Announcing the 'Stage 4 project'

i92guboj · Posted: Tue Nov 13, 2007 2:42 pm Post subject:

As long as I know, the on-disk /dev is not changed when you boot. So, you can boot that system to test it without problems. Once you are done with the tests, you can boot from a livecd (so, the /dev on your stage4 partition is not mounted). That way, you can backup the static dev that is into your hard drive, making sure that no other thing in in the middle.

The dev nodes on the stage3 file should be enough to boot in almost any circumstance, and are well tested, that is why I suggest them as a base.

Kasumi_Ninja · Posted: Tue Nov 13, 2007 5:34 pm Post subject:

Great 1! Thanks for the help i92guboj. I can almost start building the stage 4's. There is only (very important) thing left. What is the best way to ensure these stage 4's are delivered untampered? I wast thhinking of gnupg key signing and uploading this gnupg key to a public sever. Is this the best way for endusers to verify if the stage are untampered? Is this the correct way to sign a stage 4 with gnupg?

hirakendu · Guru Joined: 24 Jan 2007 Posts: 386 Location: san diego

Is md5sum not enough :p. (Sorry if I am dumb

.)
_________________
Helium Sources || Gentoo Minimal Livecd

Kasumi_Ninja · Posted: Tue Nov 13, 2007 7:26 pm Post subject:

NeddySeagoon · Posted: Tue Nov 13, 2007 8:18 pm Post subject:

Aniruddha,

md5sum is fairly easy to create collissions with.
However that alone is not sufficient to undetectably tamper with a package.
The colliding package is must deliver the original functionality, the payload and still provide a collision.
Thats much harder to arannge. Oh, portage checks the file size too, so the rouge file must be the same length as the original.

That set of conditions is much harder to meet simulataiously.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

Kasumi_Ninja · Posted: Tue Nov 13, 2007 8:18 pm Post subject:

I have problems creating an sha512sum. Should I use 'sha512' or the 'sha512sum' command? Which options should I set?
_________________
Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered

Kasumi_Ninja · Posted: Thu Nov 15, 2007 9:59 am Post subject:

I created the first stage 4 yesterday. Compiling xorg failed therefor the stage4-X11 and stage4-Desktop have to wait until this bug is fixed. Here is more info about the 1st stage 4. I left the following configuration settings in it's original state:

Untouched config files
-fstab
-hostname
-confd.net
-/etc/hosts
-passwd (root password isn't set)
-rc.conf
-keymap
-clock

Added
+pcmcia tools
+grub.conf

Removed
-/etc/resolv.conf

Other
Timezone is set to GMT

@Ned
Thanks for the info about md5. Only the stage files (stage3, stage4) aren't checked for size in portage right? Therefor it is better to supply an shasum.
_________________
Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered

Kasumi_Ninja · Posted: Thu Nov 15, 2007 5:03 pm Post subject:

I think of adding the following unstable packages to package.keywords in order to emerge xorg-x11 without problems:

Kasumi_Ninja · Posted: Fri Nov 16, 2007 9:42 pm Post subject:

Well the stag4's are finished! And they even work :lol:

. I am am buildinga chroot in /var/chroot now to give them a permanent place for updating and maintenance. The only obstacle now is how to distribute these stage 4's (I am thinking of bittorrent. And I am still trying to figure out the correct way to create an sh5sum. Here is the to be included install and changelog files, the chapter number and title correspond with the Gentoo Linux x86 Handbook Let me know what you think!

logigamer · n00b Joined: 27 Oct 2007 Posts: 17

when You will be ready to release this stages? :wink:

Kasumi_Ninja · Posted: Thu Nov 22, 2007 10:59 am Post subject:

logigamer · n00b Joined: 27 Oct 2007 Posts: 17

ryker · Guru Joined: 28 May 2003 Posts: 412 Location: Portage, IN

Or Linux Tracker

http://linuxtracker.org/
_________________
Athlon 64 3200+, 80G WD sata hd + 200G IDE, 1G Geil DDR400, MSI K8T Neo
IntelCore2Duo 2.0Ghz MSI laptop,100G SATA hd, 2G RAM

neiljw · Posted: Thu Nov 22, 2007 9:03 pm Post subject:

logigamer · n00b Joined: 27 Oct 2007 Posts: 17

so, we should wait? :wink:

Kasumi_Ninja · Posted: Fri Nov 23, 2007 4:35 pm Post subject:

neiljw · Posted: Fri Nov 23, 2007 9:08 pm Post subject:

Kasumi_Ninja · Posted: Fri Nov 23, 2007 9:13 pm Post subject:

Kasumi_Ninja · Posted: Fri Nov 23, 2007 10:04 pm Post subject:

Neil just send me a the account details I expect to upload the first stage4's tomorrow

.
_________________
Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered

Kasumi_Ninja · Posted: Sun Nov 25, 2007 11:24 am Post subject:

I have had some delay, I'll let you know when I upload the first stage4's.
_________________
Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered

logigamer · n00b Joined: 27 Oct 2007 Posts: 17

neiljw · Posted: Sun Nov 25, 2007 3:25 pm Post subject:

Sorry folks, the delay has been my fault. I had a couple of typos in the setup for aniruddha's account. It's all sorted now.

_________________
Be lucky,

Neil