Gentoo Linux

cross-posted from: https://lemmy.bestiver.se/post/1274886

Comments

The Linux kernel has recently been facing a series of discovered privilege escalation vulnerabilities, starting with the Copy Fail vulnerability and followed by subsequent vulnerabilities in the same spirit (Dirty Frag, Fragnesia). This development is part of a general trend where vulnerabilities are being found - and disclosed - faster than before. We expect it to continue, at least for the short-term.

The Gentoo Linux Kernel and Distribution Kernel teams are doing their best to keep Gentoo kernels secure. This includes both packaging the latest upstream releases as soon as possible, and backporting additional vulnerability fixes or mitigations whenever they become available. As example, while upstream kernel releases are still vulnerable to Fragnesia, the respective Gentoo kernels feature fixes from day one. At the time of writing, all supported Gentoo kernels feature the latest Fragnesia v5 patch. Please expect more updates. We recommend exploring ways to automate upgrading your kernel.

Please note that only sys-kernel/gentoo-kernel, sys-kernel/gentoo-kernel-bin and sys-kernel/gentoo-sources packages are security-supported. The vanilla kernel packages are vulnerable at the moment. Other kernel packages may carry fixes, but they usually are slower to be updated. Additionally, we recommend running the latest kernel version (~arch or latest stable LTS), as upstream does not reliably backport security fixes to older versions.

I am reinstalling gentoo for the 4th time now and I am planning to bedrock it, going through the manual gentoo install can get really tedious at times, so I want to use this GUI script based on arch, what do you think???

I used to use the gitlab mirror to browse the ebuilds; I prefer the gitlab UX to the github UX. But, for some reason, it stopped getting updates several months ago. Anyone know what happened?

I want to get more points in speedometer 3 using firefox. I've seen results above 20-24, but I can't get more than 12 because js takes a long time to process. What to do? Rebuild firefox with the -0fast flag?? Or do something with config. I use some fixes in it which just extend limits for everything (almost)

Any suggestions are welcome

Permanently Deleted

It took about 23 hours to get it booted under its own power using a binary kernel. And on the 4th day (today) I've managed to get a custom kernel working. Gentoo has been very fun to use and to customize, and it's very fast and responsive, even on my old hardware and with a hard disk, browsing heavy webpages with Librewolf is no problem at all. I've been sleeping on Gentoo for WAY to long.

stolen from https://lea.pet/notes/9s3y5dpdo6

Hello :)

I just finished my first arch install I wanted to set my sights on something more challenging. So, I booted a live image with QEMU Virtmanager to try out gentoo, and after reading the wiki I thought to myself “man i should have started with gentoo”

The arch wiki is good in its own right, but as a beginner i felt really confused and overwhelmed. I felt like I had to google terms just to catch up. The gentoo wiki, however, is really good at explaining concepts and the overview of the technology. When the Arch wiki just says “use mkfs.ext4 /dev/sda2” or something the gentoo wiki actually explains what sda, sdb, etc and ext4 means. I sort of learned it the hard way with arch, but i learn and understand lot more from the gentoo wiki. I love that it explains partition tables, filesystems, heck it even explains what is an IP in the networking section. Making a gentoo system and reading the wiki is basically an interactive computer science course lmao

So, thank you gentoo wiki :)

--autounmask tells emerge to show you what you should add to your package.accept_keywords in order to unmask masked packages.

--autounmask-write tells emerge to automatically modify package.accept_keywords and package.use. You still need to apply the changes using dispatch-conf, since Portage's config files are protected by CONFIG_PROTECT.

{,-write} tells bash to duplicate the argument, adding to the first argument and -write to the second.

HDMI is butthurt over AMD trying to do the right thing