[gentoo-hardened] Re: Tips for upgrading to the current stable gentoo hardened?

[7v5w7go9ub0o]

On 06/29/11 17:39, Tom Hendrikx wrote:
> On 29/06/11 16:47, 7v5w7go9ub0o wrote:

>>
>> 2. At this point, the 'clearest' way to build a hardened box from
>> scratch seems to go a few steps into the Gentoo handbook, then
>> migrate using the steps above. Not ideal, but until the
>> documentation can be refined, how about either putting these steps
>>  into the handbook, or alternatively a reference *in the handbook*
>>  to wherever you find a home for these steps (e.g. QandA).
>
> I built a hardened box last week by grabbing a hardened autobuild,
> then following the regular handbook for my arch. Above steps are only
> needed when you start from a regular stage, or when you are
> converting a regular install.
>
> Usage of autobuilds is missing in the handbook now, but iirc there
> are some open bugs on getting this changed.
>
> -- Regards, Tom
>
>

Geeze... I've built a couple of hardened boxes from scratch; most
recently two or three years ago; never *heard* of autobuild. Maybe my
experience precedes it (I was using experimental.org).

Perhaps the perfect (as in the traditionally excellent Gentoo
documentation) has become the enemy of the good (the documentation of the
autobuild is good, but not perfect enough to be entered into official docs.)

If "Q and A" is now the official hardened documentation, then 'twould be
nice if someone put a couple of imperfect sentences in there about
autobuild.

Good to know; so autobuilds are probably the clearest way to build a
hardened box. Thanks for posting.

(p.s. I think of ALL of the work that Zorry, Blueness, and a myriad of
other folks put into bringing Hardened Gentoo up to date - truly
*heroic* contributions - and I now fear that a lack of documentation will
result in a loss of the benefit of all of that work)

killall rant