[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology

Name
Options
Comment
Verification
4chan Pass users can bypass this verification. [Learn More] [Login]
File
  • Please read the Rules and FAQ before posting.
  • You may highlight syntax and preserve whitespace by using [code] tags.

08/21/20New boards added: /vrpg/, /vmg/, /vst/ and /vm/
05/04/17New trial board added: /bant/ - International/Random
10/04/16New board for 4chan Pass users: /vip/ - Very Important Posts
[Hide] [Show All]


[Advertise on 4chan]


File: gentoo.png (6 KB, 221x97)
6 KB
6 KB PNG
>>
>>106963780
It exists.
Like me.
Hopefully not for much longer.
Like me.
>>
>systemd but gentoo flavored
>>
>>106963780
The only people left using it suffer from sunk cost fallacy syndrome.
>>
>>106963780
Solid distro, no issues on multiple devices. I am happy with it and see no reason, or even any potential benefit, to migrate to another distro
>>
>>106963814
really? did the change the default from openrc? what a shame
>>
>>106964099
if you have to ask, why would you have an opinion in the first place re: shame? you clearly don't use gentoo or know anything about its design goals
>>
>>106964138
relax, don't be so defensive
i understand what gentoo is for.
just pointing out that they must have changed the *default* from openrc.
i know you can probably just skip systemd support with a useflag
>>
>>106963780
still dead
>>
>>106964174
>just pointing out that they must have changed the *default* from openrc.
yes, and that is a stupid thing to "point out" when you have no idea what you're talking about
>>
>>106964210
why are you seething so much? who hurt you?
>>
>>106964210
instead of seething, you could explain a bit how overlays work.

i need more build systems and portage fits the bill of being highly automated and one where its easy to set flags that apply to all builds.
>>
>>106964257
>>106964301
you're projecting seethe, because, once again, you're stupid. would you tell your father that he's seething when he corrects your behavior with smack across the face?
do you even know why it actually would be a shame if gentoo went systemd default or are you just parroting other retards?
>>
>>106964324
what a cunt.

yeah it is a shame that by default (meaning not ricing) you get a systemd system.

now go shit in some other thread. what an insufferable cunt. besides i'm probably older than you.
>>
>>106963780
perfection
>>
File: .png (29 KB, 704x521)
29 KB
29 KB PNG
I briefly considered switching from CachyOS to Gentoo because Cachy doesn't have any emulators and only has Chromium for a browser in its optimized repos. Compiling from source would mean all of my packages could be optimized. But then I decided I don't have time to learn Gentoo because I'm supposed to be looking for a new job. So I reinstalled Windows 10 LTSC instead. Build 1904X.6456 is actually really good once I apply tweaks from NTLite, ShutUp10, privacy.sexy, etc.
Inb4 "you have time to tweak Windows but not to learn Gentoo?"
I already know how to tweak Windows and can do everything in like 2 hours at this point. Learning Gentoo would probably take me 8+ hours, then another 16+ hours to undo all the mistakes I made during the learning process. All those hours would be basically wasted because I'd just end up running Windows binaries in Wine anyway.
>>
>>106964324
anyway i just read that there is no default and that you choose from the get go.
you could have said that without being a faggot. instead, you failed
>>
giving it a spin inside a chroot. i like how it presents itself, feels like a BSD with the portage/make.conf file and the ebuild tree.
seems more automated.
last time i tried it was 10 years ago and i got stuck in some emerge conflict but back then i didn't understand how the bsd's work and that that is what gentoo copies and improves for linux and i didn't really care so i got filtered.

now its like getting another ports-like package manager.
>>
>>106963780
Unless you are running a supercomputer or state of the art hardware (non-consumer grade). Or you make binaries for very old computers or unsupported architectures, there is no point on using it while compiling your shit, is a waster of energy. Just use it with precompiled binaries if you may, or use something else.
>>
>>106965637
nah,
i want to save ram and space.
it seems super easy to just configure the make.conf.
now, i'm compiling with -Os -pipe
i'm only lately trying to optimize for lower ram usage because i'm starting to notice that i don't have enough RAM often.
>>
>>106965637
there is not much choice in linux except emerge if you want a bsd-like build system.
i don't know about void and what they have but emerge seems to fit the bill perfectly and its quicker to use than pkgsrc which also tries to work on everything but doesn't focus as much on linux compared to netbsd for obvious reasons.
>>
File: 1743303193712723.png (143 KB, 950x950)
143 KB
143 KB PNG
Still the undisputed autism king.
>>
>>106963780
Good times. Modern hardware makes compiling faster then ever, and Gentoo now also has way more pre-compiled binaries than it used to.
>>
>>106963780
It's just Arch for lower IQ faggots
>>
>>106964174
>don't be so defensive
NTA but on this board, we're willing to die for our distros, pleb. If you ask me, I'd commit a terrorist attack for Haiku.
>>
op here again,
i love the how verbose emerge is.

emerge --info and you could basically populate missing lines into your make.conf to get a view of some defaults.
then how nice it is to get a view of what flags are available with emerge.

i had to look around a bit for some features. but google and the gentoo wiki has mostly been helpful.

and its feature rich. its 5 times nicer to use than pkgsrc or freebsd ports tree even though they are nice too but more primitive. you have to look around for the more basic stuff which is already implemented in emerge.
it fits the bill perfectly assuming i don't have too many build errors
but i'm not trying to do anything exotic in the beginning, mostly keeping with defaults, except Os instead of O2

i suppose the thread is less about gentoo and more about portage/emerge.
good job to the portage and emerge developers! to me, its the best ports tree that i have seen for linux.
>>
File: 1759427313225825.png (526 KB, 1200x1200)
526 KB
526 KB PNG
>>106963780
everyone moved to nixos/guix.
>>
>>106966146
arch is and always will be an iqlet distro.
>hurr i want my shit barebones, but i want systemd installed by default!

same is non systemd users
>hurr one program one job is the unix way, here let me show you in my emas web browser while i play music in emacs. did i mention my emacs can make smoothies?
>>
>>106966437
>less about gentoo and more about portage/emerge.
But Gentoo is portage/emerge. You can't have one without the other.
>>
>>106966455
As it should be
>>
>>106966478
>100 % non-white moron babble
>>
>>106966455
that doesnt matter because guix and nix are too different. i know people swear by them but i can't handle the disk space waste it brings.
i prefer a more manual approach if thats the trade-off and in general i found both of them unnecessarily different from normal unix/linux habits.

felt like i had to learn a new language.
>>
>>106966539
Not really. You can use portage on Debian.
>>
>>106963780
still as worthless as 20 years ago
just use debian like a normal person
>>
i still prefer slackware for handling the kernel and the most fundamental stuff because its just so simplistic to manage. on slackware its super quick to recover if anything goes wrong.
thats how low level utilities should be handled, brutally and efficiently.

for all the other user stuff like Xorg and applications, i will switch out some stuff with emerge custom built versions. it offers more flexibility.
>>
and then some day, if everything makes sense, the linux gods willing, i will make a frankenstein "SlackEmerge" distribution
>>
i'm impressed by how emerge manages to keep everything together, smooth and automated. i suppose it starts with quality ebuilds and scales to the size of the repository.
also happy at how they seem to have decided to handle zfs. automated and integrated. good to know
>>
adding flags to individual packages is quick, automatically putting together a list of affected packages and start to recompile them.

what am i supposed to do here if everything is so automated? what are some traps you can fall into?.
>>
>>106963780
It works just fine. Still a very solid distro.
>>
>>106964174 >>106963814
trivial:
eselect profile list
eselect profile set <num>

gentoo has profiles for hardened musl or musl with llvm or llvm with or without systemd

any details from these base profiles can be configured/overriden the usual way as you please
>>
seems like its trivial to start compiling a x32 system. (no its not the classic 32-bit mode. look it up)
this makes it the easiest system to do this on that i'm aware of.
i'm already spotted binaries that are smaller because of Os and even more memory gains can be had from x32 mode. its not a given that everything compiles as x32 though. has anyone done that?
>>
>>106965826
zram and a large swap file
>>
>>106969315
distcc
>>
File: 1757659980787054.jpg (222 KB, 1563x1563)
222 KB
222 KB JPG
>>106963780
It's fine, but it seems there aren't many maintainers [spoiler]as everywhere, but for sure even less than before[/spoiler]. For example, today I had to take cloud-utils from the overlay.

It is obvious that many autists with a lot of free time moved to Nix because writing flakes is more entertaining than waiting for compilation and it is more declarative.
>>
>>106964633
>tweaks from NTLite, ShutUp10, https://privacy.sexy, etc.
Would you mind sharing what tweaks you apply?
>>
>>106966455
using nixOS if you aren't installing it on 700 computers is so fucking weird to me

like why? literally why. you're using it on one system. the whole point is to be able to easily copy your configuration to another computer. so you wrote a script that installs firefox and sway... nice bro
>>
>>106969490
If you can wait approximately 12 hours I'll give you full details with screenshots, but here is a brief summary for now (I'm currently phoneposting).
shutUp10 and privacy.sexy are reversible, it is safe to apply all the changes. I personally apply all ShutUp10 tweaks and everything on privacy.sexy except deleting Quick Access pinned items, running script at every startup, and changing the NTP server. I dont need any Microsoft Store apps on my daily driver OS so it works for me. I keep Store installed on my Windows To Go external SSD for certaon things like uploading my Xbox controller firmware.
NTLite is safe if you stick to integrating updates and drivers, using the Settings page, and applying an Unattended config. It is sketchy when you start using the Remove Components page. If you are going to dabble in that I recommend creating a baseline image of your known good Windows install first, using Macrium, Acronis or the like. Then make incremental changes and roll back when you break something. Its pretty polished software by now though and it tells you which removals will break which programs, for the most part. Again I will upload screenshots later when at my PC.
There are a few more tweaks I do such as applying MarkC mousefix, disabling file access timestamps, and disabling 8.3 filenames in NTFS, that are small on their own but do add up.
My best result I got Windows 10 down to around 9GB install size and 2.8/128GB RAM used at idle. Which is on par with CachyOS and KDE on the same computer.
>>
>>106969490
>>106969652
Oh I forgot, I deselect the option in privacy.sexy to delete my Firefox profile. I will share the screenshot later
>>
>>106969652
>>106969664
I can wait. Thanks.
If you ever decide to try CachyOS or Arch again, you can add the ALHP repos after the Cachy repos for more optimized binaries. They have a page listing the packages their repositories provide, so you can check if it includes anything that interests you. On a mostly stock CachyOS installation, their repositories slightly expanded the range of optimized binaries, but in the end I couldn't tell if it made a real difference or was just placebo, so I went back to plain Arch.
>>
>>106963780
Can I unlock luks volume with kernel only? No initramfs? I don't like it and don't wanna use it
>>
>>106966455
Maybe I'm too stupid for Nix... It all seems really contrived for no reason. Still haven't figured out how to use it on top of another distro.
>>
>>106970012
Just vibe code the configuration and home dot nix
>>106969495
Because its my fortress and if they succeed i just hit enter on my last snapshot. They cant win. Impossible.
>>
>>106964324
jej what a retarded nigger
>>
>>106963780
This operating system is comically bad. Everything in Gentoo that makes it Gentoo (the package manager and configuration tools) is written in fucking Python and is dogshit slow.
>Resolving dependencies... \
And they appear to care more about colorful ASCII art and a funny looking ASCII spinner using / - \ | characters than about improving the speed of this shitware.
>broooo if you compile with -O3 -march=native -pipe -fomit-frame-pointers -flto=thin O ALGO, you can get... le performance!
>>
>>106964324
slapping a child is the epitome of seethe
>>
>>106964747
gentoo is practically designed around not having any defaults. like even the first step is choosing what stage3 you want (systemd, nomultilib, openrc, etc). "systemd becoming default" doesn't even make sense outside of perhaps them swapping the order they list it on their website. even using stage3 is optional, you can skip it if you want, but most people won't need to start any lower than stage3
>>
>>106970799
i do with emerge was faster (emerge itself, not "emerging"). i get that it'll never be as fast as other package managers simply because it's /doing/ more stuff, like there's a lot more information it needs to consider... which is all the more reason it should be in a faster language.
not to mention anyone wanting to do a really minimal install and wanting to not have python installed, having python as a core package isn't ideal for an otherwise extremely flexible operating system
>>
>>106970855
Python is absolute sage in Gentoo. I hope they rewrite it in C.
>>
>>106970899
at the end of the day, the time spent in python code is usually dwarfed by the time spent actually compiling stuff, but it's not insignificant, especially if you're only installing/updating one thing or some small things
again i wouldn't expect it to be as fast as say, apk (alpine's package manager, written in C, it's fast as shit), but there's surely a useful amount of room for improvement, not to mention being able to make python optional. for super small embedded installations, to be fair, you're probably not going to include any build tools in the final image anyway, so you'd use an external copy of emerge/gcc/etc instead
>>
>>106964525
average /g/ poster's iq
>>
>>106970899
No need should have just been perl its 8 times faster than python for text parsing
>>
>>106970855
to be fair other package managers for binary distros dont have nearly as much dependency resolution to consider since they basically only give you a single choice of package versions
>>
>>106963814
fake and gay installed it recently and it's still openrc based.
>>
>>106970977
yea, that's what i mean. with gentoo packages can be one (or more, with slots) of many different versions, with countless USE flag variants, and emerge needs to rationalise all of that each time
in a binary distro, a lot of that work was just determined ahead of time, package variants if any are done in separate packages, so from a package managers' point of view there's only one possible state for each package, it's either installed or it isn't. it only needs to take care of package dependencies
i imagine an emerge C rewrite would be quite a bit of work, especially compared to a binary distro package manager
>>
>>106963780
Best distro. Been on it since 2010.
>>
I forgot. I had to run separate Debian because tensorflow, android, and chromiums don't build on gentoo.
>>
The incel disable bluetooth on Firefox gentoo vs the chad the read only root nixos
>>
>>106970923
>>106970972
No you don't see the bigger picture. The reason to use Gentoo is to have a very customized system. Some people do not want to have any python dependencies installed on their system.
>>
>>106970923
>apk (alpine's package manager, written in C, it's fast as shit)
Alpine is one of the better Linux distros. I don't really like Linux in general but if I were to set up some kind of embedded ARM SBC or a web server that's open to the internet, I'd probably use Alpine. I like that it doesn't use GNU bloatware for the most part.
>>
>>106963780
IDC I stopped using it since they made rust obligatory for the base install.
>>
>>106972123
No they dont theres a rust option on the menu config you can checkmark
>>
>>106970954
op here
its not unreasonable to expect a distro to have defaults.
99 out of 100 distros have some defaults, even the stage3 has defaults. the gentoo devs selected the stuff that goes in them.

some things obviously go to all flavors of stage3 so saying there are no defaults at all is superficial understanding about the whole point of prepackaged stuff like stage3
>>
>>106966478
without sounding emotional, what's wrong with systemd? it just werks
>>
>>106972249
ai level post
>>
>>106972476
i dont use ai, my brain is an organic computer already.
it uses intuition and reflection
>>
>>106972365
its too big and too fat.
my current sysvinit is basically init + bash scripts. its hard to make something lighter without shitting up the ram.
>>
so far, emerge is rolling like a train.
i can definitely see the appeal if you have memory hungry applications to optimize for memory use.
i will do some comparisons with qbittorrent, i have about 200 torrents on there, would be cool if i could trim some ram usage off.
qbittorrent is not bad in that regard, i'm just curious to see if it can be made even better because the more i do this for everything, the more the savings will start to add up.
>>
>>106963780
will it give me more fps in roblox
>>
>>106972365
I dont like the cli ui for starting/stopping and managing services
openrc just werks
>>
>>106969490
>Would you mind sharing what tweaks you apply?
>>106969852
>I can wait. Thanks.
I am working on it now. Hopefully the thread doesn't archive before I finish.
>If you ever decide to try CachyOS or Arch again, you can add the ALHP repos after the Cachy repos for more optimized binaries.
I looked into that after your suggestion. That was interesting, thanks.
>>
File: integrate-updates.png (89 KB, 1228x884)
89 KB
89 KB PNG
>>106969490
To start off, I download this:
https://drive.massgrave.dev/en-us_windows_10_iot_enterprise_ltsc_2021_x64_dvd_257ad90f.iso
extract it with 7-Zip, and load it into NTLite. I have a paid Home version on NTLite, but you can do the most important stuff with the free version. I integrate the updates checked off in pic related. Note there is a bug with "Microsoft Defender Antivirus update (Engine [...])" in NTLite. It always thinks the version you have downloaded is superceded, likely because every version is named "mpam-fe.exe". The other updates get unique filenames every version update. Also, don't worry about KB5015684 for now. NTLite can't integrate that anyway. We do that manually later.
>>
All I know is that the installation guide is terribly wordy, and it puts me off from trying it. It's horribly written.
>>
File: integrate-updates-2.png (91 KB, 1330x951)
91 KB
91 KB PNG
>>106969490
Sorry, I meant to have KB5067017 checked in that last screenshot. My understanding is that update has to do with SecureBoot, which I don't use anyway, but the idea is to have the latest/"final" Windows 10 code in your install image. If you decide it's bloat then it can be ripped out later. NTLite works best when it's working with a fully updated Windows image. So do some other tools, I will discuss that later on.
New pic related, I choose "Custom" for "Clean update backup" and I choose "Optimize AppX" and "Update boot manager" in "Extra options". Some things are grayed out because I have my live install loaded for these screenshots. Other options open up if you load in an install .iso
>>
>>106974039
>All I know is that the installation guide is terribly wordy, and it puts me off from trying it. It's horribly written.
Who are you talking to?
>>
>>106974128
Primarily the absolute dunces in charge of Gentoo's official tutorials and documentation.
>>
File: integrate-drivers.png (66 KB, 2560x1418)
66 KB
66 KB PNG
>>106969490
NTLite's driver integration is mostly useful if you need to slipstream SATA, NVMe, RAID, USB3, ethernet, or wi-fi drivers into your install .iso. It does a bad job at integrating graphics drivers. Anyway, I check off "Reuse driver cache"
>>
>>106974155
Okay, I thought you were talking about my Windows install/debloat/tweak guide I'm working on right now. I don't have experience writing these things for other people but >>106969490 requested it.
>>
File: registry.png (54 KB, 2560x1418)
54 KB
54 KB PNG
>>106969490
In NTLite's registry page I activate the Ultimate Performance power plan and delete all the other plans. I will show you the .reg files I integrate in the next screenshot.
>>
File: registry-2.png (76 KB, 782x760)
76 KB
76 KB PNG
>>106969490
The main .reg entries I integrate are the MarkC mouse fix, and the following:
https://www.tenforums.com/tutorials/85418-disable-downloaded-files-being-blocked-windows.html
https://www.tenforums.com/tutorials/139015-enable-disable-ntfs-last-access-time-stamp-updates-windows-10-a.html
I do a couple more registry tweaks but they are just placebo and only appeal to my OCD, so I won't post them lest they discredit the rest of my guide.
>>
>>106963780
compiling
>>
File: component-removal.png (187 KB, 2560x1418)
187 KB
187 KB PNG
>>106969490
Skipping "Post-Setup" because I only have redundant and placebo settings there. You can skip it.
The component removal page is the sketchiest but most powerful part of NTLite, as far as debloating. Again, I recommend making a full-disk backup image first, so you can roll back if you break something. But for starters, removing unused languages and keyboard layouts from the Localization section is safe. You can also remove any accessibility themes, wallpapers, sound themes, and drivers for hardware you know you will never use. Beyond that it really depends on what programs you need to remain compatible, so nobody should be following anyone else's template here. Read the Notes for each Component and decide for yourself what you want or don't want. It's a trial and error process. But this is where the magic happens and you can get a single-digit install size for your Windows.
I use "DISM + Custom" removal mode.
>>
File: configure-features.png (124 KB, 2560x1418)
124 KB
124 KB PNG
>>106969490
I skip scheduled tasks and move onto configure features. I uncheck literally everything here. Note the expanding/drop-down menus with extra hidden settings. Make sure you look at what you are turning off, because maybe you like some of the things on the list. But I don't need any of it.
>>
File: configure-settings.png (119 KB, 2560x1418)
119 KB
119 KB PNG
>>106969490
Forgot to mention, component removals from my last post are gimped in the free version of NTLite.
Configure Settings is another important page. Just read through each option and decide for yourself what you want. This is another one where people shouldn't be using each other's templates.
I realize you asked what specific tweaks I apply but there are too many to list off here. I will say though that this Configure Settings page does most of the heavy lifting. I can make a decent Windows install with just this page. Everything else is gravy on top.
>>
File: apply.png (53 KB, 2560x1418)
53 KB
53 KB PNG
>>106969490
Finally I apply the settings and create a modified install .iso. All done with NTLite.
>>
>>106969876
I don't think the linux kernel supports that at all, does it? Can any other distro do this?
What you can easily do instead is package the initramfs into the kernel at build time (it's what I do). That way there's no separate file for it, it's a single EFI-bootable binary.
>>
>>106972365
Personally I started avoiding it after the whole google DNS debacle in systemd-resolved
A dev that thinks it's okay to parse a user configuration that explicitly says "connect to this list of servers: [ ]" and interpret it as "actually, that means I should connect to google" cannot possibly be trusted to write the software running as PID1
>>
>>106969490
Whoops, I forgot that when you are working with installation media, NTLite has an Unattended page. This is important too. Sorry. All the settings in there are self explanatory though. NTLite is very intuitive. I set my time zone and set up the Administrator account there, among other things.
I copy the new .iso file to my Ventoy partition. Then I format my target SSD in Linux.
64 MB EFI partition, the rest is an NTFS partition. Technically you can boot Windows 10 from a 34MB FAT32 EFI partition but I prefer powers of 2. Install your custom .iso. Once it's finished I disable and strip 8.3 file names from the NTFS partition:
https://schneegans.de/windows/no-8.3/
>>
Not making relevant progress. Handbook still doesn't detail how to enable FDE despite that it makes no sense to do that after the install. Also, fucking Arch is ahead of them in updating Coq. Losers.

>>106964099
Gentoo's had bits of systemd for a long time, but the init system is still OpenRC.
>>
>>106969490
In privacy.sexy I run everything except the three things I mentioned earlier. I apply everything in ShutUp10++. These settings are mostly already applied after having run NTLite and privacy.sexy first, but there are a few stragglers. Apologies that I don't have a before and after prepared, this was already completed before we started talking. Then finally I apply the 22H2 enablement as mentioned in the OP of /g/fwt. That's about it. NTLite and privacy.sexy are the heavy hitters. I perused Chris Titus's WinUtil but there wasnt anything interesting there that wasn't already included in NTLite or privacy.sexy. I used to use WinaeroTweaker but same thing as WinUtil these days. Nothing unique in there any more.
Also, I mentioned the latest Windows 10 build is good. It used to be that any little tweak would break your networking, USB safe removal, pirated games, start menu, etc. But between updates to NTLite, privacy.sexy and Windows itself, everything just meshes well these days. I can apply ALL the tweaks and things mostly still work. And it never breaks to the point you have to reinstall Windows anymore, you can at least go online, look up your specific error, and reverse the specific tweak you did. In the old days your Windows install would just brick and you would have to start over.
Let me know if you want specific details on anything I covered.
>>
>>106974843
>Handbook still doesn't detail how to enable FDE despite that it makes no sense to do that after the install
Yeah I agree that it's weird that that's missing. But the setup is pretty standard if you've ever done it before.
>dd the disk randomly (optional if you want to hide the usage later)
>cryptsetup luksFormat /dev/youdevice
>cryptsetup luksOpen /dev/yourdevice some_name
>/dev/mapper/some_name is now your root partition, use mkfs on it, unpack the stage3 tarball there and proceed as normal
>lsblk and grab the UUID of the mapped device, that's what you put into your fstab for your / mountpoint
>make sure you enable luks in whatever method you use to generate your initramfs, set the crypt_root kernel parameter on boot, and enable dm-crypt related shit in the kernel config
Personally I compiled
crypt_root=/dev/disk/by-uuid/<the uuid
into my kernel (CONFIG_CMDLINE) so I don't have to bother with grub or anything. I also boot my kernel directly as an EFI stuf, with only refind as the boot selector.
>>
>>106975068
Are you supposed to do this in-between parted and mkfs? And by "dd the disk randomly" do you mean dd -if=/dev/random? Cause that'd take hours for probably not much data hidden (esp on a SSD or new HDD).
>>
>>106969652
>>106974898
Thanks so much for taking the time to write all that out, that is way more detail than I expected. Gonna save this for my next Windows install.
>>
>>106970821
I agree but I said that to make a point
>>
>>106975442
>in-between parted and mkfs
Yes indeed. A dm-crypt volume creates effectively the equivalent of a partition, you can mkfs on it directly, and in turn it normally goes inside a partition itself (though I think it should also be possible to do it on a raw block device - I don't think you need a partition table outside of the LUKS container).
You can also layer it with LVM as desired, in particular if you want partitions inside your crypt volume then you can use LVM for that.
>And by "dd the disk randomly" do you mean dd -if=/dev/random? Cause that'd take hours for probably not much data hidden (esp on a SSD or new HDD).
Also correct. It does take hours on large disks, but it's a one-time cost that sets the disk up forever, and you pretty much can't really ever do it anymore once you start using the disk.
>probably not much data hidden
It hides exactly one thing, not more not less: which sectors (and by extension how many) have actual data written to them. If you don't dd if=/dev/urandom, then someone can look at your disk and go, ah, I see, this is a 1TB disk with exactly 324.8GB of data written on it, plus with some fragmentation because such and such sectors in the middle are clearly uninitialized.
If you do randomise it then the entire disk will always look like random data, there's no way to tell if you're using 1GB or 99% of the disk.
>>
>>106974843
>>106975068
>>106975641
https://wiki.gentoo.org/wiki/Full_Disk_Encryption_From_Scratch
https://wiki.gentoo.org/wiki/Rootfs_encryption
These are not suitable for the base handbook because of the chance for error with retards that don't understand UUIDs and such
>>
>>106963780
Last bastion of the Aryan Race
>>
>>106975641
Is randomizing possible on an SSD, or does wear leveling get in the way?

>>106975858
>These are not suitable for the base handbook because of the chance for error with retards that don't understand UUIDs and such
Literally the only kernel panics I've ever had were from badly configured root UUID while following the handbook. I don't think this would make things much worse.
>>
>>106976047
It should be mostly possible. Unlike with deletion/wiping, it doesn't have to be perfect, even if you only randomise like 95% of the physical storage chips, it will still reliably hide almost all of your usage.



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.