[gentoo-commits] proj/elections:master commit in: /
commit: 9629cf285e461313b68438ecc4f6a25532c0c137 Author: Robin H. Johnson gentoo org> AuthorDate: Thu Jun 30 22:36:10 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Thu Jun 30 22:36:10 2022 + URL:https://gitweb.gentoo.org/proj/elections.git/commit/?id=9629cf28 Votify: accept symlinks as well as files Signed-off-by: Robin H. Johnson gentoo.org> Votify.pm | 20 statify | 4 ++-- 2 files changed, 14 insertions(+), 10 deletions(-) diff --git a/Votify.pm b/Votify.pm index 35a717f..db311ea 100644 --- a/Votify.pm +++ b/Votify.pm @@ -56,9 +56,9 @@ sub validate_election_dir { my %REQUIRED_FILES_valid = map { my $file_valid = 0; # Legacy naming: -$file_valid = 1 if -f sprintf("%s/%s-%s", $election_dir, $_, $election_name); +$file_valid = 1 if -r sprintf("%s/%s-%s", $election_dir, $_, $election_name); # New naming: -$file_valid = 1 if -f sprintf("%s/%s", $election_dir, $_); +$file_valid = 1 if -r sprintf("%s/%s", $election_dir, $_); #printf "File %s valid=%d\n", $_, $file_valid; ($_, $file_valid); } @REQUIRED_FILES; @@ -132,7 +132,7 @@ sub get_single_election_hashref { #print STDERR "Scan $fn\n"; my @filenames = (sprintf("%s/%s", "$basedir/$election_name", $fn), sprintf("%s/%s-%s", "$basedir/$election_name", $fn, $election_name)); #print STDERR Dumper(@filenames); -my $filename = abs_path(List::Util::first { $_ && -f $_ } @filenames); +my $filename = abs_path(List::Util::first { $_ && -r $_ && -s $_ && ! -d $_ } @filenames); $election{"${fn}file"} = $filename; }; #print Dumper(%election); @@ -258,7 +258,7 @@ sub write_confs { $filename ||= $self->{'default_filename'}; $self->{'filename'} = $filename; -if (-f $filename) { +if (-e $filename) { die "$filename already exists; please remove it first"; } @@ -319,7 +319,11 @@ sub collect { next; } -if (-f "$home/.ballot-$self->{election}-submitted") { +my $submitted_filename = "$home/.ballot-$self->{election}-submitted"; +if (-d $submitted_filename) {} +print STDERR "Warning: $v has a directory instead of a ballot\n"; +} +elsif (-e $submitted_filename && -r $submitted_filename) { my ($b) = Ballot->new($self->{'election'}); $b->read("$home/.ballot-$self->{election}-submitted"); if ($b->verify) { @@ -329,7 +333,7 @@ sub collect { $self->{'ballots'}{$c} = $b; $self->{'casting_voters'}{$v} = 1; } -elsif (-f "$home/.ballot-$self->{election}") { +elsif (-e "$home/.ballot-$self->{election}") { print STDERR "Warning: $v did not submit their ballot\n"; } } @@ -341,7 +345,7 @@ sub write_master { $filename ||= $self->{'default_filename'}; $self->{'filename'} = $filename; -if (-f $filename) { +if (-e $filename) { die "$filename already exists; please remove it first"; } @@ -380,7 +384,7 @@ sub write_casting_voters { $filename ||= $self->{'default_filename'}; $self->{'filename'} = $filename; -if (-f $filename) { +if (-e $filename) { die "$filename already exists; please remove it first"; } diff --git a/statify b/statify index b7c9396..0cccff1 100755 --- a/statify +++ b/statify @@ -86,9 +86,9 @@ for my $election_name (keys %open_elections) { my ($count_voters, $count_submit, $count_pending) = (0, 0,0); for my $votername (@voters) { $count_voters++; - if(-f catfile('/home', $votername, ".ballot-${election_name}-submitted")) { + if(-e catfile('/home', $votername, ".ballot-${election_name}-submitted")) { $count_submit++; - } elsif (-f catfile('/home', $votername, ".ballot-${election_name}")) { + } elsif (-e catfile('/home', $votername, ".ballot-${election_name}")) { $count_pending++; } }
[gentoo-commits] repo/gentoo:master commit in: dev-util/rats/
commit: d2980713ca041d2da87cc65197e07c2c72534a4b Author: Robin H. Johnson gentoo org> AuthorDate: Tue Jun 28 16:35:15 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue Jun 28 16:36:12 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d2980713 dev-util/rats: update EAPI & HOMEPAGE Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://bugs.gentoo.org/show_bug.cgi?id=683916 dev-util/rats/{rats-2.4.ebuild => rats-2.4-r1.ebuild} | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/dev-util/rats/rats-2.4.ebuild b/dev-util/rats/rats-2.4-r1.ebuild similarity index 89% rename from dev-util/rats/rats-2.4.ebuild rename to dev-util/rats/rats-2.4-r1.ebuild index 7f63c3779f30..0adcbf0ae280 100644 --- a/dev-util/rats/rats-2.4.ebuild +++ b/dev-util/rats/rats-2.4-r1.ebuild @@ -1,12 +1,13 @@ # Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 -EAPI=6 +EAPI=8 inherit edos2unix DESCRIPTION="RATS - Rough Auditing Tool for Security" -HOMEPAGE="https://code.google.com/p/rough-auditing-tool-for-security/; +HOMEPAGE="https://github.com/andrew-d/rough-auditing-tool-for-security; +# No tags available in the GitHub port SRC_URI="https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/rough-auditing-tool-for-security/${P}.tgz; LICENSE="GPL-2"
[gentoo-commits] repo/gentoo:master commit in: dev-util/rats/
commit: bf2e143a569b787f97a396494424b35768a52a2b Author: Robin H. Johnson gentoo org> AuthorDate: Tue Jun 28 16:35:43 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue Jun 28 16:36:12 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bf2e143a dev-util/rats: stable x86 and amd64 I've been using this for a decade, it should probably be in stable. Signed-off-by: Robin H. Johnson gentoo.org> dev-util/rats/rats-2.4-r1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dev-util/rats/rats-2.4-r1.ebuild b/dev-util/rats/rats-2.4-r1.ebuild index 0adcbf0ae280..d252d30fb296 100644 --- a/dev-util/rats/rats-2.4-r1.ebuild +++ b/dev-util/rats/rats-2.4-r1.ebuild @@ -12,7 +12,7 @@ SRC_URI="https://storage.googleapis.com/google-code-archive-downloads/v2/code.go LICENSE="GPL-2" SLOT="0" -KEYWORDS="~amd64 ~ppc ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos" +KEYWORDS="amd64 ~ppc ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos" IUSE="" RDEPEND="dev-libs/expat:="
[gentoo-commits] proj/elections:master commit in: /
commit: fe4e279fb5adbb90e780dc13d1c7db9e94737d20 Author: Robin H. Johnson gentoo org> AuthorDate: Sat Jun 25 16:29:10 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Jun 25 16:31:03 2022 + URL:https://gitweb.gentoo.org/proj/elections.git/commit/?id=fe4e279f statify: fix chown Signed-off-by: Robin H. Johnson gentoo.org> statify | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/statify b/statify index 752c78d..b7c9396 100755 --- a/statify +++ b/statify @@ -108,14 +108,15 @@ for my $election_name (keys %open_elections) { .sprintf("Pending Turnout: %02.3f%%\n", ($count_submit+$count_pending)*100.0/$count_voters); print "$results_buffer\n"; - umask 057; + umask 077; for my $officialname (@officials) { my $fn = catfile('/home', $officialname, 'voter-turnout-'.$election_name); open(F, '>', $fn) or die("failed to open voter turnout file ($fn): $!"); print F $results_buffer; close F; - chown ((getpwnam($officialname))[2]), 0, ($fn) or + my $uid = (getpwnam($officialname))[2]; + chown($uid, -1, $fn) or die("failed to chown voter turnout file ($fn): $!"); } }
[gentoo-commits] proj/genkernel:master commit in: /
commit: 248bd41e5d20cf42652295148c7856a39d94591c Author: Robin H. Johnson gentoo org> AuthorDate: Tue Jun 21 02:53:29 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue Jun 21 02:53:29 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=248bd41e Merge Enable threaded XZ compression by default Merges: https://github.com/gentoo/genkernel/pull/41 Closes: https://github.com/gentoo/genkernel/pull/41 Signed-off-by: Robin H. Johnson gentoo.org> defaults/compression_methods.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
[gentoo-commits] proj/genkernel:master commit in: defaults/
commit: db1df8ea5a42ce058f12473ea79de3ac1f8afb4f Author: Maciej S. Szmigiero maciej szmigiero name> AuthorDate: Fri Jun 10 22:23:32 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Jun 10 22:23:53 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=db1df8ea Enable threaded XZ compression by default With the current proliferation of multi-core CPUs enabling threaded XZ compression brings very significant runtime improvement: on my 4-core system the total genkernel runtime drops from 356 seconds to 166 seconds (a reduction of more than 50%) - so let's enable this mode by default. Signed-off-by: Maciej S. Szmigiero maciej.szmigiero.name> defaults/compression_methods.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defaults/compression_methods.sh b/defaults/compression_methods.sh index b65f057..37abf46 100644 --- a/defaults/compression_methods.sh +++ b/defaults/compression_methods.sh @@ -32,7 +32,7 @@ GKICM_LZMA_EXT=".lzma" GKICM_LZMA_PKG="app-arch/xz-utils" GKICM_XZ_KOPTNAME="XZ" -GKICM_XZ_CMD="xz -e --check=none -z -f -9" +GKICM_XZ_CMD="xz -e --check=none -z -f -9 -T 0" GKICM_XZ_EXT=".xz" GKICM_XZ_PKG="app-arch/xz-utils"
Re: [gentoo-dev] Packages up for grabs: e.g. www-servers/nginx, www-apps/nikola, app-admin/rsyslog, ...
Infra need/wants a few of these packages, so please consider us fallback maintainers: On Sun, Jun 05, 2022 at 11:28:30AM +0300, Joonas Niilola wrote: > app-metrics/mysqld_exporter > net-libs/zeromq > net-misc/httpstat > sys-apps/hponcfg > sys-block/hpacucli > sys-block/hpssacli > sys-block/storcli > sys-process/incron -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
Re: [gentoo-dev] Interest in a yarn / NPM eclass
On Wed, Jun 08, 2022 at 07:23:15PM +0200, Alessandro Barbieri wrote: > I'm interested in an eclass that doesn't bundle everything together. Also > I'm interested in anyone that can share the package maintainership (in guru > first). > > I've already tried 3 approaches: ... Since you know this yarn/NPM ecosystem well, could you evaluate two other ideas? 4) Solutions like EGO_SUM 5) EGO_SUM successor of 2nd-level-Metadata-Manifest that I described in the recent EGO_SUM thread. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
Re: [gentoo-dev] About EGO_SUM
On Fri, Jun 03, 2022 at 01:18:08PM +0200, Florian Schmaus wrote: > EGO_SUM is marked as 'deprecated' in go-module.eclass [1, 2]. I > acknowledge that there are packages where the usage of EGO_SUM is very > problematic. However, I wonder if there are packages where using > dependency tarballs is problematic while using EGO_SUM would be not. ... [snip all the great points] > Even more problematic are that dependency tarballs require additional > steps that would not be required when EGO_SUM is used. While those steps > appear simple, behavioral theory shows that even the tiniest additional > steps have a huge impact (e.g., online shops loose a relative large > share of customers if for each an additional checkout step). If we force > dependency tarballs for Go software, then packaging Go software just > become a little bit harder. Your above is entirely correct, and I was against the plan to introduce dependency tarballs. > This leads me to the question why are we actually deprecating EGO_SUM? > It seems like a nice alternative for Go packaging that we may want to > keep. But maybe I am missing something? EGO_SUM vs dependency tarballs: - bloats ebuilds - bloats Manifests - bloats metadata/md5-cache/ (SRC_URI etc) - doesn't bloat mirrors with gentoo-unique distfiles - EGO_SUM is verifiable/reproducible from Upstream Go systems - less downloads on upgrades (only changed Go deps, not entire dep tarballs) EGO_SUM data right now adds, to every user's system: - 2.6MB of text to ebuilds (340k after de-dupe) - 7MB of text to Manifests (2M after de-dupe) - 6.4MB+ of text to metadata/md5-cache (I don't have a easy way to calc deduped amount here) On the server side: - The sum total of Go distfiles mirrored on Gentoo mirrors right now is only 3.4GB. - less downloads Dependency tarballs: - Right now ~15GiB on each mirror, plus storage of the primary copy somewhere (dev.g.o right now, but not great) - Conservatively if the remaining EGO_SUM packages converted to Dep tarballs, it would need another 8GB each of primary location and mirrors. - larger downloads for users who DO want to upgrade a Go package (all new deps tarball even if only one or two deps changed) - must be preserved much longer, unless we can introduce a guaranteed way to regenerate them for any prior ebuild. I was trying to introduce a third option, but I haven't had the time to write an entire GLEP. The TL;DR is introducing a 2nd-level Manifest+metadata file, that tries to move just the metadata out of the tree, in a way that can be regenerated (specifically, a 1:1 reproducible creation from a given go.sum). It DOES need to contain slightly more data than the present Manifest, specifically a full SRC_URI entry for each file (upstream URI plus what to rename it to on Gentoo side) The 2nd-level Manifest would be listed as SRC_URI, and be handled in src_fetch/src_unpack. Download & verify the extra distfiles, against the Manifest checksum data (and for Golang against go.sum checksums). The Portage mirrordist code needs the most work in this case, as it would need to fetch the 2nd-level Manifests so it can populate Gentoo mastermirror with the distfiles mirrored from upstream. The storage costs for the proposed idea: - same 1:1 base distfile storage as EGO_SUM (e.g. upstream distfiles are mirrored 1:1 content, just different naming) - Probably 1 Metadata-Manifest file per ebuild $PVR (conceptually it could be split more or shared between some ebuilds/packages) - Main tree Manifests: 1 DIST entry per Metadata-Manifest in a given package - Main tree ebuilds: 1 line for the Metadata-Manifest in the ebuild. - metadata/md5-cache: 1 src_uri line! - mirrors: add the Metadata-Manifest -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-user] Re: mailing list problem: changing subscription type
(Replying as listowner, but I'm also on the nomail version of gentoo-user, please CC to gentoo-user+ow...@lists.gentoo.org or to me directly for most mail) On Mon, May 30, 2022 at 07:35:20AM +0530, Madhu wrote: > I had subscribed to gentoo-user on 2022-05-25, and posted a message on > that date. > > I then wished to change my subscription to no-mail delivery. The > instructions I received after sending a message to > gentoo-user+h...@lists.gentoo.org indicated I could do this by sending > a message to gentoo-user+subscribe-nom...@lists.gentoo.org, which I > did. and I got a response saying > > "Thank you for confirming your subscription. You have now been added to the > no-mail version of the list." > > However the email address is still receiving messages from the > list. Apparently my email is subscribed on two lists - the mail > version and the non-mail version, and there doesn't seem to be any way > to unsubscribe only from the mail-version while remaining on the > latter. ... > Could I request the list owner to make sure I remain subscribed to the > the list while not receiving copies in the mail? I don't see any requests to unsubscribe from the regular version of the list. The regular/digest/nomail subscriptions are entirely independent. Just subscribing to the nomail version of the list does not impact your other subscriptions at all. Did some part of the documentation make you think it would impact the subscription? Regardless, how do you feel the documentation could improve to make it clear that they are separate. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-commits] proj/genkernel:master commit in: /
commit: aef014f88bd2ef8a125ca082bb654e7a64f8b77c Author: Robin H. Johnson gentoo org> AuthorDate: Sun May 29 16:52:12 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun May 29 16:52:12 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=aef014f8 Fixes a mistake with quotation usage when testing for LVM flag Closes: https://github.com/gentoo/genkernel/pull/39 Merges: https://github.com/gentoo/genkernel/pull/39 Signed-off-by: Robin H. Johnson gentoo.org> defaults/linuxrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
[gentoo-commits] proj/genkernel:master commit in: defaults/
commit: 2f5a7fc596bdf919f41ddc5df063abf109af6758 Author: FlyingWaffle pm me> AuthorDate: Sat May 28 21:24:41 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat May 28 21:24:41 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=2f5a7fc5 Fixes a mistake with quotation usage when testing for LVM flag. Signed-off-by: FlyingWaffle pm.me> defaults/linuxrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defaults/linuxrc b/defaults/linuxrc index 9daad4a..2f94eb4 100644 --- a/defaults/linuxrc +++ b/defaults/linuxrc @@ -672,7 +672,7 @@ if [ "${CDROOT}" != '1' ] then if ( [ -n "${CRYPT_SWAP_KEY}" ] && [ -z "${CRYPT_SWAP_KEYDEV}" ] ) || \ ( [ -n "${CRYPT_SWAP_HEADER}" ] && [ -z "${CRYPT_SWAP_HEADERDEV}" ] ) || \ - ( [ "${REAL_ROOT}" = "${REAL_RESUME}" ] || [ ${USE_LVM_NORMAL} -eq 1 ] ) + ( [ "${REAL_ROOT}" = "${REAL_RESUME}" ] || [ "${USE_LVM_NORMAL}" = '1' ] ) then # the swap key or header might be on the root fs so start it first in this case start_LUKS_root
[gentoo-commits] proj/genkernel:master commit in: defaults/
commit: eba3381a9d7039cf0a1d066299b1d40e91d23226 Author: FlyingWaffle pm me> AuthorDate: Sat May 28 20:32:49 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat May 28 20:32:49 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=eba3381a Additional test to allow for hibernation resume... ...on a broader range of system configurations, including LVM and swapfiles. Signed-off-by: FlyingWaffle pm.me> defaults/linuxrc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/defaults/linuxrc b/defaults/linuxrc index 5ee7804..9daad4a 100644 --- a/defaults/linuxrc +++ b/defaults/linuxrc @@ -671,7 +671,8 @@ keyctl_keyadd if [ "${CDROOT}" != '1' ] then if ( [ -n "${CRYPT_SWAP_KEY}" ] && [ -z "${CRYPT_SWAP_KEYDEV}" ] ) || \ - ( [ -n "${CRYPT_SWAP_HEADER}" ] && [ -z "${CRYPT_SWAP_HEADERDEV}" ] ) + ( [ -n "${CRYPT_SWAP_HEADER}" ] && [ -z "${CRYPT_SWAP_HEADERDEV}" ] ) || \ + ( [ "${REAL_ROOT}" = "${REAL_RESUME}" ] || [ ${USE_LVM_NORMAL} -eq 1 ] ) then # the swap key or header might be on the root fs so start it first in this case start_LUKS_root
[gentoo-commits] proj/genkernel:master commit in: /
commit: d244a241a7565b920ba0a30274fddc5c88ea0e8a Author: Robin H. Johnson gentoo org> AuthorDate: Sat May 28 20:53:41 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat May 28 20:53:41 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=d244a241 Additional test to allow for hibernation resume Merges: https://github.com/gentoo/genkernel/pull/38 Closes: https://github.com/gentoo/genkernel/pull/38 Signed-off-by: Robin H. Johnson gentoo.org> defaults/linuxrc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)
[gentoo-commits] proj/genkernel:master commit in: defaults/
commit: 08c60969a77ae7ce836691b3419429296810b6e8 Author: Dmitry Baranov gmail com> AuthorDate: Tue May 24 23:42:30 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue May 24 23:51:47 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=08c60969 defaults/initrd.scripts: openLUKS(): remove extra bracket in conditional block Signed-off-by: Dmitry Baranov gmail.com> defaults/initrd.scripts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defaults/initrd.scripts b/defaults/initrd.scripts index eb556d6..7012356 100644 --- a/defaults/initrd.scripts +++ b/defaults/initrd.scripts @@ -1848,7 +1848,7 @@ openLUKS() { good_msg "The LUKS device ${LUKS_DEVICE} meanwhile was opened by someone else." break # if crypt_silent=1 and some error occurs, enter shell quietly - elif [ \( ${CRYPT_SILENT} -eq 1 \) -a \( \( \( ${DEV_ERROR} -eq 1 \) \) ] + elif [ \( ${CRYPT_SILENT} -eq 1 \) -a \( \( ${DEV_ERROR} -eq 1 \) \) ] then run_emergency_shell elif [ \( ${CRYPT_SILENT} -eq 1 \) -a \( \( \( ${HEADER_ERROR} -eq 1 \) \) -o \( ${HEADERDEV_ERROR} -eq 1 \) \) ]
[gentoo-commits] proj/genkernel:master commit in: defaults/
commit: c3249d243fcf6dc56f46e2442df6751db91a4606 Author: Dmitry Baranov gmail com> AuthorDate: Tue May 24 23:38:22 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Wed May 25 06:02:41 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=c3249d24 defaults/initrd.scripts: start_LUKS_*(): fix bootstrap calls and sleeps Signed-off-by: Dmitry Baranov gmail.com> defaults/initrd.scripts | 41 ++--- 1 file changed, 26 insertions(+), 15 deletions(-) diff --git a/defaults/initrd.scripts b/defaults/initrd.scripts index 7012356..f8cc861 100644 --- a/defaults/initrd.scripts +++ b/defaults/initrd.scripts @@ -2486,18 +2486,23 @@ ipv6_tentative() { } start_LUKS_root() { - # if key is set but neither ssh enabled or key device is given, find - # the key device + # if key/header is set but neither ssh enabled or key device is given, find + # the key/header device - if [ -n "${CRYPT_ROOT_KEY}" ] + if ( + [ -n "${CRYPT_ROOT_KEY}" -a -z "${CRYPT_ROOT_KEYDEV}" ] || + [ -n "${CRYPT_ROOT_HEADER}" -a -z "${CRYPT_ROOT_HEADERDEV}" ] + ) then - ( [ -z "${CRYPT_ROOT_KEYDEV}" ] || [ -z "${CRYPT_ROOT_HEADERDEV}" ] ) \ - && sleep 6 - - [ -z "${CRYPT_ROOT_KEYDEV}" ] && bootstrapKey "ROOT" - [ -z "${CRYPT_ROOT_HEADERDEV}" ] && bootstrapHeader "ROOT" + sleep 6 fi + [ -n "${CRYPT_ROOT_KEY}" -a -z "${CRYPT_ROOT_KEYDEV}" ] \ + && bootstrapKey "ROOT" + + [ -n "${CRYPT_ROOT_HEADER}" -a -z "${CRYPT_ROOT_HEADERDEV}" ] \ + && bootstrapHeader "ROOT" + if [ -n "${CRYPT_ROOT}" ] then openLUKS "root" @@ -2512,16 +2517,22 @@ start_LUKS_root() { } start_LUKS_swap() { - if [ -n "${CRYPT_SWAP_KEY}" ] - then - # same for swap, but no need to sleep if root was unencrypted - ( [ -z "${CRYPT_ROOT_KEYDEV}" ] || [ -z "${CRYPT_ROOT_HEADERDEV}" ] ) \ - && [ -z "${CRYPT_ROOT}" ] && sleep 6 + # same for swap, but no need to sleep if root was unencrypted - [ -z "${CRYPT_SWAP_KEYDEV}" ] && bootstrapKey "SWAP" - [ -z "${CRYPT_SWAP_HEADERDEV}" ] && bootstrapHeader "SWAP" + if ( + [ -n "${CRYPT_SWAP_KEY}" -a -z "${CRYPT_SWAP_KEYDEV}" ] || + [ -n "${CRYPT_SWAP_HEADER}" -a -z "${CRYPT_SWAP_HEADERDEV}" ] + ) + then + [ -z "${CRYPT_ROOT}" ] && sleep 6 fi + [ -n "${CRYPT_SWAP_KEY}" -a -z "${CRYPT_SWAP_KEYDEV}" ] \ + && bootstrapKey "SWAP" + + [ -n "${CRYPT_SWAP_HEADER}" -a -z "${CRYPT_SWAP_HEADERDEV}" ] \ + && bootstrapHeader "SWAP" + if [ -n "${CRYPT_SWAP}" ] then openLUKS "swap"
[gentoo-commits] proj/genkernel:master commit in: /
commit: 144ba9a735ff65d65fc1d3dbd8902f5ecd5b7ba8 Author: Robin H. Johnson gentoo org> AuthorDate: Sat May 28 20:51:31 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat May 28 20:51:31 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=144ba9a7 Detached header: fix bootstrap calls and sleeps, remove extra bracket Merges: https://github.com/gentoo/genkernel/pull/37 Closes: https://github.com/gentoo/genkernel/pull/37 Signed-off-by: Robin H. Johnson gentoo.org> defaults/initrd.scripts | 43 +++ 1 file changed, 27 insertions(+), 16 deletions(-)
[gentoo-commits] repo/gentoo:master commit in: sys-kernel/genkernel/
commit: 5d23cb00ce364b6cfc54f67bc4e4cf0c6eb8cb47 Author: Robin H. Johnson gentoo org> AuthorDate: Wed May 25 04:29:24 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Wed May 25 04:29:36 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5d23cb00 sys-kernel/genkernel: now with keyutils Signed-off-by: Robin H. Johnson gentoo.org> sys-kernel/genkernel/Manifest | 1 + sys-kernel/genkernel/genkernel-.ebuild | 2 ++ 2 files changed, 3 insertions(+) diff --git a/sys-kernel/genkernel/Manifest b/sys-kernel/genkernel/Manifest index ff7c9516133f..3a4f34d67577 100644 --- a/sys-kernel/genkernel/Manifest +++ b/sys-kernel/genkernel/Manifest @@ -29,6 +29,7 @@ DIST genkernel-4.2.6.tar.xz 488892 BLAKE2B 4dc54c878e25165799ac40e45f28843c05734 DIST gnupg-1.4.23.tar.bz2 3749353 BLAKE2B ec5e6bef0c7bb2a65813d7852cebeaa24c4855f9d9d9e802070da50b89fff56b747682933aa766dd130f849efcfe28f7aa74f3153405429bcf3845ef29c6dd6e SHA512 78dc52a2010202a4afc8814b29fda657a6c9fe230d5e7db11ae040edd2b0ca819e1baa4dbd6c0d04d36cd353df484e83f52d17759d2891c2cf7025c0b5d36612 DIST hwids-20210613.tar.gz 3867741 BLAKE2B 64c4b0a83058a2052f7b132241008a3cc75452e93a9a57a9159c357c23fd09ee256abc2b94e700b5d8e8bd4e231ae12932d2c2f32fb03853207739cb3387047d SHA512 4568f6b8c0ca80ec772bd2785d4dc169d1d13a721472a15399158d9a7f31abbe414c5c8cfdf1a3b81cce4e33742a4b6e005e97e3e907643d0afdc8e953624fea DIST json-c-0.13.1.tar.gz 639425 BLAKE2B 1da310309f9ce03306a9fd4a161670e460cf0b348df7c006902390f74a4cf100aab1ce6ac8a361a278dd917c114a278de5b3445817f3a40ae287478add46 SHA512 e984db2a42b9c95b52c798b2e8dd1b79951a8dcba27370af30c43b9549fbb8dbcf052a535c528209aaee38e6d1f760168b706905ae72f3e704ed20f8a1a1 +DIST keyutils-1.6.3.tar.gz 137022 BLAKE2B b5620b1b6109415fec1268963c2c65d774f3ef7a69eb1ce8d5d8e78b4b807e4fdfda861662a1b5556975ef867add8f985362a31b6608ac2dc198c8d0395d516b SHA512 f65965b8566037078b8eeffa66c6fdbe121c8c2bea7fa5bce04cf7ba5ccc50d5b48e51f4a67ca91e4d5d9a12469e7e3eb3036c920ab25e3feba6e93b4c149cf9 DIST kmod-27.tar.xz 548924 BLAKE2B 9f12bf5792d4c867e28e0776c279369c063e84269212e3f699ae6e5e69b8b2b466b5033e43e17ac64d6101592edcf3c34881916afb6ae676b49dc8838dfe1396 SHA512 e0513094935333fca1fb4c3e3493b232507a579ab00a6457cc9ed3e928363d05aad80634fb65a8287a336bf9895194c7be8ddc41bb088a6c2cca44fc1bfbdb6c DIST kmod-29.tar.xz 560160 BLAKE2B 1362b6e7c07f66594074f07239d0f7a64e6efeb928483ed027b22a4ac77b916c631d1c03780b0515714a87847a716c35341edb1ced04a1795b4c7f8942d3207a SHA512 557cdcaec75e5a1ceea2d10862c944e9a65ef54f6ee9da6dc98ce4582418fdc9958aab2e14a84807db61daf36ec4fcdc23a36376c39d5dc31d1823ca7cd47998 DIST libaio-0.3.112.tar.gz 46977 BLAKE2B 088f3b195a65bdc97ae2318e47af17c65259ed3208dca7bfef93c81a800602085e5b2078dbd436c740be316d0ebd923a1b3b7c0808257e2e7c7fb0f7ae1e0dba SHA512 5f984529c9f747a6c82f1e4457fc0832bb1fc299ae6e700f2ac5a8ea7b9bfc6ea1e75809728cc115a020cff6685ed1f4e38c6aeacc1ea98dfccce04dd19dafaa diff --git a/sys-kernel/genkernel/genkernel-.ebuild b/sys-kernel/genkernel/genkernel-.ebuild index 4b18348406d6..b9c6dd2c0ebd 100644 --- a/sys-kernel/genkernel/genkernel-.ebuild +++ b/sys-kernel/genkernel/genkernel-.ebuild @@ -45,6 +45,7 @@ VERSION_XFSPROGS="5.13.0" VERSION_XZ="5.2.5" VERSION_ZLIB="1.2.11" VERSION_ZSTD="1.5.0" +VERSION_KEYUTILS="1.6.3" COMMON_URI=" https://github.com/g2p/bcache-tools/archive/399021549984ad27bf4a13ae85e458833fe003d7.tar.gz -> bcache-tools-${VERSION_BCACHE_TOOLS}.tar.gz @@ -80,6 +81,7 @@ COMMON_URI=" https://tukaani.org/xz/xz-${VERSION_XZ}.tar.gz https://zlib.net/zlib-${VERSION_ZLIB}.tar.gz https://github.com/facebook/zstd/archive/v${VERSION_ZSTD}.tar.gz -> zstd-${VERSION_ZSTD}.tar.gz + https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git/snapshot/keyutils-${VERSION_KEYUTILS}.tar.gz " if [[ ${PV} == * ]] ; then
[gentoo-commits] proj/genkernel:master commit in: /
commit: edefa80c72b0dffdc5c9cf9d880156e6e0db Author: Robin H. Johnson gentoo org> AuthorDate: Tue May 24 20:34:54 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue May 24 20:34:54 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=edefa80c add keyctl support for loading LUKS passphrase into a keyring Merges: https://github.com/gentoo/genkernel/pull/10 Closes: https://github.com/gentoo/genkernel/pull/10 Signed-off-by: Robin H. Johnson gentoo.org> defaults/initrd.scripts | 52 ++- defaults/linuxrc | 34 +-- defaults/software.sh | 7 +++ doc/genkernel.8.txt | 24 ++ gen_cmdline.sh| 6 ++ gen_determineargs.sh | 2 ++ gen_initramfs.sh | 29 ++ genkernel.conf| 3 +++ gkbuilds/keyutils.gkbuild | 27 9 files changed, 181 insertions(+), 3 deletions(-)
[gentoo-commits] proj/genkernel:master commit in: doc/, gkbuilds/, /, defaults/
commit: 72839de16243fb410d587e18d76d3b637fa3f389 Author: Maciej S. Szmigiero maciej szmigiero name> AuthorDate: Sun Nov 22 01:06:47 2020 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun May 22 18:45:16 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=72839de1 genkernel: add keyctl support for loading LUKS passphrase into a keyring cryptsetup LUKS2 format comes with an ability to automatically unlock multiple devices (root, swap, etc.) sharing the same passphrase, without retyping it for each of them, by loading it into the user keyring. This commit adds such (optional) genkernel support for loading LUKS passphrase into the user keyring on boot. In the default mode of operation the newly added key is (possibly) used only to unlock root and swap devices and is removed soon after that. By providing appropriate kernel command line parameter the key can be left in the keyring instead (with an optional timeout) for unlocking other LUKS devices post-initramfs time. Because one of the most common use cases of this functionality will be having an encrypted swap for doing suspend to disk (hibernation) let's also make sure that we don't unlock the root device when doing so is unnecessary (when we are resuming the system from hibernation). Since the security of a FDE passphrase is of paramount importance in this solution significant care has been taken not to leak it accidentally: * The passphrase is read directly by keyctl to avoid storing it in the shell, * If the passphrase is used only to unlock root and swap devices (which is the default mode of operation) the init script will check whether its removal from keyring has actually succeeded and, if not, reboot the system rather than continue while leaving it exposed, * keyutils includes a patch (already upstreamed) to wipe the passphrase from memory when no longer needed. Signed-off-by: Maciej S. Szmigiero maciej.szmigiero.name> defaults/initrd.scripts | 52 ++- defaults/linuxrc | 34 +-- defaults/software.sh | 7 +++ doc/genkernel.8.txt | 24 ++ gen_cmdline.sh| 6 ++ gen_determineargs.sh | 2 ++ gen_initramfs.sh | 29 ++ genkernel.conf| 3 +++ gkbuilds/keyutils.gkbuild | 27 9 files changed, 181 insertions(+), 3 deletions(-) diff --git a/defaults/initrd.scripts b/defaults/initrd.scripts index 4932783..eb556d6 100644 --- a/defaults/initrd.scripts +++ b/defaults/initrd.scripts @@ -2108,6 +2108,54 @@ openLUKS() { [ -d "${mntkey}" ] && run rmdir -p "${mntkey}" >/dev/null 2>&1 } +keyctl_keyadd() { + if [ -n "${KEYCTL_KEYDESC}" ] + then + if [ ! -x /bin/keyctl ] + then + bad_msg "keyctl program is missing. Was initramfs built without --keyctl parameter?" + exit 1 + fi + + # not using read to avoid secrets being left in memory + stty -echo + echo -n "Please type the key '${KEYCTL_KEYDESC}' for the user keyring then press Ctrl-D twice: " + KEYCTL_KEYID=`keyctl padd user "${KEYCTL_KEYDESC}" @u` + echo + stty echo + + if [ -n "${KEYCTL_KEYID}" -a -n "${KEYCTL_KEYTIMEOUT}" ] + then + keyctl timeout "${KEYCTL_KEYID}" "${KEYCTL_KEYTIMEOUT}" + fi + fi +} + +keyctl_keyremove() { + if [ -n "${KEYCTL_KEYID}" -a -z "${KEYCTL_KEYKEEP}" ] + then + if [ ! -x /bin/keyctl ] + then + bad_msg "keyctl program is missing. Was initramfs built without --keyctl parameter?" + exit 1 + fi + + keyctl revoke "${KEYCTL_KEYID}" + keyctl unlink "${KEYCTL_KEYID}" >/dev/null + + # trust but verify + if keyctl show "${KEYCTL_KEYID}" >/dev/null 2>&1 + then + # better reboot than leave the user passphrase accidentally exposed + bad_msg "unable to remove the newly added key from keyring, rebooting in 5 seconds for security" + sleep 5 + reboot -f + fi + + KEYCTL_KEYID= + fi +} + iface_name() { local ifname="${1}" @@ -2437,7 +2485,7 @@ ipv6_tentative() { fi } -start_LUKS() { +start_LUKS_root() { # if key is set but neither ssh enabled or key device is given, find # the key device @@ -2461,7 +2509,9 @@ start_LUKS() {
[gentoo-commits] repo/gentoo:master commit in: app-admin/gopass/
commit: 567e00af7eaa1935fa13b37038ef1ae848047b93 Author: Robin H. Johnson gentoo org> AuthorDate: Tue May 17 05:08:03 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue May 17 05:08:13 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=567e00af app-admin/gopass: bump Signed-off-by: Robin H. Johnson gentoo.org> app-admin/gopass/Manifest | 68 app-admin/gopass/gopass-1.14.1.ebuild | 583 ++ 2 files changed, 651 insertions(+) diff --git a/app-admin/gopass/Manifest b/app-admin/gopass/Manifest index 90fd67e44541..1e28193f462c 100644 --- a/app-admin/gopass/Manifest +++ b/app-admin/gopass/Manifest @@ -1,3 +1,5 @@ +DIST bitbucket.org%2Fcreachadair%2Fstringset%2F@v%2Fv0.0.10.mod 95 BLAKE2B f1b561f9a00d82da2b38e6df5320d512dfc63a5b9ddc1830996d196f8c31126eeaec0f7052d1492be160e8b9b0414d57d9c7168709ed97d371b6e2d0044e3b23 SHA512 84dd7a56ac2312c4cdec85605591fd626983af181f63d85568d4906ebabdc7aedc8649030be2b667804cb2eb07e8aa9ea827a6f6c672917150733a494ed2c4c3 +DIST bitbucket.org%2Fcreachadair%2Fstringset%2F@v%2Fv0.0.10.zip 23450 BLAKE2B daf844c39e56389e9feed78885364ec3fde9e3dce59fdd03062235c4c38db69d21891c748e0b251f4159bef1bf689ca0fdafa7a5855d24fc1570cd76815a6c91 SHA512 23d22670b8fc0b7601788db2e07824b6325b06476f5726af0b631798ba6b1c735e87464bc75d420c1dbf390e4d23ea0db2aa50a294c1bbb2e1f49775b42ed7b1 DIST cloud.google.com%2Fgo%2F@v%2Fv0.26.0.mod 27 BLAKE2B 814b0fa8f12d5ce6171fa629b5a7eb34e0e882cc0c5430986896bb38c243e08dc83098f271227f4ba019e78f16dc97fbb381e833aff1819833d243b08add916b SHA512 5132f3438533427c0ab0fbb7a12112a7830ea9122662ed46019ff89c71d9cf80c02edc32dd5c892da572031b5a2cce100f2602fa6a19bea6be7c02781f701273 DIST cloud.google.com%2Fgo%2F@v%2Fv0.34.0.mod 27 BLAKE2B 814b0fa8f12d5ce6171fa629b5a7eb34e0e882cc0c5430986896bb38c243e08dc83098f271227f4ba019e78f16dc97fbb381e833aff1819833d243b08add916b SHA512 5132f3438533427c0ab0fbb7a12112a7830ea9122662ed46019ff89c71d9cf80c02edc32dd5c892da572031b5a2cce100f2602fa6a19bea6be7c02781f701273 DIST cloud.google.com%2Fgo%2F@v%2Fv0.38.0.mod 1006 BLAKE2B 9d321b9bad7e881795f0215828ca23ff5753b8ca9cbe64ca085bcd2f64d36d0d5bdd5c3e80eb64e19e067748b6b23eb7837827cede0e75a840ed1cfa2b00c1a8 SHA512 8aa90e6ce7d50af3db56c8a7abdd16822f6351cabb96e6b75ac0cdefa15bb4a2d402aa84e6212fec4d599ec6f13cb1891bb37f41200e6a05a27642375a89a959 @@ -42,7 +44,10 @@ DIST filippo.io%2Fedwards25519%2F@v%2Fv1.0.0-beta.3.zip 84404 BLAKE2B 8e04457aa6 DIST filippo.io%2Fedwards25519%2F@v%2Fv1.0.0-rc.1.mod 40 BLAKE2B 895e3b61e3e272387257e288b70e2a7d461c0de2ed2284e1909ac2bf2eedf841246e175ed848174ec510c53ae207d801cff7a39c560fd2b0c0b4dc08c67f4856 SHA512 2a56ce66f7ba29cd8f975014291690c2f929738a4a8b93529c2c367c0236b767f92e4f6dfda9fe1fdf981926302d7ab26665f7d64b022a22e5305aea693ad2dc DIST filippo.io%2Fedwards25519%2F@v%2Fv1.0.0-rc.1.zip 47154 BLAKE2B 7cbd8e554ff4d2e93b60a81fe77d051b60255f24339fda1be3e644c737b44a1db665e9076193b6c914b6561b29f7d377680a96c15de1970859714abfa08e2dee SHA512 1f008db632f373f72d0be54c2b5669668e8bbfd124f2a56fc6b8368eb89bcd55d2e5669bed6362fe6bfb055016c80002394a7b3a92f33d0fb9d9c11d42be4c61 DIST github.com%2F!burnt!sushi%2Ftoml%2F@v%2Fv0.3.1.mod 34 BLAKE2B ce54a247aef91043830bdf0603c8452ba38eceb1495af6e7a74c9119234a0dc5cd080cb25258c28f5e270acf91189a5ed33e361cbf17de2be5e37dadbda1d90d SHA512 320941bc3b7fb8bc595e6135cbc513a7583d129f0cd92508055291e141191066303cf75148e25198c21f6c6c539a790ea3210f3ecf5de6a2a03b70c753091146 +DIST github.com%2F!burnt!sushi%2Ftoml%2F@v%2Fv0.4.1.mod 43 BLAKE2B e00572fff0f57c166be62ec93eacb189f004073581077cded1cb443b17c3e03cd1b2db37f0b7a504deb287b6515dd32648678d2ae763d6b6fbd7206a9bdcf30b SHA512 0e8cdda81300811f629bce3a9307de05450036f750f8c3c0cd5b70854f8f95bd962ce99bfe1325c8d1bf562a5b7b94afb9e9fd2dbe4dcc45325fac6e27471102 DIST github.com%2F!burnt!sushi%2Fxgb%2F@v%2Fv0.0.0-20160522181843-27f122750802.mod 33 BLAKE2B d234bf9be3dd919cb1f8d33750a24dca68c90fea110fd0ff62f0dba86d2ebbfc66d55fea62745b6383c5607bc91cfd78c9d2cf12df251397e85995c04707caa2 SHA512 dbfa64ac31b25fdbff12110c6f9815abfde65f281e40852e7165499a2cefb6656c74fe0b82f0f018304daa02b83b421e9c15654efabad39787c69c1b2996a79d +DIST github.com%2F!proton!mail%2Fgo-crypto%2F@v%2Fv0.0.0-20220407094043-a94812496cf5.mod 112 BLAKE2B ef3083d3a65268fbd1db1c571a909b250b2b13dea588358f6b958e7ad1fdf1b4e4e9fb3f2494d4f6ba75d347b113a626f07b59dd1cfc72e0a9e37916dfb39a0f SHA512 67d2f173895329e13a7a17d91e95557b55b199c6d7df7466ca8395d4fcc4f6ad123cb798e01bc136b2b3bd2dd9229d3db43f01021b4d38695554fc8b01dbe545 +DIST github.com%2F!proton!mail%2Fgo-crypto%2F@v%2Fv0.0.0-20220407094043-a94812496cf5.zip 356580 BLAKE2B 40ef221cb49438cd438fb9bb74156aab4ddbc76fbd384912a99274ae45702719ec5ec3ef2b629bd43861b251a692f0f0c6547765048d1771ba83ed1650029690 SHA512 dfeb27b4cc303fce05650fcf25b6d91f1535e5c1417e1940a200ec509ad69ab999a0952c050cffebe301229c7ed31b1ec89d1a9989a1c3a9ca5a39f6b7d67376 DIST github.com%2Fatotto%2Fclipb
Re: [gentoo-portage-dev] Normaliser function for distfiles
On Mon, May 16, 2022 at 07:37:40PM +0200, Markus Walter wrote: > Hello all, > > is it possible to do the following: after fetching a distfile portage runs > an external normaliser program specified in an ebuild before checking the > hash? > > My use case is the following: I would like to improve the gs-elpa program > and provide a precomputed overlay for melpa. However the melpa distfiles are > rebuilt everyday and cause checksum failures. However the only thing > changing are the timestamps. Hence if a normaliser program could simply set > all timestamps to some predefined value (say 1.1.1970) then this problem > should vanish. I don't know what 'gs-elpa' & 'Melpa' are, but maybe talking to upstream would be good here, and improving that behavior. If the file contents or non-timestamp metadata change, absolutely the timestamps should change. But otherwise, the timestamp should NOT change. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-commits] proj/genkernel:master commit in: /
commit: 4e7f2d85b4b754acd54b9fc6353b2f96ef545057 Author: Robin H. Johnson gentoo org> AuthorDate: Mon May 16 16:45:49 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon May 16 16:45:49 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=4e7f2d85 Updating open-iscsi to 2.1.4 Closes: https://github.com/gentoo/genkernel/pull/34 Signed-off-by: Robin H. Johnson gentoo.org> .../2.0.878/open-iscsi-2.0.878-gcc-10.patch| 107 - .../open-iscsi-2.0.878-static-iscsistart.patch | 11 --- .../open-iscsi-2.1.4-Makefiles.patch} | 8 +- .../2.1.4/open-iscsi-2.1.4-static-iscsistart.patch | 11 +++ 4 files changed, 15 insertions(+), 122 deletions(-)
[gentoo-commits] proj/genkernel:master commit in: patches/open-iscsi/2.0.878/, patches/open-iscsi/2.1.4/
commit: f0f544fbeb5cf2fabe9c11a743c1507da46ad3b4 Author: Dan F <44616e46 gmail com> AuthorDate: Mon May 16 12:20:11 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon May 16 12:20:39 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=f0f544fb Updating open-iscsi to 2.1.4 Signed-off-by: DanF <44616e46 gmail.com> .../2.0.878/open-iscsi-2.0.878-gcc-10.patch| 107 - .../open-iscsi-2.0.878-static-iscsistart.patch | 11 --- .../open-iscsi-2.1.4-Makefiles.patch} | 8 +- .../2.1.4/open-iscsi-2.1.4-static-iscsistart.patch | 11 +++ 4 files changed, 15 insertions(+), 122 deletions(-) diff --git a/patches/open-iscsi/2.0.878/open-iscsi-2.0.878-gcc-10.patch b/patches/open-iscsi/2.0.878/open-iscsi-2.0.878-gcc-10.patch deleted file mode 100644 index b614765..000 --- a/patches/open-iscsi/2.0.878/open-iscsi-2.0.878-gcc-10.patch +++ /dev/null @@ -1,107 +0,0 @@ -From 499a006a7d6bb154f9e1ab430e4c9e231ba6096a Mon Sep 17 00:00:00 2001 -From: Lee Duncan -Date: Tue, 28 Jan 2020 16:36:56 -0800 -Subject: [PATCH] Updates to support gcc -fno-common option. - -This meant cleaning up the definition of some -global variables, so that they were only defined -in one place and refered to as external elsewhere. - include/iscsi_err.h| 6 -- - iscsiuio/configure.ac | 2 +- - iscsiuio/src/uip/uip.h | 4 ++-- - usr/iscsi_err.c| 2 ++ - usr/log.c | 1 + - usr/log.h | 2 +- - 6 files changed, 11 insertions(+), 6 deletions(-) - -diff --git a/include/iscsi_err.h b/include/iscsi_err.h -index ed000dd0..04a8723e 100644 a/include/iscsi_err.h -+++ b/include/iscsi_err.h -@@ -4,7 +4,7 @@ - #ifndef _ISCSI_ERR_ - #define _ISCSI_ERR_ - --enum { -+enum iscsi_error_list { - ISCSI_SUCCESS = 0, - /* Generic error */ - ISCSI_ERR = 1, -@@ -73,7 +73,9 @@ enum { - - /* Always last. Indicates end of error code space */ - ISCSI_MAX_ERR_VAL, --} iscsi_err; -+}; -+ -+extern enum iscsi_error_list iscsi_err; - - extern void iscsi_err_print_msg(int err); - extern char *iscsi_err_to_str(int err); -diff --git a/iscsiuio/configure.ac b/iscsiuio/configure.ac -index b41df0ec..8099f09c 100644 a/iscsiuio/configure.ac -+++ b/iscsiuio/configure.ac -@@ -78,7 +78,7 @@ AC_CONFIG_COMMANDS([default],[[ - else - echo 'char *build_date = "'`date`'";' > src/unix/build_date.c - fi --echo 'char *build_date;'> src/unix/build_date.h -+echo 'extern char *build_date;'> src/unix/build_date.h - ]],[[]]) - - AC_PREFIX_DEFAULT() -diff --git a/iscsiuio/src/uip/uip.h b/iscsiuio/src/uip/uip.h -index 1180ab50..9d9428a2 100644 a/iscsiuio/src/uip/uip.h -+++ b/iscsiuio/src/uip/uip.h -@@ -70,8 +70,8 @@ struct uip_stack; - typedef u16_t uip_ip4addr_t[2]; - typedef u16_t uip_ip6addr_t[8]; - --const uip_ip6addr_t all_zeroes_addr6; --const uip_ip4addr_t all_zeroes_addr4; -+extern const uip_ip6addr_t all_zeroes_addr6; -+extern const uip_ip4addr_t all_zeroes_addr4; - - #define ETH_BUF(buf) ((struct uip_eth_hdr *)buf) - #define VLAN_ETH_BUF(buf) ((struct uip_vlan_eth_hdr *)buf) -diff --git a/usr/iscsi_err.c b/usr/iscsi_err.c -index 23c61fc3..4a057d57 100644 a/usr/iscsi_err.c -+++ b/usr/iscsi_err.c -@@ -21,6 +21,8 @@ - #include "iscsi_err.h" - #include "log.h" - -+enum iscsi_error_list iscsi_err; -+ - static char *iscsi_err_msgs[] = { - /* 0 */ "", - /* 1 */ "unknown error", -diff --git a/usr/log.c b/usr/log.c -index f29b54b3..6e16e7ce 100644 a/usr/log.c -+++ b/usr/log.c -@@ -33,6 +33,7 @@ - - char *log_name; - int log_level = 0; -+struct logarea *la = NULL; - - static int log_stop_daemon = 0; - static void (*log_func)(int prio, void *priv, const char *fmt, va_list ap); -diff --git a/usr/log.h b/usr/log.h -index 486a08ea..c548791e 100644 a/usr/log.h -+++ b/usr/log.h -@@ -64,7 +64,7 @@ struct logarea { - union semun semarg; - }; - --struct logarea *la; -+extern struct logarea *la; - - extern int log_init(char *program_name, int size, - void (*func)(int prio, void *priv, const char *fmt, va_list ap), diff --git a/patches/open-iscsi/2.0.878/open-iscsi-2.0.878-static-iscsistart.patch b/patches/open-iscsi/2.0.878/open-iscsi-2.0.878-static-iscsistart.patch deleted file mode 100644 index 2b06109..000 --- a/patches/open-iscsi/2.0.878/open-iscsi-2.0.878-static-iscsistart.patch +++ /dev/null @@ -1,11 +0,0 @@ a/usr/Makefile -+++ b/usr/Makefile -@@ -74,7 +74,7 @@ iscsiadm: $(ISCSI_LIB_SRCS) $(DISCOVERY_SRCS) iscsiadm.o session_mgmt.o mntcheck - - iscsistart: $(ISCSI_LIB_SRCS) $(INITIATOR_SRCS) $(FW_BOOT_SRCS) \ - iscsistart.o statics.o -- $(CC) $(CFLAGS) $^ -o $@ -lrt $(LDFLAGS) $(ISCSI_LIB) -+ $(CC) $(CFLAGS) $^ -o $@ -static -lrt $(LDFLAGS) $(ISCSI_LIB) - clean: - rm -f *.o $(PROGRAMS) .depen
[gentoo-commits] proj/genkernel:master commit in: defaults/
commit: 63da86622d47e919ebb08c894b1552d71151473a Author: Robin H. Johnson gentoo org> AuthorDate: Mon May 16 05:42:04 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon May 16 05:43:22 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=63da8662 defaults/modules_load: more crypto modules Needed more cryptsetup in weirder cases. Maybe better in future to provide easier way to detect these and/or match dracut's code for module selection. Based on old https://github.com/robbat2/genkernel/pull/29 submission Closes: https://github.com/robbat2/genkernel/pull/29 Suggested-by: David Guglielmi gmail.com> Signed-off-by: Robin H. Johnson gentoo.org> defaults/modules_load | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defaults/modules_load b/defaults/modules_load index 1c78415..2ca2046 100644 --- a/defaults/modules_load +++ b/defaults/modules_load @@ -30,7 +30,7 @@ MODULES_USB="ehci-pci ehci-hcd xhci-hcd xhci-pci xhci-plat xhci-plat-hcd uhci us MODULES_FS="ext2 ext3 ext4 btrfs reiserfs jfs nfs xfs zfs f2fs fuse virtiofs loop squashfs aufs overlay cramfs configfs fscrypto msdos" # Crypto -MODULES_CRYPTO="sha256_generic cbc crc32 crc32c crc32c_generic crc32_generic aes_generic xts af_alg algif_skcipher algif_hash algif_aead algif_rng serpent_generic" +MODULES_CRYPTO="sha256_generic cbc crc32 crc32c crc32c_generic crc32_generic aes_generic xts af_alg algif_skcipher algif_hash algif_aead algif_rng serpent_generic ecb blake2b_generic blake2s_generic ccm cfb cmac chacha20poly1305 chacha_generic curve25519-generic ofb pcbc sha3_generic vmac xcbc" # Hyper-V MODULES_HYPERV="hv_sock hv_utils hv_vmbus hv_balloon hyperv-keyboard hid_hyperv hv_utils hyperv_fb hv_storvsc"
[gentoo-commits] proj/genkernel:master commit in: /
commit: 33edf44c8f25e510625ea5f155629848dc1144dd Author: Robin H. Johnson gentoo org> AuthorDate: Mon May 16 05:02:01 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon May 16 05:02:17 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=33edf44c defaults/initrd.scripts: Get rid of extra padding Note: commit efdf4d0affb587655d703140db86d45ffd2a1ede is significantly easier to review by ignoring whitespace changes. Closes: https://github.com/gentoo/genkernel/pull/30 Signed-off-by: Robin H. Johnson gentoo.org> defaults/initrd.scripts | 184 1 file changed, 92 insertions(+), 92 deletions(-)
[gentoo-commits] proj/genkernel:master commit in: gkbuilds/
commit: cfc9ff455e2473e4322bd18c5fa21370d9c0702e Author: orbea riseup net> AuthorDate: Thu Mar 24 18:43:40 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun May 15 23:14:01 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=cfc9ff45 gkbuild/util-linux: Install the correct binaries with slibtool Signed-off-by: orbea riseup.net> gkbuilds/util-linux.gkbuild | 7 ++- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/gkbuilds/util-linux.gkbuild b/gkbuilds/util-linux.gkbuild index 40ea1fb..5addbb1 100644 --- a/gkbuilds/util-linux.gkbuild +++ b/gkbuilds/util-linux.gkbuild @@ -47,11 +47,8 @@ src_install() { mkdir "${D}"/sbin || die "Failed to create '${D}/sbin'!" - cp -a blkid.static "${D}"/sbin/blkid \ - || die "Failed to copy '${S}/blkid.static' to '${D}/sbin/blkid'!" - - cp -a switch_root "${D}"/sbin/switch_root \ - || die "Failed to copy '${S}/switch_root' to '${D}/sbin/switch_root'!" + install_exe 'blkid.static' "${D}"/sbin/blkid + install_exe 'switch_root' "${D}"/sbin/switch_root local sbin for sbin in \
[gentoo-commits] proj/genkernel:master commit in: /
commit: 78968ce2101c68eabe38956495ba9d7b7f095875 Author: Robin H. Johnson gentoo org> AuthorDate: Mon May 16 04:57:54 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon May 16 04:57:54 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=78968ce2 gkbuild: Install the correct binaries with slibtool Closes: https://github.com/gentoo/genkernel/pull/33 Signed-off-by: Robin H. Johnson gentoo.org> gen_funcs.sh| 23 +++ gkbuilds/cryptsetup.gkbuild | 3 +-- gkbuilds/util-linux.gkbuild | 7 ++- 3 files changed, 26 insertions(+), 7 deletions(-)
[gentoo-commits] proj/genkernel:master commit in: /
commit: 4efdb878a0d4ef361c3f39c62410e2afb51efb54 Author: Robin H. Johnson gentoo org> AuthorDate: Mon May 16 04:53:37 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon May 16 04:53:37 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=4efdb878 gen_initramfs.sh: append devicemanager only for dmraid, luks, or lvm Closes: https://github.com/gentoo/genkernel/pull/35 Signed-off-by: Robin H. Johnson gentoo.org> gen_funcs.sh | 9 + gen_initramfs.sh | 11 +++ 2 files changed, 16 insertions(+), 4 deletions(-)
[gentoo-commits] proj/genkernel:master commit in: /
commit: ad62b864867c2d97dd71cd38f000fb8c7550c6a9 Author: Robin H. Johnson gentoo org> AuthorDate: Mon May 16 05:15:49 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon May 16 05:16:38 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=ad62b864 Add support for LUKS detached header (another attempt) Note: commit 73a05632d61171685ac4960c6b684cefa6d82afd is significantly easier to review by ignoring whitespace changes. Closes: https://github.com/gentoo/genkernel/pull/28 Signed-off-by: Robin H. Johnson gentoo.org> defaults/initrd.scripts | 162 +++- defaults/linuxrc| 18 ++ doc/genkernel.8.txt | 22 +++ 3 files changed, 186 insertions(+), 16 deletions(-)
[gentoo-commits] proj/genkernel:master commit in: /
commit: 1bb3cc10d51026ad500bc9cec883f1f2f0c445ec Author: orbea riseup net> AuthorDate: Sun May 15 22:49:21 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun May 15 23:13:55 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=1bb3cc10 gen_funcs: Add an install_exe function This helps when the build uses slibtool where the compiled binary output path differs from GNU libtool. Signed-off-by: orbea riseup.net> gen_funcs.sh | 23 +++ 1 file changed, 23 insertions(+) diff --git a/gen_funcs.sh b/gen_funcs.sh index 500caf2..a4dc0e4 100755 --- a/gen_funcs.sh +++ b/gen_funcs.sh @@ -1974,6 +1974,29 @@ check_distfiles() { fi } +# @FUNCTION: install_exe +# @USAGE: +# @DESCRIPTION: +# Finds an executable binary file and installs it in cases where there may be +# similarly named shell wrapper scripts. This happens when GNU libtool creates +# an executable named 'foo' while slibtool creates '.libs/foo' and 'foo' is a +# shell script that should not be installed. +install_exe() { + local file="${1##*/}" + local dest="${2}" + + local dir + [[ "${1%/*}" == "${file}" ]] || dir="${1%/*}/" + + [[ -f "${dir}${file}" ]] || gen_die "File '${dir}${file}' does not exist!" + + # Ensure only the binaries are installed and not a similarly named wrapper script + find "${S}/${dir}" -type f -name "${file}" -print0 | + xargs -0 file | grep executable | grep ELF | cut -f 1 -d : | + xargs -I '{}' cp -a '{}' "${dest}" || + gen_die "Failed to copy '${S}/${dir}${file}' to '${dest}'!" +} + # @FUNCTION: expand_file # @USAGE: # @DESCRIPTION:
[gentoo-commits] proj/genkernel:master commit in: gkbuilds/
commit: 2d2e91f288679e272f731917feb58f3768ea586d Author: orbea riseup net> AuthorDate: Thu Mar 24 20:17:07 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun May 15 23:14:01 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=2d2e91f2 gkbuild/cryptsetup: Install the correct binaries with slibtool Signed-off-by: orbea riseup.net> gkbuilds/cryptsetup.gkbuild | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/gkbuilds/cryptsetup.gkbuild b/gkbuilds/cryptsetup.gkbuild index 007874d..816df60 100644 --- a/gkbuilds/cryptsetup.gkbuild +++ b/gkbuilds/cryptsetup.gkbuild @@ -34,8 +34,7 @@ src_install() { "${D}"/sbin/* \ "${D}"/usr/share/ - cp -a cryptsetup.static "${D}"/sbin/cryptsetup \ - || die "Failed to copy '${S}/cryptsetup.static' to '${D}/sbin/cryptsetup'!" + install_exe 'cryptsetup.static' "${D}"/sbin/cryptsetup "${STRIP}" --strip-all "${D}"/sbin/cryptsetup \ || die "Failed to strip '${D}/sbin/cryptsetup'!"
[gentoo-commits] proj/genkernel:master commit in: /
commit: 110cffbf0a10a6dabe902eecb9c139663ad737af Author: Mike Gilbert gentoo org> AuthorDate: Sun May 15 16:37:51 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun May 15 22:10:07 2022 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=110cffbf gen_initramfs.sh: append devicemanager only for specific modules dmraid luks lvm multipath Bug: https://bugs.gentoo.org/749957 Signed-off-by: Mike Gilbert gentoo.org> gen_funcs.sh | 9 + gen_initramfs.sh | 11 +++ 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/gen_funcs.sh b/gen_funcs.sh index 500caf2..db396e3 100755 --- a/gen_funcs.sh +++ b/gen_funcs.sh @@ -22,6 +22,15 @@ isTrue() { return 1 } +anyTrue() { + local x + for x + do + isTrue "${x}" && return 0 + done + return 1 +} + set_color_vars() { if ! isTrue "${NOCOLOR}" then diff --git a/gen_initramfs.sh b/gen_initramfs.sh index 4ec296e..0b74f4c 100755 --- a/gen_initramfs.sh +++ b/gen_initramfs.sh @@ -2007,11 +2007,14 @@ append_auxiliary() { } append_data() { - local name=$1 var=$2 + [ $# -eq 0 ] && gen_die "append_data() called with zero arguments" + + local name=$1 local func="append_${name}" - [ $# -eq 0 ] && gen_die "append_data() called with zero arguments" - if [ $# -eq 1 ] || isTrue "${var}" + shift + + if [ $# -eq 0 ] || anyTrue "$@" then print_info 1 "$(get_indent 1)>> Appending ${name} cpio data ..." ${func} || gen_die "${func}() failed!" @@ -2037,7 +2040,7 @@ create_initramfs() { append_data 'base_layout' append_data 'util-linux' append_data 'eudev' - append_data 'devicemanager' + append_data 'devicemanager' "${DMRAID}" "${LVM}" "${LUKS}" "${MULTIPATH}" append_data 'auxiliary' "${BUSYBOX}" append_data 'busybox' "${BUSYBOX}" append_data 'b2sum' "${B2SUM}"
[gentoo-commits] proj/genkernel:master commit in: defaults/, doc/
commit: 73a05632d61171685ac4960c6b684cefa6d82afd Author: Dmitry Baranov gmail com> AuthorDate: Wed Oct 14 19:03:01 2020 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Aug 7 17:20:10 2021 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=73a05632 Add support for LUKS detached header Signed-off-by: Dmitry Baranov gmail.com> defaults/initrd.scripts | 162 +++- defaults/linuxrc| 18 ++ doc/genkernel.8.txt | 22 +++ 3 files changed, 186 insertions(+), 16 deletions(-) diff --git a/defaults/initrd.scripts b/defaults/initrd.scripts index 33a48b3..5a83d93 100644 --- a/defaults/initrd.scripts +++ b/defaults/initrd.scripts @@ -306,7 +306,7 @@ bootstrapFS() { fi # Setup the filesystem nodes and directories - for i in ${CDROOT_PATH} /mnt/livecd /mnt/key /mnt/gentoo /tmp /tmp/.initrd /dev /proc /run /sys; do + for i in ${CDROOT_PATH} /mnt/header /mnt/livecd /mnt/key /mnt/gentoo /tmp /tmp/.initrd /dev /proc /run /sys; do run mkdir -p "${NEW_ROOT}${i}" run chmod 755 "${NEW_ROOT}${i}" done @@ -391,6 +391,14 @@ bootstrapCD() { fi } +bootstrapHeader() { + # $1 = ROOT/SWAP + local HEADERDEVS=$(devicelist) + eval local headerloc='"${CRYPT_'${1}'_HEADER}"' + + findmediamount "header" "${headerloc}" "CRYPT_${1}_HEADERDEV" "/mnt/header" ${HEADERDEVS} +} + bootstrapKey() { # $1 = ROOT/SWAP local KEYDEVS=$(devicelist) @@ -1828,12 +1836,17 @@ openLUKS() { local LUKS_NAME="${1}" eval local LUKS_DEVICE='"${CRYPT_'${TYPE}'}"' + eval local LUKS_HEADER='"${CRYPT_'${TYPE}'_HEADER}"' + eval local LUKS_HEADERDEV='"${CRYPT_'${TYPE}'_HEADERDEV}"' + eval local LUKS_HEADERDEV_FSTYPE='"${CRYPT_'${TYPE}'_HEADERDEV_FSTYPE}"' eval local LUKS_KEY='"${CRYPT_'${TYPE}'_KEY}"' eval local LUKS_KEYDEV='"${CRYPT_'${TYPE}'_KEYDEV}"' eval local LUKS_KEYDEV_FSTYPE='"${CRYPT_'${TYPE}'_KEYDEV_FSTYPE}"' eval local OPENED_LOCKFILE='"${CRYPT_'${TYPE}'_OPENED_LOCKFILE}"' - local DEV_ERROR=0 KEY_ERROR=0 KEYDEV_ERROR=0 - local mntkey="/mnt/key/" crypt_filter_ret= + local DEV_ERROR=0 + local HEADER_ERROR=0 HEADERDEV_ERROR=0 + local KEY_ERROR=0 KEYDEV_ERROR=0 + local mntheader="/mnt/header/" mntkey="/mnt/key/" crypt_filter_ret= if [ -z "${LUKS_DEVICE}" ] then @@ -1853,13 +1866,27 @@ openLUKS() { good_msg "The LUKS device ${LUKS_DEVICE} meanwhile was opened by someone else." break # if crypt_silent=1 and some error occurs, enter shell quietly - elif [ \( ${CRYPT_SILENT} -eq 1 \) -a \( \( \( ${DEV_ERROR} -eq 1 \) -o \( ${KEY_ERROR} -eq 1 \) \) -o \( ${KEYDEV_ERROR} -eq 1 \) \) ] + elif [ \( ${CRYPT_SILENT} -eq 1 \) -a \( \( \( ${DEV_ERROR} -eq 1 \) \) ] + then + run_emergency_shell + elif [ \( ${CRYPT_SILENT} -eq 1 \) -a \( \( \( ${HEADER_ERROR} -eq 1 \) \) -o \( ${HEADERDEV_ERROR} -eq 1 \) \) ] + then + run_emergency_shell + elif [ \( ${CRYPT_SILENT} -eq 1 \) -a \( \( \( ${KEY_ERROR} -eq 1 \) \) -o \( ${KEYDEV_ERROR} -eq 1 \) \) ] then run_emergency_shell elif [ ${DEV_ERROR} -eq 1 ] then prompt_user "LUKS_DEVICE" "${LUKS_NAME}" DEV_ERROR=0 + elif [ ${HEADER_ERROR} -eq 1 ] + then + prompt_user "LUKS_HEADER" "${LUKS_NAME} header" + HEADER_ERROR=0 + elif [ ${HEADERDEV_ERROR} -eq 1 ] + then + prompt_user "LUKS_HEADERDEV" "${LUKS_NAME} header device" + HEADERDEV_ERROR=0 elif [ ${KEY_ERROR} -eq 1 ] then prompt_user "LUKS_KEY" "${LUKS_NAME} key" @@ -1877,18 +1904,93 @@ openLUKS() { continue fi - if ! run cryptsetup isLuks ${LUKS_DEVICE} + # Handle headers + if [ -n "${LUKS_HEADER}" ] + then + local REAL_LUKS_HEADERDEV="${LUKS_HEADERDEV}" + if [ ! -e "${mntheader}${LUKS_HEADER}" ] + then + REAL_LUKS_HEADER
[gentoo-commits] proj/genkernel:master commit in: defaults/
commit: efdf4d0affb587655d703140db86d45ffd2a1ede Author: Dmitry Baranov gmail com> AuthorDate: Tue Dec 29 20:10:50 2020 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Aug 7 17:20:10 2021 + URL:https://gitweb.gentoo.org/proj/genkernel.git/commit/?id=efdf4d0a defaults/initrd.scripts: Get rid of extra padding Simplify conditional blocks where 'continue' is present. Signed-off-by: Dmitry Baranov gmail.com> defaults/initrd.scripts | 184 1 file changed, 92 insertions(+), 92 deletions(-) diff --git a/defaults/initrd.scripts b/defaults/initrd.scripts index cdee2a4..33a48b3 100644 --- a/defaults/initrd.scripts +++ b/defaults/initrd.scripts @@ -1882,119 +1882,119 @@ openLUKS() { bad_msg "The LUKS device ${LUKS_DEVICE} does not contain a LUKS header" ${CRYPT_SILENT} DEV_ERROR=1 continue - else - if [ -n "${cryptsetup_options}" ] - then - good_msg "Using the following cryptsetup options for ${LUKS_NAME}: ${cryptsetup_options}" ${CRYPT_SILENT} - fi + fi - # Handle keys - if [ -n "${LUKS_KEY}" ] + if [ -n "${cryptsetup_options}" ] + then + good_msg "Using the following cryptsetup options for ${LUKS_NAME}: ${cryptsetup_options}" ${CRYPT_SILENT} + fi + + # Handle keys + if [ -n "${LUKS_KEY}" ] + then + local REAL_LUKS_KEYDEV="${LUKS_KEYDEV}" + if [ ! -e "${mntkey}${LUKS_KEY}" ] then - local REAL_LUKS_KEYDEV="${LUKS_KEYDEV}" - if [ ! -e "${mntkey}${LUKS_KEY}" ] + REAL_LUKS_KEYDEV=$(find_real_device "${LUKS_KEYDEV}") + if [ -b "${REAL_LUKS_KEYDEV}" ] then - REAL_LUKS_KEYDEV=$(find_real_device "${LUKS_KEYDEV}") - if [ -b "${REAL_LUKS_KEYDEV}" ] + good_msg "Using key device ${REAL_LUKS_KEYDEV}." ${CRYPT_SILENT} + else + good_msg "Please insert removable device ${LUKS_KEYDEV} for ${LUKS_NAME}" ${CRYPT_SILENT} + # abort after 10 secs + local count=10 + while [ ${count} -gt 0 ] + do + count=$((count-1)) + sleep 1 + REAL_LUKS_KEYDEV=$(find_real_device "${LUKS_KEYDEV}") + if [ -b "${REAL_LUKS_KEYDEV}" ] + then + good_msg "Removable device ${REAL_LUKS_KEYDEV} detected." ${CRYPT_SILENT} + break + fi + done + if [ ! -b "${REAL_LUKS_KEYDEV}" ] then - good_msg "Using key device ${REAL_LUKS_KEYDEV}." ${CRYPT_SILENT} - else - good_msg "Please insert removable device ${LUKS_KEYDEV} for ${LUKS_NAME}" ${CRYPT_SILENT} - # abort after 10 secs - local count=10 - while [ ${count} -gt 0 ] - do - count=$((count-1)) -
[gentoo-commits] repo/gentoo:master commit in: net-misc/netifrc/
commit: 96fa623d6c5297f48e16a2bc855c2507449e Author: Robin H. Johnson gentoo org> AuthorDate: Fri May 13 22:10:52 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri May 13 22:11:15 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=96fa net-misc/netifrc: pkg_postinst needs udev_reload Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://bugs.gentoo.org/843908 net-misc/netifrc/netifrc-0.7.3.ebuild | 1 + net-misc/netifrc/netifrc-.ebuild | 1 + 2 files changed, 2 insertions(+) diff --git a/net-misc/netifrc/netifrc-0.7.3.ebuild b/net-misc/netifrc/netifrc-0.7.3.ebuild index ac56715aca1e..d06417b6031a 100644 --- a/net-misc/netifrc/netifrc-0.7.3.ebuild +++ b/net-misc/netifrc/netifrc-0.7.3.ebuild @@ -61,6 +61,7 @@ src_install() { } pkg_postinst() { + udev_reload if [[ ! -e "${EROOT}"/etc/conf.d/net && -z ${REPLACING_VERSIONS} ]]; then elog "The network configuration scripts will use dhcp by" elog "default to set up your interfaces." diff --git a/net-misc/netifrc/netifrc-.ebuild b/net-misc/netifrc/netifrc-.ebuild index 4503bec9c25e..31f53c53facc 100644 --- a/net-misc/netifrc/netifrc-.ebuild +++ b/net-misc/netifrc/netifrc-.ebuild @@ -61,6 +61,7 @@ src_install() { } pkg_postinst() { + udev_reload if [[ ! -e "${EROOT}"/etc/conf.d/net && -z ${REPLACING_VERSIONS} ]]; then elog "The network configuration scripts will use dhcp by" elog "default to set up your interfaces."
[gentoo-commits] repo/gentoo:master commit in: sys-apps/ipmiutil/, sys-apps/ipmiutil/files/
commit: ba9f1c5883a21c5ad332abdf2e23bc89ce79e397 Author: Robin H. Johnson gentoo org> AuthorDate: Fri May 6 04:11:46 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri May 6 04:11:46 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ba9f1c58 sys-apps/ipmiutil: bump for openssl-3.0 Signed-off-by: Robin H. Johnson gentoo.org> sys-apps/ipmiutil/Manifest | 1 + .../files/ipmiutil-3.1.8-fix-configure.patch | 170 + sys-apps/ipmiutil/ipmiutil-3.1.8.ebuild| 81 ++ 3 files changed, 252 insertions(+) diff --git a/sys-apps/ipmiutil/Manifest b/sys-apps/ipmiutil/Manifest index bc3c07233bb9..5fdc81507f2a 100644 --- a/sys-apps/ipmiutil/Manifest +++ b/sys-apps/ipmiutil/Manifest @@ -2,3 +2,4 @@ DIST ipmiutil-3.0.6.tar.gz 1692679 BLAKE2B dcc02dbb5467b824005dbc95c8f5231b2e275 DIST ipmiutil-3.0.9.tar.gz 1697688 BLAKE2B 93ed8865cae1cea0ea4f7de4683f4698e3f75e9190cc7e0af1832ca44a08f52aa149393761f1ede3994827db78841061d54058bbe4178b5930accd3a4c225ba7 SHA512 c2c0a516216a46a52621159e665a77d96cf81f385fc9cf19877e72283be3e1a4dad5a4826454727b71576c22cc4de3c73ff428d26f35bf496c7dc1511305cda3 DIST ipmiutil-3.1.6.tar.gz 1693461 BLAKE2B efc2b283d7655b8afb9d3d8da2e5458deea1c1b939f3ccdf2be0cdf3792ea60229099cce1b8e32f087972385feb01d604f1c63bddbfd031210d5acf8a6b1b9d7 SHA512 9bccfa2e0bba7f30e422d67f93ee6cff50c08cc8bceab5ba5bfd1b0a91e1af8a4a98a2eaa81364e8a1f38e0bd1ce6b99717d86957c6f689aa7329e7013f5b0ef DIST ipmiutil-3.1.7.tar.gz 1726396 BLAKE2B 7fa31f8aca61462fc08dd4fe420e27eecce2ee9fa5fb2676eb944e2ae6c09598aec5f06d59e4ed02faab077003b14085f944b6cf0b63f90b10f2660f363e997b SHA512 7522808e4a94c8627de0a95dde0e3eb463ba05948159b5181129b573ce8f9feba3543ef603c14e7cdcafcbd58ca5319536cc5534ea8191cce0ef9d33cc548274 +DIST ipmiutil-3.1.8.tar.gz 1841037 BLAKE2B 69139fc2b82a701657c5fec6aa928a0ee2d7874a8ebc26631eca438f298e8bddd3afb578462979eb24cd51bd816263f13e9f38fec8b5d6fa4fcefb2519a652c9 SHA512 77a01be420d8362ddce2b2b2bd44ee53a70812b29b3dd7bc5add6429f0e43a48905ca0401e1855f2cca5e69086605eb7b84e2f4bf9cf33251934acc0fe51346f diff --git a/sys-apps/ipmiutil/files/ipmiutil-3.1.8-fix-configure.patch b/sys-apps/ipmiutil/files/ipmiutil-3.1.8-fix-configure.patch new file mode 100644 index ..f59701079828 --- /dev/null +++ b/sys-apps/ipmiutil/files/ipmiutil-3.1.8-fix-configure.patch @@ -0,0 +1,170 @@ +Fix automagic configure options. + +--- ipmiutil-3.1.8.orig/configure.ac 2022-05-05 20:48:27.180318912 -0700 ipmiutil-3.1.8/configure.ac2022-05-05 20:53:10.070503250 -0700 +@@ -80,22 +80,30 @@ + # fi] + + drv_landesk=0 ++LANDESK_CFLAGS="" ++LANDESK_LDADD="" + dnl configure for LANDESK libipmiapi or not + AC_ARG_ENABLE([landesk], +-[ --enable-landesk adds landesk library support [[default=no]]], +-[if test "x$enableval" = "xyes"; then ++ AS_HELP_STRING([--enable-landesk], [enable landesk support (default=no)]), ++ [], ++ [enable_landesk=no] ++) ++AS_IF([test "x$enable_landesk" = "xyes"], [ + drv_landesk=1 + LANDESK_CFLAGS="-DLINK_LANDESK" + LANDESK_LDADD="-lipmiapi -L../lib" + AC_SUBST(LANDESK_CFLAGS) + AC_SUBST(LANDESK_LDADD) +-fi] +-) ++echo "landesk enabled" ++]) + + dnl Configure ipmiutil for lanplus (libipmi_lanplus.a) or not (default yes) + AC_ARG_ENABLE([lanplus], +-[ --disable-lanplus disable lanplus support [[default=enabled]]],) +-if test "x$enable_lanplus" = "xno"; then ++ AS_HELP_STRING([--disable-lanplus], [enable lanplus support (default=yes)]), ++ [], ++ [enable_lanplus=yes] ++) ++ + drv_lanplus="" + LANPLUS_CFLAGS="" + LANPLUS_LDADD="" +@@ -103,8 +111,7 @@ + LANPLUS_CRYPTO="" + LANPLUS_SAM="no" + LD_SAMX="" +- echo "lanplus disabled" +-else ++AS_IF([test "x$enable_lanplus" = "xyes"], [ + drv_lanplus="lanplus" + LANPLUS_CFLAGS="-DHAVE_LANPLUS" + # LANPLUS_CFLAGS="-DHAVE_LANPLUS -I${projdir}/lib/lanplus/inc" +@@ -115,7 +122,7 @@ + LANPLUS_SAM="yes" + LD_SAMX="../lib/libipmi_lanplus.a -lcrypto" + echo "lanplus enabled" +-fi ++]) + + dnl Configure libipmiutil.a for lanplus or not + dnl Only SOL requires lanplus, so usually build libipmiutil.a without lanplus +@@ -130,21 +137,28 @@ + #fi + + # strings /lib/libssl.so* |grep EVP_sha256 +-dnl configure for SHA256, build lanplus with SHA256 support, uses later openssl. ++dnl configure for SHA256, build lanplus with SHA256 support ++dnl requires openssl-1.0.1 which was released in 2012/03 + AC_ARG_ENABLE([sha256], +-[ --enable-sha256build wi
[gentoo-commits] repo/gentoo:master commit in: sys-apps/plocate/
commit: 7f4f2cef47764e386c089241315676b71dd08b77 Author: Robin H. Johnson gentoo org> AuthorDate: Sat Apr 23 14:33:31 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Apr 23 14:33:44 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7f4f2cef sys-apps/plocate: works fine on x86 Signed-off-by: Robin H. Johnson gentoo.org> sys-apps/plocate/plocate-1.1.15.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys-apps/plocate/plocate-1.1.15.ebuild b/sys-apps/plocate/plocate-1.1.15.ebuild index 632c45be5000..3fb8c7c34d07 100644 --- a/sys-apps/plocate/plocate-1.1.15.ebuild +++ b/sys-apps/plocate/plocate-1.1.15.ebuild @@ -13,7 +13,7 @@ SRC_URI="https://plocate.sesse.net/download/${P}.tar.gz; # GPL-2+ for plocate itself LICENSE="GPL-2 GPL-2+" SLOT="0" -KEYWORDS="amd64 ~arm ~arm64" +KEYWORDS="amd64 ~arm ~arm64 ~x86" IUSE="+io-uring" RDEPEND="
[gentoo-commits] repo/gentoo:master commit in: dev-util/kup/, dev-util/kup/files/
commit: 192b57063e09431f7d1b39c58ab0c137eac680ec Author: Robin H. Johnson gentoo org> AuthorDate: Thu Apr 21 23:43:32 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Thu Apr 21 23:43:43 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=192b5706 dev-util/kup: add gitolite support from upstream kup & gitolite Signed-off-by: Robin H. Johnson gentoo.org> .../kup/files/kup-server-gitolite-subcmd.patch | 242 + dev-util/kup/kup-0.3.6-r1.ebuild | 38 dev-util/kup/metadata.xml | 6 + 3 files changed, 286 insertions(+) diff --git a/dev-util/kup/files/kup-server-gitolite-subcmd.patch b/dev-util/kup/files/kup-server-gitolite-subcmd.patch new file mode 100644 index ..89ea3ff02bf3 --- /dev/null +++ b/dev-util/kup/files/kup-server-gitolite-subcmd.patch @@ -0,0 +1,242 @@ +Upstream kup provided this patch, that was apparently written by the Gitolite +author. + +--- standard/kup-server2017-03-28 13:01:24.0 -0400 gitolite/kup-server2018-03-26 15:01:20.0 -0400 +@@ -1,4 +1,4 @@ +-#!/usr/bin/perl -T ++#!/usr/bin/perl + ## --- + ## + ## Copyright 2011 Intel Corporation; author: H. Peter Anvin +@@ -68,12 +68,20 @@ + + use Digest::SHA; + +-my $VERSION = '0.3.6'; +- +-# Scrub the environment completely +-%ENV = ('PATH' => '/bin:/usr/bin', +- 'LANG' => 'C', +- 'SHELL' => '/bin/false'); # Nothing in this program should shell out ++use lib $ENV{GL_LIBDIR}; ++use Gitolite::Easy; ++use Gitolite::Conf::Load; ++ ++my $VERSION = '0.3.6 (gitolite integrated)'; ++ ++# Scrub the environment completely, except gitolite variables and HOME ++{ ++ my %env = %ENV; ++ %ENV = ('PATH' => '/bin:/usr/bin', ++ 'LANG' => 'C', ++ 'SHELL' => '/bin/false'); # Nothing in this program should shell out ++ $ENV{$_} = $env{$_} for ('HOME', grep(/^GL_/, keys %env)); ++} + + # The standard function to call on bail + sub fatal($) { +@@ -88,16 +96,7 @@ + } + + sub my_username() { +- my $whoami = getuid(); +- my ($name,$passwd,$uid,$gid,$quota,$comment,$gcos,$dir,$shell,$expire) = getpwuid($whoami); +- +- if (!defined($name) || $whoami != $uid) { +- # We haven't called openlog() yet so we need to do it here +- openlog("kup-server($whoami)", 'ndelay,pid', LOG_LOCAL5); +- fatal("You don't exist, go away!"); +- } +- +- return (defined($name) && $whoami == $uid) ? $name : $whoami; ++ return $ENV{GL_USER}; + } + + my $user_name = my_username(); +@@ -106,7 +105,7 @@ + + + # Get config values from kup-server.cfg +-my $cfg_file = '/etc/kup/kup-server.cfg'; ++my $cfg_file = '/var/lib/gitolite3/.gitolite/local-code/configs/kup-server.cfg'; + + my $cfg = new Config::Simple($cfg_file); + +@@ -371,6 +370,51 @@ + return 1; + } + ++# kup-server may "read" files from the kup data_path, or repos. If a repo is ++# supplied, we assume it's a gitolite repo and check access accordingly (while ++# remembering that kup seems to add a leading slash). If a repo is *not* ++# supplied, we assume we're talking about the kup data_path, which means we ++# make gitolite access rules from the "fake" repo called "@kup-server" ++sub read_allowed ++{ ++ Gitolite::Common::trace( 1, 'read_allowed', @_ ); ++ my $repo = shift || '@kup-server'; ++ ++ # gitolite expects a "normalised" repo name; no leading slash, no trailing ".git" ++ $repo =~ s(^/)(); $repo =~ s/\.git$//; ++ ++ return can_read($repo); ++} ++ ++# kup-server does not write to normal repos, it only writes to files in the ++# kup data_path. So we don't have to worry about any repo other than ++# "@kup-server", which is therefore hardcoded in here. ++sub write_allowed ++{ ++ Gitolite::Common::trace( 1, 'write_allowed', @_ ); ++ my($path, $perm) = @_; ++ ++ # other values for perm are + (rm) and C (mkdir), analogous to gitolite's ++ # "+ means delete or rewind branch, C means create branch" ++ $perm ||= 'W'; ++ ++ my $repo = '@kup-server'; ++ ++ # the paths that gitolite expects start with "refs/heads/", since we are ++ # simply re-using the existing ACL for this. (But remember $path, in ++ # kup-land, already starts with a "/".) ++ $path = "refs/heads" . $path; ++ ++ return can_write($repo, $perm, $path) || ++ can_write($repo, $perm, "$path/"); ++ # the second check is because, when specifying a permission on a directory ++ # in gitolite, you end with a "/", say "RW+C foo/ = user". To exercise ++ # that right, the user r
Re: [gentoo-dev] proposal: use only one hash function in manifest files
On Wed, Apr 06, 2022 at 05:23:25PM +, Robin H. Johnson wrote: > On Wed, Apr 06, 2022 at 02:15:02AM +0200, Jason A. Donenfeld wrote: > > 2) Comparability: other distros use SHA2-512, as well as various > > upstreams, which means we can compare our hashes to theirs easily. > Can we expand on this specific thread for a moment? > > I was the author of GLEP59 about changing the Manifest hashes, and I > noted at the time, with references, that the effective strength of a set > of hashes is only that of the strongest hash. Bump for my parent message, that I'm very surprised at the lack of responses to two messages in this thread. https://archives.gentoo.org/gentoo-dev/message/18216da0128ee79733fa68bb77fa8b69 https://archives.gentoo.org/gentoo-dev/message/a9974ec34dfb25810dab47e3fa322a52 -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
[gentoo-commits] repo/gentoo:master commit in: sys-kernel/genkernel/
commit: 39935b585f184238be648a193fb8a68f479196b1 Author: Robin H. Johnson gentoo org> AuthorDate: Tue Apr 19 23:16:45 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue Apr 19 23:17:01 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=39935b58 sys-kernel/genkernel: fix shellcheck error Signed-off-by: Robin H. Johnson gentoo.org> Fixes: https://bugs.gentoo.org/839195 sys-kernel/genkernel/genkernel-4.2.5.ebuild| 2 +- sys-kernel/genkernel/genkernel-4.2.6-r2.ebuild | 2 +- sys-kernel/genkernel/genkernel-.ebuild | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/sys-kernel/genkernel/genkernel-4.2.5.ebuild b/sys-kernel/genkernel/genkernel-4.2.5.ebuild index 0aa34f0f69da..b5ae43f5eda6 100644 --- a/sys-kernel/genkernel/genkernel-4.2.5.ebuild +++ b/sys-kernel/genkernel/genkernel-4.2.5.ebuild @@ -287,7 +287,7 @@ pkg_postinst() { fi local n_root_args=$(grep -o -- '\/dev/null | wc -l) - if [[ ${n_root_args} > 1 ]] ; then + if [[ ${n_root_args} -gt 1 ]] ; then ewarn "WARNING: Multiple root arguments (root=) on kernel command-line detected!" ewarn "If you are appending non-persistent device names to kernel command-line," ewarn "next reboot could fail in case running system and initramfs do not agree" diff --git a/sys-kernel/genkernel/genkernel-4.2.6-r2.ebuild b/sys-kernel/genkernel/genkernel-4.2.6-r2.ebuild index 8095046ac8a1..c84a9987b7c4 100644 --- a/sys-kernel/genkernel/genkernel-4.2.6-r2.ebuild +++ b/sys-kernel/genkernel/genkernel-4.2.6-r2.ebuild @@ -293,7 +293,7 @@ pkg_postinst() { fi local n_root_args=$(grep -o -- '\/dev/null | wc -l) - if [[ ${n_root_args} > 1 ]] ; then + if [[ ${n_root_args} -gt 1 ]] ; then ewarn "WARNING: Multiple root arguments (root=) on kernel command-line detected!" ewarn "If you are appending non-persistent device names to kernel command-line," ewarn "next reboot could fail in case running system and initramfs do not agree" diff --git a/sys-kernel/genkernel/genkernel-.ebuild b/sys-kernel/genkernel/genkernel-.ebuild index acee15e17415..4b18348406d6 100644 --- a/sys-kernel/genkernel/genkernel-.ebuild +++ b/sys-kernel/genkernel/genkernel-.ebuild @@ -288,7 +288,7 @@ pkg_postinst() { fi local n_root_args=$(grep -o -- '\/dev/null | wc -l) - if [[ ${n_root_args} > 1 ]] ; then + if [[ ${n_root_args} -gt 1 ]] ; then ewarn "WARNING: Multiple root arguments (root=) on kernel command-line detected!" ewarn "If you are appending non-persistent device names to kernel command-line," ewarn "next reboot could fail in case running system and initramfs do not agree"
[gentoo-commits] repo/gentoo:master commit in: net-analyzer/thrulay/
commit: 6082674e9ec32026b62641060bac2d559640d979 Author: Robin H. Johnson gentoo org> AuthorDate: Sat Apr 16 05:00:50 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Apr 16 05:01:01 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6082674e net-analyzer/thrulay: fix LICENSE Signed-off-by: Robin H. Johnson gentoo.org> Fixes: https://bugs.gentoo.org/show_bug.cgi?id=426004 net-analyzer/thrulay/thrulay-0.9-r1.ebuild | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net-analyzer/thrulay/thrulay-0.9-r1.ebuild b/net-analyzer/thrulay/thrulay-0.9-r1.ebuild index 388b9ba4e265..97d1f5c8c503 100644 --- a/net-analyzer/thrulay/thrulay-0.9-r1.ebuild +++ b/net-analyzer/thrulay/thrulay-0.9-r1.ebuild @@ -11,7 +11,8 @@ SRC_URI=" http://www.internet2.edu/~shalunov/thrulay/${P}.tar.gz mirror://sourceforge/${PN}/${P}.tar.gz" -LICENSE="BSD" +# init.d is GPL-2 +LICENSE="BSD GPL-2" SLOT="0" KEYWORDS="amd64 ppc x86"
[gentoo-commits] repo/gentoo:master commit in: net-nds/openldap/
commit: eac600cf87417f9312fae99b7f73536b5ff399d1 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Apr 15 19:34:21 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Apr 15 19:35:04 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=eac600cf net-nds/openldap: fix multilib inherit Fixes: IndirectInherits: version 2.6.1-r1: multilib: indirect inherit usage: 'get_libname 0', line 752 Signed-off-by: Robin H. Johnson gentoo.org> net-nds/openldap/openldap-2.6.1-r1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net-nds/openldap/openldap-2.6.1-r1.ebuild b/net-nds/openldap/openldap-2.6.1-r1.ebuild index 7091232465cf..f90979e12030 100644 --- a/net-nds/openldap/openldap-2.6.1-r1.ebuild +++ b/net-nds/openldap/openldap-2.6.1-r1.ebuild @@ -3,7 +3,7 @@ EAPI=7 -inherit autotools flag-o-matic multilib-minimal preserve-libs ssl-cert toolchain-funcs systemd tmpfiles +inherit autotools flag-o-matic multilib multilib-minimal preserve-libs ssl-cert toolchain-funcs systemd tmpfiles MY_PV="$(ver_rs 1-2 _)"
[gentoo-commits] repo/gentoo:master commit in: sys-block/fio/
commit: ea1f73960cae51410a7a2fbcb1d0789dcffbcb83 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Apr 15 19:28:20 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Apr 15 19:35:04 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ea1f7396 sys-block/fio: clean stale ebuild Signed-off-by: Robin H. Johnson gentoo.org> sys-block/fio/fio-3.27-r2.ebuild | 150 --- 1 file changed, 150 deletions(-) diff --git a/sys-block/fio/fio-3.27-r2.ebuild b/sys-block/fio/fio-3.27-r2.ebuild deleted file mode 100644 index 95b48167827b.. --- a/sys-block/fio/fio-3.27-r2.ebuild +++ /dev/null @@ -1,150 +0,0 @@ -# Copyright 1999-2022 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -PYTHON_COMPAT=( python3_{7,8,9,10} ) - -inherit python-r1 toolchain-funcs - -MY_PV="${PV/_rc/-rc}" -MY_P="${PN}-${MY_PV}" - -DESCRIPTION="Jens Axboe's Flexible IO tester" -HOMEPAGE="https://brick.kernel.dk/snaps/; -SRC_URI="https://brick.kernel.dk/snaps/${MY_P}.tar.bz2; - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="amd64 arm ~arm64 ~ia64 ~ppc ppc64 x86" -IUSE="aio curl glusterfs gnuplot gtk io-uring numa python rbd rdma static tcmalloc test zbc zlib" -REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} ) - gnuplot? ( python ) - io-uring? ( aio )" -RESTRICT="!test? ( test )" - -BDEPEND="virtual/pkgconfig" - -# GTK+:2 does not offer static libaries. -LIB_DEPEND="aio? ( dev-libs/libaio[static-libs(+)] ) - curl? ( - net-misc/curl:=[static-libs(+)] - dev-libs/openssl:0=[static-libs(+)] - ) - glusterfs? ( sys-cluster/glusterfs[static-libs(+)] ) - gtk? ( dev-libs/glib:2[static-libs(+)] ) - io-uring? ( sys-libs/liburing:=[static-libs(+)] ) - numa? ( sys-process/numactl[static-libs(+)] ) - rbd? ( sys-cluster/ceph[static-libs(+)] ) - rdma? ( sys-cluster/rdma-core[static-libs(+)] ) - tcmalloc? ( dev-util/google-perftools:=[static-libs(+)] ) - zbc? ( >=sys-block/libzbc-5 ) - zlib? ( sys-libs/zlib[static-libs(+)] )" -RDEPEND="!static? ( ${LIB_DEPEND//\[static-libs(+)]} ) - gtk? ( x11-libs/gtk+:2 )" -DEPEND="${RDEPEND} - static? ( ${LIB_DEPEND} ) - test? ( dev-util/cunit )" -RDEPEND+=" - python? ( - ${PYTHON_DEPS} - $(python_gen_any_dep 'dev-python/pandas[${PYTHON_USEDEP}]') - ) - gnuplot? ( sci-visualization/gnuplot )" - -S="${WORKDIR}/${MY_P}" - -PATCHES=( - "${FILESDIR}"/fio-2.2.13-libmtd.patch -) - -python_check_deps() { - has_version "dev-python/pandas[${PYTHON_USEDEP}]" -} - -src_prepare() { - default - - sed -i '/^DEBUGFLAGS/s: -D_FORTIFY_SOURCE=2::g' Makefile || die - - # Many checks don't have configure flags. - sed -i \ - -e "s:\:$(tc-getPKG_CONFIG):" \ - -e '/if compile_prog "" "-lzbc" "libzbc" *; *then/ '"s::if $(usex zbc true false) ; then:" \ - -e '/if compile_prog "" "-lz" "zlib" *; *then/ '"s::if $(usex zlib true false) ; then:" \ - -e '/if compile_prog "" "-laio" "libaio" *; *then/'"s::if $(usex aio true false) ; then:" \ - -e '/if compile_prog "" "-lcunit" "CUnit" *; *then/'"s::if $(usex test true false) ; then:" \ - configure || die -} - -src_configure() { - chmod g-w "${T}" - # not a real configure script - # TODO: cuda - # TODO: libnbd - not packaged in Gentoo - # TODO: pmem - not packaged in Gentoo - set -- \ - ./configure \ - --disable-optimizations \ - --extra-cflags="${CFLAGS} ${CPPFLAGS}" \ - --cc="$(tc-getCC)" \ - --disable-pmem \ - $(usex curl '' '--disable-http') \ - $(usex glusterfs '' '--disable-gfapi') \ - $(usex gtk '--enable-gfio' '') \ - $(usex numa '' '--disable-numa') \ - $(usex rbd '' '--disable-rbd') \ - $(usex rdma '' '--disable-rdma') \ - $(usex static '--build-static' '') \ - $(usex tcmalloc '' '--disable-tcmalloc') - echo "$@" - "$@" || die 'configure failed' -} - -src_compile() { - emake V=1 OPTFLAGS= -} - -src_install() { - emake install DESTDIR="${D}" prefix="${EPREFIX}/usr" mandir="${EPREFIX}/usr/share/man" - - local python2_7_files=( - "${ED}"/usr/bin/fiologparser_his
[gentoo-commits] repo/gentoo:master commit in: net-nds/openldap/
commit: 093cd54d45df6d840c33b0d2c367d7a5c70acdc7 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Apr 15 19:33:19 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Apr 15 19:35:04 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=093cd54d net-nds/openldap: document USE=autoca Signed-off-by: Robin H. Johnson gentoo.org> net-nds/openldap/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/net-nds/openldap/metadata.xml b/net-nds/openldap/metadata.xml index 62176631c249..d19853eda044 100644 --- a/net-nds/openldap/metadata.xml +++ b/net-nds/openldap/metadata.xml @@ -10,6 +10,7 @@ Enable password hashing algorithm from app-crypt/argon2 + Automatic Certificate Authority overlay Enable use of cleartext passwords Enable experimental backend options Enable support for kerberos init
[gentoo-commits] repo/gentoo:master commit in: sys-block/fio/
commit: 7d1472027c037812dafb3ef8c6d706d2a691e406 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Apr 15 19:27:58 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Apr 15 19:35:04 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7d147202 sys-block/fio: fix USE=nfs Signed-off-by: Robin H. Johnson gentoo.org> sys-block/fio/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/sys-block/fio/metadata.xml b/sys-block/fio/metadata.xml index 83445573eea0..35aae97a4d18 100644 --- a/sys-block/fio/metadata.xml +++ b/sys-block/fio/metadata.xml @@ -13,6 +13,7 @@ Enable GlusterFS gfapi support via sys-cluster/glusterfs Install tools for generating gnuplots Enable efficient I/O via sys-libs/liburing. + Enable NFS support Enable numa support Enable Rados block device support via sys-cluster/ceph Enable infiniband support via sys-cluster/rdma-core
[gentoo-commits] repo/gentoo:master commit in: app-misc/ddcutil/
commit: 76f55948553c4a00bebea7334608cd16a686398e Author: Robin H. Johnson gentoo org> AuthorDate: Fri Apr 15 04:59:39 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Apr 15 04:59:51 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=76f55948 app-misc/ddcutil: cleanup Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://bugs.gentoo.org/787020 app-misc/ddcutil/Manifest| 1 - app-misc/ddcutil/ddcutil-0.9.9-r3.ebuild | 117 --- 2 files changed, 118 deletions(-) diff --git a/app-misc/ddcutil/Manifest b/app-misc/ddcutil/Manifest index 36814e6355bf..6237ee274ea6 100644 --- a/app-misc/ddcutil/Manifest +++ b/app-misc/ddcutil/Manifest @@ -1,2 +1 @@ -DIST ddcutil-0.9.9.tar.gz 725207 BLAKE2B ad7b0b35ad4c2dae21da066e4194209579d774ded10f2dc0d8d7d3d94e70d5893c3d1f772b86ea01be510cfb8d51a657178228d028ca34ab20d344e86e0581d2 SHA512 f7b2b961c6b76ef59f336290b494cdd331556848de881d57e5240075d50733030df4c47131070f1276907d712a45f60dad6bebaa052a66621b8b5517ff293c21 DIST ddcutil-1.2.2.tar.gz 803943 BLAKE2B 65cc5dc0d1ee85d1e2b6670f7c24508ab817c6eebdb596b5f6f70c7ff7b9257f12f70abfea2d735e23755e508d4829d4be6574ac16564d4d828e0b1153cf8afe SHA512 0329711e536cbcaee2efe6cf981a17181ab318846e9c6a82f2ceacc42691ba49c06df44a52d1f079568e9ccec588cc85d4de4adf19b6db83bebe4bb90ae29207 diff --git a/app-misc/ddcutil/ddcutil-0.9.9-r3.ebuild b/app-misc/ddcutil/ddcutil-0.9.9-r3.ebuild deleted file mode 100644 index 53bf5448e893.. --- a/app-misc/ddcutil/ddcutil-0.9.9-r3.ebuild +++ /dev/null @@ -1,117 +0,0 @@ -# Copyright 1999-2022 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -inherit autotools flag-o-matic linux-info udev - -DESCRIPTION="Program for querying and changing monitor settings" -HOMEPAGE="http://www.ddcutil.com/; -SRC_URI="https://github.com/rockowitz/ddcutil/archive/v${PV}.tar.gz -> ${P}.tar.gz" - -SLOT="0/3" -LICENSE="GPL-2" -KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86" -IUSE="drm introspection usb-monitor user-permissions video_cards_nvidia X" -REQUIRED_USE="drm? ( X )" - -RDEPEND=" - dev-libs/glib:2 - sys-apps/i2c-tools - virtual/udev - drm? ( x11-libs/libdrm ) - introspection? ( >=dev-libs/gobject-introspection-1.54.0:= ) - usb-monitor? ( - dev-libs/hidapi - virtual/libusb:1 - sys-apps/usbutils - ) - user-permissions? ( - acct-group/i2c - usb-monitor? ( acct-group/video ) - ) - X? ( - x11-libs/libXrandr - x11-libs/libX11 - ) -" -DEPEND="${RDEPEND}" -BDEPEND="virtual/pkgconfig" - -pkg_pretend() { - # This program needs /dev/ic2-* devices to communicate with the monitor. - CONFIG_CHECK="~I2C_CHARDEV" - ERROR_I2C_CHARDEV="You must enable I2C_CHARDEV in your kernel to continue" - if use usb-monitor; then - CONFIG_CHECK+=" ~HIDRAW ~USB_HIDDEV" - ERROR_HIDRAW="HIDRAW is needed to support USB monitors" - ERROR_I2C_CHARDEV="USB_HIDDEV is needed to support USB monitors" - fi - - # Now do the actual checks setup above - check_extra_config -} - -src_prepare() { - default - eautoreconf - sed -e "s#usr/local/bin#usr/bin#" -i data/etc/udev/rules.d/45-ddcutil-usb.rules || die -} - -src_configure() { - # Bug 607818. - replace-flags -O3 -O2 - - local myeconfargs=( - $(use_enable drm) - $(use_enable usb-monitor usb) - $(use_enable X x11) - --enable-lib - # Please read upstream's note about the original purpose of these flags before re-enabling them: - # https://github.com/rockowitz/ddcutil/issues/128 - # As of 0.9.9 the following no longer compile: - # Python3 & CFFI is already broken as of Python 3.7, with future removal; - # SWIG : Python3.7 breakage as well PyFileObject vs PyCodeObject - --disable-cffi - --disable-cython - --disable-swig - $(use_enable introspection) - ) - - econf "${myeconfargs[@]}" -} - -src_install() { - default - if use user-permissions; then - udev_dorules data/etc/udev/rules.d/45-ddcutil-i2c.rules - if use usb-monitor; then - udev_dorules data/etc/udev/rules.d/45-ddcutil-usb.rules - fi - fi -} - -pkg_postinst() { - if use user-permissions; then - einfo "To allow non-root users access to the /dev/i2c-* devices, add those" - einfo "users to the i2c group
[gentoo-commits] repo/gentoo:master commit in: sys-block/fio/
commit: 1b75cdfa9800fd14a18c64c1bb7770d6dfcc87f0 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Apr 15 04:56:28 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Apr 15 04:57:29 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1b75cdfa sys-block/fio: bump Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://bugs.gentoo.org/837236 sys-block/fio/Manifest| 1 + sys-block/fio/fio-3.30.ebuild | 154 ++ 2 files changed, 155 insertions(+) diff --git a/sys-block/fio/Manifest b/sys-block/fio/Manifest index 1cf9275b8809..a942bd342da5 100644 --- a/sys-block/fio/Manifest +++ b/sys-block/fio/Manifest @@ -1 +1,2 @@ DIST fio-3.27.tar.bz2 960330 BLAKE2B 7e7e01a5c1d6af13a6f87139e7738646cbc8f45ebc370d0c45b9efe1f93778613d374daafc6df459f988f27f2be54ff636235e1e5a92a4a6ecf9a60ed573d170 SHA512 9c5f2ab0c9ac24ab78dbc74fb6c5acd60f8189fdc618f4280992141b6c0abe1c235c373fee18ad0c803e7fb25d480f45aec56dc3be2e0d26d181b3418b179f99 +DIST fio-3.30.tar.bz2 6001772 BLAKE2B a4941cd415e6444bb9871274580efdf82281a1e52dc3caaa235f63176e3564fb1dc08e1e4586c555f9c25975d7e6220fe53209ed7218da713b9cb9135de0fc05 SHA512 1fb2ae9c28028147edabceff734fc41bf07ce504af98afdb0951920b724b15d647f2b0852262c177279ad6b4dbbf24be458db7f939d1c80069e0f8e7bc8aa10d diff --git a/sys-block/fio/fio-3.30.ebuild b/sys-block/fio/fio-3.30.ebuild new file mode 100644 index ..16e488400b63 --- /dev/null +++ b/sys-block/fio/fio-3.30.ebuild @@ -0,0 +1,154 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +PYTHON_COMPAT=( python3_{8,9,10} ) + +inherit python-r1 toolchain-funcs + +MY_PV="${PV/_rc/-rc}" +MY_P="${PN}-${MY_PV}" + +DESCRIPTION="Jens Axboe's Flexible IO tester" +HOMEPAGE="https://brick.kernel.dk/snaps/; +SRC_URI="https://brick.kernel.dk/snaps/${MY_P}.tar.bz2; + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~amd64 ~arm ~arm64 ~ia64 ~ppc ~ppc64 ~riscv ~x86" +IUSE="aio curl glusterfs gnuplot gtk io-uring nfs numa python rbd rdma static tcmalloc test zbc zlib" +REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} ) + gnuplot? ( python ) + io-uring? ( aio )" +RESTRICT="!test? ( test )" + +BDEPEND="virtual/pkgconfig" + +# GTK+:2 does not offer static libaries. +LIB_DEPEND="aio? ( dev-libs/libaio[static-libs(+)] ) + curl? ( + net-misc/curl:=[static-libs(+)] + dev-libs/openssl:0=[static-libs(+)] + ) + nfs? ( net-fs/libnfs:=[static-libs(+)] ) + glusterfs? ( sys-cluster/glusterfs[static-libs(+)] ) + gtk? ( dev-libs/glib:2[static-libs(+)] ) + io-uring? ( sys-libs/liburing:=[static-libs(+)] ) + numa? ( sys-process/numactl[static-libs(+)] ) + rbd? ( sys-cluster/ceph[static-libs(+)] ) + rdma? ( sys-cluster/rdma-core[static-libs(+)] ) + tcmalloc? ( dev-util/google-perftools:=[static-libs(+)] ) + zbc? ( >=sys-block/libzbc-5 ) + zlib? ( sys-libs/zlib[static-libs(+)] )" +RDEPEND="!static? ( ${LIB_DEPEND//\[static-libs(+)]} ) + gtk? ( x11-libs/gtk+:2 )" +DEPEND="${RDEPEND} + static? ( ${LIB_DEPEND} ) + test? ( dev-util/cunit )" +RDEPEND+=" + python? ( + ${PYTHON_DEPS} + $(python_gen_any_dep 'dev-python/pandas[${PYTHON_USEDEP}]') + ) + gnuplot? ( sci-visualization/gnuplot )" + +S="${WORKDIR}/${MY_P}" + +PATCHES=( + "${FILESDIR}"/fio-2.2.13-libmtd.patch +) + +python_check_deps() { + has_version "dev-python/pandas[${PYTHON_USEDEP}]" +} + +src_prepare() { + default + + sed -i '/^DEBUGFLAGS/s: -D_FORTIFY_SOURCE=2::g' Makefile || die + + # Many checks don't have configure flags. + sed -i \ + -e "s:\:$(tc-getPKG_CONFIG):" \ + -e '/if compile_prog "" "-lzbc" "libzbc" *; *then/ '"s::if $(usex zbc true false) ; then:" \ + -e '/if compile_prog "" "-lz" "zlib" *; *then/ '"s::if $(usex zlib true false) ; then:" \ + -e '/if compile_prog "" "-laio" "libaio" *; *then/'"s::if $(usex aio true false) ; then:" \ + -e '/if compile_prog "" "-lcunit" "CUnit" *; *then/'"s::if $(usex test true false) ; then:" \ + configure || die +} + +src_configure() { + chmod g-w "${T}" + # not a real configure script + # TODO: cuda + # TODO: libnbd - not packaged in Gentoo + # TODO: pmem - not packaged in Gentoo + # libnfs option does not work as expected: + # $(usex nfs '' '--disable-libnfs') \ + set -- \ + ./configu
[gentoo-commits] data/glep:master commit in: /
commit: 8e672d599f941ccb56afbd06f011b2142d0a01c7 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Apr 15 04:27:18 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Apr 15 04:27:18 2022 + URL:https://gitweb.gentoo.org/data/glep.git/commit/?id=8e672d59 glep-0057: update bibiographic data Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://bugs.gentoo.org/699934 glep-0057.rst | 41 + 1 file changed, 41 insertions(+) diff --git a/glep-0057.rst b/glep-0057.rst index c4114e2..793d2d0 100644 --- a/glep-0057.rst +++ b/glep-0057.rst @@ -213,26 +213,51 @@ https://archives.gentoo.org/gentoo-dev/message/7062d6765b35406b4b8ed6b7c6e8fc28 2003-04, gentoo-security mailing list, "The state of ebuild signing in portage" - Joshua Brindle (method), the first suggestion of signed Manifests, but also an unusual key-trust model: +Message-ID unknown https://marc.info/?l=gentoo-security=105073449619892=2 2003-04, gentoo-core mailing list, "New Digests and Signing -- Attempted Explanation" +:: +Date: Wed, 2 Apr 2003 23:39:05 -0600 +From: Nick Jones +Message-ID: <20030402233905.a18...@twobit.net> 2003-06, gentoo-core mailing list, "A quick guide to GPG and key signing." - This overview was one of the first to help developers see how to use their devs, and was mainly intended for keysigning meetups. +:: +Date: Mon, 30 Jun 2003 14:32:09 +1000 (EST) +From: Troy Dack +Message-ID: <33220.203.10.231.229.1056947529.squir...@tkdack.bpa.nu> 2003-08-09, gentoo-core mailing list, "Ebuild signing" - status query, with an not very positive response, delayed by Nick Jones (carpaski) getting rooted and a safe cleanup taking a long time to affect. +:: +Date: 06 Aug 2003 15:36:34 -0500 +From: Chris PeBenito +Message-Id: <1060202193.1532.42.ca...@chris.pebenito.net> 2003-12-02, gentoo-core mailing list, "Report: rsync1.it.gentoo.org compromised" +:: +Date: Tue, 2 Dec 2003 20:25:57 +0100 +From: Andrea Barisani +Message-ID: <20031202192557.ga11...@sole.infis.univ.trieste.it> 2003-12-03, gentoo-core mailing list, "Signing of ebuilds" +:: +Date: Wed, 3 Dec 2003 11:15:09 +0100 +From: Hanno Böck +Message-Id: <20031203111509.6b2e414b.ha...@gentoo.org> 2003-12-07, gentoo-core mailing list, "gpg signing of Manifests", thread includes the first GnuPG signing prototype code, by Robin H. Johnson (robbat2). Andrew Cowie (rac) also produces a proof-of-concept around this time. +:: +Date: Sun, 7 Dec 2003 21:01:03 + +From: Douglas Russell +Message-Id: <200312072101.08245.pu...@gentoo.org> 2004-03-23, gentoo-dev mailing list, "2004.1 will not include a secure portage" - Kurt Lieber (klieber). Signing is nowhere near ready for @@ -260,6 +285,10 @@ portage signing". Thierry Carrez (koon) suggests that more go into tree-signing work. Problems at the time later in the thread show that the upstream gpg-agent is not ready, amongst other minor implementation issues. +:: +Date: Mon, 17 Jan 2005 11:04:50 +0100 +From: Thierry Carrez +Message-ID: <41eb8dc2.6050...@gentoo.org> 2005-02-20, gentoo-dev mailing list, "post-LWE 2005" - Brian Harring (ferringb). A discussion on the ongoing lack of signing, and that @@ -272,12 +301,20 @@ https://marc.info/?l=gentoo-dev=110893886214157=2 Informal statistics show that 26% of packages in the tree include a signed Manifest. Questions are raised regarding key types, and key policies. +:: +Date: Tue, 8 Mar 2005 12:21:55 +0100 +From: Torsten Veller +Message-ID: <20050308113947.ga4dd7c...@veller.net> 2005-11-16, gentoo-core mailing list, "Gentoo key signing practices and official Gentoo keyring". A discussion of key handling and other outstanding issues, also mentioning partial Manifests, as well as a comparision between the signing procedures used in Slackware, Debian and RPM-based distros. +:: +Date: Wed, 16 Nov 2005 12:29:46 -0800 +From: "Robin H. Johnson" +Message-ID: <20051116202946.ga9...@curie-int.vc.shawcable.net> 2005-11-19, gentoo-portage-dev mailing list, "Manifest signing" - Robin H. Johnson (robbat2) follows up the previous -core posting, discussion @@ -313,6 +350,10 @@ https://archives.gentoo.org/gentoo-dev/message/b25efdb57f973e1f53b38eadc55de1ee 2007-11-30, portage-dev alias, "Manifest2 and Tree-signing" - Robin H. Johnson (robbat2). First review thread for these GLEPs, many suggestions from Marius Mauch (genone). +:: +Date: Fri, 30 Nov 2007 22:13:43 -0800 +From: "Robin H. Johnson" +Message-ID: <20071201061343.gg14...@curie-int.orbis-terrarum.net> 2008-04-03, gentoo-dev mailing list, "Re: Monthly Gentoo Council Reminder for April" - Ciaran McCreesh (ciaranm). A thread in which
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: 4332d6e6b5ac544c231e09a316e0ff1679d9cff5 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Apr 10 15:44:31 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Apr 10 15:46:17 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=4332d6e6 keyrings-recv-keys.gentoo.org.bash: cleanup gpg agent Signed-off-by: Robin H. Johnson gentoo.org> keyrings.inc.bash | 2 ++ 1 file changed, 2 insertions(+) diff --git a/keyrings.inc.bash b/keyrings.inc.bash index b6ea0be..661dd36 100644 --- a/keyrings.inc.bash +++ b/keyrings.inc.bash @@ -79,6 +79,8 @@ push_keys() { export GPG_TMPDIR='' clean_tmp() { + # Ensure any agent is closed down + gpgconf --kill gpg-agent [ -n "$GPG_TMPDIR" ] && [ -d "$GPG_TMPDIR" ] && rm -rf "$GPG_TMPDIR" } setup_tmp() {
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: 0db8cdfb85d8449cf38e3172c235e743bbc0614a Author: Robin H. Johnson gentoo org> AuthorDate: Sun Apr 10 15:44:16 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Apr 10 15:46:17 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=0db8cdfb keyrings-recv-keys.gentoo.org.bash: drop duplicate export_ldap_data_to_env content Signed-off-by: Robin H. Johnson gentoo.org> keyrings-recv-keys.gentoo.org.bash | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/keyrings-recv-keys.gentoo.org.bash b/keyrings-recv-keys.gentoo.org.bash index 640063e..7cc1b62 100755 --- a/keyrings-recv-keys.gentoo.org.bash +++ b/keyrings-recv-keys.gentoo.org.bash @@ -7,7 +7,9 @@ DEBUG=${DEBUG:=0} source "${BASEDIR}"/keyrings.inc.bash set -e -export_ldap_data_to_env + +# export_ldap_data_to_env +# TODO: for unclear reason this does not populate correctly inside a function export -a COMMITTING_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${COMMIT_RULE}") ) export -a INFRA_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${INFRA_RULE}") ) export -a NONCOMMITTING_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${NONCOMMIT_RULE}") )
Re: [gentoo-dev] proposal: use only one hash function in manifest files
On Wed, Apr 06, 2022 at 07:06:30PM +0200, Jason A. Donenfeld wrote: > No, you're still missing the point. > > If SHA-512 breaks, the security of the system fails, regardless of > what change we make. This is because GnuPG uses SHA-512 for its > signatures. Question directly for you Jason, because you make a professional study of this: does the type of breakage/successful attack against against SHA-512 matter? e.g. is it possible that some type of attack would only work against the Manifest entry, but NOT against the GPG signature's embedded SHA-512 (or the opposite). The best hypothetical idea I had was that there exists some large special input that lets an attacker reset the output to an arbitrary hash after their malicious payload: but it wouldn't fit in the GPG signature space. > > So I'll spell out the different possibilities: > 1) GPG uses SHA-512. Manifest uses SHA-512 and BLAKE2b. score -1 + 0 = -1 > 2) GPG uses SHA-512. Manifest uses SHA-512. score -1 + 0 = -1 > 3) GPG uses SHA-512. Manifest uses BLAKE2b. score -1 + -1 = -2 > See how from a security perspective, (2) is not worse than (1), but > (3) is worse than both (1) and (2)? Yes, (2) is not worse than (1) for the overall security perspective. That leaves the discussion does (1) have other benefits / value propositions that make it worth less than (2). (see my other thread) -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
Re: [gentoo-dev] proposal: use only one hash function in manifest files
On Wed, Apr 06, 2022 at 02:15:02AM +0200, Jason A. Donenfeld wrote: > 2) Comparability: other distros use SHA2-512, as well as various > upstreams, which means we can compare our hashes to theirs easily. Can we expand on this specific thread for a moment? I was the author of GLEP59 about changing the Manifest hashes, and I noted at the time, with references, that the effective strength of a set of hashes is only that of the strongest hash. One of my regrets from GLEP59 is that it's made it harder for use cases outside of the normal user distfile workflow. The use case that impacted me the most was being able to compare our distfiles were over time vs external sources, esp. if the file goes missing or was fetch-restricted and we can't produce a new hash of it. Maybe upstream only ever published SHA1/SHA256, and we only ever calculated SHA512/BLAKE2b on the file. Since we never had hashes from both sides at the same time, we cannot prove it was the same file. We need to be able to ship one or more hashes to users, for the specific use case of validating the distfiles they download. As a developer, I'd like to be able to track the other hashes for a file, without forcing ourselves to retain the file. This might be to compare with upstream published hashes, or to compare with other distros. In fact it would be really nice to have a semi-automated pipeline to plug in signed upstream hashes to our Manifests, and make it possibly to prove our new SHA512/BLAKE2B hash was taken over the correct input in the first place, and there wasn't any subtle supply-chain attack early in the packaging process. Where would those hashes go? They don't need to be in the Manifest, or at the very least they don't need to be distributed via rsync to users (it only costs a small amount of bytes to do so). Where else could they go? - Commit messages could work. - Git notes to a lesser degree. - alternate repos? > A reason why some people might prefer BLAKE2b over SHA2-512 is a > performance improvement. However, seeing as right now we're opening > the file, reading it, computing BLAKE2b, closing the file, opening the > file again, reading it again, computing SHA2-512, closing the file, I > don't think performance is actually something people care about. Seen > differently, removing either one of them will already give us a > performance "boost" or sorts. Or just only verifying the "strongest" hash gives you that boost. I do want to check into the code that you pointed out, because I'm really sure much older versions of Portage did the CORRECT thing of only reading the file in a single pass. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-commits] repo/gentoo:master commit in: sys-block/fio/
commit: e5153513eee90c6cffb5218a0bbf9da06f1682f8 Author: Denis Pronin yandex ru> AuthorDate: Sat Mar 19 17:17:40 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon Mar 28 17:46:04 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e5153513 sys-block/fio: support python-3.10 enabled opportunity for a user to use python-3.10 for sys-block/fio Signed-off-by: Denis Pronin yandex.ru> (cherry picked from commit 495b5b93572b32ebafab7fb7ef4f1fbeddc00f08) Signed-off-by: Robin H. Johnson gentoo.org> (subject edited) sys-block/fio/fio-3.27-r2.ebuild | 2 +- sys-block/fio/fio-3.27-r3.ebuild | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/sys-block/fio/fio-3.27-r2.ebuild b/sys-block/fio/fio-3.27-r2.ebuild index afa61e798464..95b48167827b 100644 --- a/sys-block/fio/fio-3.27-r2.ebuild +++ b/sys-block/fio/fio-3.27-r2.ebuild @@ -3,7 +3,7 @@ EAPI=7 -PYTHON_COMPAT=( python3_{7,8,9} ) +PYTHON_COMPAT=( python3_{7,8,9,10} ) inherit python-r1 toolchain-funcs diff --git a/sys-block/fio/fio-3.27-r3.ebuild b/sys-block/fio/fio-3.27-r3.ebuild index ee7e62db9305..55eb95c00e10 100644 --- a/sys-block/fio/fio-3.27-r3.ebuild +++ b/sys-block/fio/fio-3.27-r3.ebuild @@ -3,7 +3,7 @@ EAPI=7 -PYTHON_COMPAT=( python3_{7,8,9} ) +PYTHON_COMPAT=( python3_{7,8,9,10} ) inherit python-r1 toolchain-funcs
[gentoo-commits] repo/gentoo:master commit in: app-misc/solaar/
commit: bda79c5027aaa5deb552d57a75155e633b0e3298 Author: Robin H. Johnson gentoo org> AuthorDate: Mon Mar 21 16:53:28 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon Mar 21 16:59:11 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bda79c50 app-misc/solaar: bump Signed-off-by: Robin H. Johnson gentoo.org> app-misc/solaar/Manifest| 1 + app-misc/solaar/solaar-1.1.2_rc2.ebuild | 69 + 2 files changed, 70 insertions(+) diff --git a/app-misc/solaar/Manifest b/app-misc/solaar/Manifest index c5d227d962a9..f26480b8aa50 100644 --- a/app-misc/solaar/Manifest +++ b/app-misc/solaar/Manifest @@ -1,3 +1,4 @@ DIST solaar-1.0.5.tar.gz 920452 BLAKE2B 44aa0f9abd63629a5a4e737c14e468922c4aa501341717d595f045c5f40369ade6ff296120931557f1e8f04b99aa4f690454aa8f6bceaa526f370f93b312f6d6 SHA512 28603c30f0e9f2f0fe2549722062548031c69a0d9c98f732fdd8fbb51ed1d55ef033262113b2f88044a68f8b26c8c51fb0b45d4f4689fb3619e143d159618c47 DIST solaar-1.0.7.tar.gz 1265664 BLAKE2B 6bb221d603dc74bf21ac44ca6611d817889285c8711c565b7393b875a934bf9125fc366569c1f677d657463484f2ec5fa077703f311ef2aec74e9f6813a5f1d7 SHA512 24b6b861f90d5747f150afb38b32041885b61cbf7df7794d780b311aef50d334347d5c5c722a0a7d5de3f91b96228e90e2a61dc108054452f46750a04340df83 DIST solaar-1.1.1.tar.gz 1418025 BLAKE2B c6fd053002727a372bf9672fc22c0acc123f814003c14172f7d13e59b82ab42ecee9b71a09289b2d234874850e0921debaa069506a07d8957f52a2e9953a47f4 SHA512 c4da0c5521724c00afbc54ee9d10a4709246bb6f57635637b77e5944293b285a055b7df623e7e2a810a0764021813929e0f4fa7f21d4afc39abd516416a2bf25 +DIST solaar-1.1.2rc2.tar.gz 1462081 BLAKE2B b5bcf37f75631d39ac726b564bfd7f329f80e9931461fceb5ce7442113df50db82679dabfd08150a87ebe9a9de68aeb38a005e450c3e025c57e5f1219312 SHA512 65320d7193124d1444ecddf5a162e925f373c7c06d0e582af29b1c9d82ea16a32a69accd53f53568b228474691eacd5c0f16bce1bccef1e9a1846151e86dc203 diff --git a/app-misc/solaar/solaar-1.1.2_rc2.ebuild b/app-misc/solaar/solaar-1.1.2_rc2.ebuild new file mode 100644 index ..ed9a688180e5 --- /dev/null +++ b/app-misc/solaar/solaar-1.1.2_rc2.ebuild @@ -0,0 +1,69 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DISTUTILS_SINGLE_IMPL=1 +PYTHON_COMPAT=( python3_{7..9} ) + +inherit linux-info udev xdg distutils-r1 + +DESCRIPTION="Linux Device Manager for Logitech Unifying Receivers and Paired Devices" +HOMEPAGE="https://pwr-solaar.github.io/Solaar/; +if [[ ${PV} =~ * ]]; then + inherit git-r3 + EGIT_REPO_URI="https://github.com/pwr-Solaar/Solaar; +else + SRC_URI="https://github.com/pwr-Solaar/Solaar/archive/${PV/_rc/rc}.tar.gz -> ${P/_rc/rc}.tar.gz" + KEYWORDS="~amd64 ~arm ~x86" + S="${WORKDIR}"/Solaar-${PV/_rc/rc} +fi + +LICENSE="GPL-2" +SLOT="0" +IUSE="doc appindicator libnotify" + +RDEPEND=" + acct-group/plugdev + $(python_gen_cond_dep ' + dev-python/psutil[${PYTHON_USEDEP}] + dev-python/pygobject:3[${PYTHON_USEDEP}] + dev-python/python-xlib[${PYTHON_USEDEP}] + >=dev-python/pyudev-0.13[${PYTHON_USEDEP}] + dev-python/pyyaml[${PYTHON_USEDEP}] + + ') + x11-libs/gtk+:3[introspection] + appindicator? ( dev-libs/libappindicator:3[introspection] ) + libnotify? ( x11-libs/libnotify[introspection] )" +# libappindicator & libnotify are entirely optional and detected at runtime + +CONFIG_CHECK="~HID_LOGITECH_DJ ~HIDRAW" + +python_prepare_all() { + # don't autostart (bug #494608) + sed -i \ + -e '/yield autostart_path/d' \ + setup.py || die + + sed -i -r \ + -e '/yield.*udev.*rules.d/{s,/etc,/lib,g}' \ + setup.py || die + + # grant plugdev group rw access + sed -i 's/#MODE=/MODE=/' rules.d/42-logitech-unify-permissions.rules || die + + distutils-r1_python_prepare_all +} + +python_install_all() { + distutils-r1_python_install_all + + dodoc docs/devices.md ChangeLog.md + if use doc; then + dodoc -r docs/* + else + newdoc docs/index.md README.md + fi + udev_dorules "${S}"/rules.d/42-logitech-unify-permissions.rules +}
[gentoo-commits] repo/gentoo:master commit in: app-misc/solaar/
commit: 3a11f3a90ba7c1a840d6967a31906f3b2219f297 Author: Robin H. Johnson gentoo org> AuthorDate: Mon Mar 21 16:58:13 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon Mar 21 16:59:12 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3a11f3a9 app-misc/solaar: stable on amd64 Signed-off-by: Robin H. Johnson gentoo.org> app-misc/solaar/solaar-1.1.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-misc/solaar/solaar-1.1.1.ebuild b/app-misc/solaar/solaar-1.1.1.ebuild index ed9a688180e5..cbc2547de833 100644 --- a/app-misc/solaar/solaar-1.1.1.ebuild +++ b/app-misc/solaar/solaar-1.1.1.ebuild @@ -15,7 +15,7 @@ if [[ ${PV} =~ * ]]; then EGIT_REPO_URI="https://github.com/pwr-Solaar/Solaar; else SRC_URI="https://github.com/pwr-Solaar/Solaar/archive/${PV/_rc/rc}.tar.gz -> ${P/_rc/rc}.tar.gz" - KEYWORDS="~amd64 ~arm ~x86" + KEYWORDS="amd64 ~arm ~x86" S="${WORKDIR}"/Solaar-${PV/_rc/rc} fi
[gentoo-commits] repo/gentoo:master commit in: app-misc/solaar/
commit: 6a91b08aeb7c5a0d642e72eb512dd8086f08f049 Author: Robin H. Johnson gentoo org> AuthorDate: Mon Mar 21 16:57:36 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon Mar 21 16:59:11 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6a91b08a app-misc/solaar: fix changelog symlink Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://bugs.gentoo.org/830984 app-misc/solaar/solaar-1.1.1.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-misc/solaar/solaar-1.1.1.ebuild b/app-misc/solaar/solaar-1.1.1.ebuild index cad0500253bc..ed9a688180e5 100644 --- a/app-misc/solaar/solaar-1.1.1.ebuild +++ b/app-misc/solaar/solaar-1.1.1.ebuild @@ -59,7 +59,7 @@ python_prepare_all() { python_install_all() { distutils-r1_python_install_all - dodoc docs/devices.md + dodoc docs/devices.md ChangeLog.md if use doc; then dodoc -r docs/* else
[gentoo-commits] repo/gentoo:master commit in: net-nds/openldap/
commit: 86964447d6b2e6798be6874ae677cebfae1ab069 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Mar 20 22:51:44 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Mar 20 23:08:52 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=86964447 net-nds: avoid automagic autoca Signed-off-by: Robin H. Johnson gentoo.org> net-nds/openldap/openldap-2.6.1.ebuild | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/net-nds/openldap/openldap-2.6.1.ebuild b/net-nds/openldap/openldap-2.6.1.ebuild index 0edc6a14276a..62f91410a233 100644 --- a/net-nds/openldap/openldap-2.6.1.ebuild +++ b/net-nds/openldap/openldap-2.6.1.ebuild @@ -23,7 +23,7 @@ SLOT="0" KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~x86-solaris" IUSE_DAEMON="argon2 +cleartext crypt experimental minimal samba tcpd" -IUSE_OVERLAY="overlays perl" +IUSE_OVERLAY="overlays perl autoca" IUSE_OPTIONAL="debug gnutls iodbc ipv6 odbc sasl ssl selinux static-libs +syslog test" IUSE_CONTRIB="kerberos kinit pbkdf2 sha2 smbkrb5passwd" IUSE_CONTRIB="${IUSE_CONTRIB} cxx" @@ -34,6 +34,7 @@ RESTRICT="!test? ( test )" REQUIRED_USE="cxx? ( sasl ) pbkdf2? ( ssl ) test? ( cleartext sasl ) + autoca? ( !gnutls ) ?? ( test minimal )" S=${WORKDIR}/${PN}-OPENLDAP_REL_ENG_${MY_PV} @@ -416,6 +417,7 @@ multilib_src_configure() { fi use overlays && myconf+=( --enable-overlays=mod ) + use autoca && myconf+=( --enable-autoca=mod ) || myconf+=( --enable-autoca=no ) # compile-in the syncprov myconf+=( --enable-syncprov=yes ) @@ -435,6 +437,7 @@ multilib_src_configure() { --disable-slapd --disable-mdb --disable-overlays + --disable-autoca --disable-syslog --without-systemd )
[gentoo-commits] repo/gentoo:master commit in: net-nds/openldap/
commit: 4c4745b05a90742b564fef0714e66aec98e415f2 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Mar 20 23:07:56 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Mar 20 23:08:52 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4c4745b0 net-nds/openldap: make src_test run parallel tests Signed-off-by: Robin H. Johnson gentoo.org> net-nds/openldap/openldap-2.6.1.ebuild | 10 +- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/net-nds/openldap/openldap-2.6.1.ebuild b/net-nds/openldap/openldap-2.6.1.ebuild index 62f91410a233..7af43ba480d1 100644 --- a/net-nds/openldap/openldap-2.6.1.ebuild +++ b/net-nds/openldap/openldap-2.6.1.ebuild @@ -608,7 +608,15 @@ multilib_src_compile() { multilib_src_test() { if multilib_is_native_abi; then - emake test + cd "tests" + pwd + # emake test => runs only lloadd & mdb, in serial; skips ldif,sql,wt,regression + # emake partests => runs ALL of the tests in parallel + # wt/WiredTiger is not supported in Gentoo + TESTS=( plloadd pmdb ) + #TESTS+=( pldif ) # not done by default, so also exclude here + #use odbc && TESTS+=( psql ) # not done by default, so also exclude here + emake "${TESTS[@]}" fi }
[gentoo-commits] repo/gentoo:master commit in: profiles/
commit: 694532598329dcda97c6fd02f34f5964ce64a469 Author: Robin H. Johnson gentoo org> AuthorDate: Sat Mar 19 18:08:37 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Mar 19 18:08:37 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=69453259 package.mask: unmask megarc Signed-off-by: Robin H. Johnson gentoo.org> profiles/package.mask | 6 -- 1 file changed, 6 deletions(-) diff --git a/profiles/package.mask b/profiles/package.mask index fcb60b49527e..d74fe01aff32 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -33,12 +33,6 @@ #--- END OF EXAMPLES --- -# David Seifert (2022-03-19) -# Unmaintained, no revdeps in tree, EAPI 5, upstream tarball disappeared -# and ebuild is mirror-restricted. -# Bug #672324, #689770, #835360, removal on 2022-04-18. -sys-block/megarc - # David Seifert (2022-03-19) # Unmaintained, no revdeps in tree, not even on latest version, EAPI 5, # typical 'webapp' smell, last upstream release more than 9 years ago.
[gentoo-commits] repo/gentoo:master commit in: sys-block/megarc/
commit: 194ddc409b5b349e81d0d8f72d41f608910f57d5 Author: Robin H. Johnson gentoo org> AuthorDate: Sat Mar 19 18:07:16 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Mar 19 18:07:51 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=194ddc40 sys-block/megarc: bump EAPI to show it works, avoid upstream URL redirect Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://bugs.gentoo.org/689770 sys-block/megarc/{megarc-1.11-r2.ebuild => megarc-1.11-r3.ebuild} | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/sys-block/megarc/megarc-1.11-r2.ebuild b/sys-block/megarc/megarc-1.11-r3.ebuild similarity index 82% rename from sys-block/megarc/megarc-1.11-r2.ebuild rename to sys-block/megarc/megarc-1.11-r3.ebuild index 86004d9903f9..096122d4a4f7 100644 --- a/sys-block/megarc/megarc-1.11-r2.ebuild +++ b/sys-block/megarc/megarc-1.11-r3.ebuild @@ -1,7 +1,7 @@ # Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 -EAPI="5" +EAPI="8" inherit multilib @@ -15,10 +15,11 @@ DESCRIPTION="LSI Logic MegaRAID Text User Interface management tool" # two or more download pages, and while one of the pages has a generic # click-through download form, the file-specific download page only requires # click-through on some items. See also sys-block/lsiutil, sys-block/megarc +# 2022/03/19: robbat2 confirms the SRC_URI links work AND the files have not changed upstream HOMEPAGE="http://www.avagotech.com/cs/Satellite?q=megacli=AVG2%2FsearchLayout=avg_en=megacli=megarc=new=Search; SRC_URI=" - http://www.avagotech.com/docs-and-downloads/legacy-raid-controllers/legacy-raid-controllers-common-files/${MY_P}.zip - http://www.avagotech.com/docs-and-downloads/raid-controllers/raid-controllers-common-files/README_FOR_${MY_P}-zip.txt; + https://docs.broadcom.com/docs-and-downloads/raid-controllers/raid-controllers-common-files/${MY_P}.zip + https://docs.broadcom.com/docs-and-downloads/raid-controllers/raid-controllers-common-files/README_FOR_${MY_P}-zip.txt; LICENSE="LSI" SLOT="0"
[gentoo-commits] repo/gentoo:master commit in: net-nds/openldap/, net-nds/openldap/files/
commit: d12a02243969b7c715e9b639345ec8aacd925a28 Author: Dennis Lamm gentoo org> AuthorDate: Sat Feb 5 23:24:54 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sat Mar 19 18:07:51 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d12a0224 net-nds/openldap 2.6.1 version bump Closes: https://bugs.gentoo.org/799092 Bug: https://bugs.gentoo.org/624178 Bug: https://bugs.gentoo.org/815844 Bug: https://bugs.gentoo.org/609486 Signed-off-by: Dennis Lamm gentoo.org> (cherry picked from commit c2e92fe1e144e8563f753a76d9d0cba923bb8878) Signed-off-by: Robin H. Johnson gentoo.org> net-nds/openldap/Manifest | 1 + net-nds/openldap/files/openldap-2.6.1-cloak.patch | 25 + .../files/openldap-2.6.1-fix-missing-mapping.patch | 21 + net-nds/openldap/files/openldap-2.6.1-flags.patch | 416 +++ .../openldap/files/openldap-2.6.1-system-mdb.patch | 148 net-nds/openldap/files/slapd-2.6.1.service | 12 + net-nds/openldap/files/slapd-confd-2.6.1 | 26 + net-nds/openldap/metadata.xml | 4 + net-nds/openldap/openldap-2.6.1.ebuild | 796 + 9 files changed, 1449 insertions(+) diff --git a/net-nds/openldap/Manifest b/net-nds/openldap/Manifest index 94ca3b8be20f..c0b19b7c9812 100644 --- a/net-nds/openldap/Manifest +++ b/net-nds/openldap/Manifest @@ -2,4 +2,5 @@ DIST openldap-2.4.57.tgz 5883912 BLAKE2B 439605e1bebcf34968f0a552aaade1b72b7671a DIST openldap-2.4.58.tgz 5885225 BLAKE2B effb618dba03497796a497cd7f53ec52e389133769321dd242433bed5ec4b1f66cf7353f08a49d5f3465880f6bcfc9afc9c7d2a28e075b66f5fd926b02213541 SHA512 2fa2aa36117692eca44e9f162c8c796f78469e6c2aee91b06d46f2b755d416979c913a3d89bbf9db14cc84881ecffee69af75b48e1d16b7aa9d2e3873baa DIST openldap-2.4.59.tgz 5886272 BLAKE2B a2a8bed1d2af97fd41d651668152fd4740871bc5a8abf4b50390839228af82ac103346b3500ae0f8dd31b708acabb30435b90cd48dfafe510e648df5150d96b8 SHA512 233459ab446da6e107a7fc4ecd5668d6b08c11a11359ee76449550393e8f586a29b59d7ae09a050a1fca4fcf388ea61438ef60831b3ae802d92c048365ae3968 DIST openldap-2.5.4.tgz 6415235 BLAKE2B 16e466d01dc7642786bb88a101854513f1239f1e817fd05145e89deb54bc1b911a5dc5f42b132747f14bdd2a3355e7c398b8b14937e7093361f4a96bfb7e9197 SHA512 00b57c9179acf3b1bde738e91604f3b09b5f5309106362bb947154d131868f233713eaa75c9af9771bfad731902d67406e8fb429851bad227fc48054cace16a8 +DIST openldap-OPENLDAP_REL_ENG_2_6_1.tar.gz 6211863 BLAKE2B 81f4591db483a214351c2e02631fef2875e17e0890fc621182d2ed61d927c3c029a4f290ee6c0788952495d6f7a76ed15e62557b8d8f2e241d867e19fdf223b7 SHA512 ca61c1dccf3194d8d149ca0c45a4834d6fadf67a3676cf348f5f62ab92c94bc7501216d7da681c3a6f87f646a18d0f3d116c3d3a24d2e5cbebc6c695c986e517 DIST rfc2307bis.schema-20140524 12262 BLAKE2B 98031f49e9bde1e4821e637af3382364d8344ed7017649686a088070d96a632dffa6c661552352656b1b159c0fd962965580069a64c7f3d5bb6a3ed75f60fd99 SHA512 83b89a1deeefc8566b97e7e865b9b6d04541099cbdf719e24538a7d27d61b6209e87ab9003a9f140bd9afd018ec569e71721e3a24090e1902c8b6659d2ba103e diff --git a/net-nds/openldap/files/openldap-2.6.1-cloak.patch b/net-nds/openldap/files/openldap-2.6.1-cloak.patch new file mode 100644 index ..8fab052d4db1 --- /dev/null +++ b/net-nds/openldap/files/openldap-2.6.1-cloak.patch @@ -0,0 +1,25 @@ +diff --git a/contrib/slapd-modules/cloak/cloak.c b/contrib/slapd-modules/cloak/cloak.c +index ced7a8024..dffce3614 100644 +--- a/contrib/slapd-modules/cloak/cloak.c b/contrib/slapd-modules/cloak/cloak.c +@@ -29,6 +29,7 @@ + #include "ac/socket.h" + + #include "lutil.h" ++#include "attr.h" + #include "slap.h" + #include "slap-config.h" + +diff --git a/servers/slapd/attr.h b/servers/slapd/attr.h +index e69de29bb..73949f60c 100644 +--- a/servers/slapd/attr.h b/servers/slapd/attr.h +@@ -0,0 +1,8 @@ ++#ifndef OPENLDAP_SERVERS_SLAPD_ATTR_H_ ++#define OPENLDAP_SERVERS_SLAPD_ATTR_H_ ++ ++#endif //OPENLDAP_SERVERS_SLAPD_ATTR_H_ ++ ++#include "slap.h" ++ ++void attr_clean( Attribute *a ); diff --git a/net-nds/openldap/files/openldap-2.6.1-fix-missing-mapping.patch b/net-nds/openldap/files/openldap-2.6.1-fix-missing-mapping.patch new file mode 100644 index ..be7fbf3e528d --- /dev/null +++ b/net-nds/openldap/files/openldap-2.6.1-fix-missing-mapping.patch @@ -0,0 +1,21 @@ +From 59e013602d7b1aa0d7da79d65367c9ec391b96f8 Mon Sep 17 00:00:00 2001 +From: Simon Pichugin +Date: Wed, 3 Nov 2021 19:03:40 -0700 +Subject: [PATCH] Fix missing mapping + +--- + libraries/liblber/lber.map | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/libraries/liblber/lber.map b/libraries/liblber/lber.map +index 9a4094b0f..083cd1f32 100644 +--- a/libraries/liblber/lber.map b/libraries/liblber/lber.map +@@ -121,6 +121,7 @@ OPENLDAP_2.200 + ber_sockbuf_io_fd; + ber_sockbuf_io_readahead; + ber_sockbuf_io_tcp; ++ber_sockbuf_io_udp; + ber_s
[ceph-users] Re: Local NTP servers on monitor node's.
On Wed, Mar 16, 2022 at 10:49:15AM +, Frank Schilder wrote: > Returning to this thread, I finally managed to capture the problem I'm > facing in a log. The time service to the outside world is blocked by > our organisation's firewall and I'm restricted to use internal time > servers. Unfortunately, these seem to be periodically unstable. I > caught a time-excursion in the log extracts shown below. My problem > now is that such a transient causes time-havoc on the cluster, because > the servers start to adjust in all directions. ... > Is there a config to tell the head node to take it easy with jumps in > the external clock source? This is the "step" config knobs. > Here the observation. It is annotated and filtered to contain only > lines where the offset changes and I reduced it to show the incident > with few lines, all as seen from the head node: ... > I know that the providers of the time service should get their act > together, but I doubt that will happen and I would like to harden my > time sync config to survive such events without chaos. If anyone can > point me to a suitable config, please do. I need a way to smoothen out > steep upstream oscillations, like a low-pass filter would do. If you did filter out the sudden jumps, you'd end up with your mons all (rightly) distrusting the bad time service, and then they could drift on their own. There are better timenuts than I on the list, but I think the following MIGHT be a reasonable course of action. 1. Disable time stepping: "tinker stepfwd 0 stepback 0" (the exact syntax might vary depending on NTP version) 2. Set up your mons all be NTP servers (possibly in addition to the existing head node). They should peer with each other explicitly. 3. Set up the rest of your cluster to consume from the mons ONLY. 4. Optional: if your time service providers are unreliable, investigate build/buying your own, and use it to feed time to the mons. If all the mons end up distrusting the time-service you have, they *should* retain consistent time between themselves, and thus the clients should also keep consistent time. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[gentoo-commits] repo/gentoo:master commit in: dev-perl/Test-Mock-LWP/
commit: abaab5861bc9e2abef7c393192c64ed78a43c35e Author: Robin H. Johnson gentoo org> AuthorDate: Mon Mar 14 05:03:07 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon Mar 14 05:03:15 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=abaab586 dev-perl/Test-Mock-LWP: fix version Signed-off-by: Robin H. Johnson gentoo.org> .../{Test-Mock-LWP-0.8.0.ebuild => Test-Mock-LWP-0.80.0.ebuild} | 0 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.8.0.ebuild b/dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.80.0.ebuild similarity index 100% rename from dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.8.0.ebuild rename to dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.80.0.ebuild
[gentoo-commits] repo/gentoo:master commit in: dev-perl/Search-Sitemap/
commit: bd5d18f5e1c42d279ed29fc1e56612c6d4e27f4d Author: Robin H. Johnson gentoo org> AuthorDate: Sun Mar 13 20:38:14 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Mar 13 20:38:24 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bd5d18f5 dev-perl/Search-Sitemap: new package, for use with Bugzilla Signed-off-by: Robin H. Johnson gentoo.org> dev-perl/Search-Sitemap/Manifest | 1 + .../Search-Sitemap/Search-Sitemap-2.130.0.ebuild | 32 ++ dev-perl/Search-Sitemap/metadata.xml | 15 ++ 3 files changed, 48 insertions(+) diff --git a/dev-perl/Search-Sitemap/Manifest b/dev-perl/Search-Sitemap/Manifest new file mode 100644 index ..a3844b4b7add --- /dev/null +++ b/dev-perl/Search-Sitemap/Manifest @@ -0,0 +1 @@ +DIST Search-Sitemap-2.13.tar.gz 34527 BLAKE2B db04cce9fcaf39c75cb381b909e9767f52dbc33678ce9c3d4be6bc0ae9f0c06d75238b83bf8fe4eefec37d2b66a99674523a6eed4d5e8328902f1b38bafca5ac SHA512 1698e2114abddba04c1c11e25f9fadaca835d35b09e1521f919a9cb7daa0478f4cac910f7becbb4bf9b0f80bf8dd666c909020fc9eb7ce20194e1eccf602 diff --git a/dev-perl/Search-Sitemap/Search-Sitemap-2.130.0.ebuild b/dev-perl/Search-Sitemap/Search-Sitemap-2.130.0.ebuild new file mode 100644 index ..104051cd7084 --- /dev/null +++ b/dev-perl/Search-Sitemap/Search-Sitemap-2.130.0.ebuild @@ -0,0 +1,32 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +DIST_AUTHOR=JASONK +DIST_VERSION=2.13 +inherit perl-module + +DESCRIPTION="Perl extension for managing Search Engine Sitemaps" +SLOT="0" +KEYWORDS="~amd64" + +RDEPEND=" + virtual/perl-Carp + virtual/perl-IO-Zlib + dev-perl/Module-Find + dev-perl/Class-Trigger + dev-perl/MooseX-ClassAttribute + dev-perl/MooseX-Types + dev-perl/MooseX-Types-URI + dev-perl/Moose +" +BDEPEND="${RDEPEND} + dev-perl/Module-Install + virtual/perl-ExtUtils-MakeMaker + test? ( + dev-perl/Test-Most + dev-perl/Test-Mock-LWP + dev-perl/Test-Mock-LWP-Dispatch + ) +" diff --git a/dev-perl/Search-Sitemap/metadata.xml b/dev-perl/Search-Sitemap/metadata.xml new file mode 100644 index ..96ba55d634fa --- /dev/null +++ b/dev-perl/Search-Sitemap/metadata.xml @@ -0,0 +1,15 @@ + +https://www.gentoo.org/dtd/metadata.dtd;> + + +robb...@gentoo.org + + +p...@gentoo.org +Gentoo Perl Project + + +Search-Sitemap +Search::Sitemap + +
[gentoo-commits] repo/gentoo:master commit in: dev-perl/Test-Mock-LWP/
commit: e18f6ccdfc383a6e941c8969dc96a99dfc2595ee Author: Robin H. Johnson gentoo org> AuthorDate: Sun Mar 13 20:37:47 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Mar 13 20:38:24 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e18f6ccd dev-perl/Test-Mock-LWP: new package, for testing Search-Sitemap Signed-off-by: Robin H. Johnson gentoo.org> dev-perl/Test-Mock-LWP/Manifest | 1 + dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.8.0.ebuild | 24 +++ dev-perl/Test-Mock-LWP/metadata.xml | 15 ++ 3 files changed, 40 insertions(+) diff --git a/dev-perl/Test-Mock-LWP/Manifest b/dev-perl/Test-Mock-LWP/Manifest new file mode 100644 index ..07444d98339f --- /dev/null +++ b/dev-perl/Test-Mock-LWP/Manifest @@ -0,0 +1 @@ +DIST Test-Mock-LWP-0.08.tar.gz 20176 BLAKE2B c3c566a5f4c6c86afd53311994dde7603a78e7aea141c42a523d96b1d30eeeb3967bd6c2241c6ddcbadeb0c412a6465b473050b66c807660ee8182fe2427057e SHA512 25849615a2c9890eb2c504abe9b63fd7c249f4a54ca0fdde62b99e28fd537e63f6331d9ef3871ebc20dbcbbebb7f3d210ff4053e49ebe32e349c5d561bd32772 diff --git a/dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.8.0.ebuild b/dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.8.0.ebuild new file mode 100644 index ..2f3608b34fc6 --- /dev/null +++ b/dev-perl/Test-Mock-LWP/Test-Mock-LWP-0.8.0.ebuild @@ -0,0 +1,24 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +DIST_AUTHOR=LUKEC +DIST_VERSION=0.08 +inherit perl-module + +DESCRIPTION="Mocks LWP::UserAgent" + +SLOT="0" +KEYWORDS="~amd64" + +RDEPEND=" + virtual/perl-Carp + dev-perl/Test-MockObject + virtual/perl-Test +" +BDEPEND="${RDEPEND} + >=virtual/perl-CPAN-Meta-Requirements-2.120.620 + virtual/perl-ExtUtils-MakeMaker + virtual/perl-Module-Metadata +" diff --git a/dev-perl/Test-Mock-LWP/metadata.xml b/dev-perl/Test-Mock-LWP/metadata.xml new file mode 100644 index ..21a18f4398d0 --- /dev/null +++ b/dev-perl/Test-Mock-LWP/metadata.xml @@ -0,0 +1,15 @@ + +https://www.gentoo.org/dtd/metadata.dtd;> + + +robb...@gentoo.org + + +p...@gentoo.org +Gentoo Perl Project + + +Test-Mock-LWP +Test::Mock::LWP + +
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: 105bf2773bf6c22ab6867a9069dbfa5196d8bbe6 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Mar 6 17:30:29 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Mar 6 17:30:29 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=105bf277 keyrings-recv-keys.gentoo.org.bash: remove obsolete comment Signed-off-by: Robin H. Johnson gentoo.org> keyrings-recv-keys.gentoo.org.bash | 3 --- 1 file changed, 3 deletions(-) diff --git a/keyrings-recv-keys.gentoo.org.bash b/keyrings-recv-keys.gentoo.org.bash index 5f35fcf..640063e 100755 --- a/keyrings-recv-keys.gentoo.org.bash +++ b/keyrings-recv-keys.gentoo.org.bash @@ -1,8 +1,5 @@ #!/bin/bash # Import key updates from Keyservers: keys.gentoo.org -# -# TODO: -# - Turn off export in this script BASEDIR="$(dirname "$0")" DEBUG=${DEBUG:=0}
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: db9e494bc501a30e46cfeebe5e64f8f66372d620 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Mar 6 17:27:28 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Mar 6 17:27:28 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=db9e494b keyrings: increase grab timeout Signed-off-by: Robin H. Johnson gentoo.org> keyrings.inc.bash | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/keyrings.inc.bash b/keyrings.inc.bash index 7989d79..b6ea0be 100644 --- a/keyrings.inc.bash +++ b/keyrings.inc.bash @@ -35,7 +35,7 @@ grab_keys() { local missing=() local remaining=( "${@}" ) - KEYSERVER_TIMEOUT=${KEYSERVER_TIMEOUT:=1m} + KEYSERVER_TIMEOUT=${KEYSERVER_TIMEOUT:=2m} # quickly handle empty keyservers set [ "${#KEYSERVERS[@]}" -eq 0 ] && return while :; do
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: d915befcd50907cad1f494e89674346f0f0319c8 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Mar 6 17:30:16 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Mar 6 17:30:16 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=d915befc keyrings-recv-keys.gentoo.org.bash: add optional debug Signed-off-by: Robin H. Johnson gentoo.org> keyrings-recv-keys.gentoo.org.bash | 5 + 1 file changed, 5 insertions(+) diff --git a/keyrings-recv-keys.gentoo.org.bash b/keyrings-recv-keys.gentoo.org.bash index a0ec2f9..5f35fcf 100755 --- a/keyrings-recv-keys.gentoo.org.bash +++ b/keyrings-recv-keys.gentoo.org.bash @@ -5,6 +5,7 @@ # - Turn off export in this script BASEDIR="$(dirname "$0")" +DEBUG=${DEBUG:=0} # shellcheck source=./keyrings.inc.bash source "${BASEDIR}"/keyrings.inc.bash @@ -19,9 +20,13 @@ export -a SYSTEM_KEYS=( $(grab_ldap_fingerprints -b "${SYSTEM_BASE}" "${NONCOMMI export KEYSERVERS=( "${KS_GENTOO}" ) export KEYSERVER_TIMEOUT=5m +[[ $DEBUG -ne 0 ]] && echo SYSTEM_KEYS grab_keys "${SYSTEM_KEYS[@]}" +[[ $DEBUG -ne 0 ]] && echo COMITTING_DEVS grab_keys "${COMMITTING_DEVS[@]}" +[[ $DEBUG -ne 0 ]] && echo NONCOMITTING_DEVS grab_keys "${NONCOMMITTING_DEVS[@]}" +[[ $DEBUG -ne 0 ]] && echo INFRA_DEVS grab_keys "${INFRA_DEVS[@]}" # -- not all are on keyservers # -- and are unlikely to turn up now
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: f6d85383d48fd3eb9211dfcc1cacde54206fcac9 Author: Robin H. Johnson gentoo org> AuthorDate: Thu Mar 3 05:58:00 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Thu Mar 3 05:58:00 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=f6d85383 keyrings: more infra devs setup Signed-off-by: Robin H. Johnson gentoo.org> keyrings-recv-keys.gentoo.org.bash | 2 ++ keyrings-recv-sks.bash | 1 + 2 files changed, 3 insertions(+) diff --git a/keyrings-recv-keys.gentoo.org.bash b/keyrings-recv-keys.gentoo.org.bash index 6f3ac0e..a0ec2f9 100755 --- a/keyrings-recv-keys.gentoo.org.bash +++ b/keyrings-recv-keys.gentoo.org.bash @@ -11,6 +11,7 @@ source "${BASEDIR}"/keyrings.inc.bash set -e export_ldap_data_to_env export -a COMMITTING_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${COMMIT_RULE}") ) +export -a INFRA_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${INFRA_RULE}") ) export -a NONCOMMITTING_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${NONCOMMIT_RULE}") ) export -a RETIRED_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${RETIRED_RULE}") ) export -a SYSTEM_KEYS=( $(grab_ldap_fingerprints -b "${SYSTEM_BASE}" "${NONCOMMIT_RULE}") ) @@ -21,6 +22,7 @@ export KEYSERVER_TIMEOUT=5m grab_keys "${SYSTEM_KEYS[@]}" grab_keys "${COMMITTING_DEVS[@]}" grab_keys "${NONCOMMITTING_DEVS[@]}" +grab_keys "${INFRA_DEVS[@]}" # -- not all are on keyservers # -- and are unlikely to turn up now # -- this needs to fetch from some archive instead diff --git a/keyrings-recv-sks.bash b/keyrings-recv-sks.bash index 5ab91c3..81ba0a2 100755 --- a/keyrings-recv-sks.bash +++ b/keyrings-recv-sks.bash @@ -21,6 +21,7 @@ export KEYSERVER_TIMEOUT=20m grab_keys "${SYSTEM_KEYS[@]}" grab_keys "${COMMITTING_DEVS[@]}" grab_keys "${NONCOMMITTING_DEVS[@]}" +grab_keys "${INFRA_DEVS[@]}" # -- not all are on keyservers # -- and are unlikely to turn up now # -- this needs to fetch from some archive instead
[gentoo-commits] proj/qa-scripts:master commit in: htdocs/
commit: 0fc0320d35bfef018cfb35762834e05c1368ac19 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Feb 27 19:27:30 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Feb 27 19:27:30 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=0fc0320d htdocs/index: add keyring artifact links Signed-off-by: Robin H. Johnson gentoo.org> htdocs/index.html | 9 + 1 file changed, 9 insertions(+) diff --git a/htdocs/index.html b/htdocs/index.html index ea4a50c..3652d33 100644 --- a/htdocs/index.html +++ b/htdocs/index.html @@ -130,6 +130,15 @@ + Generated artifacts + +GPG keyring: service keys +GPG keyring: all active devs +GPG keyring: active gentoo.git devs +GPG keyring: retired devs +GPG keyring: infra devs +GPG keyring: all devs + Tree-wide Scanning
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: 74e7faa94ef8c3d1ca88902ae504efeb6997cff7 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Feb 27 19:21:45 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Feb 27 19:21:45 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=74e7faa9 keyrings-export: another spot for infra-devs Signed-off-by: Robin H. Johnson gentoo.org> keyrings-export.bash | 4 1 file changed, 4 insertions(+) diff --git a/keyrings-export.bash b/keyrings-export.bash index 5b6dc17..f07df83 100755 --- a/keyrings-export.bash +++ b/keyrings-export.bash @@ -27,6 +27,9 @@ export_keys "${OUTPUT_DIR}"/active-devs.gpg \ "${COMMITTING_DEVS[@]}" \ "${NONCOMMITTING_DEVS[@]}" +export_keys "${OUTPUT_DIR}"/infra-devs.gpg \ + "${INFRA_DEVS[@]}" + export_keys "${OUTPUT_DIR}"/retired-devs.gpg \ "${RETIRED_DEVS[@]}" @@ -35,6 +38,7 @@ export_keys "${OUTPUT_DIR}"/all-devs.gpg \ "${SYSTEM_KEYS[@]}" \ "${COMMITTING_DEVS[@]}" \ "${NONCOMMITTING_DEVS[@]}" \ + "${INFRA_DEVS[@]}" \ "${RETIRED_DEVS[@]}" clean_tmp
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: fbb6e9911b2cc8582f870acb23c2dacac8e2c077 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Feb 27 17:57:48 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Feb 27 17:57:48 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=fbb6e991 keyrings: add infra keyring Signed-off-by: Robin H. Johnson gentoo.org> create-dev-keyrings.bash | 6 ++ keyrings.inc.bash| 3 +++ 2 files changed, 9 insertions(+) diff --git a/create-dev-keyrings.bash b/create-dev-keyrings.bash index 65b2b14..d0ea12a 100755 --- a/create-dev-keyrings.bash +++ b/create-dev-keyrings.bash @@ -27,6 +27,10 @@ export_keys "${OUTPUT_DIR}"/active-devs.gpg \ "${COMMITTING_DEVS[@]}" \ "${NONCOMMITTING_DEVS[@]}" +grab_keys "${INFRA_DEVS[@]}" +export_keys "${OUTPUT_DIR}"/infra-devs.gpg \ + "${INFRA_DEVS[@]}" + # -- not all are on keyservers # -- and are unlikely to turn up now # -- this needs to fetch from some archive instead @@ -39,6 +43,7 @@ export_keys "${OUTPUT_DIR}"/all-devs.gpg \ "${SYSTEM_KEYS[@]}" \ "${COMMITTING_DEVS[@]}" \ "${NONCOMMITTING_DEVS[@]}" \ + "${INFRA_DEVS[@]}" \ "${RETIRED_DEVS[@]}" # Populate keys.gentoo.org with the keys we have, since they might have come from SKS @@ -47,4 +52,5 @@ export KEYSERVER_TIMEOUT=20m push_keys "${SYSTEM_KEYS[@]}" push_keys "${COMMITTING_DEVS[@]}" push_keys "${NONCOMMITTING_DEVS[@]}" +push_keys "${INFRA_DEVS[@]}" push_keys "${RETIRED_DEVS[@]}" diff --git a/keyrings.inc.bash b/keyrings.inc.bash index bf45a86..7989d79 100644 --- a/keyrings.inc.bash +++ b/keyrings.inc.bash @@ -6,6 +6,7 @@ SYSTEM_BASE='ou=system,dc=gentoo,dc=org' COMMIT_RULE='(&(gentooAccess=git.gentoo.org/repo/gentoo.git)(gentooStatus=active))' NONCOMMIT_RULE='(&(!(gentooAccess=git.gentoo.org/repo/gentoo.git))(gentooStatus=active))' RETIRED_RULE='(!(gentooStatus=active))' +INFRA_RULE='(&(gentooAccess=infra.group)(gentooStatus=active))' export KS_GENTOO=hkps://keys.gentoo.org/ # Use local keyserver for speedup @@ -18,6 +19,7 @@ export KEYSERVERS=( ) # empty by default export COMMITTING_DEVS=( ) export NONCOMMITTING_DEVS=( ) export RETIRED_DEVS=( ) +export INFRA_DEVS=( ) export SYSTEM_KEYS=( ) # grab_ldap_fingerprints @@ -128,5 +130,6 @@ export_ldap_data_to_env() { export -a COMMITTING_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${COMMIT_RULE}") ) export -a NONCOMMITTING_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${NONCOMMIT_RULE}") ) export -a RETIRED_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${RETIRED_RULE}") ) + export -a INFRA_DEVS=( $(grab_ldap_fingerprints -b "${DEV_BASE}" "${INFRA_RULE}") ) export -a SYSTEM_KEYS=( $(grab_ldap_fingerprints -b "${SYSTEM_BASE}" "${NONCOMMIT_RULE}") ) }
Re: [gentoo-dev] Gentoo LLVM project needs help!
On Fri, Feb 11, 2022 at 09:11:51PM +0100, Michał Górny wrote: > > GSOC-worthy project? > Not sure. To rephrase what was once said to me, this is summer of > *code*, not infra work. Are there similar programs where the infra work might fit? Outreachy? paid interns? -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-commits] proj/qa-scripts:master commit in: /
commit: 2b318470ffde8ffde7b105e1fce28c6ab3653715 Author: Robin H. Johnson gentoo org> AuthorDate: Tue Feb 8 06:25:38 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue Feb 8 06:25:46 2022 + URL:https://gitweb.gentoo.org/proj/qa-scripts.git/commit/?id=2b318470 keyrings.inc.bash: try to prefer local keyserver for speed Signed-off-by: Robin H. Johnson gentoo.org> keyrings.inc.bash | 4 1 file changed, 4 insertions(+) diff --git a/keyrings.inc.bash b/keyrings.inc.bash index d19f0ad..bf45a86 100644 --- a/keyrings.inc.bash +++ b/keyrings.inc.bash @@ -8,6 +8,10 @@ NONCOMMIT_RULE='(&(!(gentooAccess=git.gentoo.org/repo/gentoo.git))(gentooStatus= RETIRED_RULE='(!(gentooStatus=active))' export KS_GENTOO=hkps://keys.gentoo.org/ +# Use local keyserver for speedup +KS_GENTOO_LOCAL=${HOSTNAME%.gentoo.org}.keys.gentoo.org +dig $KS_GENTOO_LOCAL +short |grep -sq . && export KS_GENTOO=hkps://${KS_GENTOO_LOCAL} + #export KS_SKS=hkps://hkps.pool.sks-keyservers.net/ # Disabled pending security announcement export KS_OPENPGP=hkps://keys.openpgp.org/ # runs Hagrid export KEYSERVERS=( ) # empty by default
Re: [gentoo-dev] [PATCH 01/12] toolchain.eclass: remove EAPI 5 and 6
At a technical level, it looks fine. But I want to clarify interaction for old systems. Dilfridge had a proposal to ensure 3/6/12 month old systems could still upgrade, and I'm wondering if this could break those systems. There are 3 commits in the last year that finally removed the EAPI 5/6 toolchain consumers: 486b77ab8d28c5bfd5a4bdfc5f9a5f432ffde563 b0a39e54065f7eda2dfc719ec05e270fa7e23e38 26f684adecb5b9135f9eba9f1b63c83e3d5e5722 The latest of those was in September 2021. Do we need to wait X months after those removals, to be able to commit this change? -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-commits] repo/gentoo:master commit in: sys-apps/haveged/files/
commit: a60a60ee51bfe612f8bb18497cc84bbf01becaba Author: Michael Mair-Keimberger levelnine at> AuthorDate: Fri Jan 14 18:06:41 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Thu Jan 20 05:47:52 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a60a60ee sys-apps/haveged: remove unused patch Package-Manager: Portage-3.0.30, Repoman-3.0.3 Signed-off-by: Michael Mair-Keimberger levelnine.at> (cherry picked from commit cd5d796e8e30dffde7fb059e6cc5867a4139ef37) Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/23797 .../files/haveged-1.9.8c-threads_build_fix.patch | 36 -- 1 file changed, 36 deletions(-) diff --git a/sys-apps/haveged/files/haveged-1.9.8c-threads_build_fix.patch b/sys-apps/haveged/files/haveged-1.9.8c-threads_build_fix.patch deleted file mode 100644 index fb88a8b51212.. --- a/sys-apps/haveged/files/haveged-1.9.8c-threads_build_fix.patch +++ /dev/null @@ -1,36 +0,0 @@ -From cb1f0653c45d9c4a9a855119c85a1d4bfcc9b3b2 Mon Sep 17 00:00:00 2001 -From: Lars Wendler -Date: Thu, 14 Nov 2019 16:15:00 +0100 -Subject: [PATCH] build: Fix compilation with --enable-threads -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -Previously failed with: - -havegetune.c:190:12: error: ‘BUILD_THREAD’ undeclared (first use in this function); did you mean ‘BUILD_THREADS’? - 190 |*bp++ = BUILD_THREAD; - |^~~~ - |BUILD_THREADS - -Signed-off-by: Lars Wendler - src/havegetune.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/src/havegetune.c b/src/havegetune.c -index de39c53..6f14476 100644 a/src/havegetune.c -+++ b/src/havegetune.c -@@ -187,7 +187,7 @@ void havege_tune( /* RETURN: none */ -*bp++ = BUILD_CPUID; - #endif - #if NUMBER_CORES>1 -- *bp++ = BUILD_THREAD; -+ *bp++ = BUILD_THREADS; - #endif - #ifdef ONLINE_TESTS_ENABLE -*bp++ = BUILD_OLT; --- -2.24.0 -
[gentoo-commits] repo/gentoo:master commit in: app-misc/solaar/
commit: 288fbb4111608aba6823216a5ec8658004cf9068 Author: Alexey Zapparov zapparov com> AuthorDate: Sun Nov 28 02:32:15 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue Jan 11 05:00:52 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=288fbb41 app-misc/solaar: add 1.1.1 Closes: https://bugs.gentoo.org/827709 Package-Manager: Portage-3.0.28, Repoman-3.0.3 Signed-off-by: Alexey Zapparov zapparov.com> Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/23096 app-misc/solaar/Manifest| 1 + app-misc/solaar/solaar-1.1.1.ebuild | 69 + 2 files changed, 70 insertions(+) diff --git a/app-misc/solaar/Manifest b/app-misc/solaar/Manifest index 932ba896d504..c5d227d962a9 100644 --- a/app-misc/solaar/Manifest +++ b/app-misc/solaar/Manifest @@ -1,2 +1,3 @@ DIST solaar-1.0.5.tar.gz 920452 BLAKE2B 44aa0f9abd63629a5a4e737c14e468922c4aa501341717d595f045c5f40369ade6ff296120931557f1e8f04b99aa4f690454aa8f6bceaa526f370f93b312f6d6 SHA512 28603c30f0e9f2f0fe2549722062548031c69a0d9c98f732fdd8fbb51ed1d55ef033262113b2f88044a68f8b26c8c51fb0b45d4f4689fb3619e143d159618c47 DIST solaar-1.0.7.tar.gz 1265664 BLAKE2B 6bb221d603dc74bf21ac44ca6611d817889285c8711c565b7393b875a934bf9125fc366569c1f677d657463484f2ec5fa077703f311ef2aec74e9f6813a5f1d7 SHA512 24b6b861f90d5747f150afb38b32041885b61cbf7df7794d780b311aef50d334347d5c5c722a0a7d5de3f91b96228e90e2a61dc108054452f46750a04340df83 +DIST solaar-1.1.1.tar.gz 1418025 BLAKE2B c6fd053002727a372bf9672fc22c0acc123f814003c14172f7d13e59b82ab42ecee9b71a09289b2d234874850e0921debaa069506a07d8957f52a2e9953a47f4 SHA512 c4da0c5521724c00afbc54ee9d10a4709246bb6f57635637b77e5944293b285a055b7df623e7e2a810a0764021813929e0f4fa7f21d4afc39abd516416a2bf25 diff --git a/app-misc/solaar/solaar-1.1.1.ebuild b/app-misc/solaar/solaar-1.1.1.ebuild new file mode 100644 index ..cad0500253bc --- /dev/null +++ b/app-misc/solaar/solaar-1.1.1.ebuild @@ -0,0 +1,69 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DISTUTILS_SINGLE_IMPL=1 +PYTHON_COMPAT=( python3_{7..9} ) + +inherit linux-info udev xdg distutils-r1 + +DESCRIPTION="Linux Device Manager for Logitech Unifying Receivers and Paired Devices" +HOMEPAGE="https://pwr-solaar.github.io/Solaar/; +if [[ ${PV} =~ * ]]; then + inherit git-r3 + EGIT_REPO_URI="https://github.com/pwr-Solaar/Solaar; +else + SRC_URI="https://github.com/pwr-Solaar/Solaar/archive/${PV/_rc/rc}.tar.gz -> ${P/_rc/rc}.tar.gz" + KEYWORDS="~amd64 ~arm ~x86" + S="${WORKDIR}"/Solaar-${PV/_rc/rc} +fi + +LICENSE="GPL-2" +SLOT="0" +IUSE="doc appindicator libnotify" + +RDEPEND=" + acct-group/plugdev + $(python_gen_cond_dep ' + dev-python/psutil[${PYTHON_USEDEP}] + dev-python/pygobject:3[${PYTHON_USEDEP}] + dev-python/python-xlib[${PYTHON_USEDEP}] + >=dev-python/pyudev-0.13[${PYTHON_USEDEP}] + dev-python/pyyaml[${PYTHON_USEDEP}] + + ') + x11-libs/gtk+:3[introspection] + appindicator? ( dev-libs/libappindicator:3[introspection] ) + libnotify? ( x11-libs/libnotify[introspection] )" +# libappindicator & libnotify are entirely optional and detected at runtime + +CONFIG_CHECK="~HID_LOGITECH_DJ ~HIDRAW" + +python_prepare_all() { + # don't autostart (bug #494608) + sed -i \ + -e '/yield autostart_path/d' \ + setup.py || die + + sed -i -r \ + -e '/yield.*udev.*rules.d/{s,/etc,/lib,g}' \ + setup.py || die + + # grant plugdev group rw access + sed -i 's/#MODE=/MODE=/' rules.d/42-logitech-unify-permissions.rules || die + + distutils-r1_python_prepare_all +} + +python_install_all() { + distutils-r1_python_install_all + + dodoc docs/devices.md + if use doc; then + dodoc -r docs/* + else + newdoc docs/index.md README.md + fi + udev_dorules "${S}"/rules.d/42-logitech-unify-permissions.rules +}
[gentoo-commits] repo/gentoo:master commit in: dev-db/lmdb/files/
commit: 2d52d78a091cedd0fbd6c4b0500358bec615282e Author: Michael Mair-Keimberger levelnine at> AuthorDate: Mon Jan 10 16:58:15 2022 + Commit: Robin H. Johnson gentoo org> CommitDate: Tue Jan 11 04:56:34 2022 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2d52d78a dev-db/lmdb: remove unused patch Package-Manager: Portage-3.0.30, Repoman-3.0.3 Signed-off-by: Michael Mair-Keimberger levelnine.at> Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/23726 dev-db/lmdb/files/lmdb-fix-cursor-delete.patch | 48 -- 1 file changed, 48 deletions(-) diff --git a/dev-db/lmdb/files/lmdb-fix-cursor-delete.patch b/dev-db/lmdb/files/lmdb-fix-cursor-delete.patch deleted file mode 100644 index fd76be1bb796.. --- a/dev-db/lmdb/files/lmdb-fix-cursor-delete.patch +++ /dev/null @@ -1,48 +0,0 @@ -From 40585b483976d9062e6c971df285f911512ecd5e Mon Sep 17 00:00:00 2001 -From: Howard Chu -Date: Tue, 9 Feb 2021 23:38:06 + -Subject: [PATCH] ITS#9461 refix ITS#9376 - -Was setting C_DEL flag gratuitously - libraries/liblmdb/mdb.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/libraries/liblmdb/mdb.c b/libraries/liblmdb/mdb.c -index 621cbcfa..e6cae8ed 100644 a/mdb.c -+++ b/mdb.c -@@ -8527,10 +8527,10 @@ mdb_cursor_del0(MDB_cursor *mc) - } - m3->mc_xcursor->mx_cursor.mc_flags |= C_DEL; - } -- m3->mc_flags |= C_DEL; - } - } - } -+ m3->mc_flags |= C_DEL; - - fail: - if (rc) -From f9c5b46651c4ecd699643c4d90bb3ab7725a6167 Mon Sep 17 00:00:00 2001 -From: Howard Chu -Date: Thu, 11 Feb 2021 11:34:57 + -Subject: [PATCH] ITS#9461 fix typo - - libraries/liblmdb/mdb.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/libraries/liblmdb/mdb.c b/libraries/liblmdb/mdb.c -index e6cae8ed..4062664b 100644 a/mdb.c -+++ b/mdb.c -@@ -8530,7 +8530,7 @@ mdb_cursor_del0(MDB_cursor *mc) - } - } - } -- m3->mc_flags |= C_DEL; -+ mc->mc_flags |= C_DEL; - - fail: - if (rc)
Re: Parallelizing rsync through multiple ssh connections
On Thu, Nov 04, 2021 at 04:58:03PM +0100, SERVANT Cyril via rsync wrote: > Hi, I want to increase the speed of rsync transfers over ssh. Thanks for your great email here. Having had similar issues in the past in trying to rsync single large files, I wanted to share some of the ideas I'd found to work: HPN-SSH patches. The website is out of date, but don't let that put you off. HPN-SSH can saturate 40Gbit links with tuning (but it's absolutely work to do that tuning). The main things there are the buffer patches, and the multithreaded AES, but you can use the NONE encryption for benchmarking as well. Intel had a paper from 2010 showing the HPN boost (and also other work on multi streams): https://www.intel.com/content/dam/support/us/en/documents/network/sb/fedexcasestudyfinal.pdf Facebook's WARP/WDT tooling: https://github.com/facebookarchive/wdt https://opensourcelibs.com/lib/warp-cli Lastly, I was trying multipath TCP: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/getting-started-with-multipath-tcp_configuring-and-managing-networking I didn't get very far on the MPTCP research angle. I think all of these are likely to be complementary to your work on partitioning the large file. If you have a sample large file and permission to test without encryption, temporarily replacing ssh w/ either the NONE cipher or trying to use buffer-tuned netcat would let you identify what the bottleneck of rsync is in your situation. I found previously that it didn't do a good job on the rsync:// wire protocol over high-latency: it had too many round trips and didn't do much work between them. I think from looking at the rsync code in the past, the checksum system in general is going to be your largest problem. - it assumes that it's checking a single stream for each file - meaningful replacement would be either independent per-segment checksums or something like a merkle tree > 1. The need > > TL;DR: we need to transfer one huge file quickly (100Gb/s) through ssh. ... > In order to maximize transfers speed, I first tried different Ciphers / MACs. > The list of authorized Ciphers / MACs is provided to me by our security team. > With these constraints, I can reach 1Gb/s to 3Gb/s. I'm still far from the > expected result. This is due to the way encryption/decryption work on modern > CPUs: they are really efficient thanks to AES-NI, but are single-threaded. The > bandwidth limiter is the speed of a single CPU core. HPN-SSH MT-AES here gets you to many cores at the SSH level. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature -- Please use reply-all for most replies to avoid omitting the mailing list. To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html
[ceph-users] Re: Bug in RGW header x-amz-date parsing
On Tue, Dec 07, 2021 at 12:39:12PM -0500, Casey Bodley wrote: > hi Subu, > > On Tue, Dec 7, 2021 at 12:10 PM Subu Sankara Subramanian > wrote: > > > > Folks, > > > > Is there a bug in ceph RGW date parsing? > > https://github.com/ceph/ceph/blob/master/src/rgw/rgw_auth_s3.cc#L223 - this > > line parses the date in x-amz-date as RFC 2616. BUT the format specified by > > Amazon S3 is ISO 8601 basic - MMDDTHHMMSSZ ( > > https://docs.aws.amazon.com/ses/latest/APIReference-V2/CommonParameters.html). > > this is a link to the Amazon Simple Email Service v2 API, it doesn't > refer to aws v2 signatures. v2 signatures for s3 are documented at > https://docs.aws.amazon.com/AmazonS3/latest/userguide/RESTAuthentication.html#RESTAuthenticationTimeStamp, > which states that "The value of the x-amz-date header must be in one > of the RFC 2616 formats (http://www.ietf.org/rfc/rfc2616.txt)." Yes, there is a bug, but it's not the one you're thinking of. The S3 specification says one thing (RFC2616 dates [3]), and AWS's S3 implementation does something slightly different: It accepts non-GMT time offsets, and correctly converts them to GMT/UTC. RGW on the other hand has a subtle failure: 1. RFC2616 section 3.3.1 [1] Specifies that HTTP timestamps must be in GMT. 2. Not all clients follow this, and may send it with other timezones! 3. RGW uses strptime(s, "%a, %d %b %Y %H:%M:%S %z", t) to try and parse the time. 4. glibc strptime accepts the %z specifier, but discards the value! [2] 5. If the server is set to UTC, and the client sends a non-GMT date, it will be parsed as if it's in GMT, and thus potentially be offset by some time (usually a multiple of hours due to the geo-political nature of timezones). 6. If making a SigV2 request, the timezone used 4th line of the string to sign (timestamp) is *not* GMT/ offset, e.g. "Sun, 12 Dec 2021 12:52:48 -0800", RGW will respond with RequestTimeTooSkewed response. Partial demo for this bug at [4]. [1] https://datatracker.ietf.org/doc/html/rfc2616#section-3.3.1 [2] https://man7.org/linux/man-pages/man3/strptime.3.html#NOTES [3] https://docs.aws.amazon.com/AmazonS3/latest/userguide/RESTAuthentication.html#RESTAuthenticationTimeStamp [4] https://gist.github.com/robbat2/930974e21dcdf2b31944f954c46dd904 Credit to one of my co-workers, Max Kuznetsov, for finding the initial conditions that lead this bug discovery. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[gentoo-commits] repo/gentoo:master commit in: app-misc/solaar/
commit: 2c4daac3073e3ac44e6ea594d291a08f4b65374a Author: Alexey Zapparov zapparov com> AuthorDate: Wed Nov 24 22:24:56 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Nov 28 00:47:39 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2c4daac3 app-misc/solaar: add 1.0.7 Closes: https://bugs.gentoo.org/819081 Package-Manager: Portage-3.0.28, Repoman-3.0.3 Signed-off-by: Alexey Zapparov zapparov.com> (cherry picked from commit 26847f74573724273c09a7990bb5d0cf83dff3a5) Signed-off-by: Robin H. Johnson gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/23071 app-misc/solaar/Manifest| 1 + app-misc/solaar/solaar-1.0.7.ebuild | 69 + 2 files changed, 70 insertions(+) diff --git a/app-misc/solaar/Manifest b/app-misc/solaar/Manifest index 6b211be32604..932ba896d504 100644 --- a/app-misc/solaar/Manifest +++ b/app-misc/solaar/Manifest @@ -1 +1,2 @@ DIST solaar-1.0.5.tar.gz 920452 BLAKE2B 44aa0f9abd63629a5a4e737c14e468922c4aa501341717d595f045c5f40369ade6ff296120931557f1e8f04b99aa4f690454aa8f6bceaa526f370f93b312f6d6 SHA512 28603c30f0e9f2f0fe2549722062548031c69a0d9c98f732fdd8fbb51ed1d55ef033262113b2f88044a68f8b26c8c51fb0b45d4f4689fb3619e143d159618c47 +DIST solaar-1.0.7.tar.gz 1265664 BLAKE2B 6bb221d603dc74bf21ac44ca6611d817889285c8711c565b7393b875a934bf9125fc366569c1f677d657463484f2ec5fa077703f311ef2aec74e9f6813a5f1d7 SHA512 24b6b861f90d5747f150afb38b32041885b61cbf7df7794d780b311aef50d334347d5c5c722a0a7d5de3f91b96228e90e2a61dc108054452f46750a04340df83 diff --git a/app-misc/solaar/solaar-1.0.7.ebuild b/app-misc/solaar/solaar-1.0.7.ebuild new file mode 100644 index ..cad0500253bc --- /dev/null +++ b/app-misc/solaar/solaar-1.0.7.ebuild @@ -0,0 +1,69 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +DISTUTILS_SINGLE_IMPL=1 +PYTHON_COMPAT=( python3_{7..9} ) + +inherit linux-info udev xdg distutils-r1 + +DESCRIPTION="Linux Device Manager for Logitech Unifying Receivers and Paired Devices" +HOMEPAGE="https://pwr-solaar.github.io/Solaar/; +if [[ ${PV} =~ * ]]; then + inherit git-r3 + EGIT_REPO_URI="https://github.com/pwr-Solaar/Solaar; +else + SRC_URI="https://github.com/pwr-Solaar/Solaar/archive/${PV/_rc/rc}.tar.gz -> ${P/_rc/rc}.tar.gz" + KEYWORDS="~amd64 ~arm ~x86" + S="${WORKDIR}"/Solaar-${PV/_rc/rc} +fi + +LICENSE="GPL-2" +SLOT="0" +IUSE="doc appindicator libnotify" + +RDEPEND=" + acct-group/plugdev + $(python_gen_cond_dep ' + dev-python/psutil[${PYTHON_USEDEP}] + dev-python/pygobject:3[${PYTHON_USEDEP}] + dev-python/python-xlib[${PYTHON_USEDEP}] + >=dev-python/pyudev-0.13[${PYTHON_USEDEP}] + dev-python/pyyaml[${PYTHON_USEDEP}] + + ') + x11-libs/gtk+:3[introspection] + appindicator? ( dev-libs/libappindicator:3[introspection] ) + libnotify? ( x11-libs/libnotify[introspection] )" +# libappindicator & libnotify are entirely optional and detected at runtime + +CONFIG_CHECK="~HID_LOGITECH_DJ ~HIDRAW" + +python_prepare_all() { + # don't autostart (bug #494608) + sed -i \ + -e '/yield autostart_path/d' \ + setup.py || die + + sed -i -r \ + -e '/yield.*udev.*rules.d/{s,/etc,/lib,g}' \ + setup.py || die + + # grant plugdev group rw access + sed -i 's/#MODE=/MODE=/' rules.d/42-logitech-unify-permissions.rules || die + + distutils-r1_python_prepare_all +} + +python_install_all() { + distutils-r1_python_install_all + + dodoc docs/devices.md + if use doc; then + dodoc -r docs/* + else + newdoc docs/index.md README.md + fi + udev_dorules "${S}"/rules.d/42-logitech-unify-permissions.rules +}
[gentoo-commits] repo/gentoo:master commit in: dev-vcs/git/
commit: 9d221e10cca22e7dfbec001d5a3d414f5a3a0db8 Author: Robin H. Johnson gentoo org> AuthorDate: Mon Nov 15 18:18:39 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon Nov 15 18:18:49 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9d221e10 dev-vcs/git: remove old distfile Signed-off-by: Robin H. Johnson gentoo.org> dev-vcs/git/Manifest | 3 --- 1 file changed, 3 deletions(-) diff --git a/dev-vcs/git/Manifest b/dev-vcs/git/Manifest index 1a4151fb77ab..a9df23310692 100644 --- a/dev-vcs/git/Manifest +++ b/dev-vcs/git/Manifest @@ -1,15 +1,12 @@ DIST git-2.31.1.tar.xz 6413368 BLAKE2B 2d40aa3e5336e57b3cab42c36dd07698be7a811e2890f4c9ecaaa375f985313bb8e14fe7a70c1beff3009a9102b935e4a6065019ab3b2520f09339e2a0fcdb93 SHA512 9aa334a3e8519700ff5d112153ec42677722980094caa9d22aa91afdb65166bd9a98fa445c0d327c428ebfa73bf4832e9b3836109a1d9319feafe3191cfd170e DIST git-2.32.0.tar.xz 6551348 BLAKE2B 546203ce3f749ba806866a9e9767bc807794cec435fd0b60306ae6cd2b1b17a0159ef9774c79c4f59d0dba45b36941085b55f103e1820450d560bffa41d1058f SHA512 1ab3e7022ccee411d14a7da5c37d6259ef5c0f85ebed8f49698e25c65cbc7a46f8096919fcb6568360bfe284dd7475b596eee1a167db966096255a405853837c DIST git-2.33.1.tar.xz 6558636 BLAKE2B f4959d5309f85e063448673a3f06f1d3cdd65ced5f5173cfe5a38df3b5547cae1c08275bda02e48307e8290628735e2ea1ff4962e7cd29b252a6aa4d4a15 SHA512 16d417183232e1057bea754d59cdf4bbacc5f1527d1de6ee04cdd293a2512bfa7208e20f6130816605528b59cb1bc3188c5bddf1a42c1413095ee74e44dd2f91 -DIST git-2.34.0.rc2.tar.xz 6597020 BLAKE2B f683f93ce74eface8bd2023c21718d59297a0fa7102600692e1712bbcca6ad49556a85d8710f1e9e186e216cc28b0f3acf60b50f450f8a48bf896b7fbf1317b0 SHA512 ab28dd1f7f788b0e1177b8024e646a154fa15e0294c1c7bdef6e40e19ade8bbcc08d58ef8cf2bdaca2844f6acb60ad8824c59592077c5ee0da55ca3a67217fbe DIST git-2.34.0.tar.xz 6623924 BLAKE2B 1b50fb2594ad7c87df5214495a0a24f8122f67e844b0312bbee44d9cfdad201fe589a819cf56971706df534001cdbd52d4174fa72124212d4276cee9acd37759 SHA512 3102c1ebe408eb549ebd0f9b1420663ed04a2720e4dc676c1854a9e7b8306bb49dc931b734aa7eb612eb7adc2ad92730c0d2dd704dbd859ba61e5ceba909fcc3 DIST git-htmldocs-2.31.1.tar.xz 1357592 BLAKE2B 54b48cfe2bb8e5dad9fdff862aa91e5805b0cd331b459d51a71ed913ca68d1aea6c6c69cfadbe8b6101b4d7be63c3811027a2ed42f9d2b0d3509664726b8ad78 SHA512 d243f4e3047c0e29bdd9127ff529c7fab5ebf40a4afaa04c3a9261ae398aa61c16a4413b7bf580c7f874d632b866908d92322ea0502141d811b78b7636c8d28b DIST git-htmldocs-2.32.0.tar.xz 1381664 BLAKE2B d1b47aa99d32a252fd20df26eff44a558044f3a389379b161bb43621eb28375eb0621969849a31938ba7fc9fc58b140d27d703559ea5735d0a0ffd2e93cd9692 SHA512 12b84e342f0d19afe385ab8a685ae625e86c3295d1555992e0c427b361aa2cdfc89a679e7dbc468d3568a325dafbf699468aadcdb02f93e372eff3dd96a7cf7f DIST git-htmldocs-2.33.1.tar.xz 1396744 BLAKE2B cbd65cf08fc7ea466fcd72820ba3e2135ade37f69c436a4ee7276dc71fb62f6270b71e2f46d981f5681a0fd3c30613d61680c2ef2460d0d7d292f7455e114128 SHA512 5b856b919067e1f644539d43a85aab6f602537ea0970b6248b471e3fa6756a8494f0525a69d22ad3795fcf9e106ff8439e0f6716ba0b8c895d7aad8c59e5bd74 -DIST git-htmldocs-2.34.0.rc2.tar.xz 1406064 BLAKE2B d222eaaafbc8d4a50e829a397f88cce789fd52345a692b74905985122bc21c822e6ca28b72218f9554064b6207d992f484d3ef31da928bfc23812c4eff4940a5 SHA512 2143a3620dacc31439f2df5ff8210a53b152ef012b957ca94fe1574fcbf5701c22730b5856a613372006c98c5d24f43ec8c9b13b5fecbe4b8ab096dd4a585245 DIST git-htmldocs-2.34.0.tar.xz 1406204 BLAKE2B db606a9015a4efa8d162dbdf3eea34a60f87a85e2acbeed23ff731e241086354bd278726fb301eedc83ff9f44a71e3c68c78b151d4e837b32a188ad5ccca3b3f SHA512 8f6e768ebeb4dd6cc45537391c30f47cfab67fd7abb308d0b15a082a463c0c01cd94f855f9e7ee2e4b2983300d31431666ce84dc9243b0ec37869d5a868862c1 DIST git-manpages-2.31.1.tar.xz 487784 BLAKE2B 9fe67839cca51f18b0aca16678eadb9ee8e609cbbae26bf1804c39b8bf5415e1069cb50162b75f9f8ec69bd6511f271d3116ac33016af2e57e65b88ad6c4b165 SHA512 a5fb8a1c3f08707d4d2d835a55b295677559856984ffeeb650827b433625a74f22ef4aac10e1b14eba5860e11567543b146d52dd055b2613e5a510e0f4f3c3fd DIST git-manpages-2.32.0.tar.xz 491868 BLAKE2B 7598a864246aed771371924604ee13d3f51b839b10b254bb1159dd47266513f5cd6484aab200a7b4ed427edc76538a98e39a040a17201483965175f5e1c5f484 SHA512 5c9950bd5d6904972cddf4afad534197d843c0dee8198d14ec5a3448873cab37dac88295b2a4df3658749f048bda4800b54fdc850517be7208906c911832c66e DIST git-manpages-2.33.1.tar.xz 494288 BLAKE2B 1f8bd4f23de31a285d3f4327e562dddafdf9f28e8b36334e54f5e280c81fc8170e8b153ca42baa642d02d8e6fdfcac9a8fdd3cee1e32c29bcd53f689d1a6c463 SHA512 d465a7b491046b7a5da6ad1fc6c62b351c69905932e0672263de5a1d3abe1113660cff9fe30c7be1d1695c6170ceca5a11b3f65e9b2d1545f35cc653e4c6ad62 -DIST git-manpages-2.34.0.rc2.tar.xz 497372 BLAKE2B 025993e4781000584f76088fd9953fc55b655d5cd72dfe3e962586b2daf2dd239afe30ed389d267888bff8e3069e9369a6a7acde227c1c7f13d7a8df7e49a3a
[gentoo-commits] repo/gentoo:master commit in: dev-vcs/git/
commit: cd2aee5fd0fc63923092d06e300113dd2fcd3aec Author: Robin H. Johnson gentoo org> AuthorDate: Mon Nov 15 17:49:01 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Mon Nov 15 17:49:01 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cd2aee5f dev-vcs/git: bump Signed-off-by: Robin H. Johnson gentoo.org> dev-vcs/git/Manifest | 3 +++ dev-vcs/git/{git-2.34.0_rc2.ebuild => git-2.34.0.ebuild} | 0 2 files changed, 3 insertions(+) diff --git a/dev-vcs/git/Manifest b/dev-vcs/git/Manifest index 26cf5a54a935..1a4151fb77ab 100644 --- a/dev-vcs/git/Manifest +++ b/dev-vcs/git/Manifest @@ -2,11 +2,14 @@ DIST git-2.31.1.tar.xz 6413368 BLAKE2B 2d40aa3e5336e57b3cab42c36dd07698be7a811e2 DIST git-2.32.0.tar.xz 6551348 BLAKE2B 546203ce3f749ba806866a9e9767bc807794cec435fd0b60306ae6cd2b1b17a0159ef9774c79c4f59d0dba45b36941085b55f103e1820450d560bffa41d1058f SHA512 1ab3e7022ccee411d14a7da5c37d6259ef5c0f85ebed8f49698e25c65cbc7a46f8096919fcb6568360bfe284dd7475b596eee1a167db966096255a405853837c DIST git-2.33.1.tar.xz 6558636 BLAKE2B f4959d5309f85e063448673a3f06f1d3cdd65ced5f5173cfe5a38df3b5547cae1c08275bda02e48307e8290628735e2ea1ff4962e7cd29b252a6aa4d4a15 SHA512 16d417183232e1057bea754d59cdf4bbacc5f1527d1de6ee04cdd293a2512bfa7208e20f6130816605528b59cb1bc3188c5bddf1a42c1413095ee74e44dd2f91 DIST git-2.34.0.rc2.tar.xz 6597020 BLAKE2B f683f93ce74eface8bd2023c21718d59297a0fa7102600692e1712bbcca6ad49556a85d8710f1e9e186e216cc28b0f3acf60b50f450f8a48bf896b7fbf1317b0 SHA512 ab28dd1f7f788b0e1177b8024e646a154fa15e0294c1c7bdef6e40e19ade8bbcc08d58ef8cf2bdaca2844f6acb60ad8824c59592077c5ee0da55ca3a67217fbe +DIST git-2.34.0.tar.xz 6623924 BLAKE2B 1b50fb2594ad7c87df5214495a0a24f8122f67e844b0312bbee44d9cfdad201fe589a819cf56971706df534001cdbd52d4174fa72124212d4276cee9acd37759 SHA512 3102c1ebe408eb549ebd0f9b1420663ed04a2720e4dc676c1854a9e7b8306bb49dc931b734aa7eb612eb7adc2ad92730c0d2dd704dbd859ba61e5ceba909fcc3 DIST git-htmldocs-2.31.1.tar.xz 1357592 BLAKE2B 54b48cfe2bb8e5dad9fdff862aa91e5805b0cd331b459d51a71ed913ca68d1aea6c6c69cfadbe8b6101b4d7be63c3811027a2ed42f9d2b0d3509664726b8ad78 SHA512 d243f4e3047c0e29bdd9127ff529c7fab5ebf40a4afaa04c3a9261ae398aa61c16a4413b7bf580c7f874d632b866908d92322ea0502141d811b78b7636c8d28b DIST git-htmldocs-2.32.0.tar.xz 1381664 BLAKE2B d1b47aa99d32a252fd20df26eff44a558044f3a389379b161bb43621eb28375eb0621969849a31938ba7fc9fc58b140d27d703559ea5735d0a0ffd2e93cd9692 SHA512 12b84e342f0d19afe385ab8a685ae625e86c3295d1555992e0c427b361aa2cdfc89a679e7dbc468d3568a325dafbf699468aadcdb02f93e372eff3dd96a7cf7f DIST git-htmldocs-2.33.1.tar.xz 1396744 BLAKE2B cbd65cf08fc7ea466fcd72820ba3e2135ade37f69c436a4ee7276dc71fb62f6270b71e2f46d981f5681a0fd3c30613d61680c2ef2460d0d7d292f7455e114128 SHA512 5b856b919067e1f644539d43a85aab6f602537ea0970b6248b471e3fa6756a8494f0525a69d22ad3795fcf9e106ff8439e0f6716ba0b8c895d7aad8c59e5bd74 DIST git-htmldocs-2.34.0.rc2.tar.xz 1406064 BLAKE2B d222eaaafbc8d4a50e829a397f88cce789fd52345a692b74905985122bc21c822e6ca28b72218f9554064b6207d992f484d3ef31da928bfc23812c4eff4940a5 SHA512 2143a3620dacc31439f2df5ff8210a53b152ef012b957ca94fe1574fcbf5701c22730b5856a613372006c98c5d24f43ec8c9b13b5fecbe4b8ab096dd4a585245 +DIST git-htmldocs-2.34.0.tar.xz 1406204 BLAKE2B db606a9015a4efa8d162dbdf3eea34a60f87a85e2acbeed23ff731e241086354bd278726fb301eedc83ff9f44a71e3c68c78b151d4e837b32a188ad5ccca3b3f SHA512 8f6e768ebeb4dd6cc45537391c30f47cfab67fd7abb308d0b15a082a463c0c01cd94f855f9e7ee2e4b2983300d31431666ce84dc9243b0ec37869d5a868862c1 DIST git-manpages-2.31.1.tar.xz 487784 BLAKE2B 9fe67839cca51f18b0aca16678eadb9ee8e609cbbae26bf1804c39b8bf5415e1069cb50162b75f9f8ec69bd6511f271d3116ac33016af2e57e65b88ad6c4b165 SHA512 a5fb8a1c3f08707d4d2d835a55b295677559856984ffeeb650827b433625a74f22ef4aac10e1b14eba5860e11567543b146d52dd055b2613e5a510e0f4f3c3fd DIST git-manpages-2.32.0.tar.xz 491868 BLAKE2B 7598a864246aed771371924604ee13d3f51b839b10b254bb1159dd47266513f5cd6484aab200a7b4ed427edc76538a98e39a040a17201483965175f5e1c5f484 SHA512 5c9950bd5d6904972cddf4afad534197d843c0dee8198d14ec5a3448873cab37dac88295b2a4df3658749f048bda4800b54fdc850517be7208906c911832c66e DIST git-manpages-2.33.1.tar.xz 494288 BLAKE2B 1f8bd4f23de31a285d3f4327e562dddafdf9f28e8b36334e54f5e280c81fc8170e8b153ca42baa642d02d8e6fdfcac9a8fdd3cee1e32c29bcd53f689d1a6c463 SHA512 d465a7b491046b7a5da6ad1fc6c62b351c69905932e0672263de5a1d3abe1113660cff9fe30c7be1d1695c6170ceca5a11b3f65e9b2d1545f35cc653e4c6ad62 DIST git-manpages-2.34.0.rc2.tar.xz 497372 BLAKE2B 025993e4781000584f76088fd9953fc55b655d5cd72dfe3e962586b2daf2dd239afe30ed389d267888bff8e3069e9369a6a7acde227c1c7f13d7a8df7e49a3a8 SHA512 aea9620de62787a184f6c9c1951c1af5f25ed3f5b249e3ff6c623681f5ee090690d0bb5da0c6badeea1192eeabb453ec8e2f5fbf4ac243289ac0a150645d55b5 +DIST git-manpages-2.34.0.tar.xz 49
[gentoo-commits] repo/gentoo:master commit in: app-admin/puppet/
commit: 178f637bd8d32e75f81c892d3036533f6c80c181 Author: Robin H. Johnson gentoo org> AuthorDate: Sun Nov 14 00:32:17 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Sun Nov 14 00:32:37 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=178f637b app-admin/puppet: build fix as upstream removed ext/ldap/puppet.schema Signed-off-by: Robin H. Johnson gentoo.org> app-admin/puppet/puppet-7.11.0.ebuild | 5 - app-admin/puppet/puppet-7.12.0.ebuild | 5 - 2 files changed, 10 deletions(-) diff --git a/app-admin/puppet/puppet-7.11.0.ebuild b/app-admin/puppet/puppet-7.11.0.ebuild index af78e821602..7c99390fd0f 100644 --- a/app-admin/puppet/puppet-7.11.0.ebuild +++ b/app-admin/puppet/puppet-7.11.0.ebuild @@ -103,11 +103,6 @@ all_ruby_install() { fowners -R :puppet /etc/puppetlabs fowners -R :puppet /var/lib/puppet - if use ldap ; then - insinto /etc/openldap/schema - doins ext/ldap/puppet.schema - fi - # ext and examples files for f in $(find ext examples -type f) ; do docinto "$(dirname ${f})" diff --git a/app-admin/puppet/puppet-7.12.0.ebuild b/app-admin/puppet/puppet-7.12.0.ebuild index e4dadb18fe5..ef1c62f3e35 100644 --- a/app-admin/puppet/puppet-7.12.0.ebuild +++ b/app-admin/puppet/puppet-7.12.0.ebuild @@ -103,11 +103,6 @@ all_ruby_install() { fowners -R :puppet /etc/puppetlabs fowners -R :puppet /var/lib/puppet - if use ldap ; then - insinto /etc/openldap/schema - doins ext/ldap/puppet.schema - fi - # ext and examples files for f in $(find ext examples -type f) ; do docinto "$(dirname ${f})"
[gentoo-commits] proj/releng:master commit in: scripts/
commit: b42481cdb6a428c661ad8f5cb8851793454bc817 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Nov 12 18:42:47 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Nov 12 18:42:47 2021 + URL:https://gitweb.gentoo.org/proj/releng.git/commit/?id=b42481cd scripts/copy_buildsync: disable dead spam Signed-off-by: Robin H. Johnson gentoo.org> scripts/copy_buildsync.sh | 6 -- 1 file changed, 6 deletions(-) diff --git a/scripts/copy_buildsync.sh b/scripts/copy_buildsync.sh index 81137b43..193075ef 100755 --- a/scripts/copy_buildsync.sh +++ b/scripts/copy_buildsync.sh @@ -236,12 +236,6 @@ process_arch() { | fgrep -l -f - $f \ | xargs -n1 --no-run-if-empty readlink -f done >"${_dead}" - - if test -s "${_dead}"; then - echo "copy_buildsync: dead latest*txt files to verify:" 1>&2 - cat "${_dead}" 1>&2 - fi - mv -f "${_dead}" "${logdir}/dead-latest-txt.txt" # Cleanup tmpdir
[gentoo-commits] proj/releng:master commit in: scripts/
commit: 8623ef538cf32aaf4d46982c5e22569ae72ed8b0 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Nov 12 17:59:08 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Nov 12 18:00:31 2021 + URL:https://gitweb.gentoo.org/proj/releng.git/commit/?id=8623ef53 scripts/copy_buildsync: dead detection works too well, send to files instead Signed-off-by: Robin H. Johnson gentoo.org> scripts/copy_buildsync.sh | 19 --- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/scripts/copy_buildsync.sh b/scripts/copy_buildsync.sh index f7f9a3df..0308da39 100755 --- a/scripts/copy_buildsync.sh +++ b/scripts/copy_buildsync.sh @@ -6,6 +6,8 @@ INCOMING_BASE="/release/weekly/builds" OUTGOING_BASE="/release/distfiles/weekly" # Scratch space used when moving files from incoming to outgoing. TMPDIR_BASE="/release/distfiles/tmp/buildsync/partial" +# Keep some records +LOGDIR_BASE="/release/distfiles/tmp/buildsync/logs" ARCHES=( alpha @@ -64,7 +66,7 @@ EOF # Copy artifacts for an arch to the outgoing directory. copy_arch_to_outgoing() { - local ARCH=$1 indir=$2 outdir=$3 tmpdir=$4 + local ARCH=$1 indir=$2 outdir=$3 tmpdir=$4 logdir=$5 local i t rc timestamps if [[ ! -d ${indir} ]]; then @@ -91,6 +93,7 @@ copy_arch_to_outgoing() { "${RSYNC_OPTS[@]}" \ --temp-dir="${tmpdir}" \ --partial-dir="${tmpdir}" \ + --log-file="${logdir}/rsync.log" \ --filter '- **/.*' \ --filter "S *${i}*" \ --filter 'S **/' \ @@ -126,11 +129,12 @@ process_arch() { indir="${INCOMING_BASE}/${ARCH}" outdir="${OUTGOING_BASE}/${ARCH}" tmpdir="${TMPDIR_BASE}/${ARCH}" + logdir="${LOGDIR_BASE}/${ARCH}" - mkdir -p "${tmpdir}" 2>/dev/null + mkdir -p "${tmpdir}" "${logdir}" 2>/dev/null # Sync incoming->outgoing first. - copy_arch_to_outgoing "${ARCH}" "${indir}" "${outdir}" "${tmpdir}" + copy_arch_to_outgoing "${ARCH}" "${indir}" "${outdir}" "${tmpdir}" "${logdir}" # # Build data for revealing latest: @@ -216,10 +220,7 @@ process_arch() { # Find the dead links for cleanup _dead="${tmpdir}"/dead-link find -L $(pwd) -type l >"${_dead}" - if test -s "${_dead}"; then - echo "copy_buildsync: dead links to verify:" 1>&2 - cat "${_dead}" 1>&2 - fi + mv -f "${_dead}" "${logdir}/dead-links.txt" # Find the dead latest txt files _dead="${tmpdir}"/dead-latest @@ -235,6 +236,7 @@ process_arch() { | fgrep -l -f - $f \ | xargs -n1 --no-run-if-empty readlink -f done >"${_dead}" + if test -s "${_dead}"; then echo "copy_buildsync: removing dead latest*txt files:" 1>&2 foreach txtfil in $(cat "${_dead}") ; do @@ -242,11 +244,14 @@ process_arch() { done fi + mv -f "${_dead}" "${logdir}/dead-latest-txt.txt" + # Cleanup tmpdir $DEBUGP rm $VERBOSEP -rf "${tmpdir}" else echo "There was some failure for $ARCH during the weekly sync. Not doing cleanup for fear of dataloss." 1>&2 + echo "See logs in $logdir" 1>&2 fi }
[gentoo-commits] proj/releng:master commit in: scripts/
commit: 8eb8dd235dfeb80df3740369343177f3cb64dfa8 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Nov 12 00:15:05 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Nov 12 00:15:05 2021 + URL:https://gitweb.gentoo.org/proj/releng.git/commit/?id=8eb8dd23 scripts/copy_buildsync: try to find dead links and textfiles Signed-off-by: Robin H. Johnson gentoo.org> scripts/copy_buildsync.sh | 35 +++ 1 file changed, 35 insertions(+) diff --git a/scripts/copy_buildsync.sh b/scripts/copy_buildsync.sh index 7b4dfbdc..e224f75e 100755 --- a/scripts/copy_buildsync.sh +++ b/scripts/copy_buildsync.sh @@ -164,10 +164,12 @@ process_arch() { # New variant preserve code find_variants=( '(' -iname '*.iso' -o -name 'netboot-*' -o "${EXTENSIONS[@]}" ')' ) variants=$(find 20* "${find_variants[@]}" -printf '%f\n' 2>/dev/null | sed -e 's,-20[012][0-9]\{5\}.*,,g' -r | sort -u) + # This file specifies which variants are still in use. keepfile="${tmpdir}/.keep.${ARCH}.txt" keepfile_tmp=$(mktemp -p "${tmpdir}" -t ".keep.${ARCH}.txt.XX") echo -n '' >"${keepfile_tmp}" chmod 644 "${keepfile_tmp}" + for v in $variants ; do # FIXME: trace the $a variable in this! variant_path=$(find 20* -iname "${v}-20*" "${find_variants[@]}" -print 2>/dev/null | sed -e "s,.*/$a/autobuilds/,,g" | sort -k1,1 -t/ | tail -n1 ) @@ -188,6 +190,8 @@ process_arch() { echo "${variant_path}" | sed -e 's,/.*,,g' -e 's,^,/,g' -e 's,$,$,g' >>"${keepfile_tmp}" mv -f "${f_tmp}" "${f}" done + + # Refresh keepfile mv -f "${keepfile_tmp}" "${keepfile}" # @@ -206,6 +210,37 @@ process_arch() { $DEBUGP rm $VERBOSEP -rf "$(pwd)"/"${i}" done + # Preserve the keepfile for review + cp -lf "${keepfile}" "${outdir}" + + # Find the dead links for cleanup + _dead="${tmpdir}"/dead-link + find -L $(pwd) -type l >"${_dead}" + if test -s "${_dead}"; then + echo "copy_buildsync: dead links to verify:" 1>&2 + cat "${_dead}" 1>&2 + fi + + # Find the dead latest txt files + _dead="${tmpdir}"/dead-latest + for f in $(find "${outdir}" -name 'latest*txt' ) ; do + d=$(dirname $f) + find $d \ + | fgrep -f <(awk '/^#/{next} {print $1}' $f) \ + | sed "s,${d}/,,g" \ + | sort \ + | comm -13 \ + - \ + <(sort $f |grep -v -e '^#' |awk '{print $1}') \ + | fgrep -l -f - $f \ + | xargs -n1 --no-ruN-if-empty readlink -f + done >"${_dead}" + if test -s "${_dead}"; then + echo "copy_buildsync: dead latest*txt files to verify:" 1>&2 + cat "${_dead}" 1>&2 + fi + + # Cleanup tmpdir $DEBUGP rm $VERBOSEP -rf "${tmpdir}" else
[gentoo-commits] repo/gentoo:master commit in: dev-vcs/git/
commit: 745a5e2a181fbc3b6c4556d209c2913e551ab8fb Author: Robin H. Johnson gentoo org> AuthorDate: Wed Nov 10 06:33:41 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Wed Nov 10 06:33:41 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=745a5e2a dev-vcs/git: bump Signed-off-by: Robin H. Johnson gentoo.org> dev-vcs/git/Manifest | 3 + dev-vcs/git/git-2.34.0_rc2.ebuild | 667 ++ 2 files changed, 670 insertions(+) diff --git a/dev-vcs/git/Manifest b/dev-vcs/git/Manifest index 433f532cfd2..77910d53f7e 100644 --- a/dev-vcs/git/Manifest +++ b/dev-vcs/git/Manifest @@ -2,11 +2,14 @@ DIST git-2.31.1.tar.xz 6413368 BLAKE2B 2d40aa3e5336e57b3cab42c36dd07698be7a811e2 DIST git-2.32.0.tar.xz 6551348 BLAKE2B 546203ce3f749ba806866a9e9767bc807794cec435fd0b60306ae6cd2b1b17a0159ef9774c79c4f59d0dba45b36941085b55f103e1820450d560bffa41d1058f SHA512 1ab3e7022ccee411d14a7da5c37d6259ef5c0f85ebed8f49698e25c65cbc7a46f8096919fcb6568360bfe284dd7475b596eee1a167db966096255a405853837c DIST git-2.33.1.tar.xz 6558636 BLAKE2B f4959d5309f85e063448673a3f06f1d3cdd65ced5f5173cfe5a38df3b5547cae1c08275bda02e48307e8290628735e2ea1ff4962e7cd29b252a6aa4d4a15 SHA512 16d417183232e1057bea754d59cdf4bbacc5f1527d1de6ee04cdd293a2512bfa7208e20f6130816605528b59cb1bc3188c5bddf1a42c1413095ee74e44dd2f91 DIST git-2.34.0.rc1.tar.xz 6596708 BLAKE2B eb55ebb8c48650759aa2224f4685f4a53ecf5d21d7ccee71f45854789f79b62fdc7033762a3382e1e7f2c1cc007558cfaa166b9d5a6d1d588474c72380fd27a9 SHA512 2eaf7431869e52096e8317b8d0630f70a5f09f6bcc8b6567c6cb7e6eb283ec14c415ca0959f21c1b04c537afe08ddb79457199833005af92b2e716ccfe14a603 +DIST git-2.34.0.rc2.tar.xz 6597020 BLAKE2B f683f93ce74eface8bd2023c21718d59297a0fa7102600692e1712bbcca6ad49556a85d8710f1e9e186e216cc28b0f3acf60b50f450f8a48bf896b7fbf1317b0 SHA512 ab28dd1f7f788b0e1177b8024e646a154fa15e0294c1c7bdef6e40e19ade8bbcc08d58ef8cf2bdaca2844f6acb60ad8824c59592077c5ee0da55ca3a67217fbe DIST git-htmldocs-2.31.1.tar.xz 1357592 BLAKE2B 54b48cfe2bb8e5dad9fdff862aa91e5805b0cd331b459d51a71ed913ca68d1aea6c6c69cfadbe8b6101b4d7be63c3811027a2ed42f9d2b0d3509664726b8ad78 SHA512 d243f4e3047c0e29bdd9127ff529c7fab5ebf40a4afaa04c3a9261ae398aa61c16a4413b7bf580c7f874d632b866908d92322ea0502141d811b78b7636c8d28b DIST git-htmldocs-2.32.0.tar.xz 1381664 BLAKE2B d1b47aa99d32a252fd20df26eff44a558044f3a389379b161bb43621eb28375eb0621969849a31938ba7fc9fc58b140d27d703559ea5735d0a0ffd2e93cd9692 SHA512 12b84e342f0d19afe385ab8a685ae625e86c3295d1555992e0c427b361aa2cdfc89a679e7dbc468d3568a325dafbf699468aadcdb02f93e372eff3dd96a7cf7f DIST git-htmldocs-2.33.1.tar.xz 1396744 BLAKE2B cbd65cf08fc7ea466fcd72820ba3e2135ade37f69c436a4ee7276dc71fb62f6270b71e2f46d981f5681a0fd3c30613d61680c2ef2460d0d7d292f7455e114128 SHA512 5b856b919067e1f644539d43a85aab6f602537ea0970b6248b471e3fa6756a8494f0525a69d22ad3795fcf9e106ff8439e0f6716ba0b8c895d7aad8c59e5bd74 DIST git-htmldocs-2.34.0.rc1.tar.xz 1406144 BLAKE2B 49c8c1b134da39ac0ffa586f9270311c53cd3959cf746a810381a3ec501ab707296f79849314e56a68f7289dccc97250febc2679ee28fd7a3696911e9f573e72 SHA512 de4c7fc9fc24e407bab3abf504918b7b2d3e74567c25e574986f535187e586e7dde685829e321b7f289d1daa438a4339d125f527797f7fa40bd261fdb55ca3bf +DIST git-htmldocs-2.34.0.rc2.tar.xz 1406064 BLAKE2B d222eaaafbc8d4a50e829a397f88cce789fd52345a692b74905985122bc21c822e6ca28b72218f9554064b6207d992f484d3ef31da928bfc23812c4eff4940a5 SHA512 2143a3620dacc31439f2df5ff8210a53b152ef012b957ca94fe1574fcbf5701c22730b5856a613372006c98c5d24f43ec8c9b13b5fecbe4b8ab096dd4a585245 DIST git-manpages-2.31.1.tar.xz 487784 BLAKE2B 9fe67839cca51f18b0aca16678eadb9ee8e609cbbae26bf1804c39b8bf5415e1069cb50162b75f9f8ec69bd6511f271d3116ac33016af2e57e65b88ad6c4b165 SHA512 a5fb8a1c3f08707d4d2d835a55b295677559856984ffeeb650827b433625a74f22ef4aac10e1b14eba5860e11567543b146d52dd055b2613e5a510e0f4f3c3fd DIST git-manpages-2.32.0.tar.xz 491868 BLAKE2B 7598a864246aed771371924604ee13d3f51b839b10b254bb1159dd47266513f5cd6484aab200a7b4ed427edc76538a98e39a040a17201483965175f5e1c5f484 SHA512 5c9950bd5d6904972cddf4afad534197d843c0dee8198d14ec5a3448873cab37dac88295b2a4df3658749f048bda4800b54fdc850517be7208906c911832c66e DIST git-manpages-2.33.1.tar.xz 494288 BLAKE2B 1f8bd4f23de31a285d3f4327e562dddafdf9f28e8b36334e54f5e280c81fc8170e8b153ca42baa642d02d8e6fdfcac9a8fdd3cee1e32c29bcd53f689d1a6c463 SHA512 d465a7b491046b7a5da6ad1fc6c62b351c69905932e0672263de5a1d3abe1113660cff9fe30c7be1d1695c6170ceca5a11b3f65e9b2d1545f35cc653e4c6ad62 DIST git-manpages-2.34.0.rc1.tar.xz 497324 BLAKE2B 62c12441ed8053b6bf8023ccd37ef0830a7c604248a419a8472469d9eaf9cd6d7d5a358caba621140c9c66b8e60be7ed96d070318a2855c2b528b6023d7fc3e6 SHA512 c8662127936154fa6037460d6840095c3b9a2851baed4488c829453034d479bf780b5169bfe78f02e533e0dc804f0b4f64029a04dcb726236d7d6861a40ed62a +DIST git-manpages-2.34.0.rc2.tar.xz 49737
[gentoo-commits] repo/gentoo:master commit in: dev-libs/openssl/
commit: c308ac7ab8756cef0d918e5aa0bc211308dc14a7 Author: Robin H. Johnson gentoo org> AuthorDate: Fri Oct 22 18:44:04 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Oct 22 18:44:04 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c308ac7a dev-libs/openssl: drop USE=bindist Signed-off-by: Robin H. Johnson gentoo.org> dev-libs/openssl/openssl-1.1.1l-r1.ebuild | 279 ++ 1 file changed, 279 insertions(+) diff --git a/dev-libs/openssl/openssl-1.1.1l-r1.ebuild b/dev-libs/openssl/openssl-1.1.1l-r1.ebuild new file mode 100644 index 000..3b4a73bfd28 --- /dev/null +++ b/dev-libs/openssl/openssl-1.1.1l-r1.ebuild @@ -0,0 +1,279 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="7" + +inherit flag-o-matic toolchain-funcs multilib-minimal + +MY_P=${P/_/-} + +DESCRIPTION="full-strength general purpose cryptography library (including SSL and TLS)" +HOMEPAGE="https://www.openssl.org/; +SRC_URI="mirror://openssl/source/${MY_P}.tar.gz" + +LICENSE="openssl" +SLOT="0/1.1" # .so version of libssl/libcrypto +[[ "${PV}" = *_pre* ]] || \ +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~x86-linux" +IUSE="+asm elibc_musl rfc3779 sctp cpu_flags_x86_sse2 sslv3 static-libs test tls-compression tls-heartbeat vanilla" +RESTRICT="!test? ( test )" + +RDEPEND=">=app-misc/c_rehash-1.7-r1 + tls-compression? ( >=sys-libs/zlib-1.2.8-r1[static-libs(+)?,${MULTILIB_USEDEP}] )" +DEPEND="${RDEPEND}" +BDEPEND=" + >=dev-lang/perl-5 + sctp? ( >=net-misc/lksctp-tools-1.0.12 ) + test? ( + sys-apps/diffutils + sys-devel/bc + sys-process/procps + )" +PDEPEND="app-misc/ca-certificates" + +PATCHES=( + "${FILESDIR}"/${PN}-1.1.0j-parallel_install_fix.patch #671602 + "${FILESDIR}"/${PN}-1.1.1i-riscv32.patch +) + +S="${WORKDIR}/${MY_P}" + +# force upgrade to prevent broken login, bug 696950 +RDEPEND+=" !/dev/null) + if [[ -z "${sctp_auth_status}" ]] || [[ ${sctp_auth_status} != 1 ]]; then + die "FEATURES=test with USE=sctp requires net.sctp.auth_enable=1!" + fi + fi +} + +src_prepare() { + # allow openssl to be cross-compiled + cp "${FILESDIR}"/gentoo.config-1.0.2 gentoo.config || die + chmod a+rx gentoo.config || die + + # keep this in sync with app-misc/c_rehash + SSL_CNF_DIR="/etc/ssl" + + # Make sure we only ever touch Makefile.org and avoid patching a file + # that gets blown away anyways by the Configure script in src_configure + rm -f Makefile + + if ! use vanilla ; then + if [[ $(declare -p PATCHES 2>/dev/null) == "declare -a"* ]] ; then + [[ ${#PATCHES[@]} -gt 0 ]] && eapply "${PATCHES[@]}" + fi + fi + + eapply_user #332661 + + if use test && use sctp && has network-sandbox ${FEATURES}; then + ebegin "Disabling test '80-test_ssl_new.t' which is known to fail with FEATURES=network-sandbox" + rm test/recipes/80-test_ssl_new.t || die + eend $? + fi + + # make sure the man pages are suffixed #302165 + # don't bother building man pages if they're disabled + # Make DOCDIR Gentoo compliant + sed -i \ + -e '/^MANSUFFIX/s:=.*:=ssl:' \ + -e '/^MAKEDEPPROG/s:=.*:=$(CC):' \ + -e $(has noman FEATURES \ + && echo '/^install:/s:install_docs::' \ + || echo '/^MANDIR=/s:=.*:='${EPREFIX}'/usr/share/man:') \ + -e "/^DOCDIR/s@\$(BASENAME)@&-${PVR}@" \ + Configurations/unix-Makefile.tmpl \ + || die + + # quiet out unknown driver argument warnings since openssl + # doesn't have well-split CFLAGS and we're making it even worse + # and 'make depend' uses -Werror for added fun (#417795 again) + [[ ${CC} == *clang* ]] && append-flags -Qunused-arguments + + append-flags -fno-strict-aliasing + append-flags $(test-flags-CC -Wa,--noexecstack) + append-cppflags -DOPENSSL_NO_BUF_FREELISTS + + # Prefixify Configure shebang (#141906) + sed \ + -e "1s,/usr/bin/env,${EPREFIX}&," \ + -i Configure || die + # Remove test target when FEATURES=test isn't set + if ! use test ; then + sed \ + -e '/^$config{dirs}/s@ "test",@@' \ +
Re: [gentoo-dev] [PATCH] 2021-10-17-openssl-bindist-removal: openssl USE=bindist removal
On Sun, Oct 17, 2021 at 04:33:17PM -0700, robb...@gentoo.org wrote: > From: "Robin H. Johnson" > > Signed-off-by: Robin H. Johnson > --- > .../2021-10-17-openssl-bindist-removal.en.txt | 38 +++ > 1 file changed, 38 insertions(+) > create mode 100644 > 2021-10-17-openssl-bindist-removal/2021-10-17-openssl-bindist-removal.en.txt No responses, so merged. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-commits] data/gentoo-news:master commit in: 2021-10-17-openssl-bindist-removal/
commit: e91fb8d1fae984eead80975412f3a1029ac099ab Author: Robin H. Johnson gentoo org> AuthorDate: Sun Oct 17 23:32:33 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Fri Oct 22 18:16:11 2021 + URL:https://gitweb.gentoo.org/data/gentoo-news.git/commit/?id=e91fb8d1 2021-10-17-openssl-bindist-removal: openssl USE=bindist removal Signed-off-by: Robin H. Johnson gentoo.org> .../2021-10-17-openssl-bindist-removal.en.txt | 38 ++ 1 file changed, 38 insertions(+) diff --git a/2021-10-17-openssl-bindist-removal/2021-10-17-openssl-bindist-removal.en.txt b/2021-10-17-openssl-bindist-removal/2021-10-17-openssl-bindist-removal.en.txt new file mode 100644 index 000..ca6c6e6 --- /dev/null +++ b/2021-10-17-openssl-bindist-removal/2021-10-17-openssl-bindist-removal.en.txt @@ -0,0 +1,38 @@ +Title: dev-libs/openssl USE=bindist removal +Author: Robin H. Johnson +Posted: 2021-10-17 +Revision: 1 +News-Item-Format: 2.0 +Display-If-Installed: dev-libs/openssl[bindist] + +On 2021-11-19, the base-system team will remove USE=bindist +behavior from dev-libs/openssl, per bug #762850 [1]. + +Users should not experience any ABI incompatibilities that +require recompilation when moving from +dev-libs/openssl[bindist] to dev-libs/openssl[-bindist]. + +However, moving back in future may recompile if any binaries +of their systems depend on the additional symbols available +with USE=-bindist. + +USE=bindist on dev-libs/openssl historically applied RedHat +work, called hobble-openssl [2], that was intended to make +OpenSSL "safe" to distribute with regards to various +patents, in the opinion of RedHat's legal counsel. The +hobble-openssl, in it's last iterations, it greatly +restricted which parts of EC (elliptic curve) were available +[3][4] + +Debian & Ubuntu do not apply any similar behavior, and +Gentoo intends to follow Debian's lead with regards to +OpenSSL hobble-openssl moving forward. + +[1] https://bugs.gentoo.org/762850 +[2] Multiple files: +https://src.fedoraproject.org/rpms/openssl/blob/rawhide/f/hobble-openssl + https://src.fedoraproject.org/rpms/openssl/blob/rawhide/f/ectest.c + https://src.fedoraproject.org/rpms/openssl/blob/rawhide/f/ec_curve.c + https://src.fedoraproject.org/rpms/openssl/blob/rawhide/f/0011-Remove-EC-curves.patch +[3] https://archives.gentoo.org/gentoo-dev/message/f0d16240bb0dd1ff38fb5223bec810ab +[4] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening#system-wide-crypto-policies_using-the-system-wide-cryptographic-policies
[gentoo-commits] repo/gentoo:master commit in: dev-ruby/httpclient/
commit: 95813829db1b5ed24e91076a36f43d9c34392c7d Author: Robin H. Johnson gentoo org> AuthorDate: Thu Oct 14 19:59:15 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Thu Oct 14 20:07:45 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=95813829 dev-ruby/httpclient: revbump w/ to use system certificates httpclient bundled really old CA certificates: 6-year & 11-year old, and used them by default, which broke LetsEncrypt consumers. Replace the bundles with symlink to the system copy, which is kept up to date. Closes: https://bugs.gentoo.org/818025 Signed-off-by: Robin H. Johnson gentoo.org> dev-ruby/httpclient/httpclient-2.8.3-r1.ebuild | 78 ++ 1 file changed, 78 insertions(+) diff --git a/dev-ruby/httpclient/httpclient-2.8.3-r1.ebuild b/dev-ruby/httpclient/httpclient-2.8.3-r1.ebuild new file mode 100644 index 000..36a0fd386fb --- /dev/null +++ b/dev-ruby/httpclient/httpclient-2.8.3-r1.ebuild @@ -0,0 +1,78 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=5 + +USE_RUBY="ruby26 ruby27 ruby30" + +RUBY_FAKEGEM_TASK_TEST="-Ilib test" +RUBY_FAKEGEM_TASK_DOC="doc" + +RUBY_FAKEGEM_DOCDIR="doc" + +RUBY_FAKEGEM_EXTRADOC="CHANGELOG.md README.md" + +RUBY_FAKEGEM_GEMSPEC="httpclient.gemspec" + +inherit ruby-fakegem eapi8-dosym + +DESCRIPTION="'httpclient' gives something like the functionality of libwww-perl (LWP) in Ruby" +HOMEPAGE="https://github.com/nahi/httpclient; +SRC_URI="https://github.com/nahi/httpclient/archive/v${PV}.tar.gz -> ${P}.tgz" + +LICENSE="Ruby" +SLOT="0" + +KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~ppc ~ppc64 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x64-solaris ~x86-solaris" +IUSE="" + +ruby_add_rdepend "virtual/ruby-ssl" + +ruby_add_bdepend "doc? ( dev-ruby/rdoc )" +ruby_add_bdepend "test? ( dev-ruby/test-unit dev-ruby/http-cookie )" + +all_ruby_prepare() { + rm Gemfile || die + sed -i -e '/[bB]undler/s:^:#:' Rakefile || die + + # Fix documentation task + sed -i -e 's/README.txt/README.md/' Rakefile || die + + # Remove mandatory CI reports since we don't need this for testing. + sed -i -e '/reporter/s:^:#:' Rakefile || die + + # Remove mandatory simplecov dependency + sed -i -e '/[Ss]imple[Cc]ov/ s:^:#:' test/helper.rb || die + + # Comment out test requiring network access that makes assumptions + # about the environment, bug 395155 + sed -i -e '/test_async_error/,/^ end/ s:^:#:' test/test_httpclient.rb || die + + # Skip tests using rack-ntlm which is not packaged. Weirdly these + # only fail on jruby. + rm test/test_auth.rb || die + + # Skip test failing due to hard-coded expired certificate + sed -i -e '/test_verification_without_httpclient/,/^ end/ s:^:#:' test/test_ssl.rb || die + + # Skip test depending on obsolete and vulnerable SSLv3 + sed -i -e '/test_no_sslv3/,/^ end/ s:^:#:' test/test_ssl.rb || die + + # Do not use 11-year-old bundled certificates! + # fix this copy so it doesn't fail tests + ln -sf "${EPREFIX}"/etc/ssl/certs/ca-certificates.crt ./dist_key/cacerts.pem + ln -sf "${EPREFIX}"/etc/ssl/certs/ca-certificates.crt ./lib/httpclient/cacert.pem +} + +each_ruby_test() { + ${RUBY} -Ilib:test:. -e 'gem "test-unit"; Dir["test/test_*.rb"].each{|f| require f}' || die +} + +each_ruby_install() { + each_fakegem_install + # Do not use 11-year-old bundled certificates! + # fix this copy for production systems + # do not ship the cacert1024.pem at all anymore, nobody should use RSA1024 certs! + rm -f "${ED}/$(ruby_fakegem_gemsdir)/gems/${RUBY_FAKEGEM_NAME}-${RUBY_FAKEGEM_VERSION}/lib/httpclient/"{cacert.pem,cacert1024}.pem + dosym8 -r /etc/ssl/certs/ca-certificates.crt $(ruby_fakegem_gemsdir)/gems/${RUBY_FAKEGEM_NAME}-${RUBY_FAKEGEM_VERSION}/lib/httpclient/cacert.pem +}
[gentoo-commits] data/api:master commit in: files/mirrors/
commit: 846f4b6a4f5154f60962e3a093d7b5e9409f405c Author: Robin H. Johnson gentoo org> AuthorDate: Thu Oct 14 04:28:44 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Thu Oct 14 04:28:44 2021 + URL:https://gitweb.gentoo.org/data/api.git/commit/?id=846f4b6a mirrors: cs.utah.edu gone per email to www@ Signed-off-by: Robin H. Johnson gentoo.org> files/mirrors/distfiles.xml | 4 1 file changed, 4 deletions(-) diff --git a/files/mirrors/distfiles.xml b/files/mirrors/distfiles.xml index 7966f8f..64bef94 100644 --- a/files/mirrors/distfiles.xml +++ b/files/mirrors/distfiles.xml @@ -43,10 +43,6 @@ vim: ft=xml et ts=2 sts=2 sw=2: TDS Internet Services http://gentoo.mirrors.tds.net/gentoo - - University of Utah - http://gentoo.cs.utah.edu/ - Rochester Institute of Technology https://mirrors.rit.edu/gentoo/
[gentoo-commits] repo/gentoo:master commit in: net-misc/s3cmd/
commit: f9417135328ce427a8d3341c0bc1517f9ec1192f Author: Robin H. Johnson gentoo org> AuthorDate: Wed Oct 13 16:52:54 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Wed Oct 13 16:52:54 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f9417135 net-misc/s3cmd: one more cleanup tweak Signed-off-by: Robin H. Johnson gentoo.org> net-misc/s3cmd/s3cmd-2.2.0.ebuild | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/net-misc/s3cmd/s3cmd-2.2.0.ebuild b/net-misc/s3cmd/s3cmd-2.2.0.ebuild index a43725c2545..e69e258d664 100644 --- a/net-misc/s3cmd/s3cmd-2.2.0.ebuild +++ b/net-misc/s3cmd/s3cmd-2.2.0.ebuild @@ -29,6 +29,6 @@ S="${WORKDIR}/${P/_/-}" PATCHES=( ) src_install() { - default - rm -rf "${ED}/usr/share/doc/packages/s3cmd/" + distutils-r1_src_install + rm -rf "${ED}/usr/share/doc/packages" }
[gentoo-commits] repo/gentoo:master commit in: net-misc/s3cmd/
commit: ac809cc030b76ef0572db8bf0dcc082ebb777e08 Author: Robin H. Johnson gentoo org> AuthorDate: Wed Oct 13 16:49:28 2021 + Commit: Robin H. Johnson gentoo org> CommitDate: Wed Oct 13 16:51:11 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ac809cc0 net-misc/s3cmd: bump, contains more Python 3.9 fixes Closes: https://bugs.gentoo.org/680444 Closes: https://bugs.gentoo.org/809329 Acked-by: Richard Freeman gentoo.org> Signed-off-by: Robin H. Johnson gentoo.org> net-misc/s3cmd/Manifest | 1 + net-misc/s3cmd/s3cmd-2.2.0.ebuild | 34 ++ 2 files changed, 35 insertions(+) diff --git a/net-misc/s3cmd/Manifest b/net-misc/s3cmd/Manifest index 0342ca043bf..0692454bfea 100644 --- a/net-misc/s3cmd/Manifest +++ b/net-misc/s3cmd/Manifest @@ -1 +1,2 @@ DIST s3cmd-2.1.0.tar.gz 127120 BLAKE2B 4282f616eb7ca97fa0d529a2c5acc1359f8d182b62e1fa7d3f7401a93852a4e0724363a4c6f0a6520d6aef290d64e1775cb252fc0fbaa4b94762402c381e SHA512 98156218c4379e233185662d29fa4299b4a4e45a0fe143a145f30ff7d03362a4558b5fff5e5da0da850f5cce2c760fcd031bcf5ff7a6bd2c6352259e791d65e6 +DIST s3cmd-2.2.0.tar.gz 134390 BLAKE2B d578aa13a7b8599c70dc6daa5d21950331b0b07278479d1f3947e6be78a9bd108c7f8ea6f198fa518dfa6ad44d907d979a29d5d9f1a15e4f73484fcebb118225 SHA512 07b2410554233b435b3476e09fd14354abaa19374cc1211f861147023470599483c18d213a44b5c9aee32d71b5a4bc5d9ce25721fb077cbadfd208d457e13845 diff --git a/net-misc/s3cmd/s3cmd-2.2.0.ebuild b/net-misc/s3cmd/s3cmd-2.2.0.ebuild new file mode 100644 index 000..a43725c2545 --- /dev/null +++ b/net-misc/s3cmd/s3cmd-2.2.0.ebuild @@ -0,0 +1,34 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +PYTHON_COMPAT=( python3_7 python3_8 python3_9 ) +PYTHON_REQ_USE="xml" + +inherit distutils-r1 + +DESCRIPTION="Command line client for Amazon S3" +HOMEPAGE="https://s3tools.org/s3cmd; +SRC_URI="mirror://sourceforge/s3tools/${P/_/-}.tar.gz" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~amd64 ~ia64 ~x86 ~amd64-linux ~x64-macos" + +RDEPEND=" + || ( + dev-python/python-magic[${PYTHON_USEDEP}] + sys-apps/file[python,${PYTHON_USEDEP}] + ) + dev-python/python-dateutil[${PYTHON_USEDEP}] + " + +S="${WORKDIR}/${P/_/-}" + +PATCHES=( ) + +src_install() { + default + rm -rf "${ED}/usr/share/doc/packages/s3cmd/" +}
Re: [gentoo-dev] [PATCH 1/3] cvs.eclass: Support EAPI 8, drop EAPI 6 and older
Can we verify the consumers of this eclass are indeed still using CVS in the year 2021? If they are not, I think it would be reasonable to consider removing CVS from the tree on 2022/01/01. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
Re: [gentoo-dev] moving kernel config checks forward: potential config checking tool
On Mon, Sep 27, 2021 at 11:47:38PM +0200, Michał Górny wrote: > > Can we consider moving the checks for set A somewhere else, such that we > > don't check the kernel config during package compile & install time, but > > only check it later? This also meaningfully resolves that cases where > > the system that has package building isn't where the packages are being > > used. > I'm not sure if I understand you correctly but if you mean not doing > checks before compiling/installing, then I have to disagree. There is > value in knowing about this kind of problems early (hey, that's why we > have pkg_pretend in the first place!) Ebuilds should be able to call the tool (but it could be made optional easily), which does the checks MORE efficiently than the present eclass code. The ebuilds would be responsible for suitable warnings or failures based on the tool's output. E.g. maybe you're in a rescue environment and you know the tooling will work fine on your final environment. > There's certainly value in knowing 'I need to rebuild my kernel' early > vs learning only after you've spent significant time waiting for some > package to build. One thing to this is if you're doing pkg_pretend for multiple packages in a single emerge call, the tool could greatly amortize the cost of the checks, as well as having them available after merge. Great thought I had would be this tool could ALSO run on boot and warn if some packages are unlikely to work -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature
[gentoo-dev] RFC: dev-libs/openssl USE=bindist removal
Deadline for responses: 2021/10/14! The Foundation would like to propose that RedHat/Fedora "hobble" patch presently applied when USE=bindist is true shall be removed from dev-libs/openssl. RedHat's stated reasons for the patch were originally to avoid any patent concerns, but they have also morphed over time to present some "insecure" things from being used entirely: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening "All ECC curves < 224 bits (since RHEL 6)" "All binary field ECC curves (since RHEL 6)" However, the Foundation would also like to be sure that no users feel that patchset provides something critical to their usage of Gentoo. If nobody speaks up as saying that the "hobble" patch is REQUIRED for their use cases, the Foundation proposes that usage of the patchset be dropped from the main tree. Any users who might be concerned about patent compliance are encouraged to do their own due diligence, as OpenSSL was the only Gentoo package that shipped this type of patch, and even Fedora's upstream did not completely patch out EC in other packages. Below shows which EC curves are present in major distributions. - RHEL/Fedora is the most restrictive list, with only 5 curves kept - OpenSUSE is next, with 41 curves - Gentoo, Debian, Ubuntu all have the same 88 curves available. Fedora # openssl ecparam -list_curves secp224r1 : NIST/SECG curve over a 224 bit prime field secp256k1 : SECG curve over a 256 bit prime field secp384r1 : NIST/SECG curve over a 384 bit prime field secp521r1 : NIST/SECG curve over a 521 bit prime field prime256v1: X9.62/SECG curve over a 256 bit prime field OpenSUSE Leap # openssl ecparam -list_curves secp112r1 : SECG/WTLS curve over a 112 bit prime field secp112r2 : SECG curve over a 112 bit prime field secp128r1 : SECG curve over a 128 bit prime field secp128r2 : SECG curve over a 128 bit prime field secp160k1 : SECG curve over a 160 bit prime field secp160r1 : SECG curve over a 160 bit prime field secp160r2 : SECG/WTLS curve over a 160 bit prime field secp192k1 : SECG curve over a 192 bit prime field secp224k1 : SECG curve over a 224 bit prime field secp224r1 : NIST/SECG curve over a 224 bit prime field secp256k1 : SECG curve over a 256 bit prime field secp384r1 : NIST/SECG curve over a 384 bit prime field secp521r1 : NIST/SECG curve over a 521 bit prime field prime192v1: NIST/X9.62/SECG curve over a 192 bit prime field prime192v2: X9.62 curve over a 192 bit prime field prime192v3: X9.62 curve over a 192 bit prime field prime239v1: X9.62 curve over a 239 bit prime field prime239v2: X9.62 curve over a 239 bit prime field prime239v3: X9.62 curve over a 239 bit prime field prime256v1: X9.62/SECG curve over a 256 bit prime field wap-wsg-idm-ecid-wtls6: SECG/WTLS curve over a 112 bit prime field wap-wsg-idm-ecid-wtls7: SECG/WTLS curve over a 160 bit prime field wap-wsg-idm-ecid-wtls8: WTLS curve over a 112 bit prime field wap-wsg-idm-ecid-wtls9: WTLS curve over a 160 bit prime field wap-wsg-idm-ecid-wtls12: WTLS curve over a 224 bit prime field brainpoolP160r1: RFC 5639 curve over a 160 bit prime field brainpoolP160t1: RFC 5639 curve over a 160 bit prime field brainpoolP192r1: RFC 5639 curve over a 192 bit prime field brainpoolP192t1: RFC 5639 curve over a 192 bit prime field brainpoolP224r1: RFC 5639 curve over a 224 bit prime field brainpoolP224t1: RFC 5639 curve over a 224 bit prime field brainpoolP256r1: RFC 5639 curve over a 256 bit prime field brainpoolP256t1: RFC 5639 curve over a 256 bit prime field brainpoolP320r1: RFC 5639 curve over a 320 bit prime field brainpoolP320t1: RFC 5639 curve over a 320 bit prime field brainpoolP384r1: RFC 5639 curve over a 384 bit prime field brainpoolP384t1: RFC 5639 curve over a 384 bit prime field brainpoolP512r1: RFC 5639 curve over a 512 bit prime field brainpoolP512t1: RFC 5639 curve over a 512 bit prime field SM2 : SM2 curve over a 256 bit prime field Gentoo, Ubuntu, Debian # openssl ecparam -list_curves secp112r1 : SECG/WTLS curve over a 112 bit prime field secp112r2 : SECG curve over a 112 bit prime field secp128r1 : SECG curve over a 128 bit prime field secp128r2 : SECG curve over a 128 bit prime field secp160k1 : SECG curve over a 160 bit prime field secp160r1 : SECG curve over a 160 bit prime field secp160r2 : SECG/WTLS curve over a 160 bit prime field secp192k1 : SECG curve over a 192 bit prime field secp224k1 : SECG curve over a 224 bit prime field secp224r1 : NIST/SECG curve over a 224 bit prime field secp256k1 : SECG curve over a 256 bit prime field secp384r1 : NIST/SECG curve over a 384 bit prime field secp521r1 : NIST/SECG curve over a 521 bit prime field prime192v1: NIST/X9.62/SECG curve over a 192 bit prime field prime192v2: X9.62 curve over a 192 bit prime field prime192v3: X9.62
[gentoo-dev] moving kernel config checks forward: potential config checking tool
I wanted to break the prior thread to discuss the root issue. We have some set of packages (A) which collectively depend on one or more kernel options being set in specific ways, and the options need to REMAIN set if you want the packages to continue work. There are also a subset of packages (B), usually kernel modules themselves that will outright fail to compile if specific options are/are not set. Can we consider moving the checks for set A somewhere else, such that we don't check the kernel config during package compile & install time, but only check it later? This also meaningfully resolves that cases where the system that has package building isn't where the packages are being used. This secondary tooling COULD be called from pkg_setup much less, and could do a much more efficient job of checking the state of multiple flags. At boot, it needs to load the present config into some easy to check for, and then it can be verified against in a lightweight manner. Also a lot easier for users to say "i accept the responsbility of my stuff breaking", AND for users to say "hey, why did package X broken when I rebooted into new kernel" (because some config option changed). It would need to keep long-term state about which packages want specific options set/unset/modular, as well as short-term state about the config from each boot. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: PGP signature