Installing USBGuard on Gentoo

Let’s find out the name of the package using the awesome eix command, and install that package.

 ~ # eix usbguard
* sys-apps/usbguard
     Available versions:  ~0.7.6-r1 ~0.7.8 {bash-completion dbus ldap policykit static-libs systemd}
     Homepage:            https://github.com/USBGuard/usbguard
     Description:         Daemon protecting your computer against BadUSB

 ~ # emerge --ask sys-apps/usbguard

These are the packages that would be merged, in order:

Calculating dependencies... done!

!!! All ebuilds that could satisfy "sys-apps/usbguard" have been masked.
!!! One of the following masked packages is required to complete your request:
- sys-apps/usbguard-0.7.8::gentoo (masked by: ~amd64 keyword)
- sys-apps/usbguard-0.7.6-r1::gentoo (masked by: ~amd64 keyword)

For more information, see the MASKED PACKAGES section in the emerge
man page or refer to the Gentoo Handbook.

It looks like we need to unmask usbguard.

 ~ # echo '=sys-apps/usbguard-0.7.8 ~amd64' > /etc/portage/package.accept_keywords/usbguard
 ~ # emerge --ask sys-apps/usbguard

These are the packages that would be merged, in order:

Calculating dependencies... done!

!!! All ebuilds that could satisfy "dev-libs/pegtl" have been masked.
!!! One of the following masked packages is required to complete your request:
- dev-libs/pegtl-2.8.3::gentoo (masked by: ~amd64 keyword)
- dev-libs/pegtl-2.1.4::gentoo (masked by: ~amd64 keyword)
- dev-libs/pegtl-2.0.0::gentoo (masked by: ~amd64 keyword)
- dev-libs/pegtl-2.0_pre1::gentoo (masked by: ~amd64 keyword)
- dev-libs/pegtl-1.3.1-r1::gentoo (masked by: ~amd64 keyword)

(dependency required by "sys-apps/usbguard-0.7.8::gentoo" [ebuild])
(dependency required by "sys-apps/usbguard" [argument])
For more information, see the MASKED PACKAGES section in the emerge
man page or refer to the Gentoo Handbook.

Ahh… the pegtl dependency also needs to be unmasked. Let’s do that.

 ~ # echo '=dev-libs/pegtl-2.8.3 ~amd64' >> /etc/portage/package.accept_keywords/usbguard
 ~ # emerge --ask sys-apps/usbguard

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild  N    ~] dev-libs/pegtl-2.8.3  USE="-test"
[ebuild  N     ] dev-libs/protobuf-3.11.4  USE="zlib -emacs -examples -static-libs -test" ABI_X86="(64) -32 (-x32)"
[ebuild  N     ] sys-cluster/libqb-0.17.2  USE="-debug -doc -examples -static-libs -test"
[ebuild  N     ] dev-cpp/catch-1.12.2  USE="-test"
[ebuild  N     ] sys-process/audit-2.8.4  USE="(split-usr) -gssapi -ldap -python -static-libs" ABI_X86="(64) -32 (-x32)" PYTHON_TARGETS="python3_7 -python3_6"
[ebuild  N    ~] sys-apps/usbguard-0.7.8  USE="dbus systemd -bash-completion -ldap -policykit -static-libs"

Would you like to merge these packages? [Yes/No] No

Quitting.

This time it works, but I want to turn some options for usbguard, especially the bash-completion.

 ~ # echo 'sys-apps/usbguard bash-completion' > /etc/portage/package.use/usbguard
 ~ # emerge --ask sys-apps/usbguard
...
 *
 * BEFORE STARTING USBGUARD please be sure to create/generate
 *                          a rules file at /etc/usbguard/rules.conf
 *                          so that you do not
 *                                             GET LOCKED OUT
 *                          of this system ("").
 *
 * This command may be of help:
 *   sudo sh -c "usbguard generate-policy > /etc/usbguard/rules.conf"
 *

>>> Recording sys-apps/usbguard in "world" favorites file...

 * Messages for package app-shells/bash-completion-2.10:

 *
 * If you are interested in using the provided bash completion functions with
 * zsh, valuable tips on the effective use of bashcompinit are available:
 *   http://www.zsh.org/mla/workers/2003/msg00046.html
 *

 * Messages for package sys-apps/usbguard-0.7.8:

 *
 * BEFORE STARTING USBGUARD please be sure to create/generate
 *                          a rules file at /etc/usbguard/rules.conf
 *                          so that you do not
 *                                             GET LOCKED OUT
 *                          of this system ("").
 *
 * This command may be of help:
 *   sudo sh -c "usbguard generate-policy > /etc/usbguard/rules.conf"
 *
>>> Auto-cleaning packages...

>>> No outdated packages were found on your system.

 * GNU info directory index is up-to-date.

 * IMPORTANT: 2 config files in '/etc' need updating.
 * See the CONFIGURATION FILES and CONFIGURATION FILES UPDATE TOOLS
 * sections of the emerge man page to learn how to update config files.

Pfff… it wasn’t difficult at all!

In the future, I’ll write a short tutorial on how to use USBGuard.