reinit the tree, so we can have metadata

13 files changed, 1376 insertions, 0 deletions

diff --git a/profiles/base/eapi b/profiles/base/eapi
new file mode 100644
index 000000000000..7ed6ff82de6b
--- /dev/null
+++ b/profiles/base/eapi
@@ -0,0 +1 @@
+5
diff --git a/profiles/base/make.defaults b/profiles/base/make.defaults
new file mode 100644
index 000000000000..ee84bc0b7f0f
--- /dev/null
+++ b/profiles/base/make.defaults
@@ -0,0 +1,147 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+#
+# System-wide defaults for the Portage system
+# See portage(5) manpage
+
+# Profile IUSE injection (applies only to ebuilds which use EAPI 5 or later)
+IUSE_IMPLICIT="prefix prefix-chain prefix-guest"
+USE_EXPAND_IMPLICIT="ELIBC KERNEL USERLAND"
+USE_EXPAND_VALUES_ELIBC="AIX bionic Cygwin Darwin DragonFly FreeBSD glibc HPUX Interix mingw mintlib musl NetBSD OpenBSD SunOS uclibc Winnt"
+USE_EXPAND_VALUES_KERNEL="AIX Darwin FreeBSD freemint HPUX linux NetBSD OpenBSD SunOS Winnt"
+USE_EXPAND_VALUES_USERLAND="BSD GNU"
+
+# Env vars to expand into USE vars.  Modifying this requires prior
+# discussion on gentoo-dev@lists.gentoo.org.
+USE_EXPAND="ABI_MIPS ABI_PPC ABI_S390 ABI_X86 ALSA_CARDS APACHE2_MODULES APACHE2_MPMS CALLIGRA_FEATURES CALLIGRA_EXPERIMENTAL_FEATURES CAMERAS COLLECTD_PLUGINS CPU_FLAGS_ARM CPU_FLAGS_X86 CROSSCOMPILE_OPTS CURL_SSL ELIBC ENLIGHTENMENT_MODULES FFTOOLS GPSD_PROTOCOLS GRUB_PLATFORMS INPUT_DEVICES KERNEL L10N LCD_DEVICES LIBREOFFICE_EXTENSIONS LINGUAS LIRC_DEVICES LLVM_TARGETS MONKEYD_PLUGINS NETBEANS_MODULES NGINX_MODULES_HTTP NGINX_MODULES_MAIL NGINX_MODULES_STREAM OFED_DRIVERS OFFICE_IMPLEMENTATION OPENMPI_FABRICS OPENMPI_OFED_FEATURES OPENMPI_RM PHP_TARGETS POSTGRES_TARGETS PYTHON_SINGLE_TARGET PYTHON_TARGETS QEMU_SOFTMMU_TARGETS QEMU_USER_TARGETS ROS_MESSAGES RUBY_TARGETS SANE_BACKENDS USERLAND UWSGI_PLUGINS VIDEO_CARDS VOICEMAIL_STORAGE XFCE_PLUGINS XTABLES_ADDONS"
+
+# USE_EXPAND variables whose contents are not shown in package manager
+# output. Changes need discussion on gentoo-dev.
+USE_EXPAND_HIDDEN="USERLAND KERNEL ELIBC CROSSCOMPILE_OPTS ABI_MIPS ABI_PPC ABI_S390 ABI_X86 CPU_FLAGS_ARM CPU_FLAGS_X86"
+
+CONFIG_PROTECT="/etc"
+CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf"
+
+# Variables that are set exclusively by the profile
+# and not by user configuration files.
+PROFILE_ONLY_VARIABLES="${PROFILE_ONLY_VARIABLES} ELIBC IUSE_IMPLICIT KERNEL USERLAND USE_EXPAND_IMPLICIT USE_EXPAND_UNPREFIXED USE_EXPAND_VALUES_ELIBC USE_EXPAND_VALUES_KERNEL USE_EXPAND_VALUES_USERLAND"
+
+# 'Sane' defaults
+ELIBC="glibc"
+KERNEL="linux"
+USERLAND="GNU"
+INPUT_DEVICES="keyboard mouse"
+
+# Tomáš Chvátal <scarabeus@gentoo.org> (23 Mar 2013)
+# By default enable libreoffice implementation only.
+OFFICE_IMPLEMENTATION="libreoffice"
+
+# Tomáš Chvátal <scarabeus@gentoo.org> (12 Aug 2011)
+# By default do not build any grub platform and let it guess.
+GRUB_PLATFORMS=""
+
+# Tomáš Chvátal <scarabeus@gentoo.org> (05 May 2013)
+# By default enable all extensions with no dependencies
+LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer"
+
+# Tomáš Chvátal <scarabeus@gentoo.org> (15 May 2011)
+# Andreas K. Hüttel <dilfridge@gentoo.org> (19 Aug 2011, 25 Mar 2012)
+# By default build all koffice / calligra features.
+CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author"
+
+# Ole Markus With <olemarkus@gentoo.org> (09 Oct 2010)
+# Default PHP targets (should always be latest stable version)
+PHP_TARGETS="php5-6"
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (28 Sep 2010)
+# Small default list of enabled plugins for collectd
+COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog"
+
+# Tomáš Chvátal <scarabeus@gentoo.org> (26 Oct 2010)
+# By default enable all protocols for average GPS user
+GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx"
+
+# Benedikt Böhm <hollow@gentoo.org> (27 Nov 2007)
+# Sane defaults for built-in apache modules
+# Patrick Lauer <patrick@gentoo.org> (12 Oct 2012)
+# extend for apache 2.4
+APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias"
+
+# Peter Volkov <pva@gentoo.org> (29 Apr 2010)
+# Set some defaults or package will fail to build (Check mconfig in package sources)
+XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
+
+# Robert Buchholz <rbu@gentoo.org> (17 Jan 2006)
+# Some common lcd devices
+LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text"
+
+# 2006/10/17 - Daniel Drake <dsd@gentoo.org>
+# cracklib is becoming optional in shadow (and removed from system) as of
+# today. However, cracklib is very standard across the Linux world so we
+# enable it by default.
+#
+# Diego Pettenò <flameeyes@gentoo.org> (14 Jul 2007)
+# Moved to base/ profile from default-linux/ so that it also applies to
+# embedded and hardened profiles.
+USE="cracklib"
+
+# Miroslav Šulc <fordfrog@gentoo.org> (19 Nov 2008)
+# Netbeans modules/clusters
+NETBEANS="apisupport cnd groovy gsf harness ide identity j2ee java mobility nb php profiler soa visualweb webcommon websvccommon xml"
+
+# 2009/09/21 Robin H. Johnson <robbat2@gentoo.org>
+# https://archives.gentoo.org/gentoo-dev/msg_dc705dc2c1a45e18a85aa62e8fb17009.xml
+# Build kernel modules from linux-mod by default:
+USE="${USE} modules"
+
+# Manuel Rüger <mrueg@gentoo.org> (09 Sep 2015)
+# Default Ruby build targets
+RUBY_TARGETS="ruby22"
+
+# Samuli Suominen <ssuominen@gentoo.org> (03 Dec 2009)
+# Enable USE cxx by default so base-system and toolchain pkgs can start using USE cxx
+# instead of USE nocxx.
+# https://archives.gentoo.org/gentoo-dev/msg_a181cd0d36600067b599f4b996c6989f.xml
+USE="${USE} cxx"
+
+# Enable extended filesystem attribute support by default.
+# https://archives.gentoo.org/gentoo-dev/message/ba0e3457e4b807e79816f0df03566af0
+USE="${USE} xattr"
+
+# Tiziano Müller <dev-zero@gentoo.org> (24 Jan 2010)
+# We usually don't want python to (re)write .py[co] files during phase runs
+# since it could cause sandbox violations
+PYTHONDONTWRITEBYTECODE="1"
+
+# Jorge Manuel B. S. Vicetto <jmbsvicetto@gentoo.org> (16 Nov 2011)
+# Add default USE value for bootstrap and rename it from STAGE1_USE to BOOTSTRAP_USE
+# Add in expanded PYTHON_TARGETS or stage1 builds break because of USE="-* ${BOOTSTRAP_USE}"
+# This MUST be kept in sync with the PYTHON_TARGETS below
+BOOTSTRAP_USE="cxx unicode internal-glib python_targets_python3_4 python_targets_python2_7"
+
+# Mike Gilbert <floppym@gentoo.org> (15 May 2012)
+# Default target(s) for python-r1.eclass
+PYTHON_TARGETS="python2_7 python3_4"
+PYTHON_SINGLE_TARGET="python3_4"
+
+# Michał Górny <mgorny@gentoo.org> (10 Aug 2013)
+# Moved from portage's make.globals.
+# 1) do not uninstall kernel modules and therefore allow replacing them,
+# 2) allow replacing unowned compiled Python modules (python-r1 migration),
+# 3) allow replacing unowned dropin.cache files (twisted-r1 migration).
+# 4) protect /var/{run,lock} symlinks for bug 519620
+COLLISION_IGNORE="/lib/modules/* *.py[co] *\$py.class */dropin.cache"
+UNINSTALL_IGNORE="/lib/modules/* /var/run /var/lock"
+
+# Andreas K. Hüttel <dilfridge@gentoo.org> (23 Aug 2013)
+# Make emerge messages default to English as per Council decision
+LC_MESSAGES="C"
+
+# Brian Dolbec <dolsen@gentoo.org> (16 Jun 2017)
+# disable twisted's plugin cache update to prevent access violations
+# call /usr/bin/twisted-regen-cache in pkg_postinst()
+TWISTED_DISABLE_WRITING_OF_PLUGIN_CACHE="1"
+
+# Aaron W. Swenson <titanofold@gentoo.org> (9 Jul 2017)
+# Default target(s) for postgres{,-multi}.eclass
+POSTGRES_TARGETS="postgres9_5"
diff --git a/profiles/base/package.mask b/profiles/base/package.mask
new file mode 100644
index 000000000000..6fa75c0ec35a
--- /dev/null
+++ b/profiles/base/package.mask
@@ -0,0 +1,8 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# Andreas K. Hüttel <dilfridge@gentoo.org> (27 May 2017)
+# This release and later require C++11 or C++14
+# So we mask it here, and unmask in 17.0 release profiles
+>=dev-libs/icu-59
+>=dev-libs/icu-layoutex-59
diff --git a/profiles/base/package.use b/profiles/base/package.use
new file mode 100644
index 000000000000..b21593100fb3
--- /dev/null
+++ b/profiles/base/package.use
@@ -0,0 +1,39 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# David Seifert <soap@gentoo.org> (17 Apr 2017)
+# Only python 3.5 supported
+kde-apps/kajongg:5 python_single_target_python3_5 python_targets_python3_5
+dev-python/pygcrypt python_targets_python3_5
+dev-python/uvloop python_targets_python3_5
+media-gfx/blender python_targets_python3_5
+
+# David Seifert <soap@gentoo.org> (17 Apr 2017)
+# These py2-only packages also support pypy, enable
+# Python 2.7 as the default implementation, preparing
+# for the eventual switch to py3 in PYTHON_SINGLE_TARGET
+app-text/asciidoc python_single_target_python2_7 python_targets_python2_7
+app-text/wklej python_single_target_python2_7 python_targets_python2_7
+dev-vcs/git-bz python_single_target_python2_7 python_targets_python2_7
+gnome-base/libglade python_single_target_python2_7 python_targets_python2_7
+sci-chemistry/pdb-tools python_single_target_python2_7 python_targets_python2_7
+
+# Michał Górny <mgorny@gentoo.org> (24 Sep 2016)
+# Enable the BPF target by default
+sys-devel/clang llvm_targets_BPF
+sys-devel/llvm llvm_targets_BPF
+
+# Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> (27 Jul 2012)
+# Modular X: Build the Xorg X server by default
+x11-base/xorg-server xorg
+
+# Diego Elio Pettenò <flameeyes@gentoo.org> (11 Apr 2011)
+# Disable ldap support by default in sudo, as it seem to lack
+# developers maintaining that particular support and is, thus, vastly
+# untested.
+app-admin/sudo -ldap
+
+# Zac Medico <zmedico@gentoo.org> (04 Dec 2009)
+# Bug #295615 - Disable cxx by default, in order to avoid a die
+# in pkg_setup with default USE settings (cxx requires sasl).
+net-nds/openldap -cxx
diff --git a/profiles/base/package.use.force b/profiles/base/package.use.force
new file mode 100644
index 000000000000..542fd1e2f658
--- /dev/null
+++ b/profiles/base/package.use.force
@@ -0,0 +1,94 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# Michał Górny <mgorny@gentoo.org> (05 Jun 2017)
+# (on behalf of Treecleaner project)
+# www-apache/mod_python is masked for removal, force agent-only builds.
+net-analyzer/check_mk agent-only
+
+# NP-Hardass <NP-Hardass@gentoo.org> (10 Apr 2017)
+# Always force patch on appropriate variant to ensure
+# similar experience when using app-emulation/wine-any
+app-emulation/wine-staging staging
+app-emulation/wine-d3d9 d3d9
+
+# David Seifert <soap@gentoo.org> (07 Mar 2017)
+# Only ever use system ffmpeg, allow kodi bundled ffmpeg
+# only for debug pruposes.
+media-tv/kodi system-ffmpeg
+
+# Sam Jorna <wraeth@gentoo.org> (15 Dec 2016)
+# Known to build unbootable EFI binaries on some systems when built with
+# UDK. Forcing use of gnu-efi until it's more stable.
+sys-boot/refind gnuefi
+
+# Mike Gilbert <floppym@gentoo.org> (13 Oct 2016)
+# Python without threads breaks in many ways.
+dev-lang/python threads
+
+# Maciej Mrozowski <reavertm@gentoo.org> (1 Sept 2016)
+# Workaround until resolved upstream (bug #586840)
+>=dev-games/simgear-2016.2.1 dns
+
+# Pawel Hajdan jr <phajdan.jr@gentoo.org> (20 Aug 2016)
+# Chromium GYP build is no longer supported - always use GN.
+>=www-client/chromium-54 gn
+
+# Lars Wendler <polynomial-c@gentoo.org> (11 Sep 2015)
+# Package fails to build with dbus USE flag being disabled (bug #560208)
+=x11-wm/afterstep-2.2.12 dbus
+
+# Gilles Dartiguelongue <eva@gentoo.org> (25 May 2015)
+# webkit fails to build with USE=wayland, bug #549228
+# https://bugs.webkit.org/show_bug.cgi?id=142879
+# https://bugs.webkit.org/show_bug.cgi?id=136831
+>=net-libs/webkit-gtk-2.8 X
+
+# Alexnader Vershilov <qnikst@gentoo.org> (04 Nov 2014)
+# Due to bug #490604: version without oracle is not supported
+>=dev-db/tora-2.1.3 oracle
+
+# Justin Lecher <jlec@gentoo.org> (10 Aug 2014)
+# Doesn't work without acl support
+# No patch yet, #516626
+>=net-fs/netatalk-3.1.3 acl
+
+# Pawel Hajdan jr <phajdan.jr@gentoo.org> (12 Jun 2014)
+# Chromium builds in PIC mode on most arches anyway,
+# i.e. this use flag has no effect on them.
+www-client/chromium pic
+
+# Zac Medico <zmedico@gentoo.org> (4 Dec 2012)
+# Force app-shells/bash[readline] in stage1 builds, so that compgen is
+# available for sys-apps/portage (see bug #445576).
+app-shells/bash:0 readline
+
+# Michał Górny <mgorny@gentoo.org> (14 Oct 2012)
+# Force-enable all PYTHON_TARGETS for python-exec to avoid using private
+# API. Please remember to keep it in sync with python_targets.desc.
+dev-lang/python-exec python_targets_python2_7
+dev-lang/python-exec python_targets_python3_4
+dev-lang/python-exec python_targets_python3_5
+dev-lang/python-exec python_targets_python3_6
+dev-lang/python-exec python_targets_jython2_7
+dev-lang/python-exec python_targets_pypy
+dev-lang/python-exec python_targets_pypy3
+
+# Zac Medico <zmedico@gentoo.org> (20 Oct 2010)
+# Force ipc USE flag since it should remain enabled unless
+# it is found to be incompatible with a specific profile
+# or environment. When enabled, it fixes bug #278895,
+# bug #315615, and makes subshell die support more robust
+# (so that repoman's ebuild.nesteddie check is irrelevant).
+sys-apps/portage ipc
+
+# Arfrever Frehtes Taifersar Arahesis <arfrever@gentoo.org>
+# Python should use wide Unicode implementation by default.
+# Switching of "wide-unicode" USE flag changes ABI of Python
+# and requires reinstallation of many Python modules.
+dev-lang/python wide-unicode
+
+# Peter Alfredsen <loki_val@gentoo.org> (11 Apr 2009)
+# Forcing w.r.t. bug 265336. When unicode use-flag is
+# turned off, ABI is broken without a .so bump.
+dev-libs/libpcre unicode
diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask
new file mode 100644
index 000000000000..ab0eae134022
--- /dev/null
+++ b/profiles/base/package.use.mask
@@ -0,0 +1,641 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# This file requires >=portage-2.1.1
+# New entries go on top.
+
+# This file is only for generic masks. For arch-specific masks (i.e.
+# mask everywhere, unmask on arch/*) use arch/base.
+
+# Andreas Sturmlechner <asturm@gentoo.org> (30 Sep 2017)
+# Depends on masked net-libs/libtorrent-rasterbar-1.1
+# bugs #580760, #630364
+net-misc/fatrat bittorrent
+
+# Pawel Hajdan jr <phajdan.jr@gentoo.org> (18 Sep 2017)
+# Ian Stakenvicius <axs@gentoo.org> (27 Sep 2017)
+# Depends on >=icu-59, still masked.
+>=www-client/chromium-62.0.3202.9 system-icu
+>=www-client/firefox-56.0 system-icu
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (9 Sep 2017)
+# Potentially destructive. Use it only if you know what you're doing.
+sys-libs/glibc vanilla
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (6 Sep 2017)
+# This should really go away now.
+>=sys-libs/glibc-2.26 rpc
+
+# Michael Orlitzky <mjo@gentoo.org> (24 Aug 2017)
+# This is a security risk if not used carefully, bug 628596.
+net-analyzer/nrpe command-args
+
+# Michał Górny <mgorny@gentoo.org> (05 Aug 2017)
+# media-libs/silgraphite is being treecleaned wrt #594314.
+<app-text/texlive-core-2013 xetex
+
+# Michał Górny <mgorny@gentoo.org> (04 Aug 2017)
+# sys-kernel/openvz-sources is being treecleaned wrt #580516.
+app-emulation/libvirt openvz
+
+# Michał Górny <mgorny@gentoo.org> (30 Jul 2017)
+# The Z3 backend is unstable and causes assertion failures. Mask it
+# until upstream fixes it properly.
+sys-devel/clang z3
+
+# Ulrich Müller <ulm@gentoo.org> (26 Jul 2017)
+# Disable hesiod support due to security vulnerability, bug #626242.
+app-editors/emacs hesiod
+app-editors/emacs-vcs hesiod
+
+# Brian Evans <grknight@gentoo.org> (21 Jul 2017)
+# Mask USE flag which has limited keywords for app-crypt/argon2
+dev-lang/php argon2
+
+# Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> (16 Jul 2017)
+# Causes build to fail with ffmpeg-3, #602786
+www-plugins/gnash vaapi
+
+# Mike Gilbert <floppym@gentoo.org> (09 Jul 2017)
+# Matthias Dahl <matthias.dahl@binary-island.eu> (05 Jul 2017)
+# Both are not your typical garden-variety Linux programs and are
+# rather sensitive when it comes to compiler flags, resulting in
+# black screens, hangs or crashes. The average joe should have no
+# need or even advantage to set custom compiler flags at all.
+# Example: https://bugs.gentoo.org/619628
+sys-boot/gnu-efi custom-cflags
+sys-boot/refind custom-cflags
+
+# Michał Górny <mgorny@gentoo.org> (8 Jul 2017)
+# The clutter backend is broken with new GTK+3 versions and upstream
+# haven't been able to fix it so far. Enforcing an old GTK+3 version
+# is not a good solution long-term, so mask the flag entirely.
+media-video/parole clutter
+
+# Michał Górny <mgorny@gentoo.org> (29 Jun 2017)
+# Upstream switched to CMake and no longer provides option to build
+# static and shared libs. The flag is preserved not to break USE
+# depenencies.
+>=app-arch/snappy-1.1.5 static-libs
+
+# Ilya Tumaykin <itumaykin+gentoo@gmail.com> (18 Jun 2017)
+# Libav is basically unsupported by mpv, see upstream issues 3923, 3925.
+# Needs patch to even build, subs are broken and not supported anymore.
+media-video/mpv libav
+
+# Maciej Mrozowski <reavertm@gmail.com> (15 Jun 2017)
+# Mask due to bug #621810
+dev-games/simgear gdal
+games-simulation/flightgear gdal
+
+# Michał Górny <mgorny@gentoo.org> (05 Jun 2017)
+# (on behalf of Treecleaner project)
+# dev-cpp/libgnomeuimm is masked for removal, mask flags that require
+# it.
+app-cdr/cdrdao gcdmaster
+
+# Michał Górny <mgorny@gentoo.org> (05 Jun 2017)
+# (on behalf of Treecleaner project)
+# dev-libs/dee is masked for removal, mask flags that requires it.
+gnome-extra/zeitgeist icu
+
+# Michał Górny <mgorny@gentoo.org> (05 Jun 2017)
+# (on behalf of Treecleaner project)
+# www-apache/mod_python is masked for removal, mask flags that
+# require it.
+net-analyzer/check_mk livestatus wato
+
+# Matthias Maier <tamiko@gentoo.org> (31 May 2017)
+# mask dependencies on old paraview versions, bug #561084
+<sci-libs/openfoam-2.4.0 paraview
+
+# Andreas K. Hüttel <dilfridge@gentoo.org> (29 May 2017)
+# Does not build
+sci-libs/linux-gpib php
+
+# Michał Górny <mgorny@gentoo.org> (20 May 2017)
+# CUDA support in nvtt does not support GCC 4.5+.
+media-gfx/nvidia-texture-tools cuda
+
+# Michał Górny <mgorny@gentoo.org> (15 May 2017)
+# Mask ruby20-only compatible packages
+=media-libs/libcaca-0.99_beta19 ruby
+
+# Michael Orlitzky <mjo@gentoo.org> (14 May 2017)
+# This version experiences random build failures with USE=jit.
+# Since USE=futures needs USE=jit, we have to mask that too.
+=dev-scheme/racket-6.9 futures jit
+
+# Matthias Maier <tamiko@gentoo.org> (11 May 2017)
+# Globally mask pie use flag. Selectively unmask on specific profiles.
+sys-devel/gcc pie
+
+# Mike Gilbert <floppym@gentoo.org> (28 Apr 2017)
+# Needs sandbox-2.11 (masked)
+>=www-client/chromium-59 tcmalloc
+
+# Michał Górny <mgorny@gentoo.org> (18 Mar 2017)
+# Requires removed old version of media-gfx/graphviz.
+media-gfx/nip2 graphviz
+
+# Matt Turner <mattst88@gentoo.org> (04 Mar 2017)
+# Requires dev-util/cmdtest stabilization, bug 611052
+x11-apps/xauth test
+
+# Pawel Hajdan jr <phajdan.jr@gentoo.org> (02 Mar 2017)
+# Known build issue with system libvpx:
+# https://bugs.gentoo.org/show_bug.cgi?id=611394
+>=www-client/chromium-58.0.3026.3 system-libvpx
+
+# Michał Górny <mgorny@gentoo.org> (17 Feb 2017)
+# Python 2 package relies on gedit[python] which is py3 only.
+dev-vcs/rabbitvcs gedit
+
+# Mike Gilbert <floppym@gentoo.org> (16 Feb 2017)
+# Multiple test failures.
+sys-boot/grub:2 test
+
+# Ulrich Müller <ulm@gentoo.org> (4 Feb 2017)
+# Uses old and vulnerable net-libs/webkit-gtk:3, bug #584156.
+app-editors/emacs:25 xwidgets
+app-editors/emacs-vcs:25 xwidgets
+
+# Matt Turner <mattst88@gentoo.org> (26 Jan 2017)
+# x11-drivers/ati-drivers is masked for removal.
+media-gfx/blender opencl
+media-libs/opensubdiv opencl
+
+# Ian Stakenvicius (25 Jan 2017)
+# rust on mozilla packages is experimental
+www-client/firefox rust
+www-client/seamonkey rust
+mail-client/thunderbird rust
+
+# Lars Wendler <polynomial-c@gentoo.org> (19 Jan 2017)
+# Masked until system heimdal can finally be used with AD DC
+net-fs/samba system-heimdal
+
+# Magnus Granberg <zorry@gentoo.org> (18 Jan 2017)
+# Adding the mask so that end users and devlopers are notified of the removal and have some
+# time to migrate. There is no support for gcj in gcc-7
+>=sys-devel/gcc-6.3.0 gcj
+
+# Robin H. Johnson <robbat2@gentoo.org> (04 Dec 2016)
+# Additional HAProxy functionality waiting for related stuff to land in the
+# tree.
+# bug 541042 - lua 5.3
+net-proxy/haproxy lua
+# bug (none) - 51Degrees
+net-proxy/haproxy 51degrees
+# bug (none) - WURFL
+net-proxy/haproxy wurfl
+
+# Pacho Ramos <pacho@gentoo.org> (27 Nov 2016)
+# Not rely on monodevelop, bug #596656
+# dev-dotnet/zeitgeist-sharp is going to be removed, bug #582894
+net-irc/hexchat theme-manager
+gnome-extra/zeitgeist-datasources mono tomboy
+
+# Pacho Ramos <pacho@gentoo.org> (27 Nov 2016)
+# Avoid the usage of dead net-dialup/capi4k-utils
+app-emulation/crossover-bin capi
+net-libs/opal capi
+
+# Ettore Di Giacinto <mudler@gentoo.org> (10 Nov 2016)
+# Dependency has no stable keyword
+# and as for now we have only stable mate versions
+mate-base/mate bluetooth
+
+# Ulrich Müller <ulm@gentoo.org> (15 Oct 2016)
+# The --with-cairo option is considered as experimental by upstream
+# and causes problems with updating the X window, bug #592238
+app-editors/emacs cairo
+app-editors/emacs-vcs cairo
+
+# Michael Palimaka <kensington@gentoo.org> (15 Sep 2016)
+# Requires unreleased dependency dev-qt/qtspeech.
+kde-apps/konqueror speech
+kde-apps/kpimtextedit speech
+kde-apps/ktp-text-ui speech
+kde-apps/okular speech
+kde-frameworks/knotifications speech
+kde-frameworks/ktextwidgets speech
+
+# Michał Górny <mgorny@gentoo.org> (28 Aug 2016)
+# lldb fails to build in the current RC, and needs a lot of minor fixes.
+# It's no longer available in -9999 line, and it won't be in 3.9.0
+# either unless somebody steps up to fix it.
+>=sys-devel/llvm-3.9.0_rc lldb
+
+# Brian Evans <grknight@gentoo.org> (22 Aug 2016)
+# Depends on masked, end-of-life php versions
+<=dev-libs/ossp-uuid-1.6.2-r4 php
+=dev-libs/xapian-bindings-1.2.22 php
+=www-servers/uwsgi-2.0.9 php
+
+# Gilles Dartiguelongue <eva@gentoo.org> (21 Aug 2016)
+# Needs a Gstreamer plugin from gst-plugins-bad that is not packaged to date
+media-plugins/grilo-plugins chromaprint
+
+# Pacho Ramos <pacho@gentoo.org> (21 Aug 2016)
+# x11-libs/libsvg-cairo is being removed, bug #537918
+dev-ml/cairo-ocaml svg
+
+# Lars Wendler <polynomial-c@gentoo.org> (19 Aug 2016)
+# gnutls is broken for years
+>=net-libs/gsoap-2.8.0 gnutls
+
+# Brian Dolbec <dolsen@gentoo.org> (9 Aug 2016)
+# Mask doc use flag due to needed sphinx pkg update
+~dev-util/buildbot-0.9.0_p1 doc
+~dev-util/buildbot-0.9.1 doc
+~dev-util/buildbot-0.9.2 doc
+~dev-util/buildbot-0.9.3 doc
+
+# Michał Górny <mgorny@gentoo.org> (05 Jul 2016)
+# Mask system-clang support as it requires llvm-3.4 that is subject
+# to security bug cleanup, #585102.
+dev-util/intel-ocl-sdk system-clang
+
+# Matthew Brewer <tomboy64@sina.cn> (02 June 2016)
+# Acked-by: Amy Winston <amynka@gentoo.org>
+# Currently broken upstream.
+>=dev-lang/rakudo-2016.05 java
+
+# Michał Górny <mgorny@gentoo.org> (14 May 2016)
+# (on behalf of QA team)
+# sys-devel/gcc[jit]:
+# - violates strict multilib rules, #569608
+# - causes collisions between multiple gcc versions, #583010
+# Masking the flag until it is fixed.
+sys-devel/gcc jit
+
+# Mike Frysinger <vapier@gentoo.org> (08 May 2016)
+# Most targets do not support VTV #547040.
+sys-devel/gcc vtv
+
+# Matthew Brewer <tomboy64@sina.cn> (08 May 2016)
+# Acked-by: Amy Winston <amynka@gentoo.org>
+# Upstream supports using Clang's address sanitizer, but apparently
+# invokes it wrong.
+dev-lang/moarvm asan
+
+# Michael Palimaka <kensington@gentoo.org> (05 May 2016)
+# Doesn't work
+media-libs/openimageio python
+
+# Ian Stakenvicius <axs@gentoo.org> (28 Apr 2016)
+# system-cairo support causes lots of crashing in mozilla pkgs
+# (see bug #556378 and others)
+www-client/firefox system-cairo
+mail-client/thunderbird system-cairo
+>=www-client/seamonkey-2.41 system-cairo
+
+# Michael Palimaka <kensington@gentoo.org> (17 Apr 2016)
+# Fails to build with recent doxygen. Bug #569776.
+dev-cpp/eigen:2 doc
+
+# James Le Cuirot <chewi@gentoo.org> (10 Apr 2016)
+# Slower and less reliable than HotSpot and we don't support Java on
+# any non-HotSpot platforms. Don't unmask these unless you know what
+# you're doing. This has upstream's approval.
+dev-java/icedtea cacao jamvm
+
+# Maciej Mrozowski <reavertm@gmail.com> (23 Mar 2016)
+# Experimental cairo-qt backend (see bug #568000).
+app-text/poppler cairo-qt
+
+# Lars Wendler <polynomial-c@gentoo.org> (20 Mar 2016)
+# Need vulnerable libotr version (see bug #576914).
+net-im/centerim otr
+=net-im/climm-0.7.1 otr
+net-im/qutim otr
+
+# James Le Cuirot <chewi@gentoo.org> (14 Mar 2016)
+# jtds:1.2 needs removing because it depends on Java 6. Unfortunately
+# we can't stabilise the latest sqldeveloper yet because of Java 8.
+<dev-db/sqldeveloper-4.1.3.20.78-r1 mssql sybase
+
+# Patrice Clement <monsieurp@gentoo.org> (27 Nov 2015)
+# Unsastified dependencies are upsetting repoman. Needs investigation.
+app-arch/cfv bittorrent
+
+# Rick Farina <zerochaos@gentoo.org> (06 Oct 2015)
+# forward porting this patch is non-trivial, mask for now
+>=net-wireless/wpa_supplicant-2.5 wimax
+
+# Justin Lecher <jlec@gentoo.org> (22 Sep 2015)
+# Downloads files during installation
+# https://bugs.gentoo.org/show_bug.cgi?id=533876
+>=sci-libs/vtk-6.1.0 examples
+
+# Fabian Groffen <grobian@gentoo.org> (08 Sep 2015)
+# GnuTLS support is currently broken/causes hang, bug #559834
+# http://dev.mutt.org/trac/ticket/3772
+>=mail-client/mutt-1.5.23-r8 gnutls
+
+# Jason Zaman <perfinion@gentoo.org> (06 Sep 2015)
+# This is for cgmanager which is linux only.
+# Unmasked in default/linux/package.use.mask.
+sys-auth/consolekit cgroups
+
+# Manuel Rüger <mrueg@gentoo.org> (03 Sep 2015)
+# Mask USE=ruby for packages that solely rely on the soon to be deprecated
+# ruby 1.9
+# See bug #547828
+<app-mobilephone/obexftp-0.24 ruby
+# See bug #541648
+<dev-libs/Ice-3.6 ruby
+# See bug #547832
+sci-libs/gdal ruby
+# See bug #547834
+<sys-apps/paludis-2.4.0 ruby
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (1 Sep 2015)
+# Currently broken upstream. We still hope it will get fixed.
+app-office/libreoffice telepathy
+
+# James Le Cuirot <chewi@gentoo.org> (18 Aug 2015)
+# gcc[awt] is only used by gcj-jdk[awt] and that isn't needed by
+# anything in the tree. The toolchain folks aren't keen to support it
+# and it should probably only be used if you really know what you're
+# doing *and* your name is gnu_andrew. ;) See bug #531900.
+sys-devel/gcc awt
+dev-java/gcj-jdk awt
+
+# Heather Cynede <cynede@gentoo.org> (13 Aug 2015)
+# mono currently fails with doc most likely because of xattr
+# Gentoo bug: 554484
+>=dev-lang/mono-3.12.1 doc
+
+# Manuel Rüger <mrueg@gentoo.org> (05 Jul 2015)
+# app-text/migemo is masked because it fails for ruby20
+app-text/cmigemo emacs
+
+# Mike Gilbert <floppym@gentoo.org> (16 May 2015)
+# dev-lang/python[berkdb] fails with recent multilib sys-libs/db (bug 519584).
+dev-lang/python berkdb
+net-nds/nsscache nssdb
+
+# Jason Zaman <perfinion@gentoo.org> (08 May 2015)
+# java wrappers fail to build (bug #548858)
+=app-admin/setools-3.3.8-r7 java
+
+# James Le Cuirot <chewi@gentoo.org> (05 Apr 2015)
+# dev-java/sun-j2me-bin is going away.
+dev-java/proguard j2me
+
+# Lars Wendler <polynomial-c@gentoo.org> (19 Mar 2015)
+# >=games-strategy/freeciv-2.5.0 requires >=dev-lang/lua-5.2
+games-strategy/freeciv system-lua
+
+# Brian Evans <grknight@gentoo.org> (17 Mar 2015)
+# Mask the cluster flag for deprecation. Use dev-db/mysql-cluster if
+# you need NDB.
+dev-db/mariadb cluster
+dev-db/mysql cluster
+
+# Andrew Savchenko <bircoph@gentoo.org> (11 Feb 2015)
+# Cluster code is still under development, only base functionality
+# is implemented. Masking for testing and evaluation.
+app-admin/clsync cluster mhash
+
+# Michał Górny <mgorny@gentoo.org> (30 Nov 2014)
+# Not supported at the moment. DirectFB lacks multilib support,
+# and we have to decide if we want it.
+x11-libs/cairo directfb
+
+# Brian Evans <grknight@gentoo.org> (29 Nov 2014)
+# Strongly recommened by upstream to disable lzo and zlib due to memory leaks
+# https://github.com/groonga/groonga/issues/6 (Japanese)
+app-text/groonga lzo zlib
+
+# Jeroen Roovers <jer@gentoo.org> (18 Nov 2014)
+# Requires dev-lang/lua-5.2 (bug #253269)
+net-analyzer/nmap system-lua
+
+# Mike Frysinger <vapier@gentoo.org> (21 Oct 2014)
+# Most targets do not support ASAN/etc... #504200.
+sys-devel/gcc sanitize
+
+# Pacho Ramos <pacho@gentoo.org> (19 Oct 2014)
+# swfdec is masked for removal, bug #525834
+dev-libs/DirectFB swfdec
+
+# Rick Farina <zerochaos@gentoo.org> (26 Aug 2014)
+# mirisdr does not seem to like making releases
+<net-wireless/gr-osmosdr-9999 mirisdr
+
+# Maxim Koltsov <maksbotan@gentoo.org> (05 Aug 2014)
+# net-libs/tox is in mva overlay only ATM
+app-leechcraft/lc-azoth sarin
+
+# Brian Evans <grknight@gentoo.org> (30 Jul 2014)
+# Mask embedded due to upstream not supporting
+# https://bugs.launchpad.net/bugs/1236873
+dev-db/percona-server embedded
+
+# Thomas Sachau <tommy@gentoo.org> (30 Jun 2014)
+# Mask pixman USE flag of dev-libs/efl for future removal, bug 501074
+dev-libs/efl pixman
+
+# Zac Medico <zmedico@gentoo.org> (06 Jun 2014)
+# Needs hardmasked lua-5.2
+www-servers/mongoose lua
+
+# Manuel Rüger <mrueg@gentoo.org> (05 Jun 2014)
+# Fails to build with net-libs/libotr-4.0.0
+net-im/climm otr
+
+# Pacho Ramos <pacho@gentoo.org> (01 Jun 2014)
+# Needs hardmasked lua-5.2
+>=media-plugins/grilo-plugins-0.2.12 lua
+
+# Rick Farina <zerochaos@gentoo.org> (30 Dec 2015)
+# mask test use flag since tests do not pass
+# mask development use flag since most of it isn't packaged (or useful)
+net-analyzer/metasploit development test
+
+# Tom Wijsman <TomWij@gentoo.org> (14 May 2014)
+# Documentation generation needs APIviz which is not in the Portage tree yet.
+# Tracked in Gentoo bug #509602.
+dev-java/jboss-logging doc
+
+# Markos Chandras <hwoarang@gentoo.org> (20 Apr 2014)
+# Fails to build with recent polarssl (>=1.3). Bug #503604
+media-video/rtmpdump polarssl
+
+# Julian Ospald <hasufell@gentoo.org> (06 Apr 2014)
+# broken wrt #501582
+<net-vpn/openvpn-9999 polarssl
+
+# Manuel Rüger <mrueg@gentoo.org> (07 Mar 2014)
+# Mask ruby18-only compatible flags
+# Bugs: 483104, 483102
+<media-libs/libcaca-0.99_beta19 ruby
+media-sound/podcatcher bittorrent
+
+# Mike Frysinger <vapier@gentoo.org> (03 Feb 2014)
+# Upstream says to not use this for now.
+dev-libs/elfutils threads
+
+# Gilles Dartiguelongue <eva@gentoo.org> (23 Dec 2013)
+# Gstreamer support fails to build due to libtool shortcomings when using
+# an intermediate library as a dependency of another libtool target dependency.
+# Since this is new and unused yet, keep it masked for now and check
+# with upstream if there is something that can be done to fix the issue.
+media-libs/cogl gstreamer
+
+# Andrey Grozin <grozin@gentoo.org> (12 Nov 2013)
+# berkdb support works only for sys-libs/db-6.0 which is masked
+sci-physics/reduze berkdb
+
+# Michał Górny <mgorny@gentoo.org> (10 Nov 2013)
+# (on behalf of python@)
+# USE=sandbox is not done properly in Gentoo and results in crippled
+# PyPy install that is not usable for non-sandbox clients (and there are
+# no real sandbox clients right now). Masked until the flag is
+# re-implemented or dropped. For more details, bug #429372.
+dev-python/pypy sandbox
+dev-python/pypy3 sandbox
+
+# Julian Ospald <hasufell@gentoo.org> (31 Aug 2013)
+# Randomly breaks consumers at runtime. Do not report
+# gentoo bugs.
+media-libs/libsdl2 custom-cflags
+
+# Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> (22 Aug 2013)
+# Causes build to fail, issue is being discussed with upstream
+>=www-plugins/gnash-0.8.10_p20130822 openvg
+
+# Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> (13 Jul 2013)
+# GL/GLES support in cairo is mutually exclusive, bug #428770.
+x11-libs/cairo gles2
+dev-libs/weston rpi
+
+# Kacper Kowalik <xarthisius@gentoo.org> (19 May 2013)
+# Fails to build, haven't had time to debug
+app-doc/doxygen sqlite
+
+# Alexis Ballier <aballier@gentoo.org> (08 May 2013)
+# On behalf of Pavel Sanda <ps@twin.jikos.cz>
+# Lyx is currently not working with subversion 1.7 and needs 1.6.
+app-office/lyx subversion
+
+# Christian Faulhammer <fauli@gentoo.org> (08 May 2013)
+# Will not build successfully yet
+mail-client/claws-mail gtk3
+
+# Bernard Cafarelli <voyageur@gentoo.org> (04 Apr 2013)
+# Broken for now (segmentation fault on play)
+gnustep-apps/cynthiune flac
+
+# Richard Freeman <rich0@gentoo.org> (24 Mar 2013)
+# Dependency is masked for buffer overflows for now
+app-text/yagf cuneiform
+dev-python/pyocr cuneiform
+
+# Christoph Junghans <junghans@gentoo.org> (10 Mar 2013)
+# log4cxx has known memory leaking issues wrt bug #287697,
+# unmask when log4cxx is fixed and stable.
+media-sound/google-musicmanager log
+
+# Tom Wijsman <TomWij@gentoo.org> (10 Mar 2013)
+# Experimental, masked until it compiles and works.
+media-libs/avidemux-core system-ffmpeg
+
+# Julian Ospald <hasufell@gentoo.org> (20 Feb 2013)
+# Unsupported and experimental.
+# NP-Hardass <NP-Hardass@gentoo.org> (18 Jun 2015)
+# Change to <10
+<net-misc/teamviewer-10 system-wine
+
+# Alexis Ballier <aballier@gentoo.org> (15 Feb 2013)
+# Needs a huge patch to build against recent releases of FFmpeg/libav.
+# Mask it until upstream fixes it. Bug #417869
+<media-sound/audacity-2.1.0 ffmpeg
+
+# Jory A. Pratt <anarchy@gentoo.org> (15 Dec 2012)
+# PGO is known to be busted with most configurations
+www-client/firefox pgo
+
+# Sergey Popov <pinkbyte@gentoo.org> (26 Nov 2012)
+# PDF docs building failed with sandbox violation
+media-libs/opencolorio pdf
+
+# Diego Elio Pettenò (27 Aug 2012)
+# The libpci access is only used for linux.
+net-analyzer/net-snmp pci
+
+# Diego Elio Pettenò (20 Aug 2012)
+# The prevent-removal USE flag is only implemented for Linux.
+sys-auth/pam_mktemp prevent-removal
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (25 Mai 2012)
+# Requires icc which does not emerge (distfile unavailable)
+media-libs/opencv ipp
+
+# Samuli Suominen <ssuominen@gentoo.org> (20 Mar 2012)
+# This is for udev-acl. Unmasked in default/linux/package.use.mask.
+sys-auth/consolekit acl
+
+# Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> (25 Feb 2012)
+# directfb build issues, bug #405817.
+www-plugins/gnash directfb
+
+# Bernard Cafarelli <voyageur@gentoo.org> (08 Feb 2012)
+# libobjc2/clang experimental support
+>=gnustep-base/gnustep-make-2.6.2 libobjc2
+
+# Samuli Suominen <ssuominen@gentoo.org> (10 Jan 2012)
+# This is required only for Linux, so mask it here and unmask in
+# default/linux/package.use.mask. Bug 354923.
+app-arch/libarchive e2fsprogs
+
+# Mike Frysinger <vapier@gentoo.org> (06 Dec 2011)
+# No one should be mucking with libssp unless they really know what they're
+# doing.  Force extra work on the smart peeps to protect the not-so-smart.
+sys-devel/gcc libssp
+
+# Andrey Grozin <grozin@gentoo.org> (29 Mar 2011)
+# dev-lang/swig-2.0.2 with -octave generated .cpp files
+# incompatible with >=sci-mathematics/octave-3.4.0
+sci-libs/mathgl octave
+
+# Diego E. Pettenò <flameeyes@gentoo.org> (27 Mar 2011)
+#
+# Mask pdnsd's Linux-specific USE flags.
+net-dns/pdnsd isdn urandom
+
+# Raúl Porcel <armin76@gentoo.org> (13 Feb 2011)
+# Masked until devs know how to use repoman
+<media-video/mplayer-9999 bluray
+
+# Justin Lecher <jlec@gentoo.org> (17 Nov 2010)
+# Upstream didn't release patches for aria yet
+>=sci-chemistry/cns-1.3 aria
+
+# Tomas Touceda <chiiph@gentoo.org> (13 Apr 2010)
+# Masked because libsvm module is broken with this release on every arch.
+dev-lisp/clisp svm
+
+# Diego E. Pettenò <flameeyes@gmail.com> (18 Jan 2010)
+# Don't use system-wide mode unless you *really* know what you're doing.
+# Keep it masked here so that I don't need to manage two versions every time.
+media-sound/pulseaudio system-wide
+
+# Jeremy Olexa <darkside@gentoo.org> (10 Jan 2010)
+# Upsteam doesn't support ioctl backend and neither does Gentoo. ioctl USE flag
+# will eventually be removed unless the backend is re-written by upstream. bug
+# 299674
+>net-misc/wicd-1.6.2.2 ioctl
+
+# These are for BSD only
+net-proxy/squid ipf-transparent pf-transparent
+app-admin/sshguard ipfilter
+
+# Alexis Ballier <aballier@gentoo.org> <16 Feb 2011>
+# Win32 specific useflags for vlc. Can be used for cross-compiling.
+media-video/vlc directx dxva2
+# Mac OSX / iPhone OS specific useflags
+media-video/vlc audioqueue macosx-dialog-provider macosx-eyetv macosx-quartztext macosx-qtkit
diff --git a/profiles/base/package.use.stable.force b/profiles/base/package.use.stable.force
new file mode 100644
index 000000000000..70f03ad755e2
--- /dev/null
+++ b/profiles/base/package.use.stable.force
@@ -0,0 +1,5 @@
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# This file requires eapi 5 or later. New entries go on top.
+# Please use the same syntax as in package.use.force
diff --git a/profiles/base/package.use.stable.mask b/profiles/base/package.use.stable.mask
new file mode 100644
index 000000000000..168e7ae300c9
--- /dev/null
+++ b/profiles/base/package.use.stable.mask
@@ -0,0 +1,212 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# This file requires eapi 5 or later. New entries go on top.
+# Please use the same syntax as in package.use.mask
+
+# Michael Palimaka <kensington@gentoo.org> (30 Sep 2017)
+# Required dependeny is not stable
+sci-libs/gdal mdb
+
+# Tim Harder <radhermit@gentoo.org> (11 Sep 2017)
+# Requires guile-2 which is still unstable.
+>=net-irc/weechat-1.7 guile
+
+# James Le Cuirot <chewi@gentoo.org> (27 Aug 2017)
+# Masked for testing.
+media-video/ffmpeg chromium
+www-client/opera system-ffmpeg
+www-client/opera-beta system-ffmpeg
+www-client/opera-developer system-ffmpeg
+www-client/vivaldi system-ffmpeg
+www-client/vivaldi-snapshot system-ffmpeg
+
+# Andreas Sturmlechner <asturm@gentoo.org> (17 Aug 2017)
+# Unstable dependencies.
+kde-apps/kopete cryptography
+
+# Andreas Sturmlechner <asturm@gentoo.org> (12 Aug 2017)
+# Not operational, bug #619534
+>=kde-apps/cantor-17.04.3 R
+
+# Michael Palimaka <kensington@gentoo.org) (11 Aug 2017)
+# Unstable dependencies.
+dev-util/rpmdevtools emacs
+
+# Andreas Sturmlechner <asturm@gentoo.org> (06 Aug 2017)
+# Requires dev-lang/python-3.5 stabilisation
+>=kde-apps/kdegames-meta-17.04.3 python
+
+# Patrick McLean <chutzpah@gentoo.org> (11 Jul 2017)
+# Requires >=net-dns/libidn2-2.0 stabilization
+net-dns/dnsmasq libidn2
+
+# Andreas Sturmlechner <asturm@gentoo.org> (23 Mar 2017)
+# Requires dev-lang/julia stabilisation, bug #613576
+kde-apps/cantor julia
+
+# Andreas Sturmlechner <asturm@gentoo.org> (22 Feb 2017)
+# Requires not yet stabilised sci-geosciences/grass,
+# which probably needs bump to solve several issues.
+sci-geosciences/qgis grass
+
+# Brian Dolbec <dolsen@gentoo.org> (14 Feb 2017)
+# This is stable masked as g-sorcery is being not actively developed.
+app-portage/layman g-sorcery
+
+# Mart Raudsepp <leio@gentoo.org> (13 Feb 2017)
+# No stable multilib supporting sys-libs/libunwind yet,
+# temporarily masked to let stabilization #601354 proceed.
+# The feature provided by this is also only useful for a
+# leak tracer, which is mostly useful for upstream CI testing.
+media-libs/gstreamer unwind
+
+# David Seifert <soap@gentoo.org> (12 Feb 2017)
+# Unknown future, stable deps are hopelessly
+# broken, only allow for unstable keywords
+# Bug: #581058
+net-misc/asterisk osplookup
+
+# Johannes Huber <johu@gentoo.org> (28 Jan 2017)
+# Unstable dependencies.
+media-plugins/kipi-plugins mediawiki vkontakte
+
+# Michael Palimaka <kensington@gentoo.org (26 Jan 2017)
+# Requires testing version of media-libs/opencv
+media-libs/mlt opencv
+
+# Matthias Maier <tamiko@gentoo.org> (22 Jan 2017)
+# sys-fs/zfs isn't going to be marked stable anytime soon
+app-emulation/libvirt zfs
+
+# Michael Palimaka <kensington@gentoo.org (18 Jan 2017)
+# www-client/weboob is horribly outdated and not stable
+app-office/kmymoney weboob
+
+# Andreas K. Hüttel <dilfridge@gentoo.org> (15 Jan 2017)
+# Has no stable reverse deps requiring this useflag
+# Stable-masking it so Boost 1.62 stabilization can go ahead
+sci-libs/vtk mpi
+
+# Doug Goldstein <cardoe@gentoo.org> (04 Jan 2017)
+# libcxx is not stable so we can't let users use it
+dev-lang/rust libcxx
+# llvm 3.8.x is not stable so we can't let users use it
+dev-lang/rust system-llvm
+
+# Alon Bar-Lev <alonbl@gentoo.org> (01 Jan 2017)
+# Will always require unstable packages.
+net-libs/gnutls test-full
+
+# Zac Medico <zmedico@gentoo.org> (19 Dec 2016)
+# The go flag requires dev-lang/go[gccgo], and gccgo
+# is stable masked since it requires gcc-5 which is
+# currently unstable.
+www-servers/uwsgi go pypy
+
+# Lars Wendler <polynomial-c@gentoo.org> (15 Dev 2016)
+# Requires php:7.0 and ruby:2.2 being stable
+>=dev-libs/Ice-3.6.3 php ruby
+
+# Pacho Ramos <pacho@gentoo.org> (19 Aug 2016)
+# Not ready to be stabilized yet.
+app-admin/packagekit-base entropy
+
+# Kristian Fiskerstrand <k_f@gentoo.org> (18 Aug 2016)
+# Dropping stable for xtrabackup-bin, stable masking use
+# flag until a source based version that doesn't depend
+# on a vulnerable libgcrypt version is in tree
+dev-db/mariadb sst-xtrabackup
+dev-db/mariadb-galera sst-xtrabackup
+
+# William Hubbs <williamh@gentoo.org (13 Apr 2016)
+# Needs gcc-5 which is currently unstable
+dev-lang/go gccgo
+
+# Sergey Popov <pinkbyte@gentoo.org> (15 Feb 2016)
+# Mask monitoring capabilities of Ganeti on stable branches
+app-emulation/ganeti monitoring
+
+# Mike Gilbert <floppym@gentoo.org> (03 Oct 2015)
+# Unmask stable-masked implementations for python-exec
+dev-lang/python-exec -python_targets_python3_5
+dev-lang/python-exec -python_targets_python3_6
+
+# Pacho Ramos <pacho@gentoo.org> (15 May 2015)
+# Version compatible with current ffmpeg is not ready to be stabilized
+# bug #539212
+app-emulation/vice ffmpeg
+
+# Pacho Ramos <pacho@gentoo.org> (13 May 2015)
+# texinfo-5 cannot be stabilized yet
+=dev-lang/gnat-gcc-4.6* doc
+
+# Jeroen Roovers <jer@gentoo.org> (26 Apr 2015)
+# mongodb support is nice, but dev-libs/mongo-c-driver upstream is not ready
+# yet (bug #542210)
+net-analyzer/pmacct mongodb
+
+# Pacho Ramos <pacho@gentoo.org>
+# sci-visualization/paraview is not ready for stabilization yet
+# See bug #541012
+sci-libs/openfoam paraview
+
+# Pacho Ramos <pacho@gentoo.org>
+# dev-libs/libappindicator isn't going to be stabilized
+x11-misc/redshift appindicator
+
+# Ben de Groot <yngwin@gentoo.org>
+# Mask experimental feature on stable. This also needs not yet stable mupdf.
+app-text/qpdfview fitz
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (12 Feb 2015)
+# Pulls in way too many unstable sci packages
+app-office/libreoffice coinmp
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (30 Oct 2014)
+# Pulls in sci-libs/vtk with a lot of new dependencies; stabilizing
+# that will take some more time
+media-libs/opencv vtk
+
+# Mikle Kolyada <zlogene@gentoo.org> (16 Aug 2014)
+# Not yet stabilized dependency, need more testing
+>=dev-perl/PDL-2.4.11 pdl2 pgplot plplot
+
+# Samuli Suominen <ssuominen@gentoo.org> (01 Aug 2014)
+# Optional (not required by anything in gentoo-x86) and fragile (based on
+# host system, like Java JRE version). Keep masked indefinately until
+# something starts requiring these.
+# https://bugs.gentoo.org/483372 and https://bugs.gentoo.org/508564
+media-libs/libcaca java mono
+
+# Alon Bar-Lev <alonbl@gentoo.org> (21 Jul 2014)
+# dev-libs/opencryptoki will not be stabile any time soon (bug#510204)
+app-crypt/tpm-tools pkcs11
+
+# Sergey Popov <pinkbyte@gentoo.org> (28 Oct 2013)
+# sys-cluster/cman is still in ~arch.
+sys-cluster/pacemaker cman
+
+# Samuli Suominen <ssuominen@gentoo.org> (01 Aug 2013)
+# The dependencies for these flags are still in ~arch.
+sys-fs/lvm2 clvm cman
+
+# Doug Goldstein <cardoe@gentoo.org> (12 Sep 2013)
+# Waiting on glusterfs maintainers in bug #484016
+app-emulation/qemu glusterfs
+
+# Ian Delaney <idella4@gentoo.org> (09 Dec 2013)
+# subsequent to the total inaction of the maintainer of
+# ocaml to honour / respond in any way to
+# Bug #486076, ocaml masked to allow xen to once again
+# become a stabilisable package
+app-emulation/xen-tools ocaml
+
+# Samuli Suominen <ssuominen@gentoo.org> (19 Mar 2014)
+# Some open source OpenCL providers cause sandbox violation while accessing /dev/dri/card*
+# from a command like eg. `/usr/bin/mogrify -version`, see bug #472766
+media-gfx/imagemagick opencl
+
+# Andreas K. Huettel <dilfridge@gentoo.org> (28 Mar 2013)
+# No stable sci-chemistry/avogadro yet but we want kde-4.10 to go stable
+>=kde-apps/kalzium-4.10.0 editor
diff --git a/profiles/base/packages b/profiles/base/packages
new file mode 100644
index 000000000000..b782c6fb9315
--- /dev/null
+++ b/profiles/base/packages
@@ -0,0 +1,68 @@
+# Copyright 1999-2014 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+
+# Gentoo Base Profile
+
+# NOTE: THIS IS THE BASE PROFILE FOR *ANY* GENTOO BASED OPERATING SYSTEM.
+# NO MODIFICATIONS MAY BE MADE TO THIS FILE WITHOUT PRIOR DISCUSSION.  IF
+# YOU ARE CREATING A NEW PROFILE, YOU SIMPLY NEED TO INHERIT THIS BASE
+# PROFILE IN YOUR PROFILE DIRECTORY'S "parent" FILE.
+
+
+# OK, you're staring at this file and you have no idea what these stars are
+# for.  Here's the scoop.  An initial "*" marks a package that is part of
+# the official BASE system profile.  If there is a "*" then `emerge system`
+# will use the line in its calculations of what should be installed for the
+# base profile.  Lines without a "*" prefix will be ignored for profile
+# system calculations.
+
+# Please note that this file is rarely used as a package inclusion mask
+# file, because it affects EVERY SINGLE gentoo profile.   As can be seen,
+# we've limited the inclusion mask to a version of portage which supports
+# cascaded profiles, but apart from that, there should be no version
+# specific information in here. This file serves as a high level description
+# of the minimum set of packages needed for any Gentoo based system.
+
+*>=sys-apps/baselayout-2
+*app-arch/bzip2
+*app-arch/gzip
+*app-arch/tar
+*app-arch/xz-utils
+*app-shells/bash:0
+*net-misc/iputils
+*net-misc/rsync
+*net-misc/wget
+*sys-apps/coreutils
+*sys-apps/diffutils
+*sys-apps/file
+# Much of the tree relies on newer features like "-exec +".
+# Force a recent stable version so people stay up-to-date.
+*>=sys-apps/findutils-4.4
+*sys-apps/gawk
+*sys-apps/grep
+*sys-apps/kbd
+# temporary bugfix for #398295
+*sys-apps/less
+# stopgap solution for functions.sh #373219 and #504116
+*sys-apps/openrc
+*sys-process/procps
+*sys-process/psmisc
+*sys-apps/sed
+*sys-apps/which
+*sys-devel/binutils
+*sys-devel/gcc
+*sys-devel/gnuconfig
+*sys-devel/make
+*>=sys-devel/patch-2.7
+*sys-fs/e2fsprogs
+*virtual/dev-manager
+*virtual/editor
+*virtual/libc
+*virtual/man
+*virtual/modutils
+*virtual/os-headers
+*virtual/package-manager
+*virtual/pager
+*virtual/service-manager
+*virtual/shadow
+*virtual/ssh
diff --git a/profiles/base/use.force b/profiles/base/use.force
new file mode 100644
index 000000000000..7ea3dfba244e
--- /dev/null
+++ b/profiles/base/use.force
@@ -0,0 +1,8 @@
+# Copyright 1999-2009 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# Force the GNU/Linux ELIBC, KERNEL, and USERLAND
+# flags that apply to the majority of profiles.
+elibc_glibc
+kernel_linux
+userland_GNU
diff --git a/profiles/base/use.mask b/profiles/base/use.mask
new file mode 100644
index 000000000000..df87aee58c20
--- /dev/null
+++ b/profiles/base/use.mask
@@ -0,0 +1,102 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# This file is only for generic masks. For arch-specific masks (i.e.
+# mask everywhere, unmask on arch/*) use arch/base.
+
+# Brian Evans <grknight@gentoo.org> (14 Aug 2017)
+# php 7.2 beta is masked for initial testing
+php_targets_php7-2
+
+# Michael Palimaka <kensington@gentoo.org> (03 Jun 2017)
+# Unkeyworded on most arches, unmasked in supported arch profiles.
+elogind
+
+# CURL_SSL=winssl is for prefix/windows/winnt only
+curl_ssl_winssl
+
+# masking here and unmasking in default/linux/
+kmod
+
+# not ready for primetime
+packagekit
+
+# profile specific USE flags
+# Don't put hardened in here.
+# TODO: move multilib into arch/base once inherit order is fixed
+selinux
+uclibc
+multilib
+
+# Mask ELIBC, KERNEL, and USERLAND flags that apply to specific profiles.
+userland_BSD
+
+elibc_AIX
+elibc_bionic
+elibc_Cygwin
+elibc_Darwin
+elibc_DragonFly
+elibc_FreeBSD
+elibc_HPUX
+elibc_Interix
+elibc_mintlib
+elibc_musl
+elibc_NetBSD
+elibc_OpenBSD
+elibc_SunOS
+elibc_uclibc
+elibc_Winnt
+
+kernel_AIX
+kernel_Darwin
+kernel_FreeBSD
+kernel_freemint
+kernel_HPUX
+kernel_NetBSD
+kernel_OpenBSD
+kernel_SunOS
+kernel_Winnt
+
+# Diego Pettenò <flameeyes@gentoo.org> (30 Dec 2006)
+# These are specific of Mac OS X
+aqua
+coreaudio
+
+# Jeremy Olexa <darkside@gentoo.org>
+# The prefix USE flags should never be used on non prefix profiles
+prefix
+prefix-chain
+prefix-guest
+
+# Diego E. Pettenò <flameeyes@gentoo.org> (19 Oct 2010)
+# masking flags that only apply to FreeBSD
+kqueue
+
+# Ralph Sennhauser <sera@gentoo.org> (31 Jul 2012)
+# Unmask in arch specific profiles when jython implementaton is available.
+python_targets_jython2_7
+python_single_target_jython2_7
+
+# Diego Elio Pettenò <flameeyes@gentoo.org> (18 Aug 2012)
+# Prelude is being masked for removal
+prelude
+
+# Diego Elio Pettenò <flameeyes@gentoo.org> (27 Aug 2012)
+# netlink is a Linux-specific interface
+netlink
+
+# Pacho Ramos <pacho@gentoo.org> (28 Sep 2013)
+# This USE flag is available after long dicussion in
+# http://www.gossamer-threads.com/lists/gentoo/dev/276077
+# to let some prople not able to run systemd to skip the dep (#480336).
+# Enabling this you will get a fully unsupported Gnome setup that
+# could suffer unexpected problem, don't expect support for it then.
+openrc-force
+
+# Brian Evans <grknight@gentoo.org> (2 Dec 2015)
+# php 5.4 is end of life, masked for removal
+php_targets_php5-4
+
+# Brian Evans <grknight@gentoo.org> (22 Aug 2016)
+# php 5.5 is end of life, masked for removal
+php_targets_php5-5
diff --git a/profiles/base/use.stable.force b/profiles/base/use.stable.force
new file mode 100644
index 000000000000..98f4a6f00e43
--- /dev/null
+++ b/profiles/base/use.stable.force
@@ -0,0 +1,5 @@
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# This file requires eapi 5 or later. New entries go on top.
+# Please use the same syntax as in use.force
diff --git a/profiles/base/use.stable.mask b/profiles/base/use.stable.mask
new file mode 100644
index 000000000000..58648158bef0
--- /dev/null
+++ b/profiles/base/use.stable.mask
@@ -0,0 +1,46 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# This file requires eapi 5 or later. New entries go on top.
+# Please use the same syntax as in use.mask
+
+# Brian Evans <grknight@gentoo.org> (14 Aug 2017)
+# Needs dev-lang/php:7.2 stable
+php_targets_php7-2
+
+# Michał Górny <mgorny@gentoo.org> (25 Jan 2017)
+# Early pre-stabilization mask for dev-lang/python:3.6
+python_targets_python3_6
+python_single_target_python3_6
+
+# Brian Evans <grknight@gentoo.org> (06 Dec 2016)
+# Needs dev-lang/php:7.1 stable
+php_targets_php7-1
+
+# Zac Medico <zmedico@gentoo.org> (01 Sep 2016)
+# Needs virtual/pypy* stable
+python_targets_pypy
+python_single_target_pypy
+python_targets_pypy3
+python_single_target_pypy3
+
+# Mike Gilbert <floppym@gentoo.org> (02 Oct 2015)
+# Needs dev-lang/python:3.5 stable
+python_targets_python3_5
+python_single_target_python3_5
+
+# Justin Lecher <jlec@gentoo.org> (30 Sep 2015)
+# No stable libressl yet
+# Addendum: also mask the USE_EXPAND flag,
+# Anthony G. Basile <blueness@gentoo.org> (26 Nov 2015)
+curl_ssl_libressl
+libressl
+
+# Hans de Graaff <graaff@gentoo.org> (25 Dec 2016)
+# Currently in testing and not ready to go stable yet.
+ruby_targets_ruby23
+ruby_targets_ruby24
+
+# Patrick Lauer <patrick@gentoo.org> (28 Apr 2015)
+# dependencies not stable yet
+ayatana