Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?
On Friday, 6 April 2018 19:20:09 BST Grant Taylor wrote: > On 04/06/2018 11:58 AM, Mick wrote: > > I think you mean IKEv2 + IPSec? > > I don't remember IKE involved the last time I had to manually > set up an IPSec connection between two Windows systems (or Windows and a > Netgear router). I think it was /completely/ manual and PSK. Domestic grade routers which offer IKEv1, typically use PSK for authentication, not TLS certificates. The PSK is what IKE uses in userspace to establish a secure connection with authentication between peers for the purpose of exchanging the IPSec keys to encrypt the tunnel with. If you check the 2nd sentence in the wiki page below, it confirms MSWindows L2TP/IPSec uses IKEv1 to exchange the IPSec keys: https://wiki.gentoo.org/wiki/IPsec_L2TP_VPN_server#IPsec > > IKEv2 is used to exchange keys and IPSec is used to set up and encrypt the > > tunnel itself. The tunnel is operating at layer 2, so TCP/UDP/ICMP will > > all be encrypted when sent through through the IPSec encrypted tunnel. > > I remember doing a little bit with IKE 10+ years ago back when it was > OpenSWAN / FreeSWAN. OpenSWAN was forked into LibreSWAN and FreeSWAN is now called StrongSWAN. Anyway, part of the IKEv2 standard is to offer support for mobile and multihomed users (MOBIKE). Although IKE operates in userspace, the IPSec stack is in kernelspace and its performance superior to userspace VPN technologies. Apparently Wireguard is even more efficient than the IPSec's xfrm/netkey, but I have not tried it out yet. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?
On Friday, 6 April 2018 00:10:00 BST Grant Taylor wrote: > On 04/05/2018 03:51 AM, gevisz wrote: > > Yes, the Host is running Windows. > > Seeing as how both the ""Host and the ""Client are running Windows, I > would think seriously about trying to leverage Windows' built in VPN > capabilities. > > The following things come to mind: > > - (raw) IPSec - this might be somewhat challenging b/c reasons I think you mean IKEv2 + IPSec? IKEv2 is used to exchange keys and IPSec is used to set up and encrypt the tunnel itself. The tunnel is operating at layer 2, so TCP/UDP/ICMP will all be encrypted when sent through through the IPSec encrypted tunnel. > - L2TP+IPSec - probably less challenging b/c of wizards This is using L2TP for encapsulating the frames + IKEv1 for secure key exchange + IPsec for encryption of the L2TP tunnel. > - PPTP - just don't unless you haveto Well said: https://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol#Security It is an obsolete method with poor security. I would not use it under any circumstances, unless security is of no importance. > I'd encourage your friend to check out the VPN capabilities built into > Windows. He may need to install / configure (R)RAS to enable the features. As I mentioned before, there is also IKEv2+IPSec, which allows the client to roam between networks without dropping the connection. Finally, there is SSTP encrypting PPP frames within TLS. I don't know why one would use this instead of OpenVPN, except that it comes as part of the MSWindows package, while OpenVPN has to be installed separately. > In my experience, using native features that come from the software > vendor is often simpler to maintain long term. +1 They are also easier to set up initially, because both MSWindows peers will use the same combo of encryption suites, ciphers, etc. Half of the pain of getting MSWindows to work with a Linux VPN gateway is often finding how to configure the cipher, hash and X509v3 extensions of a TLS certificate in a way that MSWindows will not barf; e.g. IIRC, last time I looked at a Windows 7 IKEv2/IPSec VPN, the TLS certificates would only accept AES128 keys and SHA1. Anything more onerous would not be accepted by the MSoft TLS key manager. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] [OT] Re: Firefox and addons no longer supported question
On Thursday, 5 April 2018 18:12:06 BST Peter Humphrey wrote: > On Thursday, 5 April 2018 12:47:43 BST Wol's lists wrote: > > But again this comes down to another moan of mine - why is "The Queen's > > English" considered "correct", while let's say Yorkshire Dialect is > > considered "wrong", when said dialect is hundreds of years old but the > > Queen's English has probably only been around for about a century. > > Correctness is not a helpful concept in a living language, not least because > it changes from decade to decade. Besides, are you confusing Queen's > English with Received Pronunciation? Quite. As far as accents goes my understanding is they are essentially one and the same and were shaped by the Hanoverian/Saxe-Coburg-Gotha German accents of the English Royals and their courtiers. The way I see it, the Saxons won the pronunciation war over the Vikings. :-) -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] List of Intel CPUs that wont get Meltdown/Spectre fixes
On Thursday, 5 April 2018 10:20:59 BST Adam Carter wrote: > https://newsroom.intel.com/wp-content/uploads/sites/11/2018/04/microcode-upd > ate-guidance.pdf > > From > https://www.theregister.co.uk/2018/04/04/intel_spectre_microcode_updates/ > > "The new guidance > <https://newsroom.intel.com/wp-content/uploads/sites/11/2018/04/microcode-up > date-guidance.pdf>, issued April 2, adds a “stopped” status to Intel’s > “production status” category in its array of available Meltdown and Spectre > <https://www.theregister.co.uk/2018/01/04/intel_amd_arm_cpu_vulnerability/> > security updates. "Stopped" indicates there will be no microcode patch to > kill off Meltdown and Spectre." > > " "Stopped" CPUs that won’t therefore get a fix are in the Bloomfield, > Bloomfield Xeon, Clarksfield, Gulftown, Harpertown Xeon C0 and E0, Jasper > Forest, Penryn/QC, SoFIA 3GR, Wolfdale, Wolfdale Xeon, Yorkfield, and > Yorkfield Xeon families. The new list includes various Xeons, Core CPUs, > Pentiums, Celerons, and Atoms – just about everything Intel makes. > > Most the CPUs listed above are oldies that went on sale between 2007 and > 2011" Thanks for updating the gentoo-user M/L on this topic Adam. Does the lack of a microcode patch mean the in-kernel and other software fixes won't be sufficient to protect PCs running these old CPUs? I'm asking because I have a couple of old laptops I was hoping to get more mileage out of, at least until new generation CPUs become available. Preferably NOT Intel's. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?
On Thursday, 5 April 2018 11:28:07 BST gevisz wrote: > A small correction after a call to the friend: the VPN server should > be installed > on the Client and the VPN client should be installed on the Host. > > Becaule of the same reason it is impossible to set up VPN server on the IR. > > Moreover, IR is too simple to use it for setting up any server other then > NAT and, may be, port-forwarding. Your double NAT-ing arrangement hides the host twice over from the Internet. In addition, some of the domestic ISP providers also offer NAT'ed connections for their users. Some block specific ports/protocols for 'security purposes' and require you to upgrade your service contract for unfettered Internet connectivity. Assuming none of the above ISP restrictions apply in your case, you have the option of forwarding connections to the host through the IR. Single NAT e.g. between OR and IR is fine and NAT-T can be configured in most VPN technologies to address this. If you can configure the IR to expose the host via DMZ, or forward specific ports/protocols from OR to the host directly then most VPN technologies should work in principle. OpenVPN/SSTP is straight forward and for a single host (as opposed to a gateway) there's no benefit in trying to implement more complicated kernel based VPNs. For stronger OpenVPN crypto configuration have a look here: https://bettercrypto.org/static/applied-crypto-hardening.pdf but your security options will be limited by what MSWindows offers/allows. Post with particulars when you get that far and we can troubleshoot it further. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] [OT] Re: Firefox and addons no longer supported question
On Thursday, 5 April 2018 09:57:54 BST Peter Humphrey wrote: > On Wednesday, 4 April 2018 19:12:23 BST Wol's lists wrote: > > On 02/04/18 21:50, Philip Webb wrote: > > > 180402 Dale wrote: > > >> After each period at the end of a sentence, I put in two spaces, not > > >> one. > > >> Something I was taught years ago somewhere and still do. > > >> I only put one after a comma tho. > > > > > > That is correct professional secretarial style, which I always follow > > > too. > > > > I was taught to always start every paragraph with an indent. Which I > > believe is against "professional secretarial style". > > There seem to be two alternative styles: either indent the start of a > paragraph, or leave a blank line before it. I learned at an early age that > an indent marked a new para (not some empty space that usually just > happened to be left at the end of the line before) - I remember arguing > that point at primary school, some time in 1952 - 1954. I don't know the correct terminology, but if the title is centre-aligned the paragraphs' first line ought to have a single space indent. When I was in primary school this was the prevailing style. With the advent of word processors the titles as well as the paragraphs became left-aligned with no space at their start, but this may have been a typesetting style BC (Before Computers). :-) -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] [OT] What is the best open-source VPN server for Linux?
On Wednesday, 4 April 2018 23:02:20 BST Grant Taylor wrote: > On 04/04/2018 02:18 PM, gevisz wrote: > > A friend of mine asked me to recommend him an open-source VPN-server > > for Linux but unfortunately I never used one. > > That's a loaded ask. > > > After some googling, I have found OpenVPN but do not know if it is the > > best choice that suits his purposes, namely to access local network that > > does not have its own fixed IP from the outside. > > Okay This may be solvable, if the public facing gateway can be configured to forward the requisite ports/protocols to the LAN where the host is located. > > To be more precise: the local network to be accessed to from the outside > > is part of another local network. The latter (outer) network has its > > own fixed IP but the former (inner) network gets its IP via DHCP. So, > > it is impossible to connect to a computer in the inner network from the > > outside directly. > > Is this toplolgy accurate? > > (Client)---(Internet)---(OR)---(IR)---(Host) The OR can port forward the incoming VPN connection to the IR. The IR can then act as a VPN gateway for the inner LAN. > I'm guessing that your friend (client) wants to access something (host) > on the inner network. But to do so requires passing through the > Internet through Outer Router (with a static IP on the outside (left)) > and through the Inner Router (which has a dynamic IP on the outside > (left) obtained via DHCP)). Is that correct? > > What sort of control does your friend have on the OR & IR? > > Is NAT in use on either OR or IR? > > What sort of > > > The computer in local network to be connected runs Windows. The said > > friend of mine have tried to run some VPN server from Windows but it > > somehow hangs the "inner" computer when his "outer" computer has problems > > connecting to the Internet. > > Are you saying that the Host in the diagram above is running Windows? > Or are you referring to a different system? > > > So, now his idea is > > 1) to run a virtual machine in the "inner" (Windows) computer, > > 2) to install into this virtual machine very lightweight Linux server > > only to run in it a VPN-server that should help him to connect from the > > outside to the "inner" host (Windows) computer, which has its fixed IP > > within the inner local network. > > The VM may or may not be needed. > > Assuming that NAT is in play on OR and IR (worst case), then just about > /any/ form of VPN initiating from the outside will be fraught with > uphill battles. > > It is likely possible that your friend can reconfigure both OR and IR to > forward a port from the Internet to Host. But that will likely mean > that IR will need to have a static IP on it's outside interface. - I'm > guessing this can't be done or that it would have already been done. > > I think that your friend's best bet is to have the IR initiate an > outbound VPN to something on the Internet that the Client can then > initate connections to. (I'm happily using a $5/month Linode VPS to do > this.) > > There may be ways to make this work without having the Host initiate > outbound connections, but I'm not sure what they would be. > > As for which VPN, a number of people like OpenVPN. I personally prefer > OpenSSH's ability to do a routed (L3) (or bridged L2) VPN. (I've got > SSH exposed already, so it's one less port to expose.) I see a number > of people bragging about WireGuard. Of course there are the old PPTP / > L2TP / IPSec, though I would avoid them for this install. I'm sure > there are a number of other VPN technologies that I'm not thinking of. PPTP has been insecure for years and best be avoided. L2TP within IPSec is OK, but check what crypto the MSWindows uses. Last time I looked Win7 was not strong enough. IKEv2 + IPSec with strong crypto for both, is my personal preference for gateway-to-gateway VPNs. MSWindows also has SSTP (because MSoft had to create their own clone of OpenVPN). I think there's a Linux VPN client which will work with that: net-misc/sstp-client but have never tried it. Of course, if the above network topology suggested by Grant is correct, then you will likely be limited by whatever VPN software comes with IR. In all cases, make sure you use TLS RSA/SHA2 certificates for both client and VPN gateway authentication. Finally, check out Wireguard. It was designed from the ground up to overcome the complexity of previous VPN solutions. I have not tried it out yet, but will be next time I have to set up a VPN tunnel with a non-legacy router. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] xterm ignoring "XTerm*titeInhibit: true" in .Xresources
On Tuesday, 3 April 2018 21:50:29 BST Walter Dnes wrote:
> Lately, I've noticed that text apps under xterm snap back to the
> original screen after the app finishes. This doesn't happen with all
> apps. When I hit "q" in "top", the output stays on the screen. But
> other apps like "mtr" and "vim" and "less" restore the screen from which
> they were launched, which is extremely annoying.
>
> A long time ago I ran into this problem and was advised to add
> "XTerm*titeInhibit: true" in .Xresources. It seems to have stopped
> working recently. Last night on a web forum people were comparing
> response times from 1.1.1.1 DNS server. I ran "mtr" in xterm but the
> output would disapper entirely when I hit "q". I managed to freeze the
> output with {CTRL}{S} so I could do a copy/paste into a post. But I'd
> like a clean solution rather than a clunky workaround.
I don't know the answer to your question, but for mtr at least you could use
the -r option to produce a report of the mtr output.
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
Re: [gentoo-user] Kmail message components
On Tuesday, 3 April 2018 23:26:45 BST Marc Joliet wrote: > Am Mittwoch, 4. April 2018, 00:11:11 CEST schrieb Elijah Mark Anderson: > > On Tuesday, April 3, 2018 4:28:40 PM CDT Marc Joliet wrote: > > > I'm not sure what you mean. I use KMail 5.7.3, too, and still have a > > > "view > > > source" menu entry under "Message", or whatever it's called in English > > > locales (in German it's "Nachricht" -> "Nachrichtencode ansehen"). > > > > > > HTH > > > > I think they're talking about the popup/context menu when you right-click > > in the message preview pane. > > Ah! Yeah, now I remember, it did indeed disappear at some point :( . Yes, exactly. When 'View Source' disappeared from the context menu of the preview pane, I went fishing for it in the main menu. There I discovered 'v' being the keybinding for 'View Source' and have been using it since. However, I often have to move the mouse onto the main window or preview pane, so right- clicking to view the source of a message always felt like a more natural approach. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Kmail message components
On Tuesday, 3 April 2018 22:52:51 BST Marc Joliet wrote: > Am Dienstag, 3. April 2018, 14:42:31 CEST schrieb Mick: > > or select to view HTML content on a per > > message basis > > FWIW, for just this particular task you can add the "Toggle HTML Display > Mode" toolbar button (in German it's "HTML Anzeigemodus Umschalten"). I > also found a similar feature at > https://userbase.kde.org/Kmail/Using_Kmail_General (search for "HTML"). Yes, this will deal with toggling the display of the HTML part of a message, but it will not offer many other options available through the 'Message Structure' pane, like 'Save As', 'Open With', 'Copy', etc. I used HTML as an example of a message component. Personally, I use the 'Show Message Structure' to inspect/troubleshoot the envelop structure of multipart messages, save parts separately, etc. I also use 'View Source' to check message headers. So, when these two functions suddenly disappeared I started looking for them. I wasn't aware that they had gone due to conscious decisions taken by the devs. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Kmail message components
On Tuesday, 3 April 2018 16:45:45 BST Manuel Mommertz wrote: > Am Dienstag, 3. April 2018, 14:42:31 CEST schrieb Mick: > > Hi All, > > > > After some recent KDE updates I noticed that Kmail-5.7.3 no longer shows > > the message components at the bottom of the preview pane. As a result I > > can't see the components of multipart messages or select to view HTML > > content on a per message basis, should I want/need to do so. > > > > Have you noticed the same? Any idea how I could restore this feature? > > you need to press ctrl+alt+D now to activate it. No menu entry anymore, see: > see https://bugs.kde.org/show_bug.cgi?id=387931 Thank you Manuel. Unfortunately ctrl+alt+D on an Enlightenment desktop does something entirely different (minimises all windows). I used Settings/Configure Toolbars and added "Show Message Structure" to the main menu for now. On a Plasma desktop it works as advertised, so other users on Plasma who may need this feature could use it accordingly. Annoyingly, the 'View Source' submenu option was also removed ... arrrgh! However, pressing 'v' on a preview pane acts as a short cut for this function. Thanks again for your help with this. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Kmail message components
Hi All, After some recent KDE updates I noticed that Kmail-5.7.3 no longer shows the message components at the bottom of the preview pane. As a result I can't see the components of multipart messages or select to view HTML content on a per message basis, should I want/need to do so. Have you noticed the same? Any idea how I could restore this feature? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Grub problems on old proliant
On Friday, 23 March 2018 22:03:45 GMT mad.scientist.at.la...@tutanota.com wrote: > I appreciate the pointers. however it also said that it couldn't embed > grub. I believer my error was installing it to the boot partition You can install grub in the MBR of a disk, or in the boot record of a partition, should you so wish. If the latter, then you will have to chainload the partition's GRUB from another primary boot loader. You could have grub legacy on your /boot partition and have this chainloaded from grub2, LILO, etc., which you installed in the MBR of your disk, USB stick, etc. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Grub problems on old proliant
On Thursday, 22 March 2018 22:57:31 GMT mad.scientist.at.la...@tutanota.com wrote: > When I run "grub-install/dev/boot" (following the manual) I i get the error > "grub-install: error: cannot find a GRUB for /dev/boot. You have typed no space between the command 'grub-install' and the device. Do you have a "/dev/boot" device listed in your filesystem? If yes, is it pointing to the disk (e.g.) /dev/sda where you want the GRUB boot code to be installed? > Check your device > map" I looked at the /boot partition and there is no device map. A device map would be needed if you had some fancy mapping of devices Vs device file names in your OS, or if your devices are occasionally probed by BIOS in a different order, thus ending up under /dev/sdX instead of /dev/sdY. > I'm installing gentoo running debian. I have another os so the boot > partition should be properly set up. This is on an ancient hp proliant > dl385, Gen 1. debian is running grub 2.02~beta3-5. This machine does not > use uefi, and the raid driver is in the kernel. > > Do i need to hack together the device map or? Any help appreciated, thank > you. I don't think you need a device map, unless you suffer from the irregular probing of your disks/partitions by your BIOS. > Unfortunately i'm more familiar with grub legacy than grub2, studying manual > now (it's very verbose and takes a bit to absorb enough to use it. You can still install grub legacy, but grub2 is relatively straight forward as long as you get the command syntax correct and you do not forget to run grub- mkconfig every time you install/remove a kernel. You may want to have a look at this page, if you haven't done so already: https://wiki.gentoo.org/wiki/GRUB2 -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] pdftk - replacement
On Thursday, 15 March 2018 09:00:46 GMT Neil Bothwick wrote: > On Thu, 15 Mar 2018 07:48:21 +0100, J. Roeleveld wrote: > > > I need to "overlap" two PDF file, one on top of another, it is like > > > watermarking. I only do it once a year when I print a tax > > > form/slips. > > > > Maybe script your own solution? > > Extract images from the PDF > > Overlay the images > > convert the images back to PDF > > Since it's only once a year: > > Print one PDF > Put the paper back in the printer > Print the other page > > It doesn't always pay to overcomplicate things :) Libreoffice Draw may work too, if the OP is happy to edit contents or fill in a form manually by typing, rather than merge/overlay two pages into one. The only problem I have found with LO Draw is if the source pdf document contains a type face not present in the Linux OS, as is often the case with pdf forms dished out by various companies. The character size is then wrong and I haven't found an easy way of adjusting it. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: chromium-65.0.3325.146 compilation warnings
On Monday, 12 March 2018 17:11:16 GMT Nikos Chantziaras wrote: > No. What these warnings mean is that the chromium build system is > passing these options to the compiler: > >-Wno-enum-compare-switch -Wno-tautological-unsigned-zero-compare >-Wno-null-pointer-arithmetic -Wno-tautological-constant-compare > > but the compiler version installed on your system doesn't support them. > > Your own CFLAGS got nothing to do with this. Furthermore, these warnings > are of no interest to you whatsoever, unless you're a chromium developer. I don't believe I possess the abilities to be developer. :-) > GCC 7.3 and Clang 6.0 do support these options, but if you're using a > version that doesn't, it's of no consequence. Warning options do not > affect code generation. OK, I think it's clang what done it. I'm on gcc-7.3.0, but clang-5.0.1. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Brother Printer AMD64
On Monday, 12 March 2018 15:29:28 GMT Nils Freydank wrote: > Hi, > > Am Montag, 12. März 2018, 13:54:18 CET schrieb siefke_lis...@web.de: > > Hello, > > > > I have a short question. Is it true that Brother Printer Drivers need > > a multilib System? > > unfortunately yes. Maybe specific drivers will work with no-multilib, but > most ones will compile and install and then silently fail due to some > missing 32bit userspace libs they need etc. > > > https://github.com/stefan-langenmaier/brother-overlay > > > > I found this overlay and it seem so that gcc without multilib not work. > > > > Is there a way to build the printer system as 32 bit, or does the whole > > system have to be built accordingly? > > You can try to setup a chroot or container (e.g. with LXC/LXD or systemd- > nspawn) for it, but I these would contain a small 32bit system, too. > > > Thank you & Nice Day > > Silvio > > I hope I could help a bit, > Nils I can confirm this. When I tried to install net-print/brother-hl3140cw-bin from the brother overlay on a amd64 no-multilib system it failed. I have not tried to install the same driver on a 32bit system, but could give it a go one of these days if it helps. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] chromium-65.0.3325.146 compilation warnings
On Monday, 12 March 2018 08:27:31 GMT Alexander Kapshuk wrote: > On Mon, Mar 12, 2018 at 10:17 AM, Mick <michaelkintz...@gmail.com> wrote: > > I can see a few warnings pilling up on different systems when trying to > > emerge chromium-65.0.3325.146: > > > > warning: unknown warning option '-Wno-enum-compare-switch'; did you mean > > '- > > Wno-enum-compare'? [-Wunknown-warning-option] > > warning: unknown warning option '-Wno-tautological-unsigned-zero-compare' > > [- Wunknown-warning-option] > > warning: unknown warning option '-Wno-null-pointer-arithmetic'; did you > > mean '-Wno-null-arithmetic'? [-Wunknown-warning-option] > > warning: unknown warning option '-Wno-tautological-constant-compare'; did > > you mean '-Wno-tautological-pointer-compare'? [-Wunknown-warning-option] > > 4 warnings generated. > > > > Does this mean I should be using a different gcc or CFLAGS? > > > > They mostly are: > > > > CFLAGS="-march=native -O2 -pipe" > > > > -- > > Regards, > > Mick > > On my x86 system, I've been seeing similar warnings being generated by > clang when compiling the ffmpeg that comes with chromium. > I've also hit another bug related to that, where clang compilation > terminates with an error message along the lines of there being not > enough registers available. > There's a bug registered for that in chromium bugzilla, which I can't > reference at the moment. So far, no solution has been implemented, as > far as I could tell. Right, clang's the culprit ... thanks for letting me know. An amd64 system completed the emerge without problems, two others are still chugging along. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] chromium-65.0.3325.146 compilation warnings
I can see a few warnings pilling up on different systems when trying to emerge chromium-65.0.3325.146: warning: unknown warning option '-Wno-enum-compare-switch'; did you mean '- Wno-enum-compare'? [-Wunknown-warning-option] warning: unknown warning option '-Wno-tautological-unsigned-zero-compare' [- Wunknown-warning-option] warning: unknown warning option '-Wno-null-pointer-arithmetic'; did you mean '-Wno-null-arithmetic'? [-Wunknown-warning-option] warning: unknown warning option '-Wno-tautological-constant-compare'; did you mean '-Wno-tautological-pointer-compare'? [-Wunknown-warning-option] 4 warnings generated. Does this mean I should be using a different gcc or CFLAGS? They mostly are: CFLAGS="-march=native -O2 -pipe" -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Are VirtualBox moduli loaded by themselves?
On Tuesday, 6 March 2018 10:27:11 GMT J. Roeleveld wrote:
> On Tuesday, March 6, 2018 10:32:50 AM CET Mick wrote:
> > On Tuesday, 6 March 2018 09:21:43 GMT gevisz wrote:
> > > Ah, yes, /etc/init.d/modules-load
> > > "loads a list of modules from systemd-compatible locations".
> > > Ok. But the problem is that I cannot find any symlink to this file
> > > from any subdirectory of /etc/runlevels/
> >
> > The file /etc/init.d/modules-load is a script, which refers to a number of
> > potential modules lists to load - read line 19 onward:
> > =
> > ...
> > find_modfiles()
> > {
> >
> > local dirs="/usr/lib/modules-load.d /run/modules-load.d
> >
> > /etc/modules- load.d"
> >
>
> Symlinks from /etc/runlevels/... means, the init-script is part of a
> runlevel.
> > > So, I do not know how to disable this service.
> >
> > rc-update delete modules-load default
>
> "modules-load" is, by default, not part of any runlevel.
> It is called as a dependency.
>
> --
> Joost
Oh! On my laptop is shown under /etc/runlevels/default.
(as is I noticed udev-postmount, although this symlink is broken).
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
Re: [gentoo-user] Are VirtualBox moduli loaded by themselves?
On Tuesday, 6 March 2018 09:21:43 GMT gevisz wrote:
> Ah, yes, /etc/init.d/modules-load
> "loads a list of modules from systemd-compatible locations".
> Ok. But the problem is that I cannot find any symlink to this file
> from any subdirectory of /etc/runlevels/
The file /etc/init.d/modules-load is a script, which refers to a number of
potential modules lists to load - read line 19 onward:
=
...
find_modfiles()
{
local dirs="/usr/lib/modules-load.d /run/modules-load.d /etc/modules-
load.d"
> So, I do not know how to disable this service.
rc-update delete modules-load default
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
Re: [gentoo-user] [OT] ca-certificate to domain-name mapping question
On Monday, 5 March 2018 14:25:40 GMT Adam Carter wrote: > On Monday, March 5, 2018, Walter Dnes <waltd...@waltdnes.org> wrote: > > app-misc/ca-certificates splatters a bunch of files all over the > > > > place. Question... is there a utility to figure out which domains any > > particular certificate covers I assume you mean: "... which domains any particular *CA* certificate covers"? If yes, > A ca certificate may sign any domain cert, and new domains can be signed at > any time. > > So any certificate is only as trusted as the least trustworthy ca in your > certificate store some people call this a dumpster fire. Certificate > transparency (logs of who issued what) helps reduce the risk of a dodgy ca > issuing a certificate they shouldn’t have without being noticed. If no, what you wrote is exactly what you meant to ask, > You can go the other way, and see which ca was used to sign any cert that a > server presents, as that info is included in the cert presented by the > server. In this case, to examine the DN of the CA which signed a server certificate you need: openssl x509 -in server.pem -issuer -noout -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: QEMU on a partition
On Saturday, 3 March 2018 03:09:25 GMT Ian Zimmerman wrote: > On 2018-03-02 20:12, R0b0t1 wrote: > > I can't find it again, but there was a neat writeup investigating the > > TCP over TCP "tunnel collapse" phenomena. When two layers are doing > > the same thing, there is a tendency for both to behave poorly. I'm not > > sure any deeper explanation was or can be offered, but it is something > > that holds true not only for network traffic, but disk IO and > > databases as well. > > I think I've seen that too, and it was when I decided to install and > learn openvpn in place of the everything-over-ssh setup I had before. I think the problem you mention refers to TCP retransmission timeouts, when you stack one TCP packet within another. RFC3439 warns against TCP layering: https://tools.ietf.org/html/rfc3439#page-7 UDP encapsulation as used for e.g. VPN does not suffer with the same problem because it does not use the same transmission quality control mechanism as TCP. I have used SSH within IPSec VPN tunnels without retransmission problems (both with and without UDP encapsulation). I am not sure if block device I/O protocols suffer the same problem - I don't really know how the read/write SCSI commands are queued and processed between host and guest OS. What I have noticed is abstraction layers relating to partitioning schemes, e.g. good ol' primary Vs logical partitions, make a difference *only* when the partition is initially mounted, but not thereafter. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Spectre_v1 mitigations
I noticed two Gentoo systems (Intel & AMD) running kernel 4.14.23 show: cat /sys/devices/system/cpu/vulnerabilities/spectre_v1 Mitigation: __user pointer sanitization However, a Mint VM running kernel 4.13.0-36 shows: cat /sys/devices/system/cpu/vulnerabilities/spectre_v1 Mitigation: OSB (observable speculation barrier, Intel v6) Why would there be this difference and what does it mean? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] QEMU on a partition
On Friday, 2 March 2018 15:33:02 GMT R0b0t1 wrote: > You can pass a block device directly to QEMU, and this is recommended > for performance reasons. Does it make a measurable difference, after the guest OS has booted? I'll need to try this out. :-) -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] QEMU on a partition
On Friday, 2 March 2018 11:34:09 GMT Peter Humphrey wrote: > On Friday, 2 March 2018 11:12:36 GMT Helmut Jarausch wrote: > > Hi, > > > > I'd like to install a second Gentoo system on a partition by running > > QEMU using that partition (directly) - this is to create and update a > > Gentoo > > system with different CFLAGS (for an older machine). The QEMU guest's complete filesystem is contained within a *virtual* disk image. As far as the host OS is concerned, the guest's disk with all partitions on it, is a file. You can store this image file wherever you want and map the QEMU on the host to launch it. > > Having no experience in such setups my initial problem is how to > > install grub2 on that partition (only). I don't want to modify the MBR > > of the whole drive containing that partition. You do not install the guest's GRUB or any other boot loader on the host's partition. You install it within the virtual disk after you have launched the guest having attached a LiveCD to it, using QEMU. > I do the same for my Atom machine by NFS-exporting its /usr/portage to a > chroot on my main machine. The question of booting doesn't arise; all that's > needed is a copy of /etc/portage* and the world file. If that sounds > interesting I can show you some more detail. > > * Things like -march and --jobs differ to suit the host machine, but that's > about all. As noted above you'll need to set up CFLAGS in the guest's make.conf file to suit the *guest* platform and its CPU. Setting up "-march=native" won't work here. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] [SUSPECTED SPAM] [OT] Best *SIMPLE* firewall?
On Thursday, 1 March 2018 17:58:44 GMT Tom H wrote: > On Wed, Feb 28, 2018 at 4:15 PM, Walter Dnes <waltd...@waltdnes.org> wrote: > > Is there something besides iptables? It seems to be like > > systemd/perl/python, continuously expanding its scope. And no, I'm not > > looking for an "easy-peasy front-end gui" that'll probably pull in 90% > > of QT as dependancies. I fondly remember IPCHAINS. > > iptables doesn't depend on systemd, perl, or python. > > firewalld depends on dbus, polkit, and python. > > ufw depends on python. > > But there may be other iptables frontends that depend on more, > especially if they are graphical. > > The advantage of iptables frontends is that you only have to allow > "your" ports (for a minimal customization) without having to worry > about all the other stuff that you need to set up when you use > iptables directly. > > I've used apf, arno, and ufw. The first two depend on bash and simply > require you to set variables in "/etc/$firewall/". +1 for net-firewall/arno-iptables-firewall if you need a script to set up iptables for you. I am using vanilla iptables with simple hand-made scripts on a number of systems, so it shouldn't be too difficult to roll your own if your demands are relatively simple. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] webkit-gtk build failure and masking confusion
On Sunday, 18 February 2018 01:09:36 GMT allan gottlieb wrote: > What I do in the meantime is > >emerge --update --pretend @world > > and then manually > >emerge -1 all packages mentioned except webkit-gtk > > I do a similar procedure for > >emerge @preserved rebuild > > allan It is probably easier to just run: emerge --update --pretend --exclude webkit-gtk @world -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: some spectre v1 code in 4.15.2
On Tuesday, 13 February 2018 02:18:33 GMT Nikos Chantziaras wrote: > On 13/02/18 03:31, Ian Zimmerman wrote: > > On 2018-02-13 03:13, Nikos Chantziaras wrote: > >> Apparently, and contrary to what people (me included) wrote here in > >> the past, BPF JIT is the secure option, and the interpreter is the > >> insecure one. > > > > Do you have a reference for this? It sounds strange indeed. > > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?i > d=290af86629b25ffd1ed6232c4e9107da031705cb > > "The BPF interpreter has been used as part of the spectre 2 attack > CVE-2017-5715. > [...] > To make attacker job harder introduce BPF_JIT_ALWAYS_ON config > option that removes interpreter from the kernel in favor of JIT-only mode." Thanks for sharing this Nikos. Perhaps I'm reading the referenced post wrong. If the BPF interpreter has been used for spectre2, then disabling CONFIG_BPF_SYSCALL does away with it altogether, rather than turning it on and then setting BPF_JIT_ALWAYS_ON to guard against its inherent vulnerability by using JIT-only mode? Is there some overriding benefit of having BPF enabled at all in the first place? PS. I don't remotely assume I properly understand the BPF mechanism, I just want to test my understanding above. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] kernel 4.14.15-gentoo breaks Dell Wireless 370 Bluetooth Mini-card device
I just noticed I can no longer use bluetooth with the 4.14.15 kernel. This laptop has a shared bluetooth and WiFi mini card, which has never worked properly (see attached hardware details). Although MWindows has no problem, in Linux I have to disable WiFi when I need to use bluetooth! O_o Anyway, I now discovered that bluetooth won't work and /lib/systemd/systemd- udevd --daemon is pegged at 100% of CPU time. Switching off the mini-card using a keyboard button does not stop udevd from running hot. It just drops from 100% to 45% until I kill the process manually. udevadm monitor shows: KERNEL[281.040708] bind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) KERNEL[281.040855] unbind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) UDEV [281.041192] unbind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) KERNEL[281.044485] bind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) KERNEL[281.044596] unbind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) UDEV [281.044969] bind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) KERNEL[281.048056] bind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) KERNEL[281.048257] unbind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) UDEV [281.048534] unbind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) KERNEL[281.051754] bind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) KERNEL[281.051995] unbind /devices/pci:00/:00:1d.0/ usb2/2-1/2-1.6/2-1.6.2/2-1.6.2:1.0 (usb) non stop. Syslog does not show anything unusual. Has anyone noticed something similar? How do I troubleshoot this? -- Regards, Mick # lsusb -v Bus 002 Device 011: ID 413c:8156 Dell Computer Corp. Wireless 370 Bluetooth Mini-card Device Descriptor: bLength18 bDescriptorType 1 bcdUSB 2.00 bDeviceClass 224 Wireless bDeviceSubClass 1 Radio Frequency bDeviceProtocol 1 Bluetooth bMaxPacketSize064 idVendor 0x413c Dell Computer Corp. idProduct 0x8156 Wireless 370 Bluetooth Mini-card bcdDevice4.56 iManufacturer 1 Dell Computer Corp iProduct2 Dell Wireless 370 Bluetooth Mini-card iSerial 0 bNumConfigurations 1 Configuration Descriptor: bLength 9 bDescriptorType 2 wTotalLength 216 bNumInterfaces 4 bConfigurationValue 1 iConfiguration 0 bmAttributes 0xe0 Self Powered Remote Wakeup MaxPower 100mA Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber0 bAlternateSetting 0 bNumEndpoints 3 bInterfaceClass 224 Wireless bInterfaceSubClass 1 Radio Frequency bInterfaceProtocol 1 Bluetooth iInterface 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x81 EP 1 IN bmAttributes3 Transfer TypeInterrupt Synch Type None Usage Type Data wMaxPacketSize 0x0010 1x 16 bytes bInterval 1 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x82 EP 2 IN bmAttributes2 Transfer TypeBulk Synch Type None Usage Type Data wMaxPacketSize 0x0040 1x 64 bytes bInterval 1 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x02 EP 2 OUT bmAttributes2 Transfer TypeBulk Synch Type None Usage Type Data wMaxPacketSize 0x0040 1x 64 bytes bInterval 1 Interface Descriptor: bLength 9 bDescriptorType 4 bInterfaceNumber1 bAlternateSetting 0 bNumEndpoints 2 bInterfaceClass 224 Wireless bInterfaceSubClass 1 Radio Frequency bInterfaceProtocol 1 Bluetooth iInterface 0 Endpoint Descriptor: bLength 7 bDescriptorType 5 bEndpointAddress 0x83 EP 3 IN bmAttributes1 Transfer TypeIsochronous Synch Type None Usage Type Data wMaxPacketSize
Re: [gentoo-user] Re: gcc 7.3 + kernel 4.15 = spectre_v2 fixed
On Wednesday, 31 January 2018 12:20:51 GMT Nikos Chantziaras wrote: > On 31/01/18 14:04, Mick wrote: > > Just to dilute my confusion on what I should do to keep desktops safe(r), > > would someone please clarify: > > > > Is it necessary to keyword gcc 7.3 + kernel 4.15 and emerge kernel 4.15 > > with gcc 7.3, or wait until these versions have been stabilised in the > > tree? > > > > What gcc version shall I use to update @world from then on? > > > > PS. Some desktops are Intel, some are AMD and I also have 3-4 devices with > > ARM in them ... > > At the moment, you do need GCC 7.3. However, there is talk about these > new flags being ported to GCC 6 and possibly even older versions. > > As for the kernel, you don't need 4.15. 4.14 is the latest LTS kernel, > and it has the needed patches. I think 4.9 (the previous LTS kernel) has > them too. Kernel 4.14.15 has the latest patches, so I stayed with the 4.14 series. > Currently, once you enable CONFIG_RETPOLINE in the kernel config and > rebuild with GCC 7.3, you should have all currently available kernel > mitigations. Which currently are: > >$ cat /sys/devices/system/cpu/vulnerabilities/* >Mitigation: PTI >Vulnerable >Mitigation: Full generic retpoline I'm good here: $ dmesg | grep -i Spectre [0.011822] Spectre V2 mitigation: Mitigation: Full generic retpoline although this post indicates Skylake may still be vulnerable: https://lkml.org/lkml/2018/1/4/724 Anyway, as I understand it, we'll have to wait for gcc-8.1 in March, which utilises 'gcc -mindirect-branch=thunk-extern' to get the benefit of the retpoline kernel patch. > However, improvements to these mitigations will from now on happen for > kernel 4.16 first and backported later. 4.16 for example got mitigations > for ARM. It's how kernel upstream works; new stuff is done in the > current development version, and backported later to still supported > versions. Spectre_v1 still shown as vulnerable on both Intel and AMD. Is there a fix planned for this? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: gcc 7.3 + kernel 4.15 = spectre_v2 fixed
On Wednesday, 31 January 2018 12:20:51 GMT Nikos Chantziaras wrote: > On 31/01/18 14:04, Mick wrote: > > Just to dilute my confusion on what I should do to keep desktops safe(r), > > would someone please clarify: > > > > Is it necessary to keyword gcc 7.3 + kernel 4.15 and emerge kernel 4.15 > > with gcc 7.3, or wait until these versions have been stabilised in the > > tree? > > > > What gcc version shall I use to update @world from then on? > > > > PS. Some desktops are Intel, some are AMD and I also have 3-4 devices with > > ARM in them ... > > At the moment, you do need GCC 7.3. However, there is talk about these > new flags being ported to GCC 6 and possibly even older versions. > > As for the kernel, you don't need 4.15. 4.14 is the latest LTS kernel, > and it has the needed patches. I think 4.9 (the previous LTS kernel) has > them too. > > Currently, once you enable CONFIG_RETPOLINE in the kernel config and > rebuild with GCC 7.3, you should have all currently available kernel > mitigations. Which currently are: > >$ cat /sys/devices/system/cpu/vulnerabilities/* >Mitigation: PTI >Vulnerable >Mitigation: Full generic retpoline > > However, improvements to these mitigations will from now on happen for > kernel 4.16 first and backported later. 4.16 for example got mitigations > for ARM. It's how kernel upstream works; new stuff is done in the > current development version, and backported later to still supported > versions. Thanks Nikos, I'm presently on 4.14.14, so I can update this to 4.14.15 and compile it with gcc-7.3; then pick up future improvements as part of gentoo- sources updates when kernels start being marked as stable. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: gcc 7.3 + kernel 4.15 = spectre_v2 fixed
On Wednesday, 31 January 2018 11:30:13 GMT Martin Vaeth wrote: > Nikos Chantziaras <rea...@gmail.com> wrote: > > Yeah, that's the kind of software that benefits from the Spectre > > mitigation patches. Like browsers, virtualization or emulation software, > > the kernel, etc. > > No. It's software like gnupg, encfs, openssl and all the library they > use (glibc, glib, X etc) which need these patches. > > > Rebuilding the whole system with these flags on doesn't sound like a > > good idea. Now, I don't know if it would hurt anything, but it's not > > uncommon for build flags to break random stuff. > > Yep. On x86, gcc cannot compile itself if built with -fno-plt. > > > I haven't seen any word from anyone yet as to whether these flags are > > actually recommended or not on a system-wide basis. > > Actually, it is not even clear in the moment which flags should be > used in which settings. (There has been some discussion in the > gentoo forums but to no completely satisfactory result yet.) > > > So my educated guess is: No. Don't do that. > > Yes and no: It is probably recommended, but the flags are so no and > so poorly understood that people are hesitating with recommendations. > Also, spectre is hard to exploit, so it is perhaps better to wait in > the moment until some experience ins there. > > > If a package is affected, it > > stands to reason that the upstream of that package would change their > > build system to use these new flags where needed. > > No, for many reasons: > > 1. Packages often try to not add any flags; especially in gentoo it is a > policy that they _must_ not: If they do, it would get patched out in gentoo. > > 2. A library has no idea what it is used for. Why should it add something, > only because some program using it should be protected? > > 3. Adding the flags slows down the programs. It is the user who must > decide whether patches are desirable for his use case and architecture. > (Maybe this is less relevant know but in a while when versions of > processors "immune" to spectre come out.) Just to dilute my confusion on what I should do to keep desktops safe(r), would someone please clarify: Is it necessary to keyword gcc 7.3 + kernel 4.15 and emerge kernel 4.15 with gcc 7.3, or wait until these versions have been stabilised in the tree? What gcc version shall I use to update @world from then on? PS. Some desktops are Intel, some are AMD and I also have 3-4 devices with ARM in them ... -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] rust 1.23.0 fails to install
On Monday, 29 January 2018 21:58:56 GMT John Covici wrote:
> Hi. In my world update Rust 1.23.0 failed to install with the
> following error:
> install: installing component 'rustc'
>
> Rust is ready to roll.
>
> < Rustc { stage: 2, target: "x86_64-unknown-linux-gnu", host:
> "x86_64-unknown-linux-gnu" }
^^^
Is your /usr/src/linux symlink pointing to a valid kernel tree?
> Build completed successfully in 0:21:12
> mv: cannot stat
> '/var/tmp/portage/dev-lang/rust-1.23.0/image//usr/share/doc/rust/*':
> No such file or directory
>
> I did not see a bug on bgo -- anyone knows how to fix?
>
> Thanks in advance for any suggestions.
PS. Here on stable systems portage decided to uninstall all rust packages it
had installed recently as firefox dependencies and then downgraded firefox to
52.6.0.
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
Re: [gentoo-user] Re: gcc 7.3 + kernel 4.15 = spectre_v2 fixed
On Monday, 29 January 2018 18:35:58 GMT Mike Gilbert wrote: > On Mon, Jan 29, 2018 at 12:50 PM, Ian Zimmerman <i...@very.loosely.org> wrote: > > On 2018-01-29 20:11, Adam Carter wrote: > >> Comparing the contents of > >> /sys/devices/system/cpu/vulnerabilities/spectre_v2 > >> > >> With gcc 7.2 + kernel 4.14.15; > >> Intel system shows; Vulnerable: Minimal generic ASM retpoline > >> AMD system shows: Vulnerable: Minimal AMD ASM retpoline > >> > >> With gcc 7.3 + kernel 4.15.0; > >> Intel system shows; Mitigation: Full generic retpoline > >> AMD system shows' Mitigation: Full AMD retpoline > > > > Is there a simple way, with the upstream (kernel.org) sources, to force > > a compiler different from the system default? If there is, it's not in > > the > > README, and a simple grep over the Makefiles also doesn't enlighten. > > > > I am not ready to activate a keyworded gcc for general use. > > You could pass CC=gcc-7.3.0 to the make command, like so: > > make -j6 CC=gcc-7.3.0 Shouldn't you have at least compiled your whole toolchain with gcc-7.3.0 first? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] UEFI-fails to boot
On Thursday, 25 January 2018 13:18:13 GMT Dan Johansson wrote: > Thanks for the advice, now grub starts and I get the menu (now I just > have to figure out why the kernel hangs after being loaded). Glad you got it loading. Check at what stage the kernel oops - this would point at what in the kernel configuration has gone awry. You must build the chipset and filesystem drivers in the kernel (not as loadable modules), which may even drop you in a command prompt to troubleshoot from there. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] UEFI-fails to boot
On Thursday, 25 January 2018 11:07:40 GMT Wols Lists wrote: > But what I think you're supposed to do is use UEFI to load the linux > kernel directly ... not sure how you do that yet :-) > > Cheers, > Wol If you do not need/want to use a boot loader like GRUB you can use the efibootmgr to set the kernel image to boot directly. For example: efibootmgr --create --disk /dev/sda --part 1 --label "gentoo-4.14.14_20-Jan" --loader "\EFI\BOOT\bootx64-4.14.14-gentoo.efi" Where \EFI\BOOT\bootx64-4.14.14-gentoo.efi is found under: # tree /boot /boot ├── EFI └── BOOT ├── System.map-4.14.12-gentoo ├── System.map-4.14.14-gentoo ├── System.map-4.14.8-gentoo-r1 ├── bootx64-4.14.12-gentoo.efi ├── bootx64-4.14.14-gentoo.efi ├── bootx64-4.14.8-gentoo-r1.efi ├── config-4.14.12-gentoo ├── config-4.14.14-gentoo └── config-4.14.8-gentoo-r1 You should also set CONFIG_EFI_STUB=y in your kernel. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] UEFI-fails to boot
On Thursday, 25 January 2018 10:54:28 GMT Dan Johansson wrote: > I have bought me a shiny new Supermicro X10DRi-T motherboard with two > Xenon-E5-2620-v3 CPUs for use as a server. > > I have configured the MB for UEFI-mode only and my rescuecd-USB-key > boots find in UEFI-mode. > > Following the Handbook and the "EFI System Partition" handbook I have > created the following GPT-disklayout: > > root@sysresccd /root % parted /dev/sda print > Model: ATA ST1000DX002-2DV1 (scsi) > Disk /dev/sda: 1000GB > Sector size (logical/physical): 512B/4096B > Partition Table: gpt > Disk Flags: > > Number Start End SizeFile system Name Flags > 1 1049kB 3146kB 2097kB fat32 grub bios_grub The above implies an MBR partition table approach to booting your OS, which a non-UEFI (BIOS only) MoBo will need. However you are meant to be using UEFI *only* and GPT ... > 2 3146kB 137MB 134MB ext2boot boot, esp and this partition is what should be used for an UEFI MoBo, but the fs is wrong. Change it to fat32 and check with gdisk that its partition code is EF00, which according to your 'boot, esp' flags it should be. This is your EFI System Partition (ESP). > 3 137MB 4429MB 4292MB linux-swap(v1) swap > 4 4429MB 5503MB 1074MB root > 5 5503MB 1000GB 995GB vg > > Partition-1 was created like this: mkfs.fat -F 32 -n efi-boot /dev/sda1 > Partition-2 was created like this: mkfs.ext2 -T small /dev/sda2 > > GRUB_PLATFORMS was set to "efi-64" in make.conf before emerging grub:2 > > /boot and /boot/efi is mounted like this > # mount | grep boot > /dev/sda2 on /boot type ext2 (rw,relatime,errors=continue,user_xattr,acl) > /dev/sda1 on /boot/efi type vfat > (rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=ascii,shortname=mi > xed,errors=remount-ro) > > I had to remount /sys/firmware/efi/efivars in rw-mode, otherwise > grub-install would complain. Yes, this has been the case for some time now. You will always need to remount it as rw before you change the contents of the ESP boot partition. It is also mentioned here: https://wiki.gentoo.org/wiki/GRUB2 > grub-install was run like this > "grub-install --target=x86_64-efi --efi-directory=/boot/efi" But ... /boot/efi is not your ESP. > And "grub-mkconfig -o /boot/grub/grub.cfg" has been run without any errors. > > efibootmgr shows my gentoo as the first entry > # efibootmgr > Timeout: 1 seconds > BootOrder: ,0001,0002,0003 > Boot gentoo > Boot0001 Hard Drive > Boot0002 Network Card > Boot0003 UEFI: Built-in EFI Shell Use 'efibootmgr -v' to check the path of the .efi image it tries to boot and check the path is correct without any typos. What you show above is only a label. > But when I boot without the USB-key inserted I always "lands" in the > Built-in EFI Shell - NO sign of GRUB. > > Any suggestions where I have gone wrong? > > KR The ESP needs to be formatted as vfat and the GRUB boot image grubx64.efi should be installed there. HTH. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Pointers are not supported: KDEDModule
On Sunday, 21 January 2018 20:33:54 GMT R0b0t1 wrote: > On Sun, Jan 21, 2018 at 9:45 AM, Mick <michaelkintz...@gmail.com> wrote: > > I'm trying to understand why X crashes at login, with this error in > > .xsession- errors: > > > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > QDBusAbstractAdaptor: Cannot relay signal > > KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: > > KDEDModule* > > startkde: Done. > > The X11 connection broke (error 1). Did the X11 server die? > > QThread: Destroyed while thread is still running > > Closing SQL connection: > > "kactivities_db_resources_139787921024832_readwrite" The X11 connection > > broke: I/O error (code 1) > > XIO: fatal IO error 4 (Interrupted system call) on X server ":0" > > > > after 2408 requests (2408 known processed) with 0 events remaining. > > > > If I restart xdm the user able to login, but the first time more often > > than > > not fails as above. > > This seems very similar: > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797979. There is > also https://forums.gentoo.org/viewtopic-t-1056258-start-0.html with > no replies. > > Which display manager are you using? Are you using more than one monitor? > > Cheers, > R0b0t1 Hmm ... yes, reads rather similar to mine. The box in question is using sddm as a login manager, with which I have nothing but grief on various boxen and two monitors. This problem started with the latest sddm update. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Pointers are not supported: KDEDModule
I'm trying to understand why X crashes at login, with this error in .xsession- errors: QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule* startkde: Done. The X11 connection broke (error 1). Did the X11 server die? QThread: Destroyed while thread is still running Closing SQL connection: "kactivities_db_resources_139787921024832_readwrite" The X11 connection broke: I/O error (code 1) XIO: fatal IO error 4 (Interrupted system call) on X server ":0" after 2408 requests (2408 known processed) with 0 events remaining. If I restart xdm the user able to login, but the first time more often than not fails as above. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] mpv: no sound anymore...?
On Saturday, 20 January 2018 07:11:52 GMT tu...@posteo.de wrote:
> Hi,
>
> either by one of the last updates or by me while un-pulseaudio-fy
> firefox (and removing pulseaudio afterwards) mpv is no longer willing
> to play any sound.
>
>
> Some informations:
>
> [I] media-video/mpv
> Available versions: 0.18.0-r1 0.25.0-r2 (~)0.26.0 (~)0.27.0-r1
> [M](~)0.28.0 ** {+X +alsa aqua archive bluray cdda +cli coreaudio
> cplugins cuda doc drm dvb dvd +egl +enca encode gbm +iconv jack javascript
> jpeg lcms +libass libav libcaca libguess libmpv (+)lua luajit openal
> +opengl oss pulseaudio raspberry-pi rubberband samba sdl selinux test tools
> (+)uchardet v4l vaapi vdpau vf-dlopen wayland xinerama +xscreensaver +xv
> zlib zsh-completion CPU_FLAGS_X86="sse4_1" PYTHON_TARGETS="python2_7
> python3_4 python3_5 python3_6"} Installed versions: 0.27.0-r1(06:53:23 AM
> 01/04/2018)(X alsa archive cdda cli cplugins cuda doc drm dvb dvd egl
> encode iconv jack jpeg libass lua luajit opengl tools uchardet v4l vdpau xv
> zlib zsh-completion -aqua -bluray -coreaudio -gbm -javascript -lcms -libav
> -libcaca -libmpv -openal -oss -pulseaudio -raspberry-pi -rubberband -samba
> -sdl -selinux -test -vaapi -wayland PYTHON_TARGETS="python2_7 python3_5
> python3_6 -python3_4") Homepage:https://mpv.io/
> Description: Media player based on MPlayer and mplayer2
>
>
> Output on the console while playing a video:
> mpv the_best_GPU_for_Blender-720p.mp4
> Playing: the_best_GPU_for_Blender-720p.mp4
> (+) Video --vid=1 (*) (h264 1280x720 29.970fps)
> (+) Audio --aid=1 --alang=und (*) (aac 2ch 44100Hz)
> ALSA lib
> /var/tmp/portage/media-libs/alsa-lib-1.1.5/work/alsa-lib-1.1.5/src/pcm/pcm_
> dmix.c:1099:(snd_pcm_dmix_open) unable to open slave [ao/alsa] Playback open
> error: Device or resource busy
> [ao] Failed to initialize audio driver 'alsa'
> Could not open/initialize audio device -> no sound.
> Audio: no audio
> VO: [opengl] 1280x720 yuv420p
> V: 00:00:01 / 00:12:38 (0%)
>
>
> Exiting... (Quit)
>
>
> Or with jack:
>
> (replaced my username by 'user')
>
> ps -ef | grep jack
> user 4299 1 0 02:47 ?00:01:34 jackd -t5000 -dalsa -dhw:0
> -r48000 -p1024 -n2 -H -M -Xseq user 24837 24766 0 08:05 pts/300:00:00
> grep -E --color jack
>
> id
> uid=1001(user) gid=100(users)
> groups=100(users),10(wheel),12(mail),14(uucp),18(audio),19(cdrom),27(video)
> ,35(games),80(cdrw),85(usb),103(docker),237(wireshark),244(vboxusers),245(vl
> ock),246(realtime)
>
> [I] media-sound/jack-audio-connection-kit
> Available versions: 0.121.3-r1 (~)0.124.1-r1 (~)0.125.0 {alsa altivec
> coreaudio cpudetection debug doc examples oss pam ABI_MIPS="n32 n64 o32"
> ABI_PPC="32 64" ABI_S390="32 64" ABI_X86="32 64 x32" CPU_FLAGS_X86="3dnow
> mmx sse"} Installed versions: 0.125.0(07:33:45 AM 12/05/2017)(alsa pam
> -altivec -coreaudio -debug -doc -examples -oss ABI_MIPS="-n32 -n64 -o32"
> ABI_PPC="-32 -64" ABI_S390="-32 -64" ABI_X86="64 -32 -x32"
> CPU_FLAGS_X86="3dnow sse") Homepage:http://www.jackaudio.org
> Description: A low-latency audio server
>
> (using zsh):
> l /dev/**/*jack*
> srwxr-xr-x 1 user users 0 2018-01-20 02:47
> /dev/shm/jack-1001/default/jack_0 srwxr-xr-x 1 user users 0 2018-01-20
> 02:47 /dev/shm/jack-1001/default/jack_ack_0 prw-r--r-- 1 user users 0
> 2018-01-20 08:07 /dev/shm/jack-1001/default/jack-ack-fifo-4299-0 prw-r--r--
> 1 user users 0 2018-01-20 08:07
> /dev/shm/jack-1001/default/jack-ack-fifo-4299-1 prw-r--r-- 1 user users 0
> 2018-01-20 02:47 /dev/shm/jack-1001/default/jack-ack-fifo-4299-2 prw-r--r--
> 1 user users 0 2018-01-20 02:49
> /dev/shm/jack-1001/default/jack-ack-fifo-4299-3
>
> /dev/shm/jack-1001:
> total 0
>
> mpv --audio-device=jack the_best_GPU_for_Blender-720p.mp4
> Playing: the_best_GPU_for_Blender-720p.mp4
> (+) Video --vid=1 (*) (h264 1280x720 29.970fps)
> (+) Audio --aid=1 --alang=und (*) (aac 2ch 44100Hz)
> ALSA lib
> /var/tmp/portage/media-libs/alsa-lib-1.1.5/work/alsa-lib-1.1.5/src/pcm/pcm_
> dmix.c:1099:(snd_pcm_dmix_open) unable to open slave [ao/alsa] Playback open
> error: Device or resource busy
> [ao] Failed to initialize audio driver 'alsa'
> Could not open/initialize audio device -> no sound.
> Audio: no audio
> VO: [opengl] 1280x720 yuv420p
> V: 00:00:01 / 00:12:38 (0%)
>
> (why it is accessing alsa here???)
>
>
> Using for example zynaddsubfx (softsynth) via qjackctrl/jack I can
> play sound.
> Mpv does not show up in qjackctrl
>
> The situation does not change if doing anything of the above as root.
>
> Mplayer plays sound...but fails to play the video instead.
>
> Currently I dont know what the problem here.
>
> If anyone has any idea...heartly welcome... :)
>
> Cheers
> Meino
I'd start by running 'alsactl init' to (re)initialise alsa and see if it
reports any errors.
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
Re: [gentoo-user] www-client/chromium-63.0.3239.132
On Friday, 19 January 2018 13:29:51 GMT Rich Freeman wrote: > On Fri, Jan 19, 2018 at 12:26 AM, victor romanchuk <r...@persimplex.net> wrote: > > local:jumbo-build:www-client/chromium: Combine source files to speed up > > build process.> > > setting that significantly speeds up emerge time (tried it twice; the > > second attempt had the flag set) > > > > $ qlop -gHv -d `date +%Y-%m-%d` chromium > > chromium-63.0.3239.132: Fri Jan 19 03:15:43 2018: 1 hour, 47 minutes, 28 > > seconds chromium-63.0.3239.132: Fri Jan 19 06:11:06 2018: 1 hour, 16 > > minutes, 14 seconds chromium: 2 times > > There is a CPU-memory tradeoff here. Combining source files reduces > duplication of #include directives which greatly cuts down on the > number of lines of code going into the compiler, but the individual > files being compiled are larger. > > I have a 12 SMT-core Ryzen 5-1600, and 16GB of RAM. I can't even > build chromium on a tmpfs because the RAM+space requirements have > grown, so I build on an SSD. Even without the tmpfs I have to reduce > make to -j11 or it will OOM during a build WITHOUT the jumbo-build > flag. So, I'm already hitting RAM limitations on build time. > > That said, I've experimented with some build times and I found that I > can build chromium faster with -j8 using jumbo-build (the max # jobs I > can run reliably without OOM) than I can build it with -j11 without > using the new feature. I'll also note that to do this I have to make > sure nothing else is compiling at the same time, and sometimes I end > up stopping a container that runs mono for good measure. > > I do use ccache in general with chromium but I did my benchmarking without > it. > > I suggest experimenting with jumbo-build, and consider reducing > parallel jobs if you run into OOM, but depending on your system you > might find it not worth the trouble. > > One thing I haven't experimented with is reducing -j even further and > then moving back to a tmpfs. I could easily see a tmpfs for building > outperforming jumbo-build even if I end up at -j4 or less. Then > again, the SSD probably isn't as bad a drag as a spinning disk would > be. > > I was chatting with somebody (I think on reddit) who mentioned > jumbo-build worked fine on a threadripper with 64GB of RAM (that would > be -j32 I suppose). I bet that with even a few more GB of RAM I could > probably max out my 12 SMT cores. > > I can't wait to see how chromium-64 behaves. The RAM requirements > have been steadily going up. I have an older system with only 4GB RAM > and it struggles to even build chromium at all. On my old i7 laptop it eats up all 4G of RAM and 4G of swap before it conks out. So, I dropped the jobs to 3 and --load-average to 2, added a swapfile to increase disk space and it now builds in around 13 hours. I have not used jumbo-build, but perhaps I should? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] gpg2 - error gpg: public key decryption failed: No pinentry
On Wednesday, 17 January 2018 13:51:20 GMT the...@sys-concept.com wrote: > On 01/16/2018 11:47 PM, Alexander Ben Nasrallah wrote: > > On Tue, Jan 16, 2018 at 10:51:40PM -0700, the...@sys-concept.com wrote: > >> When I try to decrypt a file I get: > >> > >> gpg2 text.asc > >> ... > >> gpg: public key decryption failed: No pinentry > >> gpg: decryption failed: No secret key > >> > >> app-crypt/pinentry-1.0.0-r2 is installed > > > > Sometime you have to set one of the following. > > > > # PIN entry program > > pinentry-program /usr/bin/pinentry-curses # no X > > pinentry-program /usr/bin/pinentry-qt > > pinentry-program /usr/bin/pinentry-kwallet > > pinentry-program /usr/bin/pinentry-gtk-2 > > > > to whatever suits you in ~/.gnupg/gpg-agent.conf. > > > > Hope that helps. > > OK, "gpg2 text.asc" it works now at the computer terminal but when I > log-in over "ssh" > it still giving me same error. Have you logged in as a user which has a key pair configured on the PC? > gpg2 text.asc > ... > gpg: public key decryption failed: End of file > gpg: decryption failed: No secret key This says you don't have a private key configured. > In my other boxes I don't have any entry in ~/.gnupg/gpg-agent.conf > and it works OK even over ssh. > > Joseph An entry like those suggested for pinentry would be required for *GUI* applications to know which front end to use. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] gpg2 - error gpg: public key decryption failed: No pinentry
On Wednesday, 17 January 2018 06:47:27 GMT Alexander Ben Nasrallah wrote: > On Tue, Jan 16, 2018 at 10:51:40PM -0700, the...@sys-concept.com wrote: > > When I try to decrypt a file I get: > > > > gpg2 text.asc > > ... > > gpg: public key decryption failed: No pinentry > > gpg: decryption failed: No secret key > > > > app-crypt/pinentry-1.0.0-r2 is installed > > Sometime you have to set one of the following. > > # PIN entry program > pinentry-program /usr/bin/pinentry-curses # no X > pinentry-program /usr/bin/pinentry-qt > pinentry-program /usr/bin/pinentry-kwallet > pinentry-program /usr/bin/pinentry-gtk-2 > > to whatever suits you in ~/.gnupg/gpg-agent.conf. > > Hope that helps. Or, instead of the above it should have: pinentry-program /usr/bin/pinentry which is a symlink to the pinentry GUI used by the system. In any case this file will be set up by /usr/bin/gpgconf, which is run when a GUI application calls gnupg, rather than edited manually by the user. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Firefox 57.0.4 without pulseaudio? Possible?
On Sunday, 14 January 2018 05:51:57 GMT tu...@posteo.de wrote: > On 01/13 11:39, Dale wrote: > > tu...@posteo.de wrote: > > > Hi Dale, > > > > > > one problem here is, that I am using firefox-bin, because compiling > > > firefox gave me compile errors in the past. > > > > > > One dependency of firefox-bin ispulseaudio. > > > > > > Currently I am trying to compile firefox and will see how far it > > > goes... > > > > > > Short question: What timezone you are? > > > > > > Cheers > > > Meino > > > > I'm on CST here in the USA. May be around a little longer. Before you > > compile Firefox, make sure of your USE flags. No point compiling that > > monster and then realizing a USE flag is wrong. > > > > I suspect you can make this work with a compiled version. Just a > > feeling. > > > > Dale > > > > :-) :-) > > Hi Dale, > > I am on UTC+1 here... > > Thanks for the USEful :) hint! > Will see how far it goes. Currently rust is compiling and is > periodically > eating all my memory and my box starts swapping... > > This will take a while. > As soon I have further results, I will be back! > > Cheers! > Meino With each job taking up to 1.2G of RAM you can quickly exhaust available memory on older PCs and swapping can start grinding the box to a halt. Since the move to profile 17.0 I found my old laptop comes to its knees on compiling larger packages like Chromium. If you also find swapping starts thrashing your drive and emerge moves nowhere fast as it becomes I/O bound, you should consider reducing the number of jobs with MAKEOPTS="-jX" where X is a lesser number than previously used and also reducing the --load-average to a low(er) number. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Microcode updates for "old" Intel CPU's
On Friday, 12 January 2018 17:47:46 GMT Rich Freeman wrote: > On Fri, Jan 12, 2018 at 11:23 AM, Corbin Bird <corbinb...@charter.net> wrote: > > On 01/11/2018 05:02 PM, Rich Freeman wrote: > >> IMO Spectre is going to drive some microcode updates for relatively > >> recent CPUs, compiler improvements, and some hand-tuning of > >> particularly critical code. > > > > The microcode updates pushed out for AMD by Gentoo seem to be only for : > > Fam16h, Fam17h CPUs. > > FWIW even the 17h microcode doesn't seem to be updating on my Ryzen: > > dmesg | grep microco > [0.989279] microcode: CPU0: patch_level=0x08001129 > [0.989421] microcode: CPU1: patch_level=0x08001129 > [0.989565] microcode: CPU2: patch_level=0x08001129 > [0.989708] microcode: CPU3: patch_level=0x08001129 > [0.989857] microcode: CPU4: patch_level=0x08001129 > [0.990001] microcode: CPU5: patch_level=0x08001129 > [0.990183] microcode: CPU6: patch_level=0x08001129 > [0.990332] microcode: CPU7: patch_level=0x08001129 > [0.990475] microcode: CPU8: patch_level=0x08001129 > [0.990619] microcode: CPU9: patch_level=0x08001129 > [0.990764] microcode: CPU10: patch_level=0x08001129 > [0.990905] microcode: CPU11: patch_level=0x08001129 > [0.991095] microcode: Microcode Update Driver: v2.2. My AMD: [0.025000] smpboot: CPU0: AMD A10-7850K Radeon R7, 12 Compute Cores 4C+8G (family: 0x15, model: 0x30, stepping: 0x1) is similarly failing to show signs of early microcode update, as it always did: $ dmesg | grep -i microcode [1.348991] microcode: CPU0: patch_level=0x06003106 [1.349718] microcode: CPU1: patch_level=0x06003106 [1.350434] microcode: CPU2: patch_level=0x06003106 [1.351158] microcode: CPU3: patch_level=0x06003106 [1.351879] microcode: Microcode Update Driver: v2.2. > That said, there still isn't any AMD documentation around the > microcode updates that I've been able to find, so I have no idea what > the correct patch level is even supposed to be. I just know that I'm > not getting a message about early updates. I do have linux 4.4.13 > which includes the family 17h patch. I'm on 4.14.12-gentoo now. > The other odd thing is that a firmware update was released for my > motherboard (ASRock AB350 Pro4) on the 10th, and if I flash it grub > will no longer boot the linux kernel, and it is pretty slow overall, > but it will still boot memtestx86 just fine. I figured I'd wait a few > days and see if there is any further info on it. No Asus MoBo firmware updates here ... but would they be even required/ necessary for the CPU bugs? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] OT: cleanup after USB backup drive unplugged?
On Friday, 12 January 2018 09:58:17 GMT Adam Carter wrote: > > I replaced it with a USB3 drive, so I needed to update the udev rules > > that automatically mount it and then "umount" it when it's removed. > > Pretty sure you'd risk filesystem corruption by not umounting before you > remove the device. Did it used for force an fsck on each mount because the > filesystem was "dirty"? If not, i have a fundamental misunderstanding of > how this stuff works. Yes, the sequence ought to be: sync && umount /dev/ || eject /dev/ I don't recall if eject includes the previous steps and therefore it is superfluous. I find some applications are reluctant to let go of filesystems on pluggable devices and umount can fail. In this case --lazy option of umount should work: umount -l /dev/ -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Microcode updates for "old" Intel CPU's
On Wednesday, 10 January 2018 01:46:08 GMT Rich Freeman wrote: > On Tue, Jan 9, 2018 at 8:33 PM, Corbin Bird <corbinb...@charter.net> wrote: > > On 01/09/2018 01:56 AM, Mick wrote: > > > > At this point, the only sure bet, is a non x86, x86_64, ARM, ARM64 CPU. > > > > Don't know enough to make a recommendation on a particular CPU arch at > > this > > point. > > Good luck with that... > > If you aren't hearing about Spectre fixes for a CPU it is most likely > because it is so obscure that nobody has bothered to check whether it > is vulnerable. > > Sure, there are some CPUs that have been tested and found to be ok. > However, almost anything modern is vulnerable to spectre. I just > wasn't something that was on anybody's radar. New CPUs are likely to > be resistant to these types of attacks regardless of vendor. Yes, but I would be surprised if new 'fixed' CPUs land anytime before 2019 ... if not 2020. I'd rather not be running an old Intel i7 which has not had its microcode patched all the way until then - if the complimentary microcode patch is *also* improving security besides speed, after the consequential kernel patches. > Sure, if I was about to place an order for 1000 CPUs tomorrow I'd > probably pick AMD over Intel to avoid the PTI overhead, but that is > about as far as I'd let these vulnerabilities affect purchase > decisions. There are lots of good reasons to go with ARM vs x86, but > this isn't really one of them. And outside of x86/ARM I think almost > any other CPU choice is going to be a niche item. I've seen Linus making statements back in 2016 of the year of the ARM laptop being upon us (Chromebook anyone?) and I've seen the 10nm Qualcomm Snapdragon 835 ARM laptop by Asus featuring on CES 2018 with impressively long battery life, but I have no idea how it compares in performance terms with the equally vulnerable current x86 arch machines. That may be a different discussion anyway. Most vendors only sell Intel in their laptops. I could build a desktop I guess, but Ryzen is also affected by Spectre. With Intel's burning platform I want to jump off, but I'm not sure if spending money at this stage will materially improve my PC security ... or if it is wiser to wait for the next round of 'improved' CPUs. Are any of you planning to replace your Intel PCs and what are you considering as a replacement at present? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: Is sys-firmware/intel-microcode-20180108 complete?
On Wednesday, 10 January 2018 19:49:25 GMT Nikos Chantziaras wrote: > On 10/01/18 20:12, Mick wrote: > > On Wednesday, 10 January 2018 17:06:46 GMT Peter Humphrey wrote: > >> On Wednesday, 10 January 2018 15:47:25 GMT Wolfgang Mueller wrote: > >>>> It looks as though my CPU hasn't been fixed yet. Is that right? > >>> > >>> It seems that patches are being pushed out as they are being received, > >>> so back when that one was released, no other updates were available. > >>> > >>> See https://bugs.gentoo.org/643430#c10 > >>> > >>> We should get the full range of updates in the next few days. > >> > >> Right. Patience is a virtue, they say. > > > > So what are we to do with our old PCs, which will no longer receive > > Intel's > > microcode blessing? Are we to throw them away in a landfill and of course > > take our custom elsewhere, or will the kernel patches suffice for both > > bugs > > and all variants? > > The spectre bug needs a microcode update. It can't be closed by software. > > Intel has a page somewhere for people asking "why do I do with my old > PC", and they tell you to kindly fuck off (not in those words exactly, > but it's what they mean) and direct you to their latest CPUs and places > where you can buy them. And of course you'll also need to buy new > mainboards and new RAM. > > Millions and millions of computers are out there running Sandy Bridge > and Ivy Bridge CPUs, since they're almost as fast as the latest CPUs. > People use them as their main machines, or as secondary machines. > They're all over the place. And they're all going to be vulnerable from > here on out. > > Strangely, nobody in the press called Intel out on it. Everybody acts as > if this perfectly acceptable. Strange that ... I can see a class action lawsuit kicking off in the very litigious US of A, assuming enough people wake up to this. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Is sys-firmware/intel-microcode-20180108 complete?
On Wednesday, 10 January 2018 17:06:46 GMT Peter Humphrey wrote: > On Wednesday, 10 January 2018 15:47:25 GMT Wolfgang Mueller wrote: > > > It looks as though my CPU hasn't been fixed yet. Is that right? > > > > It seems that patches are being pushed out as they are being received, > > so back when that one was released, no other updates were available. > > > > See https://bugs.gentoo.org/643430#c10 > > > > We should get the full range of updates in the next few days. > > Right. Patience is a virtue, they say. So what are we to do with our old PCs, which will no longer receive Intel's microcode blessing? Are we to throw them away in a landfill and of course take our custom elsewhere, or will the kernel patches suffice for both bugs and all variants? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Firefox-57.0.4 won't accept TLS certificate exception
On Tuesday, 9 January 2018 11:50:56 GMT Peter Humphrey wrote: > On Tuesday, 9 January 2018 11:34:24 GMT Mick wrote: > > I just noticed I am not able to override FF's protestations about the > > domain name of the loaded TLS certificate not matching the visited > > domain. When I click on Advance/"Confirm Security Exception" to > > permanently store this exception nothing happens. All I can do > > thereafter is cancel this pop up window. Of course the page will not > > load. > > I've noticed something similar, but it varies from one site to another. > Sometimes, confirming an exception works as before, but at other times I'm > not even offered the option to make an exception. In that latter case I fire > up another browser and use that instead. > > > How can I overcome this intransigence by the browser, who thinks it knows > > better what I wish to do? > > I wish I knew. :-) It seems it won't allow me to accept the certificate *permanently* but it accepts it temporarily. Phew! I also had to remove a number of security addons which no longer work, but this was not related to the certificate problem. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Firefox-57.0.4 won't accept TLS certificate exception
I just noticed I am not able to override FF's protestations about the domain name of the loaded TLS certificate not matching the visited domain. When I click on Advance/"Confirm Security Exception" to permanently store this exception nothing happens. All I can do thereafter is cancel this pop up window. Of course the page will not load. How can I overcome this intransigence by the browser, who thinks it knows better what I wish to do? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Microcode updates for "old" Intel CPU's
On Monday, 8 January 2018 17:47:03 GMT Corbin Bird wrote: > On 01/07/2018 02:46 PM, taii...@gmx.com wrote: > > I have several sandy/ivybridge CPU's and I was wondering if anyone > > knows as to if intel is releasing microcode updates for them. > > > > It sure would be funny if intel wanted you to buy a new CPU to fix a > > problem that was their fault to begin with. > > Do you remember the x87 bugs discovered in the original i586 Pentiums? > Never fixed. > Still built into every Intel CPU. > Intel does NOT replace "defective-by-design" hardware. > Instead, every OS is required to "software emulate" the FPU. > > Search for "errata-not-bug". > Intel's term for their screw-ups in their CPUs. > > Intel is only releasing patch code for the last five years of products. > > And ... if you read up on the "e-mails" being posted ... > ... It looks as if Intel is NOT going to fix this in future CPUs either. > Instead, every OS will be required to "work-around-this". > > Perhaps the reason "someone" tried to implicate this effects ALL CPU > architectures? > ( IBM RISC 6000, PowerPC, DEC Alpha, IBM System/390, Sun SPARC64, for > example ) > > Intel did try to make their "patch" mandatory for AMD CPUs ( with NO > disable switch ). > Why? > Think about it. > > Corbin So what affordable and available CPUs should one be looking into for a new desktop build? Also, laptops? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] microcode applied?
On Tuesday, 9 January 2018 00:15:03 GMT Peter Humphrey wrote: > On Monday, 8 January 2018 10:29:41 GMT Max Zettlmeißl wrote: > > > How do you build the microcode into the kernel? The only > > > place I can see to do that in menuconfig is under Device Drivers; > > > there's no such field under Firmware. > > > > The Device Drivers section is exactly where the microcode is included. > > CONFIG_EXTRA_FIRMWARE is the relevant symbol. > > Right. So which of the 95 files under /lib/firmware/intel-ucode do I > specify? That's in addition to the 14 files I have for my amdgpu. There may be a cleverer way, but this is how I have been doing it. Install sys-apps/iucode_tool. Run: # iucode_tool -S It will report the microcode signature for your CPU. For example, one of mine: iucode_tool: system has processor(s) with signature 0x000106e5 (Re)emerge sys-firmware/intel-microcode and capture all its output. Then search for the above signature, again from the same CPU, as an example, this matches: intel-ucode/06-1e-05 signature: 0x106e5<== flags: 0x13 revision: 0x07 date: 2013-08-20 size: 7168 Add the first line above in your CONFIG_EXTRA_FIRMWARE and rebuild your kernel. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] microcode applied?
On Monday, 8 January 2018 09:05:02 GMT Max Zettlmeißl wrote: > It seems like there are no microcode updates for your specific CPU > bundled in linux-firmware. Only two out of three Intel boxen here report an early update of microcode in dmesg. Even when they do, it is not certain the latest firmware has brought new code: [0.00] microcode: microcode updated early to revision 0x7, date = 2013-08-20 This date above puzzles me. Is it that on this PC's CPU the Intel bugs cannot be ameliorated by the latest intel-ucode release, or is it that Intel have not bothered to release microcode revisions for all their products. Running in the directory /lib/firmware/intel-ucode the following command: iucode_tool -v --date-after=2017-01-01 --write-all-named-to=TEST . spews out into TEST/ the microcode for this CPU: s000106E5_m0013_r0007.fw Therefore if microcode for my CPU was included in intel-ucode releases since 2017-01-01, is this the same unchanged microcode being released since the date reported in dmesg of 2013-08-20? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [OT] Re: [gentoo-user] Re: LINGUAS make.conf variable being ignored?
On Sunday, 7 January 2018 12:06:28 GMT Neil Bothwick wrote: > On Sun, 07 Jan 2018 11:51:33 +0000, Mick wrote: > > > > That was apparently after the white man tried to explain to him > > > > > > > > the > > > > > > > > "advantages" of Daylight Saving Time. > > > > > > Yes. Which, of course it doesn't. Save anything, I mean. > > > > It 'saves' the socio-economic model whereby aggressively promoted > > consumerism attempts to secure a continuation of artificially enhanced > > cross-border trade, at ever increasing rates. > > Although it was actually introduce, first by Germany then by Britain, in > 1915 to improve productivity for the war effort. Britain also introduced > licencing hours at the same time to avoid workers turning up hungover. Hmm ... according to Wikipedia it was conceived in the 19th century, well before the World Wars. Canada was the first place where DST was introduced, in Ontario only. Tis true nevertheless that the German Empire introduced it during the Great War to conserve coal, 5 years later. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [OT] Re: [gentoo-user] Re: LINGUAS make.conf variable being ignored?
On Sunday, 7 January 2018 11:18:36 GMT Peter Humphrey wrote: > On Sunday, 7 January 2018 01:46:00 GMT Walter Dnes wrote: > > On Sat, Jan 06, 2018 at 09:50:59PM +, Peter Humphrey wrote > > > > > On Saturday, 6 January 2018 18:34:36 GMT Neil Bothwick wrote: > > > > On Sat, 06 Jan 2018 16:00:14 +, Peter Humphrey wrote: > > > > > > grep linguas_en /var/portage/profiles/use.desc > > > > > > linguas_en - English locale > > > > > > linguas_en_AU - English locale for Australia > > > > > > linguas_en_CA - English locale for Canada > > > > > > linguas_en_GB - English locale for Britain > > > > > > linguas_en_US - English locale > > > > > > > > > > I object to that (not you, Neil, some dev or other). I live in > > > > > England; > > > > > I speak English. People who live in America speak their own version > > > > > of > > > > > it, adapted from the original. > > > > > > > > Indeed, en_US is a fork of the original. > > > > > > > > I guess that's why, in the old cowboy films, the native Americans used > > > > to > > > > say "white man speak with forked tongue" ;-) > > > > > > Then there's that old one about the Native American chief who observed > > > that only a white man could think that cutting a foot off the bottom of > > > a blanket and sewing it onto the top would give him a longer blanket. > > > > > That was apparently after the white man tried to explain to him the > > > > "advantages" of Daylight Saving Time. > > Yes. Which, of course it doesn't. Save anything, I mean. It 'saves' the socio-economic model whereby aggressively promoted consumerism attempts to secure a continuation of artificially enhanced cross-border trade, at ever increasing rates. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Switching from Seamonkey to Firefox and Thunderbird
On Friday, 5 January 2018 16:39:49 GMT Dale wrote: > Dale wrote: > > Howdy, > > > > [[[SNIP]]] > > > > Has anyone moved from Seamonkey to Thunderbird recently? Anyone know of > > a howto that I missed? Anyone know of a reason this just won't work? > > > > Thanks much. > > > > Dale > > > > :-) :-) > > After no one replied, I figured either no one ever did this or it must > be really simple and easy. I took the plunge and started up > Thunderbird. The first thing that loaded up was a question on if I'd > like to import my old Seamonkey emails. I answered Yes and it did its > thing. Given the huge number of emails I have going back over a decade, > it took a while. You may have been able to achieve the same by mapping T'bird's paths for mail folders to Seamonkey's, but I don't use either so I don't know if this would have been a straight forward exercise. > I will add this for future reference. Before asking it to download new > messages from your email provider, click through each and every folder > and make sure the messages show up in the listing. I didn't do that at > first and when it checked in and tried to download the new messages, it > gave a error and left it in the default folder. Also, when you do that, > expect some messages to be marked as unread. I just right clicked the > folder and told it to mark all as read, since I already have. I'm not > sure but I think it may do that on messages that were deleted and were > downloaded again or something. It could be something else tho. I don't > generally delete messages. > > I would think this would work the same on any Linux distro. May even > work on windows as well. > > Now to figure out how to tell Thunderbird to open links in Firefox and > which profile as well. It wants to open in Seamonkey and picks a > profile that is already open which gives the usual error about it being > in use. Hm. > > Dale > > :-) :-) This should help: http://kb.mozillazine.org/Changing_the_web_browser_invoked_by_Thunderbird -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Spectre CPU flaws
On Thursday, 4 January 2018 05:50:59 GMT the...@sys-concept.com wrote: > New bug resurface. > What is the command to test AMD CUP's if flag: X86_BUG_CPU_INSECURE is > enabled? > > From: > https://lkml.org/lkml/2017/12/27/2 grep bugs /proc/cpuinfo -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] iMON remote, evdev, X and Kodi stopped working
On Wednesday, 3 January 2018 19:10:45 GMT Manuel McLure wrote: > Hi all, I'm having a problem with my Kodi system. Unfortunately I don't use > the Kodi system very often (the system also runs as a general server on my > network so most of my work on it is done through ssh) so I don't know > exactly when this happened, but it would have been in the last couple of > months. > > The problem is that the iMON IR remote stopped working at some point. I > have an Antec Fusion Remote Black case that uses an iMON LCD and IR > receiver. This was working fine with evdev/X/Kodi but at some point stopped > working, and since I haven't used the Kodi interface for a few months I > don't know exactly what broke it. > > It looks like the most interesting information comes from Xorg.0.log: > > ... > [217569.500] (II) config/udev: Adding input device iMON Remote (15c2:ffdc) > (/dev/input/event4) > [217569.500] (**) iMON Remote (15c2:ffdc): Applying InputClass "evdev > keyboard catchall" > [217569.500] (II) Using input driver 'evdev' for 'iMON Remote (15c2:ffdc)' > [217569.500] (**) iMON Remote (15c2:ffdc): always reports core events > [217569.500] (**) evdev: iMON Remote (15c2:ffdc): Device: > "/dev/input/event4" > [217569.500] (--) evdev: iMON Remote (15c2:ffdc): Vendor 0x15c2 Product > 0xffdc > [217569.500] (WW) evdev: iMON Remote (15c2:ffdc): Don't know how to use > device > [217569.600] (EE) PreInit returned 8 for "iMON Remote (15c2:ffdc)" > [217569.600] (II) UnloadModule: "evdev" > ... > > I've tried googling "evdev Don't know how to use device" but haven't found > anything relevant. Does anyone have any clues about what I could be > missing? It looks like xf86-input-evdev 2.10.5 went stable back in March > 2017, and I'm pretty sure that the remote was working after that. Sometime in autumn I had a similar symptom with a (non-gentoo) box running kodi here. I had to reprogram the IR remote control handset, but wouldn't know how to go about it with yours ... -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] error while loading shared libraries: libstdc++.so.6:
On Tuesday, 2 January 2018 17:11:24 GMT the...@sys-concept.com wrote: > I was installing some brother driver simply run: > # tar zxvf ./hl5370dwlpr-2.0.3-1.i386.tar.gz -C / > ./ > ./usr/ > ./usr/local/ > ./usr/local/Brother/ [snip ...] You would be better off using 'net-print/brother-hl5370dw-bin' from brother overlay. > Now, I can not run any emerge, eix etc command, I'm getting: > eix: error while loading shared libraries: libstdc++.so.6: cannot open > shared object file: No such file or directory > > bash: emerge: command not found > > However libstdc++ exists: This is a coincidence. Something *else* must have happened because untarring the brother archives did not interfere in any way with your @system packages. Did you move to the 17.1 amd64 profile as per portage news item '2017-12-26- experimental-amd64-17-1-profiles' and partly messed up the removal of the symlink to /lib64? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] old kernels are installed during the upgrade
On Tuesday, 2 January 2018 12:03:24 GMT Alexander Kapshuk wrote: > On Tue, Jan 2, 2018 at 1:54 PM, Kruglov Sergey <kr_se...@hotmail.com> wrote: > > Hello, All! > > > > > > Now I have gentoo-sources-4.14.8-r1 installed. > > > > After "emerge --ask --update --deep --with-bdeps=y --newuse @world" > > command emerge installs old kernel in NS (after first update 4.12.12, > > after second update 4.9.49-r1). > > How can I fix it? > > There is sys-kernel/gentoo-sources in my world set. > > There was a discussion about this on the gentoo-dev mailing list. See > the link below for details: > https://archives.gentoo.org/gentoo-dev/message/1d2f3f98c2485fa53ed602bc82850 > 54c Alan copied a message from the devs list a few days ago, explaining that kernel 4.14 release has caused a lot of breakage and was keyworded for this reason. Reverting to earlier releases is meant to address this. That said, I've been running gentoo-sources-4.14.8-r1 here too, on 3 different boxen and thought it was doing fine, thanks. Then I discovered KVM images failed to boot with this error: kernel: kvm [5499]: vcpu0, guest rIP: 0xbbe67be4 disabled perfctr wrmsr: 0xc2 data 0x :-/ -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Kernel upgrade confusion
Hi Jalus, On Saturday, 30 December 2017 18:43:12 GMT Jalus Bilieyich wrote: > Recently there was a kernel update and I don't want to reconfigure it > from scratch. In the official documentation, it told me to move the old > .config into the new kernel source tree and type > make oldconfig > > This is where I'm confused; which .config file (/proc/config.gz or > /boot/config) and where in the kernel source tree do I put this file in. You will need to *copy* your old/existing kernel .config file to the new kernel source directory. Where you copy it from depends on where you have stored your previous kernel .config file. It may be in your /boot, if you have copied it there from /usr/ src/linux/.config last time you compiled your kernel. It should be in /usr/ src/linux/ if this symlink is still pointing to your previous kernel. You may be able to obtain it from your /proc/config.gz if you have configured your kernel to use this option. So, as root you would for example do: cp /usr/src/linux-4.4.87-r1/.config /usr/src/linux/4.9.49-r1/ && \ rm /usr/src/linux && \ ln -s /usr/src/linux-4.9.49-r1 linux && \ cd /usr/src/linux && \ make oldconfig to copy the existing .config into the new kernel sources directory, to remove the symlink pointing to the previous kernel, to create a new symlink to the new kernel sources directory, to change your working directory into the new kernel source tree, and finally to run make oldconfig in order to configure any new options available in kernel 4.9.49-r1, without having to reconfigure each and every option already set in your kernel 4.4.87-r1. If you have a /proc/config.gz you can unpack it and redirect it to your new kernel source directory: zcat /proc/config.gz > /usr/src/linux-4.9.49-r1/.config before you proceed with the last four steps I showed above. HTH. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: [was: What can cause printer to crop top of page?] /etc/papersize is ignored
On Friday, 29 December 2017 14:30:43 GMT Peter Humphrey wrote: > > I think the bug is that "A4" has to be set in so many places, where "so > > many" means more than one. In a well designed printing system, there > > would be just one place to set it. > > And that would have to be /etc/papersize, no? Well, /etc/papersize should be sourced when seeking a default setting, unless $PAPERSIZE, or $PAPERCONF is set. In any case, cups should be able to change the printer's default setting to a different size. Also various applications should be able to select a different size when submitting individual print jobs, or we would have trouble printing labels, envelopes, photographs and what have you. What should not really happen is setting defaults for the OS, the printer and the application and then ALL OF THEM being ignored by Brother's lpdwrapper script. Or am I asking too much by companies who shy away from publishing openprinting code. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: [was: What can cause printer to crop top of page?] /etc/papersize is ignored
On Thursday, 28 December 2017 06:14:23 GMT taii...@gmx.com wrote: > For the record I would also like to add that using the duplexer on some > poorly designed printers cuts off the bottom or top of the page without > any type of notification. Debugging cups and trying all conceivable combos of settings didn't get me anywhere. Then I decided to start looking around the brother driver files installed under /opt/brother/Printers/hl3140cw/, where I found ./inf/ brhl3140cwrc and ./inf/brhl3140cwfunc both specifying Letter instead of A4 as paper size. So, I've set "PageSize=A4" in brhl3140cwrc and it now prints correctly aligned pages once more. I'm not sure if this is the default path for these files across distros, or if some symlink from /usr/libexec/cups/filter/ or /usr/share/cups/model/ is not working as it should. In any case, the bug seems to be that using the cups GUI interface doesn't have any effect on the driver configuration files which are by default set to PageSize=Letter and also messes up the created ppd file used by cups. I'm posting this here to save others time, should they come across the same problem. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Re: [was: What can cause printer to crop top of page?] /etc/papersize is ignored
On Wednesday, 27 December 2017 19:45:04 GMT Mick wrote: > TLDR: Why is the content of my /etc/papersize being ignored? Oops! It is not ignored: $ paperconf a4 Which leaves my problem unanswered. :-( > More detail below. > > On Friday, 22 December 2017 16:30:06 GMT Mick wrote: > > On Thursday, 21 December 2017 23:20:24 GMT you wrote: > > > On Thursday, 21 December 2017 23:01:50 GMT Walter Dnes wrote: > > > > Is there a default page size setting in your desktop environment > > > > that > > > > > > > > could've changed? > > > > > > This problem is happening across different PCs, desktops/DEs and > > > different > > > applications. The common factor is they are all using CUPS, the same > > > brother driver and the default page size of A4. > > > > > > I'll have another poke tomorrow into the http GUI of the printer and > > > then > > > try to print with MSWindows to see what happens. > > > > MSWindows prints fine, just as Linux used to until recently. I printed a > > portrait layout from Firefox on both MSWindows and Linux. > > A number of you hinted at a paper size mismatch - between printer and PC. > You were correct! I foolishly believed what the cups GUI told me, despite > some strange behaviour I came across. > > In particular, modifying the printer using the cups GUI ends up changing > *some* of the default paper size fields from "A4" (as shown in the GUI) to > "Letter" - as shown in this extract of /etc/cups/ppd/HL-3140CW.ppd: > > grep Default /etc/cups/ppd/HL-3140CW.ppd > *DefaultColorSpace: RGB > *%DefaultOutputOrder: Reverse > *DefaultPageSize: A4 > *DefaultPageRegion: A4 > *DefaultImageableArea: Letter > *DefaultPaperDimension: Letter > [snip ...] > > Using the cups GUI to 'Set Default Settings' and (re)selecting "A4" seems to > work, as far as the ppd file is concerned. > > However, when I set the printer's Tray 1 from "Any" size to "A4" using its > control panel and tried to print a page with: > > lpr -o fit-to-page -o media=A4 -P 'HL-3140CW' test_print.txt > > the printer started blinking like a Christmas tree with the message: > > Size mismatch. Load Letter paper and press Go. > > So I looked in /etc/papersize and saw it is "a4": > > $ cat /etc/papersize > a4 > > Then I checked the $PAPERSIZE and $PAPERCONF variables both of which > appeared to not being set. Using paperconf to interrogate the default > setting I got this beauty: > > $ paperconf -d > letter > > What the ...?! > > So, why is /etc/papersize being ignored? > > PS. I noticed my locale has LC_PAPER="en_GB.UTF-8". Not sure if relevant, > but thought of mentioning it just in case. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Re: [was: What can cause printer to crop top of page?] /etc/papersize is ignored
TLDR: Why is the content of my /etc/papersize being ignored? More detail below. On Friday, 22 December 2017 16:30:06 GMT Mick wrote: > On Thursday, 21 December 2017 23:20:24 GMT you wrote: > > On Thursday, 21 December 2017 23:01:50 GMT Walter Dnes wrote: > > > Is there a default page size setting in your desktop environment that > > > could've changed? > > > > This problem is happening across different PCs, desktops/DEs and different > > applications. The common factor is they are all using CUPS, the same > > brother driver and the default page size of A4. > > > > I'll have another poke tomorrow into the http GUI of the printer and then > > try to print with MSWindows to see what happens. > > MSWindows prints fine, just as Linux used to until recently. I printed a > portrait layout from Firefox on both MSWindows and Linux. A number of you hinted at a paper size mismatch - between printer and PC. You were correct! I foolishly believed what the cups GUI told me, despite some strange behaviour I came across. In particular, modifying the printer using the cups GUI ends up changing *some* of the default paper size fields from "A4" (as shown in the GUI) to "Letter" - as shown in this extract of /etc/cups/ppd/HL-3140CW.ppd: grep Default /etc/cups/ppd/HL-3140CW.ppd *DefaultColorSpace: RGB *%DefaultOutputOrder: Reverse *DefaultPageSize: A4 *DefaultPageRegion: A4 *DefaultImageableArea: Letter *DefaultPaperDimension: Letter [snip ...] Using the cups GUI to 'Set Default Settings' and (re)selecting "A4" seems to work, as far as the ppd file is concerned. However, when I set the printer's Tray 1 from "Any" size to "A4" using its control panel and tried to print a page with: lpr -o fit-to-page -o media=A4 -P 'HL-3140CW' test_print.txt the printer started blinking like a Christmas tree with the message: Size mismatch. Load Letter paper and press Go. So I looked in /etc/papersize and saw it is "a4": $ cat /etc/papersize a4 Then I checked the $PAPERSIZE and $PAPERCONF variables both of which appeared to not being set. Using paperconf to interrogate the default setting I got this beauty: $ paperconf -d letter What the ...?! So, why is /etc/papersize being ignored? PS. I noticed my locale has LC_PAPER="en_GB.UTF-8". Not sure if relevant, but thought of mentioning it just in case. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: Kernel 4.14.7 no longer switches to VT7
On Monday, 25 December 2017 10:07:11 GMT Jörg Schaible wrote: > Hi Raymond, > > Am Sat, 23 Dec 2017 22:59:32 -0800 schrieb Raymond Jennings: > > That sounds like a possible issue with your X configuration. > > > > Did you double check /etc/conf.d/xdm and the like to make sure that your > > VT is indeed set to 7. > > Content of /etc/conf.d/xdm > === %< == > CHECKVT=7 > DISPLAYMANAGER="sddm" > rc_use="mysql" > === %< == > > > Also double check your display manager configuration. > > > > If your manual VT switch works fine I'd suspect a misbehaving display > > manager possibly being confused by bad configuration > > Then, why does it work seamlessly when I boot with the old 4.12.12 kernel? > > Since I have this behavior with two desktop machines, I thought others might > haven been affected as well ... > > Cheers, > Jörg This won't help, but: sddm has been broken on 3 different PCs here with Intel and AMD CPUs, on different MoBos, for months. As far as I recall it always launched the desktop, but would not logout on the first attempt. It also broke udisks because I could no longer mount storage devices using the GUI. I've posted a bug, but nothing came of it other than the recommendation to try later versions - all of them borked. On my own laptop I've moved to lightdm. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] 'firmware_install' won't on 4.14.7-gentoo
On Sunday, 24 December 2017 04:10:55 GMT Adam Carter wrote: > > As you can see above there is a marked difference between the firmware > > built > > by the two kernels. In any case, my '/lib/firmware/' path contains: > > > > $ ls -l /lib/firmware/radeon/RV730* > > -rw-r--r-- 1 root root 5440 Dec 20 17:29 /lib/firmware/radeon/RV730_me. > > bin > > -rw-r--r-- 1 root root 3392 Dec 20 17:29 /lib/firmware/radeon/RV730_ > > pfp.bin > > -rw-r--r-- 1 root root 16684 Dec 20 17:29 /lib/firmware/radeon/RV730_ > > smc.bin > > Earlier I saw > > CONFIG_EXTRA_FIRMWARE="intel-ucode/06-1e-05 radeon/R700_rlc.bin > radeon/RV730_smc.bin radeon/RV710_uvd.bin" Yes, other than the Intel microcode I followed the Gentoo Wiki page for my graphics card: https://wiki.gentoo.org/wiki/Radeon > For radeon/R700_rlc.bin > $ find /lib/firmware/ -name \*R700\* > /lib/firmware/radeon/R700_rlc.bin > > For radeon/RV730_smc.bin > $ find /lib/firmware/ -name \*RV730\* > /lib/firmware/radeon/RV730_pfp.bin > /lib/firmware/radeon/RV730_smc.bin > /lib/firmware/radeon/RV730_me.bin > > For adeon/RV710_uvd.bin > $ find /lib/firmware/ -name \*RV710\* > /lib/firmware/radeon/RV710_me.bin > /lib/firmware/radeon/RV710_pfp.bin > /lib/firmware/radeon/RV710_smc.bin > /lib/firmware/radeon/RV710_uvd.bin > > So it looks like you're trying to load firmware from three different > models. Yes, this is what the Wiki recommends for RV730. > Run lspci -v to determine which is correct one, then load all the firmwares > for that model. 02:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] RV730/M96-XT [Mobility Radeon HD 4670] (prog-if 00 [VGA controller]) Subsystem: Dell RV730/M96-XT [Mobility Radeon HD 4670] Flags: bus master, fast devsel, latency 0, IRQ 29 Memory at d000 (32-bit, prefetchable) [size=256M] I/O ports at 2000 [size=256] Memory at cfef (32-bit, non-prefetchable) [size=64K] [virtual] Expansion ROM at 000c [disabled] [size=128K] Capabilities: [50] Power Management version 3 Capabilities: [58] Express Legacy Endpoint, MSI 00 Capabilities: [a0] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [100] Vendor Specific Information: ID=0001 Rev=1 Len=010 Kernel driver in use: radeon 02:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] RV710/730 HDMI Audio [Radeon HD 4000 series] Subsystem: Dell RV710/730 HDMI Audio [Radeon HD 4000 series] Flags: bus master, fast devsel, latency 0, IRQ 32 Memory at cfeec000 (32-bit, non-prefetchable) [size=16K] Capabilities: [50] Power Management version 3 Capabilities: [58] Express Legacy Endpoint, MSI 00 Capabilities: [a0] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [100] Vendor Specific Information: ID=0001 Rev=1 Len=010 Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel It seems the blobs changed. The firmware_install message confused me by making me think this was the cause of not being able to initiate the graphics card when I tried to boot the new kernel, rather than the missing blobs. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] What can cause printer to crop top of page?
On Thursday, 21 December 2017 23:20:24 GMT you wrote: > On Thursday, 21 December 2017 23:01:50 GMT Walter Dnes wrote: > > Is there a default page size setting in your desktop environment that > > > > could've changed? > > This problem is happening across different PCs, desktops/DEs and different > applications. The common factor is they are all using CUPS, the same > brother driver and the default page size of A4. > > I'll have another poke tomorrow into the http GUI of the printer and then > try to print with MSWindows to see what happens. MSWindows prints fine, just as Linux used to until recently. I printed a portrait layout from Firefox on both MSWindows and Linux. In MSWindows, the Shrink-to-fit setting made the page fit into the A4 paper, perfectly. In Linux, the top of the page is cropped, the bottom stops short by an equivalent height and the sides are wider. It's as if the page is both misaligned vertically and not shrunk-to-fit. This tells me there's nothing wrong with the printer - half a problem solved! I still can't explain why the Linux cups and brother driver started misbehaving, just because I happened to recompile them with gcc-6.4.0. I'm also not sure what I could tweak to restore the Linux driver's behaviour to what it should be. Any ideas how I could calibrate the paper size in the Linux driver to align with the physical dimensions of A4? The ppd file and its measurements look correct to me, but as you may have figured out, I'm no printing expert ... -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] What can cause printer to crop top of page?
On Thursday, 21 December 2017 23:01:50 GMT Walter Dnes wrote: > Is there a default page size setting in your desktop environment that > could've changed? This problem is happening across different PCs, desktops/DEs and different applications. The common factor is they are all using CUPS, the same brother driver and the default page size of A4. I'll have another poke tomorrow into the http GUI of the printer and then try to print with MSWindows to see what happens. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] What can cause printer to crop top of page?
On Thursday, 21 December 2017 21:24:57 GMT Jack wrote: > I may be grabbing at straws here, but what happens if you print > something in landscape? Is the trimmed edge the new top (long edge) or > still the same short edge? Aha! Good call. In landscape the cropping takes place on the left (short) edge, not the top of the page. > Does the same happen with other apps? browser, emacs, gimp (just make > a simple line drawing), pdf display, image viewer, ...? I'm thinking > of printing things that originate as different image types - maybe one > will behave differently and point to something in the process. Can you > send a plain text file to the printer with lp? I sent a page with Chromium in landscape, it cropped the left hand short edge too. PDF readers print with cropped top, in portrait. I sent a txt file with 'lpr -o fit-to-page' in portrait and the same cropping on the top of the page happens. So it is not application specific, but page orientation specific. Could it be something has gone wrong with the rollers? This is a brand new printer! I'll try to print a page with MSWindows tomorrow, if only to prove if this is a cups problem or not. Thanks for your suggestions! -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] What can cause printer to crop top of page?
On Thursday, 21 December 2017 18:28:30 GMT you wrote: > On Thursday, 21 December 2017 17:01:09 GMT Jack wrote: > > It sounds to me like a possible A4/USLetter issue. Can you confirm > > that both LOWriter (and other apps) and cups (or whatever is driving > > the printer) are both set to A4? > > > > Jack > > Yes, CUPS and all desktop applications show A4 as the default paper size. > CUPS reports: > > $ lpoptions -p 'HL-3140CW' -l > PageSize/Media Size: *A4 Letter Legal Executive A5 A6 B5 JISB5 JISB6 EnvDL [snip ...] > > Are the above ppd entries correct, or am I misinterpreting the ppd logic? OK, uninstalled cups and the brother printer driver, deleted manually the / etc/cups/pdd/ files reinstalled cups and the brother printer driver and reconfigured the printer using the CUPS http page. Now the discrepancy has disappeared from the ppd file, but still the same error remains. Top of the page is cropped! Arrgh! -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] What can cause printer to crop top of page?
On Thursday, 21 December 2017 17:01:09 GMT Jack wrote: > On 2017.12.21 09:20, Mick wrote: > > I've been using a Brother "HL-3140CW" model with the > > net-print/brother- hl3140cw-bin-1.1.4 driver from the brother-overlay. > > > > Since I moved to profile 17.0 (I think) pages are being cropped at > > the top when printing from various applications (LOWriter, Okular, > > etc.) on different PCs. > > > > In LOWriter I had to set a 35mm margin at the top, to be able to get > > just 13mm at the top of the physical A4 paper, before the top line of > > text is printed. > > > > I have used the Plasma systemsettings5 for printers as well as the > > http GUI of the printer to see if anything is amiss, but I can't find > > anything I can change to restore the page alignment as it was a > > couple of weeks ago. > > > > The OEM online help pages suggest to adjust the margins on the > > application you're are printing from. > > > > Any idea what has brought about this change and how I may be able to > > revert it? Have you noticed anything similar? > > It sounds to me like a possible A4/USLetter issue. Can you confirm > that both LOWriter (and other apps) and cups (or whatever is driving > the printer) are both set to A4? > > Jack Yes, CUPS and all desktop applications show A4 as the default paper size. CUPS reports: $ lpoptions -p 'HL-3140CW' -l PageSize/Media Size: *A4 Letter Legal Executive A5 A6 B5 JISB5 JISB6 EnvDL EnvC5 Env10 EnvMonarch Br3x5 FanFoldGermanLegal EnvPRC5Rotated Postcard EnvYou4 EnvChou3 210x270mm 195x270mm 184x260mm 197x273mm BRInputSlot/Paper Source: *AutoSelect Tray1 Manual BRResolution/Print Quality: *600dpi 600x2400dpi BRMonoColor/Color / Mono: Auto FullColor *Mono BRMediaType/Media Type: *Plain Thin Thick Thicker BOND Env EnvThick EnvThin Recycled Label Glossy PostCard BRColorMatching/Color Mode: *Normal Vivid None BRGray/Improve Gray Color: OFF *ON BREnhanceBlkPrt/Enhance Black Printing: *OFF ON BRTonerSaveMode/Toner Save Mode: OFF *ON BRImproveOutput/Improve Print Output: *OFF BRLessPaperCurl BRFixIntensity BRSkipBlank/Skip Blank Page: *OFF ON BRBrightness/Brightness: -20 -19 -18 -17 -16 -15 -14 -13 -12 -11 -10 -9 -8 -7 -6 -5 -4 -3 -2 -1 *0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 BRContrast/Contrast: -20 -19 -18 -17 -16 -15 -14 -13 -12 -11 -10 -9 -8 -7 -6 -5 -4 -3 -2 -1 *0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 BRRed/Red: -20 -19 -18 -17 -16 -15 -14 -13 -12 -11 -10 -9 -8 -7 -6 -5 -4 -3 -2 -1 *0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 BRGreen/Green: -20 -19 -18 -17 -16 -15 -14 -13 -12 -11 -10 -9 -8 -7 -6 -5 -4 -3 -2 -1 *0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 BRBlue/Blue: -20 -19 -18 -17 -16 -15 -14 -13 -12 -11 -10 -9 -8 -7 -6 -5 -4 -3 -2 -1 *0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 BRSaturation/Saturation: -20 -19 -18 -17 -16 -15 -14 -13 -12 -11 -10 -9 -8 -7 -6 -5 -4 -3 -2 -1 *0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 However, looking inside /etc/cups/ppd/HL-3140CW.ppd I see some strange things: *% Media Selection == *OpenUI *PageSize/Media Size: PickOne *OrderDependency: 11 AnySetup *PageSize *DefaultPageSize: A4 [snip ...] *OpenUI *PageRegion: PickOne *OrderDependency: 12 AnySetup *PageRegion *DefaultPageRegion: A4 [snip ...] BUT ... then I noticed this: *DefaultImageableArea: Letter<==What the ...?! *ImageableArea A4/A4: "12 12 583 830" *ImageableArea Letter/Letter: "12 12 600 780" *ImageableArea Legal/Legal: "12 12 600 996" [snip ...] AND *% Information About Media Sizes *DefaultPaperDimension: Letter<==Should this be here ...?! *PaperDimension A4/A4: "595 842" *PaperDimension Letter/Letter: "612 792" *PaperDimension Legal/Legal:"612 1008" Are the above ppd entries correct, or am I misinterpreting the ppd logic? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] What can cause printer to crop top of page?
On Thursday, 21 December 2017 15:16:32 GMT tu...@posteo.de wrote: > On 12/21 02:20, Mick wrote: > > I've been using a Brother "HL-3140CW" model with the net-print/brother- > > hl3140cw-bin-1.1.4 driver from the brother-overlay. > > > > Since I moved to profile 17.0 (I think) pages are being cropped at the top > > when printing from various applications (LOWriter, Okular, etc.) on > > different PCs. > > > > In LOWriter I had to set a 35mm margin at the top, to be able to get just > > 13mm at the top of the physical A4 paper, before the top line of text is > > printed. > > > > I have used the Plasma systemsettings5 for printers as well as the http > > GUI of the printer to see if anything is amiss, but I can't find anything > > I can change to restore the page alignment as it was a couple of weeks > > ago. > > > > The OEM online help pages suggest to adjust the margins on the application > > you're are printing from. > > > > Any idea what has brought about this change and how I may be able to > > revert > > it? Have you noticed anything similar? > > Hi Mick, > > a shot into the dark: > Would it be possible, that not the profile as such has caused the > problem but the recompilation of such a lot of applications? [snip ...] Thanks Meino, the problem is not with a particular application. Even when I print a test page from CUPS http interface/Maintenance, the top of the page is cropped and the bottom of the test page is consequently printed further up. I'll try reinstalling the firmware next using MSWindows in case something went sideways with the printer. It won't be the first coincidence this week. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] What can cause printer to crop top of page?
I've been using a Brother "HL-3140CW" model with the net-print/brother- hl3140cw-bin-1.1.4 driver from the brother-overlay. Since I moved to profile 17.0 (I think) pages are being cropped at the top when printing from various applications (LOWriter, Okular, etc.) on different PCs. In LOWriter I had to set a 35mm margin at the top, to be able to get just 13mm at the top of the physical A4 paper, before the top line of text is printed. I have used the Plasma systemsettings5 for printers as well as the http GUI of the printer to see if anything is amiss, but I can't find anything I can change to restore the page alignment as it was a couple of weeks ago. The OEM online help pages suggest to adjust the margins on the application you're are printing from. Any idea what has brought about this change and how I may be able to revert it? Have you noticed anything similar? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Radeon RV730 blobs changed
On Wednesday, 20 December 2017 19:55:40 GMT Mick wrote: > On Wednesday, 20 December 2017 18:31:03 GMT Mike Gilbert wrote: > > On Wed, Dec 20, 2017 at 12:39 PM, Mick <michaelkintz...@gmail.com> wrote: > > > [1.072525] [drm] Loading RV730 Microcode > > > [1.072679] radeon :02:00.0: Direct firmware load for radeon/ > > > RV730_pfp.bin failed with error -2 > > > [1.072859] r600_cp: Failed to load firmware "radeon/RV730_pfp.bin" > > > [1.072974] [drm:rv770_init] *ERROR* Failed to load firmware! > > > > Does this error occur before your root filesystem has been mounted? > > You should see a message about mounting root further down in the dmesg > > output. > > > > If that's the case, and your kernel needs the firmware blob before > > root has been mounted, you will probably need to start using an > > initramfs, or add radeon/RV730_pfp.bin to CONFIG_EXTRA_FIRMWARE. > > I beg your pardon guys, the deprecated 'make firmware_install' through me > off the scent! It seems that the blobs for Radeon R730 have changed with > kernel 4.14.7, from those the Gentoo Wiki shows. So I'm fishing for errors > in dmesg and adding one blob at a time to see what I get. The kernel > compile builds the blobs fine as I show below, even if the firmware_install > is not used any longer. > > CHK include/generated/compile.h > MK_FW firmware/radeon/RV730_me.bin.gen.S > AS firmware/radeon/RV730_me.bin.gen.o > AR firmware/built-in.o OK, problem solved for now! :-) My list of blobs was: CONFIG_EXTRA_FIRMWARE="intel-ucode/06-1e-05 radeon/R700_rlc.bin radeon/ RV730_smc.bin radeon/RV710_uvd.bin" and it now is: CONFIG_EXTRA_FIRMWARE="intel-ucode/06-1e-05 radeon/R700_rlc.bin radeon/ RV730_pfp.bin radeon/RV730_me.bin radeon/RV730_smc.bin radeon/RV710_uvd.bin" Console buffer works, xserver works. I don't know if all of them are necessary, but if it works and doesn't complain I don't have to try messing things up. ;-) My video card in case you have the same is: Chipset: "ATI Mobility Radeon HD 4670" (ChipID = 0x9488) -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Radeon RV730 blobs changed
On Wednesday, 20 December 2017 18:31:03 GMT Mike Gilbert wrote: > On Wed, Dec 20, 2017 at 12:39 PM, Mick <michaelkintz...@gmail.com> wrote: > > [1.072525] [drm] Loading RV730 Microcode > > [1.072679] radeon :02:00.0: Direct firmware load for radeon/ > > RV730_pfp.bin failed with error -2 > > [1.072859] r600_cp: Failed to load firmware "radeon/RV730_pfp.bin" > > [1.072974] [drm:rv770_init] *ERROR* Failed to load firmware! > > Does this error occur before your root filesystem has been mounted? > You should see a message about mounting root further down in the dmesg > output. > > If that's the case, and your kernel needs the firmware blob before > root has been mounted, you will probably need to start using an > initramfs, or add radeon/RV730_pfp.bin to CONFIG_EXTRA_FIRMWARE. I beg your pardon guys, the deprecated 'make firmware_install' through me off the scent! It seems that the blobs for Radeon R730 have changed with kernel 4.14.7, from those the Gentoo Wiki shows. So I'm fishing for errors in dmesg and adding one blob at a time to see what I get. The kernel compile builds the blobs fine as I show below, even if the firmware_install is not used any longer. CHK include/generated/compile.h MK_FW firmware/radeon/RV730_me.bin.gen.S AS firmware/radeon/RV730_me.bin.gen.o AR firmware/built-in.o -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] 'firmware_install' won't on 4.14.7-gentoo
On Wednesday, 20 December 2017 17:27:25 GMT Mike Gilbert wrote: > On Wed, Dec 20, 2017 at 11:51 AM, Mick <michaelkintz...@gmail.com> wrote: > > What step am I missing to arrive at a bootable kernel with all necessary > > firmware? > > Are you using an initramfs? Does the initramfs contain the necessary > firmware blobs? Thanks again Mike, no I am not using an initramfs. I just had a further look to see why the 4.14.7 does not boot. I discovered radeon/RV730_pfp.bin blob does not load and xserver segfaults. CPU microcode and WiFi firmware loads fine. So seems more relevant to a radeon firmware problem. Some additional observations: When I boot with 4.14.7 the xserver segfaults: == ATI Mobility Radeon HD 5000 Series, ATI Mobility Radeon HD 5570, ATI Radeon HD 5670, ATI Radeon HD 5570, ATI Radeon HD 5500 Series, REDWOOD, ATI Mobility Radeon Graphics, CEDAR, ATI FirePro 2270, ATI Radeon HD 5450, CAYMAN, AMD Radeon HD 6900 Series, AMD Radeon HD 6900M Series, Mobility Radeon HD 6000 Series, BARTS, AMD Radeon HD 6800 Series, AMD Radeon HD 6700 Series, TURKS, CAICOS, ARUBA, TAHITI, PITCAIRN, VERDE, OLAND, HAINAN, BONAIRE, KABINI, MULLINS, KAVERI, HAWAII [30.806] (++) using VT number 7 [30.808] (EE) [30.808] (EE) Backtrace: [30.808] (EE) 0: /usr/bin/X (xorg_backtrace+0x4a) [0x55f50ff8d4aa] [30.808] (EE) 1: /usr/bin/X (0x55f50fde+0x1b1199) [0x55f50ff91199] [30.808] (EE) 2: /lib64/libpthread.so.0 (0x7f32631b+0x13d30) [0x7f32631c3d30] [30.808] (EE) 3: /usr/bin/X (xf86PlatformDeviceCheckBusID+0xa7) [0x55f50fe950e7] [30.808] (EE) 4: /usr/bin/X (0x55f50fde+0xaf8f2) [0x55f50fe8f8f2] [30.809] (EE) 5: /usr/bin/X (xf86CallDriverProbe+0xb0) [0x55f50fe67970] [30.809] (EE) 6: /usr/bin/X (xf86BusConfig+0x46) [0x55f50fe682b6] [30.809] (EE) 7: /usr/bin/X (InitOutput+0x961) [0x55f50fe76211] [30.809] (EE) 8: /usr/bin/X (0x55f50fde+0x54866) [0x55f50fe34866] [30.809] (EE) 9: /lib64/libc.so.6 (__libc_start_main+0xf1) [0x7f3262e21541] [30.809] (EE) 10: /usr/bin/X (_start+0x2a) [0x55f50fe1e6ea] [30.809] (EE) [30.809] (EE) Segmentation fault at address 0x0 [30.809] (EE) Fatal server error: [30.809] (EE) Caught signal 11 (Segmentation fault). Server aborting == Looking at dmesg I notice this: == [1.069560] [drm] radeon kernel modesetting enabled. [1.070133] [drm] initializing kernel modesetting (RV730 0x1002:0x9488 0x1028:0x02FE 0x00). [1.070309] resource sanity check: requesting [mem 0x000c-0x000d], which spans more than PCI Bus :00 [mem 0x000d4000-0x000d7fff window] [1.070505] caller pci_map_rom+0x53/0xd0 mapping multiple BARs [1.070655] ATOM BIOS: BR036993 [1.070813] radeon :02:00.0: VRAM: 1024M 0x - 0x3FFF (1024M used) [1.070995] radeon :02:00.0: GTT: 1024M 0x4000 - 0x7FFF [1.071219] [drm] Detected VRAM RAM=1024M, BAR=256M [1.071352] [drm] RAM width 128bits DDR [1.071773] [TTM] Zone kernel: Available graphics memory: 2012374 kiB [1.071883] [TTM] Initializing pool allocator [1.071990] [TTM] Initializing DMA pool allocator [1.072241] [drm] radeon: 1024M of VRAM memory ready [1.072372] [drm] radeon: 1024M of GTT memory ready. [1.072525] [drm] Loading RV730 Microcode [1.072679] radeon :02:00.0: Direct firmware load for radeon/ RV730_pfp.bin failed with error -2 [1.072859] r600_cp: Failed to load firmware "radeon/RV730_pfp.bin" [1.072974] [drm:rv770_init] *ERROR* Failed to load firmware! [1.073183] radeon :02:00.0: Fatal error during GPU init [1.073294] [drm] radeon: finishing device. [1.084495] ACPI: Battery Slot [BAT0] (battery present) [1.095528] [TTM] Finalizing pool allocator [1.095637] [TTM] Finalizing DMA pool allocator [1.095903] [TTM] Zone kernel: Used memory at exit: 0 kiB [1.096082] [drm] radeon: ttm finalized [1.096832] radeon: probe of :02:00.0 failed with error -2 [1.097301] [drm] Initialized vgem 1.0.0 20120112 for virtual device on minor 0 [1.103389] brd: module loaded [1.105711] loop: module loaded [1.105810] mtip32xx Version 1.3.1 = Comparing firmware between kernels 4.12.12 and 4.14.7 I see: $ ls -l /usr/src/linux-4.12.12-gentoo/firmware/radeon/RV730* -rw-r--r-- 1 root root 5440 Dec 7 09:02 /usr/src/linux-4.12.12-gentoo/ firmware/radeon/RV730_me.bin -rw-r--r-- 1 root root 454 Dec 7 09:02 /usr/src/linux-4.12.12-gentoo/ firmware/radeon/RV730_me.bin.gen.S -rw-r--r-- 1 root root 6704 Dec 7 09:02 /usr/src/linux-4.12.12-gentoo/ firmware/radeon/RV730_me.bin.gen.o -rw-r--r-- 1 root root 14972 Jul 3 00:07 /usr/src/linux-4.12.12-g
Re: [gentoo-user] 'firmware_install' won't on 4.14.7-gentoo
On Wednesday, 20 December 2017 16:03:02 GMT Mike Gilbert wrote: > On Wed, Dec 20, 2017 at 9:26 AM, Mick <michaelkintz...@gmail.com> wrote: > > You are quite right, there is no firmware_install in the 4.14.7 release. > > What does this mean? How are we meant to install firmware now? > > I believe all firmware has been removed from the kernel sources. > > You should install sys-kernel/linux-firmware, or grab just the files > you need from the git repo. > > https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git Thank you all, but I see to have a mental disconnect here: I already have sys-kernel/linux-firmware-20170314 installed. I have specified in the kernel which blobs I need and /lib/firmware/ as the path for the kernel to find any firmware it may need. I used to run make firmware_install and the kernel was able to load whatever firmware I had specified so that CPU/GPU can function properly at boot time. With 4.14.7 I (can) no longer do this; AND the newly compiled kernel does not load at boot time any of the needed firmware. What step am I missing to arrive at a bootable kernel with all necessary firmware? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] 'firmware_install' won't on 4.14.7-gentoo
On Wednesday, 20 December 2017 15:28:03 GMT Peter Humphrey wrote: > On Wednesday, 20 December 2017 12:22:29 GMT Mick wrote: > > Has something changed in 4.14.7-gentoo sources from its predecessors? [snip ...] > What firmware are you trying to install? This box needs firmware for the > graphics card and the Intel CPU, and I've been declaring the file names in > CONFIG_EXTRA_FIRMWARE and CONFIG_EXTRA_FIRMWARE_DIR. As the display works > fine, and so does opencl on the GPU since I emerged dev-libs/amdgpu-pro- > opencl, I assume that the firmware is being loaded. I didn't even know about > a firmware_install make target. Thanks Peter, I am also declaring relevant firmware in the kernel for CPU microcode and GPU, but they do not get loaded when I build kernel 4.14.7: $ grep FIRMWARE /usr/src/linux/.config CONFIG_PREVENT_FIRMWARE_BUILD=y CONFIG_FIRMWARE_IN_KERNEL=y CONFIG_EXTRA_FIRMWARE="intel-ucode/06-1e-05 radeon/R700_rlc.bin radeon/ RV730_smc.bin radeon/RV710_uvd.bin" CONFIG_EXTRA_FIRMWARE_DIR="/lib/firmware/" # CONFIG_CYPRESS_FIRMWARE is not set # CONFIG_DRM_LOAD_EDID_FIRMWARE is not set CONFIG_FIRMWARE_EDID=y CONFIG_FIRMWARE_MEMMAP=y # CONFIG_GOOGLE_FIRMWARE is not set # CONFIG_TEST_FIRMWARE is not set So I can't load a desktop because xserver will not launch. I also recall having additional firmware for WiFi/BT cards on this laptop. The same problem exists on other systems, some running AMD. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] 'firmware_install' won't on 4.14.7-gentoo
On Wednesday, 20 December 2017 12:52:16 GMT Floyd Anderson wrote: > On Wed, 20 Dec 2017 12:22:29 + > > Mick <michaelkintz...@gmail.com> wrote: > >Has something changed in 4.14.7-gentoo sources from its predecessors? > > > >I'm getting this on two systems: > > > >[snip ...] > > > > INSTALL sound/pci/hda/snd-hda-codec-hdmi.ko > > INSTALL sound/pci/hda/snd-hda-codec.ko > > INSTALL sound/pci/hda/snd-hda-intel.ko > > DEPMOD 4.14.7-gentoo > > > >make: *** No rule to make target 'firmware_install'. Stop. > > Yes, there is a change to drop the target rule ‘firmware_install’ [1]. > I’ve noticed also [2] but in the end it seems the rule is finally > dropped: > > /usr/src/linux-4.12.12-gentoo/scripts/Makefile.fwinst... exists > /usr/src/linux-4.14.4-gentoo/scripts/Makefile.fwinst ... no such file > > To check it’s there look for ‘Other generic targets’ in kernel dir: > > sudo make help > > or just grep: > > grep -q 'firmware_install' /usr/src/linux/Makefile > > > References: > - [1] > - [2] You are quite right, there is no firmware_install in the 4.14.7 release. What does this mean? How are we meant to install firmware now? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] 'firmware_install' won't on 4.14.7-gentoo
Has something changed in 4.14.7-gentoo sources from its predecessors? I'm getting this on two systems: [snip ...] INSTALL sound/pci/hda/snd-hda-codec-hdmi.ko INSTALL sound/pci/hda/snd-hda-codec.ko INSTALL sound/pci/hda/snd-hda-intel.ko DEPMOD 4.14.7-gentoo make: *** No rule to make target 'firmware_install'. Stop. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] How to resume 'emerge -e @world' after grub fails?
On Monday, 18 December 2017 16:14:42 GMT Dale wrote: > Grant Edwards wrote: > > I tried following the profile 17 upgrade instructions but now I'm > > stuck. After running for a day or so, the 'emerge -e @world' command > > stopped when grub-0.97 failed to build. > > > > How do I skip grub and continue? > > > > Or do I have to tell emerge to start over from the beginning (skipping > > grub)? Assuming there are other packages that are going to fail also, > > that could take weeks... > > emerge --resume --skipfirst > > That should work. If forced, using --exclude grub might could be > added. I've never tried that with the --resume command tho. > > Dale > > :-) :-) Let's not forget the '--keep-going y' option too. At the end it will print a list of all the packages that failed to emerge. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Loading a Firmware Module By hand?
On Monday, 18 December 2017 05:11:20 GMT Hunter Jozwiak wrote: > Hmm. I have kernel 4.14.7 and linux-firmware 20171206. I tried version > 9 as well, but that didn't help matters, either. Nor did > compiling the firmware into the kernel; either 4.14 is too old, or it > is too new. I'd think they are both too new? > I tried copying the firmware my live iso was using, but > that didn't help either. If the live iso works, start with using the same kernel release and linux- firmware version, to see if this works as expected on your installation. Then update kernel sources and firmware to the latest stable and see if this works too. >From there on you can move into ~arch to find the version at which things break. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Loading a Firmware Module By hand?
On Sunday, 17 December 2017 05:34:14 GMT Hunter Jozwiak wrote: > Hi, > > I have an ath10k_pci device that I'm trying to get hooked to the > Internet, but I'm having some strange issues. It is trying to load the > 2.1 firmware, but I don't think that is the proper firmware for the > interface to have; I think it ought to be loading the 3.0 module, but > am not quite sure on that either, or how I could go about injecting > that into the modprobe; Usually the kernel will probe the device and load the appropriate firmware the device needs. The output of dmesg will show if loading the firmware was successful, or complain if different firmware was needed and not found in your "/lib/firmware/" or whatever you have set up in your kernel as the directory for firmware blobs. > I wasn't able to pinpoint the firmware blob > the ISO was using, so that wasn't much of a pointer in the right > direction either. I see that the 3.0 blob does exist in > /lib/firmware/ath10k/QCABLEFAGD/HW3.0, but there are many bin files, > so choosing the right one is a bit tricky by the looks of things. > Earlier today, I had read the Gentoo wiki on the topic, which > suggested that I compile the blob into the kernel itself, but the link > they gave only described the advantages and disadvantages of modular > kernels and how to drop kmod if you're using a moduleless kernel. Does > anybody have any insight on this matter? > > Thanks, > > Hunter Have a look in: # Generic Driver Options and then: CONFIG_PREVENT_FIRMWARE_BUILD=y CONFIG_FW_LOADER=y CONFIG_FIRMWARE_IN_KERNEL=y CONFIG_EXTRA_FIRMWARE="Put your firmware files in here, space separated" CONFIG_EXTRA_FIRMWARE_DIR="/lib/firmware/" I don't have your NIC to know the specifics, but the above ought to work. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] list of miscellaneous FAIL
On Friday, 15 December 2017 15:10:07 GMT Alan McKinnon wrote: > Oh ye gods, not this fellow again. > > Fellow gentoo-listers, please I beg you, with all my heart and all my > soul, I beg you: > > Do not feed this troll. Please. > > Alan LOL! Well, he didn't exactly ask a question to expect an answer. Perhaps he is suffering from ADD, ADHD, Asperger's Syndrome and the like, causing him bouts of anxiety; for which the mere act of running emerge is unlikely to provide a cure. TBH with the things portage spews back at me at times, I can feel his pain! LOL! @OP: Do us all a favour and go get yourself a binary distro. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] openrc : autoload kernel modules
On Thursday, 14 December 2017 18:43:55 GMT Michael Orlitzky wrote: > On 12/14/2017 12:43 PM, Helmut Jarausch wrote: > > I have added the following lines to /etc/conf.d/modules > > > > modules="enhanceio" > > modules="enhanceio_lru" > > modules="enhanceio_fifo" > > modules="enhanceio_rand" > > "modules" is a variable name, and it's being overwritten on each line. > The /etc/init.d/modules script does something like > > for module in $modules; do > load $module > done > > but in your case, "modules" will contain only the last thing you set it > to, namely modules="enhanceio_rand". Change your entries to: #Modules for enhanceio enhanceio enhanceio_lru enhanceio_fifo enhanceio_rand -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: Is gnome becoming obligatory?
On Monday, 11 December 2017 11:59:03 GMT Jorge Almeida wrote: > On Sun, Dec 10, 2017 at 7:31 PM, Canek Peláez Valdés <can...@gmail.com> wrote: > > Just my two cents. I will not answer any reply to my little contribution > > to > > this thread; > > Good. I can't remember any intervention from you that I would miss. Of > course, I wouldn't dream of telling people how they should think, nor > would I deny anyone the right to be an activist. > > > Enjoy your echo chamber. > > Thank you for your contribution, Dr. Yes, we know you're a Dr. We know > it because: Crikey! I didn't expect my question to trigger yet another thread of 'systemd Vs freedom of choice (non-systemd)' arguments. Dr. Canek has been an advocate of systemd for years now and has posted his views on this topic more than once. He has tried hard to make gentoo users see the light in the superiority of systemd and put his arguments across. He has also done a lot of development work to establish systemd in Gentoo. His views are somewhat parochial - only those who (can) code have an influence if not a right to determine the direction of travel - I paraphrase of course. There is truth in this and anyone can recognise that money can buy developer hours and direct their development effort. The facts remain that RHL and their employees have shaped the Linux eco-system to suit their business interests; spinning predictably and reliably thousands of identical VMs in data centres. The MSWindows monolithic stack architecture is something they wanted/needed and this is what they developed. The fact also remains that binary distros and other development projects decided to gravitate towards major development areas (cloud and embedded computing) where commercial interest and development demand has been greater. Lack of devs and maintainers especially for smaller distros means they decided to ride on the back of systemd and minimise their own development load. Linux exists on the desktop too, but this represents a really small percentage of PC users. Linux desktop users on Gentoo systems is an even smaller number and I am guessing of an increasingly advanced age demographic. I am grateful that Gentoo has retained openrc and provides a choice for those of us who would prefer to not use systemd. I use systemd on a couple of systems out of necessity/convenience, but I would not like it on my PC systems. If I wanted this opaque Just Works™ philosophy I would have stayed with MSWindows or AppleMac, both of which I have used for years and frustrated me to hell - well MSWindows definitely does. However, for the majority of the population these OS remain the best suited choice. So, I think we should live & let live, but as gentoo users at least try to influence gentoo to retain a freedom of choice most binary distros have walked away from. Just my 2c's. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: Pentium 4, 32bit fails to update media-gfx/uniconvertor-2.0_pre379-r1
On Sunday, 10 December 2017 10:11:41 GMT Nikos Chantziaras wrote: > On 10/12/17 10:51, Mick wrote: > > Any idea were that "MagickWand" went hiding? > > [...] > > > > Should I file a bug, or am I missing some other package? > > This was fixed in 2.0_pre379-r2, so you should temporarily keyword that > version until it goes stable. Thanks for this suggestion Nikos, uniconvertor-2.0_pre379-r2 emerged successfully. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Re: Is gnome becoming obligatory?
On Sunday, 10 December 2017 06:12:07 GMT R0b0t1 wrote: > On Sat, Dec 9, 2017 at 5:36 PM, Peter Humphrey <pe...@prh.myzen.co.uk> wrote: > > On Saturday, 9 December 2017 12:00:12 GMT Jorge Almeida wrote: > >> Are you sure you need udisks? And policykit? > > > > I'm pretty sure Mick runs KDE, which requires both of those. > > Eventually emerging @world will just pull in the entirety of the > Gentoo package repository, and we won't have to worry about what is or > isn't necessary. Yes, I run the plasma profile. Also I understand the udisks package is necessary to allow mounting disks by clicking on the GUI. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Pentium 4, 32bit fails to update media-gfx/uniconvertor-2.0_pre379-r1
i686-2.7/src/uc2/libcairo/_libcairo.o -L/usr/lib -lcairo -
lpython2.7 -o /var/tmp/portage/media-gfx/uniconvertor-2.0_pre379-r1/work/
uniconvertor-2.0_pre379-python2_7/lib/uc2/li
bcairo/_libcairo.so
building 'uc2.libimg._libimg' extension
creating /var/tmp/portage/media-gfx/uniconvertor-2.0_pre379-r1/work/
uniconvertor-2.0_pre379-python2_7/temp.linux-i686-2.7/src/uc2/libimg
i686-pc-linux-gnu-gcc -march=prescott -O2 -pipe -fomit-frame-pointer -fPIC -
DMAJOR_VERSION=1 -DMINOR_VERSION=0 -I/usr/include/ImageMagick-6 -I/usr/
include/python2.7 -c src/uc2/libimg/_libimg
.c -o /var/tmp/portage/media-gfx/uniconvertor-2.0_pre379-r1/work/
uniconvertor-2.0_pre379-python2_7/temp.linux-i686-2.7/src/uc2/libimg/_libimg.o
src/uc2/libimg/_libimg.c:20:29: fatal error: wand/MagickWand.h: No such file
or directory
#include
^
compilation terminated.
error: command 'i686-pc-linux-gnu-gcc' failed with exit status 1
* ERROR: media-gfx/uniconvertor-2.0_pre379-r1::gentoo failed (compile phase):
* (no error message)
*
* Call stack:
* ebuild.sh, line 124: Called src_compile
* environment, line 2669: Called distutils-r1_src_compile
* environment, line 791: Called _distutils-r1_run_foreach_impl
'distutils-r1_python_compile'
* environment, line 294: Called python_foreach_impl 'distutils-
r1_run_phase''distutils-r1_python_compile'
* environment, line 2199: Called multibuild_foreach_variant
'_python_multibuild_wrapper' 'distutils-r1_run_phase' 'distutils-
r1_python_compile'
* environment, line 1505: Called _multibuild_run
'_python_multibuild_wrapper''distutils-r1_run_phase' 'distutils-
r1_python_compile'
* environment, line 1503: Called _python_multibuild_wrapper 'distutils-
r1_run_phase' 'distutils-r1_python_compile'
* environment, line 521: Called distutils-r1_run_phase 'distutils-
r1_python_compile'
* environment, line 782: Called distutils-r1_python_compile
* environment, line 657: Called esetup.py 'build'
* environment, line 1050: Called die
* The specific snippet of code:
* "${@}" || die "${die_args[@]}";
Should I file a bug, or am I missing some other package?
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
Re: [gentoo-user] Re: Is gnome becoming obligatory?
On Saturday, 9 December 2017 10:34:32 GMT Nikos Chantziaras wrote: > On 09/12/17 11:51, Mick wrote: > > I've seen gnome-base/gnome-common pulled in on more than one systems, all > > of> > > which have USE="-gnome" set: > > # emerge -uaNDvt world > > > > These are the packages that would be merged, in reverse order: > > [...] > > Calculating dependencies... done! > > [ebuild N ] gnome-base/gnome-common-3.18.0-r1:3::gentoo > > USE="autoconf-archive" 153 KiB > > [...] > > > > All systems are on profile: default/linux/amd64/17.0/desktop/plasma > > > > Why is gnome-base/gnome-common needed? > > It's an extremely lightweight package. There seem to be some packages > that need files from it. The package itself only installs these files: > >$ qlist gnome-common >/usr/bin/gnome-autogen.sh >/usr/share/aclocal/gnome-common.m4 >/usr/share/aclocal/gnome-compiler-flags.m4 >/usr/share/aclocal/gnome-code-coverage.m4 >/usr/share/doc/gnome-common-3.18.0-r1/ChangeLog.bz2 >/usr/share/doc/gnome-common-3.18.0-r1/README.bz2 > > So basically it only copies some small text files to /usr. It doesn't > build anything. Thank you all for detailed and clear replies. You'd forgive me for being (a little) paranoid about Poettering's fingers getting anywhere near my systems. :-p -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Is gnome becoming obligatory?
I've seen gnome-base/gnome-common pulled in on more than one systems, all of
which have USE="-gnome" set:
# emerge -uaNDvt world
These are the packages that would be merged, in reverse order:
Calculating dependencies... done!
[nomerge ] kde-apps/kdebase-meta-17.08.3:5::gentoo
[nomerge ] kde-plasma/plasma-meta-5.10.5:5::gentoo USE="bluetooth
display-manager handbook pam pulseaudio sddm wallpapers -grub -gtk -
networkmanager -plymouth -sdk"
[nomerge ] kde-plasma/powerdevil-5.10.5:5::gentoo USE="consolekit
handbook wireless -debug"
[nomerge ]kde-frameworks/solid-5.37.0:5/5.37::gentoo USE="nls -
debug -doc {-test}"
[ebuild U ] sys-fs/udisks-2.7.4:2::gentoo [2.1.8:2::gentoo] USE="acl
gptfdisk introspection nls%* -cryptsetup -debug (-elogind) -lvm% (-selinux) -
systemd" 1,257 KiB
[ebuild N ] sys-libs/libblockdev-2.14::gentoo USE="crypt -bcache -
dmraid -doc -kbd -lvm {-test}" PYTHON_SINGLE_TARGET="python3_5 -python3_4 -
python3_6" PYTHON_TARGETS="python3_5 -python3_4 -python3_6" 268 KiB
[ebuild N ] dev-libs/volume_key-0.3.9::gentoo USE="{-test}"
PYTHON_SINGLE_TARGET="python3_5 -python3_4 -python3_6"
PYTHON_TARGETS="python3_5 -python3_4 -python3_6" 435 KiB
[ebuild N ] gnome-base/gnome-common-3.18.0-r1:3::gentoo
USE="autoconf-archive" 153 KiB
[nomerge ] sys-libs/libblockdev-2.14::gentoo USE="crypt -bcache -dmraid
-doc -kbd -lvm {-test}" PYTHON_SINGLE_TARGET="python3_5 -python3_4 -python3_6"
PYTHON_TARGETS="python3_5 -python3_4 -python3_6"
[ebuild N ] dev-libs/libbytesize-1.2::gentoo USE="-doc {-test}"
PYTHON_SINGLE_TARGET="python3_5 -python2_7 -python3_4 -python3_6"
PYTHON_TARGETS="python2_7 python3_5 -python3_4 -python3_6" 69 KiB
Total: 5 packages (1 upgrade, 4 new), Size of downloads: 2,180 KiB
All systems are on profile: default/linux/amd64/17.0/desktop/plasma
Why is gnome-base/gnome-common needed?
--
Regards,
Mick
signature.asc
Description: This is a digitally signed message part.
Re: [gentoo-user] Re: Puzzled with duration of chromium emerge under profile 17.0
On Wednesday, 6 December 2017 21:01:25 GMT Grant Edwards wrote: > On 2017-12-06, Mick <michaelkintz...@gmail.com> wrote: > > I discovered that building Chromium with gcc-6.4.0 is taking an > > inordinately> > > longer time on a laptop with 1st gen i7 and 4G of RAM, e.g.: [snip ...] > Did the CPU throttling stuff somehow get broken when you updated to > gcc-6.4.0? After updating a bunch of stuff a month or two back, I > noticed that builds suddently took 4X as long. I finally realized > that I had broken the CPU throttling feature and my laptop was always > running at 400MHz and not ramping up to 2. GHz when doing > things like compiling large packages. Hmm ... I have not changed anything related to CPU throttling I can remember. Which reminds me, perhaps I should 'make clean' my kernel now that I have switched to gcc-6.4.0? i7z shows turbo mode kicks in too and hyperthreading is on (attached). Under turbo it jumps up to 2.8GHz. So cpu throttling is probably not the cause of my problem, unless it throttles more now than it used to do before? :-/ -- Regards, MickCpu speed from cpuinfo 1595.00Mhz cpuinfo might be wrong if cpufreq is enabled. To guess correctly try estimating via tsc Linux's inbuilt cpu_khz code emulated now True Frequency (without accounting Turbo) 1595 MHz CPU Multiplier 12x || Bus clock frequency (BCLK) 132.92 MHz Socket [0] - [physical cores=4, logical cores=8, max online cores ever=4] TURBO ENABLED on 4 Cores, Hyper Threading ON Max Frequency without considering Turbo 1727.92 MHz (132.92 x [13]) Max TURBO Multiplier (if Enabled) with 1/2/3/4 Cores is 21x/18x/13x/13x Real Current Frequency 2564.92 MHz [132.92 x 19.30] (Max of below) Core [core-id] :Actual Freq (Mult.) C0% Halt(C1)% C3 % C6 % C7 % Temp VCore Core 1 [0]: 1666.27 (12.54x) 12.55.7222.858.4 062 0. Core 2 [1]: 1615.74 (12.16x) 11.16.6212.869.3 062 0. Core 3 [2]: 1747.37 (13.15x) 14.55.9513.964.3 062 0. Core 4 [3]: 2564.92 (19.30x) 99.4 0 0 0 072 0. C0 = Processor running without halting C1 = Processor running with halts (States >C0 are power saver modes with cores idling) C3 = Cores running with PLL turned off and core cache turned off C6, C7 = Everything in C3 + core state saved to last level cache, C7 is deeper than C6 Above values in table are in percentage over the last 1 sec [core-id] refers to core-id number in /proc/cpuinfo 'Garbage Values' message printed when garbage values are read signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Puzzled with duration of chromium emerge under profile 17.0
On Wednesday, 6 December 2017 20:13:50 GMT Alan McKinnon wrote: > On 06/12/2017 21:10, Mick wrote: > > I discovered that building Chromium with gcc-6.4.0 is taking an > > inordinately> > > longer time on a laptop with 1st gen i7 and 4G of RAM, e.g.: [snip...] > Pure gut feel and intuition and nothing else leads me to look in two places: > > You use -march=native on the i7 so I assume the same on the Core2? Those > are rather different processors, and google is fond of optimizing deeply > for specific cases (common to all browsers I think). You'd have to ask a > chromium hacker but I'd say the odds are good there are serious > optimizations for i7 that stress your compiler out muchly. Yes, I run -march=native on both. > Add to that your i7 is RAM-constrained so you compensate with swap, > which is easily 50,000 times slower with sucky latency. Yes, it's ridiculously slow! :-( > When you use a > disk as RAM, performance tanks. Well, usually it causes a cascade effect > and stuff blows up, but if it completes it will have done so slowly. > > If you at all can, shove lots more RAM in that i7. These days RAM is > cheap and it's always by first performance tweak, then SSD. I know that compiling in RAM would be done in a fraction of the time. The thing is, this is a 8 year old laptop and I am resisting throwing good money after bad. I had a quick look a few months ago and good quality memory will cost me around £60. With the battery shot and the keyboard on its way out, I'd rather put the money towards more memory for a newer PC, sometime in the next year. ;-) -- Regards, Mick signature.asc Description: This is a digitally signed message part.
[gentoo-user] Puzzled with duration of chromium emerge under profile 17.0
I discovered that building Chromium with gcc-6.4.0 is taking an inordinately longer time on a laptop with 1st gen i7 and 4G of RAM, e.g.: Wed Sep 27 17:36:53 2017 >>> www-client/chromium-61.0.3163.100 merge time: 6 hours, 40 minutes and 50 seconds. Thu Nov 9 17:44:58 2017 >>> www-client/chromium-62.0.3202.89 merge time: 8 hours, 12 minutes and 30 seconds. -->switch to gcc-6.4.0 Mon Dec 4 11:39:36 2017 >>> www-client/chromium-62.0.3202.89 merge time: 20 hours, 2 minutes and 4 seconds. Wed Dec 6 18:41:13 2017 >>> www-client/chromium-62.0.3202.94 merge time: 22 hours, 47 minutes and 35 seconds. but not so on another older and lesser Intel(R) Core(TM)2 Duo CPU P7550 @ 2.26GHz, also with 4G RAM: Wed Sep 27 22:25:32 2017 >>> www-client/chromium-61.0.3163.100 merge time: 11 hours, 46 minutes and 18 seconds. Thu Nov 9 22:09:59 2017 >>> www-client/chromium-62.0.3202.89 merge time: 13 hours, 16 minutes and 41 seconds. -->switch to gcc-6.4.0 Sat Dec 2 21:00:59 2017 >>> www-client/chromium-62.0.3202.89 merge time: 15 hours, 35 minutes and 50 seconds. Mon Dec 4 03:44:12 2017 >>> www-client/chromium-62.0.3202.94 merge time: 15 hours, 40 minutes and 18 seconds. Any idea why this is happening? I attach emerge info of the i7 in case you can spot something which may be causing this exponential increase in emerge times. BTW, on the i7 I had to increase swap because the 4,200,960 KiB swap partition was not enough to complete the compilation of version 62.0.3202.89, even after I shut down all applications and exited X. O_O -- Regards, Mick~ $ emerge --info www-client/chromium Portage 2.3.13 (python 3.5.4-final-0, default/linux/amd64/17.0/desktop/plasma, g cc-6.4.0, glibc-2.25-r9, 4.12.12-gentoo x86_64) = System Settings = System uname: Linux-4.12.12-gentoo-x86_64-Intel-R-_Core-TM-_i7_CPU_Q_720_@_1.60G Hz-with-gentoo-2.4.1 KiB Mem: 4032296 total, 2050332 free KiB Swap:4200960 total, 4200960 free Timestamp of repository gentoo: Wed, 06 Dec 2017 18:15:01 + Head commit of repository gentoo: f2378f105da3bbdc56fe40323b97dd31044b8dcc sh bash 4.3_p48-r1 ld GNU ld (Gentoo 2.29.1 p3) 2.29.1 app-shells/bash: 4.3_p48-r1::gentoo dev-lang/perl:5.24.3::gentoo dev-lang/python: 2.7.14::gentoo, 3.5.4::gentoo dev-util/cmake: 3.8.2::gentoo dev-util/pkgconfig: 0.29.2::gentoo sys-apps/baselayout: 2.4.1-r2::gentoo sys-apps/openrc: 0.34.11::gentoo sys-apps/sandbox: 2.10-r4::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69::gentoo sys-devel/automake: 1.15.1-r1::gentoo sys-devel/binutils: 2.29.1-r1::gentoo sys-devel/gcc:6.4.0::gentoo sys-devel/gcc-config: 1.8-r1::gentoo sys-devel/libtool:2.4.6-r3::gentoo sys-devel/make: 4.2.1::gentoo sys-kernel/linux-headers: 4.4::gentoo (virtual/os-headers) sys-libs/glibc: 2.25-r9::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://10.10.10.2/gentoo-portage priority: -1000 sync-rsync-extra-opts: --exclude-from=/etc/portage/rsync_excludes bar location: /var/lib/layman/bar masters: gentoo priority: 50 brother-overlay location: /var/lib/layman/brother-overlay masters: gentoo priority: 50 psix-overlay location: /var/lib/layman/psix-overlay masters: gentoo priority: 50 local location: /usr/local/portage masters: gentoo priority: 100 Installed sets: @enlightenment ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/ fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /et c/terminfo" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" EMERGE_DEFAULT_OPTS="--quiet-build=n" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild -locks fail-clean fixlafiles merge-sync multilib-strict network-sandbox news par allel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknow n-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox user sync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://10.10.10.2:1024/ http://mirror.qubenet.net/mirror/gentoo/ rsync://rsync.mirrorservice.org/distfiles.gentoo.org/
Re: [gentoo-user] switch to profile 17.0 complete, completely painless
On Wednesday, 6 December 2017 15:36:19 GMT Daniel Frey wrote: > On 12/05/17 23:00, Raffaele Belardi wrote: > > One (~x86) LXDE system completed the switch with no problem, the other > > (~amd64) built all except two packaged (sdlmame and torcs) which did not > > build with gcc-7.2 even before the switch to 17.0. > > > > Gentoo devs and arch testers did a good job as usual. > > > > I'll do the switch on the Gnome system in the next days but up to now I > > can say that the switch to 17.0 is a _lot_ less painful than switching > > major compiler version. > > > > raffaele > > I've done two machines now (6 more to go!) and it's been mostly > painless. I had the grub and cdrdao rebuild problems, solved by > upgrading to grub2 and applying a patch to lame for cdrdao. I also had > pygtk fail, but once the `emerge -e world` finished, I just had to > rebuild it and it was fine. > > > Dan Are the maintainers picking up these patches to release a version bump for packages that won't emerge with profile 17.0? -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] Again, emerge -e @world related questions...
On Tuesday, 5 December 2017 20:45:21 GMT Michael Orlitzky wrote: > On 12/05/2017 03:26 PM, Corbin wrote: > > In "packages" that throw out the "CFLAGS / CXXFLAGS" values in the > > end-users "make.conf" and substitute their own ... how will that be > > handled? > The GCC ebuilds all use toolchain.eclass which is incomprehensible to > me, but it looks like the default behavior for gcc-6.x is to pass > "--enable-default-pie" and "--enable-default-ssp" to the build process > of GCC itself. That changes the default behavior of GCC to (as the names > say) enable PIE and SSP by default. > > Consequently, if a package ignores your CFLAGS, the PIE/SSP should still > take effect, because GCC does them by default. Only a package that adds > its own -no-pie flag (for example) would cause problems. I just noticed chromium shows (pic) in brackets, which I assume it means forced. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] grub-0.97-r16 and profile 17.0 change
On Tuesday, 5 December 2017 10:21:49 GMT Raffaele Belardi wrote: > Mick wrote: > > Quite inexplicable ... > > > > My kernel is 7.1M, System.map 3.4M and config is 114K. I usually leave a > > total of three kernels and associated files in my ext2 46M /boot partition > > and they all used to fit in there. I tried to install grub-0.97-r16 on > > this system a number of times, each time removing another spare kernel > > until I was left with the latest kernel and each time it failed to > > install completely due to running out of disk space. > > > > These are the contents of my old /boot/grub/ as restored from a back up: > > > > # ls -la /boot/grub/ > > total 1958 > > drwxr-xr-x 2 root root1024 Dec 3 14:07 . > > drwxr-xr-x 4 root root1024 Dec 3 11:58 .. > > -rw-r--r-- 1 root root 12506 Nov 27 2016 ascii.h > > -rw-r--r-- 1 root root5000 Nov 27 2016 ascii.pf2 > > -rw-r--r-- 1 root root 197 Feb 27 2010 default > > -rw-r--r-- 1 root root 30 Feb 27 2010 device.map > > -rw-r--r-- 1 root root 10036 Dec 10 2016 e2fs_stage1_5 > > -rw-r--r-- 1 root root 52151 Nov 27 2016 euro.pf2 > > -rw-r--r-- 1 root root9236 Dec 10 2016 fat_stage1_5 > > -rw-r--r-- 1 root root8564 Dec 10 2016 ffs_stage1_5 > > -rw-r--r-- 1 root root8947 Nov 27 2016 grub-mkconfig_lib > > -rw-r--r-- 1 root root 809 Dec 3 14:07 grub.conf > > -rw-r--r-- 1 root root8564 Dec 10 2016 iso9660_stage1_5 > > -rw-r--r-- 1 root root 10208 Dec 10 2016 jfs_stage1_5 > > lrwxrwxrwx 1 root root 9 Feb 27 2010 menu.lst -> grub.conf > > -rw-r--r-- 1 root root8724 Dec 10 2016 minix_stage1_5 > > -rw-r--r-- 1 root root 11252 Dec 10 2016 reiserfs_stage1_5 > > -rw-r--r-- 1 root root 33856 Dec 10 2016 splash.xpm.gz > > -rw-r--r-- 1 root root 512 Dec 10 2016 stage1 > > -rw-r--r-- 1 root root 118712 Dec 10 2016 stage2 > > -rw-r--r-- 1 root root 118712 Dec 20 2015 stage2.old > > -rw-r--r-- 1 root root 118712 Dec 10 2016 stage2_eltorito > > -rw-r--r-- 1 root root8852 Dec 10 2016 ufs2_stage1_5 > > -rw-r--r-- 1 root root 1363292 Nov 27 2016 unicode.pf2 > > -rw-r--r-- 1 root root8212 Dec 10 2016 vstafs_stage1_5 > > -rw-r--r-- 1 root root 49238 Nov 27 2016 widthspec.h > > -rw-r--r-- 1 root root 10874 Dec 10 2016 xfs_stage1_5 > > > > Installing grub-0.97-r16 would run out of disk space while trying to copy > > the stage2 file. > > Could it be that you ran out of inodes on the /boot partition? Have you > tried # du -i > on /boot? > > raffaele The restored from backup /boot shows enough inodes: # df -i /dev/sda10 Filesystem Inodes IUsed IFree IUse% Mounted on /dev/sda10 1204842 120061% /boot # du --inodes /boot 1 /boot/lost+found 26 /boot/grub 33 /boot I think there are enough inodes in the partition, but apparently not enough space. -- Regards, Mick signature.asc Description: This is a digitally signed message part.
