Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Fabian Groffen
On 13-02-2013 02:15:48 +0100, Jeroen Roovers wrote: On Tue, 12 Feb 2013 17:07:33 -0800 Alec Warner anta...@gentoo.org wrote: On Tue, Feb 12, 2013 at 5:05 PM, Jeroen Roovers j...@gentoo.org wrote: On Wed, 13 Feb 2013 01:47:34 +0100 Jeroen Roovers j...@gentoo.org wrote: It would

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Ben de Groot
On 13 February 2013 15:07, Michael Weber x...@gentoo.org wrote: On 02/13/2013 12:28 AM, Robin H. Johnson wrote: On Wed, Feb 13, 2013 at 12:12:35AM +0100, Michael Weber wrote: On 02/12/2013 10:14 PM, William Hubbs wrote: If you have any questions on this, please feel free to let us know. What

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Christopher Head schrieb: Most external firmware is not needed to boot. If you need it to boot, you will have to stow it in the initramfs. For those of us who prefer monolithic kernels, virtually all firmware is needed to boot. Even if a network interface doesn't need to be operational for

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Markos Chandras
On 12 February 2013 23:28, Robin H. Johnson robb...@gentoo.org wrote: IMHO the answer to these questions is not obvious nor given by (our) docu [1]. I'm pretty sure it was in the devrel developer handbook at one point, along with instructions to create your key, but I can't find it now. This

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 11:55 AM, Markos Chandras wrote: http://www.gentoo.org/doc/en/gnupg-user.xml still no hint what to do on expiration (as every single other gpg howto). -- Michael Weber Gentoo Developer web: https://xmw.de/ mailto: Michael Weber x...@gentoo.org

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Rick Zero_Chaos Farina schrieb: atmel-firmware ipw2100-firmware ipw2200-firmware b43-firmware b43legacy-firmware rtl8192su-firmware zd1201-firmware zd1211-firmware None of these are blockers on linux-firmware, none of these are included in linux firmware, none of these should be masked with

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Sergei Trofimovich schrieb: The source of confusion was non-working device by default. Maybe 'IUSE=+firmware; RDEPEND=firmware? ( sys-kernel/linux-firmware )' for virtual/linux-sources would help user experience a bit. +1 https://bugs.gentoo.org/457082 Instead of USE defaults, this could be

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Maxim Kammerer schrieb: Having 300 -firmware packages is silly. I agree, but think that the process can be more user-friendly than a savedconfig — perhaps a variable as was suggested already. As the developer who came up with the savedconfig implementation, I am the first one to admit that it

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Rick Zero_Chaos Farina schrieb: Having 300 -firmware packages is silly. I can't help but noticing that some of the recently introduced iwlwifi firmware packages came from Chromium OS. So there seems to be interest in individual packages from downstreams over the linux-firmware package. Best

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 14:39, Chí-Thanh Christopher Nguyễn wrote: I can't help but noticing that some of the recently introduced iwlwifi firmware packages came from Chromium OS. So there seems to be interest in individual packages from downstreams over the linux-firmware package. I would suppose the

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 14:38, Chí-Thanh Christopher Nguyễn wrote: https://bugs.gentoo.org/457082 Instead of USE defaults, this could be turned on in the desktop profile as wifi, radeon cards etc. are less likely to be present on non-desktop systems. IIRC some server systems need ethernet cards'

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Diego Elio Pettenò schrieb: On 13/02/2013 14:38, Chí-Thanh Christopher Nguyễn wrote: https://bugs.gentoo.org/457082 Instead of USE defaults, this could be turned on in the desktop profile as wifi, radeon cards etc. are less likely to be present on non-desktop systems. IIRC some server

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 15:50, Chí-Thanh Christopher Nguyễn wrote: Indeed. Firmware is also needed for some RAID controllers. I imagine that users of the default profile are more likely to not need hand-holding here and more likely to want a lean system by default. But I have no strong opinion either

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Alec Warner
On Wed, Feb 13, 2013 at 5:39 AM, Chí-Thanh Christopher Nguyễn chith...@gentoo.org wrote: Rick Zero_Chaos Farina schrieb: Having 300 -firmware packages is silly. I can't help but noticing that some of the recently introduced iwlwifi firmware packages came from Chromium OS. So there seems to be

Re: [gentoo-dev] [RFC/PATCH] A cleaner API for virtualx.eclass

2013-02-13 Thread Gilles Dartiguelongue
Le lundi 11 février 2013 à 23:48 +0100, Diego Elio Pettenò a écrit : I'd say, Go for it! But on the other hand I wonder if it might make sense to have something more generic, so that one only has to call something in a way such as virtualx_setup run_tests --foo virtualx_cleanup This

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Aaron W. Swenson
On Wed, Feb 13, 2013 at 01:20:39PM +0100, Michael Weber wrote: On 02/13/2013 11:55 AM, Markos Chandras wrote: http://www.gentoo.org/doc/en/gnupg-user.xml still no hint what to do on expiration (as every single other gpg howto). It depends. What do you want to do when it expires? If you

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Markos Chandras
On 13 February 2013 15:31, Aaron W. Swenson titanof...@gentoo.org wrote: On Wed, Feb 13, 2013 at 01:20:39PM +0100, Michael Weber wrote: On 02/13/2013 11:55 AM, Markos Chandras wrote: http://www.gentoo.org/doc/en/gnupg-user.xml still no hint what to do on expiration (as every single other

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Thomas Sachau
Michael Weber schrieb: On 02/12/2013 10:14 PM, William Hubbs wrote: as preparation for the up-coming cvs-git migration of the portage tree, the council is strongly suggesting that from this point forward all developers sign their manifests with their gpg key as described in the developer's

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Denis Dupeyron
On Wed, Feb 13, 2013 at 8:31 AM, Aaron W. Swenson titanof...@gentoo.org wrote: This information, by the way, has been blogged about thousands of times. There is a reason people write documentation. Contrary to blog posts, documentation is thought out, reviewed, maintained and corrected when

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Eray Aslan
On Wed, Feb 13, 2013 at 09:35:56AM -0700, Denis Dupeyron wrote: If you want people to handle security properly you have to tell them how to. In details. If not everybody will figure it out in his or her own way, all of them wrong. Get off your high horse and write documentation if you know how

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Aaron W. Swenson
On Wed, Feb 13, 2013 at 09:35:56AM -0700, Denis Dupeyron wrote: On Wed, Feb 13, 2013 at 8:31 AM, Aaron W. Swenson titanof...@gentoo.org wrote: This information, by the way, has been blogged about thousands of times. There is a reason people write documentation. Contrary to blog posts,

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Peter Stuge
Diego Elio Pettenò wrote: People who don't need the firmware can deal with disabling it themselves. I don't like the binary distribution argument of include everything to cover as many possible use cases as possible in one go. I very much like the high resolution of Gentoo packages. I'd hate to

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 18:33, Peter Stuge wrote: I don't like the binary distribution argument of include everything to cover as many possible use cases as possible in one go. I very much like the high resolution of Gentoo packages. I'd hate to enter a slippery slope toward lower resolution. Are you

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Paweł Hajdan, Jr.
On 2/13/13 12:28 AM, Robin H. Johnson wrote: On Wed, Feb 13, 2013 at 12:12:35AM +0100, Michael Weber wrote: What is the rotation strategy for (near) outdated keys? Alter the key or create a new one? Sign the new with the old one? If your keysize is still good, you should ideally update the

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 18:46, Paweł Hajdan, Jr. wrote: What is considered a good key size these days? As far as I can tell, 2048 rsa should be still fine. Just drop DSA and anything 1024 I would suggest. -- Diego Elio Pettenò — Flameeyes flamee...@flameeyes.eu — http://blog.flameeyes.eu/

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Peter Stuge
Diego Elio Pettenò wrote: I don't like the binary distribution argument of include everything to cover as many possible use cases as possible in one go. I very much like the high resolution of Gentoo packages. I'd hate to enter a slippery slope toward lower resolution. Are you really

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Eray Aslan
On Wed, Feb 13, 2013 at 05:22:14PM +, Aaron W. Swenson wrote: I agree. This is officially documented by GnuPG. [1] That would be the best source to use. It details everything one needs to do to manage a key pair. Good luck having people find and read it. Similar to (or perhaps linking to)

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Aaron W. Swenson
On Wed, Feb 13, 2013 at 07:58:30PM +0200, Eray Aslan wrote: On Wed, Feb 13, 2013 at 05:22:14PM +, Aaron W. Swenson wrote: I agree. This is officially documented by GnuPG. [1] That would be the best source to use. It details everything one needs to do to manage a key pair. Good luck

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Peter Stuge schrieb: Kernel -sources USE is a handy way to install linux-firmware wholesale, but AIUI the standalone firmware packages would be removed too, effectively making the USE flag non-optional, and removing the possibility of having managed firmware packages. (People would have to

[gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Michael Sterrett
# Michael Sterrett mr_bon...@gentoo.org (13 Feb 2013) # No longer licensed for sale upstream. # Masked for removal on 20130315. games-strategy/x2 games-strategy/x2-demo

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/13/2013 06:22 PM, Aaron W. Swenson wrote: There's nothing Gentoo specific about it. I don't see why we would need to officially document an official document. The most we should do is point people to the resource. So, please link to this

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Florian Philipp
Am 13.02.2013 20:19, schrieb Michael Sterrett: # Michael Sterrett mr_bon...@gentoo.org (13 Feb 2013) # No longer licensed for sale upstream. # Masked for removal on 20130315. games-strategy/x2 games-strategy/x2-demo Sure, I cannot buy it anymore. But what about people who already own it

[gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Agostino Sarubbo
On Tuesday 12 February 2013 15:14:15 William Hubbs wrote: All, as preparation for the up-coming cvs-git migration of the portage tree, the council is strongly suggesting that from this point forward all developers sign their manifests with their gpg key as described in the developer's

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Peter Stuge
Agostino Sarubbo wrote: I'm using ssh -A to forward the key and I'm interested to find a way to do it for the gpg key. I found an how-to that uses socat ( http://superuser.com/questions/161973/how- can-i-forward-a-gpg-key-via-ssh-agent ) but does not work as expected. Did you debug? Rather

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 09:07 PM, Agostino Sarubbo wrote: As most of us do, I do the commit from another machine, not mine. So, for ssh I'm using ssh -A to forward the key and I'm interested to find a way to do it for the gpg key. I found an how-to that uses socat (

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 09:23 PM, Peter Stuge wrote: Rather than creating a TCP socket I would look into using the ssh -W option. gpg agent works with unix domain sockets. -- Michael Weber Gentoo Developer web: https://xmw.de/ mailto: Michael Weber x...@gentoo.org

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Peter Stuge
Michael Weber wrote: Rather than creating a TCP socket I would look into using the ssh -W option. gpg agent works with unix domain sockets. I know. It would look something like socat + ssh -W socat //Peter

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 09:30 PM, Michael Weber wrote: GPG agents do not transport keys, just passphrases. To stress that, my passphrased key resides on my remote build-box, gpg just askes my local gpg agent for the passphrase. ssh -R /root/.gnupg/S.gpg-agent:/tmp/keyring-michael/gpg b-4 with a

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Brian Dolbec
On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: Am 13.02.2013 20:19, schrieb Michael Sterrett: # Michael Sterrett mr_bon...@gentoo.org (13 Feb 2013) # No longer licensed for sale upstream. # Masked for removal on 20130315. games-strategy/x2 games-strategy/x2-demo Sure, I

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Florian Philipp
Am 14.02.2013 00:07, schrieb Brian Dolbec: On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: Am 13.02.2013 20:19, schrieb Michael Sterrett: # Michael Sterrett mr_bon...@gentoo.org (13 Feb 2013) # No longer licensed for sale upstream. # Masked for removal on 20130315.

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Alec Warner
On Wed, Feb 13, 2013 at 4:08 PM, Florian Philipp li...@binarywings.net wrote: Am 14.02.2013 00:07, schrieb Brian Dolbec: On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: Am 13.02.2013 20:19, schrieb Michael Sterrett: # Michael Sterrett mr_bon...@gentoo.org (13 Feb 2013) # No longer

Graveyard overlay (was: Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo)

2013-02-13 Thread Ben de Groot
On 14 February 2013 08:08, Florian Philipp li...@binarywings.net wrote: Am 14.02.2013 00:07, schrieb Brian Dolbec: Easy, just copy the ebuild and any patches in the files subdir to a local overlay. Which brings us back to the old discussion on what good it does for one person to do the

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Graham Murray
Peter Stuge pe...@stuge.se writes: Kernel -sources USE is a handy way to install linux-firmware wholesale, but AIUI the standalone firmware packages would be removed too, effectively making the USE flag non-optional, and removing the possibility of having managed firmware packages. (People

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Michał Górny
On Thu, 14 Feb 2013 01:08:35 +0100 Florian Philipp li...@binarywings.net wrote: Am 14.02.2013 00:07, schrieb Brian Dolbec: On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: Am 13.02.2013 20:19, schrieb Michael Sterrett: # Michael Sterrett mr_bon...@gentoo.org (13 Feb 2013) # No

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Michael Weber
U folks are aware of the fact that installed sources is rather vaguely coupled with running kernel, right? No, I'm not running archkernel on gentoo, but it would be possible. It's also fine to poke around in linus' sources and cross compile w/o ever running the damn thing or needing firmware from

Re: Graveyard overlay (was: Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo)

2013-02-13 Thread Michael Weber
On 02/14/2013 06:09 AM, Ben de Groot wrote: I need two things: 1. Users volunteering some time to keep this running 2. Agreement on a place to host tarballs no longer hosted upstream i'm all in. -- Michael Weber Gentoo Developer web: https://xmw.de/ mailto: Michael Weber x...@gentoo.org

Re: Graveyard overlay (was: Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo)

2013-02-13 Thread Florian Philipp
Am 14.02.2013 08:26, schrieb Michael Weber: On 02/14/2013 06:09 AM, Ben de Groot wrote: I need two things: 1. Users volunteering some time to keep this running 2. Agreement on a place to host tarballs no longer hosted upstream i'm all in. Me too. Having a central, semi-official place