So after reading through the kernel@ mails there are an awful lot of people coming up with the same scenario over and over, or the same questions and comments.
\nI thought I would post a blog just to summarize and to also suggest some migration models for those of you who are struggling.<\/p>\n
So lets start at the top. useraddress.patch – Choice for user space memory limits. So, what does this mean? grsec For some people this will pose a problem. Specifically with grsec. However I would like to strongly suggest a migration away from gentoo-sources-2.4 towards one of the following based on your requirements:<\/p>\n A security hardened, grsec enhanced and stable kernel: A stable, reliable 2.4 based kernel: A featureful, stable, and desktop-orientated 2.6 kernel: Please be aware that gentoo-sources-2.4 is likely to go on another diet within the next 6 months or so, with the long-term goal of it being completely removed.<\/p>\n Almost all questions should be answered above, although if you are required to stay on a 2.4 kernel (but would like to run 2.6) due to the fact that a specific driver isnt available for 2.6 please dont keep to yourself. Drop a mail to kernel@gentoo.org and ask us. It is very likely we can help you out.<\/p>\n So, to summarise. OpenSWAN is the one real requirement still provided on a 2.4 kernel by gentoo-sources which isnt included in other sources. If you are in this situation please drop a mail to us so that we might find out more and proceed appropriately \ud83d\ude42<\/p>\n So, panic over. You can all go enjoy a nice cup of coffee while your new kernels compile \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":" So after reading through the kernel@ mails there are an awful lot of people coming up with the same scenario over and over, or the same questions and comments. I thought I would post a blog just to summarize and to also suggest some migration models for those of you who are struggling. So lets … Continue reading 18 Jul, 2005 GWN<\/span><\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,6,5],"tags":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/posts\/12"}],"collection":[{"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/comments?post=12"}],"version-history":[{"count":1,"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/posts\/12\/revisions"}],"predecessor-version":[{"id":15,"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/posts\/12\/revisions\/15"}],"wp:attachment":[{"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/media?parent=12"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/categories?post=12"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.gentoo.org\/johnm\/wp-json\/wp\/v2\/tags?post=12"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nWe are not dropping 2.4 support in gentoo<\/strong>.
\ngentoo-sources (2.4) is a vanilla 2.4 kernel with the following patches applied:<\/p>\n
\nlckbase-2.4.28_rc3.patch – Patch to select the O(1) schedular, preempt etc.
\nreadlatency.patch – elevator improvements to increase read times.
\necc-20030225.patch – Properly implemented ECC memory management\/error reporting.
\nOpenSWAN-2.1.4+natt.patch – the OpwnSWAN IPSEC patchset, with NAT-T support.
\nbootsplash-3.0.7.patch – Graphical bootsplash support.
\ndeviceMapper-1.00.17.patch – support for the Device Mapper block device. Required for LVM\/EVMS
\nsuperMount.1.2.11a.patch – Removable\/automount style device which is useful for removable media
\nlinux-ntfs-2.1.6b.patch – Windows NTFS fs, with improved write support.
\nsquashfs-1.3r3.patch – the SquashFS compressed read-only device driver.
\nGRSecurity-2.0.2.patch – For enhanced (ACL) security.
\ncryptoloop-jari-2.4.22.0.patch – A crypt aware loop device.
\nGCC-optimizations.patch – Add -march support.
\nspeakup-20040313.patch – The voice synthesiser. very useful for blind users.
\nGentooBootsplash – The gentoo derives bootsplash driver.<\/p>\n
\nWell, following recent input we have decided to keep gentoo-sources-2.4 maintained in the tree for a little while longer, although with a much lighter patchset.
\nThe following are to be dropped:<\/p>\n
\ncryptoloop
\nuseraddress
\nsupermount<\/p>\n
\nhardened-sources-2.4
\nhardened-sources-2.6<\/p>\n
\n(Now I assume you need 2.4 for a better reason than “I’m lazy”)
\nvanilla-sources-2.4
\nhardened-sources-2.4 (without enabling grsec)<\/p>\n
\ngentoo-sources-2.6
\nI strongly suggest this for people which want responsiveness, ease of use and functionality.
\nAs you may notice the supermount patch is being dropped. The desired approach is most certainly to go with udev\/dbus\/hal and a 2.6 kernel with hotplug. This will be much more user-friendly.<\/p>\n
\n“I want to move to 2.4 but XYZ doesnt work” : mail us.
\n“I cant move to 2.6 because this is production, and I want grsec” : hardened-sources
\n“I dont want 2.6 you goofs, I need OpenAFS support” : Then stick with 2.4, but please consider moving to vanilla-sources.<\/p>\n