3 ms·

what does that link show exactly

by Hello71 10y ago

contingencies 10y ago
It shows that Gentoo provides an easy-install method (emerge =sys-kernel/hardened-sources-VERSION) for pre-PaX-patched kernel sources up to version 4.7.6. This was done 4 days ago. That version of the kernel apparently only came out 5 days ago. That's a 24 hour latency on a release: pretty current in my view. It's not marked 'stable' on any platform (that's what the green squares mean), but that just means it has had limited testing and in Gentoo is not a weird thing at all.
- Hello71 10y ago
  how does that support the point made? (it doesn't help that I don't actually understand the point made)
  - grubles 10y ago
    "Beware though; using the testing branch might incur stability issues, imperfect package handling (for instance wrong/missing dependencies), too frequent updates (resulting in lots of building) or broken packages. Users that do not know how Gentoo works and how to solve problems, we recommend to stick with the stable and tested branch." https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#Testing https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#T... The most recent stable hardened-sources is 4.4.8-r1 which is ~6 months old.
    - Hello71 10y ago
      vanilla-sources isn't stabled at all. what's your point?
      - grubles 10y ago
        vanilla-sources is not supported by the Gentoo kernel team, so I would expect it to not be. hardened-sources, however, is supported. https://wiki.gentoo.org/wiki/Kernel/Overview#vanilla-sources https://wiki.gentoo.org/wiki/Kernel/Overview#vanilla-sources
- nullc 10y ago
  > That's a 24 hour latency on a release The last unmasked release is 4.4.8-r1 which is six months behind.
  - contingencies 10y ago
    Masking in Gentoo is a way to say "we don't know for sure it's stable" not "don't use it". You are misinterpreting and the supposed evidence for your point is invalid. (Edit in reply to below: That basically just means 'we dont want to babysit people can't compile a kernel or recover an unbootable machine'. It has nothing to do with the currency or utility of PaX or Gentoo. You obviously do not have experience in this area.)
    - grubles 10y ago
      The Gentoo wiki basically says to stay away from testing if you don't know what you're doing: "Users that do not know how Gentoo works and how to solve problems, we recommend to stick with the stable and tested branch." https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#Testing https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#T...
    - grubles 10y ago
      What's the phrase? "If you assume, you make an ass out of you and me"? In reply (because of reply functionality, instead of stealthy edits), you should know I run an unmasked ck-sources kernel because rice (and BFS/BFQ). If you really want an unstable Gentoo install, go with the x32 profile.

what does that link show exactly

by Hello71 10y ago

what does that link show exactly

It shows that Gentoo provides an easy-install method (emerge =sys-kernel/hardened-sources-VERSION) for pre-PaX-patched kernel sources up to version 4.7.6. This was done 4 days ago. That version of the kernel apparently only came out 5 days ago. That's a 24 hour latency on a release: pretty current in my view. It's not marked 'stable' on any platform (that's what the green squares mean), but that just means it has had limited testing and in Gentoo is not a weird thing at all.

Hello71 10y ago
how does that support the point made? (it doesn't help that I don't actually understand the point made)
- grubles 10y ago
  "Beware though; using the testing branch might incur stability issues, imperfect package handling (for instance wrong/missing dependencies), too frequent updates (resulting in lots of building) or broken packages. Users that do not know how Gentoo works and how to solve problems, we recommend to stick with the stable and tested branch." https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#Testing https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#T... The most recent stable hardened-sources is 4.4.8-r1 which is ~6 months old.
  - Hello71 10y ago
    vanilla-sources isn't stabled at all. what's your point?
    - grubles 10y ago
      vanilla-sources is not supported by the Gentoo kernel team, so I would expect it to not be. hardened-sources, however, is supported. https://wiki.gentoo.org/wiki/Kernel/Overview#vanilla-sources https://wiki.gentoo.org/wiki/Kernel/Overview#vanilla-sources
nullc 10y ago
> That's a 24 hour latency on a release The last unmasked release is 4.4.8-r1 which is six months behind.
- contingencies 10y ago
  Masking in Gentoo is a way to say "we don't know for sure it's stable" not "don't use it". You are misinterpreting and the supposed evidence for your point is invalid. (Edit in reply to below: That basically just means 'we dont want to babysit people can't compile a kernel or recover an unbootable machine'. It has nothing to do with the currency or utility of PaX or Gentoo. You obviously do not have experience in this area.)
  - grubles 10y ago
    The Gentoo wiki basically says to stay away from testing if you don't know what you're doing: "Users that do not know how Gentoo works and how to solve problems, we recommend to stick with the stable and tested branch." https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#Testing https://wiki.gentoo.org/wiki/Handbook:X86/Portage/Branches#T...
  - grubles 10y ago
    What's the phrase? "If you assume, you make an ass out of you and me"? In reply (because of reply functionality, instead of stealthy edits), you should know I run an unmasked ck-sources kernel because rice (and BFS/BFQ). If you really want an unstable Gentoo install, go with the x32 profile.