[gentoo-hardened] musl profile

[gentoo-hardened] musl profile

[James Cloos]

I'm testing the hardened/musl profile.

The initial emerge world wants to downgrade some (but not all) of the
packages which have replacements in hardened-dev.  They include:

 sys-apps/tcp-wrappers-7.6.22-r1::gentoo [7.6.22-r99::hardened-dev]
 sys-apps/net-tools-1.60_p20130513023548-r1::gentoo [1.60_p20130513023548-r99::hardened-dev]
 sys-apps/sysvinit-2.88-r7::gentoo [2.88-r999::hardened-dev]
 sys-apps/sandbox-2.6-r1::gentoo [2.6-r999::hardened-dev]
 sys-apps/attr-2.4.47-r1::gentoo [2.4.47-r99::hardened-dev]
 net-misc/iputils-20121221-r1::gentoo [20121221-r99::hardened-dev]
 dev-libs/libxml2-2.9.1-r5:2::gentoo [2.9.1-r99:2::hardened-dev]

I do not see any reason why it doesn't like the hardened-dev versions.

Trying, eg, emerge -v =sys-apps/sysvinit-2.88-r999 (with or w/o
the ::hardened-dev suffix) gives:

 emerge: there are no ebuilds to satisfy "=sys-apps/sysvinit-2.88-r999".

The ::gentoo version fail to merge.

Any thoughts on why portage refuses the overlay versions?

-JimC
-- 
James Cloos <cloos@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6

Re: [gentoo-hardened] musl profile

[Hinnerk van Bruinehsen]

[-- Attachment #1: Type: text/plain, Size: 1885 bytes --]

On Thu, Oct 16, 2014 at 08:02:21PM -0400, James Cloos wrote:
> I'm testing the hardened/musl profile.
> 
> The initial emerge world wants to downgrade some (but not all) of the
> packages which have replacements in hardened-dev.  They include:
> 
>  sys-apps/tcp-wrappers-7.6.22-r1::gentoo [7.6.22-r99::hardened-dev]
>  sys-apps/net-tools-1.60_p20130513023548-r1::gentoo [1.60_p20130513023548-r99::hardened-dev]
>  sys-apps/sysvinit-2.88-r7::gentoo [2.88-r999::hardened-dev]
>  sys-apps/sandbox-2.6-r1::gentoo [2.6-r999::hardened-dev]
>  sys-apps/attr-2.4.47-r1::gentoo [2.4.47-r99::hardened-dev]
>  net-misc/iputils-20121221-r1::gentoo [20121221-r99::hardened-dev]
>  dev-libs/libxml2-2.9.1-r5:2::gentoo [2.9.1-r99:2::hardened-dev]
> 
> I do not see any reason why it doesn't like the hardened-dev versions.
> 
> Trying, eg, emerge -v =sys-apps/sysvinit-2.88-r999 (with or w/o
> the ::hardened-dev suffix) gives:
> 
>  emerge: there are no ebuilds to satisfy "=sys-apps/sysvinit-2.88-r999".
> 
> The ::gentoo version fail to merge.
> 
> Any thoughts on why portage refuses the overlay versions?


Hi Jim,

are you sure that you switched the branch of the overlay to the musl one?
Go to /var/lib/layman/hardened-development (or where ever else you keep your
overlays) and run git branch. It should say that you're on the musl branch. If
it doesn't run git checkout musl and re-check with git branch afterwards.
If you actually are on the musl branch, try to force one of the -r99 versions
from the overlay (and see if/why portage fails to do so), by running e.g.
emerge =net-misc/attr-2.4.47-r99 -v1
If portage can't find the package check if you source the make.conf from layman
in your normal make.conf or if you have set the PORTDIR_OVERLAY correctly.

If nothing of this helps, post the error here and we'll see how to go on.

WKR
Hinnerk

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [gentoo-hardened] musl profile

[James Cloos]

I must have misread the --ask output.  I was sure that I saw some
::hardened-dev entries in the to-be-merged data, not only in the
currently-instaled data.

But I found a typo, which I was not able to see yesterday, in make.conf
which prevented portage from seeing the overlay.

Aging eyes suck.

Thanks,

-JimC
-- 
James Cloos <cloos@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6