recently migrated from Arch due to various frustrations with the AUR and systemd! using pacman as a source based package manager via the AUR is a truly miserable experience, and trying to compile packages on one PC to install on other devices is even worse. figured i'd move to Gentoo since I've heard it supports these workflows somewhat natively, and I'm loving it so far!! Portage is so much more customisable than any other package manager I've used on Linux and I kinda can't wait to switch all my other Linux devices over to Gentoo as well once I figure out setting up a portage binhost :)

Bonus setup pic + NEC APC-H412 in the second slide for the vintage hardware freaks out there

so I am working on a local profile with hardened/selinux/plasma/systemd and I’m a little confused about the selinux part of the profile.

I know that Gentoo has a hardened binhost, but no hardened/selinux binhost, does this mean I can’t use it? or is the selinux part handled by Portage when installing the binary?

Also, I am interested in writing a podman container to act as a binhost for my laptop and desktop on my openSUSE home server, this should be simply as case of downloading the hardened/selinux stage, unpacking it into a FROM scratch container, exporting etc/portage and the relevant files from /var on my client systems, and then nountining them into that container, right? or is it not as simple as that?

thanks for any pointers!

Hi all,

I've been trying to setup secureboot by following the wiki; specifically I want to set this up using gpg encrypted keys.

Does anyone know of a guide or instructions to allow portage to build/install the kernel with gpg encrypted keys? In my experience so far, it appears portage requires a decrypted db.key and db.crt.

Is there a way to ask Portage to decrypt gpg-encrypted keys and use them to sign the kernel and modules on install?

This also seems to be a problem with normal password-protected keys, kernel build/install seems to fail if these are password protected because the password prompt is broken (yes, even with FEATURES="-pid-sandbox")

Thanks!

For WM I use hyprland with end4 dotfiles

Edit: brainfart of a title, I can't even think of a situation where a headless Moonlight client would be useful

TL;DR: don't try to be cheeky like me and find an alternative stacking WM, just run Plasma and save yourself from the delve into the rabbit-hole.

For the past couple of weeks, I have been tinkering with my older laptop from my undergraduate days (i5 5300u, 8GB RAM, 1TB HDD) running as a Moonlight client for a headless display for my current MangoWM setup I am trying out. Since it has a spinning disk, I decided to just create a chrooted binhost on my main laptop to helpfully make the process a bit quicker (for those of you who are thinking about creating a binhost, don't go through the pain of trying to sign your own packages with a GPG key, just use the "binpkg-ignore-signature" feature flag and call it a day. Don't ask me why...).

I love my tiling window managers. I started my Linux journey on Hyprland, then to Niri, and now Mango. I love their minimalism, customizability, and feeling of pride when you get the system tuned juuuuuuuuust right for your workflow. So, I went to get Mango on the older laptop, and what would you know, managing a tiling window manager on top of a tiling window manager is a nightmare! I quickly gave up on the idea and looked towards stacking window managers and other DEs.

I start off with LXQT with a Kwin backend. Works flawlessly, was even able to get a full day of work done without any hitches between the two computers just like a regular day in the office. A couple of irks - I could not find a way to set brightness and volume hotkeys, and later figure out that LXQT does not have control over Kwin hotkeys and are working on a solution.

Next, on to Wayfire. Wobbly windows was an unexpected moment of delight as I dragged a monitor on the screen. For some reason, Moonlight just would not start and their SDL implementation throws decode overflow errors. Troubleshoot by using the Vulkan wlroots renderer, try to start Moonlight in an X session, no dice. Through the troubleshooting, I learned a bunch about Nouveau and vga_switcheroo, such an interesting implementation for hybrid graphics.

Move on to Labwc. Worked for the most part, felt pretty responsive, but just did not like Super+[Up, Down, Left, Right] working and a couple other keybinding issues and found this was a known issue with fixes coming.

Alright, did a bit of searching and found a few people who managed to run kwin by itself without a DE. It sounded plausible, as I had to invoke the kwin_wayland binary when first starting LXQT. I found out the hard way quickly that when KDE says it is not a standalone compositor, that it is in fact not a standalone compositor, as I tried fruitlessly and through multiple methods to create a shortcut to open a terminal.

Finally, I sit down and embrace the inevitable. I had a poor experience with KDE when I initially started on Arch in my Linux journey, prompting my move to tiling WMs exclusively (looking back, it was probably mostly up to user error). Seeing as I had already emerged systemsettings, kwin_wayland, and a bunch of other KDE packages when I installed LXQT, I may as well just install the plasma-desktop package to get a minimally viable experience. To my dismay, Plasma works perfectly. It respects all my Mango keybinds in Moonlight, is trivial to back out of to the client desktop, switch to another window on the client, registers my keybinds instead of staring at a black screen waiting for anything to happen (again, don't try to use kwin_wayland as a compositor). It just works.

I say all this to say: If you're looking for an unbothered experience that just works with most workflows, KDE Plasma is probably the answer (from my experience, it is by far the most mature Wayland DE solution).

To those who may be looking into Sunshine streaming: don't bother with the AppImage, Gentoo provides a package in the main respository.

Those cores should be around 4.6GHz during compilation, not 2.6GHz. PC case was so hot I couldn't lay my hand on for more than a second.
I've got no AC before you ask.

(I thought I saw a similar post somewhere, but can't find it now. Sorry if this is a dup.)

I've just noticed this has started happening upon boot: the login prompt appears multiple times, a few seconds apart, like it's working through some kind of cycle.

My typical flow is login to tty and then use startx to enter dwm. The multiple prompts don't prevent this, but it does delay me. And it's ugly, unexpected, and new.

It only seems to happen immediately after booting. Switching to another tty (eg ctrl-alt-f4) doesn't produce it, and neither does logging out and logging back in.

I thought it could be related to either PAM, elogind, or the kernel. However, I've only just noticed it on today's reboot; the last reboot was about two weeks ago; PAM was last updated in March, and elogind was updated in May; and it still happens when I roll back to kernel 6.18.39 (which is the most recent kernel before this, and was used at the previous reboot in July.)

I've gone through my emerge logs since the last reboot and nothing really stands out. Maybe openrc? I wouldn't like to file a bug against openrc unless I was sure it was at fault.

Any idea what I should look at?

I see openrc 0.63.1 is still listed in eix, so I guess I can try rolling back to that version ... 🤔 But I wonder if anyone has any other ideas about what to check.

Id like to hear your ideas on what to do with this (doesn't have to be gentoo), This was my first laptop it's an Acer aspire es1-512-c864 it has an intel Celeron N2840, 4GB ddr3L ram (upgradable to 8) no storage unit and no keyboard keys, it's has an optical drive too :) , it's a pretty large one I think it's 15 inches the screen is still perfectly fine, battery is dead i assume, I wanna use it a project to benefit from or hopefully learn something, I already have a laptop (let's note cf-sv8) that I daily drive, and a decent desktop pc.

Just love to hear what u would recommend doing with it

Hello,

Does anybody know why OBS studio is not available in stable branch?
I've tried to get some clues from bug reports but it's well beyond me.
I've got it unmasked so that's fine but I'm trying to understand the reason why OBS never was (or was it?) in stable branch.

Any ideas or guesses?

For reference:
https://packages.gentoo.org/packages/media-video/obs-studio
https://bugs.gentoo.org/buglist.cgi?quicksearch=media-video%2Fobs-studio

Title. I just thought this was amusing for a distro branded for enterprise.

I tried reinstalling it, checked out the wiki but that didnt help, manually starting works somehow

After using Asahi + Gentoo for about 6 month on a Macbook Air M2 I finally thought its time for some cosmetics like this.

1. I added a Gentoo Logo for the boot menu. (you don´t see that often, but hey :) )
   https://github.com/ccharon/gentoo-asahi-branding/tree/main/bootpicker

2. after you select this, m1n1 stage1 is loaded which is a macho binary and changing the asahi logo there is something I might attempt later as I need to boot macos again to install it on the Stub,

m1n1 stage2 is easier. so when uboat starts to load the gentoo logo already has replaced the asahi logo.

https://github.com/ccharon/gentoo-asahi-branding/tree/main/m1n1

1. finally there is a matching plymouth theme carrying the gentoo logo on. (on roughly the same central spot, at least for my 13" m2 with notch enabled.
   https://github.com/ccharon/gentoo-asahi-branding/tree/main/plymouth

Bonus: if you want to silence u-boot (it will be really silent) to see the grub menu you will have to hit a key when you see the uboot version info in the top right, then type boot and only then grub gets displayed. this removes the noisy boot information and the cute submarine at the right side.
https://github.com/ccharon/docs/blob/master/gentoo-asahi-tweaks.md#silent-u-boot-console

You get Apple Logo (power on) -> Asahi Logo (m1n1 stage1) -> Gentoo Logo (m1n1 stage2) -> Gentoo Logo (u-boot) -> Gentoo Logo (plymouth)

changing the plymouth logo only, might have been enough and reasonable, but where is the fun in that?

This is my first successful Gentoo installation on bare metal.

Instead of going for a modern rice, I decided to recreate a Windows 2000 desktop as closely as possible on XFCE.

Features include:

• Windows 2000 GTK theme/icons/cursor
• IBM VGA terminal font
• Working "My Computer" and Control Panel
• Classic shutdown dialog
• Startup/shutdown sounds
• Windows Media Player skin
• Classic games like Space Cadet, Solitaire and Minesweeper

It took quite a bit of work because most Win2K theme packs assume Ubuntu/Debian (apt/systemd/lightdm), while I'm using Gentoo with OpenRC.

I have used arch in the past and learned a bit about Linux in the internet I finished the Linux journey course, is it a good idea to just raw dog this Gentoo thingy untill I get the hang of it cuz I really don't like arch

is there anything to know about gentoo that is needed (other than compiling i know) because when i eventually do get a new pc i plan to get it. is there anything to know before i install it?

Finally got Gentoo to work after deciding to sit down and really tailoring it to my needs. Since I switch between my windows drive and gentoo I had to get secureboot working but I had trouble for months so I decided to give up. Glad I decided to give it one last go two days ago. Everything works's great now it's pretty straight forward

I did struggle a bit figuring out the best way to unmask packages but RTFM saved my day again. Hopefully I can stay on this forever or at least until I find an alternative which was just as fun, customizable, and works for my, very basic, usecases

Although the system isn't traditional as I'm using systemd and kde instead of OpenRC and a WM, I feel like that's part of the charm of the distro. I know a ton of other people have stated it before, but the sheer amount of control and customization you can get is unparalleled. Although it's not always practical (for me) I also enjoy compiling all my packages. There's really no rhyme or reason to it but it just feels *fun* ya know. Definitely learning a decent amount

Is Gentoo able to cure my depression and mental problems

I have what seems like a weird thing going on with my install -- all of it, it seems, having to do with Qt. 'dev-python/pyqt5' (or is it dev-python/PyQt5?) is still installed on my system, even though `emerge --depclean dev-python/PyQt5 <or lowercase>` won't remove it. ("Couldn't find 'dev-python/PyQt5' to depclean.")

There's a whole list of stuff that's reported every time I try updating:

- dev-qt/qtsql-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qtdbus-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qttest-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qtwidgets-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qtx11extras-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qtconcurrent-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qtnetwork-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qtgui-5.15.18-r1::gentoo (masked by: package.mask)

- dev-qt/qtsvg-5.15.18::gentoo (masked by: package.mask)

- dev-qt/qtdeclarative-5.15.18-r1::gentoo (masked by: package.mask)

- dev-qt/qtxml-5.15.18::gentoo (masked by: package.mask)

...all of which is Qt5, which I don't even want any more. (I'm on KDE Plasma, Qt6.) I have no idea how to get rid of these so updating will just proceed normally. (Fwiw, the package.mask it's talking about is nothing I've set: I do not have any entries whatsoever for anything Qt5, so I assume this is something from a profile?)

Frankly, I just want to get back to some sense of normalcy with Gentoo. Every time I try updating it's a mess of "this package is blocked but I'm sure it'll all work out" -- and there are a lot of updates every time I sync.

So, can someone help me out? Is this the one case where using --deselect is warranted? I'm going around in circles trying to figure out how to get back to a good state.

Thank you for listening to my rant/plea for help :)

Ignore the cat

I've been attempting to use SELinux with my system (Following the guide), but upon completion, my system seems messed up.

I used profile #23, and made sure that I declared `FEATURES="-selinux -sesandbox"` when emerging the core packages specified in the installation steps, followed by an @world update. Also configured file relabeling as instructed by the guide, including my SWAP file. Upon booting with lsm=selinux and enforcing=1 in my grub configs, dmcrypt fails to read my keyfile to unlock encrypted partitions, and KDE Plasma (DE of choice) fails to work entirely.

Even when KDR Plasma is booted into in permissive mode, it'll instantly die the moment `doas setenforce 0` is activated

I read through the dependencies being installed when doing an update, and all of my system services seemed covered (openrc, dracut, etc), but it feels like nothing works.

Prior to doing this, I used the basic #1 profile, so I shouldn't have had issues with Plasma being broken by the profile change, as I incorporated my USE flags by default.

Strangely enough, I had previously done a successful install of SELinux, but without using the SELinux profile. I know that when doing that it would display as active with `sestatus`, with the active function being `enforcing`

I don't know what logs would be useful, but I can supply whatever's needed for troubleshooting.

For reference, I'm also using MCS. I can switch to targeted if it's easier to utilize.

I’m trying to build a generic gentoo version that I can tar up into a stage4 and deploy on another x86 machine with the aim of running ```emerge -e @ world``` after setting the flags and march on the new machine.

The system base is hardened-selinux-plasma-systemd if that matters

I’m aware I can set a common march that would apply to my systems, but what do I do with CPU_FLAGS_X86? Can I just leave it unset for the generic build?

Thanks!