On your machine, install openssh-server. I'm not sure if that's needed on MIL's computer.

I haven't figured out how to combine the reverse tunneling with x11vnc. If you can't open a port on Mom's rounter (why not?) you can still get access, and you don't have to walk her through installing anything. (I think.) You will need to have port forwarding set up on your own router. Redirect port 22 to your computer.

You will need to walk her through this command:

ssh -X -R12345:localhost:22 gnuuser@gnuhost

After she does that, you can get shell access to her computer with :

ssh -X -p12345 mom@localhost

Get root and do whatever you need to do.

Some guides I looked at said you (MIL) should add -f and -N to the command to set up the tunnel, but I didn't do that in my tests. The -X means you can run x-apps that are installed on her machine.

Anyway, once you get in, if you think you'll be doing this again some time (i.e. if you don't set up port forwarding on her router) make a script that contains the command she uses to create the tunnel, make it executable, put it in /usr/local/bin/ then make a .desktop file that has the path to that script on the Exec line (look at examples) and put it with the others in /usr/share/applications, and it will appear in the apps menu. You could also put the .desktop file on her desktop if that's easier for her.

I haven't tried this yet, but her script might need to open a terminal and run the command inside the terminal. It might look like this:

#!/usr/bin/env bash

xterm -hold -e ssh -X -R 12345:localhost:22 gnuuser@gnuhost

If you want to see my notes on vnc over ssh (not reverse), go here and scroll down near the bottom of the page.
http://www.ibiblio.org/refracta/docs/Re … es_8.2.txt
If you have two machines at home, you can play with controlling two computers on opposite sides of the room or house without getting up. You would need to install x11vnc and a vncviewer. I use xtightvncviewr and Ralph uses a different one that I've never tried. And if we figure out how to do vnc with a reverse tunnel, (or if you open a port for ssh on the remote router) then MIL's computer will need x11vnc.

You can edit your first post to mark it solved, but there may still be a problem to solve.

For the devuan live-isos, I put those lines in /etc/profile.d/tt_locale.sh where they will affect all users. It should work for one user if you add those lines to ~/.profile.

If you chose Italian during the installation, you shouldn't need to do this. Which iso did you use for the installation?

I do it this way:

export LANG=it_IT.UTF-8
export LC_ALL=it_IT.UTF-8

shwsh, did you do this on jessie, ascii or ceres?  3.24.3-1 is in buster/sid.

You posted the following. There's no error message saying that stretch-backports does not exist, so you must have had stretch-backports in your sources at some point:

To see if you pulled in packages from backports or testing, you can run

aptitude search ~i -F"%p# %v# %t#"

but I'm not sure it will be entirely accurate. I'm running jessie, and it shows most of my packages are from "stable" with a few from "jessie-backports". If there are packages from ascii or stretch, they should show up as "testing".

For packages that have not been devuanized, you won't be able to tell whether you pulled it from debian or devuan unless you can find a version mismatch, Where debian has a different version than devuan, and you have installed the version from debian. Right now, the only example I can think of is chromium-60 in stretch security vs. chromium-59 from ascii. If you were running ascii and had chromium-60 running and you didn't get it from the ceres repo, you would have gotten it from debian.

For reference, here are some other useful commands: https://dev1galaxy.org/viewtopic.php?id=511

I checked with someone who knows more than both of us put together (CenturionDan):

Until you get more space on /dev/sda3, nothing you do can be trusted to work. Get it to less than 95% full. And figure out what's taking up all the space in /var/log. (Please don't answer with just "logs". Which ones and how big are they?)

To post text from console:

cat <filename> | nc termbin.com 9999

and then post the link it gives you.

It means I'm confused and thinking of playing media files with a plain ssh connection instead of using sshfs. The latter works correctly and plays on the local machine. Thanks.

If you just want to access the server from the local network, nfs will work. You can either add the nfs shares to the fstabs of the clients, or you could install autofs and set it up so the shares get mounted automatically when someone tries to access those files. There's also sshfs, which is more secure, but won't work right for audio/video (it plays on the server instead of the client.)

Look for a howto on setting up nfs on debian. Same for autofs if you want that.

I just did an upgrade to ascii, and I was having the opposite problem. Synaptic and gparted would start without asking for a password. Only worked with the primary user. I noticed that policykit-1-gnome had been removed, so I reinstalled it, and now synaptic and gparted won't start for the user. User can still use pkexec to create another user but has to use the full path for the adduser command.

I ran into this a few days ago and ended up downloading it from https://get.adobe.com/flashplayer/otherversions/ for a friend. We can't get it to work. I already have flashplugin-nonfree installed from long ago, and when I go to about:plugins, I don't see it listed. And neither of us could see some items on one site that requires flash. Debian wiki looked helpful, but as I said, the plugin didn't seem to work and doesn't show up in the list of plugins. I don't know what's going on with it.

Same behavior in a devuan jessie that got upgraded to ascii, and then again when upgraded to ceres.

pkexec allows primary user to install and remove software (didn't test gparted this time)
It does not allow primary user to create a new user, and it does not let the second user install software.

I will get around to filing a bug report.