Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
What do you use Gentoo for?
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2  
Reply to topic    Gentoo Forums Forum Index Gentoo Chat
View previous topic :: View next topic  
Author Message
nokilli
Apprentice
Apprentice


Joined: 25 Feb 2004
Posts: 185

PostPosted: Sun Oct 15, 2017 2:35 am    Post subject: Reply with quote

Tom_ wrote:
@nokilli, could you tell us more about your lvm / disk setup ? How do you use isolate your data? I'm curious... :)


A 1TB 3.5 HD as backing device with a 128GB SSD that's 32GB swap and the rest as a caching device for bcache. lvm on top of that, and then each lv gets its own dm-crypt layer.

My lvs looks something like this (edited for clarity):

Code:

  LV           VG   Attr       LSize  Pool Origin Data%  Meta%  Move Log Cpy%Sync Convert
  hodl.home    vg   -wi-a-----  8.00g
  hodl.root.1  vg   -wi-a-----  8.00g
  hodl.root.2  vg   -wi-a-----  8.00g
  hodl.root.3  vg   -wi-a-----  8.00g
  hodl.root.4  vg   -wi-a-----  8.00g
  meta.home    vg   -wi-a-----  8.00g
  meta.portage vg   -wi-a-----  4.00g
  meta.root.1  vg   -wi-a-----  8.00g
  meta.root.2  vg   -wi-a-----  8.00g
  meta.root.3  vg   -wi-a-----  8.00g
  meta.root.4  vg   -wi-a-----  8.00g
  meta.src     vg   -wi-a-----  8.00g
  play.home    vg   -wi-ao----  8.00g
  play.portage vg   -wi-a-----  4.00g
  play.root.2  vg   -wi-a-----  8.00g
  play.root.3  vg   -wi-a-----  8.00g
  play.root.4  vg   -wi-a-----  8.00g
  play.root.5  vg   -wi-ao----  8.00g
  work.home    vg   -wi-a-----  8.00g
  work.root.1  vg   -wi-a-----  8.00g
  work.root.2  vg   -wi-a-----  8.00g
  work.root.3  vg   -wi-a-----  8.00g
  work.root.4  vg   -wi-a-----  8.00g


I basically create four systems; meta, hodl, work and play (hodl is a crypto-currency term, it just means "hold" but is used here just as a name). Each system has its own key and has at least a root and a home volume. meta and hodl are fully airgapped, work is on the net but for work only, and then play which is on the net and where I goof around. All logical volumes within a system share the same key, so for instance my meta key opens meta.portage, meta.src, meta.home and all of the meta.roots. I boot from USB stick and so from the grub menu get to pick which system to boot into by specifying a combination of the logical volume to use as root and the initramfs to be used, which may either contain the key for that system or an executable which can be run to let me enter a passphrase that is used to create the key (or both, in which case the passphrase decrypts the key in the initramfs and that is used). In any case the USB stick gets yanked as soon as the initramfs has loaded, and I maintain custody of the USB stick at all times.

So I run portage on meta and then use lvm snapshots and rsync to copy meta.root over to hodl.root and work.root. This is to minimize leakage; the only thing that leaks from meta is Gentoo Linux stuff. That's important because I have to bring in distfiles using an external USB drive which would otherwise provide a means for data to leak out. hodl is just where I keep wallets and private keys for crypto-currencies. It needs to be a running system because different clients need to be run to do offline signing of transactions. It needs to be airgapped because of course I want to protect those keys. I never ever mount any other storage device while I'm booted into hodl. There should be no way of data leaking out of here and I only boot into it when I need to do crypto stuff, which pretty much means, rarely.

There is of course the BIOS vulnerability but here obfuscation can be quite effective. My home partition for hodl is 8GB. I have many wallets. Only a few actually contain anything useful and there are no atimes, so enjoy! And then of course, there is another layer of encryption here as well and I've gotten good at memorizing long passphrases. :)

I plan to soon create a peer to hodl so that I can securely administer the USB stick. Right now I do it via meta, but that means there's a chance that keys can leak out of the stick and then get copied when I populate work.root. I have a lot of stuff sitting there that's used to create initramfs's and that'll go there too. I hope to have it so that one day I can have something like a ubuntu.root or a fedora.root or *cough* openbsd.root(?) that can co-exist with my Gentoo stuff in this vg and it's possible but it's a fair bit of work cause you got to get into their initramfs, see what modules they put there, get their kernel config, etc.

work and play are where I spend my time. I try to be disciplined with my browsing habits on work (no porn or mainstream news media sites), whitelisted javascript only, no binary-only executables (except icedtea-bin! grrr) and certainly no torrents or any kind of p2p. And on play of course I just do whatever. play isn't even based on meta it's multilib and the most I have to risk here is somebody maybe getting my browsing history or knowing what games I play, shows I watch, music I listen to. If somebody gets into my system it'll almost certainly be through play, but since all of the other systems use different keys they should be safe.

Oh and I do share an external USB drive that holds media between work and play, which is a potential leak. Mounting it read-only from work helps, but still I gotta figure out something better. It used to be hard drives had jumper switches that let you lock the sucker into read-only mode... what happened to that? Or a really big DVD-R would be work too. But lately I've discovered my A/V Receiver has a USB port and I can play music through that while on work, albeit it's a little clunky... when there's low-hanging fruit, take it!
_________________
Today is the first day of the rest of your Gentoo installation.
Back to top
View user's profile Send private message
devilheart
l33t
l33t


Joined: 17 Mar 2005
Posts: 832
Location: Villach, Austria

PostPosted: Fri Oct 20, 2017 12:28 pm    Post subject: Reply with quote

Now I feel like an evangelizer. March 2016 I was the first with a gentoo box in my office. This May, I converted another user. Now, I convinced our IT to migrate everything from ubuntu to gentoo
Back to top
View user's profile Send private message
ChalkboardHero
n00b
n00b


Joined: 11 Nov 2017
Posts: 5
Location: Tennessee

PostPosted: Sat Nov 11, 2017 6:17 pm    Post subject: Reply with quote

I use my gentoo box for non .NET development (NodeJS, Clojure). The only thing is, I do .NET development for my work (bleh).

I'm considering converting my Windows server over to Gentoo and then VM'ing windows for my BlueIris cameras. The other 8-10 things I run are running in a RancherOS VM, so I could port that easily.
Back to top
View user's profile Send private message
JackHunt
n00b
n00b


Joined: 21 Aug 2016
Posts: 46
Location: Oxfordshire, England

PostPosted: Mon Nov 13, 2017 11:02 am    Post subject: Reply with quote

Pretty much anything and everything. My main box at home is on Gentoo as is my Workstation in the lab. My old ThinkPad however is Debian. The thing overheats so badly when compiling for hours.

Most of my work is C++ and CUDA development. Hobbyist stuff I use the AVR toolchain and a little Haskell here and there. Oh, and Python3 for prototyping(I hate MATLAB).

Obviously the general PC use also; email, web browsing, chat etc.

Dual boot Windows 10 for games.
Back to top
View user's profile Send private message
cyrius
n00b
n00b


Joined: 27 Jan 2007
Posts: 64
Location: France

PostPosted: Sun Jul 08, 2018 9:51 pm    Post subject: Reply with quote

Hi all,

I'm using it since 2003 to do quietly everything.
When windows is needed for professional stuff, i use VirtualBox....on gentoo :wink:
Back to top
View user's profile Send private message
Marcih
Tux's lil' helper
Tux's lil' helper


Joined: 19 Feb 2018
Posts: 84

PostPosted: Mon Jul 09, 2018 7:28 pm    Post subject: Reply with quote

I use Gentoo to browse Gentoo Forums. ;)
_________________
Bones McCracker wrote:
It wouldn't be so bad, if it didn't suck.
Back to top
View user's profile Send private message
pun_guin
Apprentice
Apprentice


Joined: 06 Feb 2018
Posts: 166

PostPosted: Mon Jul 09, 2018 7:50 pm    Post subject: Reply with quote

I use Gentoo to fulfill my will to have something to break and fix. My other systems are predictable.
_________________
I already use the new Genthree.
Back to top
View user's profile Send private message
saturnalia0
Tux's lil' helper
Tux's lil' helper


Joined: 13 Oct 2016
Posts: 93

PostPosted: Mon Jul 09, 2018 10:01 pm    Post subject: Reply with quote

It was my primary operating system at home for a few years, used it both for entertainment and work.

Last year I got a new job in which we only use Windows, and also a PC for gaming, so I'm using Windows as my main operating system now.

But... I still have Gentoo on my laptop, which I use to watch movies in bed, and when I travel, such as now.

I have a Debian VPS which I'm thinking about replacing with Gentoo, but it's good to have a binary-based distro laying around when you need something quick and dirty.

If I ever need a new Linux setup I'll probably go with Gentoo.
Back to top
View user's profile Send private message
jarlah
n00b
n00b


Joined: 08 Jul 2018
Posts: 1

PostPosted: Tue Jul 10, 2018 5:04 pm    Post subject: Reply with quote

I use Gentoo for normal computer usage on laptop. Browsing, programming, virtualization. No special software. I almost never experiment with my linux installs. But I like the idea of not being tied to any special distro, so i just make sure to use standard cross platform software and I am home free.
Back to top
View user's profile Send private message
dasPaul
Apprentice
Apprentice


Joined: 14 Feb 2012
Posts: 172
Location: Dresden

PostPosted: Tue Jul 17, 2018 7:47 am    Post subject: Reply with quote

I first came into contact with gentoo via pentoo. I used pentoo back in 2008 and wanted to add some features to it, so the pentoo devs told me, pentoo is a gentoo... use portage 8)

But my desktop was still running Microsoft until ~2012. That was the point I was totally fed up with windows for a lot of reasons and I decided to change to gentoo because I exercised its installation over and over and there was absolutely no advantage left for Windows over Gentoo

Until yesterday I had an gentoo installation that lasted for 5 years without doing a complete reinstall! With windows you have a complete reinstall with every major update (and loosing various settings again and again, they just cant handle that) :x

Yesterday I did execute a stupid xargs rm ... command as root and there was a total mess in my lib64 folder. That was the point for a fresh gentoo :D and it took not 2 days as my first installation took, but just one half day

If I really need windows I've a windows installation (sometimes for games) on my gentoo desktop via pci-passthrough with my gtx1070 that works like a charm.
_________________
-=human without Windows®=-
sorry for my bad english!
Back to top
View user's profile Send private message
pa4wdh
Apprentice
Apprentice


Joined: 16 Dec 2005
Posts: 296

PostPosted: Tue Jul 17, 2018 3:09 pm    Post subject: Reply with quote

I use gentoo for everything i do that involves a computer :D No other OS's or distro's are alllowed :roll:

My router, a Soekris net5501-70, runs gentoo from a USB harddrive, from which i make initrd images which it can run without the HDD.
My desktop, where i use libreoffice, browsing, e-mail, a lot of shell scripting and commandline work and a bit of C programming using VI as my IDE :)
My NTP server is a raspberry 2B with the ultimate GPS Hat running gentoo.
My laptop is running gentoo, similar use as the desktop, and a VPN which connects me from anywhere to my home network.
My server, which used to be a Soekris net6501-70 is now replaced with a Supermicro A1SAi-2750F with 16GB of memory. It runs NFS, DNS, e-mail (postfix+dovecot), calendar (radicale), tor, CUPS, ssh honeypot and ping to keep my provider's IPv6 tunnel up and running :). So separate these processes it runs 9 linux containers, of which 6 contain a complete gentoo system, others are containers with just single process.
The weirdest thing i'm running gentoo on is probably my Neo Freerunner.
I did try to run gentoo on a OYO e-reader, but failed to get it booting :x
_________________
The gentoo way of bringing peace to the world:
USE="-war" emerge --newuse world

Free as in Freedom is not limited to software only:
Music: http://www.jamendo.com
Recipes: http://www.opensourcefood.com
Back to top
View user's profile Send private message
saderror256
n00b
n00b


Joined: 26 Jul 2018
Posts: 13
Location: Current Directory

PostPosted: Fri Jul 27, 2018 10:19 pm    Post subject: Reply with quote

I use gentoo for home use.

The reason I use gentoo is for the use of USE flags, CFlags, and more. Also to help me learn and thrive in GNU/Linux. Use flags give me the choice of weather I want this or that, should I compile with this feature or disable that? You get the point :D
_________________
FreeBSD user, but still uses and loves himself some Gentoo!

I wont judge you based on what you use, newbie or inexperienced, you are still amazing for being here B)
Back to top
View user's profile Send private message
CasperVector
Tux's lil' helper
Tux's lil' helper


Joined: 03 Apr 2012
Posts: 99

PostPosted: Mon Sep 03, 2018 3:00 pm    Post subject: Reply with quote

I switched from Gentoo to Void on my laptop, and Alpine on my server.
Gentoo is nice in many aspects, but it is bad at minimalism; even LFS does not seem to do it well.
For those who seek fully customised mimimalist systems, projects like mkroot and lh-bootstrap might be of particular interest.

Trivia #1: The toolchains provided by Laurent Bercot for use with lh-bootstrap are much smaller than those for mkroot; I might investigate the cause when I have some more time.
(Update: the owner of b.zv.io gave a nice explanation for this observation.)

Trivia #2: Rob Landley noted, about Aboriginal Linux (predecessor of mkroot), that:
https://landley.net/aboriginal/ wrote:
The original motivation of Aboriginal Linux was that back around 2002 Knoppix was the only Linux distro paying attention to the desktop, and Knoppix's 700 megabyte live CD included the same 100 megabytes of packages Linux From Scratch built, which provided a roughly equivalent command line experience as the 1.7 megabytes tomsrtbt which was based on busybox and uClibc. If I could free up an extra 100 megs of space on Knoppix's boot CD they'd work wonders with it, so I started work trying to build a fully functional Linux From Scratch with all the gnu bloatware replaced with busybox and uClibc.

_________________
My current OpenPGP key:
RSA4096/0x227E8CAAB7AA186C (expires: 2020.10.19)
7077 7781 B859 5166 AE07 0286 227E 8CAA B7AA 186C
Back to top
View user's profile Send private message
Yamakuzure
Advocate
Advocate


Joined: 21 Jun 2006
Posts: 2237
Location: Bardowick, Germany

PostPosted: Tue Sep 04, 2018 6:52 am    Post subject: Reply with quote

I use Gentoo on my laptop to work on my own projects. Further I use a Gentoo prefix on Cygwin to make it suck less, and as a WSL installation as Cygwin is very slow in many places.
Most stuff I do there is using Git and pretty standard tools like grep, sed, cat, less, find and perl. But it is so much more convenient to have Konsole with multiple tabs open than multiple MinTTY or GitBash windows... And... well... Konsole on Windows 10 is just cool. ;-)

Having said that, the main purpose of Cygwin is to provide dbus, sshd, postfix and last but not least, X for WSL. Besides Konsole I regularly use kedit, kcalc and kate on windows.

Edit: Oh, and Pulseaudio, so WSL programs actually can use sound. Tried with media-sound/amarok-9999, and it works.
_________________
Important German:
  1. "Aha" - German reaction to pretend that you are really interested while giving no f*ck.
  2. "Tja" - German reaction to the apocalypse, nuclear war, an alien invasion or no bread in the house.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Gentoo Chat All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum