• [gentoo-user] How to disable the modules service?

    From Dex Conner@21:1/5 to All on Sun Oct 23 12:00:02 2022
    Hi all,

    I've went module-less and the rc service called modules is still running
    at startup even when I remove it with rc-update del modules boot. Is the
    only way to solve this to remove the loaded modules from the config
    files every time they are added?

    Thank you!

    --
    Dex

    -----BEGIN PGP SIGNATURE-----

    iQKTBAABCgB9FiEE2ISlnG4xsFQ7Mswex1Y9SzFDEmcFAmNVD7BfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQ4 ODRBNTlDNkUzMUIwNTQzQjMyQ0MxRUM3NTYzRDRCMzE0MzEyNjcACgkQx1Y9SzFD EmcxEBAArZImANtUVzcVczYVtb3yHtaNGm/UsHtrznA2to7rnUCHWGYOo0m0Jsd2 PNcbfrzB1aG5tYvlC7BycTbIjsdfKgblqGczl1EC2S7X87yTgCw9Z5WfPhHP3L3y MbcWN6sryghVC9kDu5encG2qv60/FTcEsgymUabwoowKTG6J8BnO8j1Ey8mAA+d6 6k5IzYafPuUSmI5B9v/HVXF4E4G4my4c1qy9ObZ+reK2q8NUZMxrLAV4KRDNT0HU NOsu8ftpka9ids86tRjaZkbRUFPfZvy5lAFIEPp6oHQfYhR5eWGoTJuBJYJIo1Er EGMFAz5gMfiswjfka8XRxbsgEa9WFH7Wj82KLDH8vgmKsQsuUe0Burc3GjskthqY 9PDKqG9fpdG3N/JttqpjhNMKWuk32vt1Agm2WOhXFDBsTj8+xTscgGkG/GJBdOpy H2snwf/LQxN0Asw/Pvr7asVBIfvDME8/0oFAC2nt0Awli5xAjFszSmvzaaLuNHY6 7ZRwLIX9TkIAijYGM3nMJ2V48ntCDoFVviRPEgHrdBrBLNG18CXhASSOyjzCZiDG TGweaulvUrEH7nK4/s5ge7aLhQKWBi96H5WHdCOPFCJORBNKz9I3TieLSWnr9SJU XQINWVXGd9S5hD6Jm2FPHILYhWCMKpHr7yHqiMIHWGtMrV0nNYs=
    =x6X8
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Peter =?ISO-8859-1?Q?B=F6hm?=@21:1/5 to All on Sun Oct 23 12:50:01 2022
    Hi Dex,

    we have a wiki article for this: https://wiki.gentoo.org/wiki/Kernel_Modules#Going_completely_.22module-less.22

    Greetings,
    Peter

    Am Sonntag, 23. Oktober 2022, 11:56:00 CEST schrieb Dex Conner:
    Hi all,

    I've went module-less and the rc service called modules is still running
    at startup even when I remove it with rc-update del modules boot. Is the
    only way to solve this to remove the loaded modules from the config
    files every time they are added?

    Thank you!

    --
    Dex

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dex Conner@21:1/5 to All on Sun Oct 23 13:40:01 2022
    On 22/10/23 12:45PM, Peter B�hm wrote:
    Hi Dex,

    we have a wiki article for this: https://wiki.gentoo.org/wiki/Kernel_Modules#Going_completely_.22module-less.22



    Hello Peter,

    Unfortunately I had already followed that guide for going module-less
    and the rc service called modules is still running. I have found that it
    is the /etc/init.d/modules file which sources some folders including /usr/lib/modules-load.d which has a module in it. I think this module (pkcs8_key_parser) gets created after I update iwd. Is there a way to
    actually remove the modules service instead of removing the modules from
    the directories repeatedly?

    Thank you

    --
    Dex

    -----BEGIN PGP SIGNATURE-----

    iQKTBAABCgB9FiEE2ISlnG4xsFQ7Mswex1Y9SzFDEmcFAmNVJaZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQ4 ODRBNTlDNkUzMUIwNTQzQjMyQ0MxRUM3NTYzRDRCMzE0MzEyNjcACgkQx1Y9SzFD EmevXg/5AUlA7jt9pP0noZPRPW8B4muJ8G26VSpIh9W0pJeq9Hliip4EXBvYT6JE b4Jz1Aga469qUrLEKGZ7bEW4UWySl6u10qmwxPm2aPxXrwqVJuopQAwIo3f7gKLS y3/U9nE3wwB4s6aTM7e+ILwaPmYxfF1XUr5nYZgaOgnrwuISpgvteW41L4fYZVXG VFzsBiWgXuL0k4BIncY8rZdqusdOH/Bof6S0BnmCo4ef1Xr+WfILfJyJNMcB+Wo3 GmvQsbtDqZEgZtt4YT87v1mF7ykJBD3o/UrBpYfI+Aht4CVoU6d6jiaadmUTuF9C GCqQ90RIig/yJdmRMrbilERT1ODu6QhgrH2iAeGzJ3Nuoe0oz3fei6OhpVcMF2a3 s4QCo3Jz8b8xbXeZgiRXbmpipP7tzofCELYpe3W/6ZoR6+nnIm2jaA5wiDL2JYul /AKN+KxaUxG81pdxyaW4x4ZbNyuUs0OWw08iK55bSLMI2Sa3Sj6Lwas/ttaverEn iBF1FaGP2g5uI5Y5CywIAn+GA4JNI7Km5uXhnVt22PL5/EL2tl80+0HW9hYe1uID t1o+k3gw6t/37LF6XGv8CT9KihZ6VysgtGXM+hsCoYFzOGx5vDLASYxbwmzUEJjA GcltuC+rk20MV2dcGqUeDhOYokZH7EweGuutNbXE0GgM8ggJpEQ=
    =lgbI
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dale@21:1/5 to Dex Conner on Sun Oct 23 13:50:01 2022
    Dex Conner wrote:
    On 22/10/23 12:45PM, Peter B�hm wrote:
    Hi Dex,

    we have a wiki article for this:
    https://wiki.gentoo.org/wiki/Kernel_Modules#Going_completely_.22module-less.22


    Hello Peter,

    Unfortunately I had already followed that guide for going module-less
    and the rc service called modules is still running. I have found that it
    is the /etc/init.d/modules file which sources some folders including /usr/lib/modules-load.d which has a module in it. I think this module (pkcs8_key_parser) gets created after I update iwd. Is there a way to actually remove the modules service instead of removing the modules from
    the directories repeatedly?

    Thank you

    --
    Dex


    First, I don't know much about this.� I did read a bit of the article
    linked to tho.� Could there be a USE flag that will make it not install modules?� I recall seeing kmod mentioned for some packages.� It may not
    apply here and if it doesn't, ignore me.� It could be worth looking into
    what the USE flags add or remove, just to be sure.

    Hope that helps.

    Dale

    :-)� :-)�

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Peter =?ISO-8859-1?Q?B=F6hm?=@21:1/5 to All on Sun Oct 23 17:10:02 2022
    Rainer,

    the handbook still recommends to build sound modules (and many many others) as module, because it is easier than doing a static configuration. Now, you can ask, why someone wants to build it static into the kernel. The answer is: Security !

    Maybe you know this wiki article: https://wiki.gentoo.org/wiki/Signed_kernel_module_support

    This is a pre-condition for enabling LOCKDOWN in the kernel ... OR ... you
    have NO modules support (=monolithic kernel) ! So, you have the choice which way you want to go.

    I am using a monolithic kernel also. Dont try to enable lockdown in your
    kernel if you use unsigned modules. ;-) I wrote a big warning in my wiki article:
    https://wiki.gentoo.org/wiki/User:Pietinger/Tutorials/ Kernel_Hardening_with_KSPP

    Regards,
    Peter

    Am Sonntag, 23. Oktober 2022, 16:19:49 CEST schrieb Dr Rainer Woitok:
    Peter,

    On Sunday, 2022-10-23 12:45:42 +0200, you wrote:
    ...
    we have a wiki article for this: https://wiki.gentoo.org/wiki/Kernel_Modules#Going_completely_.22module-les s.22
    When I built my first Gentoo system in 2019, the Handbook instructed to build anything sound related as modules, if I remember correctly. Is
    this no longer true?

    Sincerely,
    Rainer

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dr Rainer Woitok@21:1/5 to you on Sun Oct 23 16:30:01 2022
    Peter,

    On Sunday, 2022-10-23 12:45:42 +0200, you wrote:

    ...
    we have a wiki article for this: https://wiki.gentoo.org/wiki/Kernel_Modules#Going_completely_.22module-less.22

    When I built my first Gentoo system in 2019, the Handbook instructed to
    build anything sound related as modules, if I remember correctly. Is
    this no longer true?

    Sincerely,
    Rainer

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Neil Bothwick@21:1/5 to Dex Conner on Sun Oct 23 17:40:02 2022
    On Sun, 23 Oct 2022 07:29:42 -0400, Dex Conner wrote:

    Unfortunately I had already followed that guide for going module-less
    and the rc service called modules is still running. I have found that it
    is the /etc/init.d/modules file which sources some folders including /usr/lib/modules-load.d which has a module in it. I think this module (pkcs8_key_parser) gets created after I update iwd. Is there a way to actually remove the modules service instead of removing the modules from
    the directories repeatedly?

    You could blacklist the module in /etc/modules.d, but will iwd still work without it?


    --
    Neil Bothwick

    Artificial Intelligence usually beats real stupidity.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEE8k9T/rX16EJxEKG692eFu0QSMJgFAmNVXzAACgkQ92eFu0QS MJgcgQ/+Kp6Afl1vHdiQokg8cuHOi6xMC2/7P2OldDTvmMs+ejR8ahsjuB2MWT6K hTY/dWyqeqtFRCYaoV2AUaKk4fWFKxBjUaNsQM9EPwOVf5KeCL95E+yBAYo6ZB4n Deq/peh4k8fJy4YEpLSkSMZvllalq7xJ3KPCQgb0crfRRSlKXe0PtBVcBEOU45fN Hfsrsk7WkOAKod7g26WKLmosPDruYa5WUYkg5m1BUd5p/tT2+iFbilE7D2P2dtCJ QhPIpcKBu8+Me+65jJFUhYeIwaJiejYSi0PEKCB7djt6zgh5QeS6+WDi3L2U8UNh 9b1Tv2/UNWpWIA+W0acrbizIjNc0ZGiBuAVJiqHL9MKQ5IZ9dARGs0tX7ZeEJ7Os z66h9SfgYCAr+LkNCt7rGNDOxQyrdpvFcGQXudVGc+e01l4WL2SBxLZ2UGa/oXw1 gwGOBDTnxbYZQ61QoNPvnItkh/PNImKp0Uu2wgCinQN/ZWStmg1kVxUtlculRdwB zqro0Fu07O4oASMUc1SmRb8dSjB/4BLRbxJJrOCyIchu8NpTnVC942EuNH6XxIpP 8qvwDyK0j12Dj4SDGsBepIi4dLNldOcD4QvCm2yFb1O9cr9IYZgtNDd04Tobw+o1 hIIS7f0jo7aL1gcbVqWsS516QhlS/qCdFJWTEa+pgdvYUBcUtyE=
    =yui1
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dex Conner@21:1/5 to Neil Bothwick on Mon Oct 24 08:00:01 2022
    On 22/10/23 04:35PM, Neil Bothwick wrote:
    On Sun, 23 Oct 2022 07:29:42 -0400, Dex Conner wrote:

    Unfortunately I had already followed that guide for going module-less
    and the rc service called modules is still running. I have found that it
    is the /etc/init.d/modules file which sources some folders including /usr/lib/modules-load.d which has a module in it. I think this module (pkcs8_key_parser) gets created after I update iwd. Is there a way to actually remove the modules service instead of removing the modules from the directories repeatedly?

    You could blacklist the module in /etc/modules.d, but will iwd still work without it?

    That seems like a good idea but since I don't have modprobe after
    setting -kmod, it throws an error. I think I should get some sort of
    hook working after each iwd update so that the file is automatically
    removed.

    Thank you everyone

    --
    Dex

    -----BEGIN PGP SIGNATURE-----

    iQKTBAABCgB9FiEE2ISlnG4xsFQ7Mswex1Y9SzFDEmcFAmNWKWhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQ4 ODRBNTlDNkUzMUIwNTQzQjMyQ0MxRUM3NTYzRDRCMzE0MzEyNjcACgkQx1Y9SzFD EmcRWQ/+KjQzdfjLHLb0sldsDoySOltHd+o0DJy/HWg+EDpDeGe3mVkhmD0laQhI 9ysPl4Va0C4ZoNSLYlnS1LF28h7/35QtQkkP2uUKbfQt6HufcMekp6TbXYYUtLBF mDuw6NKRTTRn16SFWBwOe3yEfFnbbkWClOxCp9TN24l/3iNtyqNMAjimLcnC5e8q vM2vriqTR75TVHcXA2nWYC0iCE+hOqfVPexH4weWInHF/ktnWXfDUpusLz5sK8Ho 38sbFQVYNeeh1wago0HYQUAjTCWWN8vRun3KGQlKWna9z+KAUBK/VQL+KiZ95CCO zv+Z2kx7Xn2PlJhB7K5Q0g1JikAwwxThe8wwE2dmalz2Z3QC65agaO7u1IeGCYjC A7K/yApau/MKhiFWAoKCkbXInfTSbVu5MPaPxIi/QyQfvR7MXiSRuU6SkZJr3mpR e7qAdaovMfAC+vepk7aH0bZmHLcAvmmoFVQartEMNihcJwN2vyQ/RcmwMLfpfaxm UTUStsw9u2WeVN0DMAWQkpNf2c2ZLNz0/wdfxBFy/U6kS7gBfi6l1tyNwZw/9t62 lXfnhE3AoJvqCcz50r20vrrptdBWMiY9kSutUPbqDKyH75NW/pkHffaCezwsxRJR pW8iE3TxdGqtDqnd7Fh/C4aHsCOmzB4hLdqcVxz8l0weWLY6dJY=
    =xFg6
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)