Re: Graveyard overlay (was: Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo)

2013-02-13 Thread Florian Philipp
Am 14.02.2013 08:26, schrieb Michael Weber: > On 02/14/2013 06:09 AM, Ben de Groot wrote: > >> I need two things: >> >> 1. Users volunteering some time to keep this running >> 2. Agreement on a place to host tarballs no longer hosted upstream > > i'm all in. > Me too. Having a central, semi-off

Re: Graveyard overlay (was: Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo)

2013-02-13 Thread Michael Weber
On 02/14/2013 06:09 AM, Ben de Groot wrote: > I need two things: > > 1. Users volunteering some time to keep this running > 2. Agreement on a place to host tarballs no longer hosted upstream i'm all in. -- Michael Weber Gentoo Developer web: https://xmw.de/ mailto: Michael Weber

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Michael Weber
U folks are aware of the fact that installed sources is rather vaguely coupled with running kernel, right? No, I'm not running archkernel on gentoo, but it would be possible. It's also fine to poke around in linus' sources and cross compile w/o ever running the damn thing or needing firmware from

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Michał Górny
On Thu, 14 Feb 2013 01:08:35 +0100 Florian Philipp wrote: > Am 14.02.2013 00:07, schrieb Brian Dolbec: > > On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: > >> Am 13.02.2013 20:19, schrieb Michael Sterrett: > >>> # Michael Sterrett (13 Feb 2013) > >>> # No longer licensed for sale upst

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Graham Murray
Peter Stuge writes: > Kernel -sources USE is a handy way to install linux-firmware > wholesale, but AIUI the standalone firmware packages would > be removed too, effectively making the USE flag non-optional, and > removing the possibility of having managed firmware packages. > (People would have

Graveyard overlay (was: Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo)

2013-02-13 Thread Ben de Groot
On 14 February 2013 08:08, Florian Philipp wrote: > Am 14.02.2013 00:07, schrieb Brian Dolbec: >> >> Easy, just copy the ebuild and any patches in the files subdir to a >> local overlay. >> > > Which brings us back to the old discussion on what good it does for one > person to do the work of maski

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Alec Warner
On Wed, Feb 13, 2013 at 4:08 PM, Florian Philipp wrote: > Am 14.02.2013 00:07, schrieb Brian Dolbec: >> On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: >>> Am 13.02.2013 20:19, schrieb Michael Sterrett: # Michael Sterrett (13 Feb 2013) # No longer licensed for sale upstream. >

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Florian Philipp
Am 14.02.2013 00:07, schrieb Brian Dolbec: > On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: >> Am 13.02.2013 20:19, schrieb Michael Sterrett: >>> # Michael Sterrett (13 Feb 2013) >>> # No longer licensed for sale upstream. >>> # Masked for removal on 20130315. >>> games-strategy/x2 >>>

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Brian Dolbec
On Wed, 2013-02-13 at 20:46 +0100, Florian Philipp wrote: > Am 13.02.2013 20:19, schrieb Michael Sterrett: > > # Michael Sterrett (13 Feb 2013) > > # No longer licensed for sale upstream. > > # Masked for removal on 20130315. > > games-strategy/x2 > > games-strategy/x2-demo > > > > Sure, I canno

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 09:30 PM, Michael Weber wrote: > GPG agents do not transport keys, just passphrases. To stress that, my passphrased key resides on my remote build-box, gpg just askes my local gpg agent for the passphrase. ssh -R /root/.gnupg/S.gpg-agent:/tmp/keyring-michael/gpg b-4 with a persiste

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Peter Stuge
Michael Weber wrote: > > Rather than creating a TCP socket I would look into using the ssh -W > > option. > gpg agent works with unix domain sockets. I know. It would look something like socat + ssh -W socat //Peter

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 09:23 PM, Peter Stuge wrote: > Rather than creating a TCP socket I would look into using the ssh -W > option. gpg agent works with unix domain sockets. -- Michael Weber Gentoo Developer web: https://xmw.de/ mailto: Michael Weber

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 09:07 PM, Agostino Sarubbo wrote: > As most of us do, I do the commit from another machine, not mine. So, for ssh > I'm using ssh -A to forward the key and I'm interested to find a way to do it > for the gpg key. > > I found an how-to that uses socat ( http://superuser.com/question

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Peter Stuge
Agostino Sarubbo wrote: > I'm using ssh -A to forward the key and I'm interested to find a > way to do it for the gpg key. > > I found an how-to that uses socat ( http://superuser.com/questions/161973/how- > can-i-forward-a-gpg-key-via-ssh-agent ) but does not work as expected. Did you debug? Ra

[gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Agostino Sarubbo
On Tuesday 12 February 2013 15:14:15 William Hubbs wrote: > All, > > as preparation for the up-coming cvs->git migration of the portage tree, > the council is strongly suggesting that from this point forward all > developers sign their manifests with their gpg key as described in the > developer's

Re: [gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Florian Philipp
Am 13.02.2013 20:19, schrieb Michael Sterrett: > # Michael Sterrett (13 Feb 2013) > # No longer licensed for sale upstream. > # Masked for removal on 20130315. > games-strategy/x2 > games-strategy/x2-demo > Sure, I cannot buy it anymore. But what about people who already own it and would like to

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/13/2013 06:22 PM, Aaron W. Swenson wrote: > There's nothing Gentoo specific about it. I don't see why we would > need to officially document an official document. The most we > should do is point people to the resource. So, please link to this

[gentoo-dev] last rites: games-strategy/x2, games-strategy/x2-demo

2013-02-13 Thread Michael Sterrett
# Michael Sterrett (13 Feb 2013) # No longer licensed for sale upstream. # Masked for removal on 20130315. games-strategy/x2 games-strategy/x2-demo

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Peter Stuge schrieb: > Kernel -sources USE is a handy way to install linux-firmware > wholesale, but AIUI the standalone firmware packages would > be removed too, effectively making the USE flag non-optional, and > removing the possibility of having managed firmware packages. > (People would have t

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Aaron W. Swenson
On Wed, Feb 13, 2013 at 07:58:30PM +0200, Eray Aslan wrote: > On Wed, Feb 13, 2013 at 05:22:14PM +, Aaron W. Swenson wrote: > > I agree. This is officially documented by GnuPG. [1] That would be the > > best source to use. It details everything one needs to do to manage a > > key pair. > > Goo

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Eray Aslan
On Wed, Feb 13, 2013 at 05:22:14PM +, Aaron W. Swenson wrote: > I agree. This is officially documented by GnuPG. [1] That would be the > best source to use. It details everything one needs to do to manage a > key pair. Good luck having people find and read it. Similar to (or perhaps linking t

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Peter Stuge
Diego Elio Pettenò wrote: > > I don't like the binary distribution argument of include everything > > to cover as many possible use cases as possible in one go. > > > > I very much like the high resolution of Gentoo packages. I'd hate to > > enter a slippery slope toward lower resolution. > > Are

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 18:46, "Paweł Hajdan, Jr." wrote: > What is considered a good key size these days? As far as I can tell, 2048 rsa should be still fine. Just drop DSA and anything 1024 I would suggest. -- Diego Elio Pettenò — Flameeyes flamee...@flameeyes.eu — http://blog.flameeyes.eu/

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Paweł Hajdan, Jr.
On 2/13/13 12:28 AM, Robin H. Johnson wrote: > On Wed, Feb 13, 2013 at 12:12:35AM +0100, Michael Weber wrote: >> What is the rotation strategy for (near) outdated keys? >> Alter the key or create a new one? Sign the new with the old one? > If your keysize is still good, you should ideally update th

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 18:33, Peter Stuge wrote: > I don't like the binary distribution argument of include everything > to cover as many possible use cases as possible in one go. > > I very much like the high resolution of Gentoo packages. I'd hate to > enter a slippery slope toward lower resolution. Are

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Peter Stuge
Diego Elio Pettenò wrote: > People who don't need the firmware can deal with disabling it themselves. I don't like the binary distribution argument of include everything to cover as many possible use cases as possible in one go. I very much like the high resolution of Gentoo packages. I'd hate to

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Aaron W. Swenson
On Wed, Feb 13, 2013 at 09:35:56AM -0700, Denis Dupeyron wrote: > On Wed, Feb 13, 2013 at 8:31 AM, Aaron W. Swenson > wrote: > > This information, by the way, has been blogged about thousands of > > times. > > There is a reason people write documentation. Contrary to blog posts, > documentation

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Eray Aslan
On Wed, Feb 13, 2013 at 09:35:56AM -0700, Denis Dupeyron wrote: > If you want people to handle security properly you have to tell them > how to. In details. If not everybody will figure it out in his or her > own way, all of them wrong. Get off your high horse and write > documentation if you know

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Denis Dupeyron
On Wed, Feb 13, 2013 at 8:31 AM, Aaron W. Swenson wrote: > This information, by the way, has been blogged about thousands of > times. There is a reason people write documentation. Contrary to blog posts, documentation is thought out, reviewed, maintained and corrected when necessary. Blogs are wr

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Thomas Sachau
Michael Weber schrieb: > On 02/12/2013 10:14 PM, William Hubbs wrote: >> as preparation for the up-coming cvs->git migration of the portage >> tree, the council is strongly suggesting that from this point >> forward all developers sign their manifests with their gpg key as >> described in the devel

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Markos Chandras
On 13 February 2013 15:31, Aaron W. Swenson wrote: > On Wed, Feb 13, 2013 at 01:20:39PM +0100, Michael Weber wrote: >> On 02/13/2013 11:55 AM, Markos Chandras wrote: >> > http://www.gentoo.org/doc/en/gnupg-user.xml >> > >> still no hint what to do on expiration (as every single other "gpg howto").

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Aaron W. Swenson
On Wed, Feb 13, 2013 at 01:20:39PM +0100, Michael Weber wrote: > On 02/13/2013 11:55 AM, Markos Chandras wrote: > > http://www.gentoo.org/doc/en/gnupg-user.xml > > > still no hint what to do on expiration (as every single other "gpg howto"). > It depends. What do you want to do when it expires?

Re: [gentoo-dev] [RFC/PATCH] A cleaner API for virtualx.eclass

2013-02-13 Thread Gilles Dartiguelongue
Le lundi 11 février 2013 à 23:48 +0100, Diego Elio Pettenò a écrit : > I'd say, "Go for it!" > > But on the other hand I wonder if it might make sense to have > something more generic, so that one only has to call something in a > way such as > > virtualx_setup > run_tests --foo > virtualx_cleanu

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Alec Warner
On Wed, Feb 13, 2013 at 5:39 AM, Chí-Thanh Christopher Nguyễn wrote: > Rick "Zero_Chaos" Farina schrieb: >> Having 300 -firmware packages is silly. > > I can't help but noticing that some of the recently introduced iwlwifi > firmware packages came from Chromium OS. So there seems to be interest >

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 15:50, Chí-Thanh Christopher Nguyễn wrote: > Indeed. Firmware is also needed for some RAID controllers. > I imagine that users of the default profile are more likely to not need > hand-holding here and more likely to want a lean system by default. But > I have no strong opinion either

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Diego Elio Pettenò schrieb: > On 13/02/2013 14:38, Chí-Thanh Christopher Nguyễn wrote: >> https://bugs.gentoo.org/457082 >> Instead of USE defaults, this could be turned on in the desktop >> profile as wifi, radeon cards etc. are less likely to be present on >> non-desktop systems. > IIRC some serv

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 14:38, Chí-Thanh Christopher Nguyễn wrote: > https://bugs.gentoo.org/457082 > Instead of USE defaults, this could be turned on in the desktop > profile as wifi, radeon cards etc. are less likely to be present on > non-desktop systems. IIRC some server systems need ethernet cards' fir

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Diego Elio Pettenò
On 13/02/2013 14:39, Chí-Thanh Christopher Nguyễn wrote: > I can't help but noticing that some of the recently introduced iwlwifi > firmware packages came from Chromium OS. So there seems to be interest > in individual packages from downstreams over the linux-firmware package. I would suppose the

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Rick "Zero_Chaos" Farina schrieb: > Having 300 -firmware packages is silly. I can't help but noticing that some of the recently introduced iwlwifi firmware packages came from Chromium OS. So there seems to be interest in individual packages from downstreams over the linux-firmware package. Best

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Maxim Kammerer schrieb: >> Having 300 -firmware packages is silly. > I agree, but think that the process can be more user-friendly than a > savedconfig — perhaps a variable as was suggested already. As the developer who came up with the savedconfig implementation, I am the first one to admit that

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Sergei Trofimovich schrieb: > The source of confusion was non-working device by default. Maybe > 'IUSE=+firmware; RDEPEND="firmware? ( sys-kernel/linux-firmware > )"' for virtual/linux-sources would help user experience a bit. +1 https://bugs.gentoo.org/457082 Instead of USE defaults, this could be

Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Rick "Zero_Chaos" Farina schrieb: > atmel-firmware ipw2100-firmware ipw2200-firmware b43-firmware > b43legacy-firmware rtl8192su-firmware zd1201-firmware > zd1211-firmware > > None of these are blockers on linux-firmware, none of these are > included in linux firmware, none of these should be maske

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Michael Weber
On 02/13/2013 11:55 AM, Markos Chandras wrote: > http://www.gentoo.org/doc/en/gnupg-user.xml > still no hint what to do on expiration (as every single other "gpg howto"). -- Michael Weber Gentoo Developer web: https://xmw.de/ mailto: Michael Weber

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Markos Chandras
On 12 February 2013 23:28, Robin H. Johnson wrote: > >> IMHO the answer to these questions is not obvious nor given by (our) >> docu [1]. > I'm pretty sure it was in the devrel developer handbook at one point, > along with instructions to create your key, but I can't find it now. This one? http:

Re: RFC: install linux-firmware with kernel sources (was Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1)

2013-02-13 Thread Chí-Thanh Christopher Nguyễn
Christopher Head schrieb: >> Most external firmware is not needed to boot. If you need it to boot, >> you will have to stow it in the initramfs. > For those of us who prefer monolithic kernels, virtually all firmware > is needed to boot. Even if a network interface doesn't need to be > operational

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Ben de Groot
On 13 February 2013 15:07, Michael Weber wrote: > On 02/13/2013 12:28 AM, Robin H. Johnson wrote: >> On Wed, Feb 13, 2013 at 12:12:35AM +0100, Michael Weber wrote: >>> On 02/12/2013 10:14 PM, William Hubbs wrote: If you have any questions on this, please feel free to let us know. >>> Wha

Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests

2013-02-13 Thread Fabian Groffen
On 13-02-2013 02:15:48 +0100, Jeroen Roovers wrote: > On Tue, 12 Feb 2013 17:07:33 -0800 > Alec Warner wrote: > > > On Tue, Feb 12, 2013 at 5:05 PM, Jeroen Roovers > > wrote: > > > On Wed, 13 Feb 2013 01:47:34 +0100 > > > Jeroen Roovers wrote: > > > > > >> It would help if repoman noticed when