commit 17f69af63fff7c1661cec8448f141e5e8326f484
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Oct 19 18:29:52 2026 -0300

add(acct-group/nordvpn-0, net-vpn/nordvpn{,-gui}-bin-5.4.1, metadata/md5-cache/{acct-group/nordvpn-0, net-vpn/nordvpn-bin-5.4.1, net-vpn/nordvpn-gui-bin-5.4.1}), mod(.autoupdate/packages.toml)

NordVPN client repackaged from the official APT repository. The public
source (NordSecurity/nordvpn-linux, GPL-3) only builds with the telio and
drop features: NordWhisper ("quench") and analytics ("moose") are internal,
so a source build has no obfuscation at all -- and from 6.0 on NordWhisper
is the only obfuscation upstream offers.

nordvpn-bin ships OpenRC scripts for both systemd units (nordvpnd and the
boot-time nordvpnd-killswitch oneshot); the units stay behind USE=systemd.
The private libraries in /usr/lib/nordvpn are reached through an env.d
LDPATH, the Gentoo form of upstream's ld.so.conf.d entry. pkg_postinst
already carries the 6.0 warning (settings migration, renamed commands) so
the autoupdate bump that crosses the boundary prints it.

nordvpn-gui-bin pins ~nordvpn-bin-$, as the .deb pins nordvpn (= PV).

Verified: pkgcheck clean, check-openrc-coverage PASS, unprivileged
"ebuild clean install" for both (USE=systemd), no missing library under
ldd, "nordvpn --version" runs. Not merged as root and never connected.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>