Adding metadata

15 files changed, 642 insertions, 191 deletions

diff --git a/sys-apps/busybox/Manifest b/sys-apps/busybox/Manifest
index 2ba96545d9e6..7f3c50776ad7 100644
--- a/sys-apps/busybox/Manifest
+++ b/sys-apps/busybox/Manifest
@@ -1,2 +1,3 @@
 DIST busybox-1.36.1.tar.bz2 2525473 BLAKE2B e515825cb3ab1c520e16b9c2512e9fc72947366a72a0466bff59b507fdffbc78fc9d16b44a26116175fc7a429d849ad944b1bc379d36c6d3a0eb20969997336e SHA512 8c0c754c9ae04b5e6b23596283a7d3a4ef96225fe179f92d6f6a99c69c0caa95b1aa56c267f52d7c807f6cc69e1f0b7dd29a8ac624098f601738f8c0c57980d4
 DIST busybox-1.37.0.tar.bz2 2565764 BLAKE2B bfd9b81a2428670722934316d429b56886b232dc43ced5873a1f72966dd2bb604e3d607082bb8404bc7e8c15c5c79265fc19f8932e2c9703caafd16fc8037a5a SHA512 ad8fd06f082699774f990a53d7a73b189ed404fe0a2166aff13eae4d9d8ee5c9239493befe949c98801fe7897520dbff3ed0224faa7205854ce4fa975e18467e
+DIST busybox-1.38.0.tar.bz2 2695723 BLAKE2B 71d1f0992bc99813e4e32d718004fadbd8315b300508094e37713555a2e394ca77f16874ec8be55961c0aa4141365dba27728e203895aadb2c112a84764a28d9 SHA512 ba3866f0a9ceabafe8c4d43afaf031bc5554742903b3d08e59a8592351dc09c6e091bb0cd2852b3ed1e79e841de871bac4dc48d9bb1cef9309c3f8495aba0d00
diff --git a/sys-apps/busybox/busybox-1.38.0.ebuild b/sys-apps/busybox/busybox-1.38.0.ebuild
new file mode 100644
index 000000000000..c290b920df73
--- /dev/null
+++ b/sys-apps/busybox/busybox-1.38.0.ebuild
@@ -0,0 +1,392 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# See `man savedconfig.eclass` for info on how to use USE=savedconfig.
+
+EAPI=8
+
+inherit eapi9-ver flag-o-matic readme.gentoo-r1 savedconfig toolchain-funcs
+
+DESCRIPTION="Utilities for rescue and embedded systems"
+HOMEPAGE="https://www.busybox.net/"
+if [[ ${PV} == "9999" ]] ; then
+	MY_P="${P}"
+	EGIT_REPO_URI="https://git.busybox.net/busybox"
+	inherit git-r3
+else
+	MY_P="${PN}-${PV/_/-}"
+	SRC_URI="https://www.busybox.net/downloads/${MY_P}.tar.bz2"
+	# unstable release - no keywords
+	# KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
+fi
+S="${WORKDIR}/${MY_P}"
+
+LICENSE="GPL-2" # GPL-2 only
+SLOT="0"
+IUSE="debug livecd make-symlinks math mdev pam selinux sep-usr static syslog systemd"
+REQUIRED_USE="pam? ( !static )"
+RESTRICT="test"
+
+# TODO: Could make pkgconfig conditional on selinux? bug #782829
+RDEPEND="
+	!static? (
+		virtual/libc
+		virtual/libcrypt:=
+		selinux? ( sys-libs/libselinux )
+	)
+	pam? ( sys-libs/pam )
+"
+DEPEND="${RDEPEND}
+	static? (
+		virtual/libcrypt[static-libs]
+		selinux? ( sys-libs/libselinux[static-libs(+)] )
+	)
+	sys-kernel/linux-headers"
+BDEPEND="
+	virtual/pkgconfig
+	make-symlinks? ( >=sys-apps/coreutils-9.2 )
+"
+
+DISABLE_AUTOFORMATTING=yes
+DOC_CONTENTS='
+If you want a smaller executable, add `-Oz` to your busybox `CFLAGS`.'
+
+busybox_config_option() {
+	local flag=$1 ; shift
+	if [[ ${flag} != [yn] && ${flag} != \"* ]] ; then
+		busybox_config_option $(usex ${flag} y n) "$@"
+		return
+	fi
+	local expr
+	while [[ $# -gt 0 ]] ; do
+		case ${flag} in
+		y) expr="s:.*\<CONFIG_$1\>.*set:CONFIG_$1=y:g" ;;
+		n) expr="s:CONFIG_$1=y:# CONFIG_$1 is not set:g" ;;
+		*) expr="s:.*\<CONFIG_$1\>.*:CONFIG_$1=${flag}:g" ;;
+		esac
+		sed -i -e "${expr}" .config || die
+		einfo "$(grep "CONFIG_$1[= ]" .config || echo "Could not find CONFIG_$1 ...")"
+		shift
+	done
+}
+
+busybox_config_enabled() {
+	local val=$(sed -n "/^CONFIG_$1=/s:^[^=]*=::p" .config)
+	case ${val} in
+	"") return 1 ;;
+	y)  return 0 ;;
+	*)  echo "${val}" | sed -r 's:^"(.*)"$:\1:' ;;
+	esac
+}
+
+# patches go here!
+PATCHES=(
+	"${FILESDIR}"/${PN}-1.38.0-bb.patch
+	"${FILESDIR}"/${PN}-1.34.1-skip-selinux-search.patch
+
+	"${FILESDIR}"/${PN}-1.36.0-fortify-source-3-fixdep.patch
+	"${FILESDIR}"/${PN}-1.36.1-kernel-6.8.patch
+
+	"${FILESDIR}"/${PN}-1.37.0-skip-dynamic-relocations.patch
+)
+
+src_prepare() {
+	default
+
+	cp "${FILESDIR}"/ginit.c init/ || die
+
+	# flag cleanup
+	sed -i -r \
+		-e 's:[[:space:]]?-(Werror|Os|Oz|falign-(functions|jumps|loops|labels)=1|fomit-frame-pointer)\>::g' \
+		Makefile.flags || die
+	sed -i \
+		-e 's:-static-libgcc::' \
+		Makefile.flags || die
+
+	# Print all link lines too
+	sed -i -e 's:debug=false:debug=true:' scripts/trylink || die
+}
+
+bbmake() {
+	local args=(
+		V=1
+		CROSS_COMPILE="${CHOST}-"
+		AR="${AR}"
+		CC="${CC}"
+		HOSTCC="${BUILD_CC}"
+		HOSTCFLAGS="${BUILD_CFLAGS}"
+		PKG_CONFIG="${PKG_CONFIG}"
+	)
+	emake "${args[@]}" "$@"
+}
+
+src_configure() {
+	unset KBUILD_OUTPUT #88088
+	export SKIP_STRIP=y
+
+	tc-export AR CC BUILD_CC PKG_CONFIG
+
+	tc-is-cross-compiler || BUILD_CFLAGS=${CFLAGS}
+	BUILD_CFLAGS+=" -D_FILE_OFFSET_BITS=64" #930513
+
+	append-flags -fno-strict-aliasing #310413
+	use ppc64 && append-flags -mminimal-toc #130943
+
+	# check for a busybox config before making one of our own.
+	# if one exist lets return and use it.
+	restore_config .config
+	if [ -f .config ]; then
+		yes "" | bbmake -j1 oldconfig
+		return 0
+	else
+		ewarn "Could not locate user configfile, so we will save a default one"
+	fi
+
+	# setting SKIP_SELINUX skips searching for selinux at this stage. We don't
+	# need to search now in case we end up not needing it after all.
+	# setup the config file
+	bbmake -j1 allyesconfig SKIP_SELINUX=$(usex selinux n y) # bug #620918
+	# nommu forces a bunch of things off which we want on bug #387555
+	busybox_config_option n NOMMU
+	sed -i '/^#/d' .config
+	yes "" | bbmake -j1 oldconfig SKIP_SELINUX=$(usex selinux n y) #620918
+
+	# now turn off stuff we really don't want
+	busybox_config_option n DMALLOC
+	busybox_config_option n FEATURE_2_4_MODULES #607548
+	busybox_config_option n FEATURE_SUID_CONFIG
+	busybox_config_option n BUILD_AT_ONCE
+	busybox_config_option n BUILD_LIBBUSYBOX
+	busybox_config_option n FEATURE_CLEAN_UP
+	busybox_config_option n MONOTONIC_SYSCALL
+	busybox_config_option n USE_PORTABLE_CODE
+	busybox_config_option n WERROR
+	# CONFIG_MODPROBE_SMALL=y disables depmod.c and uses a smaller one that
+	# does not support -b. Setting this to no creates slightly larger and
+	# slightly more useful modutils
+	busybox_config_option n MODPROBE_SMALL # bug #472464
+	# triming the BSS size may be dangerous
+	busybox_config_option n FEATURE_USE_BSS_TAIL
+
+	# These cause trouble with musl.
+	if use elibc_musl; then
+		busybox_config_option n FEATURE_UTMP
+		busybox_config_option n EXTRA_COMPAT
+		busybox_config_option n FEATURE_VI_REGEX_SEARCH
+	fi
+
+	# Disable standalone shell mode when using make-symlinks, else Busybox calls its
+	# applets by default without looking up in PATH.
+	# This also enables users to disable a builtin by deleting the corresponding symlink.
+	if use make-symlinks; then
+		busybox_config_option n FEATURE_PREFER_APPLETS
+		busybox_config_option n FEATURE_SH_STANDALONE
+	fi
+
+	# If these are not set and we are using a busybox setup
+	# all calls to system() will fail.
+	busybox_config_option y ASH
+	busybox_config_option y SH_IS_ASH
+	busybox_config_option n HUSH
+	busybox_config_option n SH_IS_HUSH
+
+	busybox_config_option '"/run"' PID_FILE_PATH
+	busybox_config_option '"/run/ifstate"' IFUPDOWN_IFSTATE_PATH
+
+	busybox_config_option pam PAM
+	busybox_config_option static STATIC
+	busybox_config_option syslog {K,SYS}LOGD LOGGER
+	busybox_config_option systemd FEATURE_SYSTEMD
+	busybox_config_option math FEATURE_AWK_LIBM
+
+	# all the debug options are compiler related, so punt them
+	busybox_config_option n DEBUG_SANITIZE
+	busybox_config_option n DEBUG
+	busybox_config_option y NO_DEBUG_LIB
+	busybox_config_option n DMALLOC
+	busybox_config_option n EFENCE
+	busybox_config_option $(usex debug y n) TFTP_DEBUG
+
+	busybox_config_option selinux SELINUX
+
+	# this opt only controls mounting with <linux-2.6.23
+	busybox_config_option n FEATURE_MOUNT_NFS
+
+	# glibc-2.26 and later does not ship RPC implientation
+	busybox_config_option n FEATURE_HAVE_RPC
+	busybox_config_option n FEATURE_INETD_RPC
+
+	# default a bunch of uncommon options to off
+	local opt
+	for opt in \
+		ADD_SHELL \
+		BEEP BOOTCHARTD \
+		CRONTAB \
+		DC DEVFSD DNSD DPKG{,_DEB} \
+		FAKEIDENTD FBSPLASH FOLD FSCK_MINIX FTP{GET,PUT} \
+		FEATURE_DEVFS \
+		HOSTID HUSH \
+		INETD INOTIFYD IPCALC \
+		LOCALE_SUPPORT LOGNAME LPD \
+		MAKEMIME MKFS_MINIX MSH \
+		OD \
+		RDEV READPROFILE REFORMIME REMOVE_SHELL RFKILL RUN_PARTS RUNSV{,DIR} \
+		SLATTACH SMEMCAP SULOGIN SV{,LOGD} \
+		TASKSET TCPSVD \
+		RPM RPM2CPIO \
+		UDPSVD UUDECODE UUENCODE
+	do
+		busybox_config_option n ${opt}
+	done
+
+	bbmake -j1 oldconfig
+}
+
+src_compile() {
+	bbmake busybox
+
+	# bug #701512
+	bbmake doc
+}
+
+src_install() {
+	unset KBUILD_OUTPUT # bug #88088
+	save_config .config
+
+	into /
+	dodir /bin
+	if use sep-usr ; then
+		# install /ginit to take care of mounting stuff
+		exeinto /
+		newexe busybox_unstripped ginit
+		dosym /ginit /bin/bb
+		dosym bb /bin/busybox
+	else
+		newbin busybox_unstripped busybox
+		dosym busybox /bin/bb
+	fi
+	if use mdev ; then
+		dodir /$(get_libdir)/mdev/
+		use make-symlinks || dosym /bin/bb /sbin/mdev
+		cp "${S}"/examples/mdev_fat.conf "${ED}"/etc/mdev.conf || die
+		if [[ ! "$(get_libdir)" == "lib" ]]; then
+			# bug #831251 - replace lib with lib64 where appropriate
+			sed -i -e "s:/lib/:/$(get_libdir)/:g" "${ED}"/etc/mdev.conf || die
+		fi
+
+		exeinto /$(get_libdir)/mdev/
+		doexe "${FILESDIR}"/mdev/*
+
+		newinitd "${FILESDIR}"/mdev.initd mdev
+	fi
+	if use livecd ; then
+		dosym busybox /bin/vi
+	fi
+
+	# add busybox daemon's, bug #444718
+	if busybox_config_enabled FEATURE_NTPD_SERVER; then
+		newconfd "${FILESDIR}"/ntpd.confd busybox-ntpd
+		newinitd "${FILESDIR}"/ntpd.initd busybox-ntpd
+	fi
+	if busybox_config_enabled SYSLOGD; then
+		newconfd "${FILESDIR}"/syslogd.confd busybox-syslogd
+		newinitd "${FILESDIR}"/syslogd.initd busybox-syslogd
+	fi
+	if busybox_config_enabled KLOGD; then
+		newconfd "${FILESDIR}"/klogd.confd busybox-klogd
+		newinitd "${FILESDIR}"/klogd.initd busybox-klogd
+	fi
+	if busybox_config_enabled WATCHDOG; then
+		newconfd "${FILESDIR}"/watchdog.confd busybox-watchdog
+		newinitd "${FILESDIR}"/watchdog.initd busybox-watchdog
+	fi
+	if busybox_config_enabled UDHCPC; then
+		sed -i 's:$((metric++)):$metric; metric=$((metric + 1)):' examples/udhcp/simple.script || die #801535
+		local path=$(busybox_config_enabled UDHCPC_DEFAULT_SCRIPT)
+		exeinto "${path%/*}"
+		newexe examples/udhcp/simple.script "${path##*/}"
+	fi
+	if busybox_config_enabled UDHCPD; then
+		insinto /etc
+		doins examples/udhcp/udhcpd.conf
+	fi
+	if busybox_config_enabled ASH && ! use make-symlinks; then
+		dosym -r /bin/busybox /bin/ash
+	fi
+	if busybox_config_enabled CROND; then
+		newconfd "${FILESDIR}"/crond.confd busybox-crond
+		newinitd "${FILESDIR}"/crond.initd busybox-crond
+	fi
+
+	# bundle up the symlink files for use later
+	bbmake DESTDIR="${ED}" install
+	# for compatibility, provide /usr/bin/env
+	mkdir -p _install/usr/bin || die
+	if [[ ! -e _install/usr/bin/env ]]; then
+		ln -s /bin/env _install/usr/bin/env || die
+	fi
+	rm _install/bin/busybox || die
+	tar cf busybox-links.tar -C _install . || : #;die
+	insinto /usr/share/${PN}
+	use make-symlinks && doins busybox-links.tar
+
+	dodoc AUTHORS README TODO
+
+	cd docs || die
+	doman busybox.1
+	docinto txt
+	dodoc *.txt
+	docinto pod
+	dodoc *.pod
+	docinto html
+	dodoc *.html
+
+	cd ../examples || die
+	docinto examples
+	dodoc inittab depmod.pl *.conf *.script undeb unrpm
+
+	cd ../networking || die
+	dodoc httpd_indexcgi.c httpd_post_upload.cgi
+
+	readme.gentoo_create_doc
+}
+
+pkg_preinst() {
+	if use make-symlinks ; then
+		mv "${ED}"/usr/share/${PN}/busybox-links.tar "${T}"/ || die
+		rmdir "${ED}"/usr/share/${PN} || die
+	fi
+}
+
+pkg_postinst() {
+	savedconfig_pkg_postinst
+
+	if use make-symlinks ; then
+		cd "${T}" || die
+		mkdir -p _install || die
+		tar xf busybox-links.tar -C _install || die
+		# Use --update=none from coreutils-9.2 instead of -n, add || die
+		# Skip legacy linuxrc link, if anyone really needs it they can create it manually
+		cp -vpP --update=none _install/bin/* "${ROOT}"/bin/ || die
+		cp -vpP --update=none _install/sbin/* "${ROOT}"/sbin/ || die
+		cp -vpP --update=none _install/usr/bin/* "${ROOT}"/usr/bin/ || die
+	fi
+
+	if use sep-usr ; then
+		elog "In order to use the sep-usr support, you have to update your"
+		elog "kernel command line.  Add the option:"
+		elog "     init=/ginit"
+		elog "To launch a different init than /sbin/init, use:"
+		elog "     init=/ginit /sbin/yourinit"
+		elog "To get a rescue shell, you may boot with:"
+		elog "     init=/ginit bb"
+	fi
+
+	if [[ ${MERGE_TYPE} != binary ]] && ! is-flagq -Oz; then
+		if ver_replacing -le 1.36.1; then
+			FORCE_PRINT_ELOG=yes
+		fi
+
+		readme.gentoo_print_elog
+	fi
+}
diff --git a/sys-apps/busybox/files/busybox-1.38.0-bb.patch b/sys-apps/busybox/files/busybox-1.38.0-bb.patch
new file mode 100644
index 000000000000..67c52e2aa50d
--- /dev/null
+++ b/sys-apps/busybox/files/busybox-1.38.0-bb.patch
@@ -0,0 +1,57 @@
+add `bb` and `bbsh` shortcuts as aliases to the main shell so we can install
+symlinks in Gentoo at /bin/bb as our recovery shell.
+
+we also add fallbacks to /bin/busybox and /bin/busybox.static in case /proc
+is not yet mounted during early boot.
+
+rebase the patch to 1.38.0
+
+--- a/shell/ash.c
++++ b/shell/ash.c
+@@ -181,6 +181,8 @@
+ //                      APPLET_ODDNAME:name  main location    suid_type     help
+ //applet:IF_SH_IS_ASH(  APPLET_ODDNAME(sh,   ash, BB_DIR_BIN, BB_SUID_DROP, ash))
+ //applet:IF_BASH_IS_ASH(APPLET_ODDNAME(bash, ash, BB_DIR_BIN, BB_SUID_DROP, ash))
++//applet:IF_ASH(APPLET_ODDNAME(bb, ash, BB_DIR_BIN, BB_SUID_DROP, ash))
++//applet:IF_ASH(APPLET_ODDNAME(bbsh, ash, BB_DIR_BIN, BB_SUID_DROP, ash))
+ 
+ //kbuild:lib-$(CONFIG_SHELL_ASH) += ash.o ash_ptr_hack.o shell_common.o
+ //kbuild:lib-$(CONFIG_ASH_RANDOM_SUPPORT) += random.o
+@@ -6164,6 +6166,8 @@ tryexec_applet(int applet_no, const char *cmd, char **argv, char **envp)
+ 	}
+ 	/* re-exec ourselves with the new arguments */
+ 	execve(bb_busybox_exec_path, argv, envp);
++	execve("/bin/busybox.static", argv, envp);
++	execve("/bin/busybox", argv, envp);
+ 	/* If they called chroot or otherwise made the binary
+ 	 * no longer executable, return.
+ 	 */
+--- a/shell/hush.c
++++ b/shell/hush.c
+@@ -345,6 +345,8 @@
+ //                       APPLET_ODDNAME:name  main  location    suid_type     help
+ //applet:IF_SH_IS_HUSH(  APPLET_ODDNAME(sh,   hush, BB_DIR_BIN, BB_SUID_DROP, hush))
+ //applet:IF_BASH_IS_HUSH(APPLET_ODDNAME(bash, hush, BB_DIR_BIN, BB_SUID_DROP, hush))
++//applet:IF_HUSH(APPLET_ODDNAME(bb, hush, BB_DIR_BIN, BB_SUID_DROP, hush))
++//applet:IF_HUSH(APPLET_ODDNAME(bbsh, hush, BB_DIR_BIN, BB_SUID_DROP, hush))
+ 
+ //kbuild:lib-$(CONFIG_SHELL_HUSH) += hush.o match.o shell_common.o
+ //kbuild:lib-$(CONFIG_HUSH_RANDOM_SUPPORT) += random.o
+@@ -8104,6 +8106,8 @@ static NORETURN void re_execute_shell(
+ 	if (SPECIAL_JOBSTOP_SIGS != 0)
+ 		switch_off_special_sigs(G.special_sig_mask & SPECIAL_JOBSTOP_SIGS);
+ 	execve(bb_busybox_exec_path, argv, pp);
++	execve("/bin/busybox.static", argv, pp);
++	execve("/bin/busybox", argv, pp);
+ 	/* Fallback. Useful for init=/bin/hush usage etc */
+ 	if (argv[0][0] == '/')
+ 		execve(argv[0], argv, pp);
+@@ -9397,6 +9401,8 @@ static NORETURN NOINLINE void pseudo_exec_argv(
+ 			if (SPECIAL_JOBSTOP_SIGS != 0)
+ 				switch_off_special_sigs(G.special_sig_mask & SPECIAL_JOBSTOP_SIGS);
+ 			execv(bb_busybox_exec_path, argv);
++			execv("/bin/busybox.static", argv);
++			execv("/bin/busybox", argv);
+ 			/* If they called chroot or otherwise made the binary no longer
+ 			 * executable, fall through */
+ 		}
diff --git a/sys-apps/cpuid/Manifest b/sys-apps/cpuid/Manifest
index c3393f11c09b..f25b7300591f 100644
--- a/sys-apps/cpuid/Manifest
+++ b/sys-apps/cpuid/Manifest
@@ -1 +1,2 @@
 DIST cpuid-20260220.src.tar.gz 168472 BLAKE2B 033779e1d3e46f95d15ce1e608b29b2eeefcf4a3a59e5ea6a718362a11db2b715109e81942cb81e0a6983787a09982ef01d7abd593796be42106799f46c5c0cd SHA512 e1df0257f2bb8eff46e4c27cbe8a99b773bb90b60739b89d970bd618d2ed1c89fb7c24cbb9090b36c5df5e5a6ae63c704da7da72e06ca1bed75307bfe94e20dd
+DIST cpuid-20260503.src.tar.gz 170598 BLAKE2B 5d6cf0ce3b54bb96471612ccba88151c1dca6e01b47925313fc2bd685a8a7a6e8ba8d67b0dbc3ffd6a3a9eb9e7f2457010aaa7270d60faa1fd8d35cc79180e8f SHA512 1211fe0f25a35efb46cb8240b5796983061d64e3e5100c9b1b7a8c4110394960728752514090bf2134f6923a2c133d5d3656a42aa810b075d18a8e82c2f87665
diff --git a/sys-apps/cpuid/cpuid-20260503.ebuild b/sys-apps/cpuid/cpuid-20260503.ebuild
new file mode 100644
index 000000000000..8e4ee5a6b67e
--- /dev/null
+++ b/sys-apps/cpuid/cpuid-20260503.ebuild
@@ -0,0 +1,35 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit toolchain-funcs
+
+DESCRIPTION="Linux tool to dump x86 CPUID information about the CPUs"
+HOMEPAGE="http://www.etallen.com/cpuid.html"
+SRC_URI="http://www.etallen.com/${PN}/${P}.src.tar.gz"
+
+LICENSE="GPL-2+"
+SLOT="0"
+KEYWORDS="-* ~amd64 ~x86"
+
+BDEPEND="
+	app-alternatives/gzip
+	dev-lang/perl
+"
+
+DOCS=( "ChangeLog" "FUTURE" )
+
+PATCHES=( "${FILESDIR}/${PN}-20241023-makefile.patch" )
+
+src_prepare() {
+	default
+
+	tc-export CC
+}
+
+src_install() {
+	emake BUILDROOT="${ED}" install
+
+	einstalldocs
+}
diff --git a/sys-apps/onerng/onerng-3.7-r1.ebuild b/sys-apps/onerng/onerng-3.7-r1.ebuild
index 6ce10d501f63..d9ccaa1a7ae1 100644
--- a/sys-apps/onerng/onerng-3.7-r1.ebuild
+++ b/sys-apps/onerng/onerng-3.7-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
diff --git a/sys-apps/pandora_box/Manifest b/sys-apps/pandora_box/Manifest
index d632f02f9021..97b866f0e19a 100644
--- a/sys-apps/pandora_box/Manifest
+++ b/sys-apps/pandora_box/Manifest
@@ -4,3 +4,5 @@ DIST pandora_box-0.20.0-crates.tar.xz 23543772 BLAKE2B 36c4c7ef264d758253d5c7f93
 DIST pandora_box-0.20.0.tar.gz 20226177 BLAKE2B 8bed7c0b96fcd525326ecaf82ee1a1688b17fb54f8999d253818cee6d859a614910e949e2a7792b7cb17a8428904d3e0bbca0be45a27c1d2d83bb3aee553a971 SHA512 ddebcdb211f6bb04ac5cf009dff20aedc7ad0a88a88a5155cc51f810458980e70c470efc6add48f58064a666c7ca0a72d4c1a20b7677ef32e746e63cb1758e59
 DIST pandora_box-0.20.1-crates.tar.xz 23356408 BLAKE2B 9f257069299199d41c97f46b2b01cee968004fc0a5c5707c33cc176ff89db3d2cf26ba018e7e4c05d6bc19c7d67a7784ef00caccbd7461440154d838c8e36093 SHA512 2b95c6b7a2d070a279fce7d4e24c7c7d413049156d4e2f98ffe11cc49982c5e1022989a8dc095714cf9ab5fc32644ae0283bf51751b4f5fe87a99cebc7124c24
 DIST pandora_box-0.20.1.tar.gz 20299808 BLAKE2B 4b225aa2e09b1531fa36740cede6c14cd06512c3d862ad9669f61a5ff50317c267a4b7b945f6d87490fa5380b31e53ee51a13a4f49a16b09b179f605041e374e SHA512 cad57652d1867ff5e5737f9402eefc8ba8e979810b425a97841191fea74b39c057407b654cf4453f50d1e23531a95a5c750e33b4590f51c4b6e4ee2f1cd15a71
+DIST pandora_box-0.21.0-crates.tar.xz 22946408 BLAKE2B aedbc95e0d689e307cc53dd596af05c6be2bc213863986bfd64418483727301989c7175033831f01ab08d8c9d386c0cf512912e20c3af2a4740a86c7cf005ed9 SHA512 bebbe9e94c1aa298c523426c34af615f4bb3bd53317102bd22661e526cb497b68b98aca35e99c3b6b9bbff0ff8747abd1f7d0d7d4410d336109a6c200dce1666
+DIST pandora_box-0.21.0.tar.gz 20694847 BLAKE2B 9ebc369ac81d0f0c774e1a7b09c4a66d5c16c924d3a5d0f1b31faf06f65cdde8db55948fc0ef0a930cb61d3e112798a15e9e10ef86ab56882a27c771f90ce4ad SHA512 378ce3eaa5a348c76e63bc636518218146ce6e9faa91f0ff49678fd5618a7fd7e0c4dbdb9c566d0353ec0ff432dd3eb3a9a45ce5a0aa852f01e2705150993069
diff --git a/sys-apps/pandora_box/pandora_box-0.21.0.ebuild b/sys-apps/pandora_box/pandora_box-0.21.0.ebuild
new file mode 100644
index 000000000000..c7b2ae1bd346
--- /dev/null
+++ b/sys-apps/pandora_box/pandora_box-0.21.0.ebuild
@@ -0,0 +1,37 @@
+# Copyright 2024-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+RESTRICT="test" # accidentally broken, fix in next release
+
+IUSE="static"
+
+RUST_MIN_VER="1.88.0"
+
+inherit cargo
+
+DESCRIPTION="Syd's log inspector & profile writer"
+HOMEPAGE="https://man.exherbolinux.org"
+
+SRC_URI="https://git.sr.ht/~alip/syd/archive/pandora-${PV}.tar.gz -> ${P}.tar.gz
+	https://dev.gentoo.org/~patrick/${P}-crates.tar.xz
+"
+
+S="${WORKDIR}/syd-pandora-${PV}/pandora"
+
+LICENSE="GPL-3"
+# Dependent crate licenses
+LICENSE+="
+	Apache-2.0 Apache-2.0-with-LLVM-exceptions BSD-2 BSD CC0-1.0 GPL-2
+	ISC MIT MPL-2.0 Unicode-DFS-2016
+"
+SLOT="0"
+KEYWORDS="~amd64"
+
+src_configure() {
+	if use static; then
+		export RUSTFLAGS+="-Ctarget-feature=+crt-static"
+	fi
+	cargo_src_configure
+}
diff --git a/sys-apps/syd/Manifest b/sys-apps/syd/Manifest
index 20cf63763baa..869a15b74c46 100644
--- a/sys-apps/syd/Manifest
+++ b/sys-apps/syd/Manifest
@@ -2,3 +2,5 @@ DIST syd-3.51.0-crates.tar.xz 23543772 BLAKE2B 36c4c7ef264d758253d5c7f930e24feb3
 DIST syd-3.51.0.tar.gz 20226853 BLAKE2B 517728f390ae27ab11872cf563809b1064e127fa44d57c3d95a38acdeea260ef676dd9f35a5836c08bf6571213dd8a1427c399584e3789463956de5f037c8fe6 SHA512 66cec05b14f8b6be17db3d509a0844ea7f11df00d232d6e34d38c5e85325e1c3b1c5d8dc24a94e022c0552fda6ea9a30851ade4ff3a3e4e0e7359c7bb38c32e6
 DIST syd-3.51.1-crates.tar.xz 23356408 BLAKE2B 9f257069299199d41c97f46b2b01cee968004fc0a5c5707c33cc176ff89db3d2cf26ba018e7e4c05d6bc19c7d67a7784ef00caccbd7461440154d838c8e36093 SHA512 2b95c6b7a2d070a279fce7d4e24c7c7d413049156d4e2f98ffe11cc49982c5e1022989a8dc095714cf9ab5fc32644ae0283bf51751b4f5fe87a99cebc7124c24
 DIST syd-3.51.1.tar.gz 20299647 BLAKE2B c254d326ee0378d1cc37d5ffad2f2fa5dedd654d5555c56eb16500d86dad67957aa773ddb199316719206d592ffd77877f5abf225a5e953b73ac53a2e8f99284 SHA512 929439d279aad29af0cfeb1d4dd910868aac1f94d629d7ebc6eb704179f287f39d1970f248ac7745109db1fedfa26be245676a1faf229aa6038b7b28ca6d12e1
+DIST syd-3.53.0-crates.tar.xz 22946408 BLAKE2B aedbc95e0d689e307cc53dd596af05c6be2bc213863986bfd64418483727301989c7175033831f01ab08d8c9d386c0cf512912e20c3af2a4740a86c7cf005ed9 SHA512 bebbe9e94c1aa298c523426c34af615f4bb3bd53317102bd22661e526cb497b68b98aca35e99c3b6b9bbff0ff8747abd1f7d0d7d4410d336109a6c200dce1666
+DIST syd-3.53.0.tar.gz 20693954 BLAKE2B 72593c94e9ee9e0e15ded9f8c8c5fb72eae38be152ce8a68bcfd183ff8310db4b11a4286ef5925636b1ad407eb212555d36487fb1510b61e2b65bcc10609d3bf SHA512 f49c9da2b2f8f0877385970aa3abcdee0289c27932c0ddb1ec65996cef2dbe42283f25b37ef4fdf88bca11017f81f97d5e579639671a55646c5657db18e90c55
diff --git a/sys-apps/syd/syd-3.53.0.ebuild b/sys-apps/syd/syd-3.53.0.ebuild
new file mode 100644
index 000000000000..39feacf32ba2
--- /dev/null
+++ b/sys-apps/syd/syd-3.53.0.ebuild
@@ -0,0 +1,76 @@
+# Copyright 2024-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+RESTRICT="test" # fails with sandbox
+
+RUST_MIN_VER="1.88.0"
+
+CRATES=""
+
+inherit cargo
+
+DESCRIPTION="seccomp and landlock based application sandbox with support for namespaces"
+HOMEPAGE="https://sydbox.exherbolinux.org"
+SRC_URI="https://git.sr.ht/~alip/syd/archive/v${PV}.tar.gz -> ${P}.tar.gz
+	https://dev.gentoo.org/~patrick/syd-${PV}-crates.tar.xz
+"
+
+IUSE="static"
+
+LICENSE="GPL-3"
+# Dependent crate licenses
+LICENSE+="
+	0BSD Apache-2.0 BSD-2 BSD CC0-1.0 GPL-3+ ISC MIT MPL-2.0 Unicode-3.0
+	WTFPL-2 ZLIB
+"
+
+SLOT="0"
+KEYWORDS="~amd64"
+
+DEPEND="static? ( sys-libs/libseccomp[static-libs] )
+	sys-libs/libseccomp
+	app-text/scdoc"
+RDEPEND="sys-apps/pandora_box
+	${DEPEND}"
+
+S="${WORKDIR}/syd-v${PV}"
+
+src_configure() {
+	if use static; then
+		export LIBSECCOMP_LINK_TYPE="static"
+		export LIBSECCOMP_LIB_PATH=$(pkgconf --variable=libdir libseccomp)
+		export RUSTFLAGS+="-Ctarget-feature=+crt-static"
+		cargo_src_configure
+	else
+		local myfeatures=( "oci" )
+		cargo_src_configure
+	fi
+}
+
+src_compile() {
+	cargo_src_compile
+	emake man
+}
+
+src_install () {
+	cargo_src_install
+	mkdir -p "${D}"/usr/share/man/man{1,2,5,7}
+	emake install-man DESTDIR="${D}" PREFIX="/usr"
+	dodoc README.md
+	insinto /usr/libexec
+	doins src/esyd.sh
+
+	insinto /etc
+	newins data/user.syd-3 user.syd-3.sample
+
+	insinto /usr/share/vim/vimfiles/ftdetect
+	doins vim/ftdetect/syd.vim
+	insinto /usr/share/vim/vimfiles/syntax
+	doins vim/syntax/syd-3.vim
+}
+
+src_test() {
+	RUSTFLAGS="" cargo_src_test
+}
diff --git a/sys-apps/system-monitoring-center/system-monitoring-center-3.3.0.ebuild b/sys-apps/system-monitoring-center/system-monitoring-center-3.3.0.ebuild
index 9aaad035553a..0491e29f5af8 100644
--- a/sys-apps/system-monitoring-center/system-monitoring-center-3.3.0.ebuild
+++ b/sys-apps/system-monitoring-center/system-monitoring-center-3.3.0.ebuild
@@ -19,7 +19,7 @@ else
 	SRC_URI="https://github.com/hakandundar34coding/${PN}/archive/v${PV}.tar.gz
 		-> ${P}.gh.tar.gz"
 
-	KEYWORDS="~amd64 ~x86"
+	KEYWORDS="amd64 ~x86"
 fi
 
 LICENSE="GPL-3+"
diff --git a/sys-apps/tuned/Manifest b/sys-apps/tuned/Manifest
index 97b86b585fdf..ea630e6ce73d 100644
--- a/sys-apps/tuned/Manifest
+++ b/sys-apps/tuned/Manifest
@@ -1,3 +1 @@
-DIST tuned-2.25.1.tar.gz 268726 BLAKE2B 324f47f7a45bb363fb171ceed3139da3a7f2b16fecda061ac1183b58c09c9787dff50d2092b21d3e0c8a2c259cecbd8f501ff6de284837f47b49c2deb89b4185 SHA512 fa5ac9d818d11b118fb7c26db28993b704f590070edbece570fee1a6c60a1f5f850b711683c45b46f33d9b056a84e43ced2c4c1ee58e9ef3d1fd035a4c1d4de4
-DIST tuned-2.26.0.tar.gz 271590 BLAKE2B a139ed7999f0927b16aaf4aca169483f3e20f373d4bafb8d622b0828c0130a2a4e6023a077b786a5dc1f395b368b58c013cfa1c01985de087808ee33ba6657d8 SHA512 af468e1b4ca2e10cf00cad53f27d65d0b5eab73e65b9c61d67fd39ff9687700704db87294fbf62bda949b3544a9ba69c82f6d35f448226654a5949fa8de1b2c0
 DIST tuned-2.27.0.tar.gz 272697 BLAKE2B 574d79cdd69ee27ed409a23b2b25b7972d2b479786177f046c9e7b67a3835c1a1a9e9228ca5ebddca8dffc08bd74dbbc368d71c6e37dc11f412a1c7e5c238192 SHA512 7471d073879a688da66e72c4f5c562d1a732d6bfb562d8c033874a8edbad2bab3cf3c7dc387270bf99ae6b1b35ffc451173122e32023116709567e529e09dc52
diff --git a/sys-apps/tuned/tuned-2.25.1-r1.ebuild b/sys-apps/tuned/tuned-2.25.1-r1.ebuild
deleted file mode 100644
index 53945a03d81a..000000000000
--- a/sys-apps/tuned/tuned-2.25.1-r1.ebuild
+++ /dev/null
@@ -1,78 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{10..14} )
-
-inherit optfeature python-single-r1 tmpfiles xdg-utils
-
-DESCRIPTION="Daemon for monitoring and adaptive tuning of system devices"
-HOMEPAGE="https://github.com/redhat-performance/tuned"
-SRC_URI="https://github.com/redhat-performance/tuned/archive/v${PV}.tar.gz -> ${P}.tar.gz"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~amd64"
-IUSE="+ppd"
-
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-DEPEND="
-	${PYTHON_DEPS}
-	$(python_gen_cond_dep '
-		dev-python/configobj[${PYTHON_USEDEP}]
-		dev-python/dbus-python[${PYTHON_USEDEP}]
-		dev-python/decorator[${PYTHON_USEDEP}]
-		dev-python/pygobject:3[${PYTHON_USEDEP}]
-		dev-python/python-linux-procfs[${PYTHON_USEDEP}]
-		dev-python/pyudev[${PYTHON_USEDEP}]
-	')
-	ppd? (
-		$(python_gen_cond_dep '
-			dev-python/pyinotify[${PYTHON_USEDEP}]
-		')
-	)"
-
-RDEPEND="
-	${DEPEND}
-	app-emulation/virt-what
-	dev-debug/systemtap
-	sys-apps/dbus
-	sys-apps/ethtool
-	sys-power/powertop
-	ppd? ( !sys-power/power-profiles-daemon )
-	"
-
-RESTRICT="test"
-
-src_prepare() {
-	default
-
-	sed -i \
-		-e "/^PYTHON/s:/usr/bin/python3:${EPREFIX}/usr/bin/${EPYTHON}:" \
-		-e "/^export DOCDIR/s/$/&\-\$(VERSION)/g" \
-		-e "/\$(DESTDIR)\/run\/tuned/d" \
-		-e "/\$(DESTDIR)\/var\/lib\/tuned/d" \
-		-e "/\$(DESTDIR)\/var\/log\/tuned/d" \
-		Makefile || die
-}
-
-src_install() {
-	default
-	use ppd && emake DESTDIR="${ED}" install-ppd
-
-	newinitd "${FILESDIR}/${PN}.initd" "${PN}"
-	python_fix_shebang "${D}"
-	python_optimize
-}
-
-pkg_postinst() {
-	tmpfiles_process ${PN}.conf
-	xdg_icon_cache_update
-
-	optfeature_header
-	optfeature "Optimize for power saving by spinning-down rotational disks" sys-apps/hdparm
-	optfeature "Get hardware info" sys-apps/dmidecode
-	optfeature "Optimize network txqueuelen" sys-apps/iproute2
-}
diff --git a/sys-apps/tuned/tuned-2.26.0-r1.ebuild b/sys-apps/tuned/tuned-2.26.0-r1.ebuild
deleted file mode 100644
index 53945a03d81a..000000000000
--- a/sys-apps/tuned/tuned-2.26.0-r1.ebuild
+++ /dev/null
@@ -1,78 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{10..14} )
-
-inherit optfeature python-single-r1 tmpfiles xdg-utils
-
-DESCRIPTION="Daemon for monitoring and adaptive tuning of system devices"
-HOMEPAGE="https://github.com/redhat-performance/tuned"
-SRC_URI="https://github.com/redhat-performance/tuned/archive/v${PV}.tar.gz -> ${P}.tar.gz"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~amd64"
-IUSE="+ppd"
-
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-DEPEND="
-	${PYTHON_DEPS}
-	$(python_gen_cond_dep '
-		dev-python/configobj[${PYTHON_USEDEP}]
-		dev-python/dbus-python[${PYTHON_USEDEP}]
-		dev-python/decorator[${PYTHON_USEDEP}]
-		dev-python/pygobject:3[${PYTHON_USEDEP}]
-		dev-python/python-linux-procfs[${PYTHON_USEDEP}]
-		dev-python/pyudev[${PYTHON_USEDEP}]
-	')
-	ppd? (
-		$(python_gen_cond_dep '
-			dev-python/pyinotify[${PYTHON_USEDEP}]
-		')
-	)"
-
-RDEPEND="
-	${DEPEND}
-	app-emulation/virt-what
-	dev-debug/systemtap
-	sys-apps/dbus
-	sys-apps/ethtool
-	sys-power/powertop
-	ppd? ( !sys-power/power-profiles-daemon )
-	"
-
-RESTRICT="test"
-
-src_prepare() {
-	default
-
-	sed -i \
-		-e "/^PYTHON/s:/usr/bin/python3:${EPREFIX}/usr/bin/${EPYTHON}:" \
-		-e "/^export DOCDIR/s/$/&\-\$(VERSION)/g" \
-		-e "/\$(DESTDIR)\/run\/tuned/d" \
-		-e "/\$(DESTDIR)\/var\/lib\/tuned/d" \
-		-e "/\$(DESTDIR)\/var\/log\/tuned/d" \
-		Makefile || die
-}
-
-src_install() {
-	default
-	use ppd && emake DESTDIR="${ED}" install-ppd
-
-	newinitd "${FILESDIR}/${PN}.initd" "${PN}"
-	python_fix_shebang "${D}"
-	python_optimize
-}
-
-pkg_postinst() {
-	tmpfiles_process ${PN}.conf
-	xdg_icon_cache_update
-
-	optfeature_header
-	optfeature "Optimize for power saving by spinning-down rotational disks" sys-apps/hdparm
-	optfeature "Get hardware info" sys-apps/dmidecode
-	optfeature "Optimize network txqueuelen" sys-apps/iproute2
-}
diff --git a/sys-apps/tuned/tuned-2.27.0.ebuild b/sys-apps/tuned/tuned-2.27.0-r2.ebuild
index 0202f1714361..980d18995641 100644
--- a/sys-apps/tuned/tuned-2.27.0.ebuild
+++ b/sys-apps/tuned/tuned-2.27.0-r2.ebuild
@@ -5,7 +5,7 @@ EAPI=8
 
 PYTHON_COMPAT=( python3_{10..14} )
 
-inherit optfeature python-single-r1 tmpfiles xdg-utils
+inherit optfeature python-single-r1 tmpfiles toolchain-funcs xdg
 
 DESCRIPTION="Daemon for monitoring and adaptive tuning of system devices"
 HOMEPAGE="https://github.com/redhat-performance/tuned"
@@ -15,11 +15,12 @@ LICENSE="GPL-2"
 SLOT="0"
 KEYWORDS="~amd64"
 IUSE="+ppd"
-
 REQUIRED_USE="${PYTHON_REQUIRED_USE}"
 
-DEPEND="
+RDEPEND="
 	${PYTHON_DEPS}
+	sys-apps/dbus
+	sys-apps/ethtool
 	$(python_gen_cond_dep '
 		dev-python/configobj[${PYTHON_USEDEP}]
 		dev-python/dbus-python[${PYTHON_USEDEP}]
@@ -29,50 +30,55 @@ DEPEND="
 		dev-python/pyudev[${PYTHON_USEDEP}]
 	')
 	ppd? (
+		!sys-power/power-profiles-daemon
 		$(python_gen_cond_dep '
 			dev-python/pyinotify[${PYTHON_USEDEP}]
 		')
-	)"
-
-RDEPEND="
-	${DEPEND}
-	app-emulation/virt-what
-	dev-debug/systemtap
-	sys-apps/dbus
-	sys-apps/ethtool
-	sys-power/powertop
-	ppd? ( !sys-power/power-profiles-daemon )
-	"
+	)
+"
 
-RESTRICT="test"
+src_compile() { :; }
 
-src_prepare() {
-	default
-
-	sed -i \
-		-e "/^PYTHON/s:/usr/bin/python3:${EPREFIX}/usr/bin/${EPYTHON}:" \
-		-e "/^export DOCDIR/s/$/&\-\$(VERSION)/g" \
-		-e "/\$(DESTDIR)\/run\/tuned/d" \
-		-e "/\$(DESTDIR)\/var\/lib\/tuned/d" \
-		-e "/\$(DESTDIR)\/var\/log\/tuned/d" \
-		Makefile || die
+src_test() {
+	eunittest tests/unit
 }
 
 src_install() {
-	default
-	use ppd && emake DESTDIR="${ED}" install-ppd
+	local sitedir="$(python_get_sitedir)"
+	local myemakeargs=(
+		DESTDIR="${ED}"
+		DOCDIR="/usr/share/doc/${PF}"
+		PKG_CONFIG="$(tc-getPKG_CONFIG)"
+		PYTHON_SITELIB="${sitedir#${EPREFIX}}"
+		rewrite_shebang=true
+	)
+	emake "${myemakeargs[@]}" install $(usev ppd install-ppd)
+
+	einstalldocs
+
+	# 934664
+	keepdir /etc/tuned/profiles
+
+	rm -r "${ED}"/run "${ED}"/var || die
 
-	newinitd "${FILESDIR}/${PN}.initd" "${PN}"
-	python_fix_shebang "${D}"
+	newinitd "${FILESDIR}"/${PN}.initd ${PN}
+	python_fix_shebang "${ED}"
 	python_optimize
 }
 
 pkg_postinst() {
 	tmpfiles_process ${PN}.conf
-	xdg_icon_cache_update
+	xdg_pkg_postinst
 
 	optfeature_header
-	optfeature "Optimize for power saving by spinning-down rotational disks" sys-apps/hdparm
+	optfeature "Virtual machine detection" app-emulation/virt-what
+	optfeature "Detailed system monitoring" dev-debug/systemtap
+	optfeature "Optimize Wi-Fi power management" net-wireless/wireless-tools
 	optfeature "Get hardware info" sys-apps/dmidecode
+	optfeature "Optimize for power saving by spinning-down rotational disks" sys-apps/hdparm
 	optfeature "Optimize network txqueuelen" sys-apps/iproute2
+	optfeature "Generate custom profiles based on powertop recommendations" sys-power/powertop
+
+	# tuned-gui.py calls systemctl
+	has_version sys-apps/systemd && optfeature "GTK gui" x11-libs/gtk+:3[introspection]
 }