Gentoo Linux

ANSSI, the National Cybersecurity Agency of France, has released the sources of CLIP OS, that aims to build a hardened, multi-level operating system, based on the Linux kernel and a lot of free and open source software. We are happy to hear that it is based on Gentoo Hardened!

Gentoo would like to congratulate Gibix and JSteward for finishing and passing Google’s Summer of Code for the 2018 calendar year. Gibix contributed by enhancing Rust (programming language) support within Gentoo. JSteward contributed by making ... [More] a full Gentoo GNU/Linux distribution, managed by Portage, run on devices which use the original Android-customized kernel. The final reports of their projects can be reviewed on their personal blogs: Gibix: Journey into Gentoo eclass, GSoC timeline JSteward: Final_report [Less]

Congratulations to security researcher and Gentoo developer Hanno Böck and his co-authors Juraj Somorovsky and Craig Young for winning one of this year’s coveted Pwnie awards! The award is for their work on the Return Of Bleichenbacher’s ... [More] Oracle Threat or ROBOT vulnerability, which at the time of discovery affected such illustrious sites as Facebook and Paypal. Technical details can be found in the full paper published at the Cryptology ePrint Archive. [Less]

As last year, there will be a Gentoo booth again at the upcoming FrOSCon “Free and Open Source Conference” in St. Augustin near Bonn! Visitors can meet Gentoo developers to ask any question, get Gentoo swag, and prepare, configure, and compile ... [More] their own Gentoo buttons. The conference is 25th and 26th of August 2018, and there is no entry fee. See you there! [Less]

2018-07-04 14:00 UTC We believe this incident is now resolved. Please see the incident report for details about the incident, its impact, and resolution. 2018-06-29 15:15 UTC The community raised questions about the provenance of Gentoo packages. ... [More] Gentoo development is performed on hardware run by the Gentoo Infrastructure team (not github). The Gentoo hardware was unaffected by this incident. Users using the default Gentoo mirroring infrastructure should not be affected. If you are still concerned about provenance or are unsure what solution you are using, please consult https://wiki.gentoo.org/wiki/Project:Portage/Repository_Verification. This will instruct you on how to verify your repository. 2018-06-29 06:45 UTC The gentoo GitHub organization remains temporarily locked down by GitHub support, pending fixes to pull-request content. For ongoing status, please see the Gentoo infra-status incident page. For later followup, please see the Gentoo Wiki page for GitHub 2018-06-28. An incident post-mortem will follow on the wiki. [Less]

Students who want to spend their summer having fun and writing code can do so now for Gentoo. Gentoo has been accepted as a mentoring organization for this year’s Google Summer of Code. The GSoC is an excellent opportunity for gaining real-world ... [More] experience in software design and making one’s self known in the broader open source community. It also looks great on a resume. Initial project ideas can be found here, although new projects ideas are welcome. For new projects time is of the essence: there is typically some idea-polishing which must occur before the March 27th deadline. Because of this it is strongly recommended that students refine new project ideas with a mentor before proposing the idea formally. GSoC students are encouraged to begin discussing ideas in the #gentoo-soc IRC channel on the Freenode network. Further information can be found on the Gentoo GSoC 2018 wiki page. Those with unanswered questions should not hesitate to contact the Summer of Code mentors via the mailing list. [Less]

Excitement is building with FOSDEM 2018 only a few days away. There are now 14 current and one former developer in planned attendance, along with many from the Gentoo community. This year one Gentoo related talk titled Unix? Windows? Gentoo! will ... [More] be given by Michael Haubenwallner (haubi ) of the Gentoo Prefix project. Two more non-Gentoo related talks will be given by current Gentoo developers: Andreas K. Huettel (dilfridge ) – Perl in the Physics Lab Andrew Savchenko (bircoph ) – The Invisible Internet Project If you attend don’t miss out on your opportunity to build the Gentoo web-of-trust by bringing a valid governmental ID, a printed key fingerprint, and various UIDs you want certified. See you at FOSDEM! [Less]

Put on your cow bells and follow the herd of Gentoo developers to Université libre de Bruxelles in Brussels, Belgium. This year FOSDEM 2018 will be held on February 3rd and 4th. Our developers will be ready to candidly greet all open source ... [More] enthusiasts at the Gentoo stand in building K. Visit this year’s wiki page to see which developer will be running the stand during the different visitation time slots. So far seven developers have specified their attendance, with most-likely more on the way! Unlike past years, Gentoo will not be hosting a keysigning party, however participants are encouraged to exchange and verify OpenPGP key data to continue building the Gentoo Web of Trust. See the wiki article for more details. [Less]

As you may know the core of sys-kernel/hardened-sources has been the grsecurity patches. Recently the grsecurity developers have decided to limit access to these patches. As a result, the Gentoo Hardened team is unable to ensure a regular ... [More] patching schedule and therefore the security of the users of these kernel sources. Thus, we will be masking hardened-sources on the 27th of August and will proceed to remove them from the main ebuild repository by the end of September. We recommend to use sys-kernel/gentoo-sources instead. Userspace hardening and support for SELinux will of course remain in the Gentoo ebuild repository. Please see the full news item for additional information and links. [Less]

Upcoming weekend, 19-20th August 2017, there will be a Gentoo booth again at the FrOSCon “Free and Open Source Conference” 12, in St. Augustin near Bonn! Visitors can see Gentoo live in action, get Gentoo swag, and prepare, configure, and compile their own Gentoo buttons. See you there!