I am trying out OpenIndiana for the first time. I used the live image OI-hipster-gui-20211031.iso (which seems to be the latest version) to install into a qemu-kvm virtual machine. The very first thing I wanted to do was set up a development environment. According to [this page from the OpenIndiana documentation](http://docs.openindiana.org/contrib/git/#installing-git) , "installing Git on OpenIndiana Hipster is simple." However, I found it to be not so simple:

ppelleti@illumos:~$ sudo pkg install git
Creating Plan (Solver setup): |
pkg install: No matching version of developer/versioning/git can be installed:
  Reject:  pkg://openindiana.org/developer/versioning/git@2.35.1-2022.0.0.0
             to
           pkg://openindiana.org/developer/versioning/git@2.36.1-2022.0.0.0
  Reason:  This version is excluded by installed incorporation consolidation/userland/userland-incorporation@0.5.11-2020.0.1.14595
ppelleti@illumos:~$

I tried installing a different package, and got the same error message:

ppelleti@illumos:~$ sudo pkg install build-essential
Creating Plan (Solver setup): |
pkg install: No matching version of metapackages/build-essential can be installed:
  Reject:  pkg://openindiana.org/metapackages/build-essential@1.0-2022.0.0.1
  Reason:  This version is excluded by installed incorporation consolidation/userland/userland-incorporation@0.5.11-2020.0.1.14595
ppelleti@illumos:~$

I searched the web for "excluded by installed incorporation", and it seems to be a common problem, but it doesn't seem to have a clear solution, especially not one that is applicable to my situation. For example, [this question](https://unix.stackexchange.com/questions/486281/solaris-11-3-unable-to-install-system-header) seems to indicate it is a problem with the package publisher. Here is my package publisher:

ppelleti@illumos:~$ pkg publisher
PUBLISHER                   TYPE     STATUS P LOCATION
openindiana.org              origin   online F http://pkg.openindiana.org/hipster/ 
ppelleti@illumos:~$

This isn't something I set up. This publisher is just what the fresh install of hipster-20211031 came with, right out of the box. The question I linked to seemed to involve the publisher being out of date because of a Solaris support contract expiring, but that doesn't seem to be relevant to my situation, because OpenIndiana is open source, so there shouldn't be any licensing issue. Is there an easy fix for this? Coming from Linux, I was not expecting this level of difficulty. pkg seems to be far more arcane than apt-get is.

Please forgive my ignorance... I only use Solaris for testing C/C++ libraries I have an interest in. I'm not a Solaris admin or Solaris user. I installed GCC-5 on Solaris 11.3, x86 because I needed a C++ compiler that supports -std=c++11 (see below for the package output). Sun's native GCC is 4.8, and it does not support C++11 well (or at all). Unfortunately, I cannot find it after the install: $ g++-5 --version -bash: g++-5: command not found $ sudo find /usr -name gcc-5 $ sudo find /bin -name gcc-5 $ And for completeness: $ /bin/gcc --version gcc (GCC) 4.8.2 ... $ ls -l /usr/bin/gcc lrwxrwxrwx 1 root root 18 Jun 7 2016 /usr/bin/gcc -> ../gcc/4.8/bin/gcc $ which gcc-5 no gcc-5 in /usr/local/bin /usr/local/sbin /bin /sbin /usr/bin /usr/sbin /usr/sfw/bin Where is the compiler located? ----- According to [Installing GCC on Oracle Solaris 11](https://stackoverflow.com/q/4664472) on Stack Overflow, its supposed to be in /usr/bin/gcc as a symlink. But the answer appears to be off a bit: $ /usr/bin/gcc --version gcc (GCC) 4.8.2 ... According to [GCC missing from Solaris 11, and server already deployed](https://serverfault.com/q/535598) on Server Fault: > /usr/sfw/bin is the bundled gcc path with Solaris 10. On Solaris > 11.1, gcc is, when installed, directly available in /usr/bin as a symlink that points to /usr/gcc//bin/gcc The answer appears to be off a bit, too. ----- $ sudo pkg install --accept gcc-5 ------------------------------------------------------------ Package: pkg://solaris/release/evaluation@1.0,5.12-5.12.0.0.0.115.0:20170111T175931Z License: evaluation This software has been made available for evaluation purposes only. See http://www.oracle.com/technetwork/server-storage/solaris11/technologies/foss-evaluation-program-2586275.html for further information. Packages to install: 2 Create boot environment: No Create backup boot environment: No DOWNLOAD PKGS FILES XFER (MB) SPEED Completed 2/2 8/8 0.0/0.0 17.4k/s PHASE ITEMS Installing new actions 37/37 Updating package state database Done Updating package cache 0/0 Updating image state Done Creating fast lookup database Done Updating package cache 2/2 ----- After installing gcc-5: $ find / -name 'gcc*' 2>/dev/null /usr/share/vim/vim73/compiler/gcc.vim /usr/share/gcc-4.8.2 /usr/share/man/man1/gcc.1 /usr/gcc /usr/gcc/4.8/bin/gcc-nm /usr/gcc/4.8/bin/gcc-ranlib /usr/gcc/4.8/bin/gcc /usr/gcc/4.8/bin/gcc-ar /usr/gcc/4.8/lib/gcc /usr/gcc/4.8/lib/gcc/i386-pc-solaris2.11/4.8.2/plugin/include/ada/gcc-interface /usr/gcc/4.8/lib/gcc/i386-pc-solaris2.11/4.8.2/plugin/include/gcc-plugin.h /usr/gcc/4.8/share/locale/de/LC_MESSAGES/gcc.mo /usr/gcc/4.8/share/locale/ja/LC_MESSAGES/gcc.mo /usr/gcc/4.8/share/locale/fr/LC_MESSAGES/gcc.mo /usr/gcc/4.8/share/locale/zh_CN/LC_MESSAGES/gcc.mo /usr/gcc/4.8/share/locale/zh_TW/LC_MESSAGES/gcc.mo /usr/gcc/4.8/share/locale/es/LC_MESSAGES/gcc.mo /usr/gcc/4.8/share/gcc-4.8.2 /usr/gcc/4.8/share/info/gccinstall.info /usr/gcc/4.8/share/info/gccint.info /usr/gcc/4.8/share/info/gcc.info /usr/gcc/4.8/share/man/man1/gcc.1 /usr/bin/gcc /usr/local/share/emacs/24.5/lisp/cedet/semantic/bovine/gcc.el /usr/local/share/emacs/24.5/lisp/cedet/semantic/bovine/gcc.elc /usr/include/gc/atomic_ops/sysdeps/gcc /usr/include/avahi-common/gccmacro.h /usr/include/pulse/gccmacro.h /export/home/jwalton/botan/src/scripts/ci/circle/gcc-sanitizer.sh /export/home/jwalton/botan/src/scripts/ci/circle/gcc-static-debug.sh /export/home/jwalton/botan/src/scripts/ci/circle/gcc-shared-debug.sh /export/home/jwalton/botan/src/build-data/cc/gcc.txt /export/home/jwalton/zlib-1.2.8/contrib/gcc_gvmat64 /opt/developerstudio12.5/lib/compilers/CC-gcc/lib/gcc /opt/developerstudio12.5/lib/compilers/CC-gcc/gcc_version.map /opt/solarisstudio12.4/lib/compilers/CC-gcc/gcc_version.map /opt/solarisstudio12.4/lib/compilers/CC-gcc/lib/gcc ----- And: ~$ pkg search -l gcc | grep ^basename basename dir opt/developerstudio12.5/lib/compilers/CC-gcc/lib/gcc pkg:/developer/developerstudio-125/library/studio-gccrt@12.5-1.0.0.0 basename dir opt/solarisstudio12.4/lib/compilers/CC-gcc/lib/gcc pkg:/developer/solarisstudio-124/library/studio-gccrt@12.4-1.0.0.0 basename dir usr/include/gc/atomic_ops/sysdeps/gcc pkg:/library/gc@7.2-0.175.2.0.0.39.0 basename link usr/bin/gcc pkg:/developer/gcc-4/gcc-c-48@4.8.2-0.175.3.0.0.30.0 basename file usr/gcc/4.8/bin/gcc pkg:/developer/gcc-4/gcc-c-48@4.8.2-0.175.3.0.0.30.0 pkg: Search performance is degraded.

I am trying to find a way to stop port scans or DoS type activities from within the network to external resources so I can reduce the number of abuse complaints. While I know there are numerous tools with iptables or with Snort/Suricata that can allow you to track the # of connections by source OR destination, I haven't figured out a way to do BOTH. For example, it would probably be normal activity if a particular host was making 50 outbound port 80 connections to various hosts on the Internet, but it might not be so if those 50 connections were going to one particular host in a short period of time. Has anyone encountered this issue before and have any suggestions on how to proceed? Thanks!

My goal is to setup a firewall & Intrusion Prevention system using Snort. I have a spare pc available with at least 2 physical NIC's, which ran pfSense having a firewall with Snort, but this time I want to do the setup myself. So far I managed to install Debian 9 as a headless system with ssh login (and if really needed I could add a keyboard and screen temporary). I wanted to start with just a firewall, without Snort. How to I achieve the following: - is it possible to put the firewall just in between my IPS cable modem router and my LAN? The ISP router has DHCP/NAT enabled, which I can't turn off. - I want to achieve a "plug&play" firewall that I could just put in between, without turning it into a double NAT (which I had before using pfSense). I mean, if possible I don't want to have different networks, eg. a 192.168.x.x one and a for example 10.x.x.x one. - the firewall is headless, logging in via ssh Internet WAN | | ISP Cable Modem & Router with DCHP gateway 192.168.0.1 | | [eth0] Firewall [eth1] | ________ Wireless AP | / |_____ Switch__/_________ PC1 \ \________ ... I tried to setup a bridge on br0 (via /etc/network/interfaces) adding eth0 and eth1. The bridge had an IP address and it worked fine, where I could still connect to the internet from devices behind the switch via the AP. So I learned bridges don't care about IP addresses.... which doesn't sound good to build a firewall with eventually snort (IPS). I've read about iptables and using the "physical dev". Maybe I'm force to do double NAT and setup routing? The problem is I don't know enough to know what is best and how to go about it. Sure, I've googled (a lot) and found for example on aboutdebian.org articles about proxy/NAT and firewalling... but most articles asume you can have a modem only, but I can't turn off DCHP nor I can configure the range of it. It's always the full 255.255.255.0 range.

Is there any danger running both IPS and OpenCSW side by side on a single Solaris 11 system? I assume there should be no conflicts since both package managers use different repositories and different installation paths and it would just add twice the updates since there are twice the package managers. However I just want to make sure since I come from a Red Hat background and I am a little bit cautious about having two package managers running side by side.

This is related to [Where is GCC-5 after installing it on Solaris 11?](https://unix.stackexchange.com/q/339296/56041) We got GCC 5 installed thanks to @DanekDuvall. We started a round of Solaris testing... Testing on Solaris with GCC 5 is [revealing an old assembler](https://github.com/weidai11/cryptopp/issues/551) : $ gmake ... g++ -DNDEBUG -g2 -O3 -fPIC -m64 -Wa,--divide -pthread -pipe -msse4.2 -msha -c sha-simd.cpp {standard input}: Assembler messages: {standard input}:166: Error: no such instruction: `sha1rnds4 $0,%xmm0,%xmm7' {standard input}:199: Error: no such instruction: `sha1nexte %xmm0,%xmm2' {standard input}:206: Error: no such instruction: `sha1msg1 %xmm0,%xmm10' {standard input}:212: Error: no such instruction: `sha1rnds4 $0,%xmm2,%xmm9' {standard input}:239: Error: no such instruction: `sha1nexte %xmm2,%xmm7' ... GCC 5.0 added SHA instrinsic support and Binutils 2.24 added SHA support so I believe the GNU machinery has what is needed. I believe I am missing an updated assembler on Solaris. How do we install the updated assembler needed by GCC 5? Or, is there something else we should be doing? ------ ***First (naive) attempt***: $ sudo pkg install gcc-5 gcc-c-5 gcc-c++-5 gcc-as-5 gcc-ar-5 Password: pkg install: The following pattern(s) did not match any allowable packages. Try using a different matching pattern, or refreshing publisher information: gcc-as-5 gcc-ar-5 ***Second attempt***: $ pkg search as | grep -i gcc basename link usr/sfw/libexec/gcc/i386-pc-solaris2.11/3.4.3/as pkg:/developer/gcc-3@3.4.3-0.175.3.0.0.30.0 basename link usr/sfw/libexec/gcc/sparc-sun-solaris2.11/3.4.3/as pkg:/developer/gcc-3@3.4.3-0.175.3.0.0.30.0 ***Third attempt***: $ pkg search as | grep -i assembler basename file usr/bin/as pkg:/developer/assembler@0.5.11-0.175.3.9.0.2.0 ***Fourth attempt***: $ pkg search binutil $ ----- This may be relevant: $ /usr/bin/as -V