On Fri, 2024-10-25 at 13:08 +0200, Holger Hoffstätte wrote:
> >
> > It's a Go package though, so it will quietly install a mountain a
> > random outdated static libraries from github.
>
> What? No, it will not. Those dependencies are absolutely not installed,
> they are only used for building & l
On 2024-10-25 00:47:27, Grant Edwards wrote:
> >
> > Try net-dns/doggo[2]
>
> Cool, and it doens't want to install 4 other new packages like
> bind-tools does. [OK, two are just account/group packages, so it's
> not quite as bad as it sounds.]
It's a Go package though, so it will quietly install
On 2024-09-24 21:42:23, Eli Schwartz wrote:
>
> Please do not disable the USE=ipv6, as that is *utterly* insane. It also
> does approximately nothing. In packages which support this USE flag,
> which is rare, it causes the code to use old, untested APIs which only
> support ipv4, rather than new,
On Mon, 2024-09-23 at 22:08 +, Alan Mackenzie wrote:
>
> But the unused code still gets built in, doesn't it? That's a somewhat
> un-gentoo like situation.
>
It depends on the language, but in a compiled language, not usually.
Regardless: if you aren't a fan of widespread changes to global
On Mon, 2024-09-09 at 21:33 -0300, João Matos wrote:
> Dear list,
>
> I'm trying to install the Checkpoint client for linux (cshell_install). It
> requires sys-libs/libstdc++-v3, 32 bits. I couldn't compile it and found
> this bug: https://bugs.gentoo.org/919184
TIL that we have a twenty-year-old
On Tue, 2024-06-25 at 17:05 +0300, Nikos Chantziaras wrote:
> So what happens if I skip the very last step in the profile 23.0 upgrade
> guide, which is:
>
> 6. Rebuild world:
> emerge --ask --emptytree @world
>
> Is this just a security concern due to the new hardening flags, or are
> ther
On Wed, 2024-05-22 at 09:40 -0400, Jude DaShiell wrote:
> Yes, this is during installation.
> I did type:
> mount --rbind /dev /mnt/gentoo/dev
> I was outside of chroot at the time but that's all I did with dev before
> running emerge-webrsync.
>
Ok, that was my one guess. I'm out of ideas, sorry
Is this during install? Maybe forgot to bind-mount /dev from the real
system into your chroot?
On Fri, 2024-04-05 at 16:09 +0100, Peter Humphrey wrote:
> On Thursday, 4 April 2024 10:12:23 BST I wrote:
>
> > Some of my machines run BOINC, which I want to stop while doing my sync &
> > update. For some reason, '/etc/init.d/boinc stop' often takes exactly 60s to
> > complete instead of its no
On Mon, 2024-04-01 at 01:32 +0300, Alexandru N. Barloiu wrote:
> https://piaille.fr/@zeno/112185928685603910
>
> There's an ENV var you can set that is a kill switch for the whole thing :)
>
For the part that we found :)
The author of the backdoor had commit access to the upstream repository
fo
On Sun, 2024-03-31 at 18:19 -0400, Michael Orlitzky wrote:
>
> The old version will show up as liblzma.so.5.6.1. Restart anything that
> uses it.
Or liblzma.so.5.6.0
On Sun, 2024-03-31 at 12:04 -0400, Rich Freeman wrote:
>
> It is not necessary to rebuild anything, unless you're doing something
> so unusual that you'd already know the answer to the question.
>
You should probably reboot afterwards though.
For a more fine-grained approach, you can check for
On 2023-12-28 23:00:36, stefan1 wrote:
> Should I at least file bugs about those packages?
> Surely there is no reason to artificially limit the python version in
> ::gentoo?
Yes, especially if the package has a test suite that passes under
python-3.12. Most python packages are community-main
On Thu, 2023-12-28 at 18:38 +, stefan1 wrote:
>
> Anyway, at least I don't have many ebuilds to patch to support python
> 3.12.
If you're comfortable with git, you could switch your ::gentoo repo to
a git checkout and edit/commit your changes there. Then when you git
pull/rebase, you'll
On Mon, 2023-11-13 at 11:19 +0100, ralfconn wrote:
>
> It seems to me easier to add these to the desktop rather the other way
> round. Any gotcha's I am missing?
>
There are a few other things in profiles/features/hardened that you
should copy -- particularly the gcc USE flags -- but basically,
On Wed, 2023-11-08 at 14:53 -0500, John Covici wrote:
> Hi all.
>
> I have run into a problem, where I am getting no sound out of the jack
> on my sound card. I think this happened since the last major reboot
> after my world update.
The last time I did this to myself, it was by disabling all of
On Mon, 2023-10-16 at 21:29 +0200, n952162 wrote:
> Why might it only be in an overlay?
Because it bundles 100+ other packages. That is inherently a security
risk, although plenty of people use Windows and install all of their
software that way and are perfectly happy on those days of the year
whe
On Thu, 2023-09-14 at 08:07 -0400, John Covici wrote:
> HI. This was a package installed on my last world update, but now
> depclean wants to remove the package. Isn't it pulled in by gnome or
> other packages?
>
> Thanks in advance for any suggestions.
>
The weird -r410 and -r600 versions of
On Sun, 2023-09-03 at 09:35 -0500, Dale wrote:
>
> Anyone else having this? Is this mysql or is something else causing
> this and mysql is just a symptom? Given two versions are failing to
> build, is kinda interesting.
https://bugs.gentoo.org/912797
On Thu, 2023-08-31 at 14:23 +0100, Peter Humphrey wrote:
> I remember replying to this, but I can't find the reply anywhere. Did it get
> to
> the list?
I don't think so.
On Wed, 2023-08-30 at 11:51 +0100, Peter Humphrey wrote:
>
> Can you point me to that file (privately if you prefer)? I've had a look
> around
> and it doesn't reveal itself.
https://github.com/gentoo-ev/www.gentoo.de/blob/master/Dockerfile
>
> > It builds a static site so you can open the r
On Tue, 2023-08-29 at 15:31 +0100, Peter Humphrey wrote:
> Hello list,
>
> I'm trying to set a container up to run jekyll to build a blog, following a
> suggestion at the bottom of https://github.com/gentoo-ev/www.gentoo.de.
> This is my first foray into containers.
The containers don't add anyth
On Mon, 2023-08-28 at 11:21 -0400, Matt Connell wrote:
> On Mon, 2023-08-28 at 15:04 +0200, Arve Barsnes wrote:
> > dev-lang/php:7.4 is also masked, so I assume this is due to be
> > removed soon.
>
> 7.X is EOL upstream as of 9 months ago, hence the mask.
>
> It was acknowledged in the mask com
On Fri, 2023-04-21 at 22:15 +0200, Ralph Seichter wrote:
>
> Hm. While that sounds useful for "full Ruby" ebuilds, I don't see how to
> circumvent the impact for the particular ebuild I am trying to extend,
> other than overriding S in src_compile() etc.
>
> The build needs to create a C shared l
On Fri, 2023-04-21 at 09:16 +0200, Ralph Seichter wrote:
>
> I tried what you suggested. However, inheriting from ruby-ng.eclass
> introduces an odd problem: For some reason unknown to me, "${S}" no
> longer matches the default value of "${WORKDIR}/${P}", but only what I'd
> expect in "${WORKDIR}"
On 2023-04-19 01:08:23, Ralph Seichter wrote:
> I need to install Ruby bindings (something.so) during an ebuild,
> specifically into the /usr/lib64/ruby/vendor_ruby/3.0.0/x86_64-linux
> directory.
Hey Ralph. I'm not an expert on the ruby eclasses, but they work more
or less like the python ones, i
On Sat, 2023-04-15 at 21:29 -0400, jul...@jroy.ca wrote:
>
> You can keep a copy of the ebuild so even if it's removed from portage
> you will be able to install it.
>
> Even without a copy, you will be able to retrieve it from git history.
This is a better idea.
I'll warn you though, PHP upstr
On Thu, 2023-04-13 at 18:27 +0200, Dr Rainer Woitok wrote:
> Greetings,
>
> does anybody know about some command to convert shell globs (shell pat-
> terns) into regular expressions?
>
What exactly are you trying to do? This sounds like an XY problem
(https://xyproblem.info/).
On Fri, 2023-03-17 at 12:21 +, Daniel Pielmeier wrote:
>
>
> I don't think this should be necessary. The docutils ebuild should
> take care of this. If it doesn't there is a bug in docutils or maybe
> the mpv ebuild should call the py script directly.
>
The ebuilds themselves don't really t
On 2023-02-15 08:11:46, Neil Bothwick wrote:
>
> If, as you say, it will eventually replace eselect, there is no more
> bloat, just different bloat. It's still just a bunch of symlinks, but
> managed differently.
>
Should be less, since you already have portage installed but not
necessarily esel
On Thu, 2022-12-08 at 18:49 +0100, Matthias Hanft wrote:
>
> I hesitate to open a new Gentoo Bugzilla bug because it might not be a real
> bug -
> but what do I have to do on my new system that ruby (and all dependencies) can
> be installed?
>
> Thanks in advance,
>
You shouldn't be afraid to
On Fri, 2022-10-07 at 17:47 +0200, tastytea wrote:
>
>
> /usr/bin/test was installed by sys-apps/coreutils
If you're using bash, the "test" command is actually built-in to the
shell to avoid forking a million processes in every shell script.
On Sun, 2022-09-25 at 10:04 -0400, John Covici wrote:
> Hi. I updated the tree yesterday using git. Now, in this mornings
> batch of announcements, I am finding lots of packages no longer in the
> tree -- one of them is app-admin/logcheck . Another is rxvt. Now, I
> don't use these packages, bu
On Sun, 2022-09-18 at 09:26 +0200, n952162 wrote:
>
> Then, for some reason (licensing?), we were switched to openvpn, which
> works for xfreerdp but not for ssh.
>
> I don't have control over the institution's firewall (but I do have for
> the host itself)
>
Is the machine that you're trying t
On Wed, 2022-05-11 at 20:22 -0400, Mansour Al Akeel wrote:
> I am trying to avoid installing rust and prevent emerge --update
> --deep world from installing it again.
> How to do this ?
>
1. Switch away from Mozilla products. Evolution is a great Thunderbird
alternative, and Epiphany is a passabl
On Thu, 2022-04-21 at 15:39 +, Grant Edwards wrote:
>
> Have you tried using dev-lang/rust-bin?
>
No, I avoid rust mainly for the security problems. The compilation time
saved is just a bonus.
On Thu, 2022-04-21 at 08:24 -0700, cal wrote:
>
> Do you have any other (more powerful) machines at home that you could
> set up as a distcc cluster?
My desktop is only slightly more powerful. I don't really mind the
webkit-gtk build time since it's shared between epiphany and evolution.
I just r
On Thu, 2022-04-21 at 15:41 +, Peter Humphrey wrote:
>
> Clever indeed, but here:
>
> gnome-base/librsvg-2.52.6 pulled in by:
> app-text/djvu-3.5.28-r1 requires gnome-base/librsvg
> media-gfx/gimp-2.10.30 requires >=gnome-base/librsvg-2.40.6:2
> media-gfx/imagemagick-7.1.0.13 re
On Thu, 2022-04-21 at 14:31 +0100, Neil Bothwick wrote:
>
> Firefox and Rust have -bin packages - not so lucky with LLVM and
> webkit-gtk.
>
Everything has a -bin package if you're willing to trade the security,
configurability, and performance that you get from a source build:
https://gentoo.o
On Thu, 2022-04-21 at 15:49 +0300, Dex Conner wrote:
> Hi everyone,
>
> So I've found a Thinkpad X200 online and I'm thinking of buying it for
> libreboot purposes. Do you think the P8600 cpu can handle all the
> compiling on gentoo? For the record, I don't have any of the "big stuff"
> like KDE,
On Tue, 2022-02-22 at 12:57 -0500, Michael Orlitzky wrote:
>
> But --changed-use slows things down a lot, so you also don't want to
> use it *every* time.
>
Whoops, I mean --changed-deps.
On Tue, 2022-02-22 at 16:42 +0100, Dr Rainer Woitok wrote:
>
> So for people like me, neither being a developer nor managing a local
> server for binary packages (thanks Andreas for pointing out this special
> case), "--changed-deps" really is an option not to be used.
>
> Case finally closed
On Tue, 2022-02-22 at 14:26 +, Neil Bothwick wrote:
>
> It's not a relic, it's a fairly recent addition. It's a bit of a belt and
> braces approach which basically says "rebuild everything that might just
> possibly, maybe, in some circumstances have some sort of effect".
>
>
It's really a
On Mon, 2022-02-21 at 00:12 +0200, j...@clusters.gr wrote:
> Pardon me, but how would using --nodeps be a wise choice to rebuild
> your @world?
Straightaway, it isn't. But if you've already computed the list of
packages to be emerged, and the order in which to emerge them, then
emerging those one
On Sun, 2022-02-20 at 19:51 +, Neil Bothwick wrote:
>
> Shouldn't --keep-going have kicked in there and restarted the update?
>
You'd think, but --keep-going tries to recompute dependencies and if
the original emerge crashes in an inconsistent state, that often seems
to push the calculation
On Sun, 2022-02-20 at 15:18 +, Wols Lists wrote:
>
> So basically, dont-stop would update everything it can.
I half-jokingly called this "emerge --i-dont-care" in 2012:
https://groups.google.com/g/linux.gentoo.user/c/wE2GnF7RlnY
There are (still) a lot of people who want it. Last night I
On Sat, 2022-02-19 at 10:20 -0600, Dale wrote:
>
> Thanks to both for the info. Looks to me like they would test these
> packages in a local overlay first then move when major arches are
> ready. To each his/her own. I was hoping to use the more recent
> version and not have to update for a whi
On Sat, 2022-02-19 at 09:54 -0600, Dale wrote:
> Howdy,
>
> I'm just going to point to the gentoo page for this but I'd like to know
> why something is in the tree if it is not available to anyone due to
> missing keywords.
>
> https://packages.gentoo.org/packages/app-office/libreoffice
Probabl
On Sat, 2022-01-15 at 22:38 +0800, Andrew Lowe wrote:
> Dear all,
> I'm in the process of fiddling around with the config of my kernel.
> This means using the "menu config thingy" that "make menuconfig"
> builds. It is very frustrating. Does anyone know why stuff is not in
> alphabetical o
On Fri, 2022-01-14 at 16:53 +, Grant Edwards wrote:
> On 2022-01-14, Grant Edwards wrote:
>
> > urxvt has suddenly started prompting for confimation when pasting text
> > by clicking the middle mouse button. This is excruciatingly
> > annoying. I don't see any relevent X resources when I do '
On Mon, 2021-12-13 at 22:38 +0100, Frank Steinmetzger wrote:
>
> Well I *could* disable run-crons altogether and add entries to fcron’s own
> crontab which would run those scripts in /etc/cron.{hourly,daily,...}
> instead.
>
> However, I like predictable times at which those jobs will run. Especi
On Mon, 2021-12-13 at 22:19 +0100, Frank Steinmetzger wrote:
>
> For the record: The checks in run-crons that I referred to earlier are
> actually more for those cases in which the machine was powered off for a
> while in order to restore cron completeness as early as possible after boot.
>
The
On 2021-12-08 17:15:43, Adam Carter wrote:
>
> but sometimes there are newline characters in the comment field;
>
> property "something"
>
> comment "something
>
> something else
>
> a third thing"
>
> I want to replace any newlines between 'comment "' and the next '"' with
> spaces so the wh
On 2021-10-21 00:53:55, zca...@gmail.com wrote:
>
> 1 day, 1 emerge --sync, 1 update later: php-7.4 is additionally
> installed. for a php application i would expect that 1 php version is
> enough. but depending on the use flag this is not the case for
> nextcloud and roundcube, 2 versions are ins
On 2021-10-20 19:23:09, zca...@gmail.com wrote:
>
> when i install nextcloud it also installs php-7.3.31 and php-7.4.24,
> this is probably due to dev-php/imagick-3.5.1
>
PHP is slotted, so it's not too unusual for multiple versions to be
installed at the same time. An "emerge --depclean" may lat
On Fri, 2021-10-08 at 14:33 -0600, Skippy wrote:
>
> I've been informed that 4.5.3 is failing because it needs <=ffmpeg-3.4.
>
> That brings me to how to install such a version of ffmpeg. My limited
> understanding of slots tells me this should be possible, but I've yet to
> find anything expla
On Mon, 2021-09-20 at 15:56 +0200, Gerrit Kuehn wrote:
>
> Well, this was the suggested way to go, see
> https://www.gentoo.org/support/news-items/2021-05-05-python3-9.html
It was only suggested for a period of about three weeks:
We are planning to switch the default Python target of Gentoo sy
On Mon, 2021-09-20 at 14:50 +0200, Gerrit Kuehn wrote:
> Hi,
>
> I'd like to update a system that is about 1 year old. I have python3.7
> and python 3.8 installed, 3.7 is the default. After updating the repo,
> it was suggested to update portage first (probably useful to support
> new EAPI version
On Mon, 2021-08-02 at 13:10 +0200, n952162 wrote:
> >
>
> I have this problem every month. Why does it fail? Is it just a
> timeout because my network is slow? Can that be tweaked?
>
I'm not really sure. I've seen it fail in the past due to bad memory or
a dying hard drive, but it also "just
On 2021-08-02 09:20:19, n952162 wrote:
> On 8/1/21 8:32 PM, Michael Orlitzky wrote:
> > On Sun, 2021-08-01 at 17:32 +0200, n952162 wrote:
> >> * Verifying /var/db/repos/gentoo/.tmp-unverified-download-quarantine
> >> ...!!! Manifest verification failed:
> >&g
On Sun, 2021-08-01 at 17:32 +0200, n952162 wrote:
> * Verifying /var/db/repos/gentoo/.tmp-unverified-download-quarantine
> ...!!! Manifest verification failed:
> Manifest mismatch for metadata/news/Manifest
>
> I've raised this question before and the only useful answer I got was to
> keep try
On Fri, 2021-07-30 at 07:08 -0400, Michael Orlitzky wrote:
> On Thu, 2021-07-29 at 20:42 -0600, the...@sys-concept.com wrote:
> > I'm trying to run an upgrade but I got stuck on perl:
> >
> > !!! Multiple package instances within a single package slot have been
&
On Thu, 2021-07-29 at 20:42 -0600, the...@sys-concept.com wrote:
> I'm trying to run an upgrade but I got stuck on perl:
>
> !!! Multiple package instances within a single package slot have been
> pulled
> !!! into the dependency graph, resulting in a slot conflict:
>
> dev-lang/perl:0
>
Addin
On Tue, 2021-07-27 at 21:58 +0100, Neil Bothwick wrote:
>
> I was thinking more along the lines of a USE flag, as suggested first by
> Rich. Add a system-init flag to daemontools, defaulting to off, and have
> the virtual depend on daemontools[system-init] and the problem goes away
> with the only
On Tue, 2021-07-27 at 21:18 +0100, Neil Bothwick wrote:
>
> Instead of continually beating on portage on this list, which will
> achieve nothing more than a minor waste of electrons, you should be
> focussing on getting the ebuilds fixed so that portage is no longer given
> conflicting or incorrec
On Sun, 2021-07-25 at 20:52 -0400, Rich Freeman wrote:
> On Sun, Jul 25, 2021 at 8:39 PM Michael Orlitzky wrote:
> >
> > This is indeed a bug, but not the ones that have been suggested. The
> > underlying problem is that the DJB programs (mail-mta/netqmail, but
> &g
(Replying nowhere in particular)
This is indeed a bug, but not the ones that have been suggested. The
underlying problem is that the DJB programs (mail-mta/netqmail, but
also net-dns/djbdns, for example) require a particular service manager.
When OpenRC is installed only as a side effect of being
On Sat, 2021-07-17 at 15:13 -0600, the...@sys-concept.com wrote:
> On of my system is giving me an error when compiling php
>
> In file included from /usr/include/libxml2/libxml/parser.h:812,
> from
> /var/tmp/portage/dev-lang/php-7.4.21-r1/work/sapis-build/cli/ext/libxml/libxml.
On Tue, 2021-06-01 at 15:25 -0600, Grant Taylor wrote:
>
> The proper way configure certificates is:
>
> 1) Create a key on the local server.
> 2) Create a Certificate Signing Request (a.k.a. CSR) which references,
> but does not include, the key.
> 3) As a CA to sign the CSR.
> 4) Use the c
On Tue, 2021-06-01 at 13:02 +0100, Peter Humphrey wrote:
>
> So what would you recommend for someone in the case Joost cites? I'm in that
> position, being a home user of a small network but no registered Internet
> name.
>
A self-signed certificate combined with a browser extension that lets
On Tue, 2021-06-01 at 13:17 +0200, J. Roeleveld wrote:
>
> It's not that easy to do it with internal-only systems as Let's Encrypt
> requires the hostname to be known externally.
> And there are plenty of devices you do not want the whole internet to know
> about.
>
And in this situation LetsE
On Thu, 2021-05-20 at 21:29 +0200, tastytea wrote:
>
> A good measure against non-targeted spam is a hidden input field with
> the name “url”. If the bot put anything in that field, throw it out.
And be sure to put a paragraph of (hidden) explanatory text above it so
that blind users with screen
On Thu, 2021-05-06 at 17:04 +0200, n952162 wrote:
>
>
> How naive of me. After 5 tries (average of 25 minutes a pop), it worked.
>
I am happy to hear my cynicism was not misplaced =)
On Thu, 2021-05-06 at 07:30 +0200, n952162 wrote:
>
>
> Yes! It did! It does, every time! But why? I have enough disk space...
>
I have no idea. I fix it by re-syncing until the error stops. That's
how computers work.
On Wed, 2021-05-05 at 20:11 +0200, n952162 wrote:
> Hello.
>
> I update several machines every month. This month, most of the machines
> needed to update more than 300 packages. But one, which isn't any
> different than the others, has 0 to update, after running --sync.
>
> Does anybody have an
On Wed, 2021-04-07 at 22:15 +0200, k...@aspodata.se wrote:
>
> yea, it was a try to make c++ programs to behave under changing
> compiler and library situations. Seems that some such programs
> don't want to be built statically so they break whenever some "random"
> lib changes.
>
That's my best
On Wed, 2021-04-07 at 12:54 +0200, k...@aspodata.se wrote:
> # emerge -pv1 dev-lang/R
> ...
> [ebuild R] dev-lang/R-4.0.4::gentoo USE="... static-libs ..."
Thanks, this is really good debugging information. Is that USE=static-
libs a global flag on your system? That may explain why your bu
On Wed, 2021-04-07 at 02:02 -0600, Dan Egli wrote:
> It's worth a shot. I never completely got boolean logic, so you may be
> right.
>
It depends on an implicit order of operations. Usually "not" has higher
precedence than "and" and "or", but personally I wouldn't count on it
unless the document
On Mon, 2021-04-05 at 18:29 +0200, k...@aspodata.se wrote:
>
> So, how much memory does R need to build ?
> I have:
>
> $ free
> totalusedfree shared buff/cache
> available
> Mem: 6103628 1807560 2631444 146376 1664624
> 310786
On Mon, 2021-04-05 at 16:10 +0200, k...@aspodata.se wrote:
> system call failed: Cannot allocate memory
> Segmentation fault
Is this a low-memory machine? If so, there's no much you can do here
except set a lower number of jobs in MAKEOPTS for the dev-lang/R build:
https://wiki.gentoo.org/wiki
On Mon, 2021-04-05 at 00:44 +0200, k...@aspodata.se wrote:
> Michael:
>
> $ cp -a ...
> $ cd ...
> $ make -j1
> ...
> $ echo $?
> 0
>
> It builds without failure in that case.
>
That's (potentially) good news. Can you now try it with the
CFLAGS/CXXFLAGS and LDFLAGS from your `emerge --info`? If
On Sat, 2021-04-03 at 13:15 +0200, k...@aspodata.se wrote:
> Is there a way to run emerge step by step to find out why it fails ?
>
No easy way. You can `cp -a` the source/build directories out of
/var/tmp/portage and then re-run `make -j`. That should re-
start the build more or less where it fa
On Wed, 2021-03-24 at 15:03 -0600, Grant Taylor wrote:
> Hi,
>
> Does anyone have any pointers on where to start on converting a 10-15
> year old SysV style init script to OpenRC?
I'd start with "man openrc-run", and then read the service-script-
guide.md that is shipped & installed along with O
On Sat, 2021-02-06 at 18:46 -0700, Dan Egli wrote:
>
> At first I thought it was complaining about it's own missing module. But
> there's no use flag for sqlite in fail2ban. So then I looked at python
> itself. Sure enough, the sqlite use flag was disabled. So I turned it
> on and re-emerged p
On Mon, 2021-02-01 at 05:23 -0500, Andrew Udvare wrote:
> >
> > 1. Nothing is shared between packages so build time and disk
> > usage skyrockets.
>
> This is NodeJS and 99% of stuff is plain JavaScript. Many packages
> are tiny. More time will be spent unpacking tiny distfiles and re-
> ar
On Sun, 2021-01-31 at 18:42 -0500, Andrew Udvare wrote:
>
> Our best option is to treat Nodejs stuff the way we treat Rust and Go
> packages. Pretend Nodejs 'binaries' are 'built' statically and
> therefore, grab all the dependencies in the main package ebuild.
The only thing a package manager do
On 1/5/21 5:17 PM, n952162 wrote:
I'm thinking about putting the stuff in /var/tmp/portage on another
drive and linking with a symlink. Is there a better way?
Using the PORTAGE_TMPDIR variable (man make.conf).
On 12/31/20 2:34 AM, n952162 wrote:
cups was already installed. I considered removing it, but several other
things, like ghostscript (!) are dependent on it. I'm using
--keep-going for now. I suspect a bug in acct-group/lp that will get
cleared up.
If it's a bug in the acct-user eclass, it
On 12/19/20 7:41 PM, k...@aspodata.se wrote:
So that means that programs like ngspice won't link with glibc 2.32 or
later.
The easiest way to fix this is probably to update the version of ngspice
available in Gentoo. The latest upstream release is v33,
http://ngspice.sourceforge.net/news
On 12/16/20 5:16 PM, k...@aspodata.se wrote:
It will probably, cannot test just now, rust is compiling
I'm sorry for your loss. I opened
https://bugs.gentoo.org/760408
to track this issue, but we will probably hack around it in the ebuild
for now. Our SuiteSparse ebuilds are far behi
On 12/16/20 1:17 PM, Michael Orlitzky wrote:
On 12/16/20 12:30 PM, k...@aspodata.se wrote:
Both sci-libs/{amd,camd}-2.4.6 gives this error in their build log:
! Package inputenc Error: Unicode character ^^H (U+0008)
(inputenc)not set up for use with LaTeX.
I can
On 12/16/20 12:30 PM, k...@aspodata.se wrote:
Both sci-libs/{amd,camd}-2.4.6 gives this error in their build log:
! Package inputenc Error: Unicode character ^^H (U+0008)
(inputenc)not set up for use with LaTeX.
I can reproduce this... I'll take a look.
On 12/6/20 11:57 AM, Martin Vaeth wrote:
Michael Orlitzky wrote:
Why are you focusing on /tmp and /var/tmp?
Because only world-writable directories are the ones which
can be exploited unless the tmpfiles.conf author does
something malevolent or extremely stupid.
This is completely untrue
On 12/6/20 2:55 AM, Martin Vaeth wrote:
Dale wrote:
It sounds like a rather rare problem. Maybe even only during boot up.
It is a non-existent problem on openrc if you clean /tmp and /var/tmp
on boot (which you should do if you use opentmp):
The purpose of opentmpfiles is to fill these dire
On 12/4/20 12:02 PM, Dale wrote:
So basically, that package would have to start over from scratch to be
fixed. That's not very likely if history means anything.
I think the opentmpfiles devs are planning to copy/paste the
systemd-tmpfiles C code into opentmpfiles eventually. That will make
On 12/4/20 1:44 AM, Dale wrote:
Will opentmpfiles be fixed at some point or is it true that it can't be
fixed? On -dev, I think I read where one person said it can't be
fixed. In that case, switching is likely a good idea since the insecure
package can't be fixed.
The answer is a bit compli
On 12/4/20 5:47 AM, Michael wrote:
If sys-apps/opentmpfiles is installed on openrc profiles, will this be
depracated and replaced with sys-apps/systemd-tmpfiles, or is this something
we should do manually ourselves?
Only the default is being changed for now, so you should swap them yourself.
On 12/4/20 3:55 AM, tastytea wrote:
From what I could gather, opentmpfiles is only vulnerable when an
attacker is able to put a config file into /etc/tmpfiles.d/, so they
have to be already root.
The exploit does require an entry in /etc/tmpfiles.d, but many packages
install perfectly innoce
On 12/3/20 9:18 PM, Michael Orlitzky wrote:
There's a full explanation here:
http://michael.orlitzky.com/cves/cve-2017-18925.xhtml
Just kidding, there were actually two:
http://michael.orlitzky.com/cves/cve-2017-18188.xhtml
On 12/3/20 8:40 PM, Dale wrote:
Howdy,
I've mentioned I follow -dev to see what is coming around the corner.
There is a thread on there about switching tmpfiles packages for
security reasons. I currently have sys-apps/opentmpfiles installed. I
guess that is the default for openrc. Someone men
1 - 100 of 876 matches
Mail list logo
