Gentoo Archives: gentoo-hardened

From: Javi Moreno <vierito5@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] AMD64 + hardened
Date: Sun, 03 Sep 2006 14:28:08
Message-Id: 4d192b620609030724m1f00dc3bl27656b995bf88ddf@mail.gmail.com
In Reply to: Re: [gentoo-hardened] AMD64 + hardened by Ed W
1 You can try SmartBootManager from a floppy and then boot the amd64 gentoo
2 cd.
3
4 If you're doing a 32bit install use i686 not pentium4, check if your amd64
5 support sse3, if so add -msse3.
6
7 On 9/3/06, Ed W <lists@××××××××××.com> wrote:
8 >
9 > Javi Moreno wrote:
10 > > I've succesfully installed an AMD64+hardened. Runs
11 > > apache+postfix+postgres+courier-imap+many things.
12 > >
13 > > No problems so far, u'll have to use grub-static.
14 >
15 > Thanks.
16 >
17 > I have run into some early problems booting the darn system! Perhaps
18 > someone here has some cunning ideas
19 >
20 > Basic issue is that the machine is one of the cheap hosted boxes from
21 > 1&1 internet in the UK. They pre-install one of three operating systems
22 > and then have a really neat PXE boot into a rescue OS. So basically I
23 > am booting into the debian 2.6kernel rescue boot system and then trying
24 > to bootstrap the AMD64 install from there.
25 >
26 > The big issue is that it's a 32bit install of debian and so it's quite
27 > difficult to chroot into the 64bit stage 3 because /bin/bash is not
28 > going to run under a 32 bit kernel...
29 >
30 > I have spent quite a bit of time (and ultimately failed) to figure out
31 > how to boot the CD install which has been unpacked onto a spare
32 > partition. I reformatted the syslinux boot line to work under gentoo,
33 > but it keeps reporting that it can't find the root filesystem.
34 >
35 >
36 > I think for the moment I am going to stick with the 32 bit distro
37 > because it's going to improve my options if I need the rescue boot to
38 > recover control of the machine. However, what is the best compiler
39 > option for 32bit on an AMD64? At first sight it would appear that I
40 > should use "-march=pentium4" because other athlon options don't use the
41 > SSE2? Same for the kernel architecture option?
42 >
43 > Final question: I have a 32bit 2006.1 up and running on the machine
44 > right now. What are the implications of just turning on the hardened
45 > flag and running "emerge -e"? From some discussion a few days back it
46 > seems that hardened is extremely unsupported with gcc4.1.1 right now??
47 >
48 > Is there a hardened stage 3 refresh due imminently?
49 >
50 > Cheers all
51 >
52 > Ed W
53 > --
54 > gentoo-hardened@g.o mailing list
55 >
56 >

Replies

Subject Author
Re: [gentoo-hardened] AMD64 + hardened Ed W <lists@××××××××××.com>