My personal gentoo configuration on my MacbookPro 11,2. Feel free to use it.
| Item | Detail |
|---|---|
| Model | MacbookPro 11,2 (Late 2014) |
| Kernel | 4.9.76-gentoo-r1 |
| Disk Encryption | LUKS on LVM |
| Bootloader | systemd-boot |
| Wireless | broadcom-sta |
| Graphics | xf86-video-intel |
| Backlight | light, kbdlight |
| Audio | amixer |
The guide is provided "as is" without warranty of any kind, either expressed or implied, including, but not limited to, the implied warranties of correctness and relevance to a particular subject. The entire risk as to the quality and accuracy of the content is with you. Should the content prove substandard, you assume the cost of all necessary servicing, repair, or correction.
Should this guide miss anything important or stated something wrong, please tell me at once. I'll corrected it ASAP.
Download the latest boot image. I recommend that you download the Hybrid ISO (LiveDVD) - 2GiB and boot in text mode.
After downloading the iso, insert an UNUSED USB thumb drive and use lsblk to confirm the device path. Then run:
# dd if=/path/to/the/iso of=/dev/sdc bs=4M
The above command will destroy its original data, and "write" the iso to your external hard drive from which we will be able to boot later.
Generally speaking, /dev/sda should be the built in hard drive, while /dev/sd{b..z} should be external storages.
Shutdown your Macbook. Now hold the alt/option key and press the power button. Wait a few second until the boot entry shows up, and select the correct one to boot from.
Make sure that you boot in text mode(there should be an option). The default font size is just too small to read. To make the font bigger
# setfont sun12x22
Note that throughout this guide, we will be using LUKS on LVM. If you prefer other partitioning schemes, please refer to other guides.
Use cfdisk, cgdisk, fdisk or whatever tools you like to partition the drive. Then run:
# cryptsetup --verbose --cipher aes-xts-plain64 --key-size 256 --hash sha1 --iter-time 1000 --use-random luksFormat /dev/sda2
# cryptsetup luksOpen /dev/sda2 lvm
# pvcreate /dev/mapper/lvm
# vgcreate vgcrypt /dev/mapper/lvm
# lvcreate --size 20G --name root vgcrypt
# lvcreate --extents +100%FREE --name home vgcrypt
# mkfs.ext4 /dev/mapper/vgcrypt-root
# mkfs.ext4 /dev/mapper/vgcrypt-home
After all these steps, my lsblk output is as follow:
# lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 233.8G 0 disk
├─sda1 8:1 0 200M 0 part --> EFI Partition
├─sda2 8:2 0 232.9G 0 part --> Our Daily-use Partition
│ └─root_sda2-vgcrypt-root 254:0 0 232.9G 0 crypt
│ ├─vgcrypt-root 254:1 0 20G 0 lvm /
│ └─vgcrypt-home 254:2 0 212.9G 0 lvm /home
└─sda3 8:3 0 619.9M 0 part --> Recovery HD
sdb 8:16 1 120.9G 0 disk
└─sdb1 8:17 1 120.9G 0 part --> Live USB
I recommend using Ethernet here. Wireless Connection can somehow be tricky to configure (we will cover this later). Plugin a ethernet adapter with cable attached, and run:
# dhcpcd
If for whatever reason the connection cannot be established, run pkill dhcpcd and try again.
Use ping -c 3 www.google.com to check if the connection is working.
| Partition | Mount Point |
|---|---|
| /dev/mapper/vgcrypt-root | /mnt/gentoo |
| /dev/mapper/vgcrypt-home | /mnt/gentoo/home |
# mount /dev/mapper/vgcrypt-root /mnt/gentoo
# mkdir -p /mnt/gentoo/home
# mount /dev/mapper/vgcrypt-home /mnt/gentoo/home
cd into /mnt/gentoo and retrieve a stage3 tarball. Then extract it:
# cd /mnt/gentoo
# wget https://gentoo.osuosl.org/releases/amd64/autobuilds/current-stage3-amd64-systemd/stage3-amd64-systemd-20180302.tar.bz2
# tar xvjpf stage3-*.tar.bz2 --xattrs
# rm stage3-*
We also need to download and unpack fresh portage tree:
wget http://distfiles.gentoo.org/releases/snapshots/current/portage-latest.tar.xz
tar xvf portage-latest.* -C /mnt/gentoo/usr
rm portage-latest.*
First copy /etc/resolv.conf to /mnt/gentoo/etc/resolv.conf
# cp -L /etc/resolv.conf /mnt/gentoo/etc/resolv.conf
Then mount kernel resources
# mount -t proc proc /mnt/gentoo/proc
# mount --rbind /sys /mnt/gentoo/sys
# mount --rbind /dev /mnt/gentoo/dev
# mount --make-rslave /mnt/gentoo/sys
# mount --make-rslave /mnt/gentoo/dev
Now we are ready to chroot into the new system
# chroot /mnt/gentoo /bin/bash
# env-update && source /etc/profile
Edit /etc/fstab:
# nano /etc/fstab
/dev/mapper/vgcrypt-root / ext4 rw,relatime,data=ordered,discard 0 1
/dev/mapper/vgcrypt-home /home ext4 rw,relatime,data=ordered,discard 0 2
Edit /etc/portage/make.conf. The following is the content of mine.
# nano /etc/portage/make.conf
CFLAGS="-march=native -O2 -pipe"
CXXFLAGS="${CFLAGS}"
CHOST="x86_64-pc-linux-gnu"
MAKEOPTS="-j9"
EMERGE_DEFAULT_OPTS="--jobs 8"
ACCEPT_LICENSE="*"
ACCEPT_KEYWORDS="amd64"
INPUT_DEVICES="evdev mtrack"
VIDEO_CARDS="intel i965"
FEATURES="binpkg-logs clean-logs split-log"
USE="cryptsetup systemd branding -bindist -consolekit truetype unicode"
CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3"
PORTDIR="/usr/portage"
DISTDIR="${PORTDIR}/distfiles"
PKGDIR="${PORTDIR}/packages"
GENTOO_MIRRORS="http://ftp.twaren.net/Linux/Gentoo/"
Note that it's -O2, not -02.
MAKEOPTS="-j9" to compile in 9 threads to better utilize multicore CPU and speedup compilation.
Since we have an 8-core cpu, so core_number+1 = 9.
# ln -sf /usr/share/zoneinfo/Asia/Taiwan /etc/localtime
# hwclock --systohc --utc
Uncomment the locales you are going to use in /etc/locale.gen. Then run:
# locale-gen
# eselect locale list
# eselect locale set X (choose one)
I have broadcom BCM4360 chip. The process of configuration is a pain in the ass. You have two options:
- Just take my kernel config,and follow my guide. (recommended)
- Manual configuration.
The latter options requires you to disable certain kernel options, while each of these options has many other options as dependencies. Hence, I recommend that you just take my config.
Check your broadcom chip version.
# lspci | grep Broadcom
02:00.0 Network controller: Broadcom Limited BCM4360 802.11ac Wireless Network Adapter (rev 03)
If you have this chip, install broadcom-sta. The open-source version (e.g., b43) does NOT work for me.
Also make sure the correct kernel parameter is set according to this wiki page.
Install the closed-source driver broadcom-sta, remap kernel modules, remove all wireless modules and reload wl.
# emerge -av net-wireless/broadcom-sta
# depmod –a
# rmmod b43
# rmmod ssb
# rmmod wl
# modprobe wl
Blacklist other modules that will interfere with wl upon loading kernel.
# nano /etc/modprobe.d/blacklist.conf
blacklist b43
blacklist sbb
I use genkernel to configure the kernel with ease.
# emerge --ask sys-kernel/gentoo-sources
# echo "sys-kernel/genkernel-next cryptsetup" >> /etc/portage/package.use/genkernel-next
# emerge -av sys-kernel/genkernel-next sys-fs/cryptsetup sys-fs/lvm2
Check /etc/genkernel.conf and set the following options.
# nano /etc/genkernel.conf
MENU_CONFIG="yes"
MRPROPER="no"
MAKEOPTS="-j9"
LVM="yes"
LUKS="yes"
DMRAID="no"
BUSY_BOX="yes"
UDEV="yes"
MDADM="no"
FIRMWARE="no"
IMPORTANT: Mount /dev/sda1 on /boot before compiling the kernel.
You can use my kernel config by copying it into /usr/src/linux/.config
Or if you want to manually configure everything, please refer to the official wiki.
# mount /dev/sda1 /boot
# genkernel all
I'm using systemd-boot (formerly called gummiboot). This bootloader is already packaged with systemd, so no additional package is required.
If you haven't installed it before, run
# bootctl --path=/boot install
Then create a bootloader entry. Make sure you've typed everything correctly, else it wouldn't boot properly.
# nano /boot/loader/entries/gentoo.conf
# /boot/loader/entries/gentoo.conf
title Gentoo Linux
linux /kernel-genkernel-x86_64-4.9.76-gentoo-r1
initrd /initramfs-genkernel-x86_64-4.9.76-gentoo-r1
options crypt_root=/dev/sda2 root=/dev/mapper/vgcrypt-root root_trim=yes init=/usr/lib/systemd/systemd acpi_osi= acpi_mask_gpe=0x06 rw dolvm
acpi_osi= acpi_mask_gpe=0x06 is an option to suppress the infamous gpe06, an interrupt that goes crazy on Macbooks.
dolvm must be included in options to boot properly with LVM.
Install NetworkManager, a convenient cli tool to manage your network connections.
# emerge networkmanager -va
Change root password.
# passwd
Reboot and check if everything works.
# reboot
Enable NetworkManager service.
# systemctl enable NetworkManager
# systemctl start NetworkManager
Set hostname.
# echo "Veil" > /etc/hostname
Edit host file.
# nano /etc/hosts
127.0.0.1 Veil.local Veil localhost
::1 Veil.local Veil localhost
Fix printk noise.
# nano /etc/systemd/system/dmesg-console-off.service
# /etc/systemd/system/dmesg-console-off.service
[Unit]
Description=Disable printing of kernel messages to console
[Service]
Type=oneshot
ExecStart=/bin/sh -c "echo 0 > /proc/sys/kernel/printk"
[Install]
WantedBy=multi-user.target
# systemctl enable dmesg-console-off.service
Add a user.
useradd --create-home --groups wheel --shell /bin/bash aesophor
passwd aesophor
Setup sudo.
emerge -av sudo
Then uncomment %wheel ALL=(ALL) ALL.
Install utilities
emerge -av zsh vim gentoolkit`
In my case, I'm using KDE + i3-gaps and systemd.
I chose [20] default/linux/amd64/17.0/desktop/plasma/systemd (stable) *
# emerge-webrsync
# eselect profile list
# eselect profile set <profile_id>
Now install the packages based on the profile you choose. This will take a while.
# emerge --ask --update --deep --newuse @world
Ensure the correct drivers are installed.
# emerge -av x11-base/xorg-drivers
# emerge -av x11-base/xorg-server
# emerge -av x11-drivers/xf86-video-intel
# emerge -av x11-drivers/xf86-input-mtrack
Then copy my config /etc/X11/xorg.conf and /etc/X11/xorg.conf.d/*
Now you only need to edit ~/.xinitrc before you type startx. If you have already installed the package kde-plasma/plasma-desktop (minimal desktop) or kde-plasma/plasma-meta (full desktop environment), then add this as the last line of ~/.xinitrc
exec startkde
Then startx. Congratulations.
For further customizations, please check my dotfiles. Feel free to use them, this would save you some time.
This one is a motherfucker. When I plugin a miniDP-VGA adapter and run dmesg, I always got the following
[45075.649633] thunderbolt 0000:07:00.0: resetting error on 0:c.
[45075.649692] thunderbolt 0000:07:00.0: 0:c: got unplug event for disconnected port, ignoring
which indicates that plug/unplug events are inverted.
What's worse, xrandr insists that the adpater is not connected.
DP1 disconnected (normal left inverted right x axis y axis)
However, this message is misleading. You can simply force VGA output over miniDP by running
xrandr --output eDP1 --mode 1280x800
xrandr --addmode DP1 1280x800
xrandr --output DP1 --mode 1280x800 --same-as eDP1
Cheers! The projector should now mirrors your retina display!
- Apple Macbook Pro Retina (early 2013) - Gentoo Wiki
- Installing Gentoo on Macbook Pro
- Gentoo on MacBook Pro Retina Part 1: Base System
- Gentoo无线网卡安装之broadcom-sta（wl）篇（三）
- Forcing VGA output over Mini DisplayPort in Linux
Available under the MIT License.