| View previous topic :: View next topic |
| Author |
Message |
brundage
Tux's lil' helper
Joined: 02 Dec 2004
Posts: 149
|
 Posted: Tue Jul 23, 2024 5:21 pm Post subject: emerge keeps trying to install gnome-keyring |
 |
|
I'm trying to get rid of gnome-keyring but portage insists on keeping it around.
I have the gnome-keyring USE flag unset:
| Code: | 0 blaze /root # grep -r gnome-keyring /etc/portage
/etc/portage/package.use/obliterate-gnome-keyring:sys-auth/pambase -gnome-keyring
/etc/portage/make.conf:USE="$USE -gnome-keyring" # bye felicia
|
... but pambase and secret-service still wants to bring it in even though the flag explicitly unset:
| Code: | 0 blaze /root # equery d gnome-keyring
* These packages depend on gnome-keyring:
sys-auth/pambase-20240128 (gnome-keyring ? gnome-base/gnome-keyring[pam])
virtual/secret-service-0 (gnome-base/gnome-keyring)
|
If I remove gnome-keyring emerge wants to bring it back.
| Code: | 0 blaze /root # emerge --unmerge gnome-keyring
* This action can remove important packages! In order to be safer, use
* `emerge -pv --depclean <atom>` to check for reverse dependencies before
* removing packages.
gnome-base/gnome-keyring
selected: 42.1-r2
protected: none
omitted: none
<snip>
|
| Code: | 0 blaze /root # emerge -p @world
These are the packages that would be merged, in order:
Calculating dependencies... done!
Dependency resolution took 26.09 s (backtrack: 0/20).
[ebuild N ] gnome-base/gnome-keyring-42.1-r2::gentoo USE="pam (-selinux) ssh-agent -systemd -test -valgrind" 0 KiB
Total: 1 package (1 new), Size of downloads: 0 KiB
|
Even if I disallow it on the command line:
| Code: | 0 blaze /root # USE=-gnome-keyring emerge -p @world
These are the packages that would be merged, in order:
Calculating dependencies... done!
Dependency resolution took 27.23 s (backtrack: 0/20).
[ebuild N ] gnome-base/gnome-keyring-42.1-r2::gentoo USE="pam (-selinux) ssh-agent -systemd -test -valgrind" 0 KiB
Total: 1 package (1 new), Size of downloads: 0 KiB
|
equery correctly excludes gnome-keyring
| Code: | 0 blaze /root # equery u pambase
[ Legend : U - final flag setting for installation]
[ : I - package is installed with flag ]
[ Colors : set, unset ]
* Found these USE flags for sys-auth/pambase-20240128:
U I
- - caps : Use Linux capabilities library to control privilege
- - debug : Enable debug information logging on syslog(3) for all the
modules supporting this in the system authentication and
system login stacks.
+ + elogind : Use pam_elogind module to register user sessions with
elogind.
- - gnome-keyring : Enable support for storing passwords via gnome-keyring
- - homed : Use pam_systemd_home module to manage home directories
with the systemd-homed service
+ + minimal : Disables the standard PAM modules that provide extra
information to users on login; this includes pam_lastlog,
pam_motd, pam_mail and other similar modules. This might
not be a good idea on a multi-user system but could reduce
slightly the overhead on single-user non-networked
systems.
- - mktemp : Enable pam_mktemp module on system auth stack for session
handling. This module creates a private temporary
directory for the user, and sets TMP and TMPDIR
accordingly.
+ + nullok : Enable the nullok option with the pam_unix module. This
allows people to login with blank passwords.
- - pam_krb5 : Enable pam_krb5 module on system auth stack, as an
alternative to pam_unix. If Kerberos authentication
succeeds, only pam_unix will be ignorde, and all the other
modules will proceed as usual, including Gnome Keyring and
other session modules. It requires sys-libs/pam as PAM
implementation.
+ + passwdqc : Enable pam_passwdqc module on system auth stack for
password quality validation. This module produces
warnings, rejecting or providing example passwords when
changing your system password. It is used by default by
OpenWall GNU/*/Linux and by FreeBSD.
- - pwhistory : Enable pam_pwhistory module on system auth stack to save
the last passwords for each user in order to force
password change history and keep the user from alternating
between the same password too frequently.
- - pwquality : Enable pam_pwquality module on system auth stack for
passwd quality validation. It is used by default by Fedora
GNU/*/Linux.
- - securetty : Enable pam_securetty module in the login stack. Not
generally relevant anymore as the login stack only refers
to local logins and local terminals imply secure access in
the first place.
+ + sha512 : Switch Linux-PAM's pam_unix module to use sha512 for
passwords hashes rather than MD5. This option requires
sys-libs/pam version 1.0.1 built against sys-libs/glibc
version 2.7, if it's built against an earlier version, it
will silently be ignored, and MD5 hashes will be used. All
the passwords changed after this USE flag is enabled will
be saved to the shadow file hashed using SHA512 function.
The password previously saved will be left untouched.
Please note that while SHA512-hashed passwords will still
be recognised if the USE flag is removed, the shadow file
will not be compatible with systems using an earlier glibc
version.
- - sssd : Add System Security Services Daemon (sys-auth/sssd)
support via pam_sss.
- - systemd : Use pam_systemd module to register user sessions in the
systemd control group hierarchy.
- - yescrypt : Switch Linux-PAM's pam_unix module to use yescrypt for
passwords hashes rather than MD5
|
What am I missing here?
_________________
Unscrambler of Eggs
he/him
Last edited by brundage on Tue Jul 23, 2024 5:34 pm; edited 2 times in total |
|
| Back to top |
|
 |
brundage
Tux's lil' helper
Joined: 02 Dec 2004
Posts: 149
|
| Posted: Tue Jul 23, 2024 5:22 pm Post subject: |
|
|
| Code: | 0 blaze /root # emerge --info
Portage 3.0.65 (python 3.12.3-final-0, default/linux/amd64/23.0/desktop, gcc-13, glibc-2.39-r6, 6.6.38-gentoo x86_64)
=================================================================
System uname: Linux-6.6.38-gentoo-x86_64-Intel-R-_Core-TM-_i5-6500_CPU_@_3.20GHz-with-glibc2.39
KiB Mem: 64121996 total, 54254000 free
KiB Swap: 33553404 total, 33553404 free
Timestamp of repository gentoo: Wed, 17 Jul 2024 14:30:00 +0000
Head commit of repository gentoo: ba5bc64cb546e534da70852b3fb939f14922c068
Head commit of repository fatty: 93e5d4d6e3d40d21de6c9087382dd88dab0303b7
Head commit of repository steam-overlay: fc142da83eb4eb440c787e9f1befe5945b09f485
sh bash 5.2_p26-r6
ld GNU ld (Gentoo 2.42 p3) 2.42.0
app-misc/pax-utils: 1.3.7::gentoo
app-shells/bash: 5.2_p26-r6::gentoo
dev-build/autoconf: 2.71-r7::gentoo
dev-build/automake: 1.16.5-r2::gentoo
dev-build/cmake: 3.28.5::gentoo
dev-build/libtool: 2.4.7-r4::gentoo
dev-build/make: 4.4.1-r1::gentoo
dev-build/meson: 1.4.1::gentoo
dev-lang/perl: 5.38.2-r3::gentoo
dev-lang/python: 3.12.3-r1::gentoo
dev-lang/rust: 1.77.1::gentoo
sys-apps/baselayout: 2.15::gentoo
sys-apps/openrc: 0.54.2::gentoo
sys-apps/sandbox: 2.38::gentoo
sys-devel/binutils: 2.42-r1::gentoo
sys-devel/binutils-config: 5.5::gentoo
sys-devel/clang: 17.0.6::gentoo
sys-devel/gcc: 13.3.1_p20240614::gentoo
sys-devel/gcc-config: 2.11::gentoo
sys-devel/llvm: 17.0.6::gentoo
sys-kernel/linux-headers: 6.6-r1::gentoo (virtual/os-headers)
sys-libs/glibc: 2.39-r6::gentoo
Repositories:
gentoo
location: /usr/portage
sync-type: rsync
sync-uri: rsync://rsync.gentoo.org/gentoo-portage
priority: -1000
volatile: True
sync-rsync-verify-metamanifest: yes
sync-rsync-verify-max-age: 3
sync-rsync-extra-opts:
sync-rsync-verify-jobs: 1
fatty
location: /usr/local/portage/fatty
sync-type: git
sync-uri: https://github.com/brundage/gentoo-fatty-portage-overlay.git
masters: gentoo
volatile: True
steam-overlay
location: /usr/local/portage/steam-overlay
sync-type: git
sync-uri: https://github.com/anyc/steam-overlay/
masters: gentoo
priority: 50
volatile: True
ABI="amd64"
ABI_X86="64 32"
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
ACCEPT_PROPERTIES="*"
ACCEPT_RESTRICT="*"
ADA_TARGET="gcc_12"
APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias"
ARCH="amd64"
AUTOCLEAN="no"
BINPKG_COMPRESS="bzip2"
BINPKG_FORMAT="xpak"
BINPKG_GPG_SIGNING_BASE_COMMAND="/usr/bin/flock /run/lock/portage-binpkg-gpg.lock /usr/bin/gpg --sign --armor [PORTAGE_CONFIG]"
BINPKG_GPG_SIGNING_DIGEST="SHA512"
BINPKG_GPG_VERIFY_BASE_COMMAND="/usr/bin/gpg --verify --batch --no-tty --no-auto-check-trustdb --status-fd 2 [PORTAGE_CONFIG] [SIGNATURE]"
BINPKG_GPG_VERIFY_GPG_HOME="/etc/portage/gnupg"
BOOTSTRAP_USE="unicode pkg-config split-usr xml python_targets_python3_12 python_single_target_python3_12 gil multilib zstd cet"
BROOT=""
CALLIGRA_FEATURES="karbon sheets words"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=broadwell -mtune=generic"
CFLAGS_amd64="-m64"
CFLAGS_x32="-mx32"
CFLAGS_x86="-m32 -mfpmath=sse"
CHOST="x86_64-pc-linux-gnu"
CHOST_amd64="x86_64-pc-linux-gnu"
CHOST_x32="x86_64-pc-linux-gnux32"
CHOST_x86="i686-pc-linux-gnu"
CLEAN_DELAY="5"
COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog"
COLLISION_IGNORE="/boot/dtbs/* /lib/modules/*"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3"
CXXFLAGS="-O2 -pipe -march=broadwell -mtune=generic"
DEFAULT_ABI="amd64"
DISTDIR="/usr/portage/distfiles"
EDITOR="vim"
ELIBC="glibc"
EMERGE_DEFAULT_OPTS="--alphabetical --misspell-suggestions y --quiet-build --verbose --verbose-conflicts --changed-use --complete-graph --deep --keep-going=y --newuse --update --with-bdeps=y"
EMERGE_WARNING_DELAY="10"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
EPREFIX=""
EROOT="/"
ESYSROOT="/"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg-live clean-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news parallel-fetch pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FETCHCOMMAND="wget -t 3 -T 60 --passive-ftp -O "${DISTDIR}/${FILE}" "${URI}""
FETCHCOMMAND_RSYNC="rsync -LtvP "${URI}" "${DISTDIR}/${FILE}""
FETCHCOMMAND_SFTP="bash -c "x=\${2#sftp://} ; host=\${x%%/*} ; port=\${host##*:} ; host=\${host%:*} ; [[ \${host} = \${port} ]] && port= ; eval \"declare -a ssh_opts=(\${3})\" ; exec sftp \${port:+-P \${port}} \"\${ssh_opts[@]}\" \"\${host}:/\${x#*/}\" \"\$1\"" sftp "${DISTDIR}/${FILE}" "${URI}" "${PORTAGE_SSH_OPTS}""
FETCHCOMMAND_SSH="bash -c "x=\${2#ssh://} ; host=\${x%%/*} ; port=\${host##*:} ; host=\${host%:*} ; [[ \${host} = \${port} ]] && port= ; exec rsync --rsh=\"ssh \${port:+-p\${port}} \${3}\" -avP \"\${host}:/\${x#*/}\" \"\$1\"" rsync "${DISTDIR}/${FILE}" "${URI}" "${PORTAGE_SSH_OPTS}""
FFLAGS="-O2 -pipe"
GCC_SPECS=""
GENTOO_MIRRORS="http://distfiles.gentoo.org"
GPG_VERIFY_GROUP_DROP="nogroup"
GPG_VERIFY_USER_DROP="nobody"
GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 ntrip navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox"
GRUB_PLATFORMS=""
GSETTINGS_BACKEND="dconf"
HISTDIR="/root/.histdir"
HISTFILE="/root/.histdir/8227"
HISTSIZE="1000"
HOME="/root"
INFOPATH="/usr/share/gcc-data/x86_64-pc-linux-gnu/13/info:/usr/share/binutils-data/x86_64-pc-linux-gnu/2.42/info:/usr/share/autoconf-2.71/info:/usr/share/automake-1.16.5/info:/usr/share/info"
INPUT_DEVICES="evdev joystick libinput"
IUSE_IMPLICIT="abi_x86_64 prefix prefix-guest prefix-stack"
KERNEL="linux"
LANG="C"
LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text"
LC_CTYPE="C.UTF-8"
LC_MESSAGES="C"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs"
LDFLAGS_amd64="-m elf_x86_64"
LDFLAGS_x32="-m elf32_x86_64"
LDFLAGS_x86="-m elf_i386"
LESS="-XmsR -Pm ?f%f:stdio. ?lbLine ?lb%lb ?pb(?pb%pb\% of ?pb%B bytes)"
LESSOPEN="|lesspipe %s"
LEX="flex"
LIBDIR_amd64="lib64"
LIBDIR_x32="libx32"
LIBDIR_x86="lib"
LINGUAS="en_US en"
LOGNAME="root"
LUA_SINGLE_TARGET="lua5-1"
LUA_TARGETS="lua5-1"
MAKEOPTS="-j5"
MANPAGER="manpager"
MANPATH="/root/man:/usr/share/man"
MULTILIB_ABIS="amd64 x86"
MULTILIB_STRICT_DENY="64-bit.*shared object"
MULTILIB_STRICT_DIRS="/lib32 /lib /usr/lib32 /usr/lib /usr/kde/*/lib32 /usr/kde/*/lib /usr/qt/*/lib32 /usr/qt/*/lib /usr/X11R6/lib32 /usr/X11R6/lib"
MULTILIB_STRICT_EXEMPT="(perl5|gcc|binutils|eclipse-3|debug|portage|udev|systemd|clang|python-exec|llvm)"
NPM_CONFIG_GLOBALCONFIG="/etc/npm/npmrc"
OFFICE_IMPLEMENTATION="libreoffice"
OLDPWD="/usr/local/portage/fatty"
OPENCL_PROFILE="nvidia"
OPENGL_PROFILE="xorg-x11"
PAGER="less"
PATH="/root/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/opt/bin"
PGPPATH="/root/.pgp"
PHP_TARGETS="php8-2"
PKGDIR="/usr/portage/packages"
PORTAGE_ARCHLIST="alpha amd64 amd64-linux arm arm-linux arm64 arm64-linux arm64-macos hppa ia64 loong m68k mips ppc ppc-macos ppc64 ppc64-linux riscv riscv-linux s390 sparc x64-macos x64-solaris x86 x86-linux x86-macos"
PORTAGE_BIN_PATH="/usr/lib/portage/python3.12"
PORTAGE_COMPRESS_EXCLUDE_SUFFIXES="css gif htm[l]? jp[e]?g js pdf png"
PORTAGE_CONFIGROOT="/"
PORTAGE_DEBUG="0"
PORTAGE_DEPCACHEDIR="/var/cache/edb/dep"
PORTAGE_ELOG_CLASSES="log warn error"
PORTAGE_ELOG_MAILFROM="portage@localhost"
PORTAGE_ELOG_MAILSUBJECT="[portage] ebuild log for ${PACKAGE} on ${HOST}"
PORTAGE_ELOG_MAILURI="root"
PORTAGE_ELOG_SYSTEM="echo save"
PORTAGE_FETCH_CHECKSUM_TRY_MIRRORS="5"
PORTAGE_FETCH_RESUME_MIN_SIZE="350K"
PORTAGE_GID="250"
PORTAGE_GPG_SIGNING_COMMAND="gpg --sign --digest-algo SHA256 --clearsign --yes --default-key "${PORTAGE_GPG_KEY}" --homedir "${PORTAGE_GPG_DIR}" "${FILE}""
PORTAGE_INST_GID="0"
PORTAGE_INST_UID="0"
PORTAGE_INTERNAL_CALLER="1"
PORTAGE_LOGDIR_CLEAN="find "${PORTAGE_LOGDIR}" -type f ! -name "summary.log*" -mtime +7 -delete"
PORTAGE_NICENESS="5"
PORTAGE_OVERRIDE_EPREFIX=""
PORTAGE_PYM_PATH="/usr/lib/python3.12/site-packages"
PORTAGE_PYTHONPATH="/usr/lib/python3.12/site-packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_RSYNC_RETRIES="-1"
PORTAGE_SCHEDULING_POLICY="idle"
PORTAGE_SYNC_STALE="30"
PORTAGE_TMPDIR="/var/tmp"
PORTAGE_TRUST_HELPER="/usr/bin/getuto"
PORTAGE_VERBOSE="1"
PORTAGE_WORKDIR_MODE="0700"
PORTAGE_XATTR_EXCLUDE="btrfs.* security.evm security.ima security.selinux system.nfs4_acl user.apache_handler user.Beagle.* user.dublincore.* user.mime_encoding user.xdg.*"
PORT_LOGDIR="/var/log/portage/builds"
POSTGRES_TARGETS="postgres15"
PROFILE_ONLY_VARIABLES="ARCH ELIBC IUSE_IMPLICIT KERNEL USE_EXPAND_IMPLICIT USE_EXPAND_UNPREFIXED USE_EXPAND_VALUES_ARCH USE_EXPAND_VALUES_ELIBC USE_EXPAND_VALUES_KERNEL"
PS1="%? %{%}%B%m%b%{%} %2C %# "
PWD="/root"
PYTHONDONTWRITEBYTECODE="1"
PYTHON_SINGLE_TARGET="python3_12"
PYTHON_TARGETS="python3_12"
QT_GRAPHICSSYSTEM="raster"
RESUMECOMMAND="wget -c -t 3 -T 60 --passive-ftp -O "${DISTDIR}/${FILE}" "${URI}""
RESUMECOMMAND_RSYNC="rsync -LtvP "${URI}" "${DISTDIR}/${FILE}""
RESUMECOMMAND_SSH="bash -c "x=\${2#ssh://} ; host=\${x%%/*} ; port=\${host##*:} ; host=\${host%:*} ; [[ \${host} = \${port} ]] && port= ; exec rsync --rsh=\"ssh \${port:+-p\${port}} \${3}\" -avP \"\${host}:/\${x#*/}\" \"\$1\"" rsync "${DISTDIR}/${FILE}" "${URI}" "${PORTAGE_SSH_OPTS}""
ROOT="/"
ROOTPATH="/usr/local/sbin:/usr/local/bin:/usr/bin:/opt/bin:/usr/lib/llvm/17/bin"
RPMDIR="/var/cache/rpm"
RUBY_TARGETS="ruby31 ruby32"
SAVEHIST="1000"
SHELL="/bin/zsh"
SHLVL="1"
SYMLINK_LIB="no"
SYSROOT="/"
TERM="xterm-256color"
TMPDIR="/root/tmp"
TWISTED_DISABLE_WRITING_OF_PLUGIN_CACHE="1"
UNINSTALL_IGNORE="/usr/lib32"
USE="X a52 aac acl acpi adns aes afp alsa amd64 amr archive avx avx2 bluray branding btpclient bzip2 cairo calendar cdda cddb cdparanoia cdr cet cjk crypt css cuda cups dbus dga dhcpcd directfb doc dri dtrace dts dvd dvdr egl elogind encode exif f16c fbcon ffmpeg filecaps flac fma3 fontconfig foomaticdb fuse gd gdbm geopi gif gimp git gme google gphoto2 gpm gstreamer gtk gtk3 gui gzip hardened i965 iconv icu id3tag idn imagemagick inotify ios ipv6 javascript jit joystick jpeg jpeg2k kf6compat lcms libass libdrm libnotify libtirpc lm_sensors mad matroska minimal mmx mmxext mng modemmanager mozilla mp3 mp4 mpeg mpinimal mpx mtp multilib ncurses nfs nfsv4 nfsv41 nls nptl nsplugin numa nvenc offensive ofx ogg opencv opengl openmp opus pam pango pclmul pcre pdf pie png policykit popcnt postgres postscript ppds pulseaudio python raw rdesktop readline rss ruby savedconfig sdl seccomp session sharedmem smp sna snmp sockets sound spell spice sqlite sqlite3 sse sse2 sse3 sse4_1 sse4_2 ssl ssse3 startup-notification svg syslog test-rust theora threads tiff tinfo truetype udev udisks unicode upnp upnp-av upower usb v4l vim-syntax vlc vorbis vulkan webp websocket wifi wxwidgets x264 x265 xattr xcb xft xinerama xkb xml xosd xscreensaver xv xvid zlib zsh-completion" ABI_X86="64 32" ADA_TARGET="gcc_12" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 ntrip navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" INPUT_DEVICES="evdev joystick libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-2" POSTGRES_TARGETS="postgres15" PYTHON_SINGLE_TARGET="python3_12" PYTHON_TARGETS="python3_12" RUBY_TARGETS="ruby31 ruby32" VIDEO_CARDS="nvidia intel i965" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
USER="root"
USERLAND="GNU"
USE_EXPAND="ABI_MIPS ABI_S390 ABI_X86 ADA_TARGET ALSA_CARDS AMDGPU_TARGETS APACHE2_MODULES APACHE2_MPMS CALLIGRA_FEATURES CAMERAS COLLECTD_PLUGINS CPU_FLAGS_ARM CPU_FLAGS_PPC CPU_FLAGS_X86 CURL_QUIC CURL_SSL ELIBC FFTOOLS GPSD_PROTOCOLS GRUB_PLATFORMS INPUT_DEVICES KERNEL L10N LCD_DEVICES LIBREOFFICE_EXTENSIONS LLVM_SLOT LLVM_TARGETS LUA_SINGLE_TARGET LUA_TARGETS MONKEYD_PLUGINS NGINX_MODULES_HTTP NGINX_MODULES_MAIL NGINX_MODULES_STREAM OFFICE_IMPLEMENTATION OPENMPI_FABRICS OPENMPI_OFED_FEATURES OPENMPI_RM PERL_FEATURES PHP_TARGETS POSTGRES_TARGETS PYTHON_SINGLE_TARGET PYTHON_TARGETS QEMU_SOFTMMU_TARGETS QEMU_USER_TARGETS RUBY_TARGETS SANE_BACKENDS UWSGI_PLUGINS VIDEO_CARDS VOICEMAIL_STORAGE XTABLES_ADDONS"
USE_EXPAND_HIDDEN="ABI_MIPS ABI_S390 CPU_FLAGS_ARM CPU_FLAGS_PPC ELIBC KERNEL"
USE_EXPAND_IMPLICIT="ARCH ELIBC KERNEL"
USE_EXPAND_UNPREFIXED="ARCH"
USE_EXPAND_VALUES_ARCH="alpha amd64 amd64-linux arm arm64 arm64-macos hppa ia64 loong m68k mips ppc ppc64 ppc64-linux ppc-macos riscv s390 sparc x64-macos x64-solaris x86 x86-linux"
USE_EXPAND_VALUES_ELIBC="bionic Darwin glibc mingw musl SunOS"
USE_EXPAND_VALUES_KERNEL="Darwin linux SunOS"
USE_ORDER="env:pkg:conf:defaults:pkginternal:features:repo:env.d"
VIDEO_CARDS="nvidia intel i965"
XDG_CONFIG_DIRS="/etc/xdg"
XDG_DATA_DIRS="/usr/local/share:/usr/share:/etc/eselect/wine/share"
XFCE_PLUGINS="brightness clock power"
XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
ac_cv_c_undeclared_builtin_options="none needed"
enable_year2038="no"
gl_cv_compiler_check_decl_option="-Werror=implicit-function-declaration"
gl_cv_func_getcwd_path_max="yes" |
_________________
Unscrambler of Eggs
he/him |
|
| Back to top |
|
|
grknight
Retired Dev
Joined: 20 Feb 2015
Posts: 1832
|
| Posted: Tue Jul 23, 2024 5:54 pm Post subject: |
|
|
| brundage wrote: | ... but pambase and secret-service still wants to bring it in even though the flag explicitly unset:
| Code: | 0 blaze /root # equery d gnome-keyring
* These packages depend on gnome-keyring:
sys-auth/pambase-20240128 (gnome-keyring ? gnome-base/gnome-keyring[pam])
virtual/secret-service-0 (gnome-base/gnome-keyring)
|
|
virtual/secret-service requires either gnome-base/gnome-keyring or app-admin/keepassxc to be installed. There is no magic to it and no flags control it. gnome-keyring is first in the list so it is automatically preferred by the virtual unless another implementation is already installed. |
|
| Back to top |
|
|
brundage
Tux's lil' helper
Joined: 02 Dec 2004
Posts: 149
|
| Posted: Tue Jul 23, 2024 6:06 pm Post subject: |
|
|
| grknight wrote: | | brundage wrote: | ... but pambase and secret-service still wants to bring it in even though the flag explicitly unset:
| Code: | 0 blaze /root # equery d gnome-keyring
* These packages depend on gnome-keyring:
sys-auth/pambase-20240128 (gnome-keyring ? gnome-base/gnome-keyring[pam])
virtual/secret-service-0 (gnome-base/gnome-keyring)
|
|
virtual/secret-service requires either gnome-base/gnome-keyring or app-admin/keepassxc to be installed. There is no magic to it and no flags control it. gnome-keyring is first in the list so it is automatically preferred by the virtual unless another implementation is already installed. |
Thanks. Is there a configuration I can use to get secret-service to prefer keepassxc over gnome-keyring?
_________________
Unscrambler of Eggs
he/him |
|
| Back to top |
|
|
Hu
Administrator
Joined: 06 Mar 2007
Posts: 22367
|
| Posted: Tue Jul 23, 2024 6:13 pm Post subject: |
|
|
| As grknight just told you, it will pick the first one in the list if none are already installed. If you install any element from the list, then it will be satisfied and will not prompt you to install other members of the list. |
|
| Back to top |
|
|
brundage
Tux's lil' helper
Joined: 02 Dec 2004
Posts: 149
|
| Posted: Tue Jul 23, 2024 6:16 pm Post subject: |
|
|
| Hu wrote: | | As grknight just told you, it will pick the first one in the list if none are already installed. If you install any element from the list, then it will be satisfied and will not prompt you to install other members of the list. |
And I'm asking if there is a way to automatically prefer keepassxc. I assumed prohibiting gnome-keyring from being installed with USE flags would do the trick and I probably won't remember why keepassxc is in my world file 18 months from now.
_________________
Unscrambler of Eggs
he/him |
|
| Back to top |
|
|
grknight
Retired Dev
Joined: 20 Feb 2015
Posts: 1832
|
| Posted: Tue Jul 23, 2024 6:22 pm Post subject: |
|
|
| brundage wrote: | | And I'm asking if there is a way to automatically prefer keepassxc. I probably won't remember why keepassxc is in my world file 18 months from now. |
Not without writing your own ebuild for the virtual in an overlay changing the order of the packages. |
|
| Back to top |
|
|
brundage
Tux's lil' helper
Joined: 02 Dec 2004
Posts: 149
|
| Posted: Tue Jul 23, 2024 8:46 pm Post subject: |
|
|
| grknight wrote: | | brundage wrote: | | And I'm asking if there is a way to automatically prefer keepassxc. I probably won't remember why keepassxc is in my world file 18 months from now. |
Not without writing your own ebuild for the virtual in an overlay changing the order of the packages. |
Cool, thanks. At least I have this forum post for reference when this problem comes up again. (-:
_________________
Unscrambler of Eggs
he/him |
|
| Back to top |
|
|
kimchi_sg
Advocate
Joined: 26 Nov 2004
Posts: 3035
|
| Posted: Wed Jul 24, 2024 4:03 am Post subject: |
|
|
| brundage wrote: | | And I'm asking if there is a way to automatically prefer keepassxc. I assumed prohibiting gnome-keyring from being installed with USE flags would do the trick and I probably won't remember why keepassxc is in my world file 18 months from now. |
Just emerge keepassxc && emerge --depclean gnome-keyring && emerge --deselect keepassxc, virtual/secrets-manager will keep keepassxc from being removed even though it is not in world file. |
|
| Back to top |
|
|
rab0171610
Guru
Joined: 24 Dec 2022
Posts: 402
|
| Posted: Wed Jul 24, 2024 4:31 am Post subject: |
|
|
I do not use gnome-keyring. I do not use it to store passwords and it is the only package I have an entry for in package.provided.
I have done this for a very long time with (so far) no noticeable effects. Pambase has -gnome-keyring and virtual/secret-service is satisfied. |
|
| Back to top |
|
|
logrusx
Advocate
Joined: 22 Feb 2018
Posts: 2149
|
| Posted: Wed Jul 24, 2024 4:42 am Post subject: |
|
|
| kimchi_sg wrote: | | brundage wrote: | | And I'm asking if there is a way to automatically prefer keepassxc. I assumed prohibiting gnome-keyring from being installed with USE flags would do the trick and I probably won't remember why keepassxc is in my world file 18 months from now. |
Just emerge keepassxc && emerge --depclean gnome-keyring && emerge --deselect keepassxc, virtual/secrets-manager will keep keepassxc from being removed even though it is not in world file. |
emerge keepassxc --oneshot!
Those are dependencies, they should not be emerged without --oneshot. Whenever you emerge something to fix something else, always emerge it with --oneshot.
Best Regards,
Georgi |
|
| Back to top |
|
|
Hu
Administrator
Joined: 06 Mar 2007
Posts: 22367
|
| Posted: Wed Jul 24, 2024 1:32 pm Post subject: |
|
|
| The emerge --deselect will clean up the entry from emerge keepassxc. However, as you say, it's simpler just to use --oneshot here instead of creating a junk entry and then removing it. I would go a step further and say that if you intend to use keepassxc instead of gnome-keyring, then keepassxc does belong in your world file, because you will need it to be able to read the password vault it manages for you. |
|
| Back to top |
|
|
logrusx
Advocate
Joined: 22 Feb 2018
Posts: 2149
|
| Posted: Wed Jul 24, 2024 2:02 pm Post subject: |
|
|
| Hu wrote: | | I would go a step further and say that if you intend to use keepassxc instead of gnome-keyring, then keepassxc does belong in your world file, because you will need it to be able to read the password vault it manages for you. |
No, it doesn't because it's a dependency of secret-service and if you don't do something to change that explicitly, it'll stay that way for as long as it satisfies that dependency.
In general, dependencies of virtuals have no place in world.
Best Regards,
Georgi |
|
| Back to top |
|
|
Hu
Administrator
Joined: 06 Mar 2007
Posts: 22367
|
| Posted: Wed Jul 24, 2024 2:18 pm Post subject: |
|
|
| Generally, yes, but in this case, if you remove keepassxc, you will lose access to the password vaults that were written with it. In my opinion, you don't want a change in the dependencies of the virtual to make it possible for emerge --depclean to remove the only package you use to access the password vault. If keepassxc were only installed to provide a library, and removing it would not deny you access to files you had written with it, then I would see no problem with emerge --depclean removing it once the virtual ceases requiring it. |
|
| Back to top |
|
|
kimchi_sg
Advocate
Joined: 26 Nov 2004
Posts: 3035
|
| Posted: Wed Jul 24, 2024 2:28 pm Post subject: |
|
|
| Hu wrote: | | The emerge --deselect will clean up the entry from emerge keepassxc. However, as you say, it's simpler just to use --oneshot here instead of creating a junk entry and then removing it. I would go a step further and say that if you intend to use keepassxc instead of gnome-keyring, then keepassxc does belong in your world file, because you will need it to be able to read the password vault it manages for you. |
From my experience if multiple dependencies that satisfy a virtual are installed, and all are not listed in world file, --depclean will keep only the first one listed in the virtual. That is why I did not use --oneshot instead of emerge ... && emerge --depclean && emerge --deselect ... |
|
| Back to top |
|
|
logrusx
Advocate
Joined: 22 Feb 2018
Posts: 2149
|
| Posted: Wed Jul 24, 2024 3:18 pm Post subject: |
|
|
| Hu wrote: | | If keepassxc were only installed to provide a library, and removing it would not deny you access to files you had written with it, then I would see no problem with emerge --depclean removing it once the virtual ceases requiring it. |
Actually in this particular case I have to agree with you and kimchi_sg :)
I see how what you say can easily happen.
Best Regards,
Georgi |
|
| Back to top |
|
|
|
Portage & Programming
