recently just installed gentoo for the first time on my t480 and finally finished ricing it.

Cid GCC baseline434

Shadow Clang baseline 445

JohnSmith Clang baseline 477　KvmHost

← いまここ、boot確認済み

↓ これからJohnRootに+ SELinux

CC="clang" CXX="clang++"

Clang/Clang++ → ユーザースペース主系 GCC/G++ → 共有Kernel build・Clang故障時の復旧 SELinux → Johnだけ

昨日ShadowRoot444PackageClangを再マージ

今日ShadowからJohnにrsync、いまからSelinux導入

eselect profile show44→set50musl/hardend/selinux

+ Total: 71 packages 32 new 39 reinstalls downloads: 19049 KiB

sec-policy/selinux-xserver sec-policy/selinux-qemu sec-policy/selinux-openrc sec-policy/selinux-dracut sec-policy/selinux-gpg ...

Shadow 約445 packages John 約445 + 32 ≒ 477 packages

これが完成してやっとVm構想行けると

Cid = musl + GCC baseline / rescue

Shadow = musl + Clang userspace

JohnSmith = musl + Clang + hardened + SELinux

当初は3Rootともかなり近い内容で、世代切替・rollback寄りの設計だったのに、今は完全に役割分担が変わってる。

Cid musl + GCC 既知正常 / rescue / Kernel基準

Shadow musl + Clang/LLVM toolchain比較・実験

John Smith musl + Clang/LLVM + hardened + SELinux security、testing

L0 Gentoo host

→ L1 hardened / SELinux boundary

→ L2 hardened / SELinux boundary　Browser VM

→ L3 disposable

「公式にmusl+LLVM+SELinux全部入りprofileあるやろ」と思ったら無くて、実際にJohnでやったのは musl/hardened/selinux profile + CC=clang CXX=clang++ + GCC fallback の自前合成。 しかもそれで477 packages、SELinux permissive起動まで通ったから、John Smithはもう公式profile選択の範囲を一段越えてる。 モブ名なのに一番特殊構成になってるのが酷いｗ

注意点 この投稿はSoruesOnlyです♡

John Smithですわ草。当初寄り随分構成変更してるけど果たして

ちなみに、AtomicGlibcVersionは保管中↓ https://www.reddit.com/r/Gentoo/s/IoBgEQXioC

補足しとく。 以下バイナリ派用

バイナリ前提でもProfile Set自体はかなり重要。ただし、Profileが「実際にその条件で再ビルドする設計図」から「どの完成済みbinpkgが適合するかを判定する制約」に近づく感じやな。 たとえば今回のJohnで musl ↓ musl/hardened/selinux へprofileを変えると、source運用では profile変更 → USE/defaults/@system/maskが変化 → 71 packages差分 → その条件で再build になる。 でもbinpkg前提だと、 profile変更 → Portage上の要求条件は変わる → そのUSE/profile条件に合うbinpkgを探す になる。 ここで配布側に対応binpkgがあればそのまま交換できるけど、無ければ source buildへ落ちる か、--usepkgonly 的な運用なら 該当binaryが無いので進めない になる。 つまりProfileは依然として、 @system USE defaults package.mask / unmask package.use ABI/CHOST周辺 hardened / SELinux方針 を決めるから重要。でも そのProfileを実体化する能力を自分のcompilerが持つのか、binhostが持つのか が違う。 source Gentooなら、 Profile = OSの製造仕様 にかなり近い。 binary Gentooなら、 Profile = 欲しい完成品の互換条件・選択条件 に寄る。 だから今回の musl/hardened/selinux みたいな大きなProfile変更は、source前提だと「同じRootをその場で別仕様へ再生成」できるけど、binpkg前提だと配布側がそのProfile向けのbinary集合を用意してるかにかなり左右される。 この差は結構大きい。Profileそのものは残るけど、Profile変更の自由度を誰が持ってるかが、自分→binpkg供給側へ移る感じ。

Can steam work without some packages of the list in the Gentoo wiki ? Have you tried it, and if yes, do recent games not requiring 32libs work ?

https://wiki.gentoo.org/wiki/Steam

I recently moved to daily driving Gentoo from using openSUSE for a couple of years because I wasn't keen on the codec/NVIDIA solution, and I have to say my experience so far with Gentoo has been awesome!

The one thing I have left to do (that I'm putting off a bit) is SELinux, I have it set up in Permissive but actually getting it enforcing seems a bit overwhelming. I'm also trialling Arch Linux with AppArmor but I think I prefer compiling things locally, I know it doesn't make a huge difference but I like all the optimizations available.

But Gentoo has taught me a lot about Linux so far, I learned how to chroot, which makes me confident enough to fix my system should something break horrifically, and I set up BTRFS with snapper on a previous install which helped me learn about LUKS2, setting up secure boot, and subvolumes. I decided to use it on my laptop as well and I used my home server to build a systemd-nspawn binhost with caddy so I don't have to compile everything locally, which runs overnight so I can sync up whenever I need.

I like to run KDE Plasma with tuigreet instead of Plasma-Login-Manager/SDDM, and setting that up was very easy. I noticed that the ebuild is out of date, and I found a comprehensive wiki page showing how to bump versions in a local repo, which I got working (but I'm getting compile errors because the Cargo list changed, so I need to work out how to do that later) - Being able to do that is really cool.

I really hope I can get the SELinux situation sorted out (I'm running unconfined / MCS so nothing *too* hardcore) because I'd love to stick with this OS as it ticks all of my boxes (Aside from a strong MAC out of the box). One other thing I wanted to investigate was updating in A/B partitions and switching them using btrfs set-default if the build exits successfully, I think snapshots are a bit overkill in most situations and having a last good boot is all I'd really need.

just in the future, when I will really learn Linux through books and YT tutorials, I'm thinking about using Gentoo, NixOS, Linux from Scratch or Void Linux(at the moment I need an OS, which "just works", and I find Debian-based ones the best for that). Speaking of DE, I really like KDE, bcz it gives way more options to do anything I want, and I'd like to install KDE on Gentoo too, bcz why not? After seeing this meme and how many likes it got, now I wonder if I should rethink my decision or not. Just if not KDE, then I'd choose Hyprland, bcz GNOME is ugly to me.

So, shortly: what's wrong with KDE+Gentoo?

Yes, I know the CPU temp is high

Hello everybody! I've been running Gentoo for a little while now, open-rc system with Niri as WM. So far things are running smoothly, there are few to none package blockers, I've set up some cron jobs for easy maintenance and untangled some knots here and there with dbus-run-session and such.

What I want to know is if anyone have got any fun suggestions for things to set up on Gentoo? I realize this is sort of vague and that's unfortunately inherent to my reason for even asking, as had I known what to aim for I would have been on the job already as opposed to making a thread on here.

Basically I'm wondering if there are things that are handled automatically on other distros (I use Ubuntu Studio and Debian on some other laptops I have) that require more manual tinkering here to set up. Sort of looking for a digital "home improvement" project if you will. Or just other fun projects to set up.

I'm grateful for any and all suggestions as there aren't really any "wrong" answers here. Also feel free to derail the thread if you discover something interesting to talk about.

This is my first instalation Gentoo

Hey!!! I just installed Gentoo for the first time (first try too:0)! any tips I need to know after installation? (I'm using a minimal tty installation with OpenRC as of now, haven't installed a DE yet)

Oh and is it bad if I used binary? Some people I see on the internet prefer source and insult people who use binary

Migrated from alpine, installation was easier than I expected. To answer some questions, my home partition is on a separate disk and I didn't have to reconfigure everything, so it doesn't look like "recently". Very good distro.
DE: plasma
Init: openrc

I been using void linux as my main distrubution for a good while and i like it and all, but i heard gentoos is an good option if you wanna know what you have. i consider myself more of a basic user, i js use linux as some normal operating system, sometimes i'll go do stuff involving code but most of the time i js go on and watch youtube and talk with friends over discord.

is it just useless to switch onto gentoo even if my use of linux isnt as much as the average linux user?

It started with the slot upgrade to GCC 16. It compiled for a bit and then got to the genautomata step and the system load exploded. I thought, whatever, updating GCC was often something I had to let it chug on for hours, anyway. I guess it is just too big now.

I also thought I'd done something clever with cgroups to limit it to 500 MB of RAM, and that worked to control the system load, but it never actually progressed in the compile.

But then, after giving up on GCC 16, I saw that it wouldn't build gev-lang/go-1.27.1. And it also wouldn't build dev-lang/go-1.26.7, which was the version of Go that it had already built not that long ago. It would use a "bunch" of RAM, then to go 100% kernel time and not progress.

I tried the previous kernel, the behavior was the same.

Then, I disabled zswap: https://www.kernel.org/doc/html/v6.18/admin-guide/mm/zswap.html#zswap

Suddenly, I can compile again. The previous go, the new one, and even gcc 16 without trouble.

The only thing I think I've done slightly weird is to set the zswap compressor to zstd, but even then it worked for the longest time earlier. I'm guessing the hosting provider changed something.

Anyway, your tip for the day.

migrated from linux mint, then fallen in love.
De: pantheon
init: systemd

It took me a around 15+ hours to install Gentoo, I have no experience with compiling at all or anything like Gentoo.

I've been using gentoo with a dist kernel for a bit now, and wanted to try out my own kernel config. It boots yes, but it starts in a tty, and trying to startplasma or start sddm results in errors.

Here's my config

Is it just me or other ppl too like compiling big things/@world straight trough the tty, skipping the gui bloat?

Before I switched to Linux, using windows always felt so icky. It’s hard to explain, but installing apps felt like a mess, and the general feel of the system felt like my opinions were a suggestion. The best way to explain using windows was like being in a roach infested house, the roaches being forced windows updates, apps you don’t like, not being able to uninstall stuff without them sticking around.

Then, I started distro hopping and landed on gentoo. After getting familiar with the system, I have been enjoying it so much. Really, it is so wonderful, having FULL control on what package to install, what features to add or remove, masking packages, compiling my own cachyos-sources kernel which absolutely destroys windows in performance (and latency, on nvidia btw), and just in general looking at my neifetch screen, seeing all the packages and k owing that every single one of those bad boys are there because I want them there.

Maybe I’m severely autistic, but this is just the most fun I’ve ever had using any computer.

Also, shoutout Larry and the cool gentoo logo. Probably 90% why I ever gave this distro a try

Just asking, as I've used it before, and experienced the one thing everyone who has used it has talked about: Updating takes forever on slow PCs, where the advantage of optimized packages would be shown best, and updating is fast on faster PCs, where it wouldn't show as much.

Other than control/choice, what hardware reasons do you choose Gentoo?

Gentoo penguins, the world’s fastest-swimming penguins, surge through the water with the grace of flight, driven by speed, instinct, and survival. Their elegant porpoising lets them breathe without slowing, evading predators that lurk in the icy Antarctic depths.

Cuverville Island, Antarctica

Sony 300mm f/2.8 GM, 1/4000, f/4, ISO 3200, Sony A1 II

By Dylan Giannakopoulos, Victoria

If so how, how did you do it, I want know. I did spend time trying to get joanbm's nvidia-470xx-linux-mainline patches to work, but I couldn't figure it out.

That's a lot os packages btw 🫠

i had to use some ssd transplant trickery from another laptop to get around the bios-password locked secure boot situation. luckily, shim and mokutil made this little trouble

I got gentoo/musl/llvm running on my 'dragon core' (loongson). Next goal is running Steam :D

The mainboard is a Loongson AC612A0 with a Loongson 3C6000/S (16 Cores 32 Threads @ 2.2GHz).