[gentoo-user] hardened vs -bin packages
Hello, I recently switched to an hardened 'profile'. I have several packages installed as -bin to reduce compile time: thunderbird-bin firefox-bin libreoffice-bin rust-bin I suppose I'd better use the non-bin version of at least the thunderbird and firefox ones, to take advantage of the hardened toolchain features for these internet-connected applications. I'm not so sure of libreoffice (which I use seldom and only for local documents) and rust. Opinions? thanks, raffaele
Re: [gentoo-user] hardened vs -bin packages
On Wed, 2023-11-15 at 09:00 +0100, ralfconn wrote: > I suppose I'd better use the non-bin version of at least the thunderbird > and firefox ones, to take advantage of the hardened toolchain features > for these internet-connected applications. I'm not so sure of > libreoffice (which I use seldom and only for local documents) and rust. If you're going to compile Firefox for hardening reasons, you should do the same with rust, since the former depends on the latter to build. Regarding libreoffice, I think it depends on where you're sourcing the documents from. If you never have to open a document from an unknown or untrusted source, then it might not matter.
[gentoo-user] Debugging NFS mounts
Hello list, My little server needs help with compiling, so I NFS-export /var (which has its own partition) to a chroot on my workstation. I mount all the partitions on both server and workstation. Then when I chroot, env-update hangs for ever. Well, over an hour anyway. Is it possible to export /var in this way? I can't see anything else wrong. -- Regards, Peter.
Re: [gentoo-user] Debugging NFS mounts
On Wed, Nov 15, 2023 at 6:29 PM Peter Humphrey wrote: > Hello list, > > My little server needs help with compiling, so I NFS-export /var (which > has > its own partition) to a chroot on my workstation. I mount all the > partitions > on both server and workstation. Then when I chroot, env-update hangs for > ever. > Well, over an hour anyway. > > Is it possible to export /var in this way? I can't see anything else wrong. > Did you run mount inside the chroot or outside of it? -- Alan McKinnon alan dot mckinnon at gmail dot com
Re: [gentoo-user] Debugging NFS mounts
On Wednesday, 15 November 2023 17:04:27 GMT Alan McKinnon wrote: > On Wed, Nov 15, 2023 at 6:29 PM Peter Humphrey > > wrote: > > Hello list, > > > > My little server needs help with compiling, so I NFS-export /var (which > > has > > its own partition) to a chroot on my workstation. I mount all the > > partitions > > on both server and workstation. Then when I chroot, env-update hangs for > > ever. > > Well, over an hour anyway. > > > > Is it possible to export /var in this way? I can't see anything else > > wrong. > > Did you run mount inside the chroot or outside of it? Outside. That's how it's worked everywhere else. -- Regards, Peter.