on the same system.
>> >
>> >   (x11-base/xorg-proto-2018.4:0/0::gentoo, installed) pulled in by
>> > x11-base/xorg-proto required by
>> > (x11-proto/renderproto-0.11.1-r2:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/xf86bigfontproto-1.2.0-r2:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/glproto-1.4.17-r2:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/fixesproto-5.0-r2:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/xproto-7.0.31-r1:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/dri2proto-2.8-r2:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/compositeproto-0.4.2-r2:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/randrproto-1.5.0-r1:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/inputproto-2.3.2-r1:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/resourceproto-1.2.0-r1:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/videoproto-2.3.3-r1:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/kbproto-1.0.7-r1:0/0::gentoo, installed)
>> > x11-base/xorg-proto required by
>> > (x11-proto/fontsproto-2.1.3-r1:0/0::gentoo, ins

Re: [gentoo-user] New xorg-proto package blocks everything else.

[gevisz]

2018-03-25 22:02 GMT+03:00 Dale :
> gevisz wrote:
>> 2018-03-25 21:40 GMT+03:00 Franz Fellner :
>>> Just a stupid question: Did you add =scrnsaverproto-1.2.2-r1 to
>>> package.mask?
>> No. Actually, I do not need screensaver at all.
>>
>>> Because the -r2 is stable and nothing should prevent it from being merged...
>> But something does prevent it from being merged.
>>
>>> I am running partly testing and the time xorg-proto was added I had to deal
>>> with hard blocks which I circumvented by un-keywording (remove from
>>> package.accept-keywords) and selectively masking.
>> I have not understood the above comment.
>> But I prefer to stick with stable versions of all packages.
>>
>
> I would try the -t option to see what is pulling it in.  That may shed
> some light on the problem.  Won't hurt anything if it doesn't work either.

$ equery d scrnsaverproto
 * These packages depend on scrnsaverproto:
x11-base/xorg-server-1.19.5-r1 (>=x11-proto/scrnsaverproto-1.1)

So, it is xorg-server package that pulls scrnsaverproto in.

But I see no way how to switch it off:
$ equery uses xorg-server
[ Legend : U - final flag setting for installation]
[: I - package is installed with flag ]
[ Colors : set, unset ]
 * Found these USE flags for x11-base/xorg-server-1.19.5-r1:
 U I
 - - debug   : Enable extra debug codepaths, like asserts and
extra output. If you want to get meaningful backtraces see

https://wiki.gentoo.org/wiki/Project:Quality_Assurance/Backtraces
 - - dmx : Build the Distributed Multiheaded X server
 - - doc : Add extra documentation (API, Javadoc, etc). It is
recommended to enable per package instead of globally
 + + glamor  : Enable Glamor OpenGL 2D acceleration
 - - ipv6: Add support for IP version 6
 - - kdrive  : Build the kdrive X servers
 - - libressl: Use dev-libs/libressl instead of dev-libs/openssl
as SSL/TLS provider (ineffective with USE=-ssl), packages should not
depend on this USE flag
 - - minimal : Install a very minimal build (disables, for
example, plugins, fonts, most drivers, non-critical features)
 - - static-libs : Build static versions of dynamic libraries as well
 + + suid: Enable setuid root program, with potential security risks
 - - systemd : Enable use of systemd-specific libraries and
features like socket activation or session tracking
 - - tslib   : Build with tslib support for touchscreen devices
 + + udev: Enable virtual/udev integration (device discovery,
power and storage device support, etc)
 - - unwind  : Enable libunwind usage for backtraces
 - - wayland : Enable dev-libs/wayland backend
 - - xcsecurity  : Build Security extension
 - - xephyr  : Build the Xephyr server
 - - xnest   : Build the Xnest server
 + + xorg: Build the Xorg X server (HIGHLY RECOMMENDED)
 - - xvfb: Build the Xvfb server

Re: [gentoo-user] Re: Would unmerging xorg-server certainly help it?

[gevisz]

2018-03-25 22:25 GMT+03:00 Ian Zimmerman :
> On 2018-03-25 17:49, Martin Vaeth wrote:
>
>> It should be scrnsaverproto-1.2.2-r2 which is pulled in.
>> Maybe you sync'ed at an unfortunate moment. Try emerge --sync again.
>
> In my case at least, the root cause was this: in the nightly webrsync
> snapshot (which I prefer to use instead of rsync),
> scrnsaverproto-1.2.2-r2 is keyworded and not stable.  Adding it to
> portage/package.use magically unblocks everything.

The same here:
$ eix scrnsaverproto
* x11-proto/scrnsaverproto
 Available versions:  1.2.2-r1 ~1.2.2-r2 {doc ABI_MIPS="n32 n64
o32" ABI_PPC="32 64" ABI_S390="32 64" ABI_X86="32 64 x32"}
 Homepage:https://www.x.org/wiki/
 Description: X.Org ScrnSaver protocol headers

And I also use webrsync.

Re: [gentoo-user] New xorg-proto package blocks everything else.

[gevisz]

2018-03-25 21:40 GMT+03:00 Franz Fellner :
> Just a stupid question: Did you add =scrnsaverproto-1.2.2-r1 to
> package.mask? Because the -r2 is stable and nothing should prevent it from
> being merged...
> I am running partly testing and the time xorg-proto was added I had to deal
> with hard blocks which I circumvented by un-keywording (remove from
> package.accept-keywords) and selectively masking.

Making emerge-webrsync the next day solved the problem.
Now x11-proto/scrnsaverproto-1.2.2-r2 is marked stable and
x11-proto/xcb-proto-1.13 is marked unstable, whereas yesterday
it was vice versa.

[gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

A friend of mine asked me to recommend him an open-source
VPN-server for Linux but unfortunately I never used one.

After some googling, I have found OpenVPN but do not know
if it is the best choice that suits his purposes, namely to access
local network that does not have its own fixed IP from the outside.

To be more precise: the local network to be accessed to from the
outside is part of another local network. The latter (outer) network
has its own fixed IP but the former (inner) network gets its IP via DHCP.
So, it is impossible to connect to a computer in the inner network
from the outside directly.

The computer in local network to be connected runs Windows.
The said friend of mine have tried to run some VPN server from
Windows but it somehow hangs the "inner" computer when
his "outer" computer has problems connecting to the Internet.

So, now his idea is
1) to run a virtual machine in the "inner" (Windows) computer,
2) to install into this virtual machine very lightweight Linux server
only to run in it a VPN-server that should help him to connect
from the outside to the "inner" host (Windows) computer, which
has its fixed IP within the inner local network.

Thank you for advance and sorry for a bit of offtopic.

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-05 1:02 GMT+03:00 Grant Taylor :
> On 04/04/2018 02:18 PM, gevisz wrote:
>>
>> A friend of mine asked me to recommend him an open-source VPN-server for
>> Linux but unfortunately I never used one.
>
> That's a loaded ask.

I just tried to point to the facts that
1) I know much less about VPNs than I had to before asking such a
question for myself,
2) There is a so to say "distributed competence":
The friend of mine is competent mostly in Windows and is a novice
in Linux whereas
I use Linux since the death of MS DOS 6.22 and know almost nothing
about Windows
(if I need some help about Windows, I just call to the friend and
ask where exactly
 I should point and click :).

>> After some googling, I have found OpenVPN but do not know if it is the
>> best choice that suits his purposes, namely to access local network that
>> does not have its own fixed IP from the outside.
>
> Okay
>
>> To be more precise: the local network to be accessed to from the outside
>> is part of another local network. The latter (outer) network has its own
>> fixed IP but the former (inner) network gets its IP via DHCP.  So, it is
>> impossible to connect to a computer in the inner network from the outside
>> directly.
>
> Is this toplolgy accurate?
>
> (Client)---(Internet)---(OR)---(IR)---(Host)
>
> I'm guessing that your friend (client) wants to access something (host) on
> the inner network.  But to do so requires passing through the Internet
> through Outer Router (with a static IP on the outside (left)) and through
> the Inner Router (which has a dynamic IP on the outside (left) obtained via
> DHCP)).  Is that correct?

Yes. And the Client also has static IP. Moreover, both OR and IR have static
IPs from the inside. So, the Host can make a connection request to the Client.
The Host works as a remoted server and phisical access to it is costy.
All administrating of the Host should be done through the Client.
That is the reason for the need of VPN.

> What sort of control does your friend have on the OR & IR?

Absolutely no control on OR and some control on IR. But the phisical access
to the IR is also costy and preferably should be done only once,
during its setup.

> Is NAT in use on either OR or IR?

Yes. On both.

> What sort of

Sorry, but I do know nothing about different sorts of NAT.

>> The computer in local network to be connected runs Windows.  The said
>> friend of mine have tried to run some VPN server from Windows but it somehow
>> hangs the "inner" computer when his "outer" computer has problems connecting
>> to the Internet.
>
> Are you saying that the Host in the diagram above is running Windows? Or are
> you referring to a different system?

Yes, the Host is running Windows.

>> So, now his idea is
>> 1) to run a virtual machine in the "inner" (Windows) computer,
>> 2) to install into this virtual machine very lightweight Linux server only
>> to run in it a VPN-server that should help him to connect from the outside
>> to the "inner" host (Windows) computer, which has its fixed IP within the
>> inner local network.
>
> The VM may or may not be needed.

I agree. The first attempt that will be done is to try to use a different VPN
server on Windows Host directly.

> Assuming that NAT is in play on OR and IR (worst case), then just about
> /any/ form of VPN initiating from the outside will be fraught with uphill
> battles.

As far as I understand, the connection would be initiated from the Host.

> It is likely possible that your friend can reconfigure both OR and IR to
> forward a port from the Internet to Host.  But that will likely mean that IR
> will need to have a static IP on it's outside interface.  -  I'm guessing
> this can't be done or that it would have already been done.

Yes, there is absolutely no control over OR, and IR can only obtain
its IP via DHCP.

> I think that your friend's best bet is to have the IR initiate an outbound
> VPN to something on the Internet that the Client can then initate
> connections to.  (I'm happily using a $5/month Linode VPS to do this.)

Oh, we completely overlooked the possibility to set up VPN server
directly on IR!

Thank you for the idea!

Hopefully, this VPN server won't hang the IR as it did with the Host.

As to the third party VPN services, we would like to avoid them.
The Client is run all the time and the problem arise only when it
loses the Internet connection.

> There may be ways to make this work without having the Host initiate
> outbound connections, but I'm not sure what they would be.
>
> As for which VPN, a number of people like OpenVPN.  I personally prefer
> OpenSSH's ability to

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-05 2:03 GMT+03:00 Mick :
> On Wednesday, 4 April 2018 23:02:20 BST Grant Taylor wrote:
>> On 04/04/2018 02:18 PM, gevisz wrote:
>> > A friend of mine asked me to recommend him an open-source VPN-server
>> > for Linux but unfortunately I never used one.
>>
>> That's a loaded ask.
>>
>> > After some googling, I have found OpenVPN but do not know if it is the
>> > best choice that suits his purposes, namely to access local network that
>> > does not have its own fixed IP from the outside.
>>
>> Okay
>
> This may be solvable, if the public facing gateway can be configured to
> forward the requisite ports/protocols to the LAN where the host is located.

If you mean port forfarding from OR to IR and then to the Host, it is impossible
because we have no control over OR.

>> > To be more precise: the local network to be accessed to from the outside
>> > is part of another local network. The latter (outer) network has its
>> > own fixed IP but the former (inner) network gets its IP via DHCP.  So,
>> > it is impossible to connect to a computer in the inner network from the
>> > outside directly.
>>
>> Is this toplolgy accurate?
>>
>> (Client)---(Internet)---(OR)---(IR)---(Host)
>
> The OR can port forward the incoming VPN connection to the IR.  The IR can
> then act as a VPN gateway for the inner LAN.

No, port forwarding from the OR to the IR is impossible.

>> I'm guessing that your friend (client) wants to access something (host)
>> on the inner network.  But to do so requires passing through the
>> Internet through Outer Router (with a static IP on the outside (left))
>> and through the Inner Router (which has a dynamic IP on the outside
>> (left) obtained via DHCP)).  Is that correct?
>>
>> What sort of control does your friend have on the OR & IR?
>>
>> Is NAT in use on either OR or IR?
>>
>> What sort of
>>
>> > The computer in local network to be connected runs Windows.  The said
>> > friend of mine have tried to run some VPN server from Windows but it
>> > somehow hangs the "inner" computer when his "outer" computer has problems
>> > connecting to the Internet.
>>
>> Are you saying that the Host in the diagram above is running Windows?
>> Or are you referring to a different system?
>>
>> > So, now his idea is
>> > 1) to run a virtual machine in the "inner" (Windows) computer,
>> > 2) to install into this virtual machine very lightweight Linux server
>> > only to run in it a VPN-server that should help him to connect from the
>> > outside to the "inner" host (Windows) computer, which has its fixed IP
>> > within the inner local network.
>>
>> The VM may or may not be needed.
>>
>> Assuming that NAT is in play on OR and IR (worst case), then just about
>> /any/ form of VPN initiating from the outside will be fraught with
>> uphill battles.
>>
>> It is likely possible that your friend can reconfigure both OR and IR to
>> forward a port from the Internet to Host.  But that will likely mean
>> that IR will need to have a static IP on it's outside interface.  -  I'm
>> guessing this can't be done or that it would have already been done.
>>
>> I think that your friend's best bet is to have the IR initiate an
>> outbound VPN to something on the Internet that the Client can then
>> initate connections to.  (I'm happily using a $5/month Linode VPS to do
>> this.)
>>
>> There may be ways to make this work without having the Host initiate
>> outbound connections, but I'm not sure what they would be.
>>
>> As for which VPN, a number of people like OpenVPN.  I personally prefer
>> OpenSSH's ability to do a routed (L3) (or bridged L2) VPN.  (I've got
>> SSH exposed already, so it's one less port to expose.)  I see a number
>> of people bragging about WireGuard.  Of course there are the old PPTP /
>> L2TP / IPSec, though I would avoid them for this install.  I'm sure
>> there are a number of other VPN technologies that I'm not thinking of.
>
> PPTP has been insecure for years and best be avoided.
>
> L2TP within IPSec is OK, but check what crypto the MSWindows uses.  Last time
> I looked Win7 was not strong enough.
>
> IKEv2 + IPSec with strong crypto for both, is my personal preference for
> gateway-to-gateway VPNs.
>
> MSWindows also has SSTP (because MSoft had to create their own clone of
> OpenVPN).  I think there's a Linux VPN client which will work with that:
>
>  net-misc/sstp-client
>
> but have never tried it.
>
> Of course, if the above network topology suggested by Grant is correct, then
> you will likely be limited by whatever VPN software comes with IR.
>
> In all cases, make sure you use TLS RSA/SHA2 certificates for both client and
> VPN gateway authentication.
>
> Finally, check out Wireguard.  It was designed from the ground up to overcome
> the complexity of previous VPN solutions.  I have not tried it out yet, but
> will be next time I have to set up a VPN tunnel with a non-legacy router.

Thank you. I will just forward these your adviced to the friend.

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-05 12:51 GMT+03:00 gevisz :
> 2018-04-05 1:02 GMT+03:00 Grant Taylor :
> On 04/04/2018 02:18 PM, gevisz wrote:
>> Assuming that NAT is in play on OR and IR (worst case), then just about
>> /any/ form of VPN initiating from the outside will be fraught with uphill
>> battles.
>
> As far as I understand, the connection would be initiated from the Host.

A small correction after a call to the friend: the VPN server should
be installed
on the Client and the VPN client should be installed on the Host.

Becaule of the same reason it is impossible to set up VPN server on the IR.

Moreover, IR is too simple to use it for setting up any server other then NAT
and, may be, port-forwarding.

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-05 14:51 GMT+03:00 Mick :
>
> Your double NAT-ing arrangement hides the host twice over from the Internet.
> In addition, some of the domestic ISP providers also offer NAT'ed connections
> for their users.

Our outer router with static IP is actually the router (and gateway)
of the Internet service provider. So, no "in addition". :)

The inner router with dinamyc IP is the router (and gateway) of the local
(home) network.

> Some block specific ports/protocols for 'security purposes'
> and require you to upgrade your service contract for unfettered
> Internet connectivity.

We have quite a lot of ISPs here. So, the ISP that risks to force
"contract for unfettered Internet connectivity" will lose its client
and gets nothing in return. Moreover, this unsatisfied (and
technically savvy) client can easily persuade his neighbours
to abandon this ISP as well...

> Assuming none of the above ISP restrictions apply in your case, you have the
> option of forwarding connections to the host through the IR.  Single NAT e.g.
> between OR and IR is fine and NAT-T can be configured in most VPN technologies
> to address this.  If you can configure the IR to expose the host via DMZ, or
> forward specific ports/protocols from OR to the host directly then most VPN
> technologies should work in principle.

I think that my friend knows about this. But thank you anyway. :)

> OpenVPN/SSTP is straight forward and for a single host (as opposed to a
> gateway) there's no benefit in trying to implement more complicated kernel
> based VPNs.  For stronger OpenVPN crypto configuration have a look here:
>
> https://bettercrypto.org/static/applied-crypto-hardening.pdf

An interesting link. Thank you.

> but your security options will be limited by what MSWindows offers/allows.

It is ok, as far as the only who uses this computer is a former Windows sysadmin
and nobody is really motivated to break in. :)

> Post with particulars when you get that far and we can troubleshoot it

Ok, thank you.

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-05 16:14 GMT+03:00 Bill Kenworthy :
> On 05/04/18 18:28, gevisz wrote:
>> 2018-04-05 12:51 GMT+03:00 gevisz :
>>> 2018-04-05 1:02 GMT+03:00 Grant Taylor :
>>> On 04/04/2018 02:18 PM, gevisz wrote:
>>>> Assuming that NAT is in play on OR and IR (worst case), then just about
>>>> /any/ form of VPN initiating from the outside will be fraught with uphill
>>>> battles.
>>> As far as I understand, the connection would be initiated from the Host.
>> A small correction after a call to the friend: the VPN server should
>> be installed on the Client and the VPN client should be installed on the 
>> Host.
>>
>> Becaule of the same reason it is impossible to set up VPN server on the IR.
>>
>> Moreover, IR is too simple to use it for setting up any server other then NAT
>> and, may be, port-forwarding.
>>
> Might need a third party vpn server in the cloud that both ends connect
> to as clients and route between?  A stunserver like VoIP uses will help
> there.
>
> Also try a proxytunnel/stunnel using port 443 and use that to bounce
> openvpn or a putty (ssh) port tunnel through the networks https proxy.
> Inefficient but gets ssh, web pages and small downloads through
> problematic networks nicely.  Double wrapping in ssl with end-to-end
> protection via openvpn takes care of privacy when MITM SSL proxies are
> used (yes they exist)   Note that openvpn can be used peer to peer
> though client to server is a bit more secure.

Thank you for the information.

>  In my setup, the client is windows and the server is gentoo on a dynamic IP.

It is strange because just today I have learned that VPN server should
be set on the host with static IP visible the in Internet. Otherwise a
VPN-client
has no way to connect to the VPN-server.

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-05 19:29 GMT+03:00 Grant Taylor :
> On 04/05/2018 03:51 AM, gevisz wrote:
>>
>> Yes. And the Client also has static IP. Moreover, both OR and IR have
>> static IPs from the inside. So, the Host can make a connection request to
>> the Client.
>
> With the client having a static IP, things become a LOT simpler.  Simply
> flip things around and have the ""Client be the VPN server and
> the ""Host be the VPN client.

Yes, you are right. It was my misunderstanding of the situation.
The VPN server was initially on outer computer with a static IP,
and on the computer inside the remoted local network was a VPN client.

I have corrected this a bit later in this thread, after a call to the friend.

I even wanted to write that the Host and Client notations should be swapped
but finally decided that this would lead to the mess.

> This REALLY SIGNIFICANTLY simplifies things.
>
>> The Host works as a remoted server and phisical access to it is costy. All
>> administrating of the Host should be done through the Client. That is the
>> reason for the need of VPN.
>
> I sort of wonder what services the server is offering if it can't be
> readily accessed from the outside world.

It makes requests to the other computers in the Internet and saves
the responses. (The same does the computer on the other end of
the scheme. The two remoted servers doing the same job are needed
for redundancy, just in case one of them cannot connect to the Internet
because the blackout, which happens quite often here.)

> Please share a summary of what you end up doing so that others can
> beneift from searching archives.  ;-)

So far, my friend set a newer version of its initial VPN server and client.

The correct scheme looks as follows:
(Administrator) - (VPN host on Windows computer, static IP) <--> (ISP) <-->
   <--> (Internet) <--> (static IP, [outer] router of another ISP,
static IP) <-->
   <--> (dynamic IP, inner router, static IP in a remoted [local] network) <-->
   <--> (static IP in the remoted [local] network, VPN client on
Windows computer in the remoted [local] network)

After starting, the VPN client automatically initiates connection to
the VPN server and
reinitiates it every time when the conection is lost. So, the
connection became permanent.

The initial problem was that, when the computer with the VPN server
loses connection
to the Internet, the VPN client hangs the "computer in the remoted
[local] network"
(in my view, by constantly trying to reconnect to the VPN server, so my initial
recomendation was to increase the time interval between the attempts
to reconnect.)

Currently, the Administrator set a newer version of its initial VPN
server and client
and plays with the parameters. If it won't help, he will try another
VPN server and
client on Windows. If that won't help as well, he is planning to set a
VPN client into
a virtual machine run on "Windows computer in remoted [local] network".

As far as a VPN client, in general, does not need graphical
evironment, it would be
expedient to run a Linux server inside the said virtual machine
(instead of another Windows).

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-06 2:10 GMT+03:00 Grant Taylor :
> On 04/05/2018 03:51 AM, gevisz wrote:
>>
>> Yes, the Host is running Windows.
>
>
> Seeing as how both the ""Host and the ""Client are running Windows, I would
> think seriously about trying to leverage Windows' built in VPN capabilities.
>
> The following things come to mind:
>
>  - (raw) IPSec - this might be somewhat challenging b/c reasons
>  - L2TP+IPSec - probably less challenging b/c of wizards
>  - PPTP - just don't unless you haveto
>
> I'd encourage your friend to check out the VPN capabilities built into
> Windows.  He may need to install / configure (R)RAS to enable the features.

Thank you for your advice. He is currently trying to set up RAS with SSTP but
RAS client so far cannot log into the server, while a third party VPN just works
(until the remote computer hangs for so far unknown reason that even may not
be connected with the VPN server).

We will continue to experiment to find the reason.

> In my experience, using native features that come from the software vendor
> is often simpler to maintain long term.

Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?

[gevisz]

2018-04-06 1:45 GMT+03:00 Bill Kenworthy :
> On 05/04/18 22:51, gevisz wrote:
>> 2018-04-05 16:14 GMT+03:00 Bill Kenworthy :
>>> On 05/04/18 18:28, gevisz wrote:
>>>> 2018-04-05 12:51 GMT+03:00 gevisz :
>>>>> 2018-04-05 1:02 GMT+03:00 Grant Taylor 
>>>>> :
>>>>> On 04/04/2018 02:18 PM, gevisz wrote:
>>>>>> Assuming that NAT is in play on OR and IR (worst case), then just about
>>>>>> /any/ form of VPN initiating from the outside will be fraught with uphill
>>>>>> battles.
>>>>> As far as I understand, the connection would be initiated from the Host.
>>>> A small correction after a call to the friend: the VPN server should
>>>> be installed on the Client and the VPN client should be installed on the 
>>>> Host.
>>>>
>>>> Becaule of the same reason it is impossible to set up VPN server on the IR.
>>>>
>>>> Moreover, IR is too simple to use it for setting up any server other then 
>>>> NAT
>>>> and, may be, port-forwarding.
>>>>
>>> Might need a third party vpn server in the cloud that both ends connect
>>> to as clients and route between?  A stunserver like VoIP uses will help
>>> there.
>>>
>>> Also try a proxytunnel/stunnel using port 443 and use that to bounce
>>> openvpn or a putty (ssh) port tunnel through the networks https proxy.
>>> Inefficient but gets ssh, web pages and small downloads through
>>> problematic networks nicely.  Double wrapping in ssl with end-to-end
>>> protection via openvpn takes care of privacy when MITM SSL proxies are
>>> used (yes they exist)   Note that openvpn can be used peer to peer
>>> though client to server is a bit more secure.
>> Thank you for the information.
>>
>>>  In my setup, the client is windows and the server is gentoo on a dynamic 
>>> IP.
>> It is strange because just today I have learned that VPN server should
>> be set on the host with static IP visible the in Internet. Otherwise a
>> VPN-client
>> has no way to connect to the VPN-server.
>>
> I am referring to putty as the windows client (my view of the process) -
> the vpn client is proxytunnel on windows connecting out to the server
> which is an external stunnel on gentoo from your point of view.  The
> secret is getting the two to talk to each other and thats where it gets
> interesting - a method I used in the past is internally have a script
> scraping a webpage (external) and when it gets a change it wants,
> initiate a connection (IP number change for a permanaent link on a
> dynamic IP, or other instruction - actually used a html comment on my
> home web server index page).  A more common method is to initiate a test
> connection every few minutes and close/go back to waiting if there is no
> connection.  Zebedee which I used for years as a port tunnel (very good
> and flexible) has a mode where it can initiate connections when there is
> no public visibility.  If both ends are behind a secure gateway/NAT -
> you need a third machine to coordinate the process.

It is too hard for me to understand, but I have got the idea of letting
some script to periodically read the content of a webpage and initiate
the connection if the content of the webpage say so.

I let my friend to read this.

> If its all too hard, can you drop a raspberry pi trojan on the network
> which gets away from the restrictions running windows?  At the end of
> the day, its up to you and the local admins as to how much funny
> business they will put up with but its just a technical problem in
> moving packets around.
>
> BillK'
>
>

[gentoo-user] Upgrading gcc from 6.4 to 7.3

[gevisz]

After updating portage tree today, portage
suggested to upgrade gcc from 6.4 to 7.3
version what I have done just now.

Nevertheless,
# gcc-config --list-profiles
 [1] x86_64-pc-linux-gnu-6.4.0 *
 [2] x86_64-pc-linux-gnu-7.3.0
shows that I still have version 6.4 as a default.

As https://wiki.gentoo.org/wiki/Upgrading_GCC
still do not have any specific instructions on
switching to gcc version 7.3, I am still afread
of switching to gcc version 7.3 and would like
to ask if anybody encountered some problem
after switching to gcc version 7.3 and which
packages should be rebuild after such switching.

Thank you in advance for your help.

Re: [gentoo-user] Upgrading gcc from 6.4 to 7.3

[gevisz]

2018-06-20 14:16 GMT+03:00 Mick :
> On Wednesday, 20 June 2018 11:43:32 BST gevisz wrote:
>> After updating portage tree today, portage
>> suggested to upgrade gcc from 6.4 to 7.3
>> version what I have done just now.
>>
>> Nevertheless,
>> # gcc-config --list-profiles
>>  [1] x86_64-pc-linux-gnu-6.4.0 *
>>  [2] x86_64-pc-linux-gnu-7.3.0
>> shows that I still have version 6.4 as a default.
>
> I'm on gcc-7.3.0-r3 and have not noticed any problems on 3 boxen so far.
>
>
>> As https://wiki.gentoo.org/wiki/Upgrading_GCC
>> still do not have any specific instructions on
>> switching to gcc version 7.3, I am still afread
>> of switching to gcc version 7.3 and would like
>> to ask if anybody encountered some problem
>> after switching to gcc version 7.3 and which
>> packages should be rebuild after such switching.
>>
>> Thank you in advance for your help.
>
> I didn't have to rebuild anything, but if you have reasons to fear breakage
> you can rebuild your toolchain:
>
> 1. Use gcc-config to select x86_64-pc-linux-gnu-7.3.0
> 2. Re-source /etc/profile by running in your current console/terminal:
> . /etc/profile
> 3. Re-emerge libtool:
> emerge -1 sys-devel/libtool
> 4. Re-emerge the following packages in this order:
> emerge -1 sys-devel/gcc-7.3.0-r3
> emerge -1 sys-devel/binutils
> emerge -1 sys-libs/glibc
> 5. You could if you want re-emerge your entire system, 'emerge -e @world' or
> if you would rather conserve electricity wait as different packages come up
> for an update over time.
>
> If my experience to date holds true and for a general purpose desktop none of
> the above rebuilds are necessary, other than switching your gcc to 7.3.0.

Thank you for your reply. I do not want to rebuild gcc-7.3 for the second time
today (as far as the temperature in my room is already +30°C). So, I will stick
to your last advice: I will just switch the default gcc version to 7.3
and wait for
problems to appear. :)

Re: [gentoo-user] Upgrading gcc from 6.4 to 7.3

[gevisz]

2018-06-20 15:01 GMT+03:00 gevisz :
> 2018-06-20 14:16 GMT+03:00 Mick :
>> On Wednesday, 20 June 2018 11:43:32 BST gevisz wrote:
>>> After updating portage tree today, portage
>>> suggested to upgrade gcc from 6.4 to 7.3
>>> version what I have done just now.
>>>
>>> Nevertheless,
>>> # gcc-config --list-profiles
>>>  [1] x86_64-pc-linux-gnu-6.4.0 *
>>>  [2] x86_64-pc-linux-gnu-7.3.0
>>> shows that I still have version 6.4 as a default.
>>
>> I'm on gcc-7.3.0-r3 and have not noticed any problems on 3 boxen so far.
>>
>>
>>> As https://wiki.gentoo.org/wiki/Upgrading_GCC
>>> still do not have any specific instructions on
>>> switching to gcc version 7.3, I am still afread
>>> of switching to gcc version 7.3 and would like
>>> to ask if anybody encountered some problem
>>> after switching to gcc version 7.3 and which
>>> packages should be rebuild after such switching.
>>>
>>> Thank you in advance for your help.
>>
>> I didn't have to rebuild anything, but if you have reasons to fear breakage
>> you can rebuild your toolchain:
>>
>> 1. Use gcc-config to select x86_64-pc-linux-gnu-7.3.0
>> 2. Re-source /etc/profile by running in your current console/terminal:
>> . /etc/profile
>> 3. Re-emerge libtool:
>> emerge -1 sys-devel/libtool
>> 4. Re-emerge the following packages in this order:
>> emerge -1 sys-devel/gcc-7.3.0-r3
>> emerge -1 sys-devel/binutils
>> emerge -1 sys-libs/glibc
>> 5. You could if you want re-emerge your entire system, 'emerge -e @world' or
>> if you would rather conserve electricity wait as different packages come up
>> for an update over time.
>>
>> If my experience to date holds true and for a general purpose desktop none of
>> the above rebuilds are necessary, other than switching your gcc to 7.3.0.
>
> Thank you for your reply. I do not want to rebuild gcc-7.3 for the second time
> today (as far as the temperature in my room is already +30°C). So, I will 
> stick
> to your last advice: I will just switch the default gcc version to 7.3
> and wait for problems to appear. :)

Just have rebuilt libtool and llvm, to have less problems. :)

Re: [gentoo-user] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

[gevisz]

2018-06-29 0:15 GMT+03:00 Francisco Blas Izquierdo Riera (klondike)
:
>
> I just want to notify that an attacker has taken control of the Gentoo
> organization in Github and has among other things replaced the portage
> and musl-dev trees with malicious versions of the ebuilds intended to
> try removing all of your files.
>
> Whilst the malicious code shouldn't work as is and GitHub has now
> removed the organization, please don't use any ebuild from the GitHub
> mirror ontained before 28/06/2018, 18:00 GMT  until new warning.

I have heard that Github was bought by MS. So, why not to move to GitLab?

[gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

Just today I have tried emerge-webrsync and got
to the following endless circle:

Fetching most recent snapshot ...
Trying to retrieve 20180702 snapshot from http://mirror.netcologne.de/gentoo ...
Fetching file portage-20180702.tar.xz.md5sum ...
Fetching file portage-20180702.tar.xz.gpgsig ...
Fetching file portage-20180702.tar.xz ...
Checking digest ...
Checking signature ...
gpg: Signature made Tue Jul  3 03:51:21 2018 EEST
gpg:using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
gpg: Good signature from "Gentoo Portage Snapshot Signing Key
(Automated Signing Key)" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
 Subkey fingerprint: E1D6 ABB6 3BFC FB4B A02F  DF1C EC59 0EEA C918 9250
Fetching file portage-20180702.tar.bz2.md5sum ...
Fetching file portage-20180702.tar.bz2.gpgsig ...
Fetching file portage-20180702.tar.bz2 ...
Checking digest ...
Checking signature ...
gpg: Signature made Tue Jul  3 03:51:20 2018 EEST
gpg:using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
gpg: Good signature from "Gentoo Portage Snapshot Signing Key
(Automated Signing Key)" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
 Subkey fingerprint: E1D6 ABB6 3BFC FB4B A02F  DF1C EC59 0EEA C918 9250
Fetching file portage-20180702.tar.gz.md5sum ...

The following command showed that all Gentoo signing keys in my system expired:

# gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release
--with-fingerprint --list-keys
/var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
-
pub   rsa4096 2014-10-03 [C] [expired: 2017-09-17]
  D2DE 1DBB A0F4 3EBA 341B  97D8 8255 33CB F6CD 6C97
uid   [ expired] Gentoo-keys Team 

pub   dsa1024 2004-07-20 [SC] [expired: 2018-07-01]
  D99E AC73 79A8 50BC E47D  A5F2 9E64 38C8 1707 2058
uid   [ expired] Gentoo Linux Release Engineering (Gentoo
Linux Release Signing Key) 

pub   rsa4096 2011-11-25 [C] [expired: 2018-07-01]
  DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
uid   [ expired] Gentoo Portage Snapshot Signing Key
(Automated Signing Key)

pub   rsa4096 2009-08-25 [SC] [expired: 2017-08-25]
  13EB BDBE DE7A 1277 5DFD  B1BA BB57 2E0E 2D18 2910
uid   [ expired] Gentoo Linux Release Engineering (Automated
Weekly Release Key) 


Trying to renew them manually with the following commands does not help:

# gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0x825533CBF6CD6C97
gpg: key 825533CBF6CD6C97: 2 signatures not checked due to missing keys
gpg: key 825533CBF6CD6C97: public key "Gentoo-keys Team
" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:   imported: 1
# gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0xDB6B8C1F96D8BF6D
gpg: key DB6B8C1F96D8BF6D: 14 signatures not checked due to missing keys
gpg: key DB6B8C1F96D8BF6D: public key "Gentoo Portage Snapshot Signing
Key (Automated Signing Key)" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:   imported: 1
# gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0x9E6438C817072058
gpg: key 9E6438C817072058: 83 signatures not checked due to missing keys
gpg: key 9E6438C817072058: public key "Gentoo Linux Release
Engineering (Gentoo Linux Release Signing Key) "
imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:   imported: 1
# gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0xBB572E0E2D182910
gpg: key BB572E0E2D182910: 10 signatures not checked due to missing keys
gpg: key BB572E0E2D182910: 1 bad signature
gpg: key BB572E0E2D182910: public key "Gentoo Linux Release
Engineering (Automated Weekly Release Key) "
imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:   imported: 1

Here https://wiki.gentoo.org/wiki/Handbook:AMD64/Working/Features#Fetching_files
has been said the following:

If any of the keys installed from app-crypt/gentoo-keys should expire,
run gkeys from app-crypt/gkeys to refresh them from the key server:
root #emerge --ask app-crypt/gkeys
root #gkeys refresh-key -C gentoo

but gkeys are not stable in my architeture as it follows from the following:

$ eix gkeys
* app-crypt/gkeys
 Available versions:  ~0.2 ** {PYTHON_TARGETS="python2_7
python3_4 python3_5 python3_6"}
 Homepage:https://wiki.gentoo.org/wiki/Project:Gentoo-keys
 Description: An OpenPGP/GPG key management tool and python libs

* app-crypt/gkeys-gen
 Available versions:  ~0.2 ** {PYTHON_TARGETS="python2_7
python3_4 python3_5 python3_6"}
 Homepage:https://wiki.gentoo.org/wiki/Project:Gentoo-keys
 Description: Tool for generating OpenPGP/GPG keys using a
specifications file

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 11:10 GMT+03:00 Mick :
> On Tuesday, 3 July 2018 08:48:02 BST gevisz wrote:
>> Just today I have tried emerge-webrsync and got
>> to the following endless circle:
>>
>> Fetching most recent snapshot ...
>> Trying to retrieve 20180702 snapshot from http://mirror.netcologne.de/gentoo
>> ... Fetching file portage-20180702.tar.xz.md5sum ...
>> Fetching file portage-20180702.tar.xz.gpgsig ...
>> Fetching file portage-20180702.tar.xz ...
>> Checking digest ...
>> Checking signature ...
>> gpg: Signature made Tue Jul  3 03:51:21 2018 EEST
>> gpg:using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
>> gpg: Good signature from "Gentoo Portage Snapshot Signing Key
>> (Automated Signing Key)" [expired]
>> gpg: Note: This key has expired!
>> Primary key fingerprint: DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
>>  Subkey fingerprint: E1D6 ABB6 3BFC FB4B A02F  DF1C EC59 0EEA C918 9250
>> Fetching file portage-20180702.tar.bz2.md5sum ...
>> Fetching file portage-20180702.tar.bz2.gpgsig ...
>> Fetching file portage-20180702.tar.bz2 ...
>> Checking digest ...
>> Checking signature ...
>> gpg: Signature made Tue Jul  3 03:51:20 2018 EEST
>> gpg:using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
>> gpg: Good signature from "Gentoo Portage Snapshot Signing Key
>> (Automated Signing Key)" [expired]
>> gpg: Note: This key has expired!
>> Primary key fingerprint: DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
>>  Subkey fingerprint: E1D6 ABB6 3BFC FB4B A02F  DF1C EC59 0EEA C918 9250
>> Fetching file portage-20180702.tar.gz.md5sum ...
>>
>> The following command showed that all Gentoo signing keys in my system
>> expired:
>>
>> # gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release
>> --with-fingerprint --list-keys
>> /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
>> -
>> pub   rsa4096 2014-10-03 [C] [expired: 2017-09-17]
>>   D2DE 1DBB A0F4 3EBA 341B  97D8 8255 33CB F6CD 6C97
>> uid   [ expired] Gentoo-keys Team 
>>
>> pub   dsa1024 2004-07-20 [SC] [expired: 2018-07-01]
>>   D99E AC73 79A8 50BC E47D  A5F2 9E64 38C8 1707 2058
>> uid   [ expired] Gentoo Linux Release Engineering (Gentoo
>> Linux Release Signing Key) 
>>
>> pub   rsa4096 2011-11-25 [C] [expired: 2018-07-01]
>>   DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
>> uid   [ expired] Gentoo Portage Snapshot Signing Key
>> (Automated Signing Key)
>>
>> pub   rsa4096 2009-08-25 [SC] [expired: 2017-08-25]
>>   13EB BDBE DE7A 1277 5DFD  B1BA BB57 2E0E 2D18 2910
>> uid   [ expired] Gentoo Linux Release Engineering (Automated
>> Weekly Release Key) 
>>
>>
>> Trying to renew them manually with the following commands does not help:
>>
>> # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys
>> 0x825533CBF6CD6C97 gpg: key 825533CBF6CD6C97: 2 signatures not checked due
>> to missing keys gpg: key 825533CBF6CD6C97: public key "Gentoo-keys Team
>> " imported
>> gpg: no ultimately trusted keys found
>> gpg: Total number processed: 1
>> gpg:   imported: 1
>> # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys
>> 0xDB6B8C1F96D8BF6D gpg: key DB6B8C1F96D8BF6D: 14 signatures not checked due
>> to missing keys gpg: key DB6B8C1F96D8BF6D: public key "Gentoo Portage
>> Snapshot Signing Key (Automated Signing Key)" imported
>> gpg: no ultimately trusted keys found
>> gpg: Total number processed: 1
>> gpg:   imported: 1
>> # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys
>> 0x9E6438C817072058 gpg: key 9E6438C817072058: 83 signatures not checked due
>> to missing keys gpg: key 9E6438C817072058: public key "Gentoo Linux Release
>> Engineering (Gentoo Linux Release Signing Key) "
>> imported
>> gpg: no ultimately trusted keys found
>> gpg: Total number processed: 1
>> gpg:   imported: 1
>> # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys
>> 0xBB572E0E2D182910 gpg: key BB572E0E2D182910: 10 signatures not checked due
>> to missing keys gpg: key BB572E0E2D182910: 1 bad signature
>> gpg: key BB572E0E2D182910: public key "Gentoo Linux Release
>> Engineering (Automated Weekly Release Key) "
>> imported
>> gpg: no ultimately trusted keys found
>> gpg: Total number processed: 1
>> gpg:   imported: 1
>>
>> Here
>> https:

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 11:53 GMT+03:00 Arve Barsnes :
> On 3 July 2018 at 09:48, gevisz  wrote:
>> Trying to renew them manually with the following commands does not help:
>>
>> # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0x825533CBF6CD6C97
>
> It solved itself for me after running
> gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release --refresh-keys

Thank you for your reply, but running the command above have not
solved my problem:

# gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release --refresh-keys
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: key 825533CBF6CD6C97: 2 signatures not checked due to missing keys
gpg: key 825533CBF6CD6C97: "Gentoo-keys Team " 5 new
signatures
gpg: key 825533CBF6CD6C97: "Gentoo-keys Team " 2 new subkeys
gpg: Total number processed: 1
gpg:new subkeys: 2
gpg: new signatures: 5
gpg: no ultimately trusted keys found

# gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release
--with-fingerprint --list-keys
/var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
-
pub   rsa4096 2014-10-03 [C] [expires: 2019-06-29]
  D2DE 1DBB A0F4 3EBA 341B  97D8 8255 33CB F6CD 6C97
uid   [ unknown] Gentoo-keys Team 
sub   rsa4096 2014-10-03 [S] [expires: 2018-12-31]
sub   rsa4096 2018-06-29 [S] [expires: 2018-12-26]

pub   dsa1024 2004-07-20 [SC] [expired: 2018-07-01]
  D99E AC73 79A8 50BC E47D  A5F2 9E64 38C8 1707 2058
uid   [ expired] Gentoo Linux Release Engineering (Gentoo
Linux Release Signing Key) 

pub   rsa4096 2011-11-25 [C] [expired: 2018-07-01]
  DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
uid   [ expired] Gentoo Portage Snapshot Signing Key
(Automated Signing Key)

pub   rsa4096 2009-08-25 [SC] [expired: 2017-08-25]
  13EB BDBE DE7A 1277 5DFD  B1BA BB57 2E0E 2D18 2910
uid   [ expired] Gentoo Linux Release Engineering (Automated
Weekly Release Key) 

# emerge-webrsync
Fetching most recent snapshot ...
Trying to retrieve 20180702 snapshot from http://mirror.netcologne.de/gentoo ...
Fetching file portage-20180702.tar.xz.md5sum ...
Fetching file portage-20180702.tar.xz.gpgsig ...
Fetching file portage-20180702.tar.xz ...
Checking digest ...
Checking signature ...
gpg: Signature made Tue Jul  3 03:51:21 2018 EEST
gpg:using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
gpg: Good signature from "Gentoo Portage Snapshot Signing Key
(Automated Signing Key)" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
 Subkey fingerprint: E1D6 ABB6 3BFC FB4B A02F  DF1C EC59 0EEA C918 9250
Fetching file portage-20180702.tar.bz2.md5sum ...

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 13:35 GMT+03:00 Virgil Dupras :
> On Tue, 03 Jul 2018 09:55:38 +0100
> Mick  wrote:
>
>> On Tuesday, 3 July 2018 09:53:27 BST Arve Barsnes wrote:
>> > On 3 July 2018 at 09:48, gevisz  wrote:
>> > > Trying to renew them manually with the following commands does not help:
>> > >
>> > > # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys
>> > > 0x825533CBF6CD6C97
>> > It solved itself for me after running
>> > gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release --refresh-keys
>> >
>> > Cheers,
>> > Arve
>>
>> Hmm ...
>>
>> # gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release --refresh-keys
>> gpg: keyblock resource '/var/lib/gentoo/gkeys/keyrings/gentoo/release/
>> pubring.kbx': No such file or directory
>>
>> :-/
>>
>> --
>> Regards,
>> Mick
>
> Are you, by any chance, running this command through something like 
> lxc-attach or ssh?
> I had the exact same problem two days ago and it turned out to be something 
> about the
> environment being passed to the remote system. Sourcing /etc/profile did the 
> trick.

No, I do it on my desktop staying just in front of me.
So, no need for ssh (and I do not know what lxc-attach is at all).

Still, sourcing /etc/profile somehow helped:

# emerge-webrsync
Fetching most recent snapshot ...
Trying to retrieve 20180702 snapshot from http://mirror.netcologne.de/gentoo ...
Fetching file portage-20180702.tar.xz.md5sum ...
Fetching file portage-20180702.tar.xz.gpgsig ...
Fetching file portage-20180702.tar.xz ...
Checking digest ...
Checking signature ...
gpg: Signature made Tue Jul  3 03:51:21 2018 EEST
gpg:using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
gpg: Good signature from "Gentoo Portage Snapshot Signing Key
(Automated Signing Key)" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:  There is no indication that the signature belongs to the owner.
Primary key fingerprint: DCD0 5B71 EAB9 4199 527F  44AC DB6B 8C1F 96D8 BF6D
 Subkey fingerprint: E1D6 ABB6 3BFC FB4B A02F  DF1C EC59 0EEA C918 9250
Getting snapshot timestamp ...
Syncing local tree ...

Number of files: 161,691 (reg: 134,254, dir: 27,437)
Number of created files: 308 (reg: 301, dir: 7)
Number of deleted files: 272 (reg: 268, dir: 4)
Number of regular files transferred: 1,462
Total file size: 218.08M bytes
Total transferred file size: 10.83M bytes
Literal data: 10.83M bytes
Matched data: 0 bytes
File list size: 589.73K
File list generation time: 0.001 seconds
File list transfer time: 0.000 seconds
Total bytes sent: 11.76M
Total bytes received: 69.61K

sent 11.76M bytes  received 69.61K bytes  463.97K bytes/sec
total size is 218.08M  speedup is 18.43
Cleaning up ...

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 13:41 GMT+03:00 gevisz :
> 2018-07-03 11:10 GMT+03:00 Mick :
>> On Tuesday, 3 July 2018 08:48:02 BST gevisz wrote:
...
>>
>> This package update came up yesterday:
>>
>> app-crypt/openpgp-keys-gentoo-release-20180702
>>
>
> Too late: Gentoo signing keys expired on 1 July 2018.
> So, no way to update portage tree on 2 July 2018. :(

And only after updating the portage tree, I have got
app-crypt/openpgp-keys-gentoo-release-20180702.

Why not to put new openpgp-keys-gentoo-release
into the portage tree BEFORE all existing Gentoo
singing keys expire?

# emerge --update --deep --with-bdeps=y --newuse --backtrack=120 --ask world

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild U  ] dev-util/gperf-3.1 [3.0.4]
[ebuild U  ] app-crypt/openpgp-keys-gentoo-release-20180702 [20180530]
[ebuild  NS] sys-kernel/gentoo-sources-4.14.52 [4.9.95]
USE="-build -experimental -symlink"
[ebuild U  ] dev-python/pydot-1.2.3 [1.0.28-r2] USE="{-test%}"
PYTHON_TARGETS="python3_5%* -python3_4% -python3_6%"

Would you like to merge these packages? [Yes/No] y

...

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 14:47 GMT+03:00 Rich Freeman :
> On Tue, Jul 3, 2018 at 7:06 AM gevisz  wrote:
>>
>> Why not to put new openpgp-keys-gentoo-release
>> into the portage tree BEFORE all existing Gentoo
>> singing keys expire?
>>
>
> My guess is that it was an oversight.
>
> I note that emerge --sync seems to update keys from the keyserver
> automatically, and thus it didn't report any errors syncing for me.
> On the other hand, I believe it will leave /usr/portage compromised if
> an error is detected, so if you don't actually catch the error it
> throws you can still be harmed.  I assume webrsync won't do that, but
> I haven't checked (the repository I use isn't available to webrsync as
> far as I'm aware).

emerge-webrsync do check gpg Gentoo signitures, if webrsync-gpg
feature is enabled in /etc/portage/make.conf, but it cannot do so, if
all Gentoo signitures expired, as it was the case after 1 July 2018.

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 16:04 GMT+03:00 Rich Freeman :
> On Tue, Jul 3, 2018 at 8:44 AM gevisz  wrote:
>>
>> 2018-07-03 14:47 GMT+03:00 Rich Freeman :
>> > On Tue, Jul 3, 2018 at 7:06 AM gevisz  wrote:
>> >>
>> >> Why not to put new openpgp-keys-gentoo-release
>> >> into the portage tree BEFORE all existing Gentoo
>> >> singing keys expire?
>> >>
>> >
>> > My guess is that it was an oversight.
>> >
>> > I note that emerge --sync seems to update keys from the keyserver
>> > automatically, and thus it didn't report any errors syncing for me.
>> > On the other hand, I believe it will leave /usr/portage compromised if
>> > an error is detected, so if you don't actually catch the error it
>> > throws you can still be harmed.  I assume webrsync won't do that, but
>> > I haven't checked (the repository I use isn't available to webrsync as
>> > far as I'm aware).
>>
>> emerge-webrsync do check gpg Gentoo signitures, if webrsync-gpg
>> feature is enabled in /etc/portage/make.conf, but it cannot do so, if
>> all Gentoo signitures expired, as it was the case after 1 July 2018.
>>
>
> I know it checks sigs.  I was assuming that it won't actually
> overwrite a good /usr/portage with a bad one if the verification
> fails.

Yes. I think it the only acceptable behavior.

> emerge --sync, with git at least, overwrites /usr/portage in place and
> so it will leave it in a bad state if verification fails.

It sounds really aweful.
I did not know this as I always used only emerge-webrsync.

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 16:22 GMT+03:00 Mart Raudsepp :
> Ühel kenal päeval, T, 03.07.2018 kell 14:00, kirjutas gevisz:
>> Are you, by any chance, running this command through something like
>> > lxc-attach or ssh?
>> > I had the exact same problem two days ago and it turned out to be
>> > something about the
>> > environment being passed to the remote system. Sourcing
>> > /etc/profile did the trick.
>>
>> No, I do it on my desktop staying just in front of me.
>> So, no need for ssh (and I do not know what lxc-attach is at all).
>>
>> Still, sourcing /etc/profile somehow helped:
>
> How do you obtain root privileges for the command?

su

> If you use su, you should be using "su -" (or "su -l" or "su --login"),
> not "su".

I have used only "su" for already 3 years, since switched to Gentoo
from Ubuntu and never had any problems with it.

Could you explain a little bit more why "su -" should be used instead.

>From the man page I've got the following:

-, -l, --login
Provide an environment similar to what the user would expect had
the user logged in directly.

But I cannot see why I need the original root environment,
especially if I never set it up.

> If you use sudo, you might need to pass -i (--login) option to it.

I hate using sudo since I have been forced to use it in Ubuntu.

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-03 23:55 GMT+03:00 R0b0t1 :
>
> It looks like you resolved the issue.

Yes.

> I had to refresh the keys multiple times.

I also refreshed them many times but it "shot" only after sourcing /etc/profile.

Re: [gentoo-user] syncing via via git and signature failure

[gevisz]

2018-07-04 11:55 GMT+03:00 Alex Thorne :
>>>
>> I use rsync and get the following for more than a day now;
>>
>> !!! Manifest verification failed:
>> OpenPGP verification failed:
>> gpg: Signature made Wed 04 Jul 2018 04:08:28 AM UTC
>> gpg:using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
>> gpg: Can't check signature: No public key
>>
>>
> I'm seeing this too. For me `app-crypt/gentoo-keys` is somehow no longer
> installed and `/var/lib/gentoo/gkeys` is missing. I have no idea how this
> happened. Perhaps it somehow got into `emerge --depclean` and I didn't catch
> it.

No. Gentoo maintainers just overlooked that all Gentoo signing keys expired
on July 1, and added new openpgp-keys-gentoo into portage tree only on July 2.

So, since July 1, rsync cannot verify any new portage tree and cannot download
app-crypt/openpgp-keys-gentoo-release-20180702

It was discovered in the thread
"All Gentoo signing key expired and no way to fix it"

Re: [gentoo-user] syncing via via git and signature failure

[gevisz]

2018-07-04 21:01 GMT+03:00 Mick :
> On Wednesday, 4 July 2018 18:57:56 BST gevisz wrote:
>> 2018-07-04 11:55 GMT+03:00 Alex Thorne :
>> >> I use rsync and get the following for more than a day now;
>> >>
>> >> !!! Manifest verification failed:
>> >> OpenPGP verification failed:
>> >> gpg: Signature made Wed 04 Jul 2018 04:08:28 AM UTC
>> >> gpg:using RSA key
>> >> E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
>> >> gpg: Can't check signature: No public key
>> >
>> > I'm seeing this too. For me `app-crypt/gentoo-keys` is somehow no longer
>> > installed and `/var/lib/gentoo/gkeys` is missing. I have no idea how this
>> > happened. Perhaps it somehow got into `emerge --depclean` and I didn't
>> > catch it.
>>
>> No. Gentoo maintainers just overlooked that all Gentoo signing keys expired
>> on July 1, and added new openpgp-keys-gentoo into portage tree only on July
>> 2.
>>
>> So, since July 1, rsync cannot verify any new portage tree and cannot
>> download app-crypt/openpgp-keys-gentoo-release-20180702
>>
>> It was discovered in the thread
>> "All Gentoo signing key expired and no way to fix it"
>
> Is there a documented manual workaround we could follow at present,
> irrespective of our sync'ing mechanism of choice?

For me, it somehow worked by manually refreshing the Gentoo signing keys by
executing the following two commands:
# gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release --refresh-keys
# gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0xDB6B8C1F96D8BF6D
in different order and sourcing /etc/profile

But, please, note that I use emerge-webrsync to update the portage tree.

Re: [gentoo-user] All Gentoo signing key expired and no way to fix it

[gevisz]

2018-07-04 21:00 GMT+03:00 Jack :
> On 2018.07.04 13:38, gevisz wrote:
>>
>> 2018-07-03 16:22 GMT+03:00 Mart Raudsepp :
>> > Ühel kenal päeval, T, 03.07.2018 kell 14:00, kirjutas gevisz:
>>>>
>>>> Are you, by any chance, running this command through something like
>>>> lxc-attach or ssh?
>>>>>
>>>>> I had the exact same problem two days ago and it turned out to be
>>>>> something about the environment being passed to the remote system. 
>>>>> Sourcing
>>>>> /etc/profile did the trick.
>>>>
>>>> No, I do it on my desktop staying just in front of me. So, no need for
>>>> ssh (and I do not know what lxc-attach is at all).
>>
>> >>
>> >> Still, sourcing /etc/profile somehow helped:
>> >
>> > How do you obtain root privileges for the command?
>>
>> su
>>
>>> If you use su, you should be using "su -" (or "su -l" or "su --login"),
>>> not "su".
>>
>>
>> I have used only "su" for already 3 years, since switched to Gentoo from
>> Ubuntu and never had any problems with it.
>>
>> Could you explain a little bit more why "su -" should be used instead.
>
> It's not so much needing the root environment, it's that sometimes things in
> your own environment cause problems if not removed when emerge runs.  There
> is another recent thread about emerge (nodejs) failing because of sandbox
> violations due to some XDG variable causing an install script to try writing
> to somewhere it would not have it the environment had been properly
> sanitized.  Note I consider this a general precaution, it may or may not be
> relevant for the subject of this thread.  The problems caused by this issue
> are indeed infrequent and sporadic, so it's not surprising that you have not
> run into any of them.  It seems to be related to the details in some
> ebuilds.

Ok, got it. Thank you for the explanation.

>> From the man page I've got the following:
>>
>> -, -l, --login
>> Provide an environment similar to what the user would expect had
>> the user logged in directly.
>>
>> But I cannot see why I need the original root environment, especially if I
>> never set it up.
>
> That's partly the point - the root environment is generally much more empty
> than that of your usual user.
>
>> > If you use sudo, you might need to pass -i (--login) option to it.
>>
>> I hate using sudo since I have been forced to use it in Ubuntu.
>
> I almost never used sudo when I used Ubuntu.  I used su or logged in as root
> when necessary.

It is quite strange because, when I used Ubuntu, it had no root account,
and so, everybody was forced to use sudo to get root privileges.

Re: [gentoo-user] syncing via via git and signature failure

[gevisz]

2018-07-05 1:25 GMT+03:00 Mick :
> On Wednesday, 4 July 2018 19:32:33 BST gevisz wrote:
>> 2018-07-04 21:01 GMT+03:00 Mick :
>> > On Wednesday, 4 July 2018 18:57:56 BST gevisz wrote:
>> >> 2018-07-04 11:55 GMT+03:00 Alex Thorne :
>> >> >> I use rsync and get the following for more than a day now;
>> >> >>
>> >> >> !!! Manifest verification failed:
>> >> >> OpenPGP verification failed:
>> >> >> gpg: Signature made Wed 04 Jul 2018 04:08:28 AM UTC
>> >> >> gpg:using RSA key
>> >> >> E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
>> >> >> gpg: Can't check signature: No public key
>> >> >
>> >> > I'm seeing this too. For me `app-crypt/gentoo-keys` is somehow no
>> >> > longer installed and `/var/lib/gentoo/gkeys` is missing. I have no idea
>> >> > how this happened. Perhaps it somehow got into `emerge --depclean`
>> >> > and I didn't catch it.
>> >>
>> >> No. Gentoo maintainers just overlooked that all Gentoo signing keys
>> >> expired on July 1, and added new openpgp-keys-gentoo into portage
>> >> tree only on July 2.
>> >>
>> >> So, since July 1, rsync cannot verify any new portage tree and cannot
>> >> download app-crypt/openpgp-keys-gentoo-release-20180702
>> >>
>> >> It was discovered in the thread
>> >> "All Gentoo signing key expired and no way to fix it"
>> >
>> > Is there a documented manual workaround we could follow at present,
>> > irrespective of our sync'ing mechanism of choice?

It seems that everything is explained in
https://wiki.gentoo.org/wiki/Portage_Security
(This link was first provided in this thread by methylherd.)

>> For me, it somehow worked by manually refreshing the Gentoo signing keys by
>> executing the following two commands:
>> # gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release --refresh-keys
>> # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys
>> 0xDB6B8C1F96D8BF6D in different order and sourcing /etc/profile
>>
>> But, please, note that I use emerge-webrsync to update the portage tree.
>
> Thanks gevisz, the first line to refresh keys fails, because in /var/lib/
> gentoo/ I only have a news/ subdirectory.

Interestingly, it was the second line that seemed to fail in my case.
(I was in a hurry and executed it so many times, so that I cannot
 say if for sure.)

But, as it has already been pointed out by Bill Kenworthy and
explained in https://wiki.gentoo.org/wiki/Portage_Security ,
the internal mechanisms for checking Gentoo signatures
are different between git, rsync and webrsync.

Re: [gentoo-user] whats going on with python versions?

[gevisz]

2018-07-10 12:28 GMT+03:00 Neil Bothwick :
> On Tue, 10 Jul 2018 05:08:10 -0400, John Covici wrote:
>
>> In my last update which was about June 21 or so, lots of packages were
>> reinstalled to make python3.6 the default target for python3.  I don't
>> have any targets like that in my make.conf, so it was done -- about
>> 200 reinstalls.
>
> It was a profile change.
>
>>  Now when I look at my latest update, a lot of them
>> are going back to 3.5 instead.  What is going on here -- are the devs
>> a bit too hasty or what?
>
> There were problems with some packages not being compatible with 3.6.
> Since you have been running that profile for a while, it is unlikely you
> are affected, so you can keep the default at 3.6 by adding this
> to /etc/portage/profile/make.defaults
>
> PYTHON_TARGETS="python2_7 -python3_5 python3_6"
> PYTHON_SINGLE_TARGET="-python3_5 python3_6"
>
>> I am on the unstable, but this is rediculous.
>
> It's not ridiculous, it's exactly what the testing tree is for, to find
> problems like this. The testing tree changes quickly, by its very nature,
> leaving nearly three weeks between updates is probably a bit too long.

The same happened in stable as well.

[gentoo-user] vlc failed to compile

[gevisz]

In today's update vlc failed to compile:

make[4]: Leaving directory
'/var/tmp/portage/media-video/vlc-3.0.3-r1/work/vlc-3.0.3/modules'
make[3]: *** [Makefile:26145: all-recursive] Error 1
make[3]: Leaving directory
'/var/tmp/portage/media-video/vlc-3.0.3-r1/work/vlc-3.0.3/modules'
make[2]: *** [Makefile:11238: all] Error 2
make[2]: Leaving directory
'/var/tmp/portage/media-video/vlc-3.0.3-r1/work/vlc-3.0.3/modules'
make[1]: *** [Makefile:1530: all-recursive] Error 1
make[1]: Leaving directory
'/var/tmp/portage/media-video/vlc-3.0.3-r1/work/vlc-3.0.3'
make: *** [Makefile:1415: all] Error 2
 * ERROR: media-video/vlc-3.0.3-r1::gentoo failed (compile phase):
 *   emake failed
 *
 * If you need support, post the output of `emerge --info
'=media-video/vlc-3.0.3-r1::gentoo'`,
 * the complete build log and the output of `emerge -pqv
'=media-video/vlc-3.0.3-r1::gentoo'`.
 * The complete build log is located at
'/var/log/portage/media-video:vlc-3.0.3-r1:20180710-081824.log'.
 * The ebuild environment file is located at
'/var/tmp/portage/media-video/vlc-3.0.3-r1/temp/environment'.
 * Working directory: '/var/tmp/portage/media-video/vlc-3.0.3-r1/work/vlc-3.0.3'
 * S: '/var/tmp/portage/media-video/vlc-3.0.3-r1/work/vlc-3.0.3'

>>> Failed to emerge media-video/vlc-3.0.3-r1, Log file:

>>>  '/var/log/portage/media-video:vlc-3.0.3-r1:20180710-081824.log'

What shall I do?

Re: [gentoo-user] vlc failed to compile

[gevisz]

2018-07-10 12:58 GMT+03:00 Alexander Kapshuk :
> On Tue, Jul 10, 2018 at 12:42 PM gevisz  wrote:
>>
>> In today's update vlc failed to compile.
>>
>> What shall I do?
>>
>
> Rebuild libebml:
> emerge -1 libebml
>
> See 
> https://forums.gentoo.org/viewtopic-p-8184582.html?sid=f451f5dcad08d0eba731189fa8480c77

It has helped. Thank you.

Re: [gentoo-user] Upgrading gcc from 6.4 to 7.3

[gevisz]

2018-06-20 15:49 GMT+03:00 gevisz :
> 2018-06-20 15:01 GMT+03:00 gevisz :
>> 2018-06-20 14:16 GMT+03:00 Mick :
>>> On Wednesday, 20 June 2018 11:43:32 BST gevisz wrote:
>>>> After updating portage tree today, portage
>>>> suggested to upgrade gcc from 6.4 to 7.3
>>>> version what I have done just now.
>>>>
>>>> Nevertheless,
>>>> # gcc-config --list-profiles
>>>>  [1] x86_64-pc-linux-gnu-6.4.0 *
>>>>  [2] x86_64-pc-linux-gnu-7.3.0
>>>> shows that I still have version 6.4 as a default.
>>>
>>> I'm on gcc-7.3.0-r3 and have not noticed any problems on 3 boxen so far.
>>>
>>>
>>>> As https://wiki.gentoo.org/wiki/Upgrading_GCC
>>>> still do not have any specific instructions on
>>>> switching to gcc version 7.3, I am still afread
>>>> of switching to gcc version 7.3 and would like
>>>> to ask if anybody encountered some problem
>>>> after switching to gcc version 7.3 and which
>>>> packages should be rebuild after such switching.
>>>>
>>>> Thank you in advance for your help.
>>>
>>> I didn't have to rebuild anything, but if you have reasons to fear breakage
>>> you can rebuild your toolchain:
>>>
>>> 1. Use gcc-config to select x86_64-pc-linux-gnu-7.3.0
>>> 2. Re-source /etc/profile by running in your current console/terminal:
>>> . /etc/profile
>>> 3. Re-emerge libtool:
>>> emerge -1 sys-devel/libtool
>>> 4. Re-emerge the following packages in this order:
>>> emerge -1 sys-devel/gcc-7.3.0-r3
>>> emerge -1 sys-devel/binutils
>>> emerge -1 sys-libs/glibc
>>> 5. You could if you want re-emerge your entire system, 'emerge -e @world' or
>>> if you would rather conserve electricity wait as different packages come up
>>> for an update over time.
>>>
>>> If my experience to date holds true and for a general purpose desktop none 
>>> of
>>> the above rebuilds are necessary, other than switching your gcc to 7.3.0.
>>
>> Thank you for your reply. I do not want to rebuild gcc-7.3 for the second 
>> time
>> today (as far as the temperature in my room is already +30°C). So, I will 
>> stick
>> to your last advice: I will just switch the default gcc version to 7.3
>> and wait for problems to appear. :)
>
> Just have rebuilt libtool and llvm, to have less problems. :)

Just today vlc failed to compile because libebml have been compiled
with gcc-6.4.0.
(Thanks to Alexander Kapshuk for the tip.)

So, libebml should be added to the list of packages that have to be
recompiled with gcc-7.3
(namely, to libtool and llvm), and recompiling everything twice after
updating major version
of gcc does not seem to be so bad idea for me any more. :)

[gentoo-user] [OT] When Linux desktop will be at least so convenient as MS DOS?

[gevisz]

At the time of good old MS DOS, there was Keyrus keyboard
driver that could be configured in such a way that computer
nicely crackled when user typed in, say, Cyrillic keyboard
layout whereas produced no sound when user typed in
English keyboard layout, or vice versa.

The creator of Keyrus keyboard driver, a talented Ukrainian
programmer Dmitry Gurtyak, died on December 13th, 1998,
in the age of 27 years from brain cancer.

His Keyrus keyboard driver is still available from
http://www.softpanorama.org/People/Gurtyak/

After more than 20 years of using Linux, I finally want
to know if I can see this feature implemented in Linux.

As far as I know, X-org server does not provide such a feature.

Will it at least be implemented in Wayland?

Can it be somehow implemented now in any WM or DE?

I am currently use Awesome WM and it is a real headache
to type in Vim some Cyrillic text in LaTeX!

Especially without any keyboard switch indicator. :)

P.S. The topic of this thread is a bit provocative, but it was
intended to only catch your attention, not to produce
a holy war against MS DOS. :)

Re: [gentoo-user] Re: [OT] When Linux desktop will be at least so convenient as MS DOS?

[gevisz]

2018-07-13 2:26 GMT+03:00 Nikos Chantziaras :
> On 13/07/18 02:15, gevisz wrote:
>>
>> I am currently use Awesome WM and it is a real headache
>> to type in Vim some Cyrillic text in LaTeX!
>>
>> Especially without any keyboard switch indicator. :)
>
>
> If I search for "Awesome WM keyboard layout indicator" I find this:
>
>   https://github.com/deficient/keyboard-layout-indicator
>
> Have you tried it?

Thank you for your reply.

I have not tried any keyboard switch indicator.

I just studed the way keyboard layout switch is imlemented
in Linux and found out that all the ways it is done in Linux,
via X-org server, is quite "dirty". So, when switching from
XFCE4 to Awesome I decided to organize keyboard layout
switch naturaly, only in X-org server and without any keyboard
indicator, because a visual keyboard indicator does not help much.

But currently I am ready to try even the "dirty" way to organize
keyboard layout switch if it will give me a nice cracking sound
of old good days :) when typing in Cyrilic keyboard layout.

Re: [gentoo-user] Re: [OT] When Linux desktop will be at least so convenient as MS DOS?

[gevisz]

2018-07-13 3:31 GMT+03:00 Nikos Chantziaras :
> On 13/07/18 02:48, gevisz wrote:
>>
>> But currently I am ready to try even the "dirty" way to organize
>> keyboard layout switch if it will give me a nice cracking sound
>> of old good days :) when typing in Cyrillic keyboard layout.
>
>
> It will not. There is no reason to, since you can see it. In MS-DOS,
> you couldn't see it, thus the sound was the only way to communicate
> the current keyboard layout to the user.

To many users, especially if they switch keyboard layout too often
and between more than two keyboard layouts, it is extremely
inconvenient to every time look for the small keyboard indicator
on the screen to find out in which keyboard layout they are.

Actually, this my question was triggered by a question on some forum
where a user asked a similar question, namely, how other people solve
the problem of indicating keyboard layout. The only thing I could reply
to that question was that in good old days there was a nice MS DOS
keyboard driver Keyrus that indicated a Cyrillic keyboard layout with
a nice crackling sound... Surprisingly for me, for the topic starter,
it was enough: he soon replied that in Windows the same is possible
with Punto switcher, he set it and found it a nice way of indicating
keyboard layout.

The following is my translation of a quote from the creator of Punto
switcher, in which he gives the reason why he decided to create it:
"If we collect the curses of all computer users, when the text is not
printed in the correct keyboard layout, then we would get the energy
equal to one atomic bomb, and maybe two.”

The original quote (in Russian) may be found here:
https://ru.wikipedia.org/wiki/Punto_Switcher

As for me, for many years, I used to type without looking on the screen
at all. It helped to save my eyes from eхcessive monitor radiation but
not my nerves when I suddenly noted that last 10 minutes I typed in
a wrong keyboard layout.

Just to solve the said problem, I spent the last 3 years to learn touch
typing in three different keyboard layouts, but after all this I can
say that it is still inconvenient for me to control a current keyboard
layout without a help of nice crackling sound.

Re: [gentoo-user] Re: [OT] When Linux desktop will be at least so convenient as MS DOS?

[gevisz]

2018-07-13 10:14 GMT+03:00 Mick :
> On Friday, 13 July 2018 01:31:04 BST Nikos Chantziaras wrote:
>> On 13/07/18 02:48, gevisz wrote:
>> > But currently I am ready to try even the "dirty" way to organize
>> > keyboard layout switch if it will give me a nice cracking sound
>> > of old good days :) when typing in Cyrilic keyboard layout.
>>
>> It will not. There is no reason to, since you can see it. In MS-DOS, you
>> couldn't see it, thus the sound was the only way to communicate the
>> current keyboard layout to the user.
>
> I didn't know of Dmitry Gurtyak, or his particular application.  You may want
> to take a look at xset and in particular 'xset +c' to switch on the keyboard
> clicking sound.  If you append this to the command which is run when you
> switch to Cyrillic you would get a clicking sound.  You can also set the
> volume of the clicking sound by using a value from 1-100.

Thank you for your reply.

'xset c' seems to be the right way to set a crackling sound when
a keyboard button is pressed.

The still open question for me is how to combine it with the
'/usr/bin/setxkbmap us,some-cyrillic' command I use to set
keyboard layouts to get a nice crackling sound only in a Cyrillic
keyboard layout.

P.S. A simple test revealed that 'xset c' probably uses a small
beeper attached to the motherboard. It is ok. Moreover, the
same was used by Keyrus. But I still have to find and connect
it to the motherboard: I detached it some time ago because
it beeped to often during the compilation time while updating
the system.

[gentoo-user] virtualbox-modules fails to update: incompatible gcc/plugin versions

[gevisz]

# emerge --update --deep --with-bdeps=y --newuse --backtrack=120 --ask world

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild U  ] app-emulation/virtualbox-modules-5.2.14 [5.1.36]
[ebuild U  ] app-emulation/virtualbox-5.2.14-r1 [5.1.36]
[ebuild U  ] app-emulation/virtualbox-extpack-oracle-5.2.14.123301
[5.1.36.122089]

Would you like to merge these packages? [Yes/No] y

>>> Verifying ebuild manifests

>>> Emerging (1 of 3) app-emulation/virtualbox-modules-5.2.14::gentoo

...

cc1: error: incompatible gcc/plugin versions
cc1: error: fail to initialize plugin
./scripts/gcc-plugins/cyc_complexity_plugin.so
make[4]: *** [/usr/src/linux-4.9.95-gentoo/scripts/Makefile.build:293:
/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/work/vboxdrv/linux/SUPDrv-linux.o]
Error 1
make[4]: *** Waiting for unfinished jobs
cc1: error: incompatible gcc/plugin versions
cc1: error: fail to initialize plugin
./scripts/gcc-plugins/cyc_complexity_plugin.so
make[4]: *** [/usr/src/linux-4.9.95-gentoo/scripts/Makefile.build:293:
/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/work/vboxdrv/SUPDrv.o]
Error 1
make[3]: *** [/usr/src/linux-4.9.95-gentoo/Makefile:1508:
_module_/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/work/vboxdrv]
Error 2
make[3]: Leaving directory '/usr/src/linux-4.9.95-gentoo'
make[2]: *** [Makefile:152: sub-make] Error 2
make[2]: Leaving directory '/usr/src/linux-4.9.95-gentoo'
make[1]: *** 
[/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/work/vboxdrv/Makefile.include.footer:101:
vboxdrv] Error 2
make[1]: Leaving directory
'/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/work/vboxdrv'
make: *** [Makefile:49: all] Error 2
 * ERROR: app-emulation/virtualbox-modules-5.2.14::gentoo failed
(compile phase):
 *   emake failed
 *
 * If you need support, post the output of `emerge --info
'=app-emulation/virtualbox-modules-5.2.14::gentoo'`,
 * the complete build log and the output of `emerge -pqv
'=app-emulation/virtualbox-modules-5.2.14::gentoo'`.
 * The complete build log is located at
'/var/log/portage/app-emulation:virtualbox-modules-5.2.14:20180724-080859.log'.
 * The ebuild environment file is located at
'/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/temp/environment'.
 * Working directory:
'/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/work'
 * S: '/var/tmp/portage/app-emulation/virtualbox-modules-5.2.14/work'

>>> Failed to emerge app-emulation/virtualbox-modules-5.2.14, Log file:

>>>  
>>> '/var/log/portage/app-emulation:virtualbox-modules-5.2.14:20180724-080859.log'

Shall I recompile gcc?

Re: [gentoo-user] virtualbox-modules fails to update: incompatible gcc/plugin versions

[gevisz]

2018-07-24 12:25 GMT+03:00 Helmut Jarausch :
> Just for the record,
> I compiled this version with gcc-8.1.0-r3 without any problems.
>
> Helmut

I currently use the latest current stable version of gcc: 7.3.0-r3.
My current gcc-7.3.0-r3 was compiled with the previous stable
version of it, that is 6.4.0-r1.

Re: [gentoo-user] virtualbox-modules fails to update: incompatible gcc/plugin versions

[gevisz]

2018-07-24 19:16 GMT+03:00 Michael Orlitzky :
> On 07/24/2018 04:18 AM, gevisz wrote:
>> # emerge --update --deep --with-bdeps=y --newuse --backtrack=120 --ask world
>>
>> Shall I recompile gcc?
>>
>
> Nope, recompile your kernel.
>
> Your kernel and virtualbox-modules (which incorporates stuff from your
> kernel build) both need to be compiled with the same version of gcc.

Yes, it helped. Thank you.

Re: [gentoo-user] Upgrading gcc from 6.4 to 7.3

[gevisz]

2018-06-20 14:16 GMT+03:00 Mick :
> On Wednesday, 20 June 2018 11:43:32 BST gevisz wrote:
>> After updating portage tree today, portage
>> suggested to upgrade gcc from 6.4 to 7.3
>> version what I have done just now.
>>
>> Nevertheless,
>> # gcc-config --list-profiles
>>  [1] x86_64-pc-linux-gnu-6.4.0 *
>>  [2] x86_64-pc-linux-gnu-7.3.0
>> shows that I still have version 6.4 as a default.
>
> I'm on gcc-7.3.0-r3 and have not noticed any problems on 3 boxen so far.
>
>
>> As https://wiki.gentoo.org/wiki/Upgrading_GCC
>> still do not have any specific instructions on
>> switching to gcc version 7.3, I am still afread
>> of switching to gcc version 7.3 and would like
>> to ask if anybody encountered some problem
>> after switching to gcc version 7.3 and which
>> packages should be rebuild after such switching.
>>
>> Thank you in advance for your help.
>
> I didn't have to rebuild anything, but if you have reasons to fear breakage
> you can rebuild your toolchain:
>
> 1. Use gcc-config to select x86_64-pc-linux-gnu-7.3.0
> 2. Re-source /etc/profile by running in your current console/terminal:
> . /etc/profile
> 3. Re-emerge libtool:
> emerge -1 sys-devel/libtool
> 4. Re-emerge the following packages in this order:
> emerge -1 sys-devel/gcc-7.3.0-r3
> emerge -1 sys-devel/binutils
> emerge -1 sys-libs/glibc
> 5. You could if you want re-emerge your entire system, 'emerge -e @world' or
> if you would rather conserve electricity wait as different packages come up
> for an update over time.
>
> If my experience to date holds true and for a general purpose desktop none of
> the above rebuilds are necessary, other than switching your gcc to 7.3.0.

You forgot the 6th item:

6. Recompile the kernel.

Just today, virtualbox-modules refused to compile because of this.
Thanks to Michael Orlitzky for the tip how to interpret portage messages.

Re: [gentoo-user] Upgrading gcc from 6.4 to 7.3

[gevisz]

2018-07-24 22:00 GMT+03:00 gevisz :
> 2018-06-20 14:16 GMT+03:00 Mick :
>> On Wednesday, 20 June 2018 11:43:32 BST gevisz wrote:
>>> After updating portage tree today, portage
>>> suggested to upgrade gcc from 6.4 to 7.3
>>> version what I have done just now.
>>>
>>> Nevertheless,
>>> # gcc-config --list-profiles
>>>  [1] x86_64-pc-linux-gnu-6.4.0 *
>>>  [2] x86_64-pc-linux-gnu-7.3.0
>>> shows that I still have version 6.4 as a default.
>>
>> I'm on gcc-7.3.0-r3 and have not noticed any problems on 3 boxen so far.
>>
>>
>>> As https://wiki.gentoo.org/wiki/Upgrading_GCC
>>> still do not have any specific instructions on
>>> switching to gcc version 7.3, I am still afread
>>> of switching to gcc version 7.3 and would like
>>> to ask if anybody encountered some problem
>>> after switching to gcc version 7.3 and which
>>> packages should be rebuild after such switching.
>>>
>>> Thank you in advance for your help.
>>
>> I didn't have to rebuild anything, but if you have reasons to fear breakage
>> you can rebuild your toolchain:
>>
>> 1. Use gcc-config to select x86_64-pc-linux-gnu-7.3.0
>> 2. Re-source /etc/profile by running in your current console/terminal:
>> . /etc/profile
>> 3. Re-emerge libtool:
>> emerge -1 sys-devel/libtool
>> 4. Re-emerge the following packages in this order:
>> emerge -1 sys-devel/gcc-7.3.0-r3
>> emerge -1 sys-devel/binutils
>> emerge -1 sys-libs/glibc
>> 5. You could if you want re-emerge your entire system, 'emerge -e @world' or
>> if you would rather conserve electricity wait as different packages come up
>> for an update over time.
>>
>> If my experience to date holds true and for a general purpose desktop none of
>> the above rebuilds are necessary, other than switching your gcc to 7.3.0.
>
> You forgot the 6th item:
>
> 6. Recompile the kernel.
>
> Just today, virtualbox-modules refused to compile because of this.
> Thanks to Michael Orlitzky for the tip how to interpret portage messages.

By the way, this recommendation is absent from Gentoo wiki on updating gcc.

Re: [gentoo-user] Setting PYTHON_TARGETS in make.conf is not supported?

[gevisz]

2018-07-26 18:09 GMT+03:00 Mike Gilbert :
> On Thu, Jul 26, 2018 at 10:57 AM Grand Duet  wrote:
>>
>> Just now I have tried to manually set
>>
>> PYTHON_TARGETS="python2_7 python3_6"
>> PYTHON_SINGLE_TARGET="python3_6"
>>
>> in /etc/portage/make.conf and got the following error:
>>
>> # emerge --update --deep --with-bdeps=y --newuse --backtrack=120 --ask world
>>
>> These are the packages that would be merged, in order:
>>
>> Calculating dependencies... done!
>>
>> !!! The ebuild selected to satisfy "app-text/asciidoc" has unmet 
>> requirements.
>> - app-text/asciidoc-8.6.10::gentoo USE="-examples -graphviz -highlight
>> -test" ABI_X86="(64)" PYTHON_SINGLE_TARGET="(-pypy) -python2_7"
>> PYTHON_TARGETS="python2_7 (-pypy)"
>>
>>   The following REQUIRED_USE flag constraints are unsatisfied:
>> exactly-one-of ( python_single_target_pypy 
>> python_single_target_python2_7 )
>>
>>   The above constraints are a subset of the following complete expression:
>> exactly-one-of ( python_single_target_pypy
>> python_single_target_python2_7 ) python_single_target_pypy? (
>> python_targets_pypy ) python_single_target_python2_7? (
>> python_targets_python2_7 )
>>
>> (dependency required by "app-text/dvisvgm-2.1.3::gentoo" [installed])
>> (dependency required by "app-text/texlive-2017::gentoo[extra]" [installed])
>> (dependency required by "@selected" [set])
>> (dependency required by "@world" [argument])
>>
>> which is similar to those errors I got while trying to set
>>
>> PYTHON_TARGETS="python2_7 python3_5"
>> PYTHON_SINGLE_TARGET="python3_5"
>>
>> before switching yesterday from python-3.5 to python-3.6 target.
>>
>> Does it mean that setting python targets in /etc/portage/make.conf is
>> not supported any more?
>
> No, setting PYTHON_TARGETS in make.conf should still work.
>
> It looks like asciidoc only supports python2, and for some reason
> portage is trying to disable python2_7. I'm not sure why that might
> be; we enable python2_7 for asciidoc via profiles/base/package.use.
>
> Have you made some odd change to your profile, or overridden something
> in /etc/portage/package.use?

No, I have not make any changes in my profile or packege.use.
I have only added
PYTHON_TARGETS="python2_7 python3_6"
PYTHON_SINGLE_TARGET="python3_6"
lines to /etc/portage/make.conf

And when I comment these two lines in /etc/portage/make.conf,
the error mentioned above disappears.

Without those two lines in make.conf, I have the following:
$ equery uses asciidoc
 * Found these USE flags for app-text/asciidoc-8.6.10:
 U I
 - - examples   : Install examples, usually source code
 - - graphviz   : Add support for the Graphviz library
 - - highlight  : Enable source code highlighting
 + + python_single_target_python2_7 : Build for Python 2.7 only
 + + python_targets_python2_7   : Build with Python 2.7

With those two lines in make.conf, I have the following:
$ equery uses asciidoc
 * Found these USE flags for app-text/asciidoc-8.6.10:
 U I
 - - examples   : Install examples, usually source code
 - - graphviz   : Add support for the Graphviz library
 - - highlight  : Enable source code highlighting
 - + python_single_target_python2_7 : Build for Python 2.7 only
 + + python_targets_python2_7   : Build with Python 2.7

Ok, got it: the mentioned above settings in /etc/portage/make.conf
overrides those of asciidoc.

So, the recomendations made in the news "Python 3.6 to become
the default target" (mentioned in the thread "Any real need to switch
python targets back and forth every month?") on how to set python
targets in /etc/portage/make.conf was actually useless.

Thank you for all who replied to this thread.

[gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

I have two Gentoo systems on the same AMD Athlon 64 X2 computer.

The old one was installed in July 2013 with
default/linux/amd64/13.0/desktop/gnome (stable)
profile and was updated till the middle of
July 2017. Initially it hosted Gnome2
but later I have switched to XFCE4.

The new one was installed in January-February 2018
with default/linux/amd64/17.0/desktop (stable)
profile and was last updated yesterday. From the
very beginning it hosted no DE, only Awesome WM
and dbus.

The home directory is the same and still remembers
Ubuntu 6.04 installation in 2006.

On the old system, I had the problem that chromium
very often (but not always!) asked me for some
(keyring?) password when I opened a new www-page.

Recompilation of it with different user flags did not help.

I thought that that was because of the gnome-keyring,
consolekit or policykit packages but without any proof.

So, while installing the new Gentoo system, I decided
to avoid installing any package that needs gnome-keyring,
consolekit or policykit packages.

I have also set -pam -consolekit and -policykit in my
/etc/portage/make.conf

Chromium indeed never asked me for the mentioned
above password on the new Gentoo system.

But I get another problem on the new Gentoo system:
Firefox and Qupzilla both crash on some (login) www-pages.

Namely, Firefox shows the "Gah. Your tab just crashed"
when I try to log into my Yahoo e-mail account.

This happens only after entering login and password,
so not good enough to reproduce.

However, it shows the same message just after staying
about 3-5 seconds on the following internet banking
login page: https://www.privat24.ua/#login
No login or password needed. :)

The last error messages sent to terminal by FF while I
try to open the last www-page are the following:

[Parent 4099] WARNING: pipe error (56): Connection reset by peer: file
/var/tmp/portage/www-client/firefox-52.8.0/work/firefox-52.8.0esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc,
line 322
[Parent 4099] WARNING: pipe error (57): Connection reset by peer: file
/var/tmp/portage/www-client/firefox-52.8.0/work/firefox-52.8.0esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc,
line 322

###!!! [Parent][MessageChannel] Error:
(msgtype=0x2C0083,name=PBrowser::Msg_Destroy) Channel error: cannot
send/recv

[Parent 4099] WARNING: pipe error (44): Connection reset by peer: file
/var/tmp/portage/www-client/firefox-52.8.0/work/firefox-52.8.0esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc,
line 322

###!!! [Parent][MessageChannel] Error:
(msgtype=0x2C0083,name=PBrowser::Msg_Destroy) Channel error: cannot
send/recv

[Parent 4099] WARNING: pipe error (47): Connection reset by peer: file
/var/tmp/portage/www-client/firefox-52.8.0/work/firefox-52.8.0esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc,
line 322
[Parent 4099] WARNING: pipe error (49): Connection reset by peer: file
/var/tmp/portage/www-client/firefox-52.8.0/work/firefox-52.8.0esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc,
line 322

###!!! [Parent][MessageChannel] Error:
(msgtype=0x2C0083,name=PBrowser::Msg_Destroy) Channel error: cannot
send/recv

tabs.onUpdated event fired after context unloaded.
tabs.onUpdated event fired after context unloaded.
tabs.onUpdated event fired after context unloaded.
...

As to the Qupzilla, it crashes on the page https://www.privat24.ua/#login
completely, with the following messages sent to terminal:

[4376:4387:0727/105105.178569:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[4376:4387:0727/105105.178676:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[4376:4387:0727/105105.178734:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: crl4.digicert.com
[4376:4387:0727/105105.182973:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[4376:4387:0727/105105.183033:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[4376:4387:0727/105105.183086:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: crl4.digicert.com
r300 FP: Compiler Error:
/var/tmp/portage/media-libs/mesa-17.3.9/work/mesa-17.3.9/src/gallium/drivers/r300/compiler/r300_fragprog_emit.c::translate_rgb_opcode():
translate_rgb_opcode: Unknown opcode DDY
Using a dummy shader instead.
QupZilla: Crashed :( Saving backtrace in
/home/user/.config/qupzilla/crashlog ...
Backtrace successfully saved in
/home/user/.config/qupzilla/crashlog/Crash-2018-07-27T10:51:11.txt

The mentioned above crashlog file contains only the following:

Time: Fri Jul 27 10:51:11 2018
Qt version: 5.9.6 (compiled with 5.9.4)
QupZilla version: 2.2.5
Rendering engine: QtWebEngine

== BACKTRACE ==
#0: qupzilla(+0x355b) [0x55691e37055b]
#1: /lib64/libc.so.6(+0x35c60) [0x7f3a568c3c60]
#2: [0x7f3a3c18d2c9]

Strange enough, but on the old Gentoo system Firefox does not crash on
the said w

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-07-27 12:44 GMT+03:00 Mick :
> On Friday, 27 July 2018 09:16:30 BST gevisz wrote:
>> I have two Gentoo systems on the same AMD Athlon 64 X2 computer.
>>
>> The old one was installed in July 2013 with
>> default/linux/amd64/13.0/desktop/gnome (stable)
>> profile and was updated till the middle of
>> July 2017. Initially it hosted Gnome2
>> but later I have switched to XFCE4.
>>
>> The new one was installed in January-February 2018
>> with default/linux/amd64/17.0/desktop (stable)
>> profile and was last updated yesterday. From the
>> very beginning it hosted no DE, only Awesome WM
>> and dbus.
>>
>> The home directory is the same and still remembers
>> Ubuntu 6.04 installation in 2006.
>>
>> On the old system, I had the problem that chromium
>> very often (but not always!) asked me for some
>> (keyring?) password when I opened a new www-page.
>>
>> Recompilation of it with different user flags did not help.
>
> Go to:
>
> chrome://settings/passwords
>
> Then disable "Offer to save passwords".  It should not ask
> you to save passwords thereafter.

Thank you for your reply.

Chromium asked for a password to keyring or something like
that and did it on opening almost any page, even that that
definitely did not need any password authentication.

So, it was something else than just saving password for pages.

But it does not matter much now because I currently do not
use Chromium any more because it compiles more than 26 hours
on my computer.

>> I thought that that was because of the gnome-keyring,
>> consolekit or policykit packages but without any proof.
>
> From what I understand Chrome/ium will ask the desktop
> password manager to handle the saving of website passwords.

I guess he [Chromium] asked me for the password from
a password manager I may be used in previous intallation
of Ubuntu 5 or 10 years ago. However, I never give him
that password (because did not remember any such
password or even when I could create it in the past), so
he asked almost every time he opened new page. :)

> Policykit/polkit provides a centralised mechanism for
> non-privileged processes to communicate with privileged
> ones; e.g. when a plain user wants to hibernate/shutdown,
> disable NICs, etc.
>
>  https://lwn.net/Articles/258592/
>
> Consolekit tracks user sessions and allows switching between
> users on the same PC without logging out.

I am using my computer alone, so I guess that I do not need it.

> As far as I know with the switch to systemd and its built-in
> seat/user/session management mechanisms Consolekit
> is no longer maintained.

I do not use systemd.

>> So, while installing the new Gentoo system, I decided
>> to avoid installing any package that needs gnome-keyring,
>> consolekit or policykit packages.
>
> I think you shouldn't have needed to do all this.
>
>> I have also set -pam -consolekit and -policykit in my
>> /etc/portage/make.conf
>
> PAM is used to separate applications from the underlying
> authentication mechanisms.  It checks OS user/account/passwd/session
> authentications when required by applications.  This is the backbone
> of managing Linux authentications today, although some applications
> retain their own application level authentication mechanism (e.g. SSH).

So, do you think that global -pam use flag can cause Firefox
and QupZilla to crash on loging web-pages?

> I don't think setting USE="-pam" is advisable for most dekstop use cases.
>
>> Chromium indeed never asked me for the mentioned
>> above password on the new Gentoo system.
>>
>> But I get another problem on the new Gentoo system:
>> Firefox and Qupzilla both crash on some (login) www-pages.
>>
>> Namely, Firefox shows the "Gah. Your tab just crashed"
>> when I try to log into my Yahoo e-mail account.
>>
>> This happens only after entering login and password,
>> so not good enough to reproduce.
>>
>> However, it shows the same message just after staying
>> about 3-5 seconds on the following internet banking
>> login page: https://www.privat24.ua/#login
>> No login or password needed. :)
>>
>> The last error messages sent to terminal by FF while I
>> try to open the last www-page are the following:
>>
>> [Parent 4099] WARNING: pipe error (56): Connection reset by peer:
>
> The server disconnected you.
>
>
>> file
>> /var/tmp/portage/www-client/firefox-52.8.0/work/firefox-52.8.0esr/ipc/chromi
>> um/src/chrome/common/ipc_channel_posix.cc, line 322
>
> I'm not sure if your firefox build is the same like shown here,

Yes, the same.

> but line 

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-07-27 13:57 GMT+03:00 Mick :
> On Friday, 27 July 2018 11:44:08 BST gevisz wrote:
>> 2018-07-27 12:44 GMT+03:00 Mick :
>
>> > PAM is used to separate applications from the underlying
>> > authentication mechanisms.  It checks OS user/account/passwd/session
>> > authentications when required by applications.  This is the backbone
>> > of managing Linux authentications today, although some applications
>> > retain their own application level authentication mechanism (e.g. SSH).
>>
>> So, do you think that global -pam use flag can cause Firefox
>> and QupZilla to crash on loging web-pages?
>
> You can run them with strace to see if they are trying to access any pam
> modules, but I would think it unlikely.

Thank you for the tip. I will try to use strace after reading about it.

However, currently I already deleted grobal -pam use flag and
started to update world with the new settings. Some new packages
are currently installing and some other are recompiling.

> I bet this is something to do with the graphics drivers.  Later versions of
> browsers are heavy on hardware acceleration and can stress some graphics
> drivers causing crashes like this.  Geolocation and other pop ups use the GPU
> to create rendering effects and this could be the cause of the crash.

I doubt this because the same works on old Gentoo intallation on
the same computer. But I can not be sure, of course. :)

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-07-27 14:13 GMT+03:00 gevisz :
> 2018-07-27 13:57 GMT+03:00 Mick :
>> On Friday, 27 July 2018 11:44:08 BST gevisz wrote:
>>> 2018-07-27 12:44 GMT+03:00 Mick :
>>
>>> > PAM is used to separate applications from the underlying
>>> > authentication mechanisms.  It checks OS user/account/passwd/session
>>> > authentications when required by applications.  This is the backbone
>>> > of managing Linux authentications today, although some applications
>>> > retain their own application level authentication mechanism (e.g. SSH).
>>>
>>> So, do you think that global -pam use flag can cause Firefox
>>> and QupZilla to crash on loging web-pages?
>>
>> You can run them with strace to see if they are trying to access any pam
>> modules, but I would think it unlikely.
>
> Thank you for the tip. I will try to use strace after reading about it.
>
> However, currently I already deleted grobal -pam use flag and
> started to update world with the new settings. Some new packages
> are currently installing and some other are recompiling.

Updating world without global -pam, -polkit and -consolekit use flags
in /etc/portage/make.conf have not changed the behaviour of Fireforx
described above: it is still cannot display the page https://www.privat24.ua/
and shows "Gah. Your tab just crashed." message.

So, I will probably revert changes tomorrow.

Playing with strace has been put on todo list.

Any more adeas?

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-07-27 15:44 GMT+03:00 gevisz :
> Updating world without global -pam, -polkit and -consolekit use flags
> in /etc/portage/make.conf have not changed the behaviour of Fireforx
> described above: it is still cannot display the page https://www.privat24.ua/
> and shows "Gah. Your tab just crashed." message.
>
> So, I will probably revert changes tomorrow.
>
> Playing with strace has been put on todo list.

Last lines of the log file after runnig the following command

$ strace -o strace.log qupzilla https://www.privat24.ua/
QupZilla: 0 extensions loaded
[15707:15725:0727/155144.939329:ERROR:nss_util.cc(808)] After loading
Root Certs, loaded==false: NSS error code: -8018
[15707:15719:0727/155145.900259:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[15707:15719:0727/155145.900327:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[15707:15719:0727/155145.900384:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: crl4.digicert.com
[15707:15719:0727/155145.904387:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[15707:15719:0727/155145.904448:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[15707:15719:0727/155145.904496:ERROR:nss_ocsp.cc(591)] No
URLRequestContext for NSS HTTP handler. host: crl4.digicert.com
r300 FP: Compiler Error:
/var/tmp/portage/media-libs/mesa-17.3.9/work/mesa-17.3.9/src/gallium/drivers/r300/compiler/r300_fragprog_emit.c::translate_rgb_opcode():
translate_rgb_opcode: Unknown opcode DDY
Using a dummy shader instead.
QupZilla: Crashed :( Saving backtrace in
/home/gevis/.config/qupzilla/crashlog ...
Backtrace successfully saved in
/home/gevis/.config/qupzilla/crashlog/Crash-2018-07-27T15:51:49.txt
zsh: abort  strace -o strace.log qupzilla https://www.privat24.ua/

are the following:

read(5, "\1\0\0\0\0\0\0\0", 16) = 8
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=988321461}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=988368394}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=988415817}) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=988467639}) = 0
poll([{fd=3, events=POLLIN}, {fd=5, events=POLLIN}, {fd=12,
events=POLLIN}, {fd=44, events=POLLIN}], 4, 0) = 0 (Timeout)
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=988568839}) = 0
write(5, "\1\0\0\0\0\0\0\0", 8) = 8
poll([{fd=3, events=POLLIN}, {fd=5, events=POLLIN}, {fd=12,
events=POLLIN}, {fd=44, events=POLLIN}], 4, 0) = 1 ([{fd=5,
revents=POLLIN}])
read(5, "\1\0\0\0\0\0\0\0", 16) = 8
poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}])
writev(3, [{iov_base="&\0\2\0y\2\0\0", iov_len=8}], 1) = 8
futex(0x55f78fcb7c08, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55f78fcb7c08, FUTEX_WAKE_PRIVATE, 1) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=990082928}) = 0
poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}])
writev(3, [{iov_base="\231\7\5\0\21\0\300\1\1\0\0\0\1\0\0\0\30\0\0\0",
iov_len=20}, {iov_base=NULL, iov_len=0}, {iov_base="", iov_len=0}], 3)
= 20
futex(0x55f78fcb7c08, FUTEX_WAKE_PRIVATE, 1) = 1
ioctl(8, DRM_IOCTL_RADEON_GEM_CREATE, 0x7ffd31773080) = 0
ioctl(8, DRM_IOCTL_RADEON_GEM_SET_TILING, 0x7ffd3177311c) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=995358529}) = 0
ioctl(8, DRM_IOCTL_RADEON_GEM_WAIT_IDLE, 0x7ffd31773250) = 0
clock_gettime(CLOCK_MONOTONIC, {tv_sec=1166, tv_nsec=995480262}) = 0
ioctl(8, DRM_IOCTL_RADEON_GEM_MMAP, 0x7ffd31773280) = 0
mmap(NULL, 6868992, PROT_READ|PROT_WRITE, MAP_SHARED, 8, 0x1073e4000)
= 0x7f22f585
futex(0x55f78fd2d4f4, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55f78fd2d4a0, FUTEX_WAKE_PRIVATE, 1) = 1
munmap(0x7f22f585, 6868992) = 0
ioctl(8, DRM_IOCTL_GEM_CLOSE, 0x7ffd31773358) = 0
futex(0x55f78fe276a8, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55f78fe276a8, FUTEX_WAIT_PRIVATE, 2, NULL) = 0
futex(0x55f78fe276a8, FUTEX_WAKE_PRIVATE, 1) = 0
ioctl(8, DRM_IOCTL_RADEON_GEM_WAIT_IDLE, 0x7ffd31773900) = 0
ioctl(8, DRM_IOCTL_GEM_CLOSE, 0x7ffd317738d8) = 0
ioctl(8, DRM_IOCTL_RADEON_GEM_CREATE, 0x7ffd317737a0) = 0
futex(0x55f78fd2d4f4, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55f78fd2d4a0, FUTEX_WAKE_PRIVATE, 1) = 1
poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}])
writev(3, 
[{iov_base="\231\10\10\0\21\0\300\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
iov_len=32}], 1) = 32
futex(0x55f78fcb7c08, FUTEX_WAKE_PRIVATE, 1) = 1
poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}])
writev(3, [{iov_base="+\7\1\0", iov_len=4}, {iov_base=NULL,
iov_len=0}, {iov_base="", iov_len=0}], 3) = 4
futex(0x55f78fcb7c08, FUTEX_WAKE_PRIVATE, 1) = 1
write(5, "\1\0\0\0\0\0\0\0", 8) = 8
clock_gettime(CLOCK_MONOTO

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-07-27 18:29 GMT+03:00 Mick :
> On Friday, 27 July 2018 14:00:43 BST gevisz wrote:
>> 2018-07-27 15:44 GMT+03:00 gevisz :
>> > Updating world without global -pam, -polkit and -consolekit use flags
>> > in /etc/portage/make.conf have not changed the behaviour of Fireforx
>> > described above: it is still cannot display the page
>> > https://www.privat24.ua/ and shows "Gah. Your tab just crashed." message.
>> >
>> > So, I will probably revert changes tomorrow.
>> >
>> > Playing with strace has been put on todo list.
>>
>> Last lines of the log file after runnig the following command
>>
>> $ strace -o strace.log qupzilla https://www.privat24.ua/
>> QupZilla: 0 extensions loaded
>> [15707:15725:0727/155144.939329:ERROR:nss_util.cc(808)] After loading
>> Root Certs, loaded==false: NSS error code: -8018
>> [15707:15719:0727/155145.900259:ERROR:nss_ocsp.cc(591)] No
>> URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
>
> Mozilla is using libnss to check the validity of the website certificate with
> the OCSP of the CA issuer of the certificate (digicert.com).  For some reason
> it seems the connection is interrupted.  See lines 605 to 621 here:
>
> https://code.woboq.org/qt5/qtwebengine/src/3rdparty/chromium/net/cert_net/
> nss_ocsp.cc.html
>
> The connection may be interrupted because the browser/tab crashes (see below).
>
>
>> r300 FP: Compiler Error:
>> /var/tmp/portage/media-libs/mesa-17.3.9/work/mesa-17.3.9/src/gallium/drivers
>> /r300/compiler/r300_fragprog_emit.c::translate_rgb_opcode():
>> translate_rgb_opcode: Unknown opcode DDY
>> Using a dummy shader instead.
>> QupZilla: Crashed :( Saving backtrace in
>> /home/gevis/.config/qupzilla/crashlog ...
>> Backtrace successfully saved in
>> /home/gevis/.config/qupzilla/crashlog/Crash-2018-07-27T15:51:49.txt
>> zsh: abort  strace -o strace.log qupzilla https://www.privat24.ua/
>>
>> are the following:
>>
>> clock_gettime(CLOCK_MONOTONIC, {tv_sec=1167, tv_nsec=68524671}) = 0
>> ioctl(8, DRM_IOCTL_RADEON_GEM_MMAP, 0x7ffd31773280) = 0
>> mmap(NULL, 6868992, PROT_READ|PROT_WRITE, MAP_SHARED, 8, 0x107616000)
>> = 0x7f22f565
>> +++ killed by SIGABRT +++
>
>
> This looks like a radeon video driver problem.  You could go into a loop of
> rebuilding xorg, mesa, dev-libs/nss, what-ever and see if things improve, or
> you could wait for/keyword later versions of these packages.

Thank you for the tip. In this case, I should first try reconfigure the kernel.

> Alternatively, you could try reporting this to the application devs and see
> what they say.

Do you mean developpers of FF/QZ?

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-07-27 23:02 GMT+03:00 Mick :
> On Friday, 27 July 2018 19:49:45 BST gevisz wrote:
>> 2018-07-27 18:29 GMT+03:00 Mick :
>> > On Friday, 27 July 2018 14:00:43 BST gevisz wrote:
>> >> 2018-07-27 15:44 GMT+03:00 gevisz :
>> >> > Updating world without global -pam, -polkit and -consolekit use flags
>> >> > in /etc/portage/make.conf have not changed the behaviour of Fireforx
>> >> > described above: it is still cannot display the page
>> >> > https://www.privat24.ua/ and shows "Gah. Your tab just crashed."
>> >> > message.
>> >> >
>> >> > So, I will probably revert changes tomorrow.
>> >> >
>> >> > Playing with strace has been put on todo list.
>> >>
>> >> Last lines of the log file after runnig the following command
>> >>
>> >> $ strace -o strace.log qupzilla https://www.privat24.ua/
>> >> QupZilla: 0 extensions loaded
>> >> [15707:15725:0727/155144.939329:ERROR:nss_util.cc(808)] After loading
>> >> Root Certs, loaded==false: NSS error code: -8018
>> >> [15707:15719:0727/155145.900259:ERROR:nss_ocsp.cc(591)] No
>> >> URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
>> >
>> > Mozilla is using libnss to check the validity of the website certificate
>> > with the OCSP of the CA issuer of the certificate (digicert.com).  For
>> > some reason it seems the connection is interrupted.  See lines 605 to 621
>> > here:
>> >
>> > https://code.woboq.org/qt5/qtwebengine/src/3rdparty/chromium/net/cert_net/
>> > nss_ocsp.cc.html
>> >
>> > The connection may be interrupted because the browser/tab crashes (see
>> > below).>
>> >> r300 FP: Compiler Error:
>> >> /var/tmp/portage/media-libs/mesa-17.3.9/work/mesa-17.3.9/src/gallium/driv
>> >> ers /r300/compiler/r300_fragprog_emit.c::translate_rgb_opcode():
>> >> translate_rgb_opcode: Unknown opcode DDY
>> >> Using a dummy shader instead.
>> >> QupZilla: Crashed :( Saving backtrace in
>> >> /home/gevis/.config/qupzilla/crashlog ...
>> >> Backtrace successfully saved in
>> >> /home/gevis/.config/qupzilla/crashlog/Crash-2018-07-27T15:51:49.txt
>> >> zsh: abort  strace -o strace.log qupzilla https://www.privat24.ua/
>> >>
>> >> are the following:
>> >>
>> >> clock_gettime(CLOCK_MONOTONIC, {tv_sec=1167, tv_nsec=68524671}) = 0
>> >> ioctl(8, DRM_IOCTL_RADEON_GEM_MMAP, 0x7ffd31773280) = 0
>> >> mmap(NULL, 6868992, PROT_READ|PROT_WRITE, MAP_SHARED, 8, 0x107616000)
>> >> = 0x7f22f565
>> >> +++ killed by SIGABRT +++
>> >
>> > This looks like a radeon video driver problem.  You could go into a loop
>> > of
>> > rebuilding xorg, mesa, dev-libs/nss, what-ever and see if things improve,
>> > or you could wait for/keyword later versions of these packages.
>>
>> Thank you for the tip. In this case, I should first try reconfigure the
>> kernel.
>> > Alternatively, you could try reporting this to the application devs and
>> > see
>> > what they say.
>>
>> Do you mean developpers of FF/QZ?
>
> Yes, although unless this is a known bug they may point you to the devs of the
> radeon drivers.  I've been around this loop a couple of times (sigh ...)

Ok. Thank you.

It even more strengthens my impression than I should first
play with reconfiguring the kernel.

I will do it a bit later, when the summer heat becames more tolerable. :)

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-07-28 15:24 GMT+03:00 gevisz :
> 2018-07-27 23:02 GMT+03:00 Mick :
>> On Friday, 27 July 2018 19:49:45 BST gevisz wrote:
>>> 2018-07-27 18:29 GMT+03:00 Mick :
>>> > On Friday, 27 July 2018 14:00:43 BST gevisz wrote:
>>> >> 2018-07-27 15:44 GMT+03:00 gevisz :
>>> >> > Updating world without global -pam, -polkit and -consolekit use flags
>>> >> > in /etc/portage/make.conf have not changed the behaviour of Fireforx
>>> >> > described above: it is still cannot display the page
>>> >> > https://www.privat24.ua/ and shows "Gah. Your tab just crashed."
>>> >> > message.
>>> >> >
>>> >> > So, I will probably revert changes tomorrow.
>>> >> >
>>> >> > Playing with strace has been put on todo list.
>>> >>
>>> >> Last lines of the log file after runnig the following command
>>> >>
>>> >> $ strace -o strace.log qupzilla https://www.privat24.ua/
>>> >> QupZilla: 0 extensions loaded
>>> >> [15707:15725:0727/155144.939329:ERROR:nss_util.cc(808)] After loading
>>> >> Root Certs, loaded==false: NSS error code: -8018
>>> >> [15707:15719:0727/155145.900259:ERROR:nss_ocsp.cc(591)] No
>>> >> URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
>>> >
>>> > Mozilla is using libnss to check the validity of the website certificate
>>> > with the OCSP of the CA issuer of the certificate (digicert.com).  For
>>> > some reason it seems the connection is interrupted.  See lines 605 to 621
>>> > here:
>>> >
>>> > https://code.woboq.org/qt5/qtwebengine/src/3rdparty/chromium/net/cert_net/
>>> > nss_ocsp.cc.html
>>> >
>>> > The connection may be interrupted because the browser/tab crashes (see
>>> > below).>
>>> >> r300 FP: Compiler Error:
>>> >> /var/tmp/portage/media-libs/mesa-17.3.9/work/mesa-17.3.9/src/gallium/driv
>>> >> ers /r300/compiler/r300_fragprog_emit.c::translate_rgb_opcode():
>>> >> translate_rgb_opcode: Unknown opcode DDY
>>> >> Using a dummy shader instead.
>>> >> QupZilla: Crashed :( Saving backtrace in
>>> >> /home/gevis/.config/qupzilla/crashlog ...
>>> >> Backtrace successfully saved in
>>> >> /home/gevis/.config/qupzilla/crashlog/Crash-2018-07-27T15:51:49.txt
>>> >> zsh: abort  strace -o strace.log qupzilla https://www.privat24.ua/
>>> >>
>>> >> are the following:
>>> >>
>>> >> clock_gettime(CLOCK_MONOTONIC, {tv_sec=1167, tv_nsec=68524671}) = 0
>>> >> ioctl(8, DRM_IOCTL_RADEON_GEM_MMAP, 0x7ffd31773280) = 0
>>> >> mmap(NULL, 6868992, PROT_READ|PROT_WRITE, MAP_SHARED, 8, 0x107616000)
>>> >> = 0x7f22f565
>>> >> +++ killed by SIGABRT +++
>>> >
>>> > This looks like a radeon video driver problem.  You could go into a loop
>>> > of
>>> > rebuilding xorg, mesa, dev-libs/nss, what-ever and see if things improve,
>>> > or you could wait for/keyword later versions of these packages.
>>>
>>> Thank you for the tip. In this case, I should first try reconfigure the
>>> kernel.
>>> > Alternatively, you could try reporting this to the application devs and
>>> > see
>>> > what they say.
>>>
>>> Do you mean developpers of FF/QZ?
>>
>> Yes, although unless this is a known bug they may point you to the devs of 
>> the
>> radeon drivers.  I've been around this loop a couple of times (sigh ...)
>
> Ok. Thank you.
>
> It even more strengthens my impression than I should first
> play with reconfiguring the kernel.

I have loaded the new Gentoo system using the kernel from the old one
with no change in Firefox behaviour on https://www.privat24.ua/#login
page: it crashed as was described before.

So, playing with the kernel configuration will not help. :(

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-08-01 2:41 GMT+03:00 Adam Carter :
>> > It even more strengthens my impression than I should first
>> > play with reconfiguring the kernel.
>>
>> I have loaded the new Gentoo system using the kernel from the old one
>> with no change in Firefox behaviour on https://www.privat24.ua/#login
>> page: it crashed as was described before.
>>
>> So, playing with the kernel configuration will not help. :(
>
>
> I think this "This looks like a radeon video driver problem.  You could go
> into a loop of rebuilding xorg, mesa, dev-libs/nss, what-ever and see if
> things improve" is the best suggestion so far.
>
> I would do something like 'emerge -1 xorg-server xorg-drivers
> @x11-module-rebuild mesa llvm clang' then restart X and try again.

Thank you for your reply.

Initially, I understood the above recomendation as the suggestion to
rebuild the packages mentioned above with different use flags.

Do you think that rebuilding them with the same use flags may help?

The said problem appeared just since the intallation of the new
Gentoo system in January-February 2018 and not since changing
the major version of gcc this spring.

P.S. clang is not installed on my Gentoo system at all.

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

2018-08-02 3:16 GMT+03:00 Adam Carter :
>> > I would do something like 'emerge -1 xorg-server xorg-drivers
>> > @x11-module-rebuild mesa llvm clang' then restart X and try again.
>>
>> Thank you for your reply.
>>
>> Initially, I understood the above recomendation as the suggestion to
>> rebuild the packages mentioned above with different use flags.
>>
>> Do you think that rebuilding them with the same use flags may help?
>
>
> It can, for example, if the major version of the kernel has changed but you
> havent rebuild xorg since (I only recall having this issue once).

Ok, thank you. I will try to do it in a two weeks.
(Currently, is still too hot to start so massive recompilation.)

> If you use newuse and changed-deps with emerge its probably less likely to
> find other issues.
>
>>
>> The said problem appeared just since the intallation of the new
>> Gentoo system in January-February 2018 and not since changing
>> the major version of gcc this spring.
>>
>> P.S. clang is not installed on my Gentoo system at all.
>>
>
> I've checked the dependencies on my system, and firefox is pulling that in
> for me, but checking the ebuilds you can see it becomes a dependency from
> v60 onwards;
>
> /usr/portage/www-client/firefox $ ls
> files/   firefox-52.9.0.ebuild   Manifest
> firefox-52.6.0.ebuild  firefox-60.1.0.ebuild   metadata.xml
> firefox-52.8.0.ebuild  firefox-61.0-r1.ebuild
> /usr/portage/www-client/firefox $ grep clang *
> grep: files: Is a directory
> firefox-60.1.0.ebuild:>=sys-devel/clang-4.0.1
> firefox-60.1.0.ebuild:has_version "sys-devel/clang:${LLVM_SLOT}"
> firefox-61.0-r1.ebuild:>=sys-devel/clang-4.0.1
> firefox-61.0-r1.ebuild:has_version "sys-devel/clang:${LLVM_SLOT}"
> /usr/portage/www-client/firefox $

Ok, thank you. I still have FF version 5.8.0 (64 bit).
It is the latest stable version on amd64.

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

пт, 27 июл. 2018 г. в 18:30, Mick :
>
> This looks like a radeon video driver problem.  You could go into a loop of
> rebuilding xorg, mesa, dev-libs/nss, what-ever and see if things improve, or
> you could wait for/keyword later versions of these packages.

Just now, I have finished updating my system. It was after a more than
a month of not doing so because of the summer heat. So, there was
a lot of packages to update, including mesa.

After the update, the problem with firefox crashing on privat24.ua
logging page dissappeared. So, it looks like your advise to rebuild
xorg, mesa, etc. was right. Thank you.

[gentoo-user] pycharm-community vs pycharm-professional

[gevisz]

In short: What is the difference between pycharm-community and
pycharm-professional Gentoo packages.

Not essential details are given below.

Some time ago a friend of mine asked me to install Ubuntu to his quite
an old computer:
Intel Pentium Dual-Core E2160 processor (without multithreading), only
2GB of RAM and
the motherboard does not allow more, etc.

In spite of my hate of Ubuntu, I installed for him Ubuntu 18.04 LTS
and, as a side effect,
have found out that it became much, much worse than Ubuntu 10.04 LST,
that I used
before switching to Gentoo after the release of Ubuntu 12.04 LST (with
Unity), even worse
than Ubuntu 12.04 LST that forced me to switch out of Ubuntu. (I would
even say that
Ubuntu 18.04 LST became a real piece of bull shit. Sorry for my French.)

Yesterday, the said friend of mine called to me and informed me that
his Ubuntu 18.04 LST
is broken (after he somehow tried to deinstall Python3 because he
needed only Python2 :).

"apt-get install python" and "apt-get install python3" commands did not helped.

After that I said to him that he has the following two options:
1) install Ubuntu 18.04 himself with my on-call help,
2) bring me his old computer again and allow me to install there Gentoo,
as I don't want to see Ubuntu 18.04 any more.

He has chosen the latter.

So, now I have to install for him basic Gentoo and some other programs
including pycharm, vpn, skype4linux, etc.

Doing this, I have to choose between pycharm-community and
pycharm-professional but I do now nothing about them.

So, I decided to ask if somebody in this mailing list can tell me what
is the difference between pycharm-community and pycharm-professional
Gentoo packages.

Thank you in advance.

Re: [gentoo-user] pycharm-community vs pycharm-professional

[gevisz]

вс, 16 сент. 2018 г. в 1:43, András Csányi :
>
> https://www.jetbrains.com/pycharm/features/editions_comparison_matrix.html

Thank you for the link. It almost completely answers my initial question.

The only question that I still have about pycharm-professional is given below,
after the quote from previous e-mails.

> On Sat, 15 Sep 2018 at 15:41, Andrew Udvare  wrote:
> > > On Sep 15, 2018, at 18:31, gevisz  wrote:
> > >
> > > In short: What is the difference between pycharm-community and
> > > pycharm-professional Gentoo packages.
> >
> > Pretty sure one is completely free and limited in functionality and 
> > professional
> > requires a license from JetBrains.
> >
> > If you have a license, install pycharm-professional.

Thank you for your reply. Does it means that pycharm-professional package
in Gentoo will not work or will not install without providing a license number
from JetBrains or something like that?

On the official pycharm site, the professional version of pycharm is provided
with 30-day trial period. After end of that trial period, the
professional license
should be bought. That let me wonder if some payment will be necessary
for using pycharm-professional in Gentoo as well from the very beginning.
I just have not formulated it clearly in my initial question.

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

пт, 7 сент. 2018 г. в 19:05, Mick :
>
> On Friday, 7 September 2018 16:32:40 BST gevisz wrote:
>
> Something else I came across causing FF crashes here, was a bug with profile-
> sync-daemon (recent thread of mine refers).  I don't know if you use psd, but
> I wasn't aware of this psd bug when you posted about your problems.  I only
> mention it now as another thing to check next time you have FF crashing on
> you.

Thank you for additional information.

I have read in this mailing list (may be it was your thread) that using profiles
in firefox is another source of crashes. So, I do not use profiles, and now hope
that it means that I do not use psd as well. :)

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

вс, 16 сент. 2018 г. в 10:50, Mick :
>
> On Sunday, 16 September 2018 08:19:30 BST gevisz wrote:
> > пт, 7 сент. 2018 г. в 19:05, Mick :
> > > On Friday, 7 September 2018 16:32:40 BST gevisz wrote:
> > >
> > > Something else I came across causing FF crashes here, was a bug with
> > > profile- sync-daemon (recent thread of mine refers).  I don't know if you
> > > use psd, but I wasn't aware of this psd bug when you posted about your
> > > problems.  I only mention it now as another thing to check next time you
> > > have FF crashing on you.
> >
> > Thank you for additional information.
> >
> > I have read in this mailing list (may be it was your thread) that using
> > profiles in firefox is another source of crashes. So, I do not use
> > profiles, and now hope that it means that I do not use psd as well. :)
>
> Ah! No, they are too different things.
>
> I have not read anywhere that the use of multiple user profiles causes FF to
> crash.  Perhaps some addons may do.

Multiple profiles for the same user.

> The use of psd on the other hand is a useful package, minimising the writing
> cycles of the browser's cache to disk.  If your PC is running on SDD or hybrid
> disks and has enough RAM, then a profile-sync-daemon (when it is not buggy)
> should be a good thing.

Ok, thank you for the information. I still use only HDDs. So, I
probably do not need psd so far.

Re: [gentoo-user] Firefox crashes on some www-pages on a newer Gentoo system

[gevisz]

вс, 16 сент. 2018 г. в 11:09, Dale :
>
> Mick wrote:
> > On Sunday, 16 September 2018 08:19:30 BST gevisz wrote:
> >> пт, 7 сент. 2018 г. в 19:05, Mick :
> >>> On Friday, 7 September 2018 16:32:40 BST gevisz wrote:
> >>>
> >>> Something else I came across causing FF crashes here, was a bug with
> >>> profile- sync-daemon (recent thread of mine refers).  I don't know if you
> >>> use psd, but I wasn't aware of this psd bug when you posted about your
> >>> problems.  I only mention it now as another thing to check next time you
> >>> have FF crashing on you.
> >> Thank you for additional information.
> >>
> >> I have read in this mailing list (may be it was your thread) that using
> >> profiles in firefox is another source of crashes. So, I do not use
> >> profiles, and now hope that it means that I do not use psd as well. :)
> > Ah! No, they are too different things.
> >
> > I have not read anywhere that the use of multiple user profiles causes FF to
> > crash.  Perhaps some addons may do.
> > <>
>
> I have nine Firefox profiles here.  Any problems I have had have turned
> out to be a bad add on.  Sometimes I turn off auto update and new
> Firefox doesn't like old add on.

Probably, you meant that problems with old add ons arise when firefox
auto update is turned on. If so, I do agree.

> It is rare that I have Firefox crash.

Unfortunately, even a rare Firefox crash has long standing consequences. :(

> It may get slow at times but it keeps chugging along.  Generally I have
> four or five profiles running and sometimes even more.  I use different
> profiles for different tasks with different add ons.  I've noticed that
> the more add ons one has, the slower it tends to get.  I sort of spread
> them out a bit.

If multiple Firefox profiles do not increase the probability of its crash
any more, than it is a good news because they are really useful.

Anyway, I still afraid to use them so far.

Re: [gentoo-user] pycharm-community vs pycharm-professional

[gevisz]

вс, 16 сент. 2018 г. в 10:57, Arve Barsnes :
>
> On Sun, 16 Sep 2018 at 09:15, gevisz  wrote:
> > Thank you for your reply. Does it means that pycharm-professional package
> > in Gentoo will not work or will not install without providing a license 
> > number
> > from JetBrains or something like that?
> >
> > On the official pycharm site, the professional version of pycharm is 
> > provided
> > with 30-day trial period. After end of that trial period, the
> > professional license
> > should be bought. That let me wonder if some payment will be necessary
> > for using pycharm-professional in Gentoo as well from the very beginning.
> > I just have not formulated it clearly in my initial question.
> >
>
> It is the same package as you get from JetBrains, so you still get the
> 30 days trial.

Ok, thank you for the information.

[gentoo-user] Browsers cannot access WWW while ping and host utilities work as expected.

[gevisz]

Trying to migrate from Ubuntu 10.04 LTS, I have installed Gentoo,
profile AMD64 13.0 desktop gnome.

Everything so far works as expected except for Internet browsers and
GNOME applets that should connect to the Internet.

More exactly, Internet browsers (I have tried Firefox and Links) can
connect to the WWW if I type the IP address as,
for example, 173.194.71.104 but cannot if I type www.google.com

And this is strange because the host utility works as expected
(converting www.google.com into 173.194.71.104) just adding the
following "Warning: query response not set."

The ifconfig utility shows that instead of eth0 I have somewhat
strange enp2s15 but I have played with this and found no difference
after forcing udev to name it eth0.

Installing Gentoo, I closely followed the instructions from Gentoo
Linux AMD64 Handbook
(http://www.gentoo.org/doc/en/handbook/handbook-amd64.xml?full=1).

The contents of my /etc/conf.d/net file is like this:
hostname="myhostname"
dns_domain_lo="mynetwork"
config_enp2s15="192.168.0.9 netmask 255.255.255.0 broadcast 192.168.0.255"
routes_enp2s15="default via "
dns_servers_enp2s15="
 "

The contents of my /etc/resolv.conf is like this:
nameserver 
nameserver 
nameserver 

The relevant part of /var/log/rc.log is like this:
* Bringing up interface enp2s15
* Skipping module adsl due to missing program: /usr/sbin/adsl-start
/usr/sbin/pppoe-start
* Skipping module br2684ctl due to missing program: br2684ctl
* Skipping module tuntap due to missing program: ip openvpn tunctl
* Skipping module bridge due to missing program: brctl
* Skipping module clip due to missing program: /usr/sbin/atmsigd
* Skipping module ethtool due to missing program: ethtool
* Skipping module macvlan due to missing program: ip
* Skipping module netplugd due to missing program: /sbin/netplugd
* Skipping module ifplugd due to missing program: /usr/sbin/ifplugd
* Skipping module ipppd due to missing program: /usr/sbin/ipppd
* Skipping module iwconfig due to missing program: /sbin/iwconfig
* Skipping module iproute2 due to missing program: ip
* Skipping module firewalld due to missing program: firewall-cmd
* Skipping module pppd due to missing program: /usr/sbin/pppd
* Skipping module vlan due to missing program: ip
* Skipping module dhclient due to missing program: /sbin/dhclient
* Skipping module pump due to missing program: /sbin/pump
* Skipping module ip6rd due to missing program: ip
* Skipping module ip6to4 due to missing program: ip
* Loaded modules: apipa arping bonding ccwgroup macchanger macnet
wpa_supplicant ssidnet ifconfig system dhcpcd
* Configuring enp2s15 for MAC address  ...
[ ok ]
* 192.168.0.9 ...
[ ok ]
* Adding routes
* default via  ...

Remark: My router works ok for the Ubuntu installation on the same computer.

 Networking options of my kernel is as follows:

CONFIG_PACKET=y
CONFIG_PACKET_DIAG=y
CONFIG_UNIX=y
CONFIG_UNIX_DIAG=y
CONFIG_XFRM=y
CONFIG_XFRM_ALGO=y
CONFIG_XFRM_USER=y
CONFIG_INET=y
CONFIG_INET_TUNNEL=y
CONFIG_INET_LRO=y
CONFIG_INET_DIAG=y
CONFIG_INET_TCP_DIAG=y
CONFIG_INET_UDP_DIAG=y
CONFIG_TCP_CONG_ADVANCED=y
CONFIG_TCP_CONG_CUBIC=y
CONFIG_DEFAULT_CUBIC=y
CONFIG_DEFAULT_TCP_CONG="cubic"
CONFIG_TCP_MD5SIG=y
CONFIG_IPV6=y
CONFIG_INET6_AH=y
CONFIG_INET6_ESP=y
CONFIG_INET6_XFRM_MODE_TRANSPORT=y
CONFIG_INET6_XFRM_MODE_TUNNEL=y
CONFIG_INET6_XFRM_MODE_BEET=y
CONFIG_IPV6_SIT=y
CONFIG_IPV6_NDISC_NODETYPE=y
CONFIG_NETWORK_SECMARK=y
CONFIG_HAVE_NET_DSA=y
CONFIG_DNS_RESOLVER=y
CONFIG_RPS=y
CONFIG_RFS_ACCEL=y
CONFIG_XPS=y
CONFIG_BQL=y

where all options that are "not set" has been deleted for brevity.

I have also tried to use dhcpd instead of static IP but it did not help.

Currently, I have completely exhausted all my creativity trying to
figure out how to make my WWW browsers to work properly. Please, help!

Re: [gentoo-user] Browsers cannot access WWW while ping and host utilities work as expected.

[gevisz]

My thanks to all who replied to my question.

The problem was with my local router, which I also used as DNS.
After excluding it from /etc/resolv.config and /etc/init.d/net files,
Firefox started to work as expected.

Thanks to all of you, I now have a working Gentoo on my desktop!!!

Still, a small problem that vlc hangs the GNOME, but I hope to solve
it in the nearest future (or post a separate question).

Below is the full report of what I did reacting on your suggestions.

Suggestions of Mark Pariente:

>> Internet browsers (I have tried Firefox and Links) can connect to
>> the WWW if I type the IP address as, for example, 173.194.71.104
>> but cannot if I type www.google.com
>>
>> And this is strange because the host utility works as expected
>> (converting www.google.com into 173.194.71.104) just adding the
>> following "Warning: query response not set."

> Do other command line tools like ping work?

Yes, the ping command works for everything I have tried including all
the DNS I put into my resolv.conf file.

> It looks like your DNS setup is correct but for some reason the GNOME setup 
> isn't.

At first, I also blamed GNOME. However, after trying the Links web browser from
a bare console (and obtaining the same results), it seems to me that the GNOME
setup cannot be responsible for this problem

> Few things:
> Are you using NetworkManager? Is the 'networkmanager' USE flag
> enabled? If so try going to Settings->Network->Wired->gear icon->IPv4
> and see what the DNS settings are like.

I have emerged GNOME with the default set of USE flags and currently
I have no NetworkManager in my GNOME menu.

> Also in Settings->Network, see if Network proxy is (mis)configured.

My GNOME Network Proxy Preferences show the option Direct Internet
Connection enabled.

Suggestions of  Michael Kintzios

>> the host utility works as expected (converting www.google.com into 
>> 173.194.71.104)
>> just adding the following "Warning: query response not set."

> Hmm .. wonder if this is something to do with your dns repeater
> (your lan router) sending malformed packets in response?

I am using Dlink DI-LB604 as my lan router and gateway.

>> The ifconfig utility shows that instead of eth0 I have somewhat
>> strange enp2s15 but I have played with this and found no difference
>> after forcing udev to name it eth0.

> This is the new kernel naming scheme of NICs.  Which-ever nomenclature you
> decide to use, check that that's the only one having a symlink in /etc/init.d
> to net.lo

Yes, there is only enp2s15 links to lo in /etc/init.d

> try leaving only your router's local_network_IP in [your /etc/conf.d/net file]

After deleting all but my lan router DNS from /etc/conf.d/net and
/etc/resolv.conf
files, I had the same problem as before but in addition the host
utility reports an
additional error. Please, see the full response below.

# host www.google.com
www.google.com has address 74.125.232.52
www.google.com has address 74.125.232.48
www.google.com has address 74.125.232.49
www.google.com has address 74.125.232.50
www.google.com has address 74.125.232.51
;; Warning: query response not set
;; Warning: query response not set
Host www.google.com not found: 4(NOTIMP)

After leaving in /etc/conf.d/net and /etc/resolv.conf files only the
DNS of my service
provider, Firefox started to work as predicted. Thank you!

> Can you please show us:
> ip route show
> ip addr show
> ip link show

$ ip route show
default via 192.168.0.1 dev enp2s15  metric 2
127.0.0.0/8 via 127.0.0.1 dev lo  scope link
192.168.0.0/24 dev enp2s15  proto kernel  scope link  src 192.168.0.9
$ ip addr show
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
   valid_lft forever preferred_lft forever
2: enp2s15:  mtu 1500 qdisc
pfifo_fast state UP qlen 1000
link/ether  brd ff:ff:ff:ff:ff:ff
inet 192.168.0.7/24 brd 192.168.0.255 scope global enp2s15
inet6 /64 scope link
   valid_lft forever preferred_lft forever
3: sit0:  mtu 1480 qdisc noop state DOWN
link/sit 0.0.0.0 brd 0.0.0.0
$ ip link show
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN
mode DEFAULT
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp2s15:  mtu 1500 qdisc
pfifo_fast state UP mode DEFAULT qlen 1000
link/ether  brd ff:ff:ff:ff:ff:ff
3: sit0:  mtu 1480 qdisc noop state DOWN mode DEFAULT
link/sit 0.0.0.0 brd 0.0.0.0

Suggestions of Kurian Thayil

> Can you do a ping and see if the resolv.conf DNS ips are reachable?

Yes, I can ping all my DNS. Moreover, I successfully use them from my
Ubuntu installation on the same computer.

> do a
> dig @8.8.8.8 www.google.com ## which will do a name resolution with Google 
> DNS servers.

Here is the output:

$ dig @8.8.8.8 www.google.co

; <<>> DiG 9.9.2 <<>> @8.8.8.8 www.google.co
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4036
;

Re: [gentoo-user] Browsers cannot access WWW while ping and host utilities work as expected.

[gevisz]

I somehow missed this post, so excuse me for the late reply.

2013/8/5 Mick :
> On Monday 05 Aug 2013 07:06:08 gevisz wrote:
>> My thanks to all who replied to my question.
>>
>> The problem was with my local router, which I also used as DNS.
>> After excluding it from /etc/resolv.config and /etc/init.d/net files,
>> Firefox started to work as expected.
>
> Hmm ... I wonder if this is related to my earlier comment about malformed
> packets.

Somewhere, you hinted that the problem may be with the routers and
suggested to experiment with it.

Before that, I strongly believed that, if I listed 3 different routers in my
resolv.conf, the system should proceed with the next router if something
is wrong with the previous one, but unfortunately it did not.

The response of the first router contained an error that prevented all the
other applications to use it, the system knew about it (for example from
the output of the host utility) but, nevertheless did not proceeded with
the next router listed in resolv.conf.

I do undersand that this may be because of the layered structure of the
networked software. But, nevertheless, I think that something is fundamentally
wrong with this.

Once more, thank you for your help.

A few following remarks are minor and so, you can stop your reading here.

> May be worth trying a different firmware for this router.

I have already changed the firmware after purchasing it but now I cannot afford
it as I need its uninterupted functioning.

>> Suggestions of  Michael Kintzios
>
>> > This is the new kernel naming scheme of NICs.  Which-ever nomenclature
>> > you decide to use, check that that's the only one having a symlink in
>> > /etc/init.d to net.lo
>>
>> Yes, there is only enp2s15 links to lo in /etc/init.d
>
> The idea here is that you need consistent naming of your iface.  If you have
> settled on the kernel naming of enp2s15, then stick with this throughout your
> configuration.

Yes, I did.

>> After deleting all but my lan router DNS from /etc/conf.d/net and
>> /etc/resolv.conf files, I had the same problem as before but,
>> in addition, the host utility reports an additional error. Please,
>> see the full response below.
>
> You should not need to manually alter anything in your /etc/resolv.conf,
> which will be completed with the DNS server name(s) you have set up
> in your /etc/conf.d/net.

Actually, I changed it in both files simultaneously, but -- as I have already
explained it above, yes, I should not do it but had to. :^)

>> # host www.google.com
>> www.google.com has address 74.125.232.52
>> www.google.com has address 74.125.232.48
>> www.google.com has address 74.125.232.49
>> www.google.com has address 74.125.232.50
>> www.google.com has address 74.125.232.51
>> ;; Warning: query response not set
>> ;; Warning: query response not set
>
> I think this means that the DNS server response is incorrectly formed (or that
> the server respond code does not include a 4 bit RCODE as it should - more
> detail for DNS geeks can be found here:  http://www.ietf.org/rfc/rfc2136.txt)

Thank you, for the referrence. I will study it later.

>> Host www.google.com not found: 4(NOTIMP)
>
> The RFC says:  The name server does not support the specified Opcode.
> I would reflash the firmware, or try any OpenSource alternatives if available
> for your router.

It is a small router device. I have already changed its firmware after
purchasing it
to a newer one. I do not know if its open source alternative exists and, anyway,
I cannot change it now because I cannot afford any interruption of the
router functioning.

>> After leaving in /etc/conf.d/net and /etc/resolv.conf files only the
>> DNS of my service provider, Firefox started to work as predicted. Thank you!
>
> This may not be ideal (it will introduce some latency in your requests) but if
> you can't fix your router, it'll have to do for now.
>
>
>> > Can you please show us:
>> > ip route show
>> > ip addr show
>> > ip link show
>>
>> $ ip route show
>> default via 192.168.0.1 dev enp2s15  metric 2
>> 127.0.0.0/8 via 127.0.0.1 dev lo  scope link
>> 192.168.0.0/24 dev enp2s15  proto kernel  scope link  src 192.168.0.9
>
> This says that your IP address us 192.168.0.9, but see below.
>
>
>> $ ip addr show
> [snip ...]
>
>> 2: enp2s15:  mtu 1500 qdisc
>> pfifo_fast state UP qlen 1000
>> link/ether  brd ff:ff:ff:ff:ff:ff
>> inet 192.168.0.7/24 brd 192.168.0.255 scope global enp2s15
>
> This says that your ip address is 192.168.0.7 - did you get a different IP
> address between the two commands?  Your /etc/conf.d/net showed that you had
> set u

Re: [gentoo-user] Browsers cannot access WWW while ping and host utilities work as expected.

[gevisz]

2013/8/12 Alan McKinnon :
> On 12/08/2013 09:13, gevisz wrote:
>> The response of the first router contained an error that prevented all the
>> other applications to use it, the system knew about it (for example from
>> the output of the host utility) but, nevertheless did not proceeded with
>> the next router listed in resolv.conf.
>>
>> I do undersand that this may be because of the layered structure of the
>> networked software. But, nevertheless, I think that something is 
>> fundamentally
>> wrong with this.
>
> What kind of error did you get?

As I have already wrote it earlier, with three different DNS in
/etc/resolv.conf and /etc/conf.d/net files, the host utility correctly
reported IP address of a site (eg, www.google.com) but added
the following message:
;; Warning: query response not set

With only the first (my local DNS) in /etc/resolv.conf and
/etc/conf.d/net files,
the output of the host utility was as follows:

# host www.google.com
www.google.com has address 74.125.232.52
www.google.com has address 74.125.232.48
www.google.com has address 74.125.232.49
www.google.com has address 74.125.232.50
www.google.com has address 74.125.232.51
;; Warning: query response not set
;; Warning: query response not set
Host www.google.com not found: 4(NOTIMP)

In both cases above no internet application (eg, links or firefox)
could convert site names to IP adresses and only after deleting
the first (local) DNS from /etc/resolv.conf and /etc/conf.d/net files,
internet applications started to work as expected (and the host
utility, in this case, returned no error or warning message)

That have proved to myself that

 "The response of the first router contained an error
   that prevented all the other applications to use it,
   the system knew about it (for example from
   the output of the host utility) but, nevertheless,
   did not proceeded with the next router listed in
   resolv.conf [or /etc/conf.d/net].
   I do undersand that this may be because of
   the layered structure of the networked software.
   But, nevertheless, I think that something is fundamentally
   wrong with this."

> If complete garbage came back, I'm not sure what the resolver does with
> that (oddly enough, I never tested that)
>
> The more usual case is you get a proper DNS result of NXDOMAIN which
> indicates the query is valid, but the entry is not in DNS. It's
> pointless trying another cache as per DNS, they should all then return
> that result.
>
> This is why the router did not try the other entries in resolv.conf -
> that usually only happens when a cache does not respond. So the
> behaviour you saw is probably correct albeit not the behaviour you wanted.
>
>
> --
> Alan McKinnon
> alan.mckin...@gmail.com
>
>

[gentoo-user] Deficient Gnome Window Frames

[gevisz]

Usually, when I open a new window frame in Gnome 2, I have a Close,
Maximize/Restore and Minimize buttons on its upper-right corner.

Sometimes, however, especially when I open a supplementary window frame
from a running program, its upper (text) bar contains only the Close button
with no possibility to maximize the window frame to the whole screen, and
it is extremely inconvenient.

I do remember that I had a similar problem in Gnome 2 under Ubuntu but
somehow managed to get to the configuration where almost all my windows had
Maximize/Restore and Minimize buttons. The only exception was the Firefox
sub-window to save a bookmark. :^(

Just now, I have tries FXCE and found out that it opens all the sub-windows
with the Maximize/Restore, Close and Minimize buttons "out of the box" and
without recompilation of all the programs that do not do the same in Gnome
(except for the Firefox bookmark sub-window, of course).

However, I am reluctant to migrate to FXCE right now because at the moment
I cannot achieve the same look-and-feel as in my Gnome (especially, I miss
the the all-in-one clock-calendar-weather applet with the world map showing
the daytime at different locations).

Could anybody advise me how to get the Close, Maximize/Restore and Minimize
buttons in all window frames in Gnome 2.

Thank you.

Re: [gentoo-user] Deficient Gnome Window Frames

[gevisz]

2013/9/5 Alan McKinnon 

> On 05/09/2013 14:51, gevisz wrote:
> > Usually, when I open a new window frame in Gnome 2, I have a Close,
> > Maximize/Restore and Minimize buttons on its upper-right corner.
> >
> > Sometimes, however, especially when I open a supplementary window frame
> > from a running program, its upper (text) bar contains only the Close
> > button with no possibility to maximize the window frame to the whole
> > screen, and it is extremely inconvenient.
> >
> > I do remember that I had a similar problem in Gnome 2 under Ubuntu but
> > somehow managed to get to the configuration where almost all my windows
> > had Maximize/Restore and Minimize buttons. The only exception was the
> > Firefox sub-window to save a bookmark. :^(
> >
> > Just now, I have tries FXCE and found out that it opens all the
> > sub-windows with the Maximize/Restore, Close and Minimize buttons "out
> > of the box" and without recompilation of all the programs that do not do
> > the same in Gnome (except for the Firefox bookmark sub-window, of
> course).
> >
> > However, I am reluctant to migrate to FXCE right now because at the
> > moment I cannot achieve the same look-and-feel as in my Gnome
> > (especially, I miss the the all-in-one clock-calendar-weather applet
> > with the world map showing the daytime at different locations).
> >
> > Could anybody advise me how to get the Close, Maximize/Restore and
> > Minimize buttons in all window frames in Gnome 2.
>
>
> I think the true answer is
>
> "You can't. The Gnome devs know better than you what you want"
>
> I'm happy to be proved wrong though.
>
> If it bothers you, just migrate to XFCE and deal with the pain. It will
> last only a short time.
>
> Alan McKinnon alan.mckin...@gmail.com
>
>
Currently, Gnome works better than Xfce for me, because so far

1)  I found no way to switch keyboard layout from English to any other
 language (while Gnome and DWM do this after tackling with evdev
 configs),

2) Gnome allows more combinations for hot key bindings, for example,
 I can not assign ++ to any program launcher
 in Fxce, while it does work in Gnome,

3) installing Orange in FXCE involves unmasking some dependent
packages, but I like to stick to the stable thread.

All in all, I do understand why Linus said that Xfce is a step back
compared to Gnome 2
(but I still have not got why Xfce is a big step forward compared with
Gnome 3 :^), as
have not tried it so far).

P.S. I will probably post a separate question, but if somebody can
explain how to setup language keyboad layout switch in Fxce,
you are welcome. :^)

I set up toggling the keyboard layout to  key in
   /usr/share/X11/xorg.conf.d/10-evdev.conf as follows:

   Option "XkbOptions"
"grp:rwin_toggle,grp_led:scroll,compose:menu,terminate:ctrl_alt_bksp"

   It works for  Gnome and DWM but not for Xfce. :^(

   Moreover, I need the keyboard layout indicator somewhere on the Xfce
panel,
   but could not find any.

Re: [gentoo-user] No mailer for Gentoo???

[gevisz]

2013/9/6 Jarry 

> On 06-Sep-13 18:56, Alan McKinnon wrote:
>
>> On 06/09/2013 18:21, Canek Peláez Valdés wrote:
>>
>>> On Fri, Sep 6, 2013 at 11:14 AM, Canek Peláez Valdés 
>>> wrote:
>>>
 On Fri, Sep 6, 2013 at 10:51 AM, Jarry  wrote:

> On 06-Sep-13 17:32, Michael Orlitzky wrote:
>
>>
>> On 09/06/2013 11:23 AM, Jarry wrote:
>>
>>>

 It wasn't part of @system before, you just removed the thing that
 pulled
 it in.

>>>
>>>
>>> No I did not. mail-mta/ssmtp was part of stage3. And I did not
>>> remove now any "thing" that pulled it in. All I did was
>>> "emerge --ask --update --deep --newuse world".
>>>
>>> As a result, python-exec, python-argparse and libxml2 were
>>> reinstalled and automake-wrapper, gtk-doc-am, eselect and
>>> linux-header updated. Nothing else.
>>>
>>> After that I did "emerge --depclean" and the above mentioned
>>> packages were suddenly removed...
>>>
>>>
>> It could be that a package's deps were updated to no longer include
>> virtual/mta. But it was never part of @system, you can check for
>> yourself:
>>
>>
>> http://sources.gentoo.org/cgi-**bin/viewvc.cgi/gentoo-x86/**
>> profiles/base/packages?view=**log
>>
>
>
> Then something got broken because I have packages installed
> that need mailer (i.e. app-admin/monit or sys-fs/mdadm are
> configured to send emails). And these packages do not have
> "mail" use-flag, because their maintainers apparently expect
> standard *nix mailer (/usr/bin/sendmail) exists on the system...
>
> So now I have "stable" system, updated to the latest level,
> where a lot of things suddenly do not work. This should *never*
> happen! If it was some package's dep that caused it, it's clear
> this change was premature...
>

 I think is a bug in the packages. In my system the only package that
 pulls vitual/mta (and therefore ssmtp) is vixie-cron.

>>>
>>> The change happened in the cron eclass:
>>>
>>> http://sources.gentoo.org/cgi-**bin/viewvc.cgi/gentoo-x86/**
>>> eclass/cron.eclass?r1=1.15&r2=**1.16
>>>
>>>  From the commit log: "Per extensive discussion with zmedico about
>>> removing the need for package.provided, several packages have been
>>> changed, like sudo, to not explicitly require an mta. Cron will
>>> follow, leaving mta support optional."
>>>
>>> The rationale (I suppose) is that the programs in question still work,
>>> just the sending of emails fails.
>>>
>>> Good riddance, if you ask me. If you need/want an MTA, just install
>>> ssmtp by hand.
>>>
>>
>>
>> Agreed. It's a bit daft relying on a cron daemon to be the only package
>> pulling in a mailer. One can't even argue that it makes sense as a
>> default - cron merely has this feature to notify the root user if a cron
>> job wrote something to STDOUT.
>>
>> That's a notification. It is not an absolute need to have sendmail.
>>
>> If you want a syslogger, install a syslogger.
>> If you want a print server, install a print server.
>> Likewise, if you want a mailer, install one.
>>
>
> If I want syslog-support, I add "syslog" to USE.
> If I want ssl-support, I add "ssl" to USE.
> If I want perl-support, I add "perl" to USE.
> If I want mta-support, I add... wait, no! I can not add "mta"
> to USE, I have to install mta manually...
>
> Got the picture now?


The gnome USE does not install Gnome for you.

Sorry for that.


>
>
> Jarry
> --
> __**__**___
> This mailbox accepts e-mails only from selected mailing-lists!
> Everything else is considered to be spam and therefore deleted.
>
>

Re: [gentoo-user] Deficient Gnome Window Frames

[gevisz]

2013/9/6 gevisz 

>
> 2013/9/5 Alan McKinnon 
>
>> On 05/09/2013 14:51, gevisz wrote:
>> > Usually, when I open a new window frame in Gnome 2, I have a Close,
>> > Maximize/Restore and Minimize buttons on its upper-right corner.
>> >
>> > Sometimes, however, especially when I open a supplementary window frame
>> > from a running program, its upper (text) bar contains only the Close
>> > button with no possibility to maximize the window frame to the whole
>> > screen, and it is extremely inconvenient.
>> >
>> > I do remember that I had a similar problem in Gnome 2 under Ubuntu but
>> > somehow managed to get to the configuration where almost all my windows
>> > had Maximize/Restore and Minimize buttons. The only exception was the
>> > Firefox sub-window to save a bookmark. :^(
>> >
>> > Just now, I have tries FXCE and found out that it opens all the
>> > sub-windows with the Maximize/Restore, Close and Minimize buttons "out
>> > of the box" and without recompilation of all the programs that do not do
>> > the same in Gnome (except for the Firefox bookmark sub-window, of
>> course).
>> >
>> > However, I am reluctant to migrate to FXCE right now because at the
>> > moment I cannot achieve the same look-and-feel as in my Gnome
>> > (especially, I miss the the all-in-one clock-calendar-weather applet
>> > with the world map showing the daytime at different locations).
>> >
>> > Could anybody advise me how to get the Close, Maximize/Restore and
>> > Minimize buttons in all window frames in Gnome 2.
>>
>>
>> I think the true answer is
>>
>> "You can't. The Gnome devs know better than you what you want"
>>
>> I'm happy to be proved wrong though.
>>
>> If it bothers you, just migrate to XFCE and deal with the pain. It will
>> last only a short time.
>>
>> Alan McKinnon alan.mckin...@gmail.com
>>
>>
> Currently, Gnome works better than Xfce for me, because so far
>
> 1)  I found no way to switch keyboard layout from English to any other
>  language (while Gnome and DWM do this after tackling with evdev
>  configs),
>
> 2) Gnome allows more combinations for hot key bindings, for example,
>  I can not assign ++ to any program launcher
>  in Fxce, while it does work in Gnome,
>
> 3) installing Orange in FXCE involves unmasking some dependent
> packages, but I like to stick to the stable thread.
>
> All in all, I do understand why Linus said that Xfce is a step back
> compared to Gnome 2
> (but I still have not got why Xfce is a big step forward compared with
> Gnome 3 :^), as
> have not tried it so far).
>
> P.S. I will probably post a separate question, but if somebody can
> explain how to setup language keyboad layout switch in Fxce,
> you are welcome. :^)
>
> I set up toggling the keyboard layout to  key in
>/usr/share/X11/xorg.conf.d/10-evdev.conf as follows:
>
>Option "XkbOptions"
> "grp:rwin_toggle,grp_led:scroll,compose:menu,terminate:ctrl_alt_bksp"
>
>It works for  Gnome and DWM but not for Xfce. :^(
>
>Moreover, I need the keyboard layout indicator somewhere on the
> Xfce panel,
>but could not find any.
>
>
A short update: after installing xfce4-xkb-plugin, which was not included
in the xfce4-meta package
(and I did not noticed it earlier), I finally got a keyboard layout
indicator. At first, it did not work, that is,
I could not switch a keyboard layout in no way. However, later, after
changing some of the plugin's
settings, it suddenly started to switch the keyboard layout. Interestingly,
the applet continued to switch
the keyboard layout even after I have changed all its settings to the
original ones. Magically, the 
key also started to switch the keyboard layout.

So, my first and most important objection against Xfce4 is no more valid.
The third one is not
so important. Only the second is a bit annoying but one can live with it.
:^)

Now, my Xfce4 looks almost like my Gnome2. Its weather applet is even more
informative. :^)

However, my original question about Deficient Gnome Window Frames is still
valid.

But not so important any more. :^)

Re: [gentoo-user] Deficient Gnome Window Frames

[gevisz]

2013/9/6 Canek Peláez Valdés 

> On Fri, Sep 6, 2013 at 1:55 PM, gevisz  wrote:
> > 2013/9/6 gevisz 
> >>
> >>
> >> 2013/9/5 Alan McKinnon 
> >>>
> >>> On 05/09/2013 14:51, gevisz wrote:
> >>> > Usually, when I open a new window frame in Gnome 2, I have a Close,
> >>> > Maximize/Restore and Minimize buttons on its upper-right corner.
> >>> >
> >>> > Sometimes, however, especially when I open a supplementary window
> frame
> >>> > from a running program, its upper (text) bar contains only the Close
> >>> > button with no possibility to maximize the window frame to the whole
> >>> > screen, and it is extremely inconvenient.
> >>> >
> >>> > I do remember that I had a similar problem in Gnome 2 under Ubuntu
> but
> >>> > somehow managed to get to the configuration where almost all my
> windows
> >>> > had Maximize/Restore and Minimize buttons. The only exception was the
> >>> > Firefox sub-window to save a bookmark. :^(
> >>> >
> >>> > Just now, I have tries FXCE and found out that it opens all the
> >>> > sub-windows with the Maximize/Restore, Close and Minimize buttons
> "out
> >>> > of the box" and without recompilation of all the programs that do not
> >>> > do
> >>> > the same in Gnome (except for the Firefox bookmark sub-window, of
> >>> > course).
> >>> >
> >>> > However, I am reluctant to migrate to FXCE right now because at the
> >>> > moment I cannot achieve the same look-and-feel as in my Gnome
> >>> > (especially, I miss the the all-in-one clock-calendar-weather applet
> >>> > with the world map showing the daytime at different locations).
> >>> >
> >>> > Could anybody advise me how to get the Close, Maximize/Restore and
> >>> > Minimize buttons in all window frames in Gnome 2.
> >>>
> >>>
> >>> I think the true answer is
> >>>
> >>> "You can't. The Gnome devs know better than you what you want"
> >>>
> >>> I'm happy to be proved wrong though.
> >>>
> >>> If it bothers you, just migrate to XFCE and deal with the pain. It will
> >>> last only a short time.
> >>>
> >>> Alan McKinnon alan.mckin...@gmail.com
> >>>
> >>
> >> Currently, Gnome works better than Xfce for me, because so far
> >>
> >> 1)  I found no way to switch keyboard layout from English to any other
> >>  language (while Gnome and DWM do this after tackling with evdev
> >>  configs),
> >>
> >> 2) Gnome allows more combinations for hot key bindings, for example,
> >>  I can not assign ++ to any program launcher
> >>  in Fxce, while it does work in Gnome,
> >>
> >> 3) installing Orange in FXCE involves unmasking some dependent
> >> packages, but I like to stick to the stable thread.
> >>
> >> All in all, I do understand why Linus said that Xfce is a step back
> >> compared to Gnome 2
> >> (but I still have not got why Xfce is a big step forward compared with
> >> Gnome 3 :^), as
> >> have not tried it so far).
> >>
> >> P.S. I will probably post a separate question, but if somebody can
> >> explain how to setup language keyboad layout switch in Fxce,
> >> you are welcome. :^)
> >>
> >> I set up toggling the keyboard layout to  key in
> >>/usr/share/X11/xorg.conf.d/10-evdev.conf as follows:
> >>
> >>Option "XkbOptions"
> >> "grp:rwin_toggle,grp_led:scroll,compose:menu,terminate:ctrl_alt_bksp"
> >>
> >>It works for  Gnome and DWM but not for Xfce. :^(
> >>
> >>Moreover, I need the keyboard layout indicator somewhere on the
> >> Xfce panel,
> >>but could not find any.
> >>
> >
> > A short update: after installing xfce4-xkb-plugin, which was not
> included in
> > the xfce4-meta package
> > (and I did not noticed it earlier), I finally got a keyboard layout
> > indicator. At first, it did not work, that is,
> > I could not switch a keyboard layout in no way. However, later, after
> > changing some of the plugin's
> > settings, it suddenly started to switch the keyboard layout.
> Interestingly,
> > the apple

Re: [gentoo-user] Deficient Gnome Window Frames

[gevisz]

2013/9/6 Alan McKinnon 

> On 06/09/2013 20:55, gevisz wrote:
> > 2013/9/6 gevisz mailto:gev...@gmail.com>>
> >
> >
> > 2013/9/5 Alan McKinnon  > <mailto:alan.mckin...@gmail.com>>
> >
> > On 05/09/2013 14:51, gevisz wrote:
> > > Usually, when I open a new window frame in Gnome 2, I have a
> > Close,
> > > Maximize/Restore and Minimize buttons on its upper-right
> corner.
> > >
> > > Sometimes, however, especially when I open a supplementary
> > window frame
> > > from a running program, its upper (text) bar contains only the
> > Close
> > > button with no possibility to maximize the window frame to the
> > whole
> > > screen, and it is extremely inconvenient.
> > >
> > > I do remember that I had a similar problem in Gnome 2 under
> > Ubuntu but
> > > somehow managed to get to the configuration where almost all
> > my windows
> > > had Maximize/Restore and Minimize buttons. The only exception
> > was the
> > > Firefox sub-window to save a bookmark. :^(
> > >
> > > Just now, I have tries FXCE and found out that it opens all the
> > > sub-windows with the Maximize/Restore, Close and Minimize
> > buttons "out
> > > of the box" and without recompilation of all the programs that
> > do not do
> > > the same in Gnome (except for the Firefox bookmark sub-window,
> > of course).
> > >
> > > However, I am reluctant to migrate to FXCE right now because
> > at the
> > > moment I cannot achieve the same look-and-feel as in my Gnome
> > > (especially, I miss the the all-in-one clock-calendar-weather
> > applet
> > > with the world map showing the daytime at different locations).
> > >
> > > Could anybody advise me how to get the Close, Maximize/Restore
> and
> > > Minimize buttons in all window frames in Gnome 2.
> >
> >
> > I think the true answer is
> >
> > "You can't. The Gnome devs know better than you what you want"
> >
> > I'm happy to be proved wrong though.
> >
> > If it bothers you, just migrate to XFCE and deal with the pain.
> > It will
> > last only a short time.
> >
> > Alan McKinnon alan.mckin...@gmail.com
> > <mailto:alan.mckin...@gmail.com>
> >
> >
> > Currently, Gnome works better than Xfce for me, because so far
> >
> > 1)  I found no way to switch keyboard layout from English to any
> other
> >  language (while Gnome and DWM do this after tackling with evdev
> >  configs),
> >
> > 2) Gnome allows more combinations for hot key bindings, for example,
> >  I can not assign ++ to any program
> launcher
> >  in Fxce, while it does work in Gnome,
> >
> > 3) installing Orange in FXCE involves unmasking some dependent
> > packages, but I like to stick to the stable thread.
> >
> > All in all, I do understand why Linus said that Xfce is a step back
> > compared to Gnome 2
> > (but I still have not got why Xfce is a big step forward compared
> > with Gnome 3 :^), as
> > have not tried it so far).
> >
> > P.S. I will probably post a separate question, but if somebody can
> > explain how to setup language keyboad layout switch in Fxce,
> > you are welcome. :^)
> >
> > I set up toggling the keyboard layout to  key in
> >/usr/share/X11/xorg.conf.d/10-evdev.conf as follows:
> >
> >Option "XkbOptions"
> > "grp:rwin_toggle,grp_led:scroll,compose:menu,terminate:ctrl_alt_bksp"
> >
> >It works for  Gnome and DWM but not for Xfce. :^(
> >
> >Moreover, I need the keyboard layout indicator somewhere on
> > the Xfce panel,
> >but could not find any.
> >
> >
> > A short update: after installing xfce4-xkb-plugin, which was not
> > included in the xfce4-meta package
> > (and I did not noticed it earlier), I finally got a keyboard layout
> > indicator. At first, it did not work, that is,
> > I could not switch a keyboard layou

Re: [gentoo-user] Deficient Gnome Window Frames

[gevisz]

2013/9/7 Marc Stürmer 

> Am 06.09.2013 21:47, schrieb Paul Hartman:
>
>  On Fri, Sep 6, 2013 at 2:28 PM, gevisz  wrote:
>>
>>> But I have not found MATE in portage...
>>>
>>
>> I see there is a mate overlay available in layman
>>
>
> layman -a mate
>

Thank you for the hint.

I still have to learn how to use overlays...

... because I still need an omegaT (that is absent from portage)
and Skype (that is masked).

Is it safe to use packages from overlays?

Is there any ways to cleanly uninstall packages installed from overlays?


>
> GNOME 2.X is been dead since a few years. They went to develop that ugly
> beast they call GNOME 3.
>
> MATE is the proven and working fork of GNOME 2.X. If you want GNOME 2.X,
> then you should take a look at it indeed.
>
>
>

[gentoo-user] Switching off a long list of USE flags

[gevisz]

I would like to build sane-backend only for one specific scanner.

However, there are a huge lot of different USE flags for other scanners
that are already switched on by default.

Is there any easy way to switch them off?

Something like:

  media-gfx/sane-backends -sane_backends* sane_backends_hp

Exactly that way does not work, but may be something like that...

...instead of directly switching off every one of them.

Re: [gentoo-user] Switching off a long list of USE flags

[gevisz]

2013/9/19 Wang Xuerui 

> 2013/9/19 gevisz :
> > I would like to build sane-backend only for one specific scanner.
> >
> > However, there are a huge lot of different USE flags for other scanners
> > that are already switched on by default.
> >
> > Is there any easy way to switch them off?
> >
> > Something like:
> >
> >   media-gfx/sane-backends -sane_backends* sane_backends_hp
> >
> > Exactly that way does not work, but may be something like that...
> >
> > ...instead of directly switching off every one of them.
>
> According to the Package Manager Specification, the variable should
> not be incremental, i.e. any value set would override *any* defaults
> or previously set values. So just do SANE_BACKENDS="xxx" in your
> make.conf, same as what you'd do for VIDEO_CARDS and the like.
>
> Hope it helps :)
>

Yes,

SANE_BACKENDS="hp"

works,

SANE_BACKENDS="+hp3500"

does not.

Thank you for all who replied.

Re: [gentoo-user] gentoo announces total website makeover :-)

[Gevisz]

On Wed, 1 Apr 2015 02:46:39 +0300 Andrew Savchenko  wrote:

> On Wed, 1 Apr 2015 01:37:06 +0200 waben...@gmail.com wrote:
> > This really made my day. :-)
> > 
> > https://www.gentoo.org/news/2015/03/31/website-update.html
> 
> The best design ever! So nice and readable font, so yummy
> background, very fast page load.

It did not load from the first try for me.

Than it take some time to load from the second attempt.

A really awful blue background.

The quote from the site:

“We accept that members in more fortunate circumstances may feel
that a site with a 16-colour palette and an optimal screen resolution
 of 640 x 200 pixels is not the best fit for their needs but we urge
such members to keep the greater good in mind. The vast majority of
potential new Gentoo Linux users are still using IBM XT computers,
storing their information on 5.25-inch floppy disks and communicating
via dial-up BBS,” said Roy Bamford (neddyseagoon), a Foundation trustee.

Oh, my God! I really hope that it is the 1 April joke.

> Many thanks for Web project team for hard work!
> 
> As for the Phase II, are there any plans for 8" floppy support or
> only 5.25" devices are targeted?

"The second phase of the project to get Gentoo Linux to a wider user
base will involve the creation of floppy disk sets containing a compact
version of the operating system and a selection of software essentials.
It is estimated that sets could be created using less than 700 disks
each and sponsorship is currently being sought."

Well, probably, it is.

> Best regards,
> Andrew Savchenko

Re: [gentoo-user] [OT] Strange behaviour of google certificates.

[Gevisz]

On Wed, 1 Apr 2015 23:41:55 +0200 Mickaël Bucas  wrote:

> 2015-04-01 19:19 GMT+02:00 Gevisz :
Correction: 
This question does *not* specifically relates to Gentoo distribution
> > but, as far as I have not subscribed to any other mailing list,
> > I dare to ask it here.
> >
> > So, I am using Claws Mail that downloads e-mails from several
> > google mail accounts (all are mine :) and about once or twice
> > in a month get into the situation when Claws asks me to verify
> > and change the google certificates, first in one direction and
> > soon after that (usually during the next downloading of my e-mails)
> > - in another.

Actually it does it for every gmail account and at different times.
So, yesterday, I "veryfied" google certificates *a lot* of times.

> > The situation is illustrated by the 2 message screenshots that are
> > attached to this e-mail.
> >
> > The strange thing for me is that, first, the Claws asks me to verify
> > and accept a newer certificate complaing that the old one is in some
> > aspect "bad", and soon after that it complains about a newer certificate
> > and asks me to verify and and accept the older one.
> >
> > I suspect that it is google that makes something wrong here.
> >
> > What do you think?
> 
> Hi Gevisz
> 
> I had a similar behavior with another tools : offlineimap
> It seems that Google changes certificates very often and/or uses
> different certificates on different connections

Probably, but why they do it?

> For offlineimap, the solution is to use an option to check certificates :
> sslcacertfile = /etc/ssl/certs/ca-certificates.crt
> 
> Maybe there is an option to do the same in Claws Mail.
> I found "Bug 2199 - Claws doesn't propery verify certification chain"
> [1] which affected a GMail user.
> It's fixed, so you may find what's been done.
> 
> Best regards
> 
> Mickaël Bucas
> 
> [1] http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2199

Thank you for the link. I will study it later, in the evening.

Re: [gentoo-user] [OT] Strange behaviour of google certificates.

[Gevisz]

On Thu, 2 Apr 2015 04:17:40 +0200  wrote:

> Gevisz  wrote:
> 
> > This question does specifically relates to Gentoo distribution
> > but, as far as I have not subscribed to any other mailing list,
> > I dare to ask it here.
> > 
> > So, I am using Claws Mail that downloads e-mails from several
> > google mail accounts (all are mine :) and about once or twice
> > in a month get into the situation when Claws asks me to verify
> > and change the google certificates, first in one direction and
> > soon after that (usually during the next downloading of my e-mails)
> > - in another.
> > 
> > The situation is illustrated by the 2 message screenshots that are
> > attached to this e-mail.
> > 
> > The strange thing for me is that, first, the Claws asks me to verify
> > and accept a newer certificate complaing that the old one is in some
> > aspect "bad", and soon after that it complains about a newer
> > certificate and asks me to verify and and accept the older one.
> > 
> > I suspect that it is google that makes something wrong here.
> > 
> > What do you think?
> 
> Im using fetchmail on a separate server to receive my mail. I had to
> deactivate fetchmails ssl fingerprint checks for my google accounts,
> because the certificates are changing frequently. I don't know the
> reason for these changes but as I use my google accounts only for some
> mailing lists and because I'm a lazy guy I don't care much about that
> and never done a research.

Thank you for the reply. So, I am not alone. :)

> But please tell me if you find out the reason. :-)

Ok, but I am far not an expert on networking. 

Re: [gentoo-user] [OT] Strange behaviour of google certificates.

[Gevisz]

On Thu, 2 Apr 2015 03:52:40 -0400 "Walter Dnes"  wrote:

> On Wed, Apr 01, 2015 at 08:19:45PM +0300, Gevisz wrote
> 
> > So, I am using Claws Mail that downloads e-mails from several
> > google mail accounts (all are mine :) and about once or twice
> > in a month get into the situation when Claws asks me to verify
> > and change the google certificates, first in one direction and
> > soon after that (usually during the next downloading of my e-mails)
> > - in another.
> > 
> > The situation is illustrated by the 2 message screenshots that are
> > attached to this e-mail.
> > 
> > The strange thing for me is that, first, the Claws asks me to verify
> > and accept a newer certificate complaing that the old one is in some
> > aspect "bad", and soon after that it complains about a newer
> > certificate and asks me to verify and and accept the older one.
> > 
> > I suspect that it is google that makes something wrong here.
> > 
> > What do you think?
> 
>   The same question came up on the local linux user group here in
> Toronto.  Apparently "pop.gnail.com" is actually 2 servers...
> 
> [d531][waltdnes][~] nslookup pop.gmail.com
> Server: 206.248.154.170
> Address:206.248.154.170#53
> 
> Non-authoritative answer:
> pop.gmail.com   canonical name = gmail-pop.l.google.com.
> Name:   gmail-pop.l.google.com
> Address: 173.194.192.108
> Name:   gmail-pop.l.google.com
> Address: 173.194.192.109
> 
>   The 2 servers probably have different certificates, which is why you
> get this behaviour.  I suggest going into "apk mode" and putting an
> entry into your hosts file , like...
> 
> 173.194.192.108 pop.gmail.com
> 
>   This will force your system to always use the same server, and avoid
> the re-validation every time you hit the other server from the one you
> used the previous time.

Thank you for your advice. Added that line to my /etc/hosts file.
After that Claws asked to verify the google certificate once again,
but I hope that that was the last time this month and that that madness
with google certificates finally ends. (Because in the last 2 days this
situation repeated at least 20 or more times.)

Re: [gentoo-user] [OT] Strange behaviour of google certificates.

[Gevisz]

On Fri, 3 Apr 2015 08:26:12 +0200 bitlord  wrote:

> On Thu, 2 Apr 2015 11:57:26 +0300
> Gevisz  wrote:
> 
> > On Thu, 2 Apr 2015 03:52:40 -0400 "Walter Dnes"
> >  wrote:
> > 
> > > On Wed, Apr 01, 2015 at 08:19:45PM +0300, Gevisz wrote
> > > 
> > > > So, I am using Claws Mail that downloads e-mails from several
> > > > google mail accounts (all are mine :) and about once or twice
> > > > in a month get into the situation when Claws asks me to verify
> > > > and change the google certificates, first in one direction and
> > > > soon after that (usually during the next downloading of my
> > > > e-mails)
> > > > - in another.
> > > > 
> ...
> > > 
> > >   The 2 servers probably have different certificates, which is why
> > > you get this behaviour.  I suggest going into "apk mode" and
> > > putting an entry into your hosts file , like...
> > > 
> > > 173.194.192.108 pop.gmail.com
> > > 
> > >   This will force your system to always use the same server, and
> > > avoid the re-validation every time you hit the other server from
> > > the one you used the previous time.
> > 
> > Thank you for your advice. Added that line to my /etc/hosts file.
> > After that Claws asked to verify the google certificate once again,
> > but I hope that that was the last time this month and that that
> > madness with google certificates finally ends. (Because in the last 2
> > days this situation repeated at least 20 or more times.)
> > 
> > 
> By looking at the screenshoots that is >=claws-mail-3.10.x (I think
> that is the version when it got support for validating certificate
> chains)? There is a option in Configuration > Edit Accounts ... then
> for every account you have "SSL" options, you can check to accept
> "unknown valid certificates" so it will do it automatically, won't ask
> if there is a new certificate and it is valid. 

Thank you for your advice but I do not want to accept certificates
unverified and automatically and do not mind verifying a new goggle
certificate once a month or so. However, I do not want to see a madness
when my e-mail client asks me to verify the certificates that I have
already verified over and over again (as described above).

Sticking to only one gmail server, as advised by Walter,
so far solved the problem.

I write "so far" because there is a (very small) probability that
the madness ended by itself (because usually it took place not always
but at some periods when one gmail server already switched to a new
certificate and another one still uses the old certificate, I guess).

So, I have to wait one or two months (until they start to switch to
even more new certificate) to see how my e-mail client will react. 

Re: [gentoo-user] Re: [OT] Strange behaviour of google certificates.

[Gevisz]

On Thu, 2 Apr 2015 15:57:20 + (UTC) James  wrote:

> Walter Dnes  waltdnes.org> writes:
> 
> 
> > > So, I am using Claws Mail that downloads e-mails from several
> > > google mail accounts (all are mine :) and about once or twice
> > > in a month get into the situation when Claws asks me to verify
> > > and change the google certificates, first in one direction and
> > > soon after that (usually during the next downloading of my e-mails)
> > > - in another.
> 
> > > I suspect that it is google that makes something wrong here.
> > > What do you think?
> 
> >   The 2 servers probably have different certificates, which is why you
> > get this behaviour.  I suggest going into "apk mode" and putting an
> > entry into your hosts file , like...
> 
> > 173.194.192.108 pop.gmail.com
> 
> >   This will force your system to always use the same server, and avoid
> > the re-validation every time you hit the other server from the one you
> > used the previous time.
> 
> 
> Clusters & Clouds are

the cause of problems. :)

But thank you for the links. I will look at them later.

> the sort answer. Everybody (big) is now racing to
> deploy services; often as if a single IP or dns record or domain name,
> yet underneath is a cluster of many, many machines. The security is,
> well, let's just say evolving to be kind. I have no idea about your
> particular situation; but I've been reading up on cluster and cloud
> for months now, so here are a few links you might find interesting.
> Hopefully that illuminate that services that are traditionally single
> machine bound, are now on top of clusters of machines; and that is
> a hack-a-day-patch-away scenario that is very fast moving. YMMV [1,2,3].
> 
> 
> Mesos is the cluster technology that I follow (or at least try to).
> I'm trying to get a full set of codes and mesos into the portage tree.
> If nothing else, folks can use (3+) old machines to build a cluster
> to see where we are all moving to (clouds and cluster), like it or not,
> imho.
> 
> 
> hth,
> James
> 
> [1] https://mesosphere.github.io/mesos-dns/docs/tutorial-gce.html
> 
> [2] https://github.com/mesosphere/mesos-dns
> 
> [3] https://github.com/Banno/vagrant-mesos
> 
> [4]
> http://radar.oreilly.com/2014/01/apache-mesos-open-source-datacenter-computing.html
> 
> 
> 
> 
> 

[gentoo-user] runscript is deprecated; please use openrc-run instead

[Gevisz]

Quite for a long time, while booting my Gentoo system,
I get the following message message:

"runscript is deprecated; please use openrc-run instead"

What shall I do to fix this issue accept for reinstallig
my Gentoo system anew?
 

Re: [gentoo-user] runscript is deprecated; please use openrc-run instead

[Gevisz]

On Sun, 12 Apr 2015 13:04:40 +0200 Alan McKinnon  
wrote:

> On 12/04/2015 12:48, Gevisz wrote:
> > Quite for a long time, while booting my Gentoo system,
> > I get the following message message:
> > 
> > "runscript is deprecated; please use openrc-run instead"
> > 
> > What shall I do to fix this issue accept for reinstallig
> > my Gentoo system anew?
> >  
> 
> Do nothing.

Thank you for your answer but why that message appear at all, then?

> runscript is the shebang for init scripts for various services,
> runscript and openrc-run are both provided by openrc.

Sorry, but I do not understand the word "shebang" in this context.

> Any change to be made is done by the ebuild.

Well, it is a good news for me. :)

> p.s. when asking for help please provide relevant information, such as
> do you run a satble or unstable system,

I mostly run stable system and have only two unstable packages, namely,
vimb and google-chrome. Hopefully, they do not influence booting in any way. :)

> what versions of related software are installed

sys-apps/openrc-0.13.11

> and most important - what effect if any does the problem have?

So far, no noticeable effects accept for the warning message above.

> I can't tell if your system boots normally or if it blows
> up and eats your kittens.

Shall I wait for that to happen before starting to worry? :)