[gentoo-user] b43-legacy and newer linux kernels?

2010-08-13 Thread BRM
I have a laptop that has been running Linux Kernel 2.6.30 Gentoo-R8 (gentoo 
sources, don't remember which version) for a while. It has a Broadcom 4306 Rev 
2 
wireless card that has been working well with that kernel. I extracted the 
firmware from the broadcom-wl-4.150.10.5 blob a while ago using b43-fwcutter 
011. I have to hard-code the network settings in /etc/conf.d/net for my home 
network, but am able to use wpa_supplicant whenever I go elsewhere. (I think 
it's my home wireless router that causes the issue; probably needs a firmware 
upgrade.)

Any how, I recently upgraded to Linux Kernel 2.6.34 Gentoo-R7 (gentoo-sources 
2.6.34-r1); again using the b43-legacy driver for the wireless. However, now I 
can't keep a network connection up. I keep getting errors from the 
/etc/init.d/net.wlan0 startup - namely: SIOCSIFFLAGS Unknown Error 132. I had 
to 
reboot onto the older kernel to write this message and try to research the 
issue 
a little.

From on-line, some sites suggest the following as a solution:

rmmod ath9k
rfkill block all
rfkill unblock all
modprobe ath9k
rfkill unblock all
however, rfkill seems to only be in testing for gentoo 
(http://packages.gentoo.org/package/net-wireless/rfkill), and I'm using the 
b43-legacy instead of the ath9k driver - okay, no problem there, just switch 
out 
which driver is unloaded and reloaded. Haven't tried it yet as I have to 
reboot; 
but even so - they are saying this has to be done on every reboot, and that's 
not much of a solution.

Further, I can't seem to find a version of b43-fwcutter that will extract any 
of 
the b43-legacy firmware - even the one I had successfully extracted (011, 012, 
13).

Has anyone else seen this? Does anyone know if this gets resolved (or made 
worse) by a newer kernel?

Ben




[gentoo-user] automatic wlan restart

2010-08-13 Thread Enrico Weigelt
Hi folks,


I'm regularily loosing wlan link (not sure if its a driver problem
or disortion in the local air) and so have to restart the wland
interface quite often. As the box is also doing several automatic
things (backups, etc), it's really ugly (eg. when I'm not on keys,
at some point no backups can be made, etc).

So I'm looking for a way to fully-automatically restart the interface
when the link goes down. Of course, I could hack up some syslog
parsing, which calls '/etc/init.d/net.wlan0 restart', but that
implies the interface going down (iow: ipstack will report no route
to destination network back to applications) for several seconds.

Does anyone know an better solution, which just reconnects to the
same AP w/o taking the interface down (maybe even buffer the
packets while physical link down) ?


cu
-- 
--
 Enrico Weigelt, metux IT service -- http://www.metux.de/

 phone:  +49 36207 519931  email: weig...@metux.de
 mobile: +49 151 27565287  icq:   210169427 skype: nekrad666
--
 Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme
--



Re: [gentoo-user] b43-legacy and newer linux kernels?

2010-08-13 Thread Neil Bothwick
On Thu, 12 Aug 2010 22:10:02 -0700 (PDT), BRM wrote:

 but even so - they are saying this has to be done on every reboot, and
 that's not much of a solution.

Put the commands in /etc/conf.d/local.start, or the start section
of /etc/conf.d/local if using baselayout2.


-- 
Neil Bothwick

If you use envelopes, why not encryption ?


signature.asc
Description: PGP signature


Re: [gentoo-user] write failed on dvd with growisofs [SOLVED]

2010-08-13 Thread Gabriel Striewe
On Wed, Aug 11, 2010 at 06:06:18PM +0200, Joerg Schilling wrote:
 li...@gabriel-striewe.de wrote:
 
   Ritek may not be the best media quality. Did you try Verbatim?
   
   
   J?rg
 
  They were from Aldi, however I used also CDR from there, they seem to
  be manufactured by Plasmon Data Systems (both are labeled
  Tevion). With those CDR I have usually no problem. I realize however
  that my DVDRW which work without problems are from Verbatim. So I will
  try out Verbatim DVD+R and report back to the list how it's going.
 
 Not all drives work well with all media.

This issue is solved, VERBATIM media worked fine.

Thanks a lot for your help.

Gabriel 



[gentoo-user] emerge conflict

2010-08-13 Thread Frank Schwidom
Hi

i get the error:

{
!!! Multiple package instances within a single package slot have been
pulled
!!! into the dependency graph, resulting in a slot conflict:

media-libs/libpng:0

  ('ebuild', '/', 'media-libs/libpng-1.4.3', 'merge') pulled in by
=media-libs/libpng-1.2.43-r2:0 required by ('ebuild', '/',
'x11-libs/cairo-1.8.10', 'merge')
=media-libs/libpng-1.4 required by ('ebuild', '/',
'x11-libs/gtk+-2.20.1-r1', 'merge')
(and 27 more)
}

And i wonder that it seems not to be possible to install both libs
(libpng-1.2.43-r2:0, libpng-1.4) in the same time. Linux is actually 
able to manage this by the lib-version and links.

Did i have overseen any gentoo switch that makes is possible? Or is
there any other option?

Regards





Re: [gentoo-user] emerge conflict

2010-08-13 Thread Alan McKinnon
On Friday 13 August 2010 16:04:53 Frank Schwidom wrote:
 Hi
 
 i get the error:
 
 {
 !!! Multiple package instances within a single package slot have been
 pulled
 !!! into the dependency graph, resulting in a slot conflict:
 
 media-libs/libpng:0
 
   ('ebuild', '/', 'media-libs/libpng-1.4.3', 'merge') pulled in by
 
 =media-libs/libpng-1.2.43-r2:0 required by ('ebuild', '/',
 'x11-libs/cairo-1.8.10', 'merge')
 =media-libs/libpng-1.4 required by ('ebuild', '/',
 'x11-libs/gtk+-2.20.1-r1', 'merge')
 
 (and 27 more)
 }
 
 And i wonder that it seems not to be possible to install both libs
 (libpng-1.2.43-r2:0, libpng-1.4) in the same time. Linux is actually
 able to manage this by the lib-version and links.

You have misread the portage output. It does not say it wants those versions. 
It says this:

  =media-libs/libpng-1.2.43-r2:0
  =media-libs/libpng-1.4

Note the greater than or equal to.

The limiting factor to multiple versions is not Linux, it is portage. Portage 
will not co-install two versions in the same SLOT.

 Did i have overseen any gentoo switch that makes is possible? Or is
 there any other option?

This whole libpng mess was a right royal fuck up several months ago. I forget 
the specifics but IIRC a decent solution was

emerge -C libpng
emerge libpng
revdep-rebuild

The last step takes some time to complete, there is a lot of fall-out to deal 
with. 

As you are only hitting this now, I assume you have a stable system and are 
not using the masked versions of portage. @preserved-rebuild would save you 
lots of pain, but that feature is not available in stable versions of portage.

For more info, check the archives. There is more mail there about this than 
you could ever possibly want to read.

-- 
alan dot mckinnon at gmail dot com



[gentoo-user] Problem with revdep-rebuild

2010-08-13 Thread Massimiliano Ziccardi
Hi all!

I'm trying to update my gentoo after a long time.

I tried the update (emerge -uD world) but I got some problem about
conflicting and missing libraries, so I've uninstalled some software.

After that, I ran an revdep-rebuild, but it do not works.

When it tries to emerge xfce4-panel it always gives this error during the
build process:

/usr/lib/libxfce4util.la: No such file or directory

I tried to re-emerge the libxfce4util package, but with no luck : that file
do not exists!!!

Any idea?

Thanks in advance,
Massimiliano


Re: [gentoo-user] emerge conflict

2010-08-13 Thread Mark Knecht
On Fri, Aug 13, 2010 at 7:04 AM, Frank Schwidom schwi...@gmx.net wrote:
 Hi

 i get the error:

 {
 !!! Multiple package instances within a single package slot have been
 pulled
 !!! into the dependency graph, resulting in a slot conflict:

 media-libs/libpng:0

  ('ebuild', '/', 'media-libs/libpng-1.4.3', 'merge') pulled in by
    =media-libs/libpng-1.2.43-r2:0 required by ('ebuild', '/',
    'x11-libs/cairo-1.8.10', 'merge')
    =media-libs/libpng-1.4 required by ('ebuild', '/',
    'x11-libs/gtk+-2.20.1-r1', 'merge')
    (and 27 more)
 }

 And i wonder that it seems not to be possible to install both libs
 (libpng-1.2.43-r2:0, libpng-1.4) in the same time. Linux is actually
 able to manage this by the lib-version and links.

 Did i have overseen any gentoo switch that makes is possible? Or is
 there any other option?

 Regards





This was a big problem maybe a couple of months ago? I'm surprised you
made it this far!

There are some instructions here that will likely help:

http://blog.flameeyes.eu/2010/06/29/stable-users-libpng-update

Good luck,
Mark



Re: [gentoo-user] emerge conflict

2010-08-13 Thread J. Roeleveld
On Friday 13 August 2010 14:15:59 Alan McKinnon wrote:
 On Friday 13 August 2010 16:04:53 Frank Schwidom wrote:
  Hi
  
  i get the error:
  
  {
  !!! Multiple package instances within a single package slot have been
  pulled
  !!! into the dependency graph, resulting in a slot conflict:
  
  media-libs/libpng:0
  
('ebuild', '/', 'media-libs/libpng-1.4.3', 'merge') pulled in by

  =media-libs/libpng-1.2.43-r2:0 required by ('ebuild', '/',
  'x11-libs/cairo-1.8.10', 'merge')
  =media-libs/libpng-1.4 required by ('ebuild', '/',
  'x11-libs/gtk+-2.20.1-r1', 'merge')
  
  (and 27 more)
  
  }
  
  And i wonder that it seems not to be possible to install both libs
  (libpng-1.2.43-r2:0, libpng-1.4) in the same time. Linux is actually
  able to manage this by the lib-version and links.
 
 You have misread the portage output. It does not say it wants those
 versions.
 
 It says this:
   =media-libs/libpng-1.2.43-r2:0
   =media-libs/libpng-1.4
 
 Note the greater than or equal to.
 
 The limiting factor to multiple versions is not Linux, it is portage.
 Portage will not co-install two versions in the same SLOT.
 
  Did i have overseen any gentoo switch that makes is possible? Or is
  there any other option?
 
 This whole libpng mess was a right royal fuck up several months ago. I
 forget the specifics but IIRC a decent solution was
 
 emerge -C libpng
 emerge libpng
 revdep-rebuild
 
 The last step takes some time to complete, there is a lot of fall-out to
 deal with.
 
 As you are only hitting this now, I assume you have a stable system and are
 not using the masked versions of portage. @preserved-rebuild would save you
 lots of pain, but that feature is not available in stable versions of
 portage.
 
 For more info, check the archives. There is more mail there about this than
 you could ever possibly want to read.

I actually hit this myself yesterday.
When emerging libpng, it mentions a script that needs to be run. I would 
suggest running that script.

I think the following commands were the ones that led to a properly upgraded 
system. It is now working for me, but it did take quite a while.
**
emerge -vauD --newuse world
lafilefixer --justfixit
/usr/sbin/libpng-1.4.x-update.sh 
emerge -vauD --newuse world
revdep-rebuild -- -va
emerge -vauD --newuse world
**

Alternatively, you could always try to one that should always work:

emerge -vae world
(NOTE: This will rebuild _everything_)

Btw, if you are using KDE, you might, like me, also hit issues with akonadi 
not starting (I couldn't not use it anymore)
Post on the list if you hit it, I still have these fresh in my mind :)

--
Joost



Re: [gentoo-user] emerge conflict

2010-08-13 Thread Daniel Wagener
On Fri, 13 Aug 2010 15:17:50 +0200
J. Roeleveld jo...@antarean.org wrote:

 On Friday 13 August 2010 14:15:59 Alan McKinnon wrote:
  On Friday 13 August 2010 16:04:53 Frank Schwidom wrote:
   Hi
   
   i get the error:
   
   {
   !!! Multiple package instances within a single package slot have
   been pulled
   !!! into the dependency graph, resulting in a slot conflict:
   
   media-libs/libpng:0
   
 ('ebuild', '/', 'media-libs/libpng-1.4.3', 'merge') pulled in by
 
   =media-libs/libpng-1.2.43-r2:0 required by ('ebuild', '/',
   'x11-libs/cairo-1.8.10', 'merge')
   =media-libs/libpng-1.4 required by ('ebuild', '/',
   'x11-libs/gtk+-2.20.1-r1', 'merge')
   
   (and 27 more)
   
   }
   
   And i wonder that it seems not to be possible to install both libs
   (libpng-1.2.43-r2:0, libpng-1.4) in the same time. Linux is
   actually able to manage this by the lib-version and links.
  
  You have misread the portage output. It does not say it wants those
  versions.
  
  It says this:
=media-libs/libpng-1.2.43-r2:0
=media-libs/libpng-1.4
  
  Note the greater than or equal to.
  
  The limiting factor to multiple versions is not Linux, it is
  portage. Portage will not co-install two versions in the same SLOT.
  
   Did i have overseen any gentoo switch that makes is possible? Or
   is there any other option?
  
  This whole libpng mess was a right royal fuck up several months
  ago. I forget the specifics but IIRC a decent solution was
  
  emerge -C libpng
  emerge libpng
  revdep-rebuild
  
  The last step takes some time to complete, there is a lot of
  fall-out to deal with.
  
  As you are only hitting this now, I assume you have a stable system
  and are not using the masked versions of portage.
  @preserved-rebuild would save you lots of pain, but that feature is
  not available in stable versions of portage.
  
  For more info, check the archives. There is more mail there about
  this than you could ever possibly want to read.
 
 I actually hit this myself yesterday.
 When emerging libpng, it mentions a script that needs to be run. I
 would suggest running that script.
 
 I think the following commands were the ones that led to a properly
 upgraded system. It is now working for me, but it did take quite a
 while. **
 emerge -vauD --newuse world
 lafilefixer --justfixit
 /usr/sbin/libpng-1.4.x-update.sh 
 emerge -vauD --newuse world
 revdep-rebuild -- -va
 emerge -vauD --newuse world
 **
 
 Alternatively, you could always try to one that should always work:
 
 emerge -vae world
 (NOTE: This will rebuild _everything_)
 
 Btw, if you are using KDE, you might, like me, also hit issues with
 akonadi not starting (I couldn't not use it anymore)
 Post on the list if you hit it, I still have these fresh in my mind :)
 
 --
 Joost
 

This script is hopefully not the hack, that is said to be a problem in
the future?

http://blog.flameeyes.eu/2010/06/29/stable-users-libpng-update

-- 
 /\
 \ / Plain Text Ribbon Campaign
  x   Say NO to HTML in email and news
 / \



Re: [gentoo-user] Problem with revdep-rebuild

2010-08-13 Thread Alex Schuster
Massimiliano Ziccardi writes:

 I'm trying to update my gentoo after a long time.

That tends to be more problematic than regular updates.

 I tried the update (emerge -uD world) but I got some problem about
 conflicting and missing libraries, so I've uninstalled some software.

portage 2.2 may ease these things, it does some automatic blocker 
resolution (does not work always for me, but most of the times). It is 
still masked, but people use it for far over a year now, and I did not 
read about big problems.


 When it tries to emerge xfce4-panel it always gives this error during
 the build process:
 
 /usr/lib/libxfce4util.la: No such file or directory
 
 I tried to re-emerge the libxfce4util package, but with no luck : that
 file do not exists!!!
 
 Any idea?

Maybe give 'lafilefixer --justfixit' a try? Emerge lafilefixer if you do 
not have it already.

Have you read all he elog messages? They sometimes tell about additional 
manual steps that have to be done.

Wonko



[gentoo-user] problems building x11-libs/gtk+-2.20.1-r1

2010-08-13 Thread Tamer Higazi
Hi people!
I am in front of a disaster updating my gentoo system. Now the system
is shot, and I am not capable starting the gnome-manager:

at the end it says only:

checking Pango flags... configure: error:
*** Pango not found. Pango built with Cairo support is required
*** to build GTK+. See http://www.pango.org for Pango information.

I remerged Cairo, cairo, pango but the problem still exists... and
don't know how to solve it. :(

For any support I would kindly thank you.

I put the files log, env and info at pastebin to view.

build.log
http://pastebin.com/CRdFS1Wt

bluild.env
http://pastebin.com/ze4tN1HE

build.info
http://pastebin.com/3L1XL2Jb



Re: [gentoo-user] problems building x11-libs/gtk+-2.20.1-r1

2010-08-13 Thread Bill Longman
On 08/13/2010 07:09 AM, Tamer Higazi wrote:
 Hi people!
 I am in front of a disaster updating my gentoo system. Now the system
 is shot, and I am not capable starting the gnome-manager:
 
 at the end it says only:
 
 checking Pango flags... configure: error:
 *** Pango not found. Pango built with Cairo support is required
 *** to build GTK+. See http://www.pango.org for Pango information.
 
 I remerged Cairo, cairo, pango but the problem still exists... and
 don't know how to solve it. :(

Did you run revdep-rebuild? Did you run lafilefixer?

 For any support I would kindly thank you.
 
 I put the files log, env and info at pastebin to view.
 
 build.log
 http://pastebin.com/CRdFS1Wt
 
 bluild.env
 http://pastebin.com/ze4tN1HE
 
 build.info
 http://pastebin.com/3L1XL2Jb
 




Re: [gentoo-user] emerge conflict

2010-08-13 Thread J. Roeleveld
On Friday 13 August 2010 15:36:23 Daniel Wagener wrote:
 On Fri, 13 Aug 2010 15:17:50 +0200
 
 J. Roeleveld jo...@antarean.org wrote:
  On Friday 13 August 2010 14:15:59 Alan McKinnon wrote:
   On Friday 13 August 2010 16:04:53 Frank Schwidom wrote:
Hi

i get the error:

{
!!! Multiple package instances within a single package slot have
been pulled
!!! into the dependency graph, resulting in a slot conflict:

media-libs/libpng:0

  ('ebuild', '/', 'media-libs/libpng-1.4.3', 'merge') pulled in by
  
=media-libs/libpng-1.2.43-r2:0 required by ('ebuild', '/',
'x11-libs/cairo-1.8.10', 'merge')
=media-libs/libpng-1.4 required by ('ebuild', '/',
'x11-libs/gtk+-2.20.1-r1', 'merge')

(and 27 more)

}

And i wonder that it seems not to be possible to install both libs
(libpng-1.2.43-r2:0, libpng-1.4) in the same time. Linux is
actually able to manage this by the lib-version and links.
   
   You have misread the portage output. It does not say it wants those
   versions.
   
   It says this:
 =media-libs/libpng-1.2.43-r2:0
 =media-libs/libpng-1.4
   
   Note the greater than or equal to.
   
   The limiting factor to multiple versions is not Linux, it is
   portage. Portage will not co-install two versions in the same SLOT.
   
Did i have overseen any gentoo switch that makes is possible? Or
is there any other option?
   
   This whole libpng mess was a right royal fuck up several months
   ago. I forget the specifics but IIRC a decent solution was
   
   emerge -C libpng
   emerge libpng
   revdep-rebuild
   
   The last step takes some time to complete, there is a lot of
   fall-out to deal with.
   
   As you are only hitting this now, I assume you have a stable system
   and are not using the masked versions of portage.
   @preserved-rebuild would save you lots of pain, but that feature is
   not available in stable versions of portage.
   
   For more info, check the archives. There is more mail there about
   this than you could ever possibly want to read.
  
  I actually hit this myself yesterday.
  When emerging libpng, it mentions a script that needs to be run. I
  would suggest running that script.
  
  I think the following commands were the ones that led to a properly
  upgraded system. It is now working for me, but it did take quite a
  while. **
  emerge -vauD --newuse world
  lafilefixer --justfixit
  /usr/sbin/libpng-1.4.x-update.sh
  emerge -vauD --newuse world
  revdep-rebuild -- -va
  emerge -vauD --newuse world
  **
  
  Alternatively, you could always try to one that should always work:
  
  emerge -vae world
  (NOTE: This will rebuild _everything_)
  
  Btw, if you are using KDE, you might, like me, also hit issues with
  akonadi not starting (I couldn't not use it anymore)
  Post on the list if you hit it, I still have these fresh in my mind :)
  
  --
  Joost
 
 This script is hopefully not the hack, that is said to be a problem in
 the future?
 
 http://blog.flameeyes.eu/2010/06/29/stable-users-libpng-update

Eeerh
Not sure, guess I stopped reading too soon as I managed to get it to appear to 
be working...

Anyway, am currently doing a  emerge -vae world  as I want to get it all 
compiled using GCC 4.4. Guess that should 'fix' whatever damage that script 
does?

--
Joost



Re: [gentoo-user] problems building x11-libs/gtk+-2.20.1-r1

2010-08-13 Thread Tamer Higazi
As you told me I merged lafilefixer and ran lafilefixer --justfixit

then I executed revdep-rebuild which wants to remerge a huge amout of
packages who because libpangocairo-1.0.so.0 was missing, or couldn't
be linked at the end, revdep-rebuild wants to emerge a package called
eel which is masked:

!!! All ebuilds that could satisfy gnome-base/eel have been masked.
!!! One of the following masked packages is required to complete your request:
- gnome-base/eel-2.24.1 (masked by: package.mask)
/usr/portage/profiles/package.mask:
# Pacho Ramos pa...@gentoo.org (12 Jul 2010)
# Masked for removal in 30 days.
# No longer developed by upstream, fails with forced as-needed (bug #277169),
# does not compile against gnome-desktop-2.30 (bug #311563).

but I want to upgrade my system, and love to solve this Pango Cairo problem

if you have anymore ideas, I would thank you.


Tamer


2010/8/13 Bill Longman bill.long...@gmail.com:
 On 08/13/2010 07:09 AM, Tamer Higazi wrote:
 Hi people!
 I am in front of a disaster updating my gentoo system. Now the system
 is shot, and I am not capable starting the gnome-manager:

 at the end it says only:

 checking Pango flags... configure: error:
 *** Pango not found. Pango built with Cairo support is required
 *** to build GTK+. See http://www.pango.org for Pango information.

 I remerged Cairo, cairo, pango but the problem still exists... and
 don't know how to solve it. :(

 Did you run revdep-rebuild? Did you run lafilefixer?

 For any support I would kindly thank you.

 I put the files log, env and info at pastebin to view.

 build.log
 http://pastebin.com/CRdFS1Wt

 bluild.env
 http://pastebin.com/ze4tN1HE

 build.info
 http://pastebin.com/3L1XL2Jb







[gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

2010-08-13 Thread Enrico Weigelt
* Paul Hartman paul.hartman+gen...@gmail.com wrote:

snip

Apropos cracked machines:

In recent years I often got trouble w/ cracked customer's boxes
(one eg. was abused for SIP-calling people around the world and
asking them for their debit card codes ;-o). So thought about
protection against those scenarios. The solution:

Put all remotely available services into containers and make the 
host system only accessible via special channels (eg. serial console). 
You can run automatic sanity tests and security alerts from the hosts
system, which cannot be highjacked (as long as there's no kernel
bug which allows escaping a container ;-o).

This also brings several other benefits, eg. easier backups, quick
migration to other machines, etc.


cu
-- 
--
 Enrico Weigelt, metux IT service -- http://www.metux.de/

 phone:  +49 36207 519931  email: weig...@metux.de
 mobile: +49 151 27565287  icq:   210169427 skype: nekrad666
--
 Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme
--



Re: [gentoo-user] b43-legacy and newer linux kernels?

2010-08-13 Thread Mick
On 13 August 2010 09:08, Neil Bothwick n...@digimed.co.uk wrote:
 On Thu, 12 Aug 2010 22:10:02 -0700 (PDT), BRM wrote:

 but even so - they are saying this has to be done on every reboot, and
 that's not much of a solution.

 Put the commands in /etc/conf.d/local.start, or the start section
 of /etc/conf.d/local if using baselayout2.

Have you been through the guidance in this page to find out which
kernel driver you ought to use with your card?

http://linuxwireless.org/en/users/Drivers/b43

-- 
Regards,
Mick



Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

2010-08-13 Thread Mark Knecht
On Fri, Aug 13, 2010 at 8:25 AM, Enrico Weigelt weig...@metux.de wrote:
 * Paul Hartman paul.hartman+gen...@gmail.com wrote:

 snip

 Apropos cracked machines:

 In recent years I often got trouble w/ cracked customer's boxes
 (one eg. was abused for SIP-calling people around the world and
 asking them for their debit card codes ;-o). So thought about
 protection against those scenarios. The solution:

 Put all remotely available services into containers and make the
 host system only accessible via special channels (eg. serial console).
 You can run automatic sanity tests and security alerts from the hosts
 system, which cannot be highjacked (as long as there's no kernel
 bug which allows escaping a container ;-o).

 This also brings several other benefits, eg. easier backups, quick
 migration to other machines, etc.


 cu

Hi Enrico,
   Since I'm not an IT guy could you please explain this just a bit
more? What is 'a container'? Is it a chroot running on the same
machine? A different machine? Something completely different?

   In the OP's case (I believe) he thought a personal machine at home
was compromised. If that's the case then without doubling my
electrical bill (2 computers) how would I implement your containers?

Thanks,
Mark



Re: [gentoo-user] problems building x11-libs/gtk+-2.20.1-r1

2010-08-13 Thread Alan McKinnon
On Friday 13 August 2010 16:09:48 Tamer Higazi wrote:
 Hi people!
 I am in front of a disaster updating my gentoo system. Now the system
 is shot, and I am not capable starting the gnome-manager:
 
 at the end it says only:
 
 checking Pango flags... configure: error:
 *** Pango not found. Pango built with Cairo support is required
 *** to build GTK+. See http://www.pango.org for Pango information.

Did you read this? It says to build pango with cairo support.

Did you build pango with cairo support?

Don't just say yes, prove it with output from eg. eix


-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] emerge conflict

2010-08-13 Thread Alan McKinnon
On Friday 13 August 2010 15:36:23 Daniel Wagener wrote:
 This script is hopefully not the hack, that is said to be a problem in
 the future?
 
 http://blog.flameeyes.eu/2010/06/29/stable-users-libpng-update


When flameyes says to do something X in regard to a build, and someone else 
says to do something different, then in almost all cases (regardless of how 
authoritative the other person sounds), you should do what flameeyes says.

ESPECIALLY the blog entry Daniel mentioned.



-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] problems building x11-libs/gtk+-2.20.1-r1

2010-08-13 Thread Bill Longman
On 08/13/2010 08:22 AM, Tamer Higazi wrote:
 As you told me I merged lafilefixer and ran lafilefixer --justfixit
 
 then I executed revdep-rebuild which wants to remerge a huge amout of
 packages who because libpangocairo-1.0.so.0 was missing, or couldn't
 be linked at the end, revdep-rebuild wants to emerge a package called
 eel which is masked:
 
 !!! All ebuilds that could satisfy gnome-base/eel have been masked.
 !!! One of the following masked packages is required to complete your request:
 - gnome-base/eel-2.24.1 (masked by: package.mask)
 /usr/portage/profiles/package.mask:
 # Pacho Ramos pa...@gentoo.org (12 Jul 2010)
 # Masked for removal in 30 days.
 # No longer developed by upstream, fails with forced as-needed (bug #277169),
 # does not compile against gnome-desktop-2.30 (bug #311563).
 
 but I want to upgrade my system, and love to solve this Pango Cairo 
 problem
 
 if you have anymore ideas, I would thank you.

Do you know about the -t option for emerge? It shows you which package
is responsible for pulling in another package.

You might also want to try euse -I cairo which will tell you which
packages are affected by the cairo use flag.

Your emerge --info shows that you do have cairo turned on, but as Alan
states, you should show emerge -pv pango or emerge -pv cairo (or
whatever package you're trying to fix). Pango doesn't has a specific
cairo use flag so you may need to recompile pango's dependencies.

Basically, what you're trying to do is step back from the package that's
giving you the trouble, and compile the packages that your problematic
package needs to function. Obviously, this is a geometric expansion to
some extent, but revdep-rebuild is there to help you solve the puzzle.

Also, qdepends is really handy.



Re: [gentoo-user] b43-legacy and newer linux kernels?

2010-08-13 Thread BRM
- Original Message 

 On 13 August 2010 09:08, Neil Bothwick n...@digimed.co.uk wrote:
  On  Thu, 12 Aug 2010 22:10:02 -0700 (PDT), BRM wrote:
  but even  so - they are saying this has to be done on every reboot, and
  that's  not much of a solution.
  Put the commands in  /etc/conf.d/local.start, or the start section
  of /etc/conf.d/local if  using baselayout2.
 Have you been through the guidance in this page to  find out which
 kernel driver you ought to use with your  card?
 http://linuxwireless.org/en/users/Drivers/b43

Yes. Unfortunately it's a 14e4:4320/ with BCM4306/2 Chip set (4306 Rev 2), so 
it 
requires the b43-legacy driver, and only firmware version FW10 supports the 
hardware from what I can tell.

It just seems to me that I went from a working wireless on 2.6.30 to a 
non-working wireless on 2.6.34. I'd really like to get back to a working
wireless card, and be on the newer kernel.

While the steps I quoted may be a work around for 2.6.34 - I haven't had a 
chance to test them yet, hopefully tonight - they are just that, a work around 
for a bug.
rfkill did install pretty easily once I unmasked it, but I don't know if it 
will 
work yet either.

Ben




Re: [gentoo-user] b43-legacy and newer linux kernels?

2010-08-13 Thread Bill Longman
On 08/13/2010 10:58 AM, BRM wrote:
 - Original Message 
 
 On 13 August 2010 09:08, Neil Bothwick n...@digimed.co.uk wrote:
 On  Thu, 12 Aug 2010 22:10:02 -0700 (PDT), BRM wrote:
 but even  so - they are saying this has to be done on every reboot, and
 that's  not much of a solution.
 Put the commands in  /etc/conf.d/local.start, or the start section
 of /etc/conf.d/local if  using baselayout2.
 Have you been through the guidance in this page to  find out which
 kernel driver you ought to use with your  card?
 http://linuxwireless.org/en/users/Drivers/b43
 
 Yes. Unfortunately it's a 14e4:4320/ with BCM4306/2 Chip set (4306 Rev 2), so 
 it 
 requires the b43-legacy driver, and only firmware version FW10 supports the 
 hardware from what I can tell.
 
 It just seems to me that I went from a working wireless on 2.6.30 to a 
 non-working wireless on 2.6.34. I'd really like to get back to a working
 wireless card, and be on the newer kernel.

I feel your pain, Ben. I remember about three years ago having my laptop
working great with all manner of 802.11 cards. I could do my work
anywhere in the house. And then it all just kind of melted. A new kernel
for one thing but somehow something else fell apart. I've pretty much
written off any wireless on Linux now. My time is worth more than the
hours of troubleshooting. Keep plugging, you just might get it.




[gentoo-user] Re: Postgres gem not found by cron job

2010-08-13 Thread Hans de Graaff
On Wed, 11 Aug 2010 15:32:53 -0400, Michael Orlitzky wrote:

 Thanks for the tip. The cron environment was missing
 RUBYOPT=-rauto_gem -- adding it fixed the problem.
 
 Dark magic, whatever it does.

It ensures that installed gems are found automatically without
specifying this explicitly in your script. The other solution
is to require 'rubygems' first in your script.

Kind regards,

Hans




Re: [gentoo-user] Kernel2.6.33: ATA failed command: READ FPDMA QUEUED, hard resetting link

2010-08-13 Thread Mick
On Thursday 12 August 2010 06:50:22 Paul Hartman wrote:

 I have nothing to add, but almost 5 months on from my original post I
 just had this same error message for the second time. This time it was
 on a different physical disk, which -- strangely -- makes me feel
 better. Different kernel revision (2.6.35.1 now). Still don't know
 what's the cause... it's an odd one that I'll be keeping my eye on.
 
 [ 1435.938398] ata6.00: exception Emask 0x0 SAct 0x2 SErr 0x0 action 0x6
 frozen [ 1435.938403] ata6.00: failed command: READ FPDMA QUEUED
 [ 1435.938409] ata6.00: cmd 60/e8:08:38:a5:86/01:00:01:00:00/40 tag 1
 ncq 249856 in
 [ 1435.938410]  res 40/00:00:00:00:00/00:00:00:00:00/00 Emask
 0x4 (timeout)
 [ 1435.938412] ata6.00: status: { DRDY }
 [ 1435.938416] ata6: hard resetting link
 [ 1436.395618] ata6: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
 [ 1436.407546] ata6.00: configured for UDMA/133
 [ 1436.407552] ata6.00: device reported invalid CHS sector 0
 [ 1436.407559] ata6: EH complete

Have you tried replacing the SATA cable, or at least remove/reinsert?
-- 
Regards,
Mick


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

2010-08-13 Thread Enrico Weigelt
* Mark Knecht markkne...@gmail.com wrote:

Hi,

Since I'm not an IT guy could you please explain this just a bit
 more? What is 'a container'? Is it a chroot running on the same
 machine? A different machine? Something completely different?

http://lxc.sourceforge.net/
http://wiki.openvz.org/Main_Page

Unlike VM solutions like kvm, vmware, etc, these (OS-side) 
container implementations split off the operating system 
resources (filesystem, network interfaces, process-IDs, ...)
into namespaces, so each container only sees its own resources,
not those of the host system or other containers.

That's essentially what's behind the virtual private server
solutions offered by various ISPs.

In the OP's case (I believe) he thought a personal machine at home
 was compromised. If that's the case then without doubling my
 electrical bill (2 computers) how would I implement your containers?

He would have several virtual servers running on just one metal.
If the host system is not accessible from the outside world, just
the virtual servers - an attacker could probably highjack what's
inside the virtual servers, but cant get to the host system.


cu
-- 
--
 Enrico Weigelt, metux IT service -- http://www.metux.de/

 phone:  +49 36207 519931  email: weig...@metux.de
 mobile: +49 151 27565287  icq:   210169427 skype: nekrad666
--
 Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme
--



Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

2010-08-13 Thread Enrico Weigelt
* Bill Longman bill.long...@gmail.com wrote:

 Basically just run VMWare/Virtualbox etc and put the services in there.

well, these solutions are way bigger (iow: more resource
intensive), since they run a complete operation system instance
within the virtual machine.

 No, chroots are NOT the same. They run on the same system.

well, chroots have not much to do with containers (even contains
could be said to include chroot as a building block) - they just
run certain processes with a different root directory (iow: these
processes see just see a subdirectory as it would be the whole
filesystem). that's nice for testing porposes or to isolate
different kind of isolate programs/libraries (eg. use different
libc's, ABIs or calling conventions, 32bit subsystems on an 
native 64bit host, etc, etc), but don't really add security.


cu
-- 
--
 Enrico Weigelt, metux IT service -- http://www.metux.de/

 phone:  +49 36207 519931  email: weig...@metux.de
 mobile: +49 151 27565287  icq:   210169427 skype: nekrad666
--
 Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme
--



Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

2010-08-13 Thread Mark Knecht
On Fri, Aug 13, 2010 at 11:58 AM, Enrico Weigelt weig...@metux.de wrote:
 * Mark Knecht markkne...@gmail.com wrote:

 Hi,

    Since I'm not an IT guy could you please explain this just a bit
 more? What is 'a container'? Is it a chroot running on the same
 machine? A different machine? Something completely different?

 http://lxc.sourceforge.net/
 http://wiki.openvz.org/Main_Page

 Unlike VM solutions like kvm, vmware, etc, these (OS-side)
 container implementations split off the operating system
 resources (filesystem, network interfaces, process-IDs, ...)
 into namespaces, so each container only sees its own resources,
 not those of the host system or other containers.

 That's essentially what's behind the virtual private server
 solutions offered by various ISPs.

    In the OP's case (I believe) he thought a personal machine at home
 was compromised. If that's the case then without doubling my
 electrical bill (2 computers) how would I implement your containers?

 He would have several virtual servers running on just one metal.
 If the host system is not accessible from the outside world, just
 the virtual servers - an attacker could probably highjack what's
 inside the virtual servers, but cant get to the host system.


 cu

Thank you Enrico. I'll have to learn about this.

Cheers,
Mark



[gentoo-user] JACK breaks at random

2010-08-13 Thread Nikos Chantziaras
On a system where I can't use OSSv4 for sound (due to MIDI) and need to 
fall back to ALSA, I've hit ALSA's insane latency issues and therefore 
decided to use JACK.  I'm trying to set-up a machine suitable for 
music/audio production.


But JACK just stops working at random.  Sometimes it works, but after a 
a while it doesn't anymore.  And when that happens (which happens sooner 
rather than later,) restarting JACK (with qjackctl) doesn't help; only 
rebooting the machine does, which as you can guess is very annoying.


I'm appending the error message in case someone can help me figure out 
what's going on.


I'm on AMD64, kernel 2.6.35.1 (gentoo-sources-2.6.35-r1) using in-kernel 
ALSA on a SoundBlaster Live 24-bit.



--
Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 14 01:15:42 2010: ERROR: JackAudioDriver::ProcessAsync: 
read error, skip cycle

Sat Aug 14 01:15:42 2010: ERROR: alsa_driver_xrun_recovery
Sat Aug 

Re: [gentoo-user] emerge conflict

2010-08-13 Thread Dale

Alan McKinnon wrote:

On Friday 13 August 2010 15:36:23 Daniel Wagener wrote:
   

This script is hopefully not the hack, that is said to be a problem in
the future?

http://blog.flameeyes.eu/2010/06/29/stable-users-libpng-update
 


When flameyes says to do something X in regard to a build, and someone else
says to do something different, then in almost all cases (regardless of how
authoritative the other person sounds), you should do what flameeyes says.

ESPECIALLY the blog entry Daniel mentioned.

   


+1  His way of doing things has saved me issues several times.  Is the 
guy a cyborg or something?  :/


Dale

:-)  :-)



[gentoo-user] Re: Kmail storage of TLS certificate

2010-08-13 Thread walt

On 08/10/2010 11:53 AM, Mick wrote:

...
Any idea how I can reset this certificate as far as Kmail is concerned?  When
has it stored my clicking to save the acceptance of the certificate and how
can I reset this?


Maybe my alpha-test version of thunderbird is broken (it often is :) but I
don't see any replies from the kde regulars in this group.  Hey!  Wake up!

Back in the good old 3.x days I tried kmail and liked it a lot.

Then came the dark days of 4.x and I had to escape from kde before the last
bit of my sanity failed me.

I seem to recall a submenu in kmail that let me manipulate certificates, much
like mozilla, and now thunderbird.  Is my memory failing me again?  Maybe the
menu disappeared with 4.x?

You need a kde guru like Dale or Alan.  Hey!  Wake up and answer the question!




Re: [gentoo-user] Re: Kmail storage of TLS certificate

2010-08-13 Thread Dale

walt wrote:

On 08/10/2010 11:53 AM, Mick wrote:

...
Any idea how I can reset this certificate as far as Kmail is 
concerned?  When
has it stored my clicking to save the acceptance of the certificate 
and how

can I reset this?


Maybe my alpha-test version of thunderbird is broken (it often is :) 
but I
don't see any replies from the kde regulars in this group.  Hey!  Wake 
up!


Back in the good old 3.x days I tried kmail and liked it a lot.

Then came the dark days of 4.x and I had to escape from kde before the 
last

bit of my sanity failed me.

I seem to recall a submenu in kmail that let me manipulate 
certificates, much
like mozilla, and now thunderbird.  Is my memory failing me again?  
Maybe the

menu disappeared with 4.x?

You need a kde guru like Dale or Alan.  Hey!  Wake up and answer the 
question!




Dale gave up on Kmail a long time ago.   I like the way Seamonkey 
does mail so I sort of stuck with it, although the upgrade form 1.x to 
2.x was touchy.


I did read somewhere where someone else was having issues but I'm not 
sure it is the same thing.  It may have been on the kde mailing list 
tho.  Maybe someone can search the archives and see if they find 
something?  I'll try to search later but got some things to do plus it 
is stormy here.  No rain for a month so not complaining about mother 
nature's tummy rumbling.  lol


Dale

:-)  :-)



[gentoo-user] Re: Mumble doesn't work anymore

2010-08-13 Thread walt

On 08/12/2010 09:56 AM, Nikos Chantziaras wrote:

Trying to start Mumble (version 1.2.2) aborts with:

SSL: Added CA certificates from '/etc/ssl/certs/ca-certificates.crt'
No ciphers of at least 128 bit found
Aborted


I've never used mumble.  Have you ever run update-ca-certificates?
It may not help but it's trivially easy :)

My uninformed gut feeling is that ssl doesn't look for 'cyphers' in
certificates.  Rather, it looks at the certificate to find out which
cypher it *needs* to use to decipher the certificate.

I'd say run update-ca-certificates first and hope for the best. I've
tried to read the manpage for openssl, but the print is too small for
me to see it  :p




Re: [gentoo-user] Problem with revdep-rebuild

2010-08-13 Thread Jake Moe
 On 08/13/10 23:50, Alex Schuster wrote:
 Massimiliano Ziccardi writes:

 I'm trying to update my gentoo after a long time.
 That tends to be more problematic than regular updates.

 I tried the update (emerge -uD world) but I got some problem about
 conflicting and missing libraries, so I've uninstalled some software.
 portage 2.2 may ease these things, it does some automatic blocker 
 resolution (does not work always for me, but most of the times). It is 
 still masked, but people use it for far over a year now, and I did not 
 read about big problems.


 When it tries to emerge xfce4-panel it always gives this error during
 the build process:

 /usr/lib/libxfce4util.la: No such file or directory

 I tried to re-emerge the libxfce4util package, but with no luck : that
 file do not exists!!!

 Any idea?
 Maybe give 'lafilefixer --justfixit' a try? Emerge lafilefixer if you do 
 not have it already.

 Have you read all he elog messages? They sometimes tell about additional 
 manual steps that have to be done.

   Wonko
Well, on my system, that file does belong to libxfce4util:

j...@aus8617 ~ $ equery belongs /usr/lib/libxfce4util.la
[ Searching for file(s) /usr/lib/libxfce4util.la in *... ]
xfce-base/libxfce4util-4.6.2 (/usr/lib/libxfce4util.la)

What does the screen say when it gets to the install phase of emerge? 
Any errors there, especially with that file?

Jake Moe



Re: [gentoo-user] Mumble doesn't work anymore

2010-08-13 Thread Adam Carter
On Fri, Aug 13, 2010 at 2:56 AM, Nikos Chantziaras rea...@arcor.de wrote:

 Trying to start Mumble (version 1.2.2) aborts with:

 SSL: Added CA certificates from '/etc/ssl/certs/ca-certificates.crt'
 No ciphers of at least 128 bit found
 Aborted


 My guess is that the SSL line is an informational message that is unrelated
to the No ciphers message. Certificates contain the public key of an
asymmetric public/private key pair (which would have lengths like 1024 or
2048). The message about 128 bit will refer to the symmetric crypto that
kicks in after the asymmetric has been used to pass the symmetric key. So,
i'd say that the certs are not the problem.


[gentoo-user] backup sanity check

2010-08-13 Thread Adam Carter
This is to backup my laptop from boot cdrom - how does it look?

File systems;
/dev/sda1 - /boot
/dev/sda2 - swap
/dev/sda3 - /

So to backup;
1. Get MBR (grub and partition table): dd if=/dev/sda
of=/otherdisk/sda-mbr.bin bs=512 count=1
2. Get /boot: dd if=/dev/sda1 of=/otherdisk/sda1.bin
3. Get /: dd if=/dev/sda3 | gzip | dd of=/otherdisk/sda3.bin.gz

Then too restore onto new disk;
1. Restore MBR: dd if=/otherdisk/sda-mbr.bin of=/dev/sda
- no bs or count parameters required?
2. Restore /boot: dd if=/otherdisk/sda1.bin of=/dev/sda1
3. Restore /: dd if=/otherdisk/sda3.bin.gz | gunzip | dd of=/dev/sda3
4. Setup swap partition: mkswap /dev/sda2
5. Boot system

Caveat is the the new disk must be big enough to fit sda1/2/3.