Do you know when and where this change took place? Was it in debian or upstream?

Where is '--tcp-option' from? It is not mentioned in man iptables.

The driver must be in the netinstall iso, or I would not have been able to get online. It's possible that the driver in ascii isn't new enough for your new hardware. In that case, you could try some live isos to see which kernel works. If the ascii 2.1 desktop-live doesn't work, you can try it with a backports kernel.  I made one for that purpose:
https://get.refracta.org/files/experime … 5_1512.iso

Note: devuan debootstrap is included in all the live isos.

While you're at it, you might want to install the 4.19.0-8 kernel from beowulf. Or install linux-image-amd64 and you'll always get the newest kernel for your system.

Reportbug is partially broken. I believe you can use it to generate a report, but you have to email the report manually.

To submit a new bug report, send email to submit@bugs.devuan.org with a descriptive subject line and the first line of the body should be
Package: <package name>

Follow-up messages go to <number>@bugs.devuan.org

You can "hide" the boot entry for booting with persistence (i.e. with your encrypted system) by not having that entry in the boot menu. You would then need to press TAB (for isolinux) or e (for grub) to edit the boot menu and add the extra boot options manually. Then, anyone who doesn't know the persistent volume exists would just see the entry for the normal, read-only live system, and that's what would boot. The problem with that method is that you have to type a few extra options on the boot command. (I've been making live-usb sticks like this for years, and I still have to check the syntax on some of the options.)

It's also possible to hide the entire boot menu. Then you would need to press a key to make it appear so you can select the second boot option (boot with persistence). Without the secret key press, you'd boot to the read-only system that does not have any of your personal files.

Here's a tool that will let you create the kind of live-usb that dzz described.
https://sourceforge.net/projects/refrac … b/download

And here are the instructions for its use:
https://refracta.org/docs/readme.refracta2usb.txt

There may be a trickier way to do it so that you only have to type one word to create all the extra options for persistence, but that would require hacking on some live-boot scripts and some testing.

If you (or someone else) needs to pull the file from the internet, I keep a copy here -
https://git.devuan.org/devuan-packages/ … tab.debian

You should not need to be writing polkit rules for this. I'm using xfce in beowulf, and when I plug in a usb stick, it shows up on the desktop and double-click opens it in thunar.

Make sure you have gvfs, gvfs-backends, thunar-volman, policykit-1-gnome. (Reboot probably needed.)

No, you don't want to do that.

I installed xserver-xorg-input-synaptics and the 'Reset to defaults' button becomes active. Except it doesn't do anything, because I still can't change it to anything but the defaults.

I then removed xserver-xorg-input-libinput and installed xserver-xorg-input-evdev, rebooted, and it now works. I can change the speed of the touchpad. I still can't change the speed of the trackpoint.

(Thinkpad T420 has a Synaptics touchpad.)

Done in 2.0.19+ds1-2+devuan4

Right now, it's still in ceres (unstable).

I filed a bug report for you.
https://bugs.devuan.org/cgi/bugreport.cgi?bug=384

From what I've heard, the task of building firefox is too difficult to justify for that simple change. However, something like that might be fixed by a script applied after the install. And such a script might be appropriate in the much-neglected devuan-sanity package. (It's an orphan and it would love to be adopted by some loving maintainer.)

Here's the link for the list of https package mirrors. I gave the link for iso mirrors yesterday by mistake. That post above has been corrected.

http://pkgmaster.devuan.org/mirror_list.txt

If you use https with deb.devuan.org and you are lucky enough to get directed to a mirror that provides https, it should work. But if you get directed to a mirror that only uses http, you will get errors. To use https, your sources.list should have sources that provide https.

Note that you need to add (append) "/merged" to the end of the Base URL given for the mirrors, even if they end in /devuan. For example:
BaseURL:  sledjhamr.org/devuan
looks like this in sources.list
deb https://sledjhamr.org/devuan/merged ascii main