binrepos.conf

Despite being on the amd64/23.0/hardened profile, my x86-64-v3 binhost isn't hardened. As of 2025-11-09 this has caused me no issues despite possibly being bad practice.

Specifics: PAX, a kernel/user memory security thing, used to make Gentoo Hardened have myriad build edits compared to normal Gentoo.

PAX is deprecated ⇗.

Therefore mixing binhosts will probably be fine.

I also add binpkg-request-signature for key verification (see the wiki ⇗).

/etc/portage/binrepos.conf/gentoobinhost.conf

[gentoobinhost]
priority = 1
sync-uri = https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64-v3

ath=/etc/portage/make.conf

/etc/portage/make.conf
# From binrepos.conf.md
FEATURES="${FEATURES} binpkg-request-signature"

There was one network issue I had to work around.

After removing /etc/portage/gnupg and running

sudo getuto

my WiFi hung after primary openPGP keys were generated. I discovered that my WiFi was blocking the hkps:// protocol, so I had to use mobile data to run the getuto part.