• Re: [gentoo-user] Wayland! Beware of!

    From Walter Dnes@21:1/5 to Eli Schwartz on Wed Sep 25 00:10:01 2024
    On Mon, Sep 23, 2024 at 05:11:14PM -0400, Eli Schwartz wrote

    Do you have that little faith in the Gentoo Developers, that you
    think we'd make a USE flag change that made everyone's systems
    suddenly break?

    :(

    I was around way back when "ipv6" became the default. I was using
    Firefox back then. Type in a URL; Firefox spins its wheels for 60
    seconds in IPV6; it finally gives up and drops down to IPV4. This
    happened with every URL.

    After that I ran with USE="-* yada yada yada" for quite some time.
    Currently, I'm less extreme, merely disabling a bunch of USE flags...

    USE="X apng ffmpeg introspection jpeg opengl openmp png truetype x264 x265 xorg threads vala -acl -caps -clang -context -elogind -filecaps -graphite -gstreamer -haptic -iptables -ipv6 -libav -llvm -manpager -pam -sendmail -spirv -tofu -su -udisks -upower
    -wayland"

    The "szip" and "xinerama" USE flags seem to have disappeared.

    And who can forget the move from /dev/hda hdb hdc etc., to /dev/sda
    sdb sdc etc.? Machine literally unbootable on the newly compiled
    kernel. Fortunately, I always have "Production" and "Experimental"
    kernels. The newly compiled kernel is always "Experimental". If things
    go badly, I drop back to the "Production" kernel and try to figure out
    what went wrong. Only after a long while do I execute my "promote"
    script that copies "Experimental" over top of "Production".

    --
    There are 2 types of people
    1) Those who can extrapolate from incomplete data

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Matt Jolly@21:1/5 to Mitchell Dorrell on Wed Sep 25 02:20:01 2024
    On 24/9/24 19:46, Mitchell Dorrell wrote:
    Do you specifically use the closed-source drivers, though?

    Yes. In both the 'kernel-open' and regular flavours.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Eli Schwartz@21:1/5 to Walter Dnes on Wed Sep 25 03:50:01 2024
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------6dPlKfHaEukvQcn0fGMerenH
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable

    On 9/24/24 6:00 PM, Walter Dnes wrote:
    On Mon, Sep 23, 2024 at 05:11:14PM -0400, Eli Schwartz wrote

    Do you have that little faith in the Gentoo Developers, that you
    think we'd make a USE flag change that made everyone's systems
    suddenly break?

    :(

    I was around way back when "ipv6" became the default. I was using
    Firefox back then. Type in a URL; Firefox spins its wheels for 60
    seconds in IPV6; it finally gives up and drops down to IPV4. This
    happened with every URL.


    Please do not disable the USE=ipv6, as that is *utterly* insane. It also
    does approximately nothing. In packages which support this USE flag,
    which is rare, it causes the code to use old, untested APIs which only
    support ipv4, rather than new, tested APIs that support ipv4 and ipv6
    equally well while having the benefit of being stable, reliable and
    efficient.

    These old deprecated codepaths are prone to crashing and segfaulting
    because the codebase for it is not enabled by anyone and the original implementations are only kept around for the benefit of e.g. ancient
    static binaries that cannot be rebuilt.

    USE=ipv6 does not mean "ewww, evil bloated ipv6 socket functions".

    It has NO influence on whether you use ipv4 or ipv6 traffic, as the vast majority of the software you use doesn't even support the option, they
    simply use maintained functions that just ask the kernel to give you
    some internet traffic.

    If you actually want to disable ipv6, instead of insanely rebuilding
    binaries to use untested broken segfaulting code, use the sysctl knob to
    tell the kernel "when asked to give some application a bit of internet
    traffic, don't use ipv6".

    net.ipv6.conf.all.disable_ipv6

    This will:

    - actually work

    - work with applications that unconditionally use non-deprecated generic
    socket APIs

    - not crash when running untested code, because the code is actually
    tested


    Believe you me -- I am **very** aware of the painfulness inherent in applications trying ipv6, failing, not knowing they cannot use ipv6, and eventually timing out.

    I historically solved it with the sysctl because my ISP had
    broken/nonexistent ipv6, I continue to solve it with the sysctl when my
    network cannot handle ipv6, and I will solve it with the sysctl in the
    future when my network cannot handle ipv6.

    I do not "solve" ipv6 by building 0.05% of my applications with
    crash-prone APIs just because those APIs are also so old they predate ipv6.

    The new APIs support ipv4 quite well; use them.

    I'm sorry to hear you "broke" your own system through your own stubborn ignorance. At no point did Gentoo developers ever break your ipv4, you
    are imagining it.


    After that I ran with USE="-* yada yada yada" for quite some time. Currently, I'm less extreme, merely disabling a bunch of USE flags...

    USE="X apng ffmpeg introspection jpeg opengl openmp png truetype x264 x265 xorg threads vala -acl -caps -clang -context -elogind -filecaps -graphite -gstreamer -haptic -iptables -ipv6 -libav -llvm -manpager -pam -sendmail -spirv -tofu -su -udisks -
    upower -wayland"

    The "szip" and "xinerama" USE flags seem to have disappeared.


    That's quite the bloated collection of enabled USE flags you have there
    -- lots of stuff that are much more bloated than ipv6, in fact. :)

    And really, you despise app-text/manpager with such ferocity that you
    have to set a global USE for it lest a second program come to add that USE?

    You hate /usr/bin/su so much that it's simply intolerable that
    util-linux might build it?

    But support for animated PNG files is too precious and dear to you, that feature you absolutely have to have. Oh no, the bloat! We will be buried
    under it!

    ...

    But using a tested ipv4 codepath instead of an untested ipv4 codepath is
    too much bloat for you, so you'd rather the crashes and the segfaults. Brilliant.


    And who can forget the move from /dev/hda hdb hdc etc., to /dev/sda
    sdb sdc etc.? Machine literally unbootable on the newly compiled
    kernel. Fortunately, I always have "Production" and "Experimental"
    kernels. The newly compiled kernel is always "Experimental". If things
    go badly, I drop back to the "Production" kernel and try to figure out
    what went wrong. Only after a long while do I execute my "promote"
    script that copies "Experimental" over top of "Production".


    That's quite the long-term grudge you have there. "Who can forget" it
    indeed. ;) How about: pretty much everyone. What a tempest in a teapot.

    (Even if I took this rant seriously, that wasn't anything the Gentoo
    developers did. What's your proposed remediation, stay on the earlier
    editions of kernel 2.6 for another 15 years because "that newfangled 2.6
    kernel man, that's just totally breaking my system"?)

    Your kernel testing and rotation management is boringly plebeian, as
    it's what approximately every other Gentoo system does by default
    without any configuration needed.


    --
    Eli Schwartz


    --------------6dPlKfHaEukvQcn0fGMerenH--

    -----BEGIN PGP SIGNATURE-----

    wnsEABYIACMWIQTnFNnmK0TPZHnXm3qEp9ErcA0vVwUCZvNqfwUDAAAAAAAKCRCEp9ErcA0vV6Vc AQDO4IZ7sD7pwhZJzidixSL7+tQK6wuhPbiXyp6/8MwSeQEAsz0KI0ylW3U+DBGZ0RD/XdQMXwP9 19erDKERxfRA1g0=
    =aQAa
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Walter Dnes@21:1/5 to Eli Schwartz on Wed Sep 25 12:10:03 2024
    On Tue, Sep 24, 2024 at 09:42:23PM -0400, Eli Schwartz wrote

    If you actually want to disable ipv6, instead of insanely rebuilding
    binaries to use untested broken segfaulting code, use the sysctl
    knob to tell the kernel "when asked to give some application a bit
    of internet traffic, don't use ipv6".

    net.ipv6.conf.all.disable_ipv6

    My system is actually very stable. In the shitstorm that erupted on
    this list at "ipv6" enabling I did not see any mention of sysctl. In my /etc/default/grub file I have...

    GRUB_CMDLINE_LINUX_DEFAULT="noexec=on net.ifnames=0 ipv6.disable=1"

    With this setting is it guaranteed that a program compiled with "ipv6"
    flag will not try IPV6 first and timeout before dropping down to IPV4?

    How OS-specific is this? I "asked Mr. Google" and the NordVPN web
    page recommended for Redhat based distros...

    net.ipv6.conf.all.disable_ipv6=1
    net.ipv6.conf.default.disable_ipv6=1
    net.ipv6.conf.tun0.disable_ipv6=1

    For Debian-based distros...

    net.ipv6.conf.all.disable_ipv6 = 1
    net.ipv6.conf.default.disable_ipv6 = 1
    net.ipv6.conf.lo.disable_ipv6 = 1
    net.ipv6.conf.tun0.disable_ipv6 = 1

    Other answers for disabling IPV6 include stuff like...

    net.ipv6.conf.all.disable_ipv6 = 1
    net.ipv6.conf.default.disable_ipv6 = 1
    net.ipv6.conf.lo.disable_ipv6 = 1
    net.ipv6.conf.eth0.disable_ipv6 = 1

    BTW, I did *NOT* have IPV6 enabled when the USE flag changed...

    [x8940][root][~] grep IPV6 /usr/src/linux/.config
    # CONFIG_IPV6 is not set



    That's quite the bloated collection of enabled USE flags you have
    there -- lots of stuff that are much more bloated than ipv6, in
    fact. :)

    Stuff that I don't use is left disabled. I occasionally look at my package.use file. If a flag is enabled for multiple apps there, I run

    USE="flag" emerge -pv --changed-use --deep --pdate @world

    If there isn't much new stuff pulled in I'll...

    * enable the flag in make.conf
    * delete the enabling entries in package.use
    * disable, in package.use, the flag for new stuff that tha flag pulls in

    This minimizes the size of my package.use file. Note: this is optimal
    for the collection of apps *THAT I USE*. YMMV.

    --
    There are 2 types of people
    1) Those who can extrapolate from incomplete data

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?utf-8?Q?Arsen_Arsenovi=C4=87?=@21:1/5 to Walter Dnes on Wed Sep 25 14:00:01 2024
    Walter Dnes <waltdnes@waltdnes.org> writes:

    On Tue, Sep 24, 2024 at 09:42:23PM -0400, Eli Schwartz wrote

    If you actually want to disable ipv6, instead of insanely rebuilding
    binaries to use untested broken segfaulting code, use the sysctl
    knob to tell the kernel "when asked to give some application a bit
    of internet traffic, don't use ipv6".

    net.ipv6.conf.all.disable_ipv6

    My system is actually very stable. In the shitstorm that erupted on
    this list at "ipv6" enabling I did not see any mention of sysctl. In my /etc/default/grub file I have...

    GRUB_CMDLINE_LINUX_DEFAULT="noexec=on net.ifnames=0 ipv6.disable=1"

    With this setting is it guaranteed that a program compiled with "ipv6"
    flag will not try IPV6 first and timeout before dropping down to IPV4?

    That's not how IPv6 is supported. Dual-stack support relies on 'happy eyeballs', an algorithm by which both IPv4 and v6 are tried
    optimistically, and the first one to succeed is accepted. This adds no latency. I suspect your Firefox anecdote happened due to
    misconfiguration (I think network.http.fast-fallback-to-IPv4 dictates
    the use of this algorithm in Firefox).

    As a point of reference, I do nothing to disable IPv6 support, and my
    ISP does not provide IPv6 support, yet I have no added latency due to
    IPv6 support being enabled. I just get the benefits of better LANs and internal networks.

    There is no reason to disable IPv6 support, as Eli said (especially if
    yo do not know _what_ you're trying to disable, and are just trying to blanket-disable a vague concept of IPv6).

    How OS-specific is this?

    Not at all.

    I "asked Mr. Google" and the NordVPN web page recommended for Redhat
    based distros...

    net.ipv6.conf.all.disable_ipv6=1
    net.ipv6.conf.default.disable_ipv6=1
    net.ipv6.conf.tun0.disable_ipv6=1

    For Debian-based distros...

    net.ipv6.conf.all.disable_ipv6 = 1
    net.ipv6.conf.default.disable_ipv6 = 1
    net.ipv6.conf.lo.disable_ipv6 = 1
    net.ipv6.conf.tun0.disable_ipv6 = 1

    Other answers for disabling IPV6 include stuff like...

    net.ipv6.conf.all.disable_ipv6 = 1
    net.ipv6.conf.default.disable_ipv6 = 1
    net.ipv6.conf.lo.disable_ipv6 = 1
    net.ipv6.conf.eth0.disable_ipv6 = 1

    Note that all of the above include interface names, this is why they
    differ, and just copy-pasting them blindly will not work.

    Note also that they're all identical, save for the interfaces mentioned.

    BTW, I did *NOT* have IPV6 enabled when the USE flag changed...

    [x8940][root][~] grep IPV6 /usr/src/linux/.config
    # CONFIG_IPV6 is not set



    That's quite the bloated collection of enabled USE flags you have
    there -- lots of stuff that are much more bloated than ipv6, in
    fact. :)

    Stuff that I don't use is left disabled. I occasionally look at my package.use file. If a flag is enabled for multiple apps there, I run

    USE="flag" emerge -pv --changed-use --deep --pdate @world

    If there isn't much new stuff pulled in I'll...

    * enable the flag in make.conf
    * delete the enabling entries in package.use
    * disable, in package.use, the flag for new stuff that tha flag pulls in

    This minimizes the size of my package.use file. Note: this is optimal
    for the collection of apps *THAT I USE*. YMMV.
    --
    Arsen Arsenović

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iOcEARYKAI8WIQT+4rPRE/wAoxYtYGFSwpQwHqLEkwUCZvP5zV8UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0RkVF MkIzRDExM0ZDMDBBMzE2MkQ2MDYxNTJDMjk0MzAxRUEyQzQ5MxEcYXJzZW5AZ2Vu dG9vLm9yZwAKCRBSwpQwHqLEk/AMAP4tmfI+v+hJxdsagyfCLy2f1u/UWnD6EZ4c 63jdn+UMbQD/fKzHD4PjwuAxXf4SHuzMd3Z0GAEwSZ83p5kljilXCgw=mXBA
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Eli Schwartz@21:1/5 to Walter Dnes on Wed Sep 25 16:30:01 2024
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------7P3X1eE5d4z3w2ofqznKj0oC
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable

    On 9/25/24 6:00 AM, Walter Dnes wrote:
    My system is actually very stable. In the shitstorm that erupted on
    this list at "ipv6" enabling I did not see any mention of sysctl. In my /etc/default/grub file I have...

    GRUB_CMDLINE_LINUX_DEFAULT="noexec=on net.ifnames=0 ipv6.disable=1"

    With this setting is it guaranteed that a program compiled with "ipv6"
    flag will not try IPV6 first and timeout before dropping down to IPV4?


    (Note that the sysctl dynamically disables ipv6 support so that you can manually toggle it after boot, e.g. for testing. The kernel command line
    option hard-disables it at boot time. Your choice which to use, I guess.)


    If the kernel has disabled ipv6 there is no timeout because no attempt
    is made.

    If the kernel has enabled ipv6 then an attempt will be made and it may:

    - succeed, if your network has functioning ipv6 connectivity

    - fail instantly, if your network is correctly configured (you may not
    be in control of the network you use)

    - fail after a lengthy timeout after your network "valiantly" attempts
    to send your connection attempt into a black hole of doom

    As Arsen mentioned, RFC 8305 defines the "Happy Eyeballs" mechanism for
    trying both ipv4 and ipv6 at the same time, incurring the cost of
    slightly more traffic for the benefit of avoiding timeouts (since ipv4
    will still succeed just as fast regardless of whether a parallel ipv6 is
    timing out, and as soon as ipv4 succeeds, the ipv6 timeout is ignored
    and made redundant).

    Not all software uses Happy Eyeballs. In particular, emerge --sync does
    not, because the python library that portage uses to check for updated
    PGP keys used when validating manifests, does not. This pained me
    tremendously since "emerge --sync" would literally hang forever, until I disabled ipv6 via the kernel. Note that since Aug 31, 2021, Gentoo's
    package for python has not supported USE=ipv6, but the sysctl works
    quite well.


    How OS-specific is this? I "asked Mr. Google" and the NordVPN web
    page recommended for Redhat based distros...


    It is specific to the linux kernel, that is all. You may replace "all"
    with the name of a machine-specific interface (as listed by "ip addr")
    to express settings that are specific to a given interface. Most people
    do not need that flexibility and simply want all interfaces to look the
    same.


    --
    Eli Schwartz


    --------------7P3X1eE5d4z3w2ofqznKj0oC--

    -----BEGIN PGP SIGNATURE-----

    wnsEABYIACMWIQTnFNnmK0TPZHnXm3qEp9ErcA0vVwUCZvQdoAUDAAAAAAAKCRCEp9ErcA0vV0T8 AQDqEjR+H1NSlB6U9q4ausVyL1cX56J/WIfPKajDIS2ZgwEAhRDLVFB/J55SRXYdP9Nn/TWeIJ/H qEuGy6P4XL7/Igk=
    =xeMp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Walter Dnes@21:1/5 to All on Thu Sep 26 00:30:02 2024
    On Wed, Sep 25, 2024 at 01:53:49PM +0200, Arsen Arsenović wrote

    I suspect your Firefox anecdote happened due to misconfiguration
    (I think network.http.fast-fallback-to-IPv4 dictates the use of this algorithm in Firefox).

    I do not recall ever touching it in about:config. In my current
    browser (Pale Moon) that setting is at its default value of "true".

    As a point of reference, I do nothing to disable IPv6 support, and my
    ISP does not provide IPv6 support, yet I have no added latency due to
    IPv6 support being enabled. I just get the benefits of better LANs and internal networks.

    There is no reason to disable IPv6 support, as Eli said (especially if
    yo do not know _what_ you're trying to disable, and are just trying to blanket-disable a vague concept of IPv6).

    This is *NOT* about a "vague concept". This is about solving a bug
    that makes browsing unbearable. I'm not the only one. See archive https://public-inbox.gentoo.org/gentoo-user/14d2d8af-e7b9-d5e6-06c1-a7f3ad01ac23@gmail.com/

    When syncing portage today I saw what the delay is: apparently it
    tries ipv6 twice, fails, then resorts to ipv4 which works fine.

    Most of my systems now have ipv6 support removed, and viola! no
    more delays.

    In his case, the delay was only 10 seconds, but a delay nonetheless.
    This raises another point, it was not just Firefox that ran into
    problems, but rather anything that talked to the internet.

    Back in January, my ISP migrated me from cable to fibre. I went from
    legacy 10 mbits down 1 up, 200 gigabytes/month quota, to "30 mbits
    symmetric unlimited" for the same price. The fibre service does have
    IPV6 enabled, and I'll get around to going IPV6 one of these days,
    especially if there's a "flag day" shutdown of IPV4.

    --
    There are 2 types of people
    1) Those who can extrapolate from incomplete data

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Eli Schwartz@21:1/5 to Walter Dnes on Thu Sep 26 02:30:01 2024
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------f0GLsQB8nah2Z06DiLVUP51S
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable

    On 9/25/24 6:21 PM, Walter Dnes wrote:
    There is no reason to disable IPv6 support, as Eli said (especially if
    yo do not know _what_ you're trying to disable, and are just trying to
    blanket-disable a vague concept of IPv6).

    This is *NOT* about a "vague concept". This is about solving a bug
    that makes browsing unbearable.


    I think the two of you are talking past each other. What did Arsen mean
    by "the vague concept of IPv6"? I suspect he meant:

    You are trying to solve a concrete user issue with your browsing.

    Your idea of how to solve the user issue is to blame IPv6, then get all
    meta about how to solve it and decide that the vague concept of IPv6
    must be eradicated and purged from the public consciousness -- rather
    than disabling the specific issue that is causing problems.


    I'm not the only one. See archive https://public-inbox.gentoo.org/gentoo-user/14d2d8af-e7b9-d5e6-06c1-a7f3ad01ac23@gmail.com/

    When syncing portage today I saw what the delay is: apparently it
    tries ipv6 twice, fails, then resorts to ipv4 which works fine.

    Most of my systems now have ipv6 support removed, and viola! no
    more delays.

    In his case, the delay was only 10 seconds, but a delay nonetheless.
    This raises another point, it was not just Firefox that ran into
    problems, but rather anything that talked to the internet.


    Hmm, that's basically what I said up-thread too. :) Portage, like many
    other packages, talks to the internet and can have timeouts when IPv6 is broken.

    And there is no USE=ipv6 to disable for portage, nor for
    dev-lang/python, nor for dev-python/requests. So how do you fix the problem?

    Via the kernel command line or the sysctl. Easy.

    In the thread you link to, people spent days blaming systemd for
    "blocking ipv6 removal in our kernel .config" and had to switch init
    systems just so they could reconfigure and rebuild their kernel.

    Eventually someone suggested setting ipv6.disable_ipv6=1 on the kernel
    command line. But the person with the original issue had already, by
    that time,

    """
    managed to switch back to openrc. That didn't go real smoothly, portage couldn't figure out how to do it on it's own after switching profiles,
    it was blindly removing and rebuilding some packages manually that
    eventually made it work and not want to pull in systemd again
    """

    and never actually bothered setting the kernel command line, nor
    listening to the advice of the people in the thread who suggested that
    the kernel .config option for systemd is not actually required to run
    systemd, it's just a quick toggle for people who want to bulk-enable
    settings that are best to use when running systemd.

    And this is why rumors of how you need to set USE="-ipv6" to "make your
    system stop timing out" spread. Because no one actually pays attention
    to reality, and no one actually bothers to test the kernel command line
    or sysctl options, so they spend days recompiling their system and
    juggling USE flags and swapping back and forth between init systems in
    the hope that it will stop the timeouts.

    And all along it was literally a couple lines in a text file and one
    `sysctl` command away, without even needing to reboot.

    All it takes is people not running around like headless chickens.

    All it takes is people not claiming that the Gentoo Developers have
    "infamously made a USE flag change that made everyone's systems suddenly break".



    --
    Eli Schwartz


    --------------f0GLsQB8nah2Z06DiLVUP51S--

    -----BEGIN PGP SIGNATURE-----

    wnsEABYIACMWIQTnFNnmK0TPZHnXm3qEp9ErcA0vVwUCZvSp6AUDAAAAAAAKCRCEp9ErcA0vV9ea AQDGoWadhZRK4ohD+Vb6Lx1NxmM+2fUTJlczGK0oAR6FLgEAm663b7J3oVE4D9bJyLJC6RJ/spv2 sdjbR5RQ5VfwLwI=
    =5vJs
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Michael Orlitzky@21:1/5 to Eli Schwartz on Thu Sep 26 02:20:01 2024
    On 2024-09-24 21:42:23, Eli Schwartz wrote:

    Please do not disable the USE=ipv6, as that is *utterly* insane. It also
    does approximately nothing. In packages which support this USE flag,
    which is rare, it causes the code to use old, untested APIs which only support ipv4, rather than new, tested APIs that support ipv4 and ipv6
    equally well while having the benefit of being stable, reliable and efficient.

    I think this greatly depends on the package. djbdns is fresh on my
    mind, and djbdns[ipv6] will pull in a massive third-party patch to add
    support for serving ipv6 records. The changes are so pervasive that
    (a) they required manually re-rolling several ipv4 security patches,
    and (b) may reintroduce some of the same security issues over ipv6, if
    nobody is filing CVEs against the patch. It's not clear-cut, but you
    can certainly argue that you're better off without USE=ipv6 if you're
    not serving ipv6 records.

    Pkgcheck has been warning about "bad" instances of USE=ipv6 for some
    time now. The longer the warning stays in place, the more packages we
    can expect to import some special useful meaning to it.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Walter Dnes@21:1/5 to Eli Schwartz on Thu Sep 26 07:10:01 2024
    On Wed, Sep 25, 2024 at 08:25:12PM -0400, Eli Schwartz wrote

    I think the two of you are talking past each other. What did Arsen mean
    by "the vague concept of IPv6"? I suspect he meant:

    You are trying to solve a concrete user issue with your browsing.

    Correct.

    Your idea of how to solve the user issue is to blame IPv6, then get all
    meta about how to solve it and decide that the vague concept of IPv6
    must be eradicated and purged from the public consciousness

    You're overdoing it and you seem offended. I was not "thinking deep
    thoughts about IPV6" or going off the deep end with QANON conspiracies.
    Back then I was unaware of the power of sysctl or using the kernel
    command line. All that I (and a lot of other people) knew was that...

    USE="ipv6" ==> delays and timeouts for people on IPV4-only systems

    USE="-ipv6" ==> problems solved for people on IPV4-only systems

    This was simply a pragmatic decision to solve a problem. Firefox
    with USE="ipv6" probably would've worked OK on a machine with a working
    IPV6 connection.

    -- rather than disabling the specific issue that is causing problems.

    Looking at the output of "sysctl -a | grep net.ip | less" *ON MY
    SYSTEM*, I see a slew of "net.ipv4.*" entries, but no "net.ipv6.*"
    entries, so there's no "sysctl knob" to tweak.

    --
    There are 2 types of people
    1) Those who can extrapolate from incomplete data

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From James Cloos@21:1/5 to All on Thu Sep 26 21:20:01 2024
    "WD" == Walter Dnes <waltdnes@waltdnes.org> writes:

    This is *NOT* about a "vague concept". This is about solving a bug
    that makes browsing unbearable. I'm not the only one. See archive https://public-inbox.gentoo.org/gentoo-user/14d2d8af-e7b9-d5e6-06c1-a7f3ad01ac23@gmail.com/

    if you want your box always to prefer ipv4 over ipv6, edit /etc/gai.conf
    and add this line:

    precedence ::ffff:0:0/96 100

    then the network stack will try ip6 addresses only for names which have
    AAAA records but do not have A records in dns.

    -JimC
    --
    James Cloos <cloos@jhcloos.com>
    OpenPGP: https://jhcloos.com/0x997A9F17ED7DAEA6.asc

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)