Re: [arch-general] Best practices for creating an Arch Docker image

2017-04-27 Thread nfnty via arch-general
I've been maintaining minimal and hardened Arch images and container configurations for several years now that are updated regularly [1]. All my images are based on the image `nfnty/arch-mini` [2] which has been made to be as minimal and automated as possible. It is built from scratch using a

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread ITwrx.org
On 04/27/2017 01:19 PM, Daniel Micay via arch-general wrote: > The PaX and grsecurity patches are no longer going to be public, so > official support in Arch Linux has ended: this is highly disappointing but not completely unexpected. thanks for your work all this time.

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Daniel Micay via arch-general
On Thu, 2017-04-27 at 20:45 +, Alexander Harrigan wrote: > It would be great if you can provide linux-hardened kernel with > everything > what KSPP has enabled by default. Even in AUR so you won't have to > rebuild it > constantly and random stack option would have more sense. > > Two question

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Alexander Harrigan
It would be great if you can provide linux-hardened kernel with everything what KSPP has enabled by default. Even in AUR so you won't have to rebuild it constantly and random stack option would have more sense. Two questions: 1\. Do you think maintaining 4.9 lts grsec kernel would be doable until

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Daniel Micay via arch-general
On Thu, 2017-04-27 at 19:12 +, Carsten Mattner wrote: > Is CopperheadOS using grsec or something derived from it? It starts from the baseline provided by Google and ports features from PaX and grsecurity as needed to the kernels. It used to use a full PaX port on ARM devices but that hasn't ma

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Carsten Mattner via arch-general
On Thu, Apr 27, 2017 at 7:12 PM, Carsten Mattner wrote: > Is CopperheadOS using grsec or something derived from it? Found the technical details, it seems to be select grsec features ported to AOSP but not a full port of grsec, which together with the other hardening looks reasonable since it's a

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Daniel Micay via arch-general
On Thu, 2017-04-27 at 19:11 +, Carsten Mattner wrote: > This is an undesirable situation for users, but I want to offer a > positive outlook on this. Ever since KSPP started, some of the > dynamics started to shift and I wager that closing off grsec will > motivate more users and developers to

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Carsten Mattner via arch-general
Is CopperheadOS using grsec or something derived from it?

Re: [arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Carsten Mattner via arch-general
This is an undesirable situation for users, but I want to offer a positive outlook on this. Ever since KSPP started, some of the dynamics started to shift and I wager that closing off grsec will motivate more users and developers to consider supporting efforts that are in mainline linux. Short-term

[arch-general] End of official PaX and grsecurity support in Arch Linux

2017-04-27 Thread Daniel Micay via arch-general
The PaX and grsecurity patches are no longer going to be public, so official support in Arch Linux has ended: https://grsecurity.net/passing_the_baton.php https://grsecurity.net/passing_the_baton_faq.php I'll be clearing out the AUR packages for PaX and grsecurity soon since the current 4.10 patc

Re: [arch-general] Best practices for creating an Arch Docker image

2017-04-27 Thread Óscar García Amor
2017-04-27 20:07 GMT+02:00 Jelle van der Waa : > On 04/27/17 at 07:52pm, Giovanni Santini via arch-general wrote: >> Good evening to everybody, >> I got interested in Docker lately and I've decided to create an >> ArchLinux image for it. >> There's one suggested from the ArchWiki (*base/archlinux*)

Re: [arch-general] Best practices for creating an Arch Docker image

2017-04-27 Thread Jelle van der Waa
On 04/27/17 at 07:52pm, Giovanni Santini via arch-general wrote: > Good evening to everybody, > I got interested in Docker lately and I've decided to create an > ArchLinux image for it. > There's one suggested from the ArchWiki (*base/archlinux*) but I wanted > to learn from scratch. Just FYI, we

[arch-general] Best practices for creating an Arch Docker image

2017-04-27 Thread Giovanni Santini via arch-general
Good evening to everybody, I got interested in Docker lately and I've decided to create an ArchLinux image for it. There's one suggested from the ArchWiki (*base/archlinux*) but I wanted to learn from scratch. So, I've then some questions: 1. As the root filesystem, I've made a repacked version of

Re: [arch-general] Arch Wiki Professional_audio

2017-04-27 Thread Ralf Mardorf
On Thu, 27 Apr 2017 22:52:30 +0600, Rashif Ray Rahman wrote: >Can you guys have a look at >https://linuxmusicians.com/viewtopic.php?f=4&t=17034 and see if you're >interested in taking over the ArchAudio project? Hi Ray, after being long-term unemployed I'll sign up tomorrow or next week. I will w

Re: [arch-general] Arch Wiki Professional_audio

2017-04-27 Thread David Runge
On 2017-04-27 22:52:30 (+0600), Rashif Ray Rahman wrote: > Great to know there was a talk about Arch pro-audio in LAC! I think there > is a lot of information there that you can add to the wiki. I did a rewrite > once but as Ralf said, rewriting again can be quite difficult. Yeah, there will be eve

Re: [arch-general] Arch Wiki Professional_audio

2017-04-27 Thread Rashif Ray Rahman
Great to know there was a talk about Arch pro-audio in LAC! I think there is a lot of information there that you can add to the wiki. I did a rewrite once but as Ralf said, rewriting again can be quite difficult. Ralf, David, and anyone else invested in pro-audio now -- let me hijack this thread a

Re: [arch-general] arch-audit didn't survive the openssl upgrade to 1.1.0

2017-04-27 Thread Christian Rebischke
On Thu, Apr 27, 2017 at 03:46:31PM +0200, Ricardo Band wrote: > Ahoi, > > arch-audit in version 0.1.8-2 still looks for openssl 1.0.0: > > arch-audit: error while loading shared libraries: libssl.so.1.0.0: > cannot open shared object file: No such file or directory > > After installing opens

Re: [arch-general] arch-audit didn't survive the openssl upgrade to 1.1.0

2017-04-27 Thread Jelle van der Waa
On 04/27/17 at 03:46pm, Ricardo Band wrote: > Ahoi, > > arch-audit in version 0.1.8-2 still looks for openssl 1.0.0: > > arch-audit: error while loading shared libraries: libssl.so.1.0.0: > cannot open shared object file: No such file or directory > > After installing openssl-1.0 it works ag

[arch-general] arch-audit didn't survive the openssl upgrade to 1.1.0

2017-04-27 Thread Ricardo Band
Ahoi, arch-audit in version 0.1.8-2 still looks for openssl 1.0.0: arch-audit: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory After installing openssl-1.0 it works again. I see 2 solutions here. Update arch-audit to use OpenS