The officially official Devuan Forum!

You are not logged in.

#1 Re: Hardware & System Configuration » [CLOSED] secure erase failure - unlock ssd with hdparm not possible » 2019-09-13 17:46:17

thx b3bgd.
Of course I forgot....

However that gave me an:

SECURITY_UNLOCK: Invalid argument

instead, but this too:

Security:
        Master password revision code = 1
                supported 
                enabled
        not     locked
        not     frozen
        not     expired: security count
                supported: enhanced erase
        20min for SECURITY ERASE UNIT. 60min for ENHANCED SECURITY ERASE UNIT.

so I can run the erase command.
I have done that already and it was running corectly accept that:

The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.

was showing up again.
Hower the:

        Master password revision code = 65534

has changed to

        Master password revision code = 1

and after the erase it is still there....
Dunno what's the problem but I do not care anymore, a friend of mine took the SSD to use it so I do not need a solution here anymore.

#2 Hardware & System Configuration » [CLOSED] secure erase failure - unlock ssd with hdparm not possible » 2019-09-11 01:05:27

nogeek
Replies: 3

I have connected the SSD via a SATA to USB 2.0 Adpater and it is reconized by the computer:

$ lsblk
NAME             MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINT
sdb                8:16   0 447.1G  0 disk

#

Checking if secure erase is possible (printing here only the security section):

$ hdparm -I /dev/sdb

Security:
                supported
        not     enabled
        not     locked
        not     frozen
        not     expired: security count
                supported: enhanced erase
        20min for SECURITY ERASE UNIT. 60min for ENHANCED SECURITY ERASE UNIT.

#

Have had set a passwort.

$ hdparm --user-master u --security-set-pass sec123abc /dev/sdb
security_password: "sec123abc"

/dev/sdb:
 Issuing SECURITY_SET_PASS command, password="sec123abc", user=user, mode=high
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.
SECURITY_SET_PASS: Invalid argument

#

Because of this error I checked the SSD again and three time in a row I get different output each time I run the command:

$ hdparm -I /dev/sdb

/dev/sdb:

ATA device, with non-removable media
Standards:
        Likely used: 1
Configuration:
        soft sectored
        head switch time > 15us
        fixed drive
        disk xfer rate <= 5Mbs
        disk xfer rate > 5Mbs, <= 10Mbs
        data strobe offset option
        format speed tolerance gap reqd
        Logical         max     current
        cylinders       21314   0
        heads           0       0
        sectors/track   0       0
        --
        Logical/Physical Sector size:           512 bytes
        device size with M = 1024*1024:           0 MBytes
        device size with M = 1000*1000:           0 MBytes
        cache/buffer size  = unknown
Capabilities:
        IORDY not likely
        Cannot perform double-word IO
        R/W multiple sector transfer: not supported
        DMA: not supported
        PIO: pio0

#

$ hdparm -I /dev/sdb

/dev/sdb:
SG_IO: bad/missing sense data, sb[]:  70 00 03 00 00 00 00 0a 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ATA device, with non-removable media
Standards:
        Likely used: 1
Configuration:
        Logical         max     current
        cylinders       0       0
        heads           0       0
        sectors/track   0       0
        --
        Logical/Physical Sector size:           512 bytes
        device size with M = 1024*1024:           0 MBytes
        device size with M = 1000*1000:           0 MBytes
        cache/buffer size  = unknown
Capabilities:
        IORDY not likely
        Cannot perform double-word IO
        R/W multiple sector transfer: not supported
        DMA: not supported
        PIO: pio0

#

$ hdparm -I /dev/sdb

/dev/sdb:

ATA device, with non-removable media
        Model Number:       TOSHIBA-TR200
        Serial Number:      49QB725OKBSN
        Firmware Revision:  SBFA15.2
        Transport:          Serial, ATA8-AST, SATA 1.0a, SATA II Extensions, SATA Rev 2.5, SATA Rev 2.6, SATA Rev 3.0
Standards:
        Supported: 11 10 9 8 7 6 5
        Likely used: 11
Configuration:
        Logical         max     current
        cylinders       16383   16383
        heads           16      16
        sectors/track   63      63
        --
        CHS current addressable sectors:    16514064
        LBA    user addressable sectors:   268435455
        LBA48  user addressable sectors:   937703088
        Logical  Sector size:                   512 bytes
        Physical Sector size:                   512 bytes
        Logical Sector-0 offset:                  0 bytes
        device size with M = 1024*1024:      457862 MBytes
        device size with M = 1000*1000:      480103 MBytes (480 GB)
        cache/buffer size  = unknown
        Form Factor: 2.5 inch
        Nominal Media Rotation Rate: Solid State Device
Capabilities:
        LBA, IORDY(can be disabled)
        Queue depth: 32
        Standby timer values: spec'd by Standard, no device specific minimum
        R/W multiple sector transfer: Max = 16  Current = 16
        DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6
             Cycle time: min=120ns recommended=120ns
        PIO: pio0 pio1 pio2 pio3 pio4
             Cycle time: no flow control=120ns  IORDY flow control=120ns
Commands/features:
        Enabled Supported:
           *    SMART feature set
                Security Mode feature set
           *    Power Management feature set
           *    Write cache
           *    Look-ahead
           *    Host Protected Area feature set
           *    WRITE_BUFFER command
           *    READ_BUFFER command
           *    NOP cmd
           *    DOWNLOAD_MICROCODE
                SET_MAX security extension
           *    48-bit Address feature set
           *    Mandatory FLUSH_CACHE
           *    FLUSH_CACHE_EXT
           *    SMART error logging
           *    General Purpose Logging feature set
           *    WRITE_{DMA|MULTIPLE}_FUA_EXT
           *    64-bit World wide name
           *    {READ,WRITE}_DMA_EXT_GPL commands
           *    Segmented DOWNLOAD_MICROCODE
           *    Gen1 signaling speed (1.5Gb/s)
           *    Gen2 signaling speed (3.0Gb/s)
           *    Gen3 signaling speed (6.0Gb/s)
           *    Native Command Queueing (NCQ)
           *    Phy event counters
           *    READ_LOG_DMA_EXT equivalent to READ_LOG_EXT
                DMA Setup Auto-Activate optimization
                Device-initiated interface power management
           *    Software settings preservation
                Device Sleep (DEVSLP)
           *    DOWNLOAD MICROCODE DMA command
           *    SET MAX SETPASSWORD/UNLOCK DMA commands
           *    WRITE BUFFER DMA command
           *    READ BUFFER DMA command
           *    Data Set Management TRIM supported (limit 8 blocks)
Security:
        Master password revision code = 65534
                supported
        not     enabled
        not     locked
        not     frozen
        not     expired: security count
                supported: enhanced erase
        20min for SECURITY ERASE UNIT. 60min for ENHANCED SECURITY ERASE UNIT.
Logical Unit WWN Device Identifier: 58ce38ec0124245e
        NAA             : 5
        IEEE OUI        : 8ce38e
        Unique ID       : c0124245e
Device Sleep:
        DEVSLP Exit Timeout (DETO): 100 ms (drive)
        Minimum DEVSLP Assertion Time (MDAT): 10 ms (drive)
Checksum: correct

#

When I run the command now I only get the last sort of output.

It says that there is a password now, but if I try to unlock the SSD the following happens:

$ hdparm --user-master u --security-unlock sec123abc /dev/sdb
security_password: "sec123abc"

/dev/sdb:
 Issuing SECURITY_UNLOCK command, password="sec123abc", user=user
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.
SECURITY_UNLOCK: Invalid argument

#

I tried to disable it again (I know that I have to unlock it first but everything before works strange, so I just give it a try):

$ hdparm --user-master u --security-disable sec123abc /dev/sdb
security_password: "sec123abc"

/dev/sdb:
 Issuing SECURITY_DISABLE command, password="sec123abc", user=user
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.
SECURITY_UNLOCK: Invalid argument

So something seems to be wrong with the kernel?
My Kernel is linux-image-5.2.13-gnu (it is linux-libre), I did not modify it or something like that.

#

Then I red here:
https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase
that using a USB-Interface makes problems... (to late badly)

#

So I put the SSD into a SATA drive of another computer with devuan live minimal running, install hdparm and try to unlock and disable, what gives me the same output like this guy here got:
https://www.overclockers.com/forums/arc … 93716.html
On the live system runs the default devuan kernel.

Further he solved his problem by using a master password to unlock his SSD.
There are (unofficial) lists on the web with them. here is one of them:
https://ipv5.wordpress.com/2008/04/14/l … passwords/
I have a Toshiba device here and figured out that "the" masterpassword (it is the only one I have found in several lists) is 32 spaces, but that did not work:

$ hdparm --user-master m --security-set-pass                                  /dev/sdb
missing PASSWD

I tried 34 spaces between "--security-set-pass" and "/dev/sdb", because you need a space after each option/parameter and 32 spaces (because the first logical did not work and I am frustrated...).

#

I did not run the erase command and I do not will!

It would be nice if anyone could help me out....

#3 Re: Desktop and Multimedia » Does this reminds you of systemd? » 2019-06-23 21:56:05

I always do a minimal installation and never get any package with "pulse" in the name.
Only libpulse0 is on my final-system, cause mpv and ffmpeg need it.

apt-cache rdepends *pulse*

let you see all packages wich are depending on packages with "pulse" in the name.

#4 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-23 15:15:03

Head_on_a_Stick wrote:

Why do you care if your ISP can see which packages you are downloading?

https does not only pretend listening, it also pretends Man-in-the-Middle-Attacks.
And even if it only protects me from listening: my ISP do not need to know anything (data economy). ;-)

Head_on_a_Stick wrote:

Try

wget https://deb.debian.org/debian-security/pool/updates/main/f/firefox-esr/firefox-esr_60.7.1esr-1~deb9u1_amd64.deb
# dpkg -i firefox-esr_60.7.1esr-1~deb9u1_amd64.deb

If I would do this I would run:

torsocks wget --https-only --no-cookies foobar

But just as I say above it is not Firefox ESR 60.7.2.
https://www.mozilla.org/en-US/security/ … sa2019-19/

fsmithred wrote:

You just downloaded the source package, [..]

I just posted the wrong link (was tired) but thanks I will correct the other post ;-)

Thank you all for you posts and have a nice day! :-)

#5 Re: Hardware & System Configuration » safe networking with only one tool » 2019-06-23 03:37:58

Head_on_a_Stick wrote:
nogeek wrote:

It do not work for me.

You need to post exactly what you tried so that we can see where you went wrong.

Have you populated /etc/resolv.conf with valid nameservers?

Hey Head_on_a_Stick.
It is some time ago I have done this, so I mostly forgot what I have done...
But yes I have had populated /etc/resolv.conf with valid nameservers.

Head_on_a_Stick wrote:
nogeek wrote:
ip addr add 192.168.0.254/27 brd + dev eth0

followed by

ip link set eth0 up

That address looks wrong — are you sure you need a /27 subnet mask? Most networks will use /24 instead.

And you don't need the brd + bit at all.

To determine the correct address range enable DHCP, use that to connect and then run

ip a
ip r

The addresses can then be copied for your custom commands.

I use the plain ip command & wpa_supplicant to connect via wireless on my laptop, it works well.

Thank you for the advice of a professional! ;-)
I hope I will soon find some time to try this out, and I will reporting it here if it works for me or not with a precise description what I have done (like in my first post).

#6 Re: Hardware & System Configuration » safe networking with only one tool » 2019-06-23 03:28:12

Dutch_Master wrote:

IMO you're too paranoid about DHCP.

Maybe you should read my first post again... and the wikipedia entries too.
I figured out that in "Computer-Stuff" forums some people call you paranoid when you just a careful person...
I do not understand this and to me it sounds like a slander...
But maybe this people just do not known what being paranoid is like?
Paranoid means the fear of something that do not exist, that's all!
But the security issues about dhcp do exist.

Dutch_Master wrote:

I've noticed you mentioned your setup uses a router, so I assume that's also your gateway to the web via your ISP.

Is it possible to setup a network without using a router (and ISP) (maybe that is a hint for mesh networking? yeah... I am a noob in the most things...).

Dutch_Master wrote:

That router has a firewall to prevent access from outside to your network.

I am not sure about that firewall in the router you have talked about, I can not find anything like that in the router preferences.
Btw: Soon I will buy a Free-Open-Hardware LAN-Router from ThinkPenguin with LibreCMC pre-installed. ;-)

Dutch_Master wrote:

Re-install DHCP, re-enable it on your router so you can spend your time on other things. smile

At the moment I am using ifup and ifdown and I will never need or want dhcp again.

#7 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-23 03:00:44

fsmithred wrote:

If you need the latest version right away, you can always get it directly from mozilla and just unpack it and run it. That's a more conservative choice than upgrading to ceres.

Hey, thanks for your answer.
Yeah I ment a package with the newest security patches (version was the wrong word sorry).
Before you posted this I have had it already downloaded from here:
https://releases.mozilla.org/pub/firefox/releases/

pcalvert wrote:

I downloaded the Firefox ESR package from here:
https://packages.debian.org/stretch/firefox-esr

I now this website, but this link is not the source where you have to download it from, it is here:
http://security.debian.org/debian-secur … ian.tar.xz
http://security.debian.org/debian-secur … _amd64.deb
and this is not https.

#8 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-21 23:06:06

http://auto.mirror.devuan.org/merged
does not exist anymore, it redirects to
http://packages.roundr.devuan.org/merged
now.
I tried this http-only-shit after I tried all https-mirros from this list:
https://pkgmaster.devuan.org/mirror_list.txt
(btw:https://espejito.fder.edu.uy/devuan does not exist either...)

I runned

apt update -o Acquire::http::AllowRedirect=false

followed by

apt list --upgradable

and got

firefox-esr/stable-security 60.7.1esr-1~deb9u1 amd64 [upgradable from: 60.7.0esr-1~deb9u1]
vim-common/stable-security 2:8.0.0197-4+deb9u2 all [upgradable from: 2:8.0.0197-4+deb9u1]
vim-tiny/stable-security 2:8.0.0197-4+deb9u2 amd64 [upgradable from: 2:8.0.0197-4+deb9u1]
xxd/stable-security 2:8.0.0197-4+deb9u2 amd64 [upgradable from: 2:8.0.0197-4+deb9u1]

So no actual version of firefox either!
I am not an expert, but this is big crap!
I really need firefox, a safe one!

At least: I would never upgrade my system over http...

#9 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-20 23:31:31

soohwa wrote:

Try the old repository :

deb http://auto.mirror.devuan.org/merged ascii main contrib non-free
deb http://auto.mirror.devuan.org/merged ascii-backports main contrib non-free
deb http://auto.mirror.devuan.org/merged ascii-updates main contrib non-free
deb http://auto.mirror.devuan.org/merged ascii-security main contrib non-free

This mirror do not work with https, so I won't use it.

golinux wrote:

OMG!  Not another thread about this . . .

Like wich ones before?

UPDATE:
The link did not work, it was search for the word 'firefox' in this forum

Seems like there is no up2date version of firefox in all branches:
https://pkginfo.devuan.org/cgi-bin/d1pk … elease=any
Or is this website out of date and if so why it exists?

BTW:
I am using this repo:
deb https://pkgmaster.devuan.org/merged ascii main
deb https://pkgmaster.devuan.org/merged ascii-security main
deb https://pkgmaster.devuan.org/merged ascii-updates main

#10 Re: Hardware & System Configuration » safe networking with only one tool » 2019-06-20 22:33:50

I forgot to post here in the past:
It do not work for me.

#11 Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-20 22:32:02

nogeek
Replies: 13

There are two new Versions of firefox-esr because of two bugs one critical and one high:
https://www.mozilla.org/en-US/security/ … sa2019-18/
https://www.mozilla.org/en-US/security/ … sa2019-19/

But a apt update do not get me these versions.
Why?

It is not the first time I have to wait long time before I can upgrade firefox...
That is a high security risc, cause some people need to allow Javascript for banking or something else...

#12 Hardware & System Configuration » safe networking with only one tool » 2019-01-31 05:06:46

nogeek
Replies: 7

Hello everybody.
=->

I am at the beginning of learning how networking works.
Long time ago I have removed wicd-gtk and from there on I used only the dhclient command.

I have read some explanations and manual entries about networking with GNU / Linux and there are still many things I do not understand (seems like an own world to me ^o^), but I figured out, that dhcp has some heavy security issues:
https://en.wikipedia.org/wiki/Dynamic_H … l#Security
https://en.wikipedia.org/wiki/Rogue_DHCP
https://en.wikipedia.org/wiki/DHCP_snooping
https://en.wikipedia.org/wiki/Network_i … starvation
, so I decided not to use it anymore, removed the dhcp packages and disabled it in my router.

Further I understand that the net-tools seems to be obsolet and that it will be totally replaced by iproute2 in the future (correct me if I am wrong), and that they are only in the repos (and the basic install) because some scripts or programs are still use them.
I have removed net-tools from my system, cause I do not have any packages installed wich depend on it:

apt-cache rdepends net-tools

At the moment I am using ifupdown to get my network working after I logged in.

But I think I have understand that ifupdown is only a tool to using iproute2 with, so I wanted to know if it is possible to use only iproute2 to get my network working.
I have removed ifupdown, /etc/network (it was created by iproute2 but contains only ifupdown stuff), reboot the system and runned

ip addr add 192.168.0.254/27 brd + dev eth0

followed by

ip link set eth0 up

and dmesg said that the link becomes ready but I can not get a connection...
What is missing?

Also after a few playing with ifupdown (after installed it again from a local repo) I have figured out that the files /etc/networks and /etc/resolv.conf seems to be necessary to get a connection...
(resolv.conf was configured by the dhclient comand I used in the past I think...)

At least: is netbase a necessary package for networking?

apt show -a netbase | tail -n 2
Description: Basic TCP/IP networking system

ifconfig has it as a depedencie but iproute2 not, also not its dependencies or sub dependencies...

#13 Re: Other Issues » [SOLVED] no german umlauts » 2018-08-05 16:16:48

locale -a
C
C.UTF-8
POSIX

in

cat /etc/default/locale

I changed

LANG="C"

to

LANG="C.UTF-8"

now it works thx wink

#14 Re: Other Issues » [SOLVED] no german umlauts » 2018-08-05 02:07:37

Of course I do not choose german...
The only available locale is english.
I only use setxkbmap keyboard-configuration in x, I only need german 4 some translation work.
I got different hardware-keyboards here but the keys üöä on the german one doesn't work in the terminalemulator or in vim-tiny.

EDIT: oh and I skip all of the first expert-installer steps and starting with detect cdrom, so everything is really basicly

#15 Other Issues » [SOLVED] no german umlauts » 2018-08-04 22:43:40

nogeek
Replies: 4

Hej!

I have made a very small devuan basic install but I need german umlauts for some translations what package(s) do I need?

thx 4 ur help!

#16 Re: Installation » kiosk system for online banking with devuan ascii » 2018-07-16 15:03:52

Thank you all for your answers.

golinux wrote:

Nice to see you here.

thx! =-)

dxrobertson wrote:

grub-efi-amd64 and dosfstools are packages, and it may be that these are required to create a bootable live iso.  I would try an install of these 2 packages prior to the iso create step, and try again.

the T61 has no UEFI so I do not need it, sorry I had have to say this.

fsmithred wrote:

I/O errors suggest a hardware problem. Maybe there were errors burning the CD.

Hmm.. wodim didn't say anything...

fsmithred wrote:

This page explains how to get the checksum from a burned CD. Replace md5sum with sha256sum if you want to compare it to the checksum in the SHA256SUMS file where you downloaded the iso.

Of course I've checked the devuan iso and mine too (refractasnapshot builds an iso and a sha256 for it.)

#17 Installation » kiosk system for online banking with devuan ascii » 2018-07-15 21:07:42

nogeek
Replies: 4

Hi. =-)
Finally I am a member yay!!1! ;-)

machine: Lenovo ThinkPad T61
project: building an live-iso for online banking - minimal packages, minimal xserver and only firefox-esr (no windowmanager or terminal emulator)

I use this iso:

https://files.devuan.org/devuan_ascii/minimal-live/devuan_ascii_2.0.0_amd64_minimal-live.iso

This iso includes the following packages:

abook                                           install
acpi                                            install
acpi-support-base                               install
acpid                                           install
adduser                                         install
alsa-utils                                      install
apcalc                                          install
apcalc-common                                   install
apt                                             install
apt-utils                                       install
aspell                                          install
aspell-en                                       install
at                                              install
atmel-firmware                                  install
base-files                                      install
base-passwd                                     install
bash                                            install
bash-completion                                 install
bastet                                          install
bc                                              install
beep                                            install
bind9-host                                      install
bittornado                                      install
bluez-firmware                                  install
bombardier                                      install
brltty                                          install
bsdgames                                        install
bsdmainutils                                    install
bsdutils                                        install
busybox                                         install
bzip2                                           install
ca-certificates                                 install
caca-utils                                      install
calcurse                                        install
cavezofphear                                    install
clex                                            install
cmatrix                                         install
console-common                                  install
console-data                                    install
console-setup                                   install
console-setup-linux                             install
consolekit                                      install
coreutils                                       install
cowsay                                          install
cpio                                            install
crawl                                           install
crawl-common                                    install
cron                                            install
cryptsetup                                      install
cryptsetup-bin                                  install
curl                                            install
curseofwar                                      install
dahdi-firmware-nonfree                          install
dash                                            install
dbus                                            install
dc                                              install
debconf                                         install
debconf-i18n                                    install
debian-archive-keyring                          install
debianutils                                     install
debootstrap                                     install
devuan-baseconf                                 install
devuan-keyring                                  install
dh-python                                       install
dialog                                          install
dictionaries-common                             install
diffutils                                       install
discover                                        install
discover-data                                   install
dmidecode                                       install
dmsetup                                         install
dnsutils                                        install
dpkg                                            install
dselect                                         install
dvtm                                            install
e2fslibs:amd64                                  install
e2fsprogs                                       install
ed                                              install
edbrowse                                        install
eject                                           install
emacsen-common                                  install
empire                                          install
entr                                            install
espeak                                          install
espeak-data:amd64                               install
espeak-ng-data:amd64                            install
espeakup                                        install
eudev                                           install
fbi                                             install
fbterm                                          install
fetchmail                                       install
figlet                                          install
file                                            install
findutils                                       install
firmware-amd-graphics                           install
firmware-atheros                                install
firmware-bnx2                                   install
firmware-bnx2x                                  install
firmware-brcm80211                              install
firmware-cavium                                 install
firmware-crystalhd                              install
firmware-intel-sound                            install
firmware-intelwimax                             install
firmware-iwlwifi                                install
firmware-libertas                               install
firmware-linux-free                             install
firmware-linux-nonfree                          install
firmware-misc-nonfree                           install
firmware-myricom                                install
firmware-netxen                                 install
firmware-qlogic                                 install
firmware-realtek                                install
firmware-ti-connectivity                        install
firmware-zd1211                                 install
fontconfig                                      install
fontconfig-config                               install
fonts-dejavu-core                               install
fortune-mod                                     install
fortunes-min                                    install
freesweep                                       install
ftp                                             install
gawk                                            install
gcc-6-base:amd64                                install
gddrescue                                       install
gdisk                                           install
geoip-bin                                       install
gettext-base                                    install
ghostscript                                     install
git                                             install
gnuchess                                        install
gnupg                                           install
gnupg-agent                                     install
gnupg2                                          install
gpgv                                            install
gpm                                             install
greed                                           install
grep                                            install
groff-base                                      install
grub-common                                     install
grub-pc                                         install
grub-pc-bin                                     install
grub2-common                                    install
guile-2.0                                       install
guile-2.0-libs:amd64                            install
gzip                                            install
hasciicam                                       install
hicolor-icon-theme                              install
hostname                                        install
htop                                            install
iftop                                           install
ifupdown                                        install
imagemagick                                     install
imagemagick-6-common                            install
imagemagick-6.q16                               install
info                                            install
init                                            install
init-system-helpers                             install
initramfs-tools                                 install
initramfs-tools-core                            install
initscripts                                     install
insserv                                         install
install-info                                    install
iotop                                           install
iproute2                                        install
iptables                                        install
iputils-ping                                    install
irqbalance                                      install
irssi                                           install
isc-dhcp-client                                 install
isc-dhcp-common                                 install
isolinux                                        install
iw                                              install
jhead                                           install
kbd                                             install
keyboard-configuration                          install
klibc-utils                                     install
kmod                                            install
krb5-locales                                    install
laptop-detect                                   install
less                                            install
lftp                                            install
libaa1:amd64                                    install
libacl1:amd64                                   install
libapparmor1:amd64                              install
libapt-inst2.0:amd64                            install
libapt-pkg5.0:amd64                             install
libasound2:amd64                                install
libasound2-data                                 install
libaspell15:amd64                               install
libassuan0:amd64                                install
libasyncns0:amd64                               install
libattr1:amd64                                  install
libaudit-common                                 install
libaudit1:amd64                                 install
libavahi-client3:amd64                          install
libavahi-common-data:amd64                      install
libavahi-common3:amd64                          install
libbind9-140:amd64                              install
libblkid1:amd64                                 install
libbluetooth3:amd64                             install
libboost-program-options1.62.0:amd64            install
libbrlapi0.6:amd64                              install
libbsd0:amd64                                   install
libburn4:amd64                                  install
libbz2-1.0:amd64                                install
libc-bin                                        install
libc-dev-bin                                    install
libc-l10n                                       install
libc6:amd64                                     install
libc6-dev:amd64                                 install
libcaca0:amd64                                  install
libcairo2:amd64                                 install
libcanlock2                                     install
libcap-ng0:amd64                                install
libcap2:amd64                                   install
libck-connector0:amd64                          install
libcomerr2:amd64                                install
libcroco3:amd64                                 install
libcryptsetup4:amd64                            install
libcups2:amd64                                  install
libcupsimage2:amd64                             install
libcurl3:amd64                                  install
libcurl3-gnutls:amd64                           install
libdatrie1:amd64                                install
libdb5.3:amd64                                  install
libdbus-1-3:amd64                               install
libdbus-glib-1-2:amd64                          install
libdebconfclient0:amd64                         install
libdevmapper1.02.1:amd64                        install
libdirectfb-1.2-9:amd64                         install
libdiscover2                                    install
libdns-export162                                install
libdns162:amd64                                 install
libedit2:amd64                                  install
libelf1:amd64                                   install
libenca0:amd64                                  install
libespeak-ng1:amd64                             install
libespeak1:amd64                                install
libestr0                                        install
libeudev1:amd64                                 install
libevent-2.0-5:amd64                            install
libexif12:amd64                                 install
libexpat1:amd64                                 install
libfaad2:amd64                                  install
libfastjson4:amd64                              install
libfdisk1:amd64                                 install
libffi6:amd64                                   install
libfftw3-double3:amd64                          install
libfftw3-single3:amd64                          install
libflac8:amd64                                  install
libfontconfig1:amd64                            install
libfreetype6:amd64                              install
libftp4:amd64                                   install
libfuse2:amd64                                  install
libgc1c2:amd64                                  install
libgcc1:amd64                                   install
libgcrypt20:amd64                               install
libgdbm3:amd64                                  install
libgdk-pixbuf2.0-0:amd64                        install
libgdk-pixbuf2.0-common                         install
libgeoip1:amd64                                 install
libgif7:amd64                                   install
libglib2.0-0:amd64                              install
libgmime-2.6-0:amd64                            install
libgmp10:amd64                                  install
libgnutls30:amd64                               install
libgomp1:amd64                                  install
libgpg-error0:amd64                             install
libgpgme11:amd64                                install
libgpm2:amd64                                   install
libgraphite2-3:amd64                            install
libgs9:amd64                                    install
libgs9-common                                   install
libgsasl7                                       install
libgsm1:amd64                                   install
libgssapi-krb5-2:amd64                          install
libharfbuzz0b:amd64                             install
libhogweed4:amd64                               install
libice6:amd64                                   install
libicu57:amd64                                  install
libid3tag0:amd64                                install
libidn11:amd64                                  install
libidn2-0:amd64                                 install
libijs-0.35:amd64                               install
libimlib2:amd64                                 install
libip4tc0:amd64                                 install
libip6tc0:amd64                                 install
libiptc0:amd64                                  install
libisc-export160                                install
libisc160:amd64                                 install
libisccc140:amd64                               install
libisccfg140:amd64                              install
libisoburn1:amd64                               install
libisofs6:amd64                                 install
libiw30:amd64                                   install
libjack-jackd2-0:amd64                          install
libjbig0:amd64                                  install
libjbig2dec0:amd64                              install
libjpeg-turbo-progs                             install
libjpeg62-turbo:amd64                           install
libjte1                                         install
libk5crypto3:amd64                              install
libkeyutils1:amd64                              install
libklibc                                        install
libkmod2:amd64                                  install
libkrb5-3:amd64                                 install
libkrb5support0:amd64                           install
libksba8:amd64                                  install
liblcms2-2:amd64                                install
libldap-2.4-2:amd64                             install
libldap-common                                  install
liblocale-gettext-perl                          install
liblogging-stdlog0:amd64                        install
liblognorm5:amd64                               install
libloudmouth1-0:amd64                           install
liblqr-1-0:amd64                                install
libltdl7:amd64                                  install
liblua5.1-0:amd64                               install
liblwres141:amd64                               install
liblz4-1:amd64                                  install
liblzma5:amd64                                  install
liblzo2-2:amd64                                 install
libmad0:amd64                                   install
libmagic-mgc                                    install
libmagic1:amd64                                 install
libmagickcore-6.q16-3:amd64                     install
libmagickwand-6.q16-3:amd64                     install
libmnl0:amd64                                   install
libmodplug1:amd64                               install
libmount1:amd64                                 install
libmozjs-24-0:amd64                             install
libmpcdec6:amd64                                install
libmpdec2:amd64                                 install
libmpfr4:amd64                                  install
libncurses5:amd64                               install
libncursesw5:amd64                              install
libnetfilter-acct1:amd64                        install
libnetfilter-conntrack3:amd64                   install
libnettle6:amd64                                install
libnewt0.52:amd64                               install
libnfnetlink0:amd64                             install
libnghttp2-14:amd64                             install
libnl-3-200:amd64                               install
libnl-genl-3-200:amd64                          install
libnotmuch4                                     install
libnpth0:amd64                                  install
libnspr4:amd64                                  install
libnss3:amd64                                   install
libntlm0:amd64                                  install
libnuma1:amd64                                  install
libogg0:amd64                                   install
libopencore-amrnb0:amd64                        install
libopencore-amrwb0:amd64                        install
libopenjp2-7:amd64                              install
libopts25:amd64                                 install
libopus0:amd64                                  install
libopusfile0                                    install
libotr5                                         install
libp11-kit0:amd64                               install
libpam-modules:amd64                            install
libpam-modules-bin                              install
libpam-runtime                                  install
libpam0g:amd64                                  install
libpango-1.0-0:amd64                            install
libpangocairo-1.0-0:amd64                       install
libpangoft2-1.0-0:amd64                         install
libpaper1:amd64                                 install
libparted2:amd64                                install
libpcap0.8:amd64                                install
libpcaudio0                                     install
libpci3:amd64                                   install
libpcre3:amd64                                  install
libpcsclite1:amd64                              install
libperl5.24:amd64                               install
libpipeline1:amd64                              install
libpixman-1-0:amd64                             install
libpng16-16:amd64                               install
libpolkit-agent-1-0:amd64                       install
libpolkit-backend-1-0                           install
libpolkit-backend-consolekit-1-0:amd64          install
libpolkit-gobject-1-0                           install
libpolkit-gobject-consolekit-1-0:amd64          install
libpoppler64:amd64                              install
libpopt0:amd64                                  install
libportaudio2:amd64                             install
libprocps4:amd64                                install
libprocps6:amd64                                install
libprotobuf10:amd64                             install
libpsl5:amd64                                   install
libpulse0:amd64                                 install
libpython-stdlib:amd64                          install
libpython2.7-minimal:amd64                      install
libpython2.7-stdlib:amd64                       install
libpython3-stdlib:amd64                         install
libpython3.5-minimal:amd64                      install
libpython3.5-stdlib:amd64                       install
librcc0                                         install
librcd0                                         install
libreadline7:amd64                              install
librecode0:amd64                                install
libresid-builder0c2a                            install
librsvg2-2:amd64                                install
librtmp1:amd64                                  install
libsamplerate0:amd64                            install
libsasl2-2:amd64                                install
libsasl2-modules:amd64                          install
libsasl2-modules-db:amd64                       install
libselinux1:amd64                               install
libsemanage-common                              install
libsemanage1:amd64                              install
libsensors4:amd64                               install
libsepol1:amd64                                 install
libsidplay2                                     install
libsidutils0                                    install
libsigsegv2:amd64                               install
libslang2:amd64                                 install
libsm6:amd64                                    install
libsmartcols1:amd64                             install
libsndfile1:amd64                               install
libsonic0:amd64                                 install
libsox-fmt-alsa:amd64                           install
libsox-fmt-base:amd64                           install
libsox2:amd64                                   install
libspeex1:amd64                                 install
libsqlite3-0:amd64                              install
libss2:amd64                                    install
libssh2-1:amd64                                 install
libssl1.0.2:amd64                               install
libssl1.1:amd64                                 install
libstdc++6:amd64                                install
libsystemd0:amd64                               install
libtag1v5:amd64                                 install
libtag1v5-vanilla:amd64                         install
libtagc0:amd64                                  install
libtalloc2:amd64                                install
libtasn1-6:amd64                                install
libtext-charwidth-perl                          install
libtext-iconv-perl                              install
libtext-wrapi18n-perl                           install
libthai-data                                    install
libthai0:amd64                                  install
libtidy5                                        install
libtiff5:amd64                                  install
libtinfo5:amd64                                 install
libtokyocabinet9:amd64                          install
libturbojpeg0:amd64                             install
libunistring0:amd64                             install
libusb-0.1-4:amd64                              install
libustr-1.0-1:amd64                             install
libutempter0:amd64                              install
libuu0                                          install
libuuid1:amd64                                  install
libvorbis0a:amd64                               install
libvorbisenc2:amd64                             install
libvorbisfile3:amd64                            install
libwavpack1:amd64                               install
libwrap0:amd64                                  install
libx11-6:amd64                                  install
libx11-data                                     install
libx11-xcb1:amd64                               install
libx86-1:amd64                                  install
libxapian30:amd64                               install
libxau6:amd64                                   install
libxcb-render0:amd64                            install
libxcb-shm0:amd64                               install
libxcb1:amd64                                   install
libxdmcp6:amd64                                 install
libxext6:amd64                                  install
libxi6:amd64                                    install
libxml2:amd64                                   install
libxrender1:amd64                               install
libxtables12:amd64                              install
libxtst6:amd64                                  install
links2                                          install
linux-base                                      install
linux-image-4.9.0-6-amd64                       install
linux-image-amd64                               install
linux-live-boot                                 install
live-boot-initramfs-tools                       install
live-config                                     install
live-config-sysvinit                            install
locales                                         install
login                                           install
logrotate                                       install
lrzsz                                           install
lsb-base                                        install
lsof                                            install
lynx                                            install
lynx-common                                     install
m4                                              install
man-db                                          install
manpages                                        install
manpages-dev                                    install
matanza                                         install
mawk                                            install
mc                                              install
mc-data                                         install
mcabber                                         install
mime-support                                    install
minicom                                         install
mlocate                                         install
moc                                             install
moria                                           install
mosh                                            install
mount                                           install
msmtp                                           install
mtools                                          install
mtr-tiny                                        install
multiarch-support                               install
multitail                                       install
mutt                                            install
nano                                            install
ncdu                                            install
ncurses-base                                    install
ncurses-bin                                     install
net-tools                                       install
netbase                                         install
netcat                                          install
netcat-traditional                              install
nethack-common                                  install
nethack-console                                 install
nfacct                                          install
ninvaders                                       install
nrss                                            install
ntp                                             install
omega-rpg                                       install
openssh-client                                  install
openssh-server                                  install
openssh-sftp-server                             install
openssl                                         install
pacman4console                                  install
parallel                                        install
parted                                          install
passwd                                          install
patch                                           install
pciutils                                        install
pente                                           install
perl                                            install
perl-base                                       install
perl-modules-5.24                               install
pinentry-curses                                 install
policykit-1                                     install
poppler-data                                    install
poppler-utils                                   install
procmail                                        install
procps                                          install
psmisc                                          install
python                                          install
python-minimal                                  install
python2.7                                       install
python2.7-minimal                               install
python3                                         install
python3-minimal                                 install
python3.5                                       install
python3.5-minimal                               install
radio                                           install
readline-common                                 install
refractainstaller-base                          install
refractasnapshot-base                           install
rename                                          install
rpl                                             install
rsync                                           install
rsyslog                                         install
sc                                              install
screen                                          install
sed                                             install
sensible-utils                                  install
setnet                                          install
shared-mime-info                                install
sox                                             install
squashfs-tools                                  install
startpar                                        install
sudo                                            install
sudoku                                          install
syslinux                                        install
syslinux-common                                 install
sysstat                                         install
sysv-rc                                         install
sysvinit                                        install
sysvinit-core                                   install
sysvinit-utils                                  install
tar                                             install
tasksel                                         install
taskwarrior                                     install
tcc                                             install
telnet                                          install
termsaver                                       install
time                                            install
tin                                             install
tmux                                            install
toilet                                          install
toilet-fonts                                    install
traceroute                                      install
ttyrec                                          install
tzdata                                          install
ucf                                             install
unzip                                           install
util-linux                                      install
util-linux-locales                              install
vim-common                                      install
vim-runtime                                     install
vim-tiny                                        install
w3m                                             install
wamerican                                       install
wavemon                                         install
wget                                            install
whiptail                                        install
whois                                           install
wireless-tools                                  install
wpasupplicant                                   install
x11-common                                      install
xkb-data                                        install
xorriso                                         install
xxd                                             install
xz-utils                                        install
yasr                                            install
zile                                            install
zlib1g:amd64                                    install
zsh                                             install
zsh-common                                      install

Now I customize it with my glorious noob-scripts:
001 replace default user

deluser devuan &
delgroup devuan &
rm -r /home/devuan &
adduser banking

002 minimalizing the system
Here i use a packagelist of my customize minimal installation of devuan ascii wich is installed on my hdd.
This system works, it runs at the moment but with linux-libre as kernel and of course without the live-* packages
the packagelist:

adduser                                         install
apt                                             install
apt-utils                                       install
base-files                                      install
base-passwd                                     install
bash                                            install
bsdutils                                        install
busybox                                         install
console-setup                                   install
console-setup-linux                             install
coreutils                                       install
cpio                                            install
cron                                            install
cryptsetup                                      install
cryptsetup-bin                                  install
dash                                            install
debconf                                         install
debian-archive-keyring                          install
debianutils                                     install
devuan-baseconf                                 install
devuan-keyring                                  install
diffutils                                       install
dmidecode                                       install
dmsetup                                         install
dpkg                                            install
e2fslibs:amd64                                  install
e2fsprogs                                       install
eject                                           install
eudev                                           install
findutils                                       install
gcc-6-base:amd64                                install
gettext-base                                    install
gpgv                                            install
grep                                            install
grub-common                                     install
grub-pc                                         install
grub-pc-bin                                     install
grub2-common                                    install
gzip                                            install
hostname                                        install
ifupdown                                        install
init                                            install
init-system-helpers                             install
initramfs-tools                                 install
initramfs-tools-core                            install
initscripts                                     install
insserv                                         install
iproute2                                        install
iptables                                        install
iputils-ping                                    install
isolinux                                        install
kbd                                             install
keyboard-configuration                          install
klibc-utils                                     install
kmod                                            install
libacl1:amd64                                   install
libapt-inst2.0:amd64                            install
libapt-pkg5.0:amd64                             install
libattr1:amd64                                  install
libaudit-common                                 install
libaudit1:amd64                                 install
libblkid1:amd64                                 install
libburn4:amd64                                  install
libbz2-1.0:amd64                                install
libc-bin                                        install
libc-l10n                                       install
libc6:amd64                                     install
libcap-ng0:amd64                                install
libcap2:amd64                                   install
libcomerr2:amd64                                install
libcryptsetup4:amd64                            install
libdb5.3:amd64                                  install
libdebconfclient0:amd64                         install
libdevmapper1.02.1:amd64                        install
libelf1:amd64                                   install
libestr0                                        install
libeudev1:amd64                                 install
libfastjson4:amd64                              install
libfdisk1:amd64                                 install
libfreetype6:amd64                              install
libfuse2:amd64                                  install
libgcc1:amd64                                   install
libgcrypt20:amd64                               install
libgpg-error0:amd64                             install
libidn11:amd64                                  install
libip4tc0:amd64                                 install
libip6tc0:amd64                                 install
libiptc0:amd64                                  install
libisoburn1:amd64                               install
libisofs6:amd64                                 install
libjte1                                         install
libklibc                                        install
libkmod2:amd64                                  install
liblocale-gettext-perl                          install
liblogging-stdlog0:amd64                        install
liblognorm5:amd64                               install
liblz4-1:amd64                                  install
liblzma5:amd64                                  install
liblzo2-2:amd64                                 install
libmnl0:amd64                                   install
libmount1:amd64                                 install
libncurses5:amd64                               install
libncursesw5:amd64                              install
libnetfilter-conntrack3:amd64                   install
libnettle6:amd64                                install
libnewt0.52:amd64                               install
libnfnetlink0:amd64                             install
libpam-modules:amd64                            install
libpam-modules-bin                              install
libpam-runtime                                  install
libpam0g:amd64                                  install
libpci3:amd64                                   install
libpcre3:amd64                                  install
libpng16-16:amd64                               install
libpopt0:amd64                                  install
libprocps6:amd64                                install
libreadline7:amd64                              install
libselinux1:amd64                               install
libsemanage-common                              install
libsemanage1:amd64                              install
libsepol1:amd64                                 install
libslang2:amd64                                 install
libsmartcols1:amd64                             install
libss2:amd64                                    install
libstdc++6:amd64                                install
libtext-charwidth-perl                          install
libtext-iconv-perl                              install
libtext-wrapi18n-perl                           install
libtinfo5:amd64                                 install
libustr-1.0-1:amd64                             install
libuuid1:amd64                                  install
libxtables12:amd64                              install
linux-base                                      install
linux-image-4.9.0-6-amd64                       install
linux-image-amd64                               install
live-boot                                       install
live-boot-initramfs-tools                       install
live-config                                     install
live-config-sysvinit                            install
locales                                         install
login                                           install
logrotate                                       install
lsb-base                                        install
mawk                                            install
mount                                           install
mtools                                          install
multiarch-support                               install
ncurses-base                                    install
ncurses-bin                                     install
net-tools                                       install
netbase                                         install
passwd                                          install
pciutils                                        install
perl-base                                       install
procps                                          install
readline-common                                 install
refractasnapshot-base                           install
rsync                                           install
rsyslog                                         install
sed                                             install
sensible-utils                                  install
squashfs-tools                                  install
startpar                                        install
syslinux                                        install
syslinux-common                                 install
sysv-rc                                         install
sysvinit                                        install
sysvinit-core                                   install
sysvinit-utils                                  install
tar                                             install
tasksel                                         install
tasksel-data                                    install
tzdata                                          install
ucf                                             install
util-linux                                      install
vim-common                                      install
vim-tiny                                        install
xkb-data                                        install
xorriso                                         install
xxd                                             install
zlib1g:amd64                                    install

Isn't it cute and tiny?
=-D

The following script is using this list for "$@" :

#prevent apt from installing recommend packages
echo "APT::Install-Recommends "0";" > /etc/apt/apt.conf.d/01lean &&
echo "APT::AutoRemove:RecommendsImportant "false";" >> /etc/apt/apt.conf.d/01lean &&
#add the devuan repository to /etc/apt/sources.list
echo "# devuan repository" > /etc/apt/sources.list &&
echo "deb http://pkgmaster.devuan.org/merged ascii main" >> /etc/apt/sources.list &&
echo "deb http://pkgmaster.devuan.org/merged ascii-security main" >> /etc/apt/sources.list &&
echo "deb http://pkgmaster.devuan.org/merged ascii-updates main" >> /etc/apt/sources.list &&
apt update &&
#minimalize the number of packages and remove all non-free packages (needs a packagelist builded with "dpkg --get-seletions > PACKAGELIST")
dpkg --clear-selections &&
dpkg --set-selections < "$@" &&
apt-get dselect-upgrade &&
apt-get autoclean &&
apt-get clean &&
dpkg --get-selections > remove &&
        grep deinstall remove | sed s/deinstall//g | sed 's/\t//g' | sed ':a;N;$!ba;s/\n/ /g' | xargs apt-get autoremove --purge -y &&
                rm remove &&
apt install deborphan &&
deborphan | xargs apt-get autoremove --purge -y &&
apt-get autoclean &&
apt-get clean

003 install linux-libre kernel

apt update &&
apt install ca-certificates >> ca-certificates_packages # wget needs it for https &&
apt install gnupg >> gnupg_packages # linux-libre needs it at first install (i don't know why it's not listed in recommends...) &&
apt install wget >> wget_packages # for downloading the key &&
echo "# linux-libre kernel" >> /etc/apt/sources.list &&
echo "deb mirror://linux-libre.fsfla.org/pub/linux-libre/freesh/mirrors.txt freesh main" >> /etc/apt/sources.list &&
wget https://jxself.org/gpg.inc &&
gpg --import gpg.inc && # doing these two steps
gpg --list-keys && # because gpg --with-fingerprint doesn't work...
echo "Key fingerprint should be = F611 A908 FFA1 65C6 9958 4ED4 9D0D B31B 545A 3198" &&
apt-key add gpg.inc &&
rm gpg.inc &&
apt update &&
apt list linux-libre* &&
read -p "choose a kernel from the list above: " kernel
apt install --no-install-recommends --no-install-suggests $kernel && # i use linux-libre-4.14
rm -r /root/.gnupg &&
head -n 15 ca-certificates_packages &&
head -n 15 gnupg_packages &&
head -n 15 wget_packages &&
echo "remove and purge the packages above by hand (don't know hw to automate this...)"

004 little clean up

dmsg --clear
echo "" > ~/.bash_history
echo "" > /home/banking/.bash_history
rm -r /var/log/*

So now i like to build a bootable iso, boot that iso with the linux-libre kernel, remove the old kernel and do some configs and then building a iso again (the final one).
That for I run :

refractasnapshot

EDIT>
It is saying that grub-efi-amd64 and dosfstools are missing, but i go on and making a snapshot cause the T61 has no UEFI.
<EDIT
I save the iso on a removable media, start another system and burning it on a CD.
Now i boot that CD, but i get errors:
[EDIT: sorry the image was removed by the imagehoster...]

Board footer

Forum Software