Re: [gentoo-user] systemd-boot on an openrc system

2022-09-28 Thread Nils Freydank
Hi Peter,

long story short: AFAICT it's a deprecated or moved configuration entry inside
the file /etc/machine-info and should be safe to just delete, maybe even with
the whole file machine-info itself.

On my machine with openrc and systemd-boot I don't even have /etc/machine-info
at all and things work fine together. To me it looks as the variable was just
thrown out of the machine-info file and in case you would need it you should
put it into /etc/kernel/install.conf.

I don't know which software uses the string. If you compile your kernel
manually or using the gentoo-kernel packages it seems to be not necessary.

(But as always when taking advice from strangers on the internet: First make a
backup, have a live medium for recovery at hand and test it yourself.)

Kind regards,
Nils


signature.asc
Description: PGP signature


Re: [gentoo-user] [OT] suggest SSD partitioning

2021-12-09 Thread Nils Freydank
Hi,

my thoughts:

If you use an EFI/UEFI you will need a so called ESP, i.e. a FAT32 partition.
FAT32 is ugly from a linux user's perspective (e.g. it doesn't support symlinks
as far as I know and being regularly told by other users), but I'm putting
/boot on that partition for at least seven years now without any trouble.

I would always tend for a swap partition to avoid additional overhead from
filesystems in between (beside the fact that I'm using mostly btrfs which
couldn't host swap files for a long time).

AFAIR a binary distribution I used lately takes RAM size for systems without
hibernation and double the size for hibernation (it was most probably either
linux mint or manjaro).
Just imagine your system was already swapping and then you would hibernate, so
you would need your 'normal' swap space plus enough free space to save all data
from RAM on your SSD.

Last but not least I try out too much different software and have full disk
encryption with LUKS literally everywhere a x86 CPU runs, so _my_ favorite
layout is:

first partition: /boot inside the ESP for UEFI
second partition: LUKS with btrfs inside (or LVM + ext4 if I didn't need
  btrfs features)
third partition: encrypted swap (LUKS, too)

My system is a Notebook with 32 GiB RAM and I choose arbitrarily 18 GiB for
swap wich is empty or filled with a few hundred megabytes most of the time.
I don't use hibernation.

My /var/tmp/portage has a size of 14 GiB wich is enough to compile firefox,
rust, libreoffice and qtwebengine (not at once, of course).

Hope that helps you and much fun with your new drive!

Kind regards,
Nils


signature.asc
Description: PGP signature


Re: [gentoo-user] Dovecot config

2021-09-29 Thread Nils Freydank
Hi Wol,

my credentials for dovecot have the following syntax, i.e. four additional
colons after the password:
':'
I use only virtual users, so I can't tell if mixing works, too.

For the dovecot setup I can recommend this guide:
https://prefetch.eu/blog/2020/email-server/#mda-dovecot

Two general remarks:
1st, be more patient. This is a mailing list, not a support chat.
2nd, I _strongly_ recommend to use some kind of hashing instead of plain
passwords. I use '{ARGON2ID}' and generate the hashes by running
'doveadm pw -s ARGON2I'
which asks for the plain text password on stdin.

Kind regards,
Nils



Re: [gentoo-user] Re: Inquiry about gentoo kernel configuration

2021-07-11 Thread Nils Freydank
Am Sonntag, den 11.07.2021 um 21:17:50 Uhr +0800 schrieb Dongliang Mu 
:
> [...]
> Thanks. There is only a file - *.ebuild file in this package. From the
> package, I did not find out what .config file it uses. It seems this
> script uses the config file of current system.

Hi,

look here: https://github.com/mgorny/gentoo-kernel-config

In names of gentoo "packages" the -bin suffix indicates that it is a pre-built,
binary package, so the maintainers use a configuration, build the kernel
and upload everything as a binary package. Portage than installs the binary
package when you would call 'emerge --ask gentoo-kernel-bin'.

Some hints for reading ebuilds and finding stuff:

The ebuilds are basically bash scripts, and to find functions called inside each
ebuild you can search in the eclasses dir in
https://gitweb.gentoo.org/repo/gentoo.git/tree/eclass
while you can find (most) of the eclass names from the line starting with
'inherit'.

To find e.g. the link to the config I used the following workflow. Maybe it'll
be of usage for you, too:
https://packages.gentoo.org -> gentoo-kernel -> Git repository browser
  -> choose the package version -> link below:
https://gitweb.gentoo.org/repo/gentoo.git/tree/sys-kernel/gentoo-kernel/gentoo-kernel-5.12.15.ebuild#n20

Kind regards,
Nils



Re: [gentoo-user] libbpf? BTF? blinking urxvt/fish?

2021-07-11 Thread Nils Freydank
Hi caveman,

you should really train your search skills :-P

(1) Just searching for "libbpf" and then for "bpf BTF" gives plenty webpages and
links. In short:

BPF: Berkeley packet filter, e.g.: 
https://en.wikipedia.org/wiki/Berkeley_Packet_Filter
libbpf: a library to use it, e.g.: https://github.com/libbpf/libbpf
BPF Type Format (BTF) https://www.kernel.org/doc/html/v5.9/bpf/btf.html

(2) "urxvt text blink ANSI": https://bbs.archlinux.org/viewtopic.php?id=150531

Kind regards,
Nils

Am Samstag, den 10.07.2021 um 12:44:15 Uhr + schrieb caveman رَجُلُ 
الْكَهْفِ 穴居人 :
> i have 2 odd isuses that i observe:
> 
> (1) i get this error when i reboot my kernel:
> 
> > libbpf: failed to find valid kernel BTF
> > libbpf: error loading vmlinux BTF: -3
> > libbpf: failed to load object 'iterators_bpf'
> > libbpf: failed to load BPF skeleton 'iterators_bpf': -3
> > Failed load could be due to wrong endianness
> 
> (2) plus all white texts are blinking in my
> urxvt/fish terminal
> 
> any idea what are these things?  never heard of
> BTF.  never seen terminals blink like this.
> what's going on?
> 
> ty,
> cm.
> 



Re: [gentoo-user] Problems with LyX and xetex-2021

2021-07-11 Thread Nils Freydank
Hi Stefano,

I couldn't reproduce your error with xelatex at all. I took your example/MWE
and just executed "xelatex test.tex" and it generated me a single page PDF.

A quick and dirty idea: Move ~/.texlive (e.g. to ~/.texlive-bak) and let texlive
regenerate files there.

In my worldfile I have app-text/texlive, dev-tex/biber and dev-tex/latexmk,
everything else are just deps.

Interestingly it works even with USE="-xetex" for texlive which in turn has only
the following USE flags enabled:
"X extra graphics luatex metapost music png pstricks science truetype"

Hope that helps you,
Nils

Am Sonntag, den 16.05.2021 um 19:58:32 Uhr +0200 schrieb Stefano Crocco 
:
> Hello to everyone,
> since upgrading my ~arch system to TeXLive-2021 I'm having problems using 
> XeLaTeX to compile LyX documents. Has someone else experienced this issue? 
> I'd 
> like to file a bug report about it, but before doing so I'd like to be sure 
> that there isn't something wrong with my system.
> 
> Below you'll find the details of my problem.
> 
> Thanks in advance
> 
> Stefano
> 
> DETAILS
> 
> When I use LyX to create a PDF using XeLaTeX from the attached test.lyx file 
> (using the default LaTeX (XeTeX) -> PDF (XeTeX) converter), I get an error 
> dialog with the following text:
> 
> The external program
> xelatex 
> finished with an error. It is recommended you fix the cause of the external 
> program's error (check the logs). 
> 
> As far as I can see, the log (attached as log_from_lyx) don't mention any 
> error, except for the generic (at least to my eyes) line
> "Error 256 (driver return code) generating output;"
> near the end.
> 
> Trying to obtain a better error message, I exported the LyX file as a XeLaTeX 
> file using the File/Export LaTeX (xetex) menu entry and run xelatex on it. Of 
> course, it failed, but this time the log (in the log_from_xelatex attachment) 
> contains a more meaningful message:
> "xdvipdfmx:fatal: Cannot proceed without .vf or "physical" font for PDF 
> output..."
> 
> Unfortunately, I'm not expert enough in the inner works of (xe)latex to 
> understand this message. I tried searching google for it but didn't find 
> anything useful. However, looking at the tex file generated by LyX (the 
> test.tex attachment), I noticed the line 
> 
> \usepackage[T1]{fontenc}
> 
> which seemed strange to me, as I thought that the fontenc package shouldn't 
> be 
> used with XeLaTeX. Indeed, after commenting this line, xelatex successfully 
> created the correct PDF.
> 
> This problem has almost certainly been caused by switching texlive and the 
> related packages from 2020 to 2021, since on another computer where I masked 
> the 2021 version of app-text/texlive-core, app-text/texlive and all packages 
> in category dev-texlive, everything works correctly.



> This is XeTeX, Version 3.141592653-2.6-0.93 (TeX Live 2021 Gentoo Linux) 
> (preloaded format=xelatex 2021.5.8)  16 MAY 2021 19:29
> entering extended mode
>  restricted \write18 enabled.
>  %&-line parsing enabled.
> **test.tex
> (./test.tex
> LaTeX2e <2020-10-01> patch level 4
> L3 programming layer <2021-02-18>
> (/usr/share/texmf-dist/tex/latex/base/article.cls
> Document Class: article 2020/04/10 v1.4m Standard LaTeX document class
> (/usr/share/texmf-dist/tex/latex/base/size10.clo
> File: size10.clo 2020/04/10 v1.4m Standard LaTeX file (size option)
> )
> \c@part=\count175
> \c@section=\count176
> \c@subsection=\count177
> \c@subsubsection=\count178
> \c@paragraph=\count179
> \c@subparagraph=\count180
> \c@figure=\count181
> \c@table=\count182
> \abovecaptionskip=\skip47
> \belowcaptionskip=\skip48
> \bibindent=\dimen138
> ) (/usr/share/texmf-dist/tex/latex/base/fontenc.sty
> Package: fontenc 2020/08/10 v2.0s Standard LaTeX package
> LaTeX Font Info:Trying to load font information for T1+lmr on input line 
> 11
> 2.
> (/usr/share/texmf-dist/tex/latex/lm/t1lmr.fd
> File: t1lmr.fd 2009/10/30 v1.6 Font defs for Latin Modern
> )) (/usr/share/texmf-dist/tex/latex/geometry/geometry.sty
> Package: geometry 2020/01/02 v5.9 Page Geometry
> (/usr/share/texmf-dist/tex/latex/graphics/keyval.sty
> Package: keyval 2014/10/28 v1.15 key=value parser (DPC)
> \KV@toks@=\toks15
> ) (/usr/share/texmf-dist/tex/generic/iftex/ifvtex.sty
> Package: ifvtex 2019/10/25 v1.7 ifvtex legacy package. Use iftex instead.
> (/usr/share/texmf-dist/tex/generic/iftex/iftex.sty
> Package: iftex 2020/03/06 v1.0d TeX engine tests
> ))
> \Gm@cnth=\count183
> \Gm@cntv=\count184
> \c@Gm@tempcnt=\count185
> \Gm@bindingoffset=\dimen139
> \Gm@wd@mp=\dimen140
> \Gm@odd@mp=\dimen141
> \Gm@even@mp=\dimen142
> \Gm@layoutwidth=\dimen143
> \Gm@layoutheight=\dimen144
> \Gm@layouthoffset=\dimen145
> \Gm@layoutvoffset=\dimen146
> \Gm@dimlist=\toks16
> ) (/usr/share/texmf-dist/tex/latex/setspace/setspace.sty
> Package: setspace 2011/12/19 v6.7a set line spacing
> ) (/usr/share/texmf-dist/tex/generic/babel/babel.sty
> Package: babel 2021/03/03 3.55 The Babel package
> 

Re: [gentoo-user] QEMU -nographic Option with OVMF

2021-06-05 Thread Nils Freydank
Am Montag, den 24.05.2021 um 11:52:22 Uhr +0100 schrieb Michael 
:
> On Monday, 24 May 2021 02:01:15 BST Oliver Dixon wrote:
> > Hi,
> > 
> > I decided to bite the bullet yesterday and switch from clunky, and generally
> > untoward, VirtualBox to QEMU/KVM for developing kernel modules. I have a
> > working Gentoo VM with all the bells and whistles I need/want (UEFI
> > booting, NIC passthrough, SSH forwarding, NFSv4 support, etc.), but it's
> > running in an SDL window, which means the guest TTY will become confused
> > and pretty much unusable whenever I change the window size. (Which is
> > rather often since I use a tiling window manager.)
> 
> Have you tried '-display sdl,gl=on -vga virtio' and then use Ctrl+Alt+f to 
> maximise it early in the boot process?  It seems to work OK here, without 
> distorting the contents of the VM window.

Why don't you (Oliver) just use ssh to log in? That way you wouldn't have to
work around TTY resizing problems. If you don't see a prompt over the serial
connection, than maybe there is no getty/agetty instance listening there.
Unfortunately I can't help further in that direction.

As a different approach you could also put the qemu output into a VNC socket
with '-vnc unix:/path/to/socket'. With '-vga virtio' and '-vga std' I had at
least a reproducible screen resolution at startup.

Inspired by app-emulation/nemu I wrote a short shell script which does this and
works for me. I'll attach it here - feel free to take useful parts out of it,
e.g. the daemon mode of qemu could be interesting for you aswell.


control-vm.sh
Description: Bourne shell script


Re: [gentoo-user] I am thinking of buying Raspberry Pi 4 Model B 8GB with 7 or 10 inch touch screen display in June 2021

2021-05-09 Thread Nils Freydank
Am Sonntag, den 09.05.2021 um 11:13:47 Uhr -0400 schrieb Kusoneko 
:
> On Sun, May 09, 2021 at 04:29:12PM +0800, Turritopsis Dohrnii Teo En Ming 
> wrote:
> > Finally, does your Linux distribution support Raspberry Pi 4 Model B 8
> > GB? Can I do 4K Ultra HD video editing on the Raspberry Pi 4 Model B 8
> > GB? Like adding watermarks, and cutting away unwanted 4K scenes. Is
> > there a good 4K video editing software for Linux?

Hi folks,

as far as I know video editing needs lots of RAM and CPU in general, so I would
go for a system with plenty CPU cores and much RAM, at least 32 GiB, better
more. This would make the system future-proof to some degree in different ways:
- You will need much memory for huge (GUI) software like libreoffice, chromium,
  qtwebengine and similiar in the future.
- You will need the memory for video editing, especially if you like to use a
  GUI programm to do so.
- The general trend was always to use more and more memory for each application,
  and my last hardware was an x86 CPU (not ARM like the Raspberry Pies) with
  only 8 GiB of RAM which wasn't fun anymore with Gentoo.

For the software I would take a look at kdenlive and ffmpeg (both have packages
in probably every linux distribution):

https://kdenlive.org/en
https://ffmpeg.org

The Raspberry Pi image (stage3) seems to be unmaintained so far:
https://wiki.gentoo.org/wiki/Raspberry_Pi#gentoo-on-rpi3-64bit

@Kusoneko:
> Hello,
> [...] however, I believe every CPU architectures are supported on Gentoo.
Actually not. Gentoo supports *many* and even older architectures, but not
all. If there is no-one to maintain it than there is no support. No hard
feelings, just pure pragmatism.

Kind regards,
Nils



Re: [gentoo-user] Anyone using extract_url with mutt?

2021-04-29 Thread Nils Freydank
Hi Walter,

Am Dienstag, den 27.04.2021 schrieb Walter Dnes :
>   Thanks.  I simply want a list of URLs that I can select to open in
> Pale Moon.  If I can copy URLs into the paste buffer, even better.  It's
> been a long while since I last used an overlay.  What are the steps to
> setting up "urlscan" in an overlay?  Even more basic, what are the steps
> to setting up an overlay?  My /etc/portage/repos.conf/
I just drop you two links to the wiki, which do explain both an overlay from
an external/remote/foreign source aswell as a local-only overlay. I do prefer
app-eselect/eselect-repository over layman, but that is just personal
preference.

remote/foreign source:
https://wiki.gentoo.org/wiki/Ebuild_repository

local only:
https://wiki.gentoo.org/wiki/Custom_ebuild_repository

You already have a local repo in /usr/local/portage, so could use this:
> cat /etc/portage/repos.conf/localrepo.conf 
> [localrepo]
> location = /usr/local/portage

Hope that helps and feel free to come back and ask if you get stuck somewhere.
Best regards,
Nils


signature.asc
Description: PGP signature


Re: [gentoo-user] Anyone using extract_url with mutt?

2021-04-24 Thread Nils Freydank
Hi Walter,

in case your problem isn't already solved net-mail/urlscan[1] might be an
alternative. Currently I maintain it in my overlay[2]. I just use it with
xdg-open or KDE's URL-click-behaviour, but according to the urlscan readme you
can "Run a command with the selected URL as the argument or pipe the selected
URL to a command." which sounds to me as your workflow.

In neomutt I use the following macro to just get all the URLs printed:
'macro pager \cb " urlscan" "description..."'

I think you could use the '--run' parameter (or the '--pipe' one if palemoon
supports that) and extend my macro to something like this:

macro pager \cb " urlscan --run \
 '/home/waltdnes/pm/palemoon/palemoon -new-instance -p email {}' \
" "Open URLs in palemoon in a special profile."

Note that I test neither '--run' nor '--pipe' nor the extended macro.

[1] https://github.com/firecat53/urlscan
[2] 
https://git.holgersson.xyz/foss/holgersson-overlay/src/branch/master/net-mail/urlscan

Best regards,
Nils



Re: [gentoo-user] hostname service on lxc

2021-01-09 Thread Nils Freydank
Hi Alarig,

Am Samstag, den 09.01.2021 um 10:52:12 Uhr +0100 schrieb Alarig Le Lay 
:
> Hi,
> 
> OpenRC doesn’t take the hostname service service on LXC even if the
> symlink exists:

please take a look into /etc/rc.conf (key word rc_sys) and into the initscript
/etc/init.d/hostname inside the depend phase:

"keyword -docker -lxc -prefix -systemd-nspawn"

Looks to me as openrc doesn't start the hostname script in certain environments.
Is this even possible and has no weird side effects?

For testing you could drop the "-lxc" from that line, e.g. by commenting out
the original one and copying it (to have a backup..). If it works as expected
you might file a bug to ask for removal of the lxc-keyword here. Maybe there
is already one, didn't check.

Hope that helps along,
Nils



Re: [gentoo-user] Is Hardened profile and SELinux support active?

2020-04-09 Thread Nils Freydank
Hi Ihor,

myself I use only hardened profiles without SELinux on my machines, and 
AFAICT it mostly boils down *this* way to some default toolchain flags for
C/C++ and a nearly-default kernel (sys-kernel/gentoo-soures package)[a].

I dropped a note about your question on the IRC channel #gentoo-hardened on 
freenode[b] and got mostly instant responses from people telling they run 
SELinux fine on Gentoo (so it seems you're right and only our docs are a 
bit dusty) -- you might want to ask there for details ;-)

I'm top-posting here and Cc'ing one of the gentoo devs maintaing SELinux,
so he get's your original question aswell (he hasn't subscribed to this
list). 

hope this helps and from my side also a warm welcome to Gentoo!

[a] side note: it's similar to archs default kernel mostly vanilla upstream
only with security or bugfix patches and optional patches for
convenience, e.g. -march=native or systemd vs openrc.
[b] https://webchat.freenode.net/

Am Dienstag, 7. April 2020, 06:40:30 CEST schrieb Ihor Antonov:
> Hi everyone,
> 
> I am very new to Gentoo and I am currently migrating from Arch.
> Gentoo attracts me with a freedom of system configuration and with
> multiple supported architectures.
> 
> I was attracted by Hardened profile described at [1][2][3]
> But reading [1] I also got confused because it looks like it is no longer
> maintained.
> 
> So the question is it just outdated wiki page? Is anyone using Hardened
> profile? Is it maintained? In Archlinux SELinux is not supported
> officially so this is why I am looking around.
> 
> Thanks/
> 
> [1] https://wiki.gentoo.org/wiki/Project:Hardened[1]
> [2] https://wiki.gentoo.org/wiki/Hardened/FAQ[2]
> [3] https://wiki.gentoo.org/wiki/Hardened_Gentoo[3]


-- 
PGP fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
keybase.io/nfreydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] problem with firefox/libvpx

2020-02-08 Thread Nils Freydank
Am Samstag, 8. Februar 2020, 05:26:20 CET schrieb John Covici:
> Hi.  Well, I have run into a problem on the world update I am about to
> do?  Firefox requires libvpx-1.7.0  and handbrake wants 8.x.  Now
> there is a use flag systemlibvpx which is enabled, I am assuming if I
> disable that the great God of portage will let me continue with my
> update -- any reason why I should not do this?
> 
> Thanks in advance for any suggestions.

Hi, indeed. If you disable USE="system-libvpx" (i.e. don't set it activly 
or set USE="-system-libvpx" portage will tell firefox to use the bundled
version. Bundling software is generally spoken a really bad habit, and
within the firefox package you can see several USE="-system-something" 
flags, that are just a try to unbundle things on user's choice.

Hope that helps a bit,
Nils

-- 
PGP fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
keybase.io/nfreydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Any chance to "unpack" or install a ppa-package on Gentoo-Linux ?

2019-08-31 Thread Nils Freydank
Hi,

no, as we are not able to guess what a ppq package even is.

If you know what you have there search for something like
"unpack package from $Software linux", if you don't then try to guess it by 
running file from sys-apps/file and search then.

Good luck and may be the search foo be with you!

Am Samstag, 31. August 2019, 08:03:03 CEST schrieb tu...@posteo.de:
> Hi,
> 
> is there any way to unpack or install software, which is only
> available as ppq-package, under GENTOO Linux?
> 
> Thanks a lot for any hint in advance!
> Cheers!
> Meino





Re: [gentoo-user] Ssh problem

2019-03-10 Thread Nils Freydank
Hi Philip,

Am Sonntag, 10. März 2019, 08:25:54 CET schrieb Philip Webb:
> I updated Ssh yesterday :
> [...]
>   ssh x.y.z
>   Unable to negotiate with 128.100.160.1 port 22: no matching key
> exchange method found. Their offer:
> diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
ssh tells you straight forward what the issue is: Within the key exchange
at the begin of the communication there was no way to establish a 
connection between the server and the client, probably because the client 
has a more secure setup than the server. This happens mostly due to old ssh 
versions serverside.

You can find solutions pretty fast by just searching for "Their offer: ", e.g. https://unix.stackexchange.com/questions/340844/
how-to-enable-diffie-hellman-group1-sha1-key-exchange-on-debian-8-0

(Please enable legacy and possible less secure key exchange formats and 
ciphers only per server and not globally - and if possible upgrade the SSH 
server version.)

> 'x.y.z' disguises the site's URL, which doesn't seem to be a problem.
That is indeed perfectly fine; you might want to hide the IP address in the 
future aswell ;-)


Greetings,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Emerge --sync source

2019-02-28 Thread Nils Freydank
I filed a bug report https://bugs.gentoo.org/679040.

Yes, currently you need to update your git config manually everytime you 
change your git remote.





Re: [gentoo-user] TensorFlow

2019-02-13 Thread Nils Freydank
Hi Alan,

Am Dienstag, 12. Februar 2019, 21:09:08 CET schrieb Alan Grimes:
> [...]
> It has been about two weeks since I've sync'd so this may or may not
> still be valid, updating is an extremely risky operation on my machine
> so I'm on a once every 3-6 months schedule...
what is risky about it at your machine?

You have at least three different ways to check for updates if you really 
can't upgrade on a regular basis:
1. sync your portage tree, but do not install updates (yet)
2. check online on gentoo.org or inside the mirror at github.com
   https://gitweb.gentoo.org/repo/gentoo.git/tree/sci-libs/tensorflow
3. check the packages page:
   https://packages.gentoo.org/packages/sci-libs/tensorflow

With regards to the persistence of bugs you should consult bugs.gentoo.org 
and search for your specific issue/bug.

> current state:
> [...]
I’m sorry I can't help with that linker problem, but at least I can say 
that tensorflow-1.13.0_rc1 built here without errors (and seems to run 
aswell).
But watch out, you need bazel-0.20.0 (see bug https://bugs.gentoo.org/
677280 for details).


-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank





Re: [gentoo-user] Re: Is it that hard to add a package, or am I doing wrong?

2018-12-20 Thread Nils Freydank
Hi everyone,

Am Donnerstag, 20. Dezember 2018, 12:28:17 CET schrieb Nuno Silva:
> On 2018-12-20, YUE Daian wrote:
> > On 2018-12-20 03:50, Nils Freydank  wrote:
> > [...]
> >> Additionally bugzilla is seen as too impractical to use for new packages
> >> that many don't get much attention there, only on github.com.
> > 
> > Well the Gentoo Wiki https://wiki.gentoo.org/wiki/Submitting_ebuilds
> > suggested that new ebuilds should be submitted via Bugzilla.
> > 
> > Could you please tell me if it is still the recommended way?
> > If not, IMHO it is better to change Wiki as well to prevent further
> > misunderstanding.

from my perspective it seems as only github.com is used and bugs.gentoo.org
is more or less just kept as an official way for ebuild submission to keep
a backup mechanism on the own infrastructure.

Maybe in a perfect world someone trustworthy could provide a single-sign-on 
service for bugtrackers and a gitlab instance hosted by gentoo or stuff like 
that, but the current state is quite confusing, agreed. If you want to take 
care of your package become a proxied maintainer. If you go a step further 
later and become a gentoo dev you can also drop some workload from the proxied 
maintenance team and do you QA yourself and submit directly to the tree.

> I would like to ask again for a clarification about this. Last month, I
> asked if there was some rule against using bugzilla, but there were no
> replies:
> [...]
No, as far as I know there is now rule, just a not so good usable platform and 
another one that is proprietary but works far better.


A disclaimer in the end: I'm not a Gentoo developer, just another random user
who maintains packages.

Regards,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Is it that hard to add a package, or am I doing wrong?

2018-12-19 Thread Nils Freydank
Hi Danny,

first I want to thank you for submitting your ebuild, and I'm quite sorry to 
see another contributor who doesn't get responses for a long while. This is no 
evil intention, just a lack of manpower and the lack of someone maintaining
your "new" package. (This was what jstein meant with his response[1]).
Additionally bugzilla is seen as too impractical to use for new packages that 
many don't get much attention there, only on github.com.

However, within Gentoo every package needs a maintainer to avoid dead packages 
inside our tree (which then get no security nor "normal" bug fixes). Packages
with "maintainer needed" state had one, but he or she just dropped the work.
If you have some spare time you can become a proxied maintainer, meaning you 
maintain the package without being a Gentoo dev. As git distinguishs author 
and commiter you get also a proper attribution for your work.

The workflow in general is that you clone the git repo and create branch, add 
your ebuild, open a git PR on github.com[2] and get reviews from devs. You can 
find more details in some wiki articles[3].

Unfortunately it takes a bunch of time until packages are merged, because of 
the mentioned lack of manpower on the devs' side, aswell as plenty mistakes 
new proxied maintainers tend to implement in ebuilds (myself included here).

I hope that helps you,
Nils


[1] https://bugs.gentoo.org/638446#c1
[2] https://github.com/gentoo/gentoo/pulls?q=is%3Aopen+is%3Apr
[3] https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers/User_Guide
and https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] OT: latest longterm kernel.org patches are unsigned

2018-08-19 Thread Nils Freydank
Hi,

kernel.org won’t provide the signatures anymore. I was politely pointed
to the following site via IRC but got no reason for it.

https://www.kernel.org/category/site-news.html

--- Quote ---
No future PGP signatures on patches and changelogs

For legacy purposes, we will continue to provide pre-generated changelogs and 
patches (both to the previous mainline and incremental patches to previous 
stable). However, from now on they will be generated by automated processes 
and will no longer carry detached PGP signatures. If you require 
cryptographically verified patches, please generate them directly from the 
stable git repository after verifying the PGP signatures on the tags using git 
verify-tag.
--- EOQ ---



Am Freitag, 17. August 2018, 18:07:13 CEST schrieb Ian Zimmerman:
> If you browse this URL:
> 
> https://cdn.kernel.org/pub/linux/kernel/v4.x/
> 
> you'll see that for each 4.14 patch up to 4.14.58 there is a
> cooresponding GPG signature file:
> 
> patch-4.14.58.sign 25-Jul-2018 09:28 833
> patch-4.14.58.xz 25-Jul-2018 09:28 1M
> 
> etc.
> 
> But starting with 4.14.59, there are no .sign files.  Why?  Is this a
> bug, and if so, where do I report it?
> 
> This breaks my lovingly duct-taped kernel update infrastructure ...


-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Angelos

2018-06-03 Thread Nils Freydank
Hi,

Am Sonntag, 3. Juni 2018, 13:41:11 CEST schrieb Klaus Ethgen:
> I tried to reach ange...@gentoo.org (Christoph Mende) about his portage
> overlay. Unfortunately, the mail bounces with unknown user.
> 
> Do anybody have an idea how to contact him?

Looks as he is already retired.
https://bugs.gentoo.org/177996

You can find an email address outside of gentoo.org in this bug (I just don't 
want to cite mail addresses public mailing lists, so you'll have to look that 
up yourself ;-) )

If you *can't* reach him that way then you should file a bug report about 
dropping it from the public overlays list.

Greetings,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] phpmyadmin - edit (empty screen)

2018-03-26 Thread nils . freydank
Am Montag, 26. März 2018, 18:53:51 CEST schrieb the...@sys-concept.com:
> On 03/26/2018 10:41 AM, nils.freyd...@posteo.de wrote:
> > Hello thelma,
> > 
> > Am Montag, 26. März 2018, 18:27:31 CEST schrieb the...@sys-concept.com:
> >> I've updated to phpmyadmin-4.7.8 [...]
> In the past I didn't have to do anything after upgrading phpmyadmin.
Then you either
a) actually never updated the files actually used by your webserver, or
b) run your webserver to serve files from /usr, which sounds a bit…stranges 
and might bring security implications, or
c) installed phpmyadmin without portage (which means you wouldn't have to care 
anyway), or
d) portage installed earlier into a webroot (what is quite unlikely).

> Here is my current: config.inc.php
> b /*
> * Generated configuration file
> * Generated by: phpMyAdmin 3.4.0 setup script
> * Date: Mon, 23 May 2011 10:23:03 -0400
> */

3.4.0 from _2011_ is not even in the tree anymore (if it was). I don't know 
what happens on upgrades, but if this header is correct then your setup is 
still on a state nearly seven years old. Maybe check for that with ls?

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] phpmyadmin - edit (empty screen)

2018-03-26 Thread nils . freydank
Hello thelma,


Am Montag, 26. März 2018, 18:27:31 CEST schrieb the...@sys-concept.com:
> I've updated to phpmyadmin-4.7.8
> but when I try to edit a table, no data is loaded, I get an empty screen.
I had similar issue when I installed v4.7.8, and enabling PHP debug output to 
the website helped me fixing the actuall PHP issue (while I couldn't get the 
logging to write these messages to any logfile).

Here is my nginx snippet for phpmyadmin in a subdirectory:
#=== POSTFIXADMIN ===
location /postfixadmin {
try_files $uri $uri/ index.php;
}
location ~ .php$ {
#fastcgi_split_path_info ^(.+\.php)(/.+)$;
include fastcgi_params;
fastcgi_pass php-handler; # see below
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_buffer_size 16k;
fastcgi_buffers 4 16k;
}
#EOF
#=== snippet for the php-handler:
upstream php-handler{
server 127.0.0.1:9000;
}
#EOF

> I have downgraded to phpmyadmin-4.7.7-r1 but system shows I have two
> version installed. How do I know which one is active, or select lower
> version?
With portage you install something like a "draft" to /usr, and then app-admin/
webapp-config actually manages the files inside your webroot. For details how 
to use it take a look to our wiki page:
https://wiki.gentoo.org/wiki/Webapp-config

> […]

HTH,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Brother Printer AMD64

2018-03-12 Thread Nils Freydank
Am Montag, 12. März 2018, 17:36:13 CET schrieb Lasse Pouru:
> [...]
> 
> I guess if you only need multilib for this one package it would be
> possible to compile it and its dependencies with the abi_x86_32 USE flag
> instead of setting the ABI_X86 variable for the whole system?
> 
> - Lasse

This should work (and is the reason for the abi-USE flags). But you need a 
multilib after all, at least for your compiler - but as far as I know 
switchting from no-multilib toolchains isn't easy. I never tested that though.

Greetings,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Brother Printer AMD64

2018-03-12 Thread Nils Freydank
Hi,

Am Montag, 12. März 2018, 13:54:18 CET schrieb siefke_lis...@web.de:
> Hello,
> 
> I have a short question. Is it true that Brother Printer Drivers need
> a multilib System?
unfortunately yes. Maybe specific drivers will work with no-multilib, but most 
ones will compile and install and then silently fail due to some missing 32bit 
userspace libs they need etc.


> https://github.com/stefan-langenmaier/brother-overlay
> 
> I found this overlay and it seem so that gcc without multilib not work.
> 
> Is there a way to build the printer system as 32 bit, or does the whole
> system have to be built accordingly?
You can try to setup a chroot or container (e.g. with LXC/LXD or systemd-
nspawn) for it, but I these would contain a small 32bit system, too.
 
> Thank you & Nice Day
> Silvio

I hope I could help a bit,
Nils


-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Waiting for a KMail bug fix

2018-03-06 Thread Nils Freydank
Am Dienstag, 6. März 2018, 12:45:52 CET schrieb Peter Humphrey:
> Does anyone know the update plan for KDE? I'd like to add my gmail account
> to KMail, but I can't because of this bug:
> 
> https://bugs.kde.org/show_bug.cgi?id=390763

As this is part of KDE applications it's scheduled for "Thursday, April 19, 
2018: KDE Applications 18.04 Release", see

https://community.kde.org/Schedules/Applications/
18.04_Release_Schedule#Thursday.
2C_April_19.2C_2018:_KDE_Applications_18.04_Release

You can find all schedules at https://community.kde.org/Schedules.

> To get the fix I need kde-apps/libkgapi-17.12.2, but it's keyworded at the
> moment. It looks as though I'd have to upgrade the whole of qt to ~amd64 to
> get it today, and maybe much more than that, but that would be a whole lot
> of work and result in a messy system.

While it's not recommended nor officially supported I know of many people 
doing this. Especially mixing ~amd64 desktop packages with a stable base 
system shouldn't cause much trouble.

I personally run a whole ~amd64 system and just stabilised some toolchain 
packages (glibc). However, I have no problem if something breaks, as this 
usually happens at compile time..

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] [okey..] [OT] Best *SIMPLE* firewall?

2018-02-28 Thread Nils Freydank
Am Mittwoch, 28. Februar 2018, 22:15:59 CET schrieb Walter Dnes:
>   Is there something besides iptables?  It seems to be like
> systemd/perl/python, continuously expanding its scope.  And no, I'm not
> looking for an "easy-peasy front-end gui" that'll probably pull in 90%
> of QT as dependancies.  I fondly remember IPCHAINS.

Personally I like nftables (the iptables successor) more. Mostly the same, but 
in my eyes it's more convenient.

There are plenty frontends, many of them in net-firewall/ in our tree ;)

(I tried to use ufw some years ago, but I found it more annoying then 
helpful.)


PS: What about the "suspected spam" in your subject? Is that a bug in the ML 
software or does that one come from you?

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] [OT] Being Facebook member: How to anon?

2017-10-23 Thread Nils Freydank
Am Montag, 23. Oktober 2017, 18:45:18 CEST schrieb Mick:
> On Monday, 23 October 2017 16:56:40 BST tu...@posteo.de wrote:
> > On 10/23 09:56, Stroller wrote:
> > > > On 22 Oct 2017, at 16:50, tu...@posteo.de wrote:
> > > > 
> [...] 
> Perhaps I'm missing something, but isn't using a new vanilla FF profile as
> good as it needs to be to protect your privacy in this use case?  Facebook
> will not be able to collect cookies from your previous life or anything
> else, because this will be a new fresh profile.  Store it on /tmp/Facebook/
> and it will be cleared out next time you reboot.  Fingerprinting will show
> a new FF vanilla profile, your OS, etc., but I guess this is innocuous
> enough.  It goes without saying you should not use Adobe Flash.  If you do
> 'rm -Rf ~/.adobe/ Flash_Player/' before and after.
> [...]
Hi, I add using firefox --new-instance --profile[…] with firejail just to 
block firefox’ legitimate[1] access to ~. It could still read the whole 
~/.mozilla with the default profile, but even that can be restricted with
some tweaking.

As far as I understand facebook’s major business model is to gather 
information that were more or less willingly uploaded, at least not through an 
exploit in classical sense. Breaking out of firejail through X is possible 
[citation needed..], but I hope that facebook’s manager think it would push 
users away.

In general, I don’t know what a custom user agent, and disabling general 
privacy threatening stuff[2] in firefox does for good, as most of it would 
just be useful to identify you *again* - a thing that you already provide 
yourself by logging in.

[1] This might be discussable at all as webbrowsers are quite complex 
nowadays, but this leads to a whole new discussion.

[2] https://privacytools.io is a neat site with much information about e.g. 
firefox’ modifications to disable stuff like JS battery status information. 
Yep, that exists :)
https://www.privacytools.io/#about_config should link directly to the specific 
subsection.


-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] remove gnome/systemd

2017-09-12 Thread Nils Freydank
Am Dienstag, 12. September 2017, 17:55:22 CEST schrieb Raffaele Belardi:
> After several months of Gnome3 I decided it is too heavy for my old
> workstation and would like to go back to LXDE. The flow could be:
> 
> 1. rebuild kernel with openRC support and install
> 2. emerge -C gnome networkmanager
> 3. emerge -C systemd
> 4. change profile to generic desktop (non-Gnome)
> 5. emerge -N lxde-meta
> 6. emerge -N xdm openrc anacron sysklogd sysvinit
> 7. reboot
> 
> I doubt it will be this easy... anything I'm missing, suggestions?
Hi, I’d run it a bit differently:
- change profile
- force-remove gnome (emerge -aC)
- double checking USE flags and updating @world as usual
- cleanup (emerge --ask --verbose --clean)
- install services that aren’t already installed as a dep (maybe anacron or 
ntpd/chrony)
- Adding the services to appropriate runlevels (e.g. rc-update add xdm default)

- If necessary, replacing udev with eudev. I don’t remember if it got changed 
automatically
a while ago on one of my systems due the switch.

If you didn’t explicitly removed OpenRC you have it already installed, (removal 
is possible though),
and sysvinit gets pulled in by OpenRC ;-)

BTW, I personally like elogind (a standalone "cut off" of systemd-logind) and 
can suggest it
as a surrogate for consolekit2. Support by the upstream is incredible fast.

Have fun :)
Nils
> thanks,
> 
> raffaele

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: High resolution on a 13 inch screen

2017-09-01 Thread Nils Freydank
Hi everybody,

Am Freitag, 1. September 2017, 21:08:51 CEST schrieb J. Roeleveld:
> On Friday, September 1, 2017 7:28:48 PM CEST Mart Raudsepp wrote:
> > Ühel kenal päeval, R, 01.09.2017 kell 10:16, kirjutas Grant:
> [...]
> 
> In KDE/Plasma there is a scaling setting in the display section.
> The scales go from 1 to 3 (in steps of 0.1)
> 
> Seems to work, I don't need it on my displays as I tend to simply increase
> the font-sizes where necessary.
this led to really ugly proportions on my 317,5 mm FullHD display (1920x1080 
pi).

I added "-dpi 144" to my Xorg string; in my case that’s a line in sddm config.
That one does not reflect my actual DPI (simplified sqrt(1920^2+1080^2)/12.5 = 
176),
but was after trial and error the best result I got.

Hope that helps,
Nils
-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8 31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: downgrading glibc

2017-08-22 Thread Nils Freydank
Am Dienstag, 22. August 2017, 09:01:07 CEST schrieb Raffaele Belardi:
> […]
> > [1] https://bugs.gentoo.org/show_bug.cgi?id=604430
> > [2] https://bugs.gentoo.org/show_bug.cgi?id=575232
> 
> Just as follow up, inspired by [2] I fixed the mythtv build issue by
> adding #include  to videosource.cpp and continuing the
> build with ebuild instead of emerge.
Great! In general, to improve Gentoo a bit further, you could create a patch 
at this point, test applying it via /etc/portage/patches/ and add it to the 
bugtracker (or paste it here or in IRC asking someone to paste it in your 
name) ;-)

(I guess you can avoid that in this case as another dev said that bug is fixed 
upstream now.)

BTW, mythtv has no maintainer, might you be interested in a proxied 
maintainership?


Greetings,
Nils
-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] downgrading glibc

2017-08-18 Thread Nils Freydank
Hi Raffaele,

Am Freitag, 18. August 2017, 09:00:52 CEST schrieb Raffaele Belardi:
> […]
> Downgrading the system to glibc to 2.23-r3 means trouble?
yes, you would crush your system. Therefore the even the ebuild prohibits it 
(you can enforce it, but you really shouldn’t).

You can a) brick you system: https://forums.gentoo.org/viewtopic-t-845000.html
or b) create a chroot with a blank system (new stage 3), emerge your package, 
create a binpkg, install that on the host and hope it works.

Good luck! :-)


-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] To install a testing version of a package on a stable OS installation.

2017-07-09 Thread Nils Freydank
Am Sonntag, 9. Juli 2017, 21:59:14 CEST schrieb Ста Деюс:
> Hi.
> 
> 
> Is it possible to compile/install a testing version of a package w/ its
> dependencies on a stable OS installation? [..]

Sure. It even works the other way around, e.g. I have ~amd64 and set stable for 
some
toolchain stuff (glibc as I can’t downgrade this if bug occur).

https://wiki.gentoo.org/wiki/Handbook:Parts/Portage/Branches#Mixing_stable_with_testing

Portage is awesome (awesomely slow, but also feature-rich).



> Thank you for your time,
> Sthu.

You’re welcome :-)

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Copy'n'Paste...but not for all?

2017-06-25 Thread Nils Freydank
Hi,

Am Sonntag, 25. Juni 2017, 20:12:38 CEST schrieb tu...@posteo.de:
> [...]
> 
> Looks a little weird to me...
> Is that an error, which fails to fail completly
> or is a half working feature (or do I fail
> in both cases ... ;) ?

all this sounds like the magic of different clipboards under X. I’m not into 
the details anymore, so I’ll just drop link that looks useful (and mentions
autocutsel as in x11-misc/autocutsel) to solve this:

https://bbs.archlinux.org/viewtopic.php?id=22682

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Firefox depends on rust??

2017-06-22 Thread Nils Freydank
Am Donnerstag, 22. Juni 2017, 16:41:54 CEST schrieb R0b0t1:
> [other quote]
> This is kind of troubling because much like Cabal it seems like the
> Rust package management system is insecure. Does the Firefox build
> process make use of it?

Could you please specify what in your eyes is insecure in rust’s pm?
-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Firefox depends on rust??

2017-06-22 Thread Nils Freydank
Am Donnerstag, 22. Juni 2017, 13:33:33 CEST schrieb Vadim A. Misbakh-Soloviov:
> > >=dev-lang/rust-1.15.1 to >=dev-lang/rust-1.15.1-bin.
> 
> ... to >=dev-lang/rust-bin-1.15.1
> 
> // fixed ;) /* Thanks! */
err... thanks! =-D

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Firefox depends on rust??

2017-06-22 Thread Nils Freydank
Hi,

Am Donnerstag, 22. Juni 2017, 09:13:24 CEST schrieb Danny YUE:
> Hi guys,
> I just found during upgrading my system that Firefox 54.0 depends on
> dev-lang/rust and cannot be disabled?!

as mentioned by others here FF 54 uses now some code written in Rust, so 
USE="-rust" could not build the browser.
> It really takes a long time to compile rust, and I do not want to add
> such a burden to my system compilation time.
> 
> Does anyone knows why? Any idea?
> 
> Thanks.
> 
> Danny

There is actually rust-bin in the tree - we just have to push our maintainers 
a bit to use it =)

https://bugs.gentoo.org/show_bug.cgi?id=622136

I guess the best workaround for you would be copying the firefox ebuild from 
tree to a local overlay[1], bumping it to -r1 and renaming the dependency 
>=dev-lang/rust-1.15.1 to >=dev-lang/rust-1.15.1-bin.

If the compilations works fine & and the compiled firefox runs well a small 
message plus the output of "emerge --info firefox rust" in the bugreport could 
be useful aswell.


[1] https://wiki.gentoo.org/wiki/Ebuild_repository/Local_overlay

Hope that helps while waiting for a proper fix.

Greetings,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank (proxy maintainer)
IRC: holgersson on freenode IRC servers
XMPP: nils [at] holgersson [dot] xyz

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: world rebuild with gcc-6.3.0 - not completely there yet

2017-05-08 Thread Nils Freydank
On Mon, May 8, 2017 at 19:11:28 CEST, R0b0t1:
> [...]
> It might not matter for anyone on this list, but it seems like GCC 6
> doesn't support hardening properly. I'm kind of disappointed that they
> seem to want to skip it but I can understand the amount of work they
> might be avoiding.

Could you please specify what kind of hardening isn’t supported? On
#gentoo-hardened on Freenode IRC I got the information that gcc includes
now patches that had to be patched by Gentoo in earlier versions. Therefore
-no{pie,ssp,ssppie}-subprofiles don’t exist anymore.

checksec’s[1] output didn’t change neither to something less hardened.

[1] =app-admin/checksec-1.7.5::gentoo


Greetings,
Nils

PS: Testing gcc-7.1.0 on ~amd64/hardened right now.

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Problem while writing ebuild

2017-05-04 Thread Nils Freydank
Am Donnerstag, 4. Mai 2017, 11:59:37 CEST schrieb Danny YUE:
> Hi,
> 
> As a noob in ebuild files, I got some problems while created my own
> ebuild. I googled a lot but did not really find any clue.
> 
> Let's say package A has features B and C. They are Github repositories
> and A is the entry, while B and C are submodules.
> 
> Now I want to make it three different packages respectively, and use USE
> flags to control which to install just like texlive.
> 
> 1) I know I can add USE `B' and `C' into `IUSE' variable, but if I run
> `equery u A', those flags are listed but with an ""
> description. Where can I add some description information?

In general, these descriptions are in XML files. Globally used flags (e.g. 'X' 
or 'python') are set in the portage profiles (search for ".desc" in the 
portage tree[1]). Flags used only by certain packages are in the ebuild dir in 
metadata.xml[2]. I suggest you take a look into www-client/firefox’s 
metadata.xml, because it uses even descriptions with line breaks. (Avoid the 
look into firefox’s ebuild, though :D)

> 2) Only A has Github release URL, B and C by default should be fetched
> via `git submodule...'. How am I supposed to fetch these packages in my
> ebuild file? Download inside `src_unpack'?

Sorry, I don’t know much about git submodule. Maybe there’s something useful 
in git-r3.eclass (eclass/git-r3.eclass).
 
> Any help is appreciated. Thanks in advance.
> 
> 
> Danny

[1] find /usr/portage/ -iname "*desc"
[2] find /usr/portage/ -iname "*metadata.xml"

Nils

PS: Great you write ebuilds - keep going on and suggest bugfixes for broken 
ebuilds later! :)

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] replacement for ftp?

2017-05-01 Thread Nils Freydank
On Sat, 30 Apr 2017 19:04:06 +0200 Andrew Savchenko wrote:
> [...]
> I fail to see why FTP needs to be replaced: it works, it is
> supported, it is secure when used with care, it is damn fast.

I’ll just drop the somewhat popular rant “FTP must die“[1] and a follow-up
discussion about it[2]. IMHO the main reasons are missing data integrity and
authentication security issues. The latter one can be solved with FTPS[3] - but 
honestly
I never saw FTPS somewhere actually used in the wild.


[1] http://mywiki.wooledge.org/FtpMustDie
[2] https://news.ycombinator.com/item?id=11251907
[3] i.e. FTP over SSL/TLS (not to mix up with SFTP, which comes from the SSH 
family)

Greetings,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] How to use github source in ebuild?

2017-04-08 Thread Nils Freydank
You need special variables provided by an git eclass. Newest is git-r3.eclass 
which you can find in /eclass/.

General docs are in devmanual.gentoo.org (which is mostly up-to-date).

Here is an example in my overlay (inside the portage tree are several others, 
too):

https://git.holgersson.xyz/holgersson-overlay/tree/games-fps/urbanterror/
urbanterror-.ebuild

HTH,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: [OT] busybox fsck vs. fsck.ext4 ... experiences?

2017-03-31 Thread Nils Freydank
[...]
> The fsck.*'s are built in

I agree:

% bb
~ $ which fsck
~ $ fsck -v
fsck (busybox 1.26.2, 2017-03-12 11:38:12 CET)


-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Wiping the old root without killing the new root

2017-03-17 Thread Nils Freydank
Am Freitag, 17. März 2017, 17:24:27 CET schrieb tu...@posteo.de:
> Hi,
> 
> Finally I moved to my new root and it seems to be $HOME
> enough to wiupe the old root.

> The old root is on a separate partition to which I will move
> the contents of the new root after wiping the new root.
=> I would just unmount the partition and wipe it on FS level (i.e. running 
mkfs with some kind of --force parameter). Another way would running find to 
find and remove symlinks, but putting that one together and removing files 
after could consume more time than mkfs ;)

> May be the following question is born from to much worry, but...
> 
> First I thought: Mount the old root to a certain mountpoint
> somewhere, cd into it (as root) and do a rm -rf
BTW, avoid "rm -rf /" (yes, I know, there are DAU checks now) on UEFI systems,
because they tend to mount essential stuff rw and don’t like deletion of 
stuff.

> [...]

Greetings,
Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Latest LLVM wants to pollute my machine with VIM stuff.....

2017-03-15 Thread Nils Freydank
Am Mittwoch, 15. März 2017, 15:33:10 CET schrieb Andrew Lowe:
> Hi all,
Hi,

>   I'm still trying to come to grips with understanding ebuilds so please
> bear with me if this is a simple question. I've just sync'd and then
> done an
> 
>   emerge --ask -NuD world
> 
> I have LLVM/clang installed and upon browsing the updates saw
> app-vim/llvm-vim. This is some sort of syntax highlighting thingy for
> Vim. I don't have Vim installed so went into the llvm-4.0.0 ebuild and
> saw the line
> 
> PDEPEND="app-vim/llvm-vim
> 
> My understanding is that PDEPEND means that something, in this case
> llvm-vim, will be installed after the update of llvm - correct? If so, I
> can't see any way of "turning this off" as I don't want even more junk
> installed on my machine.
> 
>   Have I understood the ebuild correctly and it could do with a "fiddle"
> so that it doesn't force this install?
> 
>   Regards,
>   Andrew

well, I just asked in IRC on Freenode about that and a dev pointed out, that 
the new dep for vim files is actually putting files *outside* the package to 
avoid file collisions with slotted packages. So I took a look myself with 
clang < 4.0 (needed on my system anyways thanks to rust):

% equery f llvm|grep vim
/usr/share/vim
/usr/share/vim/vimfiles
/usr/share/vim/vimfiles/llvm-lit.vim
/usr/share/vim/vimfiles/llvm.vim
/usr/share/vim/vimfiles/tablegen.vim

% du -ch $(equery f llvm|grep vim) 2> /dev/null
4,0K/usr/share/vim/vimfiles/llvm-lit.vim
8,0K/usr/share/vim/vimfiles/llvm.vim
4,0K/usr/share/vim/vimfiles/tablegen.vim
16K total

So well, 16KB in sum. Funny to see the “outsourced“ ebuild is exactly the same 
size.

All in all I consider that way a bit ugly, but for this size I agree it’s 
really wasted energy [and as the mentioned dev pointed out, discussing this 
matter takes way more space than the issue itself].

Greetings,
-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Steam downloading extremely

2017-03-15 Thread Nils Freydank
Hi guy,

Am Mittwoch, 15. März 2017, 14:24:10 CET schrieb Danny YUE:
> Hi guys,
> 
> I just got Steam installed and running successfully on my machine,
> and tried to get CS:GO running smoothly, which made me really happy :-D
nice to hear, have fun with that!

> However when Steam is downloading games, the speed is extremely slow,
> down to several KB/s, even some bytes/s.
> I have already installed dnsmasq and it *was* good during downloading
> CS:GO (~4MB/s), but became slow again with Civilization V.
> 
> I googled a lot but all point to installing dnsmasq, which I don't think
> is really helpful since I already have done that...
Just installing dnsmasq doesn’t change anything, and just starting it does 
neither. I *assume* you did set it up as a local DNS cache, but please provide 
some information about it:
- the source of the information, i.e. link to the page
- your setup:
* dnsmasq config
* /etc/resolv.conf
* other configs you think that matter here
 
> Also I'm sure downloading region is correct.
> 
> Anybody experienced the same issue with dnsmasq installed?
> Any clue is welcome and thanks in advance.
> 
> 
> Danny

Nils

-- 
GPG fingerprint: '00EF D31F 1B60 D5DB ADB8  31C1 C0EC E696 0E54 475B'
Nils Freydank

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] nmap - device name.

2017-02-11 Thread Nils Freydank
Hi Thelma and others,

On Fri Feb 10 2017, 18:34:34 CET wrote the...@sys-concept.com:
> When I scan my local network:
> nmap  -sn 10.10.0.0/24
> 
> It prints all the devices connected to it but sometimes it prints the
> device "name" and sometimes it doesn't eg:
> 
> Nmap scan report for iaxy (10.0.0.108)
> Host is up (-0.095s latency).
> MAC Address: 00:0F:D3:00:30:DD (Digium)
> 
> Nmap scan report for 10.10.0.3
> Host is up (0.00017s latency).
> MAC Address: 54:7F:54:76:61:0D (Ingenico)
> 
> "...for "name" + IP"
> "...for + IP
> 
> Where is it taking the "name" from?
> It would like to assign a label "name" to all devices.
> --
> Thelma

I’d say that the name "iaxy" is a via DNS (reverse) resolved hostname; maybe
there is a DNS server running (or there are entries in /etc/hosts) or it’s just
zeroconf/bonjour[1], which runs nowadays virtually everywhere.

The other part looks to me as vendors names nmap got from the MAC addresses
which first parts are vendor specific.

A quick search[2] gave me these two results (beside some other ones) who seem
to confirm my thoughts:

http://superuser.com/questions/702309/how-to-get-device-name-from-scan-like-nmap-on-linux
http://stackoverflow.com/questions/27817412/why-nmap-sometimes-does-not-show-device-name

[1] https://en.wikipedia.org/wiki/Zero-configuration_networking
[2] https://duckduckgo.com/?q=nmap+device+names=ffab=qa

Hope that helps you :)

PS: What exactly does '-sn' (or is it just a typo)? My nmap doesn't complain
when I use it, but the manpage only knows about '-sN' here
(net-analyzer/nmap-7.40).

-- 
Nils Freydank
GnuPG-Key: 0x44594171807206CF @ hkp://keys.gnupg.net
   fpr: AA2D 5CC0 0457 297F 6164  3911 4459 4171 8072 06CF

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Seamonkey/Firefox library USE flags

2017-01-22 Thread Nils Freydank
On Wed, Jan 18 2017, 19:13:36 CET wrote Dale:
> Howdy,
Hi! 
> Looking to see how others do this.  I noticed that some "system" stuff
> was disabled which I assume means Seamonkey and Firefox would then
> compile their own versions of those things or something.  This is the
> ones in question:
> 
> system-harfbuzz
> system-icu
> system-jpeg
> system-libevent
> system-libvpx
> system-sqlite
> system-cairo
> 
> Questions.  How do you set yours and why if you know why?  Which one is
> most stable?  Any other advantages to having it one way or the other.
> Should some be on and others off?

I prefer to use system libs because upstream bundled libs are in nearly every 
project now and then huge security risks (i.e. quite old libraries once(!) 
imported from another project, slightly modified, never updated)[1].

However, I had to test a bit around which system-* flags don’t crash and 
currently my setup contains firefox-50.0.1-r1::gentoo with

“system-harfbuzz system-icu system-jpeg system-libvpx system-sqlite“

and the rest needs to be used from bundled setups — at least that was the 
state at firefox-49 and I didn’t really test more system-libs since then.
My system is ~amd64 on Haswell i5, SELinux no-multilib profile and systemd, 
gcc-5.4.0-r2-hardened as compiler.

[1] Fun fact: spidermonkey seems to be the one anti example: bundled in 0ad is 
always major versions ahead of what is on the mozilla overlay(sic!). These 
poor guys need definetly assistance! :)

> Thanks.
Hope that helps,
Nils

> [...]


-- 
Nils Freydank
GnuPG-Key: 0x44594171807206CF @ hkp://keys.gnupg.net
   fpr: AA2D 5CC0 0457 297F 6164  3911 4459 4171 8072 06CF

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Brother Printer

2016-12-09 Thread Nils Freydank
Hello Silvio,

At thursday, dec 8 2016, 15:08:34 CET wrote siefke_lis...@web.de:
> Hello,
> 
> when I want use a Brother Printer (MFC 7320) it's need multilib? How can
> I fix this?
> 
> siefke@sisibox ~ $ eselect profile list
> Available profile symlink targets:
> ...
>   [11]  default/linux/amd64/13.0/no-multilib *
> ---
I’m running two brother printers with “upstream“ drivers, ebuilds copied from 
brother overlay and modified regarding my needs. The drivers are binary 32bit 
ones for x86/i686 .deb or .rpm (in my case the rpm ones), so you *definitely* 
would need to migrate to an multilib profile - and I don’t know how awful this 
would become.
> At moment I use no-multilib but what must do for use multilib with a Brother
> Multi Function Printer.
You can change your profile one *without* the term "no-multilib".

But to be honest the suggestion by Betram looks most appealing to me (and I 
consider even migrating my stuff to this one!).

> Thank you for help.
> 
> Silvio


-- 
Nils Freydank
GnuPG-Key: 0x44594171807206CF @ hkp://keys.gnupg.net
   fpr: AA2D 5CC0 0457 297F 6164  3911 4459 4171 8072 06CF

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Dirty COW bug

2016-10-22 Thread Nils Freydank
On Fri, Oct 21, 2016 at 13:39:54 CEST wrote Rich Freeman:
> On Fri, Oct 21, 2016 at 12:22 PM, Alexander Kapshuk
> [...]
> 
> So, if you're staying in the same kernel series (4.4) you should just
> be able to run make oldconfig and that's it.  You can take a look but
> I'd be shocked if you're either prompted for any new settings or if
> anything doesn't work exactly as before.  You might just be missing a
> random patch or two (gentoo-sources doesn't have that many of them).
> 
> Going between kernel series is going to be the same as always, you'll
> be asked a dozen questions for new options.
> 
> Now, the one thing you'll lose without the Gentoo options is that if
> an openrc/systemd/udev/whatever requirement changes it won't just
> automatically get pulled in.  You'll need to find out about it and
> manually update your config. 
Regarding this matter I’d like to share my usage here, hoping it would help to 
avoid the missing-config-entries issue (in short: I patch vanilla upstream 
myself):

I run vanilla upstream kernels and just pick the patches from genpatches/
gentoo-sources I think I need. Currently mine are:
 1500_XATTR_USER_PREFIX.patch
 1510_fs-enable-link-security-restrictions-by-default.patch
 2900_dev-root-proc-mount-fix.patch
 4567_distro-Gentoo-Kconfig.patch
 5010_enable-additional-cpu-optimizations-for-gcc.patch

My workflow for kernel upgrades there for is
- downloading the kernel, checking with GPG signatures
- extraction to /usr/src/
- patching the new kernel
- copy the old .config
- run make nconfig, maybe change something if needed, save and quit
- run make and install the rest as usual (maybe create initramfs and other 
things)

Or in short: "cd /usr/src// && patch -p1 < ../patches/
patches-/* && cp ../usr/src//.config .config && 
make nconfig"

That way I have full control over the patches I use and can use *my* config 
from minor release to minor release without running into any trouble.

Maybe I`ll put that stuff into an ebuild…someday.. :P
> [...]

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Call for opinions and/or use cases regarding games.eclass

2016-07-04 Thread Nils Freydank
At Friday, 1. Juli 2016, 01:27:37 CEST wrote Daniel Campbell:
> Most of us know about the games.eclass history. Let's put that aside;
> I'm looking for user consensus on packages that use(d) games.eclass.
> 
> 1. Do you take advantage of games.eclass features, including restricting
> game access to a given group and installing games outside of /usr and/or
> on different media?
Yes, I do use the games.eclass (or did it with EAPI=5) for installing all 
games at least into a different subdirectories than default $PATH. In addition 
I use a different user “games“ with $HOME=/home/games. This has its origins 
primarily in my personal way of data organisation & backups. All data that 
belong to any games which are „not packaged by portage“ (some games binaries, 
cached files, highscores, ...) are inside that home dir.

> 2. If yes, how do you feel about the removal of the eclass? Did you rely
> on its functionality? Does your use case require it?
I only used the eclass to separate games binaries and data from my main / to a 
different location where only the games user has acces to.

> 3. If yes, _what is your use case_? Which features are important to your
> use case wrt games and what can Gentoo do to improve that?
Honestly I didn’t really took a deeper look into all of games.eclass’s 
functions, because it was labeld deprecated shortly after I started using it.

> We cannot make concrete decisions without concrete evidence, so please
> answer and speak for your use case. This will serve as a public record
> of interest, and might even inspire a few people. :)
Great use ask the users - that’s how a community should work :)
 
> Thanks for your time,
Thanks for your call here ;)
 
> ~zlg
~nils

--
Nils Freydank, GnuPG: 0x44594171807206CF
holgersson at IRC/freenode


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] [OT] program compiled with libcrypt on Raspberry PI (running Gentoo) hangs when run

2016-06-26 Thread Nils Freydank
Hello!

On Sunday, 26. Juni 2016, 18:05:26 CEST wrote Mr. Dan Johansson:
> The following code snippet compiles find but when run it just hangs forever

I compiled it (after simpel copy’n’paste) and run it at x86 and and Raspberry 
Pi first gen (B+). Hung nowhere. 

> 
> $ cat x.c
> #include 
> #include 
> #include 
> 
> int main() {
> printf("Running test\n");
> char *encrypted = crypt("blablabla","ab");
> if(!encrypted || strcmp(encrypted,"ab.h7fshjf89f")) {
> printf("Fail\n");
> } else {
> printf("OK\n");
> }
> }
> 
> $ gcc -o xout x.c -lcrypt
> 
> $ ./xout
> Running test
> 
> 
> 
> The same code runs fine on my desktop.
> Any suggestions what could be my problem?

=> My output at ~amd64 and Raspberry Pi (~arm) was:
===
fancy_user @ fancy_gentoo_host$ ./xout
Running test
Fail
===
Maybe a strace (with dev-util/strace) tells you more (just a guess).
If I can help with more specific informations and/or tests feel free to ask :)


Greetings,,
Nils

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] [OT] awk - sed - grep = tying-myself-up-in-knots

2016-02-10 Thread Nils Freydank
Hi Mick!

Am Mittwoch, 10. Februar 2016, 17:02:46 CET schrieb Mick:
> I've been struggling to parse/split/substitute some names and numbers using
> a spreadsheet and think that this task may be easier to achieve using
> conventional *nix tools. The problem is I wouldn't know where to start.

I was taught by other linux users (mostly fanatic KISS people from Archlinux 
:D) to use as less different tools and therefor dependencies for a script/
shell command as possible. In your case, simple bash might be even enough:

Check the bash man page for "PARAMETER EXPANSION" (these $
{foo...somethingspecial} instead of $foo).

> I have a directory with loads of images.  Each image file name has a
> description comprising hyphen-separated words and a part number, also hyphen
> separated; e.g.:

> some-description-with-words-012-63099.jpg
> 
> The number and length of the words change for each file.  The part number
> always has two components separated by a hyphen, but may also change in
> length and acquire more/fewer digits.
> 
> I need two outputs:
> 
> 1. the description + " (per M²)", like so:
> 
> some-description-with-words (per M²)

Just save both informations to one variable, then print/echo the value of 
these variables (something like "echo $VAR1 $VAR2" or even "echo $VAR1 (per 
M²)".

> 2. the part number, but replacing the hyphen with "/", like so:
> 
> 012/63099

Again, parameter substitution might work. :-)

> I can list the directory contents and redirect all image file names into a
> txt file.  What I am looking for is some additional steps I can pipe it
> through to obtain the two outputs, either in the same file or different
> files.  These file(s) are then imported into a spreadsheet template and
> manipulated, before the result is ultimately exported from the spreadsheet
> and uploaded to a server as a CSV file.
> 
> Is this parsing, splitting and substitution exercise achievable?  Any
> suggestions to try out?
"Everything is possible"™


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] [OT] Manipulating a mobile external harddisk

2016-02-01 Thread Nils Freydank
Hi,

Am Dienstag, 2. Februar 2016, 07:29:16 CET schrieb meino.cra...@gmx.de:
> [...]
> Is it advisable to try to longen the active time before the disk
> goes idle to prolong the lifetime ?

honestly I don't know what is worse - running the HDD permanently or parking 
the heads too often. I'm not a server (hardware) guy, but I remeber reading 
"consumer vs. server HDDs" nearly everytime HDDs are discussed. It might be 
possible that this is
a) only marketing stuff
b) the server HDDs are worse and just shouldn't get parked that often (most 
unlikely)
c) the server HDDs have simply a longer 24/7 up lifespan due to let's say 
better heat dissipation or something like that.
or propably a combination of these plus other aspects I didn't know.

> Is it possible to do this with hdparm?

Sure. Take a look at
- https://wiki.gentoo.org/wiki/Hdparm "Set the standby (spin-down after 
idling) timeout."
- "man 8 hdparm"

Obviously you search for "-S #something" as parameter ;-)

> It is a sane idea? ;)
As said above..don't really know, sorry.

> Best regards,
> Meino

Best regards,
Nils

signature.asc
Description: This is a digitally signed message part.