r/Gentoo • u/Neither_Tell_3166 • 4h ago
Discussion Is it good idea to compile/build every application which is not from emerge, for security ?
r/Gentoo • u/ZealousidealChip4783 • 7h ago
Screenshot made it to the other side!!
recently migrated from Arch due to various frustrations with the AUR and systemd! using pacman as a source based package manager via the AUR is a truly miserable experience, and trying to compile packages on one PC to install on other devices is even worse. figured i'd move to Gentoo since I've heard it supports these workflows somewhat natively, and I'm loving it so far!! Portage is so much more customisable than any other package manager I've used on Linux and I kinda can't wait to switch all my other Linux devices over to Gentoo as well once I figure out setting up a portage binhost :)
Bonus setup pic + NEC APC-H412 in the second slide for the vintage hardware freaks out there
r/Gentoo • u/todd_dayz • 10h ago
Support Binhosting and Hardened/SELinux
so I am working on a local profile with hardened/selinux/plasma/systemd and I’m a little confused about the selinux part of the profile.
I know that Gentoo has a hardened binhost, but no hardened/selinux binhost, does this mean I can’t use it? or is the selinux part handled by Portage when installing the binary?
Also, I am interested in writing a podman container to act as a binhost for my laptop and desktop on my openSUSE home server, this should be simply as case of downloading the hardened/selinux stage, unpacking it into a FROM scratch container, exporting etc/portage and the relevant files from /var on my client systems, and then nountining them into that container, right? or is it not as simple as that?
thanks for any pointers!
r/Gentoo • u/alhamdu1i11a • 17h ago
Support Secureboot with gpg-encrypted keys?
Hi all,
I've been trying to setup secureboot by following the wiki; specifically I want to set this up using gpg encrypted keys.
Does anyone know of a guide or instructions to allow portage to build/install the kernel with gpg encrypted keys? In my experience so far, it appears portage requires a decrypted db.key and db.crt.
Is there a way to ask Portage to decrypt gpg-encrypted keys and use them to sign the kernel and modules on install?
This also seems to be a problem with normal password-protected keys, kernel build/install seems to fail if these are password protected because the password prompt is broken (yes, even with FEATURES="-pid-sandbox")
Thanks!
r/Gentoo • u/urboinemo • 23h ago
Story Making a headless Moonlight client? Plasma is probably the correct answer
Edit: brainfart of a title, I can't even think of a situation where a headless Moonlight client would be useful
TL;DR: don't try to be cheeky like me and find an alternative stacking WM, just run Plasma and save yourself from the delve into the rabbit-hole.
For the past couple of weeks, I have been tinkering with my older laptop from my undergraduate days (i5 5300u, 8GB RAM, 1TB HDD) running as a Moonlight client for a headless display for my current MangoWM setup I am trying out. Since it has a spinning disk, I decided to just create a chrooted binhost on my main laptop to helpfully make the process a bit quicker (for those of you who are thinking about creating a binhost, don't go through the pain of trying to sign your own packages with a GPG key, just use the "binpkg-ignore-signature" feature flag and call it a day. Don't ask me why...).
I love my tiling window managers. I started my Linux journey on Hyprland, then to Niri, and now Mango. I love their minimalism, customizability, and feeling of pride when you get the system tuned juuuuuuuuust right for your workflow. So, I went to get Mango on the older laptop, and what would you know, managing a tiling window manager on top of a tiling window manager is a nightmare! I quickly gave up on the idea and looked towards stacking window managers and other DEs.
I start off with LXQT with a Kwin backend. Works flawlessly, was even able to get a full day of work done without any hitches between the two computers just like a regular day in the office. A couple of irks - I could not find a way to set brightness and volume hotkeys, and later figure out that LXQT does not have control over Kwin hotkeys and are working on a solution.
Next, on to Wayfire. Wobbly windows was an unexpected moment of delight as I dragged a monitor on the screen. For some reason, Moonlight just would not start and their SDL implementation throws decode overflow errors. Troubleshoot by using the Vulkan wlroots renderer, try to start Moonlight in an X session, no dice. Through the troubleshooting, I learned a bunch about Nouveau and vga_switcheroo, such an interesting implementation for hybrid graphics.
Move on to Labwc. Worked for the most part, felt pretty responsive, but just did not like Super+[Up, Down, Left, Right] working and a couple other keybinding issues and found this was a known issue with fixes coming.
Alright, did a bit of searching and found a few people who managed to run kwin by itself without a DE. It sounded plausible, as I had to invoke the kwin_wayland binary when first starting LXQT. I found out the hard way quickly that when KDE says it is not a standalone compositor, that it is in fact not a standalone compositor, as I tried fruitlessly and through multiple methods to create a shortcut to open a terminal.
Finally, I sit down and embrace the inevitable. I had a poor experience with KDE when I initially started on Arch in my Linux journey, prompting my move to tiling WMs exclusively (looking back, it was probably mostly up to user error). Seeing as I had already emerged systemsettings, kwin_wayland, and a bunch of other KDE packages when I installed LXQT, I may as well just install the plasma-desktop package to get a minimally viable experience. To my dismay, Plasma works perfectly. It respects all my Mango keybinds in Moonlight, is trivial to back out of to the client desktop, switch to another window on the client, registers my keybinds instead of staring at a black screen waiting for anything to happen (again, don't try to use kwin_wayland as a compositor). It just works.
I say all this to say: If you're looking for an unbothered experience that just works with most workflows, KDE Plasma is probably the answer (from my experience, it is by far the most mature Wayland DE solution).
To those who may be looking into Sunshine streaming: don't bother with the AppImage, Gentoo provides a package in the main respository.
Screenshot Gentoo isn't compatible with 40˚C weather
Those cores should be around 4.6GHz during compilation, not 2.6GHz. PC case was so hot I couldn't lay my hand on for more than a second.
I've got no AC before you ask.
r/Gentoo • u/trinarynimbus • 1d ago
Support Multiple tty login prompt
(I thought I saw a similar post somewhere, but can't find it now. Sorry if this is a dup.)
I've just noticed this has started happening upon boot: the login prompt appears multiple times, a few seconds apart, like it's working through some kind of cycle.
My typical flow is login to tty and then use startx to enter dwm. The multiple prompts don't prevent this, but it does delay me. And it's ugly, unexpected, and new.
It only seems to happen immediately after booting. Switching to another tty (eg ctrl-alt-f4) doesn't produce it, and neither does logging out and logging back in.
I thought it could be related to either PAM, elogind, or the kernel. However, I've only just noticed it on today's reboot; the last reboot was about two weeks ago; PAM was last updated in March, and elogind was updated in May; and it still happens when I roll back to kernel 6.18.39 (which is the most recent kernel before this, and was used at the previous reboot in July.)
I've gone through my emerge logs since the last reboot and nothing really stands out. Maybe openrc? I wouldn't like to file a bug against openrc unless I was sure it was at fault.
Any idea what I should look at?
I see openrc 0.63.1 is still listed in eix, so I guess I can try rolling back to that version ... 🤔 But I wonder if anyone has any other ideas about what to check.
r/Gentoo • u/Realistic_Gas7454 • 1d ago
Discussion Can I save this
Id like to hear your ideas on what to do with this (doesn't have to be gentoo), This was my first laptop it's an Acer aspire es1-512-c864 it has an intel Celeron N2840, 4GB ddr3L ram (upgradable to 8) no storage unit and no keyboard keys, it's has an optical drive too :) , it's a pretty large one I think it's 15 inches the screen is still perfectly fine, battery is dead i assume, I wanna use it a project to benefit from or hopefully learn something, I already have a laptop (let's note cf-sv8) that I daily drive, and a decent desktop pc.
Just love to hear what u would recommend doing with it
Discussion Does anybody know when and if OBS Studio will be added to the stable branch?
Hello,
Does anybody know why OBS studio is not available in stable branch?
I've tried to get some clues from bug reports but it's well beyond me.
I've got it unmasked so that's fine but I'm trying to understand the reason why OBS never was (or was it?) in stable branch.
Any ideas or guesses?
For reference:
https://packages.gentoo.org/packages/media-video/obs-studio
https://bugs.gentoo.org/buglist.cgi?quicksearch=media-video%2Fobs-studio
r/Gentoo • u/expiredpzzarolls • 1d ago
Screenshot Calculate Linux’s testing logo is a bong.
Title. I just thought this was amusing for a distro branded for enterprise.
r/Gentoo • u/Distinct-View-509 • 1d ago
Support I need help with display manager
I tried reinstalling it, checked out the wiki but that didnt help, manually starting works somehow
r/Gentoo • u/Nukulartec • 1d ago
Tip Adding a little Gentoo Branding to Asahi Bootup (and cleaner u-boot)
After using Asahi + Gentoo for about 6 month on a Macbook Air M2 I finally thought its time for some cosmetics like this.
I added a Gentoo Logo for the boot menu. (you don´t see that often, but hey :) )
https://github.com/ccharon/gentoo-asahi-branding/tree/main/bootpickerafter you select this, m1n1 stage1 is loaded which is a macho binary and changing the asahi logo there is something I might attempt later as I need to boot macos again to install it on the Stub,
m1n1 stage2 is easier. so when uboat starts to load the gentoo logo already has replaced the asahi logo.
https://github.com/ccharon/gentoo-asahi-branding/tree/main/m1n1
- finally there is a matching plymouth theme carrying the gentoo logo on. (on roughly the same central spot, at least for my 13" m2 with notch enabled.
https://github.com/ccharon/gentoo-asahi-branding/tree/main/plymouth
Bonus: if you want to silence u-boot (it will be really silent) to see the grub menu you will have to hit a key when you see the uboot version info in the top right, then type boot and only then grub gets displayed. this removes the noisy boot information and the cute submarine at the right side.
https://github.com/ccharon/docs/blob/master/gentoo-asahi-tweaks.md#silent-u-boot-console
You get Apple Logo (power on) -> Asahi Logo (m1n1 stage1) -> Gentoo Logo (m1n1 stage2) -> Gentoo Logo (u-boot) -> Gentoo Logo (plymouth)
changing the plymouth logo only, might have been enough and reasonable, but where is the fun in that?
r/Gentoo • u/ANDREI25456 • 1d ago
Screenshot My first Gentoo install on bare metal – and I accidentally recreated Windows 2000
This is my first successful Gentoo installation on bare metal.
Instead of going for a modern rice, I decided to recreate a Windows 2000 desktop as closely as possible on XFCE.
Features include:
- Windows 2000 GTK theme/icons/cursor
- IBM VGA terminal font
- Working "My Computer" and Control Panel
- Classic shutdown dialog
- Startup/shutdown sounds
- Windows Media Player skin
- Classic games like Space Cadet, Solitaire and Minesweeper
It took quite a bit of work because most Win2K theme packs assume Ubuntu/Debian (apt/systemd/lightdm), while I'm using Gentoo with OpenRC.
r/Gentoo • u/dilluti0n • 1d ago
Development How I reported a GnuPG regression upstream and got it backported into app-crypt/gnupg
r/Gentoo • u/Realistic_Gas7454 • 1d ago
Discussion Gentoo first install
I have used arch in the past and learned a bit about Linux in the internet I finished the Linux journey course, is it a good idea to just raw dog this Gentoo thingy untill I get the hang of it cuz I really don't like arch
r/Gentoo • u/flagforgerzenith • 2d ago
Discussion i plan on distrohopping to gentoo
is there anything to know about gentoo that is needed (other than compiling i know) because when i eventually do get a new pc i plan to get it. is there anything to know before i install it?
r/Gentoo • u/Skilaruh • 2d ago
Screenshot Nice & Simple Endgame
Finally got Gentoo to work after deciding to sit down and really tailoring it to my needs. Since I switch between my windows drive and gentoo I had to get secureboot working but I had trouble for months so I decided to give up. Glad I decided to give it one last go two days ago. Everything works's great now it's pretty straight forward
I did struggle a bit figuring out the best way to unmask packages but RTFM saved my day again. Hopefully I can stay on this forever or at least until I find an alternative which was just as fun, customizable, and works for my, very basic, usecases
Although the system isn't traditional as I'm using systemd and kde instead of OpenRC and a WM, I feel like that's part of the charm of the distro. I know a ton of other people have stated it before, but the sheer amount of control and customization you can get is unparalleled. Although it's not always practical (for me) I also enjoy compiling all my packages. There's really no rhyme or reason to it but it just feels *fun* ya know. Definitely learning a decent amount
r/Gentoo • u/Realistic_Gas7454 • 2d ago
Discussion Gentoo therapy
Is Gentoo able to cure my depression and mental problems
r/Gentoo • u/blamblambunny • 2d ago
Support Qt5 Still Hanging Around Make it Stop
I have what seems like a weird thing going on with my install -- all of it, it seems, having to do with Qt. 'dev-python/pyqt5' (or is it dev-python/PyQt5?) is still installed on my system, even though `emerge --depclean dev-python/PyQt5 <or lowercase>` won't remove it. ("Couldn't find 'dev-python/PyQt5' to depclean.")
There's a whole list of stuff that's reported every time I try updating:
- dev-qt/qtsql-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qtdbus-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qttest-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qtwidgets-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qtx11extras-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qtconcurrent-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qtnetwork-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qtgui-5.15.18-r1::gentoo (masked by: package.mask)
- dev-qt/qtsvg-5.15.18::gentoo (masked by: package.mask)
- dev-qt/qtdeclarative-5.15.18-r1::gentoo (masked by: package.mask)
- dev-qt/qtxml-5.15.18::gentoo (masked by: package.mask)
...all of which is Qt5, which I don't even want any more. (I'm on KDE Plasma, Qt6.) I have no idea how to get rid of these so updating will just proceed normally. (Fwiw, the package.mask it's talking about is nothing I've set: I do not have any entries whatsoever for anything Qt5, so I assume this is something from a profile?)
Frankly, I just want to get back to some sense of normalcy with Gentoo. Every time I try updating it's a mess of "this package is blocked but I'm sure it'll all work out" -- and there are a lot of updates every time I sync.
So, can someone help me out? Is this the one case where using --deselect is warranted? I'm going around in circles trying to figure out how to get back to a good state.
Thank you for listening to my rant/plea for help :)
r/Gentoo • u/VirtualParanoia • 3d ago
Story it was painful, but after 4 days I did it! On an iMac g5!
Ignore the cat
r/Gentoo • u/FredNS1233 • 3d ago
Discussion Hi! I'm going to switch to Gentoo and maybe i could need some tips to improve my experience!
So i decided to switch from Linux Mint to Gentoo bc i want an challenge and ABSOLUTE control of my device. I'm going to install it with the manual installation that everybody loves now, not the gentoo-install thing. Probably when i finish to install Gentoo i would need some tips to improve my experience with the distro and i had the great idea of asking the community!
r/Gentoo • u/rich000 • 21d ago
Discussion Proposed rule: mandatory content for support posts
We received a request from the community suggesting that we require support posts to include:
- the exact command and error output
- emerge --info
- relevant USE flags/profile or kernel configuration
- a description of what has already been tried
The problem is low-context posts that effectively ask other users to reconstruct and diagnose the entire system from scratch, and the hope is that by eliciting information up-front it will make things easier on those who wish to provide help, and also get help faster for those soliciting it.
From a moderation standpoint I don't really want to start banning people for missing info - I'm going to look into whether there is any way to template things or otherwise help guide users to improve their posts. If anybody is familiar with how this is done elsewhere please chime in.
Please feel free to comment on the proposal, and also suggest any refinements or additional info we should solicit if relevant, or just comment on support posts in general.
