Re: [gentoo-embedded] hardened uclibc gentoo stages

[Ned Ludd]

On Mon, 2004-08-23 at 16:36, Natanael Copa wrote:
> On Mon, 23 Aug 2004 01:32:20 -0400
> Ned Ludd <solar@g.o> wrote:
>
> > On Sat, 2004-08-21 at 03:12, Natanael Copa wrote:
> > > I think I finally got some time to continue with my uclibc gentoo
> > > project.
> > >
> > > As I understood it, its easiest to strat from scratch when using
> > > hardened. Is there any place I can get uclibc hardened stages to get
> > > started?
> >
> > The first generation stages were hardened ones.
> >
> > http://oc12.net/~solar/uclibc/gentoo/x86/packages
> > Lots of fixes have happened from this time.
>
> I browsed the dirs and found somehting called ipkg. What is that?

It's WiKi page needs to be updated but..
http://handhelds.org/moin/moin.cgi/Ipkg

It's something I'm testing out while in the search of an ideal way of
embedded package management. I learned about it via the OpenWrt project
( http://openwrt.org ) which I also have an active interest in. There is
no ebuild for it at this time.

Compact Flash Sub Package Management is something that has yet to really
be decided and or discussed in any meaningful manor.. 
It's can go any direction that _we_ the community need/want it to go.

This much is assumed.
We want to use the portage system as our package building system.
We don't want (perl|bash) scripts/(man|info|doc)-pages.
*.a, *.la  and *.h files will be handled by another FEATURE= somewhere
else down the line probably in ebuild.sh so it's transparent to the
packages themselves.

But we have some questions.
Do we want to remove these from packages when they are still in 
.tbz2 format?
Do we want to use (gzip|bzip2) compression for the packages themselves?
Is complying to busybox only commands a must?
What must the package management do? 
Fetch remote files and install t 
Clearly many packages will want behavior of a read-write system so
should we patch programs to behave on read-only systems?
Should we use the /tmp dir at all or stick strictly to /dev/shm/ for
security reasons?
Do we just want to use the tbz2 and write a simple emerge.sh which
handles the lowest of level functions.

Arghh.. I wish I/we could take an easy poll on our website.

So many options.. Input needed..

>
> We are using apkg
> http://www.tetrasec.net/index.cgi?page=ApkgLRP
> with our heavy modified bering (http://leaf.sf.net)
>
> It has some serious limitations that has caused some problems for us so
> we are looking for something else. We are actually talking about writing
> a new one from scratch.
>
> So I am a bit curious about this ipkg.
-- 
Ned Ludd <solar@g.o>
Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer