[gentoo-user] Issues with AMD_IOMMU

[Adam Carter]

Tried kernels 4.10.13 and 4.11, with
CONFIG_GART_IOMMU=y
CONFIG_IOMMU_HELPER=y
CONFIG_IOMMU_API=y
CONFIG_IOMMU_SUPPORT=y
CONFIG_IOMMU_IOVA=y
CONFIG_AMD_IOMMU=y
CONFIG_AMD_IOMMU_V2=m
Chipset is 990FX, and AFAICT the V2 is for the APU (bdver3 and 4 vintage).

When I enable the IOMMU in the BIOS I get stack traces. Is anyone using
AMD_IOMMU successfully? If so, any tips?

Re: [gentoo-user] world rebuild with gcc-6.3.0 - not completely there yet

[Walter Dnes]

On Sat, May 13, 2017 at 10:21:19AM +0200, Helmut Jarausch wrote
> 
> I have switched to gcc-6.3.0 at the end of last year.
> I have (re-)compiled all my packages including icewm-1.3.12-r1.
> Everything works just fine.
> 
> I did have some segfaults (with gimp) until I recompiled each package  
> with gcc-6.3.0
> 
> I have
> CFLAGS="-mtune=native -O2 -msse3 -pipe -fPIC"
> 
> in /etc/portage/make.conf

  Why aren't you running "-march=native"?  You're probably missing quite
a few features of your cpu.  BTW, "-march=native" implies "-mtune=native"
and "-msse3" (if the cpu supports it).  Out of sheer curiousity, what
does gcc report as your native cpu when you run...

gcc -c -Q -march=native --help=target | grep march=

> and quite a e few
> CFLAGS="-O3 -mtune=native -pipe -msse -msse2 -msse3 -msse4a -m3dnow"
> (for my aged AMD64  Phenom II machine)
> 
> in /etc/portage/env/...

  "-O3"... yikes!  Not really recommended.  If you want speedup, use
"-march=native" instead.

  In make.conf, I have...

CFLAGS="-O2 -march=native -mfpmath=sse -fomit-frame-pointer -pipe 
-fno-unwind-tables -fno-asynchronous-unwind-tables"

  The 2 "unwind_tables" flags reduce code bloat.  See
http://comments.gmane.org/gmane.linux.busybox/36695 for details.  The
guys at busybox do what they can to reduce code bloat.  Knocking 15% off
the size of an executable or library helps.  This results in faster
loading at startup (less to load), and less stuff in ram cuts down on
swapping.

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications

Re: [gentoo-user] Re: replacement for ftp?

[R0b0t1]

On Wed, May 3, 2017 at 1:40 AM, Mick  wrote:
> On Monday 01 May 2017 22:36:00 Nils Freydank wrote:
>> On Sat, 30 Apr 2017 19:04:06 +0200 Andrew Savchenko wrote:
>> > [...]
>> > I fail to see why FTP needs to be replaced: it works, it is
>> > supported, it is secure when used with care, it is damn fast.
>>
>> I’ll just drop the somewhat popular rant “FTP must die“[1] and a follow-up
>> discussion about it[2]. IMHO the main reasons are missing data integrity and
>> authentication security issues. The latter one can be solved with FTPS[3] -
>> but honestly I never saw FTPS somewhere actually used in the wild.
>
> I'm not sure what you mean "used in the wild".  I use lftp to connect via ftps
> with a number of webservers for updates and backups on a daily basis.  Some of
> the connections are scripted.
>
>
>> [1] http://mywiki.wooledge.org/FtpMustDie
>> [2] https://news.ycombinator.com/item?id=11251907
>> [3] i.e. FTP over SSL/TLS (not to mix up with SFTP, which comes from the SSH
>> family)
>>
>> Greetings,
>> Nils
>

That was an interesting read. The only RFC as bad as FTP's that I know
of might be IRC's.


On Sat, May 13, 2017 at 8:48 PM, lee  wrote:
> Kai Krakow  writes:
>
>> Am Sat, 29 Apr 2017 20:30:03 +0100
>> schrieb lee :
>>
>>> Danny YUE  writes:
>>>
>>> > On 2017-04-25 14:29, lee  wrote:
>>> >> Hi,
>>> >>
>>> >> since the usage of FTP seems to be declining, what is a replacement
>>> >> which is at least as good as FTP?
>>> >>
>>> >> I'm aware that there's webdav, but that's very awkward to use and
>>> >> missing features.
>>> >
>>> > What about sshfs? It allows you to mount a location that can be
>>> > accessed via ssh to your local file system, as if you are using
>>> > ssh.
>>>
>>> Doesn't that require ssh access?  And how do you explain that to ppl
>>> finding it too difficult to use Filezilla?  Is it available for
>>> Windoze?
>>
>> Both, sshfs and scp, require a full shell (that may be restricted but
>> that involves configuration overhead on the server side).
>
> I wouldn't want them to have that.
>
>> You can use sftp (FTP wrapped into SSH), which is built into SSH. It
>> has native support in many Windows clients (most implementations use
>> PuTTY in the background). It also has the advantage that you can
>> easily restrict users on your system to SFTP-only with an easy
>> server-side configuration.
>
> From what I've been reading, sftp is deprecated and has been replaced by
> ftp with TLS.
>
>>> > Also samba can be a replacement. I have a samba server on my OpenWRT
>>> > router and use mount.cifs to mount it...
>>>
>>> Does that work well, reliably and securely over internet connections?
>>
>> It supports encryption as transport security, and it supports kerberos
>> for secure authentication, the latter is not easy to setup in Linux,
>> but it should work with Windows clients out-of-the-box.
>>
>> But samba is a pretty complex daemon and thus offers a big attack
>> surface for hackers and bots. I'm not sure you want to expose this to
>> the internet without some sort of firewall in place to restrict access
>> to specific clients - and that probably wouldn't work for your scenario.
>
> At least it's a possibility.  I don't even know if they have static IPs,
> though.
>
>> But you could offer access via OpenVPN and tunnel samba through that.
>
> I haven't been able yet to figure out what implications creating a VPN
> has.  I understand it's supposed to connect networks through a secured
> tunnel, but what kind of access to the LAN does someone get who connects
> via VPN?  Besides, VPN is extremely complicated and difficult to set
> up.  I consider it an awful nightmare.
>
> Wireguard seems a lot easier.
>

I had some problems setting up OpenVPN that were solved by using
per-client public keys. That seems to be the best supported
configuration (as well as the most secure). Windows-side using
OpenVPN-GUI is very easy.

OpenVPN tends to have poor bandwidth due to overhead, but that may be
in large part due to my connection.

>> By that time, you can as easily offer FTP, too, through the tunnel
>> only, as there should be no more security concerns now: It's encrypted
>> now.
>
> The ftp server already doesn't allow unencrypted connections.
>
> Now try to explain to ppl for whom Filezilla is too complicated how to
> set up a VPN connection and how to secure their LAN once they create the
> connection (if we could ever get that to work).  I haven't been able to
> figure that out myself, and that is one of the main reasons why I do not
> have a VPN connection but use ssh instead.  The only disadvantage is
> that I can't do RDP sessions with that ---  I probably could and just
> don't know how to --- but things might be a lot easier if wireguard
> works.
>
>> OpenVPN also offers transparent compression which can be a big
>> plus for your scenario.
>
> Not really, a lot of data 

Re: [gentoo-user] [OT] Tux AWOL

[Stroller]

> On 13 May 2017, at 09:46, Jorge Almeida  wrote:
> 
> In case someone is using kernel 4.11: I tried it and everything seems
> fine, except that the linux logo on the boot screen (i.e. tty1) is
> gone. It was there before (with 4.10.9), and I used make oldconfig.

Using `make oldconfig` isn't enough to diagnose - you need to establish whether 
the option is enabled.

On my system:

$ uname -r
4.9.4-gentoo
$ zgrep -i logo /proc/config.gz
CONFIG_LOGO=y
# CONFIG_LOGO_LINUX_MONO is not set
# CONFIG_LOGO_LINUX_VGA16 is not set
CONFIG_LOGO_LINUX_CLUT224=y
$

You can check to see if the options have changed in `make menuconfig`.

Stroller.

Re: [gentoo-user] Pseudo first impressions

[lee]

Daniel Frey  writes:

> On 04/29/2017 06:23 PM, lee wrote:
>> Daniel Frey  writes:
>>> Do a --depclean and that will resolve itself.
>> 
>> Last time I tried that, it wanted to remove the source of the kernel I'm
>> using, along with other things.  It would have made sense if I had
>> upgraded the kernel, too, but I didn't have the time to do that yet.
>> 
>> 
>
> It will only remove things that it deems not needed. Usually these are
> packages that have just been upgraded.

Yes, the sources wouldn't be needed if I had upgraded the kernel.  Still
one might expect it to figure out which kernel is in use and to not try
to delete it --- that would make some sense.

> For kernel sources, tell portage to not remove it:
>
> `emerge --noreplace sys-kernel/gentoo-sources:4.4.52`
>
> as an example.
>
> If you do that, --depclean will not remove the sources for 4.4.52 (as an
> example.)

Thanks, I couldn't find an option like this.

It worked --- now some time when I do upgrade the kernel, I somehow need
to remove these sources from the world list, I guess ...


-- 
"Didn't work" is an error.

Re: [gentoo-user] Re: replacement for ftp?

[lee]

Kai Krakow  writes:

> Am Sat, 29 Apr 2017 20:38:24 +0100
> schrieb lee :
>
>> Kai Krakow  writes:
>> 
>> > Am Tue, 25 Apr 2017 15:29:18 +0100
>> > schrieb lee :
>> >  
>> >> since the usage of FTP seems to be declining, what is a replacement
>> >> which is at least as good as FTP?
>> >> 
>> >> I'm aware that there's webdav, but that's very awkward to use and
>> >> missing features.  
>> >
>> > If you want to sync files between two sites, try rsync. It is
>> > supported through ssh also. Plus, it's very fast also.  
>> 
>> Yes, I'm using it mostly for backups/copies.
>> 
>> The problem is that ftp is ideal for the purpose, yet users find it
>> too difficult to use, and nobody uses it.  So there must be something
>> else as good or better which is easier to use and which ppl do use.
>
> Well, I don't see how FTP is declining, except that it is unencrypted.
> You can still use FTP with TLS handshaking, most sites should support
> it these days but almost none forces correct certificates because it is
> usually implemented wrong on the server side (by giving you
> ftp.yourdomain.tld as the hostname instead of ftp.hostingprovider.tld
> which the TLS cert has been issued for). That makes it rather pointless
> to use. In linux, lftp is one of the few FTP clients supporting TLS
> out-of-the-box by default, plus it forces correct certificates.

These certificates are a very stupid thing.  They are utterly
complicated, you have to self-sign them which produces warnings, and
they require to have the host name within them as if the host wasn't
known by several different names.

> But I found FTP being extra slow on small files, that's why I suggested
> to use rsync instead. That means, where you could use sftp (ssh+ftp),
> you can usually also use ssh+rsync which is faster.

That requires shell access.

What do you consider "small files"?  I haven't observed a slowdown like
that, but I haven't been looking for it, either.

> There's also the mirror command in lftp, which can be pretty fast, too,
> on incremental updates but still much slower than rsync.
>
>> I don't see how they would transfer files without ftp when ftp is the
>> ideal solution.
>
> You simply don't. FTP is still there and used. If you see something
> like "sftp" (ssh+ftp, not ftp+ssl which I would refer to as ftps), this
> is usually only ftp wrapped into ssh for security reasons. It just
> using ftp through a tunnel, but to the core it's the ftp protocol. In
> the end, it's not much different to scp, as ftp is really just only a
> special shell with some special commands to setup a file transfer
> channel that's not prone to interact with terminal escape sequences in
> whatever way those may be implemented, something that e.g. rzsz needs
> to work around.
>
> In the early BBS days, where you couldn't establish a second transfer
> channel like FTP does it using TCP, you had to send special escape
> sequences to put the terminal into file transfer mode, and then send
> the file. By that time, you used rzsz from the remote shell to initiate
> a file transfer. This is more the idea of how scp implements a file
> transfer behind the scenes.

IIRC, I used xmodem or something like that back then, and rzsz never
worked.

> FTP also added some nice features like site-to-site transfers where the
> data endpoints both are on remote sites, and your local site only is
> the control channel. This directly transfers data from one remote site
> to another without going through your local connection (which may be
> slow due to the dial-up nature of most customer internet connections).

Interesting, I didn't know that.  How do you do that?

> Also, FTP is able to stream multiple files in a single connection for
> transferring many small files, by using tar as the transport protocol,
> thus reducing the overhead of establishing a new connection per file.
> Apparently, I know only few clients that support that, and even fewer
> servers which that would with.
>
> FTP can be pretty powerful, as you see. It's just victim of its poor
> implementation in most FTP clients that makes you feel it's mostly
> declined. If wrapped into a more secure tunnel (TLS, ssh), FTP is still
> a very good choice for transferring files, tho not the most efficient.
> Depending on your use case, you get away much better using more
> efficient protocols like rsync.

So there isn't a better solution than ftp.  That's good to know because
I can say there isn't a better solution, and if ppl don't want to use
it, they can send emails or DVDs.


-- 
"Didn't work" is an error.

Re: [gentoo-user] Re: replacement for ftp?

[lee]

Kai Krakow  writes:

> Am Sat, 29 Apr 2017 22:02:51 -0400
> schrieb "Walter Dnes" :
>
>>   Then there's always "sneakernet".  To quote Andrew Tanenbaum from
>> 1981
>> 
>> > Never underestimate the bandwidth of a station wagon full of tapes
>> > hurtling down the highway.  
>
> Hehe, with the improvements in internet connections nowadays, we
> almost stopped transferring backups via sneakernet. Calculating the
> transfer speed of the internet connection vs. the speed calculating
> miles per hour, internet almost always won lately. :-)
>
> Most internet connections are faster than even USB sticks these days.

Wow, you must be living in some sort of paradise.  Here, internet is
more like being cut off from the rest of the world.

But then, there's a manufacturer that makes incredibly slow USB sticks
which I won't buy anymore ...


-- 
"Didn't work" is an error.

Re: [gentoo-user] replacement for ftp?

[lee]

Alan McKinnon  writes:

> On 30/04/2017 03:11, lee wrote:
>> "Poison BL."  writes:
>> 
>>> On Sat, Apr 29, 2017 at 3:24 PM, lee  wrote:
>>>
 Mick  writes:

> On Tuesday 25 Apr 2017 16:45:37 Alan McKinnon wrote:
>> On 25/04/2017 16:29, lee wrote:
>>> Hi,
>>>
>>> since the usage of FTP seems to be declining, what is a replacement
>>> which is at least as good as FTP?
>>>
>>> I'm aware that there's webdav, but that's very awkward to use and
>>> missing features.
>>
>> Why not stick with ftp?
>> Or, put another way, why do you feel you need to use something else?
>>
>> There's always dropbox
>
>
> Invariably all web hosting ISPs offer ftp(s) for file upload/download.
 If you
> pay a bit more you should be able to get ssh/scp/sftp too.  Indeed, many
 ISPs
> throw in scp/sftp access as part of their basic package.
>
> Webdav(s) offers the same basic upload/download functionality, so I am
 not
> sure what you find awkward about it, although I'd rather use lftp
 instead of
> cadaver any day. ;-)
>
> As Alan mentioned, with JavaScript'ed web pages these days there are many
> webapp'ed ISP offerings like Dropbox and friends.
>
> What is the use case you have in mind?

 transferring large amounts of data and automatization in processing at
 least some of it, without involving a 3rd party

 "Large amounts" can be "small" like 100MB --- or over 50k files in 12GB,
 or even more.  The mirror feature of lftp is extremely useful for such
 things.

 I wouldn't ever want having to mess around with web pages to figure out
 how to do this.  Ftp is plain and simple.  So you see why I'm explicitly
 asking for a replacement which is at least as good as ftp.


 --
 "Didn't work" is an error.


>>> Half petabyte datasets aren't really something I'd personally *ever* trust
>>> ftp with in the first place.
>> 
>> Why not?  (12GB are nowhere close to half a petabyte ...)
>> 
>>> That said, it depends entirely on the network
>>> you're working with. Are you pushing this data in/out of the network your
>>> machines live in, or are you working primarily internally? If internal,
>>> what're the network side capabilities you have? Since you're likely already
>>> using something on the order of CEPH or Gluster to back the datasets where
>>> they sit, just working with it all across network from that storage would
>>> be my first instinct.
>> 
>> The data would come in from suppliers.  There isn't really anything
>> going on atm but fetching data once a month which can be like 100MB or
>> 12GB or more.  That's because ppl don't use ftp ...
>
> I have the opposite experience.
> I have the devil's own time trying to convince people to NOT use ftp for
> anything and everything under the sun that even remotely resembles
> getting data from A to B...

I guess you're lucky then.

> (especially things that are best done over a
> message bus)

Why would anyone try to transfer data over a message bus?  Doesn't that
require extra wiring and specialized hardware?

> I'm still not understanding why you are asking your questions. What you
> describe looks like the ideal case for ftp:

it is

Still nobody uses it, and apparently ftp usage is generally declining,
so I would expect there to be a better alternative.

>
> - supplier pushes a file or files somewhere
> - you fetch those files later at a suitable time
>
> it looks like a classic producer/consumer scenario and ftp or any of
> it's webby clones like dropbox really it still the best tool overall.
> Plus it has the added benefit that no user needs extra software - all
> OSes have ftp clients even if it's just a browser

The users don't know about that.


-- 
"Didn't work" is an error.

Re: [gentoo-user] replacement for ftp?

[lee]

"Poison BL."  writes:

> On Sat, Apr 29, 2017 at 9:11 PM, lee  wrote:
>>
>> "Poison BL."  writes:
>> > Half petabyte datasets aren't really something I'd personally *ever*
> trust
>> > ftp with in the first place.
>>
>> Why not?  (12GB are nowhere close to half a petabyte ...)
>
> Ah... I completely misread that "or over 50k files in 12GB" as 50k files
> *at* 12GB each... which works out to 0.6 PB, incidentally.
>
>> The data would come in from suppliers.  There isn't really anything
>> going on atm but fetching data once a month which can be like 100MB or
>> 12GB or more.  That's because ppl don't use ftp ...
>
> Really, if you're pulling it in from third party suppliers, you tend to be
> tied to what they offer as a method of pulling it from them (or them
> pushing it out to you), unless you're in the unique position to dictate the
> decision for them.

They need to use ftp to deliver the data, we need to use ftp to get the
data.  I don't want that any other way.

The problem is that the ones supposed to deliver data are incompetent
and don't want to use ftp because it's too complicated.  So what's the
better solution?


> [...]
>
>> > How often does it need moved in/out of your facility, and is there no
> way
>> > to break up the processing into smaller chunks than a 0.6PB mass of
> files?
>> > Distribute out the smaller pieces with rsync, scp, or the like, operate
> on
>> > them, and pull back in the results, rather than trying to shift around
> the
>> > entire set. There's a reason Amazon will send a physical truck to a
> site to
>> > import large datasets into glacier... ;)
>>
>> Amazon has trucks?  Perhaps they do in other countries.  Here, amazon is
>> just another web shop.  They might have some delivery vans, but I've
>> never seen one, so I doubt it.  And why would anyone give them their
>> data?  There's no telling what they would do with it.
>
> Amazon's also one of the best known cloud computing suppliers on the planet
> (AWS = Amazon Web Services). They have everything from pure compute
> offerings to cloud storage geared towards *large* data archival. The latter
> offering is named "glacier", and they offer a service for the import of
> data into it (usually the "first pass", incremental changes are generally
> done over the wire) that consists of a shipping truck with a rather nifty
> storage system in the back of it that they hook right into your network.
> You fill it with data, and then they drive it back to one of their data
> centers to load it into place.

They might not have that here.  And who would want to give their data
out of hands?


-- 
"Didn't work" is an error.

Re: [gentoo-user] Re: replacement for ftp?

[lee]

Kai Krakow  writes:

> Am Sat, 29 Apr 2017 20:30:03 +0100
> schrieb lee :
>
>> Danny YUE  writes:
>> 
>> > On 2017-04-25 14:29, lee  wrote:  
>> >> Hi,
>> >>
>> >> since the usage of FTP seems to be declining, what is a replacement
>> >> which is at least as good as FTP?
>> >>
>> >> I'm aware that there's webdav, but that's very awkward to use and
>> >> missing features.  
>> >
>> > What about sshfs? It allows you to mount a location that can be
>> > accessed via ssh to your local file system, as if you are using
>> > ssh.  
>> 
>> Doesn't that require ssh access?  And how do you explain that to ppl
>> finding it too difficult to use Filezilla?  Is it available for
>> Windoze?
>
> Both, sshfs and scp, require a full shell (that may be restricted but
> that involves configuration overhead on the server side).

I wouldn't want them to have that.

> You can use sftp (FTP wrapped into SSH), which is built into SSH. It
> has native support in many Windows clients (most implementations use
> PuTTY in the background). It also has the advantage that you can
> easily restrict users on your system to SFTP-only with an easy
> server-side configuration.

>From what I've been reading, sftp is deprecated and has been replaced by
ftp with TLS.

>> > Also samba can be a replacement. I have a samba server on my OpenWRT
>> > router and use mount.cifs to mount it...  
>> 
>> Does that work well, reliably and securely over internet connections?
>
> It supports encryption as transport security, and it supports kerberos
> for secure authentication, the latter is not easy to setup in Linux,
> but it should work with Windows clients out-of-the-box.
>
> But samba is a pretty complex daemon and thus offers a big attack
> surface for hackers and bots. I'm not sure you want to expose this to
> the internet without some sort of firewall in place to restrict access
> to specific clients - and that probably wouldn't work for your scenario.

At least it's a possibility.  I don't even know if they have static IPs,
though.

> But you could offer access via OpenVPN and tunnel samba through that.

I haven't been able yet to figure out what implications creating a VPN
has.  I understand it's supposed to connect networks through a secured
tunnel, but what kind of access to the LAN does someone get who connects
via VPN?  Besides, VPN is extremely complicated and difficult to set
up.  I consider it an awful nightmare.

Wireguard seems a lot easier.

> By that time, you can as easily offer FTP, too, through the tunnel
> only, as there should be no more security concerns now: It's encrypted
> now.

The ftp server already doesn't allow unencrypted connections.

Now try to explain to ppl for whom Filezilla is too complicated how to
set up a VPN connection and how to secure their LAN once they create the
connection (if we could ever get that to work).  I haven't been able to
figure that out myself, and that is one of the main reasons why I do not
have a VPN connection but use ssh instead.  The only disadvantage is
that I can't do RDP sessions with that ---  I probably could and just
don't know how to --- but things might be a lot easier if wireguard
works.

> OpenVPN also offers transparent compression which can be a big
> plus for your scenario.

Not really, a lot of data is images, usually JPEG, some ZIP files, some
PDF.  All that doesn't compress too well.

> OpenVPN is not too difficult to setup, and the client is available for
> all major OSes. And it's not too complicated to use: Open VPN
> connection, then use your file transfer client as you're used to. Just
> one simple extra step.

I'm finding it a horrible nightmare, see above.  It is the most
difficult thing you could come up with.  I haven't found any good
documentation that explains it, the different types of it, how it works,
what to use (apparently there are many different ways or something, some
of which require a static IP on both ends, and they even give you
different disadvantages in performance ...), how to protect the
participants and all the complicated stuff involved.  So far, I've
managed to stay away from it, and I wouldn't know where to start.  Of
course, there is some documentation, but it is all confusing and no
good.

The routers even support it.  In theory, it shouldn't be difficult to
set up, but that's only theory.  They do not have any documentation as
to how to protect the connected networks from each other.  I could
probably get it to work, but I wouldn't know what I'm doing, and I don't
like that.


I admit that I don't really want to know how VPN works because it's
merely an annoyance and not what I need.  What's needed is a simple,
encrypted connection between networks, and VPN is anything but that.

Wireguard sounds really simple.  Since I need to set up a VPN or
VPN-like connection sooner than later, I'm considering using it.


-- 
"Didn't work" is an error.

Re: [gentoo-user] replacement for ftp?

[lee]

"Walter Dnes"  writes:

>> transferring large amounts of data and automatization in processing at
>> least some of it, without involving a 3rd party
>> 
>> "Large amounts" can be "small" like 100MB --- or over 50k files in 12GB,
>> or even more.  The mirror feature of lftp is extremely useful for such
>> things.
>> 
>> I wouldn't ever want having to mess around with web pages to figure out
>> how to do this.  Ftp is plain and simple.  So you see why I'm explicitly
>> asking for a replacement which is at least as good as ftp.
>
>   How about "wget"?  It can handle ftp and http, and it can be scripted.

Explain to someone unable to use Filezilla how to do that ...

I'd have to look up if wget can do ftp with TLS.

> And it can discriminate on timestamps, i.e. only download a file if it
> has been changed since the latest download at your site.
>
>   Then there's always "sneakernet".  To quote Andrew Tanenbaum from 1981
>
>> Never underestimate the bandwidth of a station wagon full of tapes
>> hurtling down the highway.

Hm, I'll suggest that, thanks.  Ppl might be more likely to think they
should be able to burn DVDs and send them in the mail than they are to
think they could use something much simpler, easier, faster and more
secure, like ftp ...


-- 
"Didn't work" is an error.

Re: [gentoo-user] How to get memtest onto a USB drive

[lee]

Peter Humphrey  writes:

> Hello list,
>
> I have a nearly new machine which is already showing signs of hardware 
> failure. I'd like to check its memory, for which memtest86+ seems suitable. 
> But I can't install it via portage because this is a UEFI machine and so its 
> boot partition is vfat; the install phase fails because symbolic links can't 
> be done.
>
> I downloaded an ISO image from http://www.memtest.org/#downiso and used 
> unetbootin to write it to the USB. It won't boot. I then tried dd but got 
> the same result.
>
> What's the recommended way to put a bootable memtest86+ image, or 
> equivalent, on a USB stick?

dd if=image.iso of=/dev/sdX

... where /dev/sdX is the USB stick.  Make sure the stick isn't mounted,
and write to the stick itself, not to any partition that may be on it.

In some cases, the stick won't boot:  Use another stick, or try writing
the ISO again.


-- 
"Didn't work" is an error.

Re: [gentoo-user] Re: Pseudo first impressions

[lee]

Kai Krakow  writes:

> Am Sat, 29 Apr 2017 14:39:13 +
> schrieb Alan Mackenzie :
>
>> For a start, I could barely read parts of it, which were displayed in
>> dark blue text on a black background.  Setting
>> up /etc/portage/color.map is not the first thing a new user should
>> have to do to be able to read messages from emerge.  This is,
>> however, something I knew had to be done, and I did it.
>
> This is a problem with most terminal emulators having a much too dark
> "dark blue".

Gentoo is being designed by and for ppl using CRTs?


-- 
"Didn't work" is an error.

Re: [gentoo-user] Re: replacement for ftp?

[lee]

Kai Krakow  writes:

> Am Sat, 29 Apr 2017 20:02:57 +0100
> schrieb lee :
>
>> Alan McKinnon  writes:
>> 
>> > On 25/04/2017 16:29, lee wrote:  
>> >> 
>> >> Hi,
>> >> 
>> >> since the usage of FTP seems to be declining, what is a replacement
>> >> which is at least as good as FTP?
>> >> 
>> >> I'm aware that there's webdav, but that's very awkward to use and
>> >> missing features.
>> >> 
>> >>   
>> >
>> > Why not stick with ftp?  
>> 
>> The intended users are incompetent, hence it is too difficult to
>> use ...
>
> If you incompetent users are using Windows: Have you ever tried
> entering ftp://u...@yoursite.tld in the explorer directory input bar?

I tried at work and it said something like that the service cannot be
accessed.


> [...]
> Debian is not the king to rule the internet. You shouldn't care when
> they shut down their FTP services. It doesn't matter to the rest of the
> world using the internet.

Who can say what their influence actually is?  Imagine Debian going
away, and all the distributions depending on them as well because they
loose their packet sources, then what remains?  It is already rather
difficult to find a usable distribution, and what might the effect on
upstream sources be.

>> > There's always dropbox  
>> 
>> Well, dropbox sucks.  I got a dropbox link and it didn't work at all,
>> and handing out the data to some 3rd party is a very bad idea.  It's
>> also difficult to automate things with that.
>
> There's also owncloud (or whatever it is called now). You can automate
> things by deploying a sync application on your clients side.

The problem is that they would need to do that themselves.  It would be
much easier to show them how to use Filezilla ...


-- 
"Didn't work" is an error.

Re: [gentoo-user] replacement for ftp?

[lee]

Nils Freydank  writes:

> On Sat, 30 Apr 2017 19:04:06 +0200 Andrew Savchenko wrote:
>> [...]
>> I fail to see why FTP needs to be replaced: it works, it is
>> supported, it is secure when used with care, it is damn fast.
>
> I’ll just drop the somewhat popular rant “FTP must die“[1] and a follow-up
> discussion about it[2]. IMHO the main reasons are missing data integrity and
> authentication security issues. The latter one can be solved with FTPS[3] - 
> but honestly
> I never saw FTPS somewhere actually used in the wild.

I've done it that way because I didn't want unencrypted transfers and
sftp appears to be deprecated.  It's working fine, and I don't want to
replace it unless there were a better solution.


>
>
> [1] http://mywiki.wooledge.org/FtpMustDie
> [2] https://news.ycombinator.com/item?id=11251907
> [3] i.e. FTP over SSL/TLS (not to mix up with SFTP, which comes from the SSH 
> family)
>
> Greetings,
> Nils

-- 
"Didn't work" is an error.

Re: [gentoo-user] How do I turn off ansi (colour) codes in GCC 6.3.0 ?

[R0b0t1]

On Sat, May 13, 2017 at 7:50 PM, Miroslav Rovis
 wrote:
> On 170513-12:53-0500, R0b0t1 wrote:
>> On Sat, May 13, 2017 at 9:25 AM, Miroslav Rovis
>>  wrote:
>> > On 170510-20:03-0400, Walter Dnes wrote:
>> >> On Wed, May 10, 2017 at 01:35:24PM -0500, R0b0t1 wrote
>> >>
>> >> > The option is "-fdiagnostics-color=never" or "-fno-diagnostics-color".
>> >> > You can also set the environment variable GCC_COLORS to the empty
>> >> > string. The latter is probably more useful in the context of portage.
>> >>
>> >>   Thank you.  I successfully tried...
>> >>
>> >> GCC_COLORS="" emerge icewm
>> > Another tip to remember.
>> >
>> >>   I suppose the next step is to add GCC_COLORS="" to make.conf.
>> >>
>> > I wonder why sticking " --color=n" in the EMERGE_DEFAULT_OPTS in
>> > make.conf (e.g. mine is:
>> >
>> > EMERGE_DEFAULT_OPTS="--keep-going --with-bdeps=y --autounmask-keep-masks 
>> > --ask --verbose --color=n"
>> >
>> > does only partly its job. Erratically, I'd say. You never know if it
>> > will or not remove color... A bug should be posted for that, but I have
>> > a partly broken system at this time...
>> >
>>
>> That switch only handles the coloring of portage output. I suggested
>> using GCC_COLORS precisely because "--color=n" doesn't seem to
>> propagate to subcommands which do output coloring.
>>
>> Another program you might want to disable output coloring for is
>> CMake, using CMAKE_COLOR_MAKEFILE=OFF.
>>
>
> Thanks for the tip! But let me see... Like the above (repasting):
>> >> GCC_COLORS="" emerge icewm
> pr maybe stick in the /etc/portage/bashrc or in some other way?
>

As Walter suggested make.conf seems the ideal place. Should that fail
I'm not entirely sure, as I believe portage does some pretty heavy
environment sandboxing.

Re: [gentoo-user] How do I turn off ansi (colour) codes in GCC 6.3.0 ?

[Miroslav Rovis]

On 170513-12:53-0500, R0b0t1 wrote:
> On Sat, May 13, 2017 at 9:25 AM, Miroslav Rovis
>  wrote:
> > On 170510-20:03-0400, Walter Dnes wrote:
> >> On Wed, May 10, 2017 at 01:35:24PM -0500, R0b0t1 wrote
> >>
> >> > The option is "-fdiagnostics-color=never" or "-fno-diagnostics-color".
> >> > You can also set the environment variable GCC_COLORS to the empty
> >> > string. The latter is probably more useful in the context of portage.
> >>
> >>   Thank you.  I successfully tried...
> >>
> >> GCC_COLORS="" emerge icewm
> > Another tip to remember.
> >
> >>   I suppose the next step is to add GCC_COLORS="" to make.conf.
> >>
> > I wonder why sticking " --color=n" in the EMERGE_DEFAULT_OPTS in
> > make.conf (e.g. mine is:
> >
> > EMERGE_DEFAULT_OPTS="--keep-going --with-bdeps=y --autounmask-keep-masks 
> > --ask --verbose --color=n"
> >
> > does only partly its job. Erratically, I'd say. You never know if it
> > will or not remove color... A bug should be posted for that, but I have
> > a partly broken system at this time...
> >
> 
> That switch only handles the coloring of portage output. I suggested
> using GCC_COLORS precisely because "--color=n" doesn't seem to
> propagate to subcommands which do output coloring.
> 
> Another program you might want to disable output coloring for is
> CMake, using CMAKE_COLOR_MAKEFILE=OFF.
> 

Thanks for the tip! But let me see... Like the above (repasting):
> >> GCC_COLORS="" emerge icewm
pr maybe stick in the /etc/portage/bashrc or in some other way?

-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: Digital signature

Re: [gentoo-user] world rebuild with gcc-6.3.0 - not completely there yet

[Miroslav Rovis]

On 170513-17:25+0200, Helmut Jarausch wrote:
> On 05/13/2017 04:07:52 PM, Miroslav Rovis wrote:
> > On 170513-10:21+0200, Helmut Jarausch wrote:
> > > On 05/13/2017 05:56:16 AM, Walter Dnes wrote:
> > > > On Wed, May 10, 2017 at 08:38:56PM -0400, Walter Dnes wrote
> > > > >   "Walter's Excellent Adventure Continues"... Now that I've got  
> > ICEWM
> > > > > built, I'm trying to start X.  I copied over my ~/.icewm  
> > cirectory,
> > ...
> > > > > cursor... for half a second or so.  Then X exits immediately.  I
> > ...
> > > >   This message is coming to you from an almost entirely GCC 6.3.0
> > > > machine.  I had to build ICEWM with GCC 5.4.0 to stop it  
> > segfaulting.
> > > > The rest of Gentoo, including ICEWM's dependancies, is built with  
> > GCC
> > > > 6.3.0.
> > > >
> > >
> > > I have switched to gcc-6.3.0 at the end of last year.
> > > I have (re-)compiled all my packages including icewm-1.3.12-r1.
> > > Everything works just fine.
> > >
> > > I did have some segfaults (with gimp) until I recompiled each  
> > package
> > > with gcc-6.3.0
> > >
> > > I have
> > > CFLAGS="-mtune=native -O2 -msse3 -pipe -fPIC"
> > >
> > > in /etc/portage/make.conf
> > >
> > > and quite a e few
> > > CFLAGS="-O3 -mtune=native -pipe -msse -msse2 -msse3 -msse4a -m3dnow"
> > > (for my aged AMD64  Phenom II machine)
> > >
> > > in /etc/portage/env/...
> > >
> > > Helmut
> > >
> > I have a Phenom II machine as well. And I'd be interested what you
> > needed to stick in the /etc/portage/env/, if you could tell me, pls.
> > 
> 
> Here an example: if you want to set some environment variables for  
> sci-libs/atlas :
> 
> First, create the directory
> 
> /etc/portage/env/sci-libs
> 
> Second, create the file 'atlas', e.g. by
> 
> echo 'CFLAGS="-O3 -mtune=native -pipe -msse -msse2 -msse3 -msse4a  
> -m3dnow"' > atlas
> 
I see. Thx.
-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: Digital signature

[gentoo-user] Re: GCC 5.4.0

[Kai Krakow]

Am Sat, 22 Apr 2017 23:13:45 -0700
schrieb Daniel Frey :

> On 04/22/2017 10:45 PM, Philip Webb wrote:
> > I've been following the thread re GCC 5.4.0 & after 'eix-sync'
> > installed it. There's a news item warning that there's a new ABI
> > & it mb necessary to run 'revdep-rebuild' if it fails with a
> > linking error.
> > 
> > The first pkg I tried to compile with 5.4.0 indeed failed at that
> > point, so I followed the advice & ran
> > 'revdep-rebuild --library 'llibstdc++.so.6' -- --exclude gcc'.
> > It wanted to rebuild  223  pkgs & stalled with an unfound ebuild.
> > 
> > I went back to GCC 4.9.3 & the pkg merged without any problem.
> > 
> > What are other users' experiences using GCC 5.4.0 ?
> >   
> 
> I'm currently rebuilding 304 packages. However, last time I updated
> major versions of gcc I had weird issues, an `emerge -e world` fixed
> that. Some packages have already been built with the new gcc version,
> so I plan to exclude those from --emptytree.

You can try "emerge -DNua world --changed-deps"

-- 
Regards,
Kai

Replies to list-only preferred.

Re: [gentoo-user] How do I turn off ansi (colour) codes in GCC 6.3.0 ?

[R0b0t1]

On Sat, May 13, 2017 at 9:25 AM, Miroslav Rovis
 wrote:
> On 170510-20:03-0400, Walter Dnes wrote:
>> On Wed, May 10, 2017 at 01:35:24PM -0500, R0b0t1 wrote
>>
>> > The option is "-fdiagnostics-color=never" or "-fno-diagnostics-color".
>> > You can also set the environment variable GCC_COLORS to the empty
>> > string. The latter is probably more useful in the context of portage.
>>
>>   Thank you.  I successfully tried...
>>
>> GCC_COLORS="" emerge icewm
> Another tip to remember.
>
>>   I suppose the next step is to add GCC_COLORS="" to make.conf.
>>
> I wonder why sticking " --color=n" in the EMERGE_DEFAULT_OPTS in
> make.conf (e.g. mine is:
>
> EMERGE_DEFAULT_OPTS="--keep-going --with-bdeps=y --autounmask-keep-masks 
> --ask --verbose --color=n"
>
> does only partly its job. Erratically, I'd say. You never know if it
> will or not remove color... A bug should be posted for that, but I have
> a partly broken system at this time...
>

That switch only handles the coloring of portage output. I suggested
using GCC_COLORS precisely because "--color=n" doesn't seem to
propagate to subcommands which do output coloring.

Another program you might want to disable output coloring for is
CMake, using CMAKE_COLOR_MAKEFILE=OFF.

Re: [gentoo-user] world rebuild with gcc-6.3.0 - not completely there yet

[Helmut Jarausch]

On 05/13/2017 04:07:52 PM, Miroslav Rovis wrote:

On 170513-10:21+0200, Helmut Jarausch wrote:
> On 05/13/2017 05:56:16 AM, Walter Dnes wrote:
> > On Wed, May 10, 2017 at 08:38:56PM -0400, Walter Dnes wrote
> > >   "Walter's Excellent Adventure Continues"... Now that I've got  
ICEWM
> > > built, I'm trying to start X.  I copied over my ~/.icewm  
cirectory,

...
> > > cursor... for half a second or so.  Then X exits immediately.  I
...
> >   This message is coming to you from an almost entirely GCC 6.3.0
> > machine.  I had to build ICEWM with GCC 5.4.0 to stop it  
segfaulting.
> > The rest of Gentoo, including ICEWM's dependancies, is built with  
GCC

> > 6.3.0.
> >
>
> I have switched to gcc-6.3.0 at the end of last year.
> I have (re-)compiled all my packages including icewm-1.3.12-r1.
> Everything works just fine.
>
> I did have some segfaults (with gimp) until I recompiled each  
package

> with gcc-6.3.0
>
> I have
> CFLAGS="-mtune=native -O2 -msse3 -pipe -fPIC"
>
> in /etc/portage/make.conf
>
> and quite a e few
> CFLAGS="-O3 -mtune=native -pipe -msse -msse2 -msse3 -msse4a -m3dnow"
> (for my aged AMD64  Phenom II machine)
>
> in /etc/portage/env/...
>
> Helmut
>
I have a Phenom II machine as well. And I'd be interested what you
needed to stick in the /etc/portage/env/, if you could tell me, pls.



Here an example: if you want to set some environment variables for  
sci-libs/atlas :


First, create the directory

/etc/portage/env/sci-libs

Second, create the file 'atlas', e.g. by

echo 'CFLAGS="-O3 -mtune=native -pipe -msse -msse2 -msse3 -msse4a  
-m3dnow"' > atlas

Re: [gentoo-user] Re: How do I turn off text console screen in software?

[Miroslav Rovis]

On 170511-19:57-0400, Walter Dnes wrote:
> On Thu, May 11, 2017 at 04:19:28PM -0700, Daniel Campbell wrote
> > On 05/10/2017 04:08 PM, Walter Dnes wrote:
> > > On Wed, May 10, 2017 at 03:36:05PM -0400, Jonathan Callen wrote
> > > 
> > >> Additionally, "setterm --blank force" turns the console off immediately.
> > > 
> > >   Thank you; that's exactly what I was looking for.  My script
> > > ~/bin/dark now reads...
> > > 
> > > #!/bin/bash
> > > sleep 1 && xset -display :0.0 dpms force off
> > > setterm --blank force
> > > 
> > > ...so I can execute "dark" in either X or a true text console, and it
> > > works in both cases.
> > > 
> > 
> > If I may suggest an enhancement, you might want to probe the
> > environment the script is running in so that only the relevant command
> > gets run; unless of course you really do want everything off at once
> > regardless of whether X is running..
> 
>   Isn't that the whole point of excercise?  If I want to turn off the
> display, I want to turn off the display.  BTW, I've discovered a problem.
> 
> sleep 1 && xset -display :0.0 dpms force off
> 
> ...allows to bring back the display by tapping any key.  I prefer
> {SHIFT} because it doesn't do anything by itself.  But the command...
> 
> setterm --blank force
> 
> ...can't be awoken from in a text console.  However, if X is running in
> tty7, I can {CTRL}{ALT}{F7} and X comes up.  Then I can {CTRL}{ALT}{F1}
> to get back to a text console in tty1... weird.
Same here.

> -- 
> Walter Dnes 
> I don't run "desktop environments"; I run useful applications
> 

Good tips in this thread!

Regards!
-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: Digital signature

Re: [gentoo-user] world rebuild with gcc-6.3.0 - not completely there yet

[Miroslav Rovis]

On 170513-10:21+0200, Helmut Jarausch wrote:
> On 05/13/2017 05:56:16 AM, Walter Dnes wrote:
> > On Wed, May 10, 2017 at 08:38:56PM -0400, Walter Dnes wrote
> > >   "Walter's Excellent Adventure Continues"... Now that I've got ICEWM
> > > built, I'm trying to start X.  I copied over my ~/.icewm cirectory,  
...
> > > cursor... for half a second or so.  Then X exits immediately.  I  
...
> >   This message is coming to you from an almost entirely GCC 6.3.0
> > machine.  I had to build ICEWM with GCC 5.4.0 to stop it segfaulting.
> > The rest of Gentoo, including ICEWM's dependancies, is built with GCC
> > 6.3.0.
> > 
> 
> I have switched to gcc-6.3.0 at the end of last year.
> I have (re-)compiled all my packages including icewm-1.3.12-r1.
> Everything works just fine.
> 
> I did have some segfaults (with gimp) until I recompiled each package  
> with gcc-6.3.0
> 
> I have
> CFLAGS="-mtune=native -O2 -msse3 -pipe -fPIC"
> 
> in /etc/portage/make.conf
> 
> and quite a e few
> CFLAGS="-O3 -mtune=native -pipe -msse -msse2 -msse3 -msse4a -m3dnow"
> (for my aged AMD64  Phenom II machine)
> 
> in /etc/portage/env/...
> 
> Helmut
> 
I have a Phenom II machine as well. And I'd be interested what you
needed to stick in the /etc/portage/env/, if you could tell me, pls.

-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: Digital signature

Re: [gentoo-user] How do I turn off ansi (colour) codes in GCC 6.3.0 ?

[Miroslav Rovis]

On 170510-20:03-0400, Walter Dnes wrote:
> On Wed, May 10, 2017 at 01:35:24PM -0500, R0b0t1 wrote
> 
> > The option is "-fdiagnostics-color=never" or "-fno-diagnostics-color".
> > You can also set the environment variable GCC_COLORS to the empty
> > string. The latter is probably more useful in the context of portage.
> 
>   Thank you.  I successfully tried...
> 
> GCC_COLORS="" emerge icewm
Another tip to remember.

>   I suppose the next step is to add GCC_COLORS="" to make.conf.
> 
I wonder why sticking " --color=n" in the EMERGE_DEFAULT_OPTS in
make.conf (e.g. mine is:

EMERGE_DEFAULT_OPTS="--keep-going --with-bdeps=y --autounmask-keep-masks --ask 
--verbose --color=n"

does only partly its job. Erratically, I'd say. You never know if it
will or not remove color... A bug should be posted for that, but I have
a partly broken system at this time...

Regards!
-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: Digital signature

Re: [gentoo-user] Re: How to set size to windows in Openbox in local config [SOLVED]

[Miroslav Rovis]

On 170423-13:31+0200, Miroslav Rovis wrote:
> Hi Floyd!
> 
> This is just an interim notice-reply. I need a few days to find a couple
> of hours time to study the links you gave. I only wish to express my
> appreciation, as the links look interesting and to the point, as well as
> the rest of your reply.

I always try to keep my word, but I am not likely to be able to. My
Gentoo system is currently somewhat (probably mildly) broken, as can be
figured out from:

Strange script planted with Bash
https://www.croatiafidelis.hr/foss/cap/cap-170504-strange-bash/
and
Same Issue with Editcap
https://www.croatiafidelis.hr/foss/cap/cap-170313-git-devuan-mail/git-devuan-mail-4.php

and nice and useful, but cosmetic, issues fade away in importance
confronted with security issues.

(only my sig at end, no more new text)
> 
> On 170422-04:35+0200, Floyd Anderson wrote:
> > On Fr, 21 Apr 00:12:28 +0200
> > Miroslav Rovis  wrote:
> > >On 170420-05:57+0200, Floyd Anderson wrote:
> > >> On Do, 13 Apr 21:55:29 +0200
> > >> Miroslav Rovis  wrote:
> ...
> > >> back from some computer-free holidays,
> > >I hope you had good and restful time!
> ...
> > >[2]  openbox window positions
> > > https://lists.gt.net/gentoo/user/325342
> > > (and my reply to it contains digressions, but also simple
> > > questions...)
> > >
> > Your plan with the Apache cgit repo seems to be a nice challenge to 
> > learn something but as I noted above, creating and maintaining an 
> > overlay for so tiny things is a little bit overkill in my opinion. 
> > Fetching the related Git repository from time to time and you are done 
> > while an overlay needs probably more significant work.
> > 
> > As an example, I am currently just imagine I have to create overlays for 
> > my favourite Vim plugins instead of using well known manager like 
> > Vundle, NeoBundle, Dein or what else. That were a lot of work for the 
> > overlay solution or did I miss the point?
> > 
> > 
> > References:
> > [1] 
> > 
> > 
> > -- 
> > Regards,
> > floyd

-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr


signature.asc
Description: Digital signature

[gentoo-user] [OT] Tux AWOL

[Jorge Almeida]

In case someone is using kernel 4.11: I tried it and everything seems
fine, except that the linux logo on the boot screen (i.e. tty1) is
gone. It was there before (with 4.10.9), and I used make oldconfig.

So, anyone with the same experience?

Note that I'm talking about the vanilla kernel from kernel.org, off
portage (hence the OT in the title).

thanks

Jorge Almeida

Re: [gentoo-user] world rebuild with gcc-6.3.0 - not completely there yet

[Helmut Jarausch]

On 05/13/2017 05:56:16 AM, Walter Dnes wrote:

On Wed, May 10, 2017 at 08:38:56PM -0400, Walter Dnes wrote
>   "Walter's Excellent Adventure Continues"... Now that I've got  
ICEWM
> built, I'm trying to start X.  I copied over my ~/.icewm cirectory,  
the
> .xinitrc, and local X startup script from my current machine, where  
it
> all works.  I run "startx", and the X window pops up and I can see  
the
> cursor... for half a second or so.  Then X exits immediately.  I  
don't

> see any ominous error messages.  I'm attaching the contents of
> Xorg.0.log in case it helps.

  This message is coming to you from an almost entirely GCC 6.3.0
machine.  I had to build ICEWM with GCC 5.4.0 to stop it segfaulting.
The rest of Gentoo, including ICEWM's dependancies, is built with GCC
6.3.0.



I have switched to gcc-6.3.0 at the end of last year.
I have (re-)compiled all my packages including icewm-1.3.12-r1.
Everything works just fine.

I did have some segfaults (with gimp) until I recompiled each package  
with gcc-6.3.0


I have
CFLAGS="-mtune=native -O2 -msse3 -pipe -fPIC"

in /etc/portage/make.conf

and quite a e few
CFLAGS="-O3 -mtune=native -pipe -msse -msse2 -msse3 -msse4a -m3dnow"
(for my aged AMD64  Phenom II machine)

in /etc/portage/env/...

Helmut