<?xml version="1.0" encoding="utf-8" ?>

<rss version="2.0" 
   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
   xmlns:admin="http://webns.net/mvcb/"
   xmlns:dc="http://purl.org/dc/elements/1.1/"
   xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
   xmlns:wfw="http://wellformedweb.org/CommentAPI/"
   xmlns:content="http://purl.org/rss/1.0/modules/content/"
   >
<channel>
    
    <title>Daniel Lange's blog (Entries tagged as gentoo)</title>
    <link>https://daniel-lange.com/</link>
    <description>agrep -pB IT /dev/life</description>
    <dc:language>en</dc:language>
    <generator>Serendipity 2.6-alpha1 - http://www.s9y.org/</generator>
    <pubDate>Mon, 17 Mar 2025 14:01:16 GMT</pubDate>

    <image>
    <url>//daniel-lange.com/uploads/Avatar_Blog_144_234.png</url>
    <title>RSS: Daniel Lange's blog - agrep -pB IT /dev/life</title>
    <link>https://daniel-lange.com/</link>
    <width>144</width>
    <height>234</height>
</image>

<item>
    <title>Installing System Rescue (CD) to a flash drive</title>
    <link>https://daniel-lange.com/archives/168-Installing-System-Rescue-CD-to-a-flash-drive.html</link>
            <category>Linux</category>
    
    <comments>https://daniel-lange.com/archives/168-Installing-System-Rescue-CD-to-a-flash-drive.html#comments</comments>
    <wfw:comment>https://daniel-lange.com/wfwcomment.php?cid=168</wfw:comment>

    <slash:comments>1</slash:comments>
    <wfw:commentRss>https://daniel-lange.com/rss.php?version=2.0&amp;type=comments&amp;cid=168</wfw:commentRss>
    

    <author>nospam@example.com (Daniel Lange)</author>
    <content:encoded>
    &lt;p&gt;&lt;a href=&quot;https://www.system-rescue.org/&quot;&gt;System Rescue&lt;/a&gt;, the project formerly known as &lt;a href=&quot;https://en.wikipedia.org/wiki/SystemRescue&quot;&gt;System Rescue CD&lt;/a&gt;, has moved from being based on Gentoo to being built on Arch Linux packages.&lt;/p&gt;

&lt;p&gt;With this their ISO layout changed substantially so when updating my trusty recue USB flash drive, I could not just update the kernel, initrd and the root filesystem image as I had typically done every other year before.&lt;/p&gt;

&lt;p&gt;The &lt;a href=&quot;https://www.system-rescue.org/Installing-SystemRescue-on-a-USB-memory-stick/&quot;&gt;&quot;Installing on a USB memory stick&quot;&lt;/a&gt; documentation is good for Windows (use &lt;a href=&quot;https://rufus.ie/&quot;&gt;Rufus&lt;/a&gt;, it&#039;s nice) but rather useless for Linux. They recommend a &lt;code&gt;dd&lt;/code&gt; or the fancy graphical version of that, called &lt;code&gt;usbimager&lt;/code&gt;.&lt;/p&gt;

&lt;p&gt;I much prefer to have a flash drive that I can write to over an image of a CD (ISO) written 1:1 onto the flash media.&lt;/p&gt;

&lt;p&gt;The basic idea is to use the bulk of the System Rescue ISO contents but amend these with your own grub and syslinux so they work as intended over the supplied ones that are bound to the ISO layout a bit too much.&lt;/p&gt;

&lt;p&gt;I did this on Debian Buster but with some adjustments to paths and what packages to install, any recent Linux distribution should do:&lt;/p&gt;
 &lt;a class=&quot;block_level&quot; href=&quot;https://daniel-lange.com/archives/168-Installing-System-Rescue-CD-to-a-flash-drive.html#extended&quot;&gt;Continue reading &quot;Installing System Rescue (CD) to a flash drive&quot;&lt;/a&gt;
    </content:encoded>

    <pubDate>Wed, 27 Jan 2021 12:47:00 +0000</pubDate>
    <guid isPermaLink="false">https://daniel-lange.com/archives/168-guid.html</guid>
    <category>archlinux</category>
<category>boot</category>
<category>flash</category>
<category>gentoo</category>
<category>iso</category>
<category>sysconfig</category>
<category>updated</category>

</item>
<item>
    <title>Fixing FreeNX / NoMachine NX keyboard glitches (e.g. ALTGr)</title>
    <link>https://daniel-lange.com/archives/45-Fixing-FreeNX-NoMachine-NX-keyboard-glitches-e.g.-ALTGr.html</link>
            <category>Linux</category>
    
    <comments>https://daniel-lange.com/archives/45-Fixing-FreeNX-NoMachine-NX-keyboard-glitches-e.g.-ALTGr.html#comments</comments>
    <wfw:comment>https://daniel-lange.com/wfwcomment.php?cid=45</wfw:comment>

    <slash:comments>16</slash:comments>
    <wfw:commentRss>https://daniel-lange.com/rss.php?version=2.0&amp;type=comments&amp;cid=45</wfw:commentRss>
    

    <author>nospam@example.com (Daniel Lange)</author>
    <content:encoded>
    &lt;p&gt;There is a add-on technology to X or VNC called &lt;a href=&quot;http://www.nomachine.com/sources.php&quot; title=&quot;NX Sources download&quot;&gt;NX&lt;/a&gt; by an Italian company called &lt;a href=&quot;http://www.nomachine.com&quot; title=&quot;NoMachine homepage&quot;&gt;NoMachine&lt;/a&gt;.
It&#039;s quite useful as it speeds up working on remote desktops via slow network connections (i.e. DSL pipes) substantially.&lt;/p&gt;

&lt;p&gt;The libraries that implement NX are released under GPLv2 by that company.
A server wrapping up the libraries&#039; functionality is available as closed source from NoMachine or as a free product (GPLv2 again) by Fabian Franz, called &lt;a href=&quot;http://freenx.berlios.de/&quot; title=&quot;FreeNX homepage&quot;&gt;FreeNX&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;FreeNX itself is amazing as it is written in BASH (with a few helper functions in C). It&#039;s also able to mend some of the shortcomings of the NX architecture. E.g. stock NX requires a technical user called &quot;nx&quot; to able to ssh into the NX server with a public/private keypair.
FreeNX can work around that for more secure set-ups.&lt;/p&gt;

&lt;p&gt;One issue I bumped into quite regularly with Linux clients and Linux hosts from different distributions/localisations is that the keymaps are not compatible. This usually results in the ALTGr key not usable, so German keyboard users can&#039;t enter a pipe (&quot;|&quot;), tilde (&quot;~&quot;) or a backslash (&quot;\&quot;) character.  Also the up and down keys are usually resulting in weird characters being pasted to the shell. Now all of that makes using a shell/terminal prompt quite &lt;em&gt;interesting&lt;/em&gt;.&lt;/p&gt;
 &lt;a class=&quot;block_level&quot; href=&quot;https://daniel-lange.com/archives/45-Fixing-FreeNX-NoMachine-NX-keyboard-glitches-e.g.-ALTGr.html#extended&quot;&gt;Continue reading &quot;Fixing FreeNX / NoMachine NX keyboard glitches (e.g. ALTGr)&quot;&lt;/a&gt;
    </content:encoded>

    <pubDate>Sun, 10 May 2009 11:44:18 +0000</pubDate>
    <guid isPermaLink="false">https://daniel-lange.com/archives/45-guid.html</guid>
    <category>freenx</category>
<category>gentoo</category>
<category>keyboard</category>
<category>keymap</category>
<category>nx</category>
<category>ubuntu</category>

</item>
<item>
    <title>Fix Umlauts in the XFCE Terminal</title>
    <link>https://daniel-lange.com/archives/44-Fix-Umlauts-in-the-XFCE-Terminal.html</link>
            <category>IT</category>
    
    <comments>https://daniel-lange.com/archives/44-Fix-Umlauts-in-the-XFCE-Terminal.html#comments</comments>
    <wfw:comment>https://daniel-lange.com/wfwcomment.php?cid=44</wfw:comment>

    <slash:comments>7</slash:comments>
    <wfw:commentRss>https://daniel-lange.com/rss.php?version=2.0&amp;type=comments&amp;cid=44</wfw:commentRss>
    

    <author>nospam@example.com (Daniel Lange)</author>
    <content:encoded>
    &lt;p&gt;The XFCE Terminal has the weird issue of sometimes showing question marks (?) instead of German Umlauts (äöüÄÖÜ) although they work fine in any other stock XFCE application (e.g. the default editor &quot;mousepad&quot;).&lt;/p&gt;

&lt;p&gt;The solution to this can be found on the &lt;a href=&quot;http://forum.xfce.org/index.php?topic=3302.0&quot; title=&quot;XFCE Forum thread on Umlauts in Terminal&quot;&gt;XFCE Forums&lt;/a&gt; but it took me quite some time to find it. It was difficult to find a suitable search query to dig out that page. Google turns up a lot of irrelevant stuff on &quot;XFCE Terminal question marks&quot;...&lt;/p&gt;

&lt;div class=&quot;serendipity_imageComment_center&quot; style=&quot;width: 526px&quot;&gt;&lt;div class=&quot;serendipity_imageComment_img&quot;&gt;&lt;!-- s9ymdb:525 --&gt;&lt;img class=&quot;serendipity_image_center&quot; width=&quot;526&quot; height=&quot;283&quot;  src=&quot;https://daniel-lange.com/uploads/entries/090430_XFCE_terminal.png&quot; alt=&quot;&quot; /&gt;&lt;/div&gt;&lt;div class=&quot;serendipity_imageComment_txt&quot;&gt;XFCE Editor Umlauts with and without LANG variable set&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;The problem with Umlauts (and other 8bit ASCII characters) showing as question marks arises if the user has no LANG variable set.&lt;/p&gt;

&lt;p&gt;A simple&lt;/p&gt;

&lt;div class=&quot;bash geshi&quot; style=&quot;text-align: left&quot;&gt;&lt;span style=&quot;color: #7a0874; font-weight: bold;&quot;&gt;export&lt;/span&gt; &lt;span style=&quot;color: #007800;&quot;&gt;LANG&lt;/span&gt;=en_US&lt;/div&gt;

&lt;p&gt;resolves the issue. Put that into &lt;em&gt;~/.bashrc&lt;/em&gt; or any other place suitable in your distribution.&lt;/p&gt;

&lt;p&gt;Gentoo users may want to&lt;/p&gt;

&lt;div class=&quot;bash geshi&quot; style=&quot;text-align: left&quot;&gt;&lt;span style=&quot;color: #c20cb9; font-weight: bold;&quot;&gt;su&lt;/span&gt; &amp;#160;&lt;span style=&quot;color: #666666; font-style: italic;&quot;&gt;# become root&lt;/span&gt;&lt;br /&gt;&lt;span style=&quot;color: #7a0874; font-weight: bold;&quot;&gt;echo&lt;/span&gt; &lt;span style=&quot;color: #ff0000;&quot;&gt;&amp;quot;LANG=en_US&amp;quot;&lt;/span&gt; &lt;span style=&quot;color: #000000; font-weight: bold;&quot;&gt;&amp;gt;&amp;gt;&lt;/span&gt; &lt;span style=&quot;color: #000000; font-weight: bold;&quot;&gt;/&lt;/span&gt;etc&lt;span style=&quot;color: #000000; font-weight: bold;&quot;&gt;/&lt;/span&gt;env.d&lt;span style=&quot;color: #000000; font-weight: bold;&quot;&gt;/&lt;/span&gt;02locale&lt;br /&gt;env-update&lt;br /&gt;&lt;span style=&quot;color: #7a0874; font-weight: bold;&quot;&gt;exit&lt;/span&gt;&lt;br /&gt;&lt;span style=&quot;color: #7a0874; font-weight: bold;&quot;&gt;source&lt;/span&gt; &lt;span style=&quot;color: #000000; font-weight: bold;&quot;&gt;/&lt;/span&gt;etc&lt;span style=&quot;color: #000000; font-weight: bold;&quot;&gt;/&lt;/span&gt;profile&lt;/div&gt;

&lt;p&gt;to set the LANG variable system-wide.&lt;/p&gt;

&lt;p&gt;So keywords, dear Google: &lt;em&gt;Umlaute, deutsch, Fragezeichen, kaputt, falsch, broken, display, zeigt, charset, Zeichensatz&lt;/em&gt; &lt;img src=&quot;https://daniel-lange.com/plugins/serendipity_event_emoticate/img/emoticons/smile.png&quot; alt=&quot;:-)&quot; class=&quot;emoticon&quot; /&gt;&lt;/p&gt;
 
    </content:encoded>

    <pubDate>Fri, 01 May 2009 21:20:00 +0000</pubDate>
    <guid isPermaLink="false">https://daniel-lange.com/archives/44-guid.html</guid>
    <category>bug</category>
<category>charset</category>
<category>gentoo</category>
<category>terminal</category>
<category>umlauts</category>
<category>xfce</category>

</item>
<item>
    <title>Getting dual-screen (xinerama) to work with Matrox G450/550 graphics cards and Xorg 1.5</title>
    <link>https://daniel-lange.com/archives/43-Getting-dual-screen-xinerama-to-work-with-Matrox-G450550-graphics-cards-and-Xorg-1.5.html</link>
            <category>Gentoo</category>
    
    <comments>https://daniel-lange.com/archives/43-Getting-dual-screen-xinerama-to-work-with-Matrox-G450550-graphics-cards-and-Xorg-1.5.html#comments</comments>
    <wfw:comment>https://daniel-lange.com/wfwcomment.php?cid=43</wfw:comment>

    <slash:comments>0</slash:comments>
    <wfw:commentRss>https://daniel-lange.com/rss.php?version=2.0&amp;type=comments&amp;cid=43</wfw:commentRss>
    

    <author>nospam@example.com (Daniel Lange)</author>
    <content:encoded>
    &lt;p&gt;Gentoo finally decided to update Xorg to 1.5. Because this has very substantial changes
against the previous version, some things break and there is a &lt;a href=&quot;http://www.gentoo.org/proj/en/desktop/x/x11/xorg-server-1.5-upgrade-guide.xml&quot; title=&quot;Gentoo Xorg 1.5 Upgrade Guide&quot;&gt;migration guide&lt;/a&gt; that you
are nagged to read. After the upgrade I found that the Matrox card in one of my servers would not
display xinerama anymore, i.e. I would get the same image on both screens only.
This is the default behaviour for the stock Xorg mga driver. It needs a proprietary HALlib
to get real dual-screen capabilities. Whilst there are a few unstable ebuilds for
&lt;code&gt;x11-drivers/xf86-video-mga&lt;/code&gt; none worked for me any better with Xinerama.
The &lt;a href=&quot;http://sources.gentoo.org/viewcvs.py/gentoo-x86/x11-drivers/xf86-video-mga/ChangeLog?view=markup&quot; title=&quot;Gentoo Changelog for xf86-video-mga&quot;&gt;Gentoo Changelog&lt;/a&gt; is useless as usual. (Gentoo ebuild ChangeLogs tend to never really tell what is fixed, if you&#039;re lucky they reference a bug with a good description. But that&#039;s only if you&#039;re really lucky.)&lt;/p&gt;

&lt;p&gt;Worse, that driver hasn&#039;t been updated by Matrox anymore since mammals took over the earth (&lt;em&gt;figuratively&lt;/em&gt; ... 2005). This is the typical unmaintained-closed-source-drivers-make-hardware-obsolete-sooner-than-later story. Luckily the cards are quite widely used and clever people from the Open Source community have written guides (&lt;a href=&quot;http://www.tuxx-home.at/projects/mga/HOWTO_mga_Xorg7&quot; title=&quot;The Original MGA HALLib Guide by Alexander Griesser&quot;&gt;Tuxx-Home&lt;/a&gt;, &lt;a href=&quot;http://fkung.wordpress.com/2007/02/08/fkung-1-matrox-0/&quot; title=&quot;Recent blog post by Alexander Griesser&quot;&gt;Fkung&lt;/a&gt;) on how to dissect the proprietary driver and combine parts of it with the Open Source version so that it can be linked into recent X servers.
Unfortunately because of the architectural changes in Xorg 1.5, following these guides will fail at the compile stage.&lt;/p&gt;

&lt;p&gt;In the &lt;a href=&quot;http://forum.tuxx-home.at/&quot; title=&quot;Matrox mga driver discussion forum&quot;&gt;Matrox Forum&lt;/a&gt; of &lt;a href=&quot;http://www.tuxx-home.at/archives/2009/03/17/T21_40_38/&quot; title=&quot;Blog entry by Alexander Griesser on his try to port the mga driver to Xorg 1.5&quot;&gt;Alexander Griesser&lt;/a&gt;, the author of the first comprehensive Matrox driver install guide linked above, people currently mostly downgrade to previous Xorg versions to work around the issue.&lt;/p&gt;

&lt;p&gt;But there is a better^Hworking solution already emerging &lt;img src=&quot;https://daniel-lange.com/plugins/serendipity_event_emoticate/img/emoticons/tongue.png&quot; alt=&quot;:-P&quot; class=&quot;emoticon&quot; /&gt; ...&lt;/p&gt;
 &lt;a class=&quot;block_level&quot; href=&quot;https://daniel-lange.com/archives/43-Getting-dual-screen-xinerama-to-work-with-Matrox-G450550-graphics-cards-and-Xorg-1.5.html#extended&quot;&gt;Continue reading &quot;Getting dual-screen (xinerama) to work with Matrox G450/550 graphics cards and Xorg 1.5&quot;&lt;/a&gt;
    </content:encoded>

    <pubDate>Sat, 25 Apr 2009 12:30:00 +0000</pubDate>
    <guid isPermaLink="false">https://daniel-lange.com/archives/43-guid.html</guid>
    <category>driver</category>
<category>gentoo</category>
<category>hallib</category>
<category>matrox</category>
<category>mga</category>
<category>ubuntu</category>
<category>xinerama</category>

</item>
<item>
    <title>kloeri announces Exherbo, another source based Linux distribution</title>
    <link>https://daniel-lange.com/archives/30-kloeri-announces-Exherbo,-another-source-based-Linux-distribution.html</link>
            <category>Linux</category>
    
    <comments>https://daniel-lange.com/archives/30-kloeri-announces-Exherbo,-another-source-based-Linux-distribution.html#comments</comments>
    <wfw:comment>https://daniel-lange.com/wfwcomment.php?cid=30</wfw:comment>

    <slash:comments>4</slash:comments>
    <wfw:commentRss>https://daniel-lange.com/rss.php?version=2.0&amp;type=comments&amp;cid=30</wfw:commentRss>
    

    <author>nospam@example.com (Daniel Lange)</author>
    <content:encoded>
    &lt;p&gt;Bryan Østergaard (aka &lt;a href=&quot;http://kloeri.livejournal.com/&quot; target=&quot;_blank&quot; title=&quot;Bryan Oestergaard&#039;s (kloeri) blog&quot;&gt;kloeri&lt;/a&gt;) &lt;a href=&quot;http://kloeri.livejournal.com/5016.html&quot; target=&quot;_blank&quot; title=&quot;Kloeri&#039;s blog: Announcing Exherbo&quot;&gt;announced&lt;/a&gt; &lt;a href=&quot;http://www.exherbo.org/&quot; target=&quot;_blank&quot; title=&quot;Exherbo homepage&quot;&gt;Exherbo&lt;/a&gt; today. He assembled a team of (ex-)Gentoo developers including Ciaran McCreesh (&lt;a href=&quot;http://ciaranm.wordpress.com/&quot; target=&quot;_blank&quot; title=&quot;Ciaranm&#039;s blog&quot;&gt;ciaranm)&lt;/a&gt;, Richard Brown (rbrown), Fernando J. Pereda (ferdy) and Alexander Færøy (&lt;a href=&quot;http://eroyf.org/&quot; target=&quot;_blank&quot; title=&quot;Eroyf&#039;s homepage&quot;&gt;eroyf&lt;/a&gt;) to build a new source based Linux distribution.&lt;/p&gt;

&lt;p&gt;They would like to overcome some of the short-commings of Gentoo both from a technical as well as from a community perspective. Obviously this is easily said and hard to really achieve, so time will tell how successful that team can be. Renaming USE-Flags to OPTIONS and merging the platform KEYWORDS (like x86, ~x86) into the Options-logic is no big deal, but getting the thousands of ebuilds^Hpackages better supported and maintained than Gentoo will be the real deal{maker|breaker}.&lt;/p&gt;

&lt;p&gt;&lt;a title=&quot;Paludis homepage&quot; target=&quot;_blank&quot; href=&quot;http://paludis.pioto.org/&quot;&gt;Paludis&lt;/a&gt;, ciaranm&#039;s package manager, supports Gentoo ebuilds and can import them into Exherbo, so there is a potential migration path sketched out.*&lt;/p&gt;

&lt;p&gt;They also add another init-system re-write (&amp;quot;Genesis&amp;quot;) to the pool. An already quite crowded pool with rather shallow water, I may add.&lt;/p&gt;

&lt;p&gt;Exherbo has nothing that is end-user-safe at the time of the announcement, so it&#039;s safe to assume kloeri&#039;s team wants to attract further development capacity &lt;img src=&quot;https://daniel-lange.com/plugins/serendipity_event_emoticate/img/emoticons/smile.png&quot; alt=&quot;:-)&quot; class=&quot;emoticon&quot; /&gt;.&lt;/p&gt;

&lt;p&gt;Browse around the &lt;a href=&quot;http://www.exherbo.org/&quot; target=&quot;_blank&quot; title=&quot;Exherbo homepage&quot;&gt;website&lt;/a&gt; or join folks in &lt;a href=&quot;irc://irc.freenode.net/#exherbo&quot; title=&quot;#exherbo on freenode.net (IRC)&quot;&gt;#exherbo&lt;/a&gt; if you&#039;re interested.&lt;/p&gt;

&lt;p&gt;I asked in #exherbo what &amp;quot;exherbo&amp;quot; means ... latin for &amp;quot;uproot&amp;quot; was the answer. How fitting.&lt;/p&gt;

&lt;h3&gt;Updates&lt;/h3&gt;

&lt;p&gt;*19.04.08: Two friendly folks wrote in to clarify that Paludis currently can only import Ebuild-builds into Exherbo via &lt;a href=&quot;http://paludis.pioto.org/clients/importare.html&quot; target=&quot;_blank&quot; title=&quot;Importare - The Paludis unpackaged package installer&quot;&gt;importare&lt;/a&gt;,  i.e. take a Gentoo build result and package it for importing into the Exherbo system through Paludis.&lt;br /&gt;23.05.08: Ciaranm wrote a blog &lt;a href=&quot;http://ciaranm.wordpress.com/2008/05/20/managing-unpackaged-packages-or-whats-this-importare-thing/&quot; target=&quot;_blank&quot; title=&quot;ciaranm&#039;s blog: Managing Unpackaged Packages, or What’s this importare thing?&quot;&gt;entry&lt;/a&gt; how to get build results into Exherbo/Paludis via importare.&lt;/p&gt;

&lt;p /&gt;
 
    </content:encoded>

    <pubDate>Mon, 19 May 2008 17:00:00 +0000</pubDate>
    <guid isPermaLink="false">https://daniel-lange.com/archives/30-guid.html</guid>
    <category>distribution</category>
<category>exherbo</category>
<category>gentoo</category>
<category>updated</category>

</item>
<item>
    <title>SSHd chroot and PAM</title>
    <link>https://daniel-lange.com/archives/11-SSHd-chroot-and-PAM.html</link>
            <category>Gentoo</category>
    
    <comments>https://daniel-lange.com/archives/11-SSHd-chroot-and-PAM.html#comments</comments>
    <wfw:comment>https://daniel-lange.com/wfwcomment.php?cid=11</wfw:comment>

    <slash:comments>1</slash:comments>
    <wfw:commentRss>https://daniel-lange.com/rss.php?version=2.0&amp;type=comments&amp;cid=11</wfw:commentRss>
    

    <author>nospam@example.com (Daniel Lange)</author>
    <content:encoded>
    &lt;p&gt;SSH with &lt;a href=&quot;http://chrootssh.sourceforge.net/index.php&quot; target=&quot;_blank&quot; title=&quot;chroot patch for sshd&quot;&gt;chroot patch&lt;/a&gt; has been working fine for a number of years. Since &lt;a href=&quot;http://www.kernel.org/pub/linux/libs/pam/&quot; target=&quot;_blank&quot; title=&quot;Linux-PAM Homepage on kernel.org&quot;&gt;PAM&lt;/a&gt; &lt;a href=&quot;http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml&quot; target=&quot;_blank&quot; title=&quot;Gentoo PAM v0.99 upgrade guide&quot;&gt;v0.99&lt;/a&gt; things have broken though, if users are chrooted with the &amp;quot;&lt;font face=&quot;courier new,courier,monospace&quot;&gt;/home/username&lt;b&gt;/./&lt;/b&gt;&lt;/font&gt;&amp;quot; syntax as their homedir.&lt;/p&gt;

&lt;p&gt;SSH sessions will just terminate immediately after successful logon. Doh.&lt;/p&gt;

&lt;p&gt;Two solutions exist:&lt;/p&gt;

&lt;ol&gt;&lt;li&gt;Put &lt;font face=&quot;courier new,courier,monospace&quot;&gt;UsePAM no&lt;/font&gt; into &lt;font face=&quot;courier new,courier,monospace&quot;&gt;/etc/ssh/sshd_config&lt;/font&gt; and use the chroot patch and &lt;b&gt;/./&lt;/b&gt; in users homedirs&lt;/li&gt;&lt;li&gt;Keep &lt;font face=&quot;courier new,courier,monospace&quot;&gt;UsePAM yes&lt;/font&gt;. &lt;font face=&quot;courier new,courier,monospace&quot;&gt;Emerge sys-auth/pam_chroot&lt;/font&gt; and add &lt;font face=&quot;courier new,courier,monospace&quot;&gt;session required pam_chroot.so&lt;/font&gt; to &lt;font face=&quot;courier new,courier,monospace&quot;&gt;/etc/pamd.d/sshd&lt;/font&gt; setup &lt;a href=&quot;http://pam-chroot.cvs.sourceforge.net/pam-chroot/pam_chroot/chroot.conf?view=markup&quot; target=&quot;_blank&quot; title=&quot;chroot.conf example and syntax&quot;&gt;/etc/security/chroot.conf&lt;/a&gt; or add a &lt;font face=&quot;courier new,courier,monospace&quot;&gt;chroot_dir=/home/username/&lt;/font&gt; to the pam_chroot.so line.&lt;br /&gt;This will currently not work for amd64 though as the &lt;a title=&quot;Gentoo bugzilla: sys-auth/pam_chroot testing request&quot; target=&quot;_blank&quot; href=&quot;http://bugs.gentoo.org/show_bug.cgi?id=185205&quot;&gt;Gentoo bug regarding pam_chroot&lt;/a&gt; has not cought any attention from the arch testers. Since July...&lt;/li&gt;&lt;/ol&gt;

&lt;p&gt;Bugging the arch testers in &lt;a title=&quot;IRC Channel #gentoo-amd64 on freenode&quot; href=&quot;irc://irc.freenode.net/#gentoo-amd64&quot;&gt;#Gentoo-amd64&lt;/a&gt; didn&#039;t help either:&lt;/p&gt;
 &lt;a class=&quot;block_level&quot; href=&quot;https://daniel-lange.com/archives/11-SSHd-chroot-and-PAM.html#extended&quot;&gt;Continue reading &quot;SSHd chroot and PAM&quot;&lt;/a&gt;
    </content:encoded>

    <pubDate>Sun, 18 Nov 2007 18:09:14 +0000</pubDate>
    <guid isPermaLink="false">https://daniel-lange.com/archives/11-guid.html</guid>
    <category>amd64</category>
<category>bug</category>
<category>chroot</category>
<category>gentoo</category>
<category>pam</category>
<category>sshd</category>
<category>updated</category>

</item>
<item>
    <title>Apache fails to start at boot, but works when started manually</title>
    <link>https://daniel-lange.com/archives/1-Apache-fails-to-start-at-boot,-but-works-when-started-manually.html</link>
            <category>Apache</category>
            <category>Gentoo</category>
    
    <comments>https://daniel-lange.com/archives/1-Apache-fails-to-start-at-boot,-but-works-when-started-manually.html#comments</comments>
    <wfw:comment>https://daniel-lange.com/wfwcomment.php?cid=1</wfw:comment>

    <slash:comments>0</slash:comments>
    <wfw:commentRss>https://daniel-lange.com/rss.php?version=2.0&amp;type=comments&amp;cid=1</wfw:commentRss>
    

    <author>nospam@example.com (Daniel Lange)</author>
    <content:encoded>
    &lt;p&gt;Since a baselayout update Apache fails to start on Gentoo at (re-)boot of a server if that server has unused ethernet interfaces.&lt;/p&gt;

&lt;p&gt;The symptom is that Apache fails to start on boot although it has been added to the runlevel with&lt;br /&gt;&lt;font face=&quot;courier new,courier,monospace&quot;&gt; rc-update add apache default&lt;/font&gt;&lt;/p&gt;

&lt;p&gt;This is caused by recent baselayouts not working properly with more than one eth and not all of them being up.&lt;br /&gt;&lt;br /&gt;Thus changing &lt;font face=&quot;courier new,courier,monospace&quot;&gt;depend() { need net ... }&lt;/font&gt; into&lt;br /&gt;&lt;font face=&quot;courier new,courier,monospace&quot;&gt;depend() { need net&lt;b&gt;.eth0&lt;/b&gt; ... }&lt;/font&gt; at the top of /etc/init.d/apache2 will help.&lt;br /&gt;&lt;br /&gt;While you&#039;re at it you could also add an nice &lt;font face=&quot;courier new,courier,monospace&quot;&gt;after urandom&lt;/font&gt; to the existing &lt;font face=&quot;courier new,courier,monospace&quot;&gt;depend ()&lt;/font&gt; construct&lt;br /&gt;and make sure apr and apache are emerged with flag urandom set. Reading from /dev/random to initialize the digest authentication mechanism (or SSL for that matter) might cause apache to block otherwise if there is not enough entropy in the random pool.&lt;br /&gt;&lt;br /&gt;&lt;/p&gt;
 
    </content:encoded>

    <pubDate>Wed, 03 Oct 2007 14:26:28 +0000</pubDate>
    <guid isPermaLink="false">https://daniel-lange.com/archives/1-guid.html</guid>
    <category>apache</category>
<category>baselayout</category>
<category>bug</category>
<category>eth</category>
<category>gentoo</category>
<category>init.d</category>
<category>network</category>

</item>

</channel>
</rss>
