[gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[Alon Bar-Lev]

[-- Attachment #1: Type: text/plain, Size: 180 bytes --]

Hi,
Any reason we do not publish hardened/no-multilib?
I see we have[1] in place and is working if explicitly added.
Thanks,
Alon

[1] profiles/features/hardened/amd64/no-multilib

[-- Attachment #2: Type: text/html, Size: 301 bytes --]

Re: [gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[Nils Freydank]

[-- Attachment #1: Type: text/plain, Size: 602 bytes --]

Am Samstag, 2. Dezember 2017, 21:43:53 CET schrieb Alon Bar-Lev:
> Hi,
> Any reason we do not publish hardened/no-multilib?
> I see we have[1] in place and is working if explicitly added.
> Thanks,
> Alon
> 
> [1] profiles/features/hardened/amd64/no-multilib

Hi,

one of the devs said in #gentoo-hardend (IRC, Freenode) a day ago
it’s just not added yet and we should stay on the old one so long.

I personally guess there’s just too much other stuff in was pushed
deeper down on the todo lists.
-- 
GPG fingerprint: '766B 8122 1342 6912 3401 492A 8B54 D7A3 FF3C DB17'
Holgersson

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[Michał Górny]

W dniu sob, 02.12.2017 o godzinie 22∶43 +0200, użytkownik Alon Bar-Lev
napisał:
> Hi,
> Any reason we do not publish hardened/no-multilib?
> I see we have[1] in place and is working if explicitly added.
> 

One reason might be that:

1) there's barely any use for it,

2) we have too many profiles, and

3) every added profile slows down repoman & pkgcheck seriously.

> [1] profiles/features/hardened/amd64/no-multilib

-- 
Best regards,
Michał Górny

Re: [gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[Michael Orlitzky]

On 12/02/2017 03:43 PM, Alon Bar-Lev wrote:
> Hi,
> Any reason we do not publish hardened/no-multilib?
> I see we have[1] in place and is working if explicitly added.
> Thanks,
> Alon
> 
> [1] profiles/features/hardened/amd64/no-multilib
> 

I'm not sure if anything is using that particular profile. I tried to
create a new subprofile myself,

https://archives.gentoo.org/gentoo-hardened/message/ab7ef753aa88f21c8a05d667cf511a24

and wound up (indirectly) using arch/amd64/no-multilib as the parent
instead of your [1]. I think USE="pic" by default is the only difference.

In any case, until it becomes official, I'm probably just going to fake
the profile with a symlink to the no-multilib profile's use.mask. That
at least prevents me from building a multilib gcc, glibc, and sandbox.

Re: [gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[Alon Bar-Lev]

On 2 December 2017 at 23:08, Michał Górny <mgorny@gentoo.org> wrote:
>
> W dniu sob, 02.12.2017 o godzinie 22∶43 +0200, użytkownik Alon Bar-Lev
> napisał:
> > Hi,
> > Any reason we do not publish hardened/no-multilib?
> > I see we have[1] in place and is working if explicitly added.
> >
>
> One reason might be that:

Thanks.

>
> 1) there's barely any use for it,

Well, I think that whoever use hardened barely use multilib.

> 2) we have too many profiles, and

This has not stopped us so far.

> 3) every added profile slows down repoman & pkgcheck seriously.

Only when using '-d', no?
Anyway, probably the default of hardened should be multilib so we end
up with the same number.

> > [1] profiles/features/hardened/amd64/no-multilib

Regards,
Alon

Re: [gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[William L. Thomson Jr.]

[-- Attachment #1: Type: text/plain, Size: 1216 bytes --]

On Sat, 2 Dec 2017 16:13:47 -0500
Michael Orlitzky <mjo@gentoo.org> wrote:
> 
> I'm not sure if anything is using that particular profile. I tried to
> create a new subprofile myself,
> 
> https://archives.gentoo.org/gentoo-hardened/message/ab7ef753aa88f21c8a05d667cf511a24
> 
> and wound up (indirectly) using arch/amd64/no-multilib as the parent
> instead of your [1]. I think USE="pic" by default is the only
> difference.
> 
> In any case, until it becomes official, I'm probably just going to
> fake the profile with a symlink to the no-multilib profile's
> use.mask. That at least prevents me from building a multilib gcc,
> glibc, and sandbox.

Having created some profiles myself for my own purposes. Seems Gentoo
could really use and benefit from Funtoo's Flavors and Mix-ins. Seems
a much better approach than the current profiles situation in Gentoo.
https://www.funtoo.org/Funtoo_Profiles


"This new system is really a completion of the original cascading
profile design that was co-designed by Daniel Robbins and Seemant
Kulleen and implemented by Seemant Kulleen as part of Portage."
https://www.funtoo.org/Funtoo_Profiles#History_and_Origins

-- 
William L. Thomson Jr.

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

Re: [gentoo-dev] profiles 17.0 hardened/no-multilib missing?

[RB]

On Sat, Dec 2, 2017 at 2:14 PM, Alon Bar-Lev <alonbl@gentoo.org> wrote:
>> 1) there's barely any use for it,
>
> Well, I think that whoever use hardened barely use multilib.

For the value of one anecdote, I'm a long-time hardened user and all
of my hardened systems are no-multilib.