[ANN] CRUX 3.2-rc1 available for testing
![](https://secure.gravatar.com/avatar/7463ad4b9b6ae88a8af6ca7a6e814766.jpg?s=120&d=mm&r=g)
Greetings, The CRUX team is pleased to announce the availability of a first release candidate for the upcoming CRUX 3.2. Please note that this is a release candidate, NOT the final release. Please test it if you have a chance and report any problems you find to us! Important details about the upcoming changes can be found here: http://crux.nu/Wiki/TODO32 The ISO itself can be found here: http://jaeger.morpheus.net/linux/crux/files/rc/crux-3.2-rc1.iso http://jaeger.morpheus.net/linux/crux/files/rc/crux-3.2-rc1.md5 Known issues: 1) mesa3d is missing xorg-libxxf86vm as a dependency (fixed in git) - manual install or installation of another package that depends on xorg-libxxf86vm is recommended. 2) elilo seems to be broken currently - if it works for you, please report it. Enjoy! Cheers, Matt (for the CRUX team)
![](https://secure.gravatar.com/avatar/159b02dd838642e871b333bd433e64fc.jpg?s=120&d=mm&r=g)
Congratulations. How about Feature Request 1029: include dosfstools in ISO.
![](https://secure.gravatar.com/avatar/2b7c3ff547b7d8e868b327eb5d88e72e.jpg?s=120&d=mm&r=g)
|The CRUX team is pleased to announce the availability of a first release |candidate for the upcoming CRUX 3.2. Great! |http://crux.nu/Wiki/TODO32 Truly enviable. |http://jaeger.morpheus.net/linux/crux/files/rc/crux-3.2-rc1.iso I surely have a look next week. The good news for ISO users like me is that there is no additional compressed USB image which can make me jealous regarding the download size. |Enjoy! If it's just as unproblematic and running smoothly like 3.1 did all the time i surely will. Thanks! --steffen
![](https://secure.gravatar.com/avatar/6815e9e24b3f9f2c42cb9dc5178ba3ba.jpg?s=120&d=mm&r=g)
Wonderful news! I will test it as soon as possible. Best regards. 2015-10-12 8:43 GMT-03:00 Steffen Nurpmeso <sdaoden@yandex.com>:
|The CRUX team is pleased to announce the availability of a first release |candidate for the upcoming CRUX 3.2.
Great!
Truly enviable.
|http://jaeger.morpheus.net/linux/crux/files/rc/crux-3.2-rc1.iso
I surely have a look next week. The good news for ISO users like me is that there is no additional compressed USB image which can make me jealous regarding the download size.
|Enjoy!
If it's just as unproblematic and running smoothly like 3.1 did all the time i surely will. Thanks!
--steffen _______________________________________________ CRUX mailing list CRUX@lists.crux.nu https://lists.crux.nu/mailman/listinfo/crux
![](https://secure.gravatar.com/avatar/277a9788aadacd9e5314f59ecee5932d.jpg?s=120&d=mm&r=g)
On 10/10/15 18:37, Matt Housh wrote:
Greetings,
The CRUX team is pleased to announce the availability of a first release candidate for the upcoming CRUX 3.2.
Congrats! Great work!
Please note that this is a release candidate, NOT the final release. Please test it if you have a chance and report any problems you find to us!
Important details about the upcoming changes can be found here:
I really like some new features, and also start-stop-daemon for rc scripts, IMHO is a good improvement.
The ISO itself can be found here:
http://jaeger.morpheus.net/linux/crux/files/rc/crux-3.2-rc1.iso http://jaeger.morpheus.net/linux/crux/files/rc/crux-3.2-rc1.md5
Known issues: 1) mesa3d is missing xorg-libxxf86vm as a dependency (fixed in git) - manual install or installation of another package that depends on xorg-libxxf86vm is recommended. 2) elilo seems to be broken currently - if it works for you, please report it.
I successfully installed the ISO on a new laptop but I think I found an issue with xorg-server and harfbuzz. xorg-server is linked against harfbuzz and also glib (harfbuzz requires cairo which requires glib) bash-4.3# ldd /usr/bin/Xorg | grep 'not found' libharfbuzz.so.0 => not found libglib-2.0.so.0 => not found libharfbuzz.so.0 => not found libglib-2.0.so.0 => not found libharfbuzz.so.0 => not found libglib-2.0.so.0 => not found I also tried to compile xorg-server and found this error message: checking for XSERVERCFLAGS... no configure: error: Package requirements (fixesproto >= 5.0 damageproto >= 1.1 xcmiscproto >= 1.2.0 xtrans >= 1.3.5 bigreqsproto >= 1.1.0 xproto >= 7.0.26 randrproto >= 1.4.0 renderproto >= 0.11 xextproto >= 7.2.99.901 inputproto >= 2.3 kbproto >= 1.0.3 fontsproto >= 2.1.3 pixman-1 >= 0.27.2 videoproto compositeproto >= 0.4 recordproto >= 1.13.99.1 scrnsaverproto >= 1.1 resourceproto >= 1.2.0 xf86driproto >= 2.1.0 glproto >= 1.4.17 dri >= 7.8.0 presentproto >= 1.0 xineramaproto xkbfile pixman-1 >= 0.27.2 xfont >= 1.4.2 xau xshmfence >= 1.1 xdmcp) were not met: Package 'harfbuzz', required by 'freetype2', not found I checked for this dependency in ports: bash-4.3# prt-get deptree freetype -- dependencies ([i] = installed, '-->' = seen before) [i] freetype [i] zlib [i] libpng [i] zlib On one side, I see that fontconfig requires freetype but on buildtime was compiled against harfbuzz: $ grep harfbuzz /usr/lib/pkgconfig/* /usr/lib/pkgconfig/fontconfig.pc:Cflags: -I${includedir} -I/usr/include/freetype2 -I/usr/include/libpng16 -I/usr/include/harfbuzz -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include $ ldd /usr/lib/libfontconfig.so.1.8.0 | grep 'not found' libharfbuzz.so.0 => not found libglib-2.0.so.0 => not found On the other side, xorg-libxft has the same problem: sepen@asus:~ $ ldd /usr/lib/libXft.so.2 | grep 'not found' libharfbuzz.so.0 => not found libglib-2.0.so.0 => not found I rebuild freetype, fontconfig and xorg-libxft from ports with harfbuzz not installed but when I tried to compile xorg-server again I got this error message: make[5]: Leaving directory '/usr/ports/xorg/xorg-server/work/src/xorg-server-1.17.2/hw/xfree86/dixmods' CCLD Xorg libtool: link: cannot find the library `/usr/lib/libharfbuzz.la' or unhandled argument `/usr/lib/libharfbuzz.la' Makefile:794: recipe for target 'Xorg' failed make[4]: *** [Xorg] Error 1 Is there a way to compile xorg-server without harfbuzz, or should it be added to the ISO? Any idea? Another thing I would like to comment is about the fact that tcp_wrappers was removed. I've never needed to use tcp wrappers but I have to admit I do not want to lose the protection they provided. So with tcp_wrappers, by default in CRUX is to deny all TCP traffic. Are there any plans to add somewhere a iptables script with the chains (and/or policies) defaulting to DROP, or at least for the INPUT chain? It might be interesting to incorporate by default the functionality of iptables. I mean something like: iptables-restore < /etc/iptables/rules iptables-save > /etc/iptables/rules etc. What do you think about? Best regards, -- Jose V Beneyto | sepen -- Jose V Beneyto | http://sepen.mooo.com
![](https://secure.gravatar.com/avatar/5fbfdcc9fece431e1ca05e46e42255d6.jpg?s=120&d=mm&r=g)
On Wed, Oct 14, 2015 at 02:57:33AM +0200, Jose V Beneyto wrote: [...]
I successfully installed the ISO on a new laptop but I think I found an issue with xorg-server and harfbuzz. xorg-server is linked against harfbuzz and also glib (harfbuzz requires cairo which requires glib)
[...]
I rebuild freetype, fontconfig and xorg-libxft from ports with harfbuzz not installed but when I tried to compile xorg-server again I got this error message:
make[5]: Leaving directory '/usr/ports/xorg/xorg-server/work/src/xorg-server-1.17.2/hw/xfree86/dixmods' CCLD Xorg libtool: link: cannot find the library `/usr/lib/libharfbuzz.la' or unhandled argument `/usr/lib/libharfbuzz.la' Makefile:794: recipe for target 'Xorg' failed make[4]: *** [Xorg] Error 1
Many thanks for testing and the detailed report. Indeed you found a issue with missing dependencies in our ports. Actually we have a cyclic dependency between freetype and harfbuzz, both depends on each other, so it's not possible to add harfbuzz to the deps of freetype or fontconfig. To solve the issue I'd suggest to add harfbuzz to the deps of xorg-libxft.
Is there a way to compile xorg-server without harfbuzz, or should it be added to the ISO?
It's part of the ISO but not installed if you select the xorg meta port.
Any idea?
Another thing I would like to comment is about the fact that tcp_wrappers was removed. I've never needed to use tcp wrappers but I have to admit I do not want to lose the protection they provided. So with tcp_wrappers, by default in CRUX is to deny all TCP traffic.
But only for services that works with libwrap, which are only a few. Lately libwrap support got removed from openssh, I guess other will follow.
Are there any plans to add somewhere a iptables script with the chains (and/or policies) defaulting to DROP, or at least for the INPUT chain?
Not yet. Let's see if we get some ideas from our users ;) best regards Juergen
![](https://secure.gravatar.com/avatar/5fbfdcc9fece431e1ca05e46e42255d6.jpg?s=120&d=mm&r=g)
On Wed, Oct 14, 2015 at 11:31:34AM +0200, Juergen Daubert wrote:
On Wed, Oct 14, 2015 at 02:57:33AM +0200, Jose V Beneyto wrote:
[...]
Another thing I would like to comment is about the fact that tcp_wrappers was removed. I've never needed to use tcp wrappers but I have to admit I do not want to lose the protection they provided. So with tcp_wrappers, by default in CRUX is to deny all TCP traffic.
But only for services that works with libwrap, which are only a few. Lately libwrap support got removed from openssh, I guess other will follow.
Are there any plans to add somewhere a iptables script with the chains (and/or policies) defaulting to DROP, or at least for the INPUT chain?
Not yet. Let's see if we get some ideas from our users ;)
Update: after a short IRC discussion we decided to let users set up their own iptables config (or none if they prefer). Greetings Juergen
![](https://secure.gravatar.com/avatar/9a41e13d619ad0fbd1b30f7b4f4ce48f.jpg?s=120&d=mm&r=g)
On Wed, 14 Oct 2015 19:22:56 +0200 Juergen Daubert wrote:
Are there any plans to add somewhere a iptables script with the chains (and/or policies) defaulting to DROP, or at least for the INPUT chain?
Not yet. Let's see if we get some ideas from our users ;)
Update: after a short IRC discussion we decided to let users set up their own iptables config (or none if they prefer).
Imho, shipping ipv4/ip6 iptables script, with reasonable defaults and off by default , wouldn't be against Crux KISS/DIY principles. I know Crux is for advanced users, but iptables-{v4,v6}.example files, with iptables.init in rc.d already installed can hardly be considered hand-holding :) With the BIG FAT WARNING to customise as needed enclosed, it would give users a starting point. Just my 0.2RSD Pedja
![](https://secure.gravatar.com/avatar/277a9788aadacd9e5314f59ecee5932d.jpg?s=120&d=mm&r=g)
Hey, On 14/10/15 11:31, Juergen Daubert wrote:
[...]
Many thanks for testing and the detailed report. Indeed you found a issue with missing dependencies in our ports.
Thank you. It is all that I could try for now
Actually we have a cyclic dependency between freetype and harfbuzz, both depends on each other, so it's not possible to add harfbuzz to the deps of freetype or fontconfig.
To solve the issue I'd suggest to add harfbuzz to the deps of xorg-libxft.
Nice. It could be also a solution for xorg-bdftopcf which is linked against hardfbuzz and glib.
Is there a way to compile xorg-server without harfbuzz, or should it be added to the ISO? It's part of the ISO but not installed if you select the xorg meta port.
[...]
I think I found a similar situation with libxslt. It was linked against libgcrypt and libgpg-error during compilation and some ports depending on it (directly or indirectly) may fail. $ ldd /usr/bin/xsltproc | grep 'not found' libgcrypt.so.20 => not found libgpg-error.so.0 => not found libgcrypt.so.20 => not found libgpg-error.so.0 => not found That happened to me with xkeyboard-config (which depends on xorg-libxcb) make[1]: Entering directory '/usr/ports/xorg/xkeyboard-config/work/src/xkeyboard-config-2.16/man' /usr/bin/xsltproc -nonet ./man.xsl ../rules/evdev.xml > xkeyboard-config.man /usr/bin/xsltproc: error while loading shared libraries: libgcrypt.so.20: cannot open shared object file: No such file or directory Makefile:524: recipe for target 'xkeyboard-config.man' failed make[1]: *** [xkeyboard-config.man] Error 127 make[1]: Leaving directory '/usr/ports/xorg/xkeyboard-config/work/src/xkeyboard-config-2.16/man' Makefile:465: recipe for target 'all-recursive' failed make: *** [all-recursive] Error 1 =======> ERROR: Building '/usr/ports/xorg/xkeyboard-config/xkeyboard-config#2.16-1.pkg.tar.gz' failed. After rebuild libxslt all worked fine. Best regards, -- Jose V Beneyto | sepen
![](https://secure.gravatar.com/avatar/5fbfdcc9fece431e1ca05e46e42255d6.jpg?s=120&d=mm&r=g)
On Fri, Oct 16, 2015 at 06:52:27PM +0200, Jose V Beneyto wrote:
Hey,
On 14/10/15 11:31, Juergen Daubert wrote:
[...] Many thanks for testing and the detailed report. Indeed you found a issue with missing dependencies in our ports.
Thank you. It is all that I could try for now
Actually we have a cyclic dependency between freetype and harfbuzz, both depends on each other, so it's not possible to add harfbuzz to the deps of freetype or fontconfig.
To solve the issue I'd suggest to add harfbuzz to the deps of xorg-libxft.
Nice. It could be also a solution for xorg-bdftopcf which is linked against hardfbuzz and glib.
Thanks again, Jose. Will add harbuzz to the deps as well.
Is there a way to compile xorg-server without harfbuzz, or should it be added to the ISO? It's part of the ISO but not installed if you select the xorg meta port.
[...]
I think I found a similar situation with libxslt. It was linked against libgcrypt and libgpg-error during compilation and some ports depending on it (directly or indirectly) may fail.
Well, in that case I'd suggest to build libxslt --without-crypto. Best regards Juergen
participants (7)
-
Cezar Rangel
-
ezhorse
-
Jose V Beneyto
-
Juergen Daubert
-
Matt Housh
-
Predrag Ivanovic
-
Steffen Nurpmeso