Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Portage rsync tree verification
View unanswered posts
View posts from last 24 hours

Goto page 1, 2, 3, 4  Next  
Reply to topic    Gentoo Forums Forum Index Portage & Programming
View previous topic :: View next topic  
Author Message
Melf
n00b
n00b


Joined: 18 Oct 2006
Posts: 44

PostPosted: Sat Feb 03, 2018 9:05 am    Post subject: Portage rsync tree verification Reply with quote

Hi,

I did not unterstand what the latest protage news "2018-01-30 Portage rsync tree verification" wants me to do :cry: :
Quote:

On existing installations, you need to manually compare the primary key fingerprint (reported by gemato
on every sync) against the official Gentoo keys [1]. An example gemato
output is:

INFO:root:Valid OpenPGP signature found:
INFO:root:- primary key: 1234567890ABCDEF1234567890ABCDEF12345678
INFO:root:- subkey: FEDCBA0987654321FEDCBA0987654321FEDCBA09

The primary key printed must match 'Gentoo Portage Snapshot Signing Key'
on the site. Please make sure to also check the certificate used
for the secure connection to the site!

[1]:https://www.gentoo.org/downloads/signatures/

Quote:


Release media signatures

Our current releases are signed with either of these keys or any sub keys:

Key ID/Type/Fingerprint Description Created Expiry
0xBB572E0E2D182910 (4096-bit RSA)
13EB BDBE DE7A 1277 5DFD B1BA BB57 2E0E 2D18 2910 Gentoo Linux Release Engineering (Automated Weekly Release Key) 2009-08-25 2019-08-22
0xDB6B8C1F96D8BF6D (4096-bit RSA)
DCD0 5B71 EAB9 4199 527F 44AC DB6B 8C1F 96D8 BF6D Gentoo Portage Snapshot Signing Key (Automated Signing Key) 2011-11-25 2018-07-01
0x9E6438C817072058 (1024-bit DSA)
D99E AC73 79A8 50BC E47D A5F2 9E64 38C8 1707 2058 Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) 2004-07-20 2018-07-01

Verifying files

To verify downloaded files are not tampered with, you need the .DIGESTS file matching your release and the matching key from the table above.

Fetch the key:

gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys <key id>

Verify the DIGESTS file:

gpg --verify <foo.DIGESTS.asc>

Verify the download matches the digests. At least one of the following will exist:

sha512sum -c <foo.DIGESTS.asc>

sha256sum -c <foo.DIGESTS.asc>

sha1sum -c <foo.DIGESTS.asc>



Where should I run theses commands and which of them are relevant for the end user? Do I receive a file that needs to be placed in /etc/ or /etc/portage?

Quote:

Detailed instructions are available in the Gentoo Handbook.


Please provide a direct link to those detailed instructions or just post them there. Any help is welcome
Back to top
View user's profile Send private message
dalu
Guru
Guru


Joined: 20 Jan 2003
Posts: 487

PostPosted: Sat Feb 03, 2018 4:39 pm    Post subject: Reply with quote

Nothing. You don't need to do anything.
If people use rsync to sync the tree portage will do everything automatically.

Idk what you need to do if you're running a mirror, but it doesn't seem that you are
Back to top
View user's profile Send private message
Melf
n00b
n00b


Joined: 18 Oct 2006
Posts: 44

PostPosted: Sat Feb 03, 2018 4:48 pm    Post subject: Reply with quote

That is good :-) . Thank you. Maybe they should add a message similar to the kernel configuration messages: If unsure, do nothing.
Back to top
View user's profile Send private message
devilheart
l33t
l33t


Joined: 17 Mar 2005
Posts: 832
Location: Villach, Austria

PostPosted: Mon Feb 05, 2018 1:05 pm    Post subject: Reply with quote

I was trying to play with this new feature, but I get this message

Code:
INFO:root:Refreshing keys from keyserver...
ERROR:root:OpenPGP keyring refresh failed:
Unable to refresh keys: gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: Address family not supported by protocol


am I missing any steps?
Back to top
View user's profile Send private message
papu
Guru
Guru


Joined: 25 Jan 2008
Posts: 588
Location: Sota algun pi o alzina...

PostPosted: Mon Feb 05, 2018 1:59 pm    Post subject: Reply with quote

devilheart wrote:
I was trying to play with this new feature, but I get this message

Code:
INFO:root:Refreshing keys from keyserver...
ERROR:root:OpenPGP keyring refresh failed:
Unable to refresh keys: gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: Address family not supported by protocol


am I missing any steps?


i was getting similar error last 24 h. but now seems working again. [I] sys-apps/portage-2.3.24
_________________
--Intel i5 6600 --GA-Z170-HD3P --Ripjaws V 2x8 2400 --Radeon RX 470 G1 4G --Gentoo & Windows
Back to top
View user's profile Send private message
Tony0945
Advocate
Advocate


Joined: 25 Jul 2006
Posts: 2605
Location: Illinois, USA

PostPosted: Fri Feb 09, 2018 7:24 pm    Post subject: Reply with quote

Can this feature be turned off?
Back to top
View user's profile Send private message
kite14
Apprentice
Apprentice


Joined: 07 Nov 2006
Posts: 195
Location: Pordenone/Italy

PostPosted: Fri Feb 09, 2018 7:45 pm    Post subject: Reply with quote

Tony0945 wrote:
Can this feature be turned off?

Yes, it can.
Quote:
If you wish to disable it, you can disable the 'rsync-verify' USE flag on sys-apps/portage
or set 'sync-rsync-verify-metamanifest = no' in your repos.conf.
Back to top
View user's profile Send private message
ct85711
Veteran
Veteran


Joined: 27 Sep 2005
Posts: 1636

PostPosted: Fri Feb 09, 2018 8:20 pm    Post subject: Reply with quote

Just wondering, on if those that is encountering this problem is running ipv4 only machines? If so, it seems a patch was just put in the tree a couple days ago, possibly fixing this (rsync can take a little while to synchronize to have the patch).

app-crypt/gnupg: --refresh-keys fails if ipv6 is not supported (was: app-portage/gemato, sys-apps/portage: emerge --sync fails on verification)
Upstream bug: https://dev.gnupg.org/T3331

Another bug report, possible a duplicate of 646194: app-crypt/gnupg-2.1.18: dirmngr fails on all keyserver operations
Back to top
View user's profile Send private message
dalu
Guru
Guru


Joined: 20 Jan 2003
Posts: 487

PostPosted: Sat Feb 10, 2018 6:43 pm    Post subject: Reply with quote

I reliably fails and timeouts on checking /usr/portage for me
I ran it for ~6 hours and nothing

Code:

Number of files: 148,223 (reg: 124,051, dir: 24,172)
Number of created files: 266 (reg: 258, dir: 8)
Number of deleted files: 180 (reg: 177, dir: 3)
Number of regular files transferred: 842
Total file size: 202.69M bytes
Total transferred file size: 8.66M bytes
Literal data: 8.66M bytes
Matched data: 0 bytes
File list size: 3.44M
File list generation time: 0.001 seconds
File list transfer time: 0.000 seconds
Total bytes sent: 42.20K
Total bytes received: 10.51M

sent 42.20K bytes  received 10.51M bytes  4.22M bytes/sec
total size is 202.69M  speedup is 19.21
INFO:root:Refreshing keys from keyserver...
INFO:root:Keys refreshed.
INFO:root:Manifest timestamp: 2018-02-10 10:08:25 UTC
INFO:root:Valid OpenPGP signature found:
INFO:root:- primary key: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
INFO:root:- subkey: E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
INFO:root:- timestamp: 2018-02-10 10:08:25 UTC
INFO:root:Verifying /usr/portage...


I have disabled some branches
Back to top
View user's profile Send private message
Zucca
Veteran
Veteran


Joined: 14 Jun 2007
Posts: 1353
Location: KUUSANKOSKI, Finland

PostPosted: Thu Feb 15, 2018 9:12 am    Post subject: Reply with quote

dalu wrote:
Nothing. You don't need to do anything.
If people use rsync to sync the tree portage will do everything automatically.

The news item gives an impression that user itervention is needed.

Well... Little late here (~month since last --sync), but I'll see what happens...
_________________
..: Zucca :..

Code:
ERROR: '--failure' is not an option. Aborting...
Back to top
View user's profile Send private message
dalu
Guru
Guru


Joined: 20 Jan 2003
Posts: 487

PostPosted: Thu Feb 15, 2018 5:01 pm    Post subject: Reply with quote

What happens for me is, getomato takes forever and never finished after each sync.
Apart from that I'm neither involved nor otherwise affiliated with this feature
Back to top
View user's profile Send private message
Zucca
Veteran
Veteran


Joined: 14 Jun 2007
Posts: 1353
Location: KUUSANKOSKI, Finland

PostPosted: Thu Feb 15, 2018 5:03 pm    Post subject: Reply with quote

My machine is just going trough 96 package build... After that I'll do another --sync. Let's see what happens...
_________________
..: Zucca :..

Code:
ERROR: '--failure' is not an option. Aborting...
Back to top
View user's profile Send private message
shiznix
Guru
Guru


Joined: 29 Jun 2003
Posts: 366
Location: Adelaide, Australia

PostPosted: Fri Feb 16, 2018 10:33 pm    Post subject: Reply with quote

dalu wrote:
What happens for me is, getomato takes forever and never finished after each sync.
Apart from that I'm neither involved nor otherwise affiliated with this feature

Same problem here, portage is broken now and won't sync because gemato never finishes.

Is there a way to disable this gemato rubbish?
Back to top
View user's profile Send private message
Zucca
Veteran
Veteran


Joined: 14 Jun 2007
Posts: 1353
Location: KUUSANKOSKI, Finland

PostPosted: Fri Feb 16, 2018 10:40 pm    Post subject: Reply with quote

shiznix wrote:
Is there a way to disable this gemato rubbish?
kite14 wrote:
Tony0945 wrote:
Can this feature be turned off?

Yes, it can.
Quote:
If you wish to disable it, you can disable the 'rsync-verify' USE flag on sys-apps/portage
or set 'sync-rsync-verify-metamanifest = no' in your repos.conf.


On that note... I haven't had any problems. I did not configure anything. And I've synced few time already.
_________________
..: Zucca :..

Code:
ERROR: '--failure' is not an option. Aborting...
Back to top
View user's profile Send private message
fargred
n00b
n00b


Joined: 19 Oct 2010
Posts: 66

PostPosted: Sat Feb 17, 2018 9:40 am    Post subject: Reply with quote

I see “emaint sync -r gentoo” isn’t working, when it runs as a cron job.

In a cron job it fails, the log:
Code:
>>> Syncing repository 'gentoo' into '/usr/portage'...
INFO:root:Refreshing keys from keyserver...
ERROR:root:OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No data

q: Updating ebuild cache in /usr/portage ...
q: Finished 37417 entries in 0.188902 seconds

 * IMPORTANT: 2 news items need reading for repository 'gentoo'.
 * Use eselect news read to view new items.


Action: sync for repo: gentoo, returned code = 1


But from a terminal it goes like
Code:
>>> Syncing repository 'gentoo' into '/usr/portage'...
INFO:root:Refreshing keys from keyserver...
INFO:root:Keys refreshed.
INFO:root:Manifest timestamp: 2018-02-17 08:38:33 UTC
INFO:root:Valid OpenPGP signature found:
INFO:root:- primary key: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
INFO:root:- subkey: E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
INFO:root:- timestamp: 2018-02-17 08:38:33 UTC
INFO:root:Verifying /usr/portage...

…and never finishes.

I thought that I need to run emaint sync manually once, but the cron jobs
kept failing on emaint sync -r gentoo. Cron jobs run as root, indeed.


Last edited by fargred on Sat Feb 17, 2018 8:04 pm; edited 1 time in total
Back to top
View user's profile Send private message
dalu
Guru
Guru


Joined: 20 Jan 2003
Posts: 487

PostPosted: Sat Feb 17, 2018 5:50 pm    Post subject: Reply with quote

shiznix wrote:
dalu wrote:
What happens for me is, getomato takes forever and never finished after each sync.
Apart from that I'm neither involved nor otherwise affiliated with this feature

Same problem here, portage is broken now and won't sync because gemato never finishes.

Is there a way to disable this gemato rubbish?


Glad I'm not the only one.
In theory it's good stuff and absolutely necessary.
I can see that it runs a gpg command which never finishes with `ps auxw` invoked by gemato.
here's a manual ctrl+c abort console output
Code:

sent 42.41K bytes  received 10.23M bytes  4.11M bytes/sec
total size is 202.53M  speedup is 19.71
INFO:root:Refreshing keys from keyserver...
INFO:root:Keys refreshed.
INFO:root:Manifest timestamp: 2018-02-17 13:08:32 UTC
INFO:root:Valid OpenPGP signature found:
INFO:root:- primary key: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
INFO:root:- subkey: E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
INFO:root:- timestamp: 2018-02-17 13:08:32 UTC
INFO:root:Verifying /usr/portage...
^C

Exiting on signal 2
Traceback (most recent call last):
  File "/usr/lib/python-exec/python2.7/gemato", line 11, in <module>
    load_entry_point('gemato==11.2', 'console_scripts', 'gemato')()
  File "/usr/lib64/python2.7/site-packages/gemato/cli.py", line 530, in setuptools_main
    sys.exit(main(argv))
  File "/usr/lib64/python2.7/site-packages/gemato/cli.py", line 516, in main
    return vals.cmd()
  File "/usr/lib64/python2.7/site-packages/gemato/cli.py", line 212, in __call__
    ret &= m.assert_directory_verifies(relpath, **self.kwargs)
  File "/usr/lib64/python2.7/site-packages/gemato/recursiveloader.py", line 596, in assert_directory_verifies
    entry_dict = self.get_file_entry_dict(path)
  File "/usr/lib64/python2.7/site-packages/gemato/recursiveloader.py", line 529, in get_file_entry_dict
    verify=verify_manifests)
  File "/usr/lib64/python2.7/site-packages/gemato/recursiveloader.py", line 416, in load_manifests_for_path
    pool.terminate()
  File "/usr/lib64/python2.7/multiprocessing/pool.py", line 470, in terminate
    self._terminate()
  File "/usr/lib64/python2.7/multiprocessing/util.py", line 207, in __call__
    res = self._callback(*self._args, **self._kwargs)
  File "/usr/lib64/python2.7/multiprocessing/pool.py", line 522, in _terminate_pool
    task_handler.join(1e100)
  File "/usr/lib64/python2.7/threading.py", line 951, in join
    self.__block.wait(delay)
  File "/usr/lib64/python2.7/threading.py", line 359, in wait
    _sleep(delay)
KeyboardInterrupt

python 3.4 here or actually single python 2.7 but 2_7 and 3_4
Back to top
View user's profile Send private message
zmedico
Developer
Developer


Joined: 02 Jan 2004
Posts: 334
Location: California USA

PostPosted: Sun Feb 18, 2018 9:42 pm    Post subject: Reply with quote

fargred wrote:

I see “emaint sync -r gentoo” isn’t working, when it runs as a cron job.

In a cron job it fails, the log:

Code:
>>> Syncing repository 'gentoo' into '/usr/portage'...
INFO:root:Refreshing keys from keyserver...
ERROR:root:OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No data

Action: sync for repo: gentoo, returned code = 1



The "gpg: keyserver refresh failed: No data" issue has been reported as bug 647696.

fargred wrote:

But from a terminal it goes like
Code:
>>> Syncing repository 'gentoo' into '/usr/portage'...
INFO:root:Refreshing keys from keyserver...
INFO:root:Keys refreshed.
INFO:root:Manifest timestamp: 2018-02-17 08:38:33 UTC
INFO:root:Valid OpenPGP signature found:
INFO:root:- primary key: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
INFO:root:- subkey: E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
INFO:root:- timestamp: 2018-02-17 08:38:33 UTC
INFO:root:Verifying /usr/portage...

…and never finishes.


If it "never finishes" then it looks like a deadlock as reported in bug 647964.
_________________
Zac
Back to top
View user's profile Send private message
dalu
Guru
Guru


Joined: 20 Jan 2003
Posts: 487

PostPosted: Fri Feb 23, 2018 10:08 am    Post subject: Reply with quote

And when will it be pushed live?
Back to top
View user's profile Send private message
zmedico
Developer
Developer


Joined: 02 Jan 2004
Posts: 334
Location: California USA

PostPosted: Fri Feb 23, 2018 6:01 pm    Post subject: Reply with quote

We're due to stabilize portage-2.3.24 in about 1 week (March 2 or so). The people who are having problems with gemato or gnupg can disable the verification using a setting like this in /etc/portage/repos.conf/gentoo.conf:
Code:
[gentoo]
sync-rsync-verify-metamanifest = no

_________________
Zac
Back to top
View user's profile Send private message
sigra
n00b
n00b


Joined: 03 Feb 2006
Posts: 72

PostPosted: Sat Feb 24, 2018 10:25 pm    Post subject: Reply with quote

The sync failed and I understand that I should not install any packages.
Code:
INFO:root:Refreshing keys from keyserver...
ERROR:root:OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: Server indicated a failure
I tried to resync a few times and always got the error. Should I report a bug now? The mirrors seem to be [rsync://176.28.50.119/gentoo-portage] and [rsync://81.91.253.252/gentoo-portage].
Back to top
View user's profile Send private message
zmedico
Developer
Developer


Joined: 02 Jan 2004
Posts: 334
Location: California USA

PostPosted: Sat Feb 24, 2018 11:11 pm    Post subject: Reply with quote

sigra wrote:
The sync failed and I understand that I should not install any packages.


The repository has not been verified, but it's probably safe to install packages, assuming that you don't have an adversary feeding you malicious data.

sigra wrote:
Code:
INFO:root:Refreshing keys from keyserver...
ERROR:root:OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: Server indicated a failure
I tried to resync a few times and always got the error. Should I report a bug now? The mirrors seem to be [rsync://176.28.50.119/gentoo-portage] and [rsync://81.91.253.252/gentoo-portage].


This "keyring refresh failed" error has already been reported as bug 648586. Please ensure that you have >=app-crypt/gnupg-2.2.4-r2 installed, and follow up in that bug report.

If you're concerned about the repository not being verified, you can try using this method to get a verified copy of the repository:

https://wiki.gentoo.org/wiki//etc/portage/repos.conf/webrsync.conf
_________________
Zac
Back to top
View user's profile Send private message
sigra
n00b
n00b


Joined: 03 Feb 2006
Posts: 72

PostPosted: Sun Feb 25, 2018 9:53 am    Post subject: Reply with quote

Thanks, I will keep using the repository and keep an eye on that bug report (told Thunderbird to mark a message as important if it comes from <bugzilla-daemon@gentoo.org> and has "[Bug 648586]" in the subject).
Back to top
View user's profile Send private message
xpetex
n00b
n00b


Joined: 20 May 2009
Posts: 5

PostPosted: Sun Feb 25, 2018 10:00 am    Post subject: gemato threads / high load Reply with quote

hi there,

i am experiencing 10 minutes of an unusable system with a load up to 20 during the gemato verification.
Its probably related to the 9 parallel gemato processes:

Code:
portage   6792  6581  1 10:40 pts/1    00:00:10 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6897  6792  2 10:41 pts/1    00:00:11 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6898  6792  1 10:41 pts/1    00:00:05 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6899  6792  1 10:41 pts/1    00:00:06 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6900  6792  1 10:41 pts/1    00:00:06 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6901  6792  2 10:41 pts/1    00:00:11 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6902  6792  1 10:41 pts/1    00:00:05 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6903  6792  1 10:41 pts/1    00:00:05 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
portage   6904  6792  1 10:41 pts/1    00:00:08 /usr/bin/python3.5 /usr/lib/python-exec/python3.5/gemato verify -s /usr/portage -K /var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg

is there a configuration option to limit / define the number of the gemato processes?

[Moderator edit: added [code] tags to preserve output layout. -Hu]
Back to top
View user's profile Send private message
papu
Guru
Guru


Joined: 25 Jan 2008
Posts: 588
Location: Sota algun pi o alzina...

PostPosted: Sun Feb 25, 2018 10:16 am    Post subject: Reply with quote

now seems it works for me for serveral days with no system stalled

the system now fastest when building cache database, isen't it?
now seems it is taking less time

https://i.imgur.com/WJoRXSa.png

Code:
~ $ equery  u portage app-crypt/gnupg gemato
[ Legend : U - final flag setting for installation]
[        : I - package is installed with flag     ]
[ Colors : set, unset                             ]
 * Found these USE flags for sys-apps/portage-2.3.24-r1:
 U I
 - - build                    : !!internal use only!! DO NOT SET THIS FLAG YOURSELF!, used
                                for creating build images and the first half of
                                bootstrapping [make stage1]
 - - doc                      : Add extra documentation (API, Javadoc, etc). It is
                                recommended to enable per package instead of globally
 - - epydoc                   : Build html API documentation with epydoc.
 - - gentoo-dev               : Enable features required for Gentoo ebuild development.
 - + ipc                      : Use inter-process communication between portage and
                                running ebuilds.
 + + native-extensions        : Compiles native "C" extensions (speedups, instead of using
                                python backup code). Currently includes libc-locales. This
                                should only be temporarily disabled for some bootstrapping
                                operations. Cross-compilation is not supported.
 - - python_targets_pypy      : Build with PyPy
 + + python_targets_python2_7 : Build with Python 2.7
 - - python_targets_python3_4 : Build with Python 3.4
 + + python_targets_python3_5 : Build with Python 3.5
 - - python_targets_python3_6 : Build with Python 3.6
 + + rsync-verify             : Enable full-tree cryptographic verification of Gentoo
                                repository rsync checkouts using app-portage/gemato.
 + + xattr                    : Preserve extended attributes (filesystem-stored metadata)
                                when installing files. Usually only required for hardened
                                systems.

 * Found these USE flags for app-crypt/gnupg-2.2.5:
 U I
 + + bzip2      : Use the bzlib compression library
 - - doc        : Add extra documentation (API, Javadoc, etc). It is recommended to enable
                  per package instead of globally
 + + ldap       : Add LDAP support (Lightweight Directory Access Protocol)
 + + nls        : Add Native Language Support (using gettext - GNU locale utilities)
 + + readline   : Enable support for libreadline, a GNU line-editing library that almost
                  everyone wants
 + + smartcard  : Build scdaemon software. Enables usage of OpenPGP cards. For other type
                  of smartcards, try app-crypt/gnupg-pkcs11-scd. Bring in dev-libs/libusb
                  as a dependency; enable scdaemon.
 + + ssl        : Add support for SSL/TLS connections (Secure Socket Layer / Transport
                  Layer Security)
 - - tofu       : Enable support for Trust on First use trust model; requires
                  dev-db/sqlite.
 + + tools      : Install extra tools (including gpgsplit and gpg-zip).
 + + usb        : Build direct CCID access for scdaemon; requires dev-libs/libusb.
 - - wks-server : Install the wks-server

 * Found these USE flags for app-portage/gemato-11.2:
 U I
 + + blake2                   : Install dependencies needed for BLAKE2 hash functions
 + + bzip2                    : Use the bzlib compression library
 + + gpg                      : Install dependencies needed for OpenPGP signature
                                verification support
 + + lzma                     : Support for LZMA (de)compression algorithm
 - - python_targets_pypy      : Build with PyPy
 + + python_targets_python2_7 : Build with Python 2.7
 - - python_targets_python3_4 : Build with Python 3.4
 + + python_targets_python3_5 : Build with Python 3.5
 - - python_targets_python3_6 : Build with Python 3.6
 + + sha3                     : Install dependencies needed for SHA3 hash functions
 - - test                     : Workaround to pull in packages needed to run with
                                FEATURES=test. Portage-2.1.2 handles this internally, so
                                don't set it in make.conf/package.use anymore

_________________
--Intel i5 6600 --GA-Z170-HD3P --Ripjaws V 2x8 2400 --Radeon RX 470 G1 4G --Gentoo & Windows
Back to top
View user's profile Send private message
zmedico
Developer
Developer


Joined: 02 Jan 2004
Posts: 334
Location: California USA

PostPosted: Sun Feb 25, 2018 7:21 pm    Post subject: Re: gemato threads / high load Reply with quote

xpetex wrote:
is there a configuration option to limit / define the number of the gemato processes?


Yes, you can set the number of parallel jobs like this in /etc/portage/repos.conf/gentoo.conf:
Code:
[gentoo]
sync-rsync-verify-jobs = 2

_________________
Zac
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Portage & Programming All times are GMT
Goto page 1, 2, 3, 4  Next
Page 1 of 4

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum