Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

[Volker Armin Hemmann]

On Samstag 05 Dezember 2009, Philip Webb wrote:
> 091205 Volker Armin Hemmann wrote:
> > On Samstag 05 Dezember 2009, Philip Webb wrote:
> >> Also, I never do a bald 'emerge world'. I look thro' the output of
> >> 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs
> >> which have changed, run 'emerge -Dup world' to see what order of
> >> emerging is recommended, then individually 'emerge -pv <pkg>' & -- if
> >> all looks well -- 'emerge <pkg>'. Yes, it takes a bit longer for my
> >> weekly update session (tomorrow Sat), but I don't risk the nightmare of
> >> reducing my system to chaos with all the extra frantic labor which would
> >> result.
> >
> > which f*cks up world and is a very bad idea.
> > Really, emerging every single package?
> > 'world' is useless for you and cleaning unused deps a nightmare.
>
> Please read what I said & hopefully think briefly before responding.
> If the pkg is already in 'world', it's 'emerge <pkg>';
> if not -- the more frequent case -- , it's 'emerge -1 <pkg>'.
> That keeps everything in order (yes, you have to watch what you do).

no, it isn't.

you are adding deps to world file. Deps aren't there until you emerge them 
manually.

Look up how world works.

> Yes, I do have 'FEATURES="buildsyspkg"' in 'make.conf', of course,
> but I've never needed to make use of those emergency files.

buildsyspkg is not enough.

>
> My general point is that Gentoo is about managing your own system
> rather than relying on someone out there to do it for you;

there are smart ways to do so and there are stupid ways.


> IMO binary distros are closer to using M$ or Apple than they are to Gentoo
> & relying on 'emerge world' is closer to binary distros than to true
>  Gentoo. 'world' is a less important part of Gentoo than many users
>  believe
wrong in all counts. Gentoo is about 'giving good tools to get the desired 
result'. You are not using the tools. Instead you are working against the 
tools and make your life and the work of the tools a lot harder.

And world is important. world is the difference between 'installed manually' 
and 'just a dependency'. What you are doing fucks this up. Result:
portage can not figure which package was installed because you want it and 
which one is just a dependency that can be removed by depclean.


>  : IIRC it was imitated from FreeBSD by Gentoo's founder in the
>  early days. My recommendation is to put a bit more time into regular
>  updates

no, your advise is to do something stupid that results in a lot more work for 
no (!) reward. You gain nothing doing it your way. You just screw up your 
system.

> & thereby reduce the chance that you'll need to fix a major breakdown;

no.
You don't reduce anything. In fact, your way increases the chances of an epic 
fuckup.

I hope nobody is following your advise.