From c55e6e1fcf66fac0d56daa0e0fba822584f49dee Mon Sep 17 00:00:00 2001 From: inference Date: Tue, 23 May 2023 07:16:26 +0100 Subject: [PATCH] Add xb000-0 Portage make.conf version 9.0.0.35. --- server/xb000-0/portage/make.conf | 59 ++++++++++++++++++++++++++++++++ 1 file changed, 59 insertions(+) create mode 100644 server/xb000-0/portage/make.conf diff --git a/server/xb000-0/portage/make.conf b/server/xb000-0/portage/make.conf new file mode 100644 index 0000000..1b09271 --- /dev/null +++ b/server/xb000-0/portage/make.conf @@ -0,0 +1,59 @@ +# Inferencium - xb000-0 +# Portage - make.conf + +# Copyright 2023 Jake Winters +# SPDX-License-Identifier: BSD-3-Clause + +# Version: 9.0.0.35 + + +# System +## Appearance +NOCOLOR="false" +## CHOST +CHOST="x86_64-gentoo-linux-musl" +## Directories +PORTAGE_LOGDIR="/var/log/portage/" +DISTDIR="/var/cache/distfile/" +PKGDIR="/var/cache/bin/" +## Language +LC_MESSAGES="C" +LINGUAS="en" +L10N="en-GB" +## Gentoo mirrors +## ONLY IPV4 + IPV6 DUAL-STACK MIRRORS SHOULD BE USED! IPV4 IS BEING PHASED OUT! +## IF IPV6-ONLY IS SUPPORTED BY ISP, IPV6-ONLY MIRRORS SHOULD BE PREFERRED! +#GENTOO_MIRRORS="rsync://mirror.bytemark.co.uk/gentoo/ rsync://rsync.mirrorservice.org/sites/distfiles.gentoo.org/ rsync://mirror.init7.net/gentoo/ rsync://ftp.iij.ad.jp/pub/linux/gentoo/ rsync://ftp.jaist.ac.jp/pub/Linux/gentoo/" +## Emerge +BINPKG_COMPRESS="zstd" +BINPKG_COMPRESS_FLAGS="-7" +CLEAN_DELAY="10" +EMERGE_DEFAULT_OPTS="--ask --jobs 1 --load-average 2 --verbose" +FEATURES="buildpkg ipc-sandbox merge-sync metadata-transfer network-sandbox pid-sandbox sandbox strict unknown-features-filter" +MAKEOPTS="--jobs 2" +PORTAGE_CHECKSUM_FILTER="-* sha256 sha512" +PORTAGE_RSYNC_EXTRA_OPTS="--progress --verbose" + + +# Flags +## Hardening flags +C_SEC="-fstack-clash-protection -fstack-protector-strong -ftrivial-auto-var-init=zero -fwrapv" +LD_SEC="-Wl,-z,defs -Wl,-z,now -Wl,-z,relro" +## Compiler flags +CFLAGS="-flto=thin -march=znver1 -mtune=znver1 --optimize=2 -pipe ${C_SEC}" +CXXFLAGS="-flto=thin -march=znver1 -mtune=znver1 --optimize=2 -pipe ${C_SEC}" +RUSTFLAGS="-C debuginfo=0 -C embed-bitcode=y -C lto -C opt-level=2 -C target-cpu=znver1" +## Linker flags +LDFLAGS="-Wl,-O2 -Wl,--strip-all -Wl,--thinlto-jobs=2 ${LD_SEC}" +## USE flags +USE="clang dbus llvm-libunwind lto nftables postgres system-av1 system-harfbuzz system-icu system-jpeg system-libvpx system-llvm system-png system-webp verify-sig" +USE="${USE} -jit -mysql -systemd -wayland -X" +## CPU flags +CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt rdrand sha sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3" +## ABI flags +ABI_X86="64" +## LLVM target flags +LLVM_TARGETS="X86" +## Nginx modules +NGINX_MODULES_HTTP="access addition auth_basic auth_request autoindex browser cach_purge charset degradation echo fastcgi headers_more limit_conn limit_req memcached push_stream random_index referer rewrite scgi secure_link gunzip gzip gzip_static proxy slice" +NGINX_MODULES_STREAM="access limit_conn ssl_preread return"