You are not logged in.
A quick thing regarding uninstall to get sans-dbus and keep it that way. See all those packages listed that are "no longer required", as well as the "NEW packages" that "will be installed".
There are packages there that if they remain, Mister Apt will always be trying to remove and reinstall ad nauseum.
The /etc/apt/apt.conf.d/01lean:
APT::Install-Suggests "0";
APT::Install-Recommends "0";
APT::AutoRemove::SuggestsImportant "false";
APT::AutoRemove::RecommendsImportant "false";
will always try to get rid of anything which is not very strictly a dependency.
And stuff like evince, and even firefox-esr (I'm afraid), if those stay, no way will Mister Apt give me a respite. No way! Because those depend on dbus. Period. You can't run Evince without dbus... And some other programs.
So my next step here is to not allow the 01lean to rid me of packages that I need.
I'm not an expert, and I made many guesses in chosing the list of packages to apt-get install, as dev1fanboy took care to teach us we need to (those of us who want more of our systems, because less --less bloat-- is more).
He used as an example, if I remember correctly, only the package ca-certificates, which is too little for a non-advanced user to understand. We need more examples to be able to figure things out...
And my packages that I chose to apt-get install to be able to keep them in the teeth of the devastating agression of our fellow 01lean, are the ones that I pasted the keep-list.ls-1_TRY00 in the post before previous in this topic.
And I think I won't go wrong if I reuse that list. And with the same for loop to iterate it.
However, some of those apt-get install <package> only set that <package> to:
"set to manually installed"
like the last in that keep-list.ls-1_TRY00 list (or keep-list.ls-1_TRY01, just the space is different).
The last being xterm, and it installed on:
2017-06-23 23:29
because, and this is from the actual listing:
-rw-r--r-- 1 mr mr 1820 2017-06-23 23:29 apt-get_install_xserver-xorg-video-neomagic_170623_2329_gdOv
-rw-r--r-- 1 mr mr 1816 2017-06-23 23:29 apt-get_install_xserver-xorg-video-nouveau_170623_2329_gdOv
-rw-r--r-- 1 mr mr 1816 2017-06-23 23:29 apt-get_install_xserver-xorg-video-radeon_170623_2329_gdOv
-rw-r--r-- 1 mr mr 1812 2017-06-23 23:29 apt-get_install_xserver-xorg-video-vesa_170623_2329_gdOv
-rw-r--r-- 1 mr mr 1748 2017-06-23 23:29 apt-get_install_xterm_170623_2329_gdOv
(
Digression. BTW, aren't you tired of having to see non-uniform representation of date and time, so you always have more difficulty to use the "ls -l" and friends with awk or cut, or grep or sed? Stick
export TIME_STYLE="posix-long-iso"
in your ~/.bashrc and enjoy the output like the above.
)
So I guess what I should do to be able to install those packages (The command offers to install the particular package or not, I didn't install all, I don't think...), is update /var/lib/apt/ with cache and lib_apt of 170623_2331, because:
# du -s var_lib_apt_170623_2327_gdOv/ var_lib_apt_170623_2331_gdOv
143912 var_lib_apt_170623_2327_gdOv/
143908 var_lib_apt_170623_2331_gdOv
#
# du -s var_cache_170623_2327_gdOv/ var_cache_170623_2331_gdOv/
247676 var_cache_170623_2327_gdOv/
282160 var_cache_170623_2331_gdOv/
#
So...
[ some 7 hours later, after I fell asleep exhausted ] Nope! Because:
# rsync -nav --delete var_lib_apt_170623_2331_gdOv/lib/apt/ /var/lib/apt/
sending incremental file list
./
extended_states
listchanges.db
lists/partial/
sent 803 bytes received 33 bytes 1,672.00 bytes/sec
total size is 147,305,729 speedup is 176,203.03 (DRY RUN)
# ls -l var_lib_apt_170623_2331_gdOv/lib/apt/extended_states /var/lib/apt/extended_states
-rw-r--r-- 1 root root 40395 2017-06-23 23:31 var_lib_apt_170623_2331_gdOv/lib/apt/extended_states
-rw-r--r-- 1 root root 46788 2017-06-24 21:35 /var/lib/apt/extended_states
# diff var_lib_apt_170623_2331_gdOv/lib/apt/extended_states /var/lib/apt/extended_states | wc -l
595
So while I always could rsync the /var/lib/apt/ from the right archive, I don't like seeing that much differing unnecessarily. An earlier archive I had better chose.
The var_lib_apt_170623_2247's extended_states's diff isn't so very much for pasting:
# diff var_lib_apt_170623_2247_gdOv/lib/apt/extended_states /var/lib/apt/extended_states
17,20
> Package: libuuid-perl
> Architecture: amd64
> Auto-Installed: 1
>
84a89,92
> Package: libhunspell-1.3-0
> Architecture: amd64
> Auto-Installed: 1
>
100a109,112
> Package: libavformat56
> Architecture: amd64
> Auto-Installed: 1
>
152a165,168
> Package: libavresample2
> Architecture: amd64
> Auto-Installed: 1
>
348a365,368
> Package: libwebpmux1
> Architecture: amd64
> Auto-Installed: 1
>
452a473,476
> Package: libwebpdemux1
> Architecture: amd64
> Auto-Installed: 1
>
460a485,488
> Package: python-pil
> Architecture: amd64
> Auto-Installed: 1
>
520a549,552
> Package: libwebp5
> Architecture: amd64
> Auto-Installed: 1
>
548a581,584
> Package: python-roman
> Architecture: amd64
> Auto-Installed: 1
>
832a869,872
> Package: docutils-common
> Architecture: amd64
> Auto-Installed: 1
>
860a901,904
> Package: libschroedinger-1.0-0
> Architecture: amd64
> Auto-Installed: 1
>
1164a1209,1212
> Package: python-docutils
> Architecture: amd64
> Auto-Installed: 1
>
1336a1385,1388
> Package: python-pygments
> Architecture: amd64
> Auto-Installed: 1
>
1424a1477,1480
> Package: libperl4-corelibs-perl
> Architecture: amd64
> Auto-Installed: 1
>
1440a1497,1500
> Package: docutils-doc
> Architecture: amd64
> Auto-Installed: 1
>
1484a1545,1548
> Package: libavcodec56
> Architecture: amd64
> Auto-Installed: 1
>
1508a1573,1576
> Package: libx264-142
> Architecture: amd64
> Auto-Installed: 1
>
1760a1829,1832
> Package: libavutil54
> Architecture: amd64
> Auto-Installed: 1
>
1860a1933,1936
> Package: libopenvg1-mesa
> Architecture: amd64
> Auto-Installed: 1
>
1869a1946,1949
> Architecture: amd64
> Auto-Installed: 1
>
> Package: libegl1-mesa-drivers
#
Or would the initially proposed still have done it. Seeing the below:
# rsync -nav --delete var_lib_apt_170623_2247_gdOv/lib/apt/ /var/lib/apt/
sending incremental file list
./
extended_states
listchanges.db
lists/partial/
sent 803 bytes received 33 bytes 1,672.00 bytes/sec
total size is 147,310,863 speedup is 176,209.17 (DRY RUN)
# rsync -nav --delete var_cache_170623_2247_gdOv/cache/ /var/cache/
sending incremental file list
./
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
debconf/
debconf/config.dat
debconf/config.dat-old
debconf/templates.dat
debconf/templates.dat-old
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/de/index.db
man/es/
man/es/index.db
man/fi/
man/fr/
man/fr/index.db
man/hu/
man/id/
man/it/
man/it/index.db
man/ja/
man/ko/
man/nl/
man/nl/index.db
man/pl/
man/pl/index.db
man/pt/
man/pt_BR/
man/ru/
man/ru/index.db
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/
sent 10,557 bytes received 237 bytes 21,588.00 bytes/sec
total size is 194,079,023 speedup is 17,980.27 (DRY RUN)
#
it probably would have, but I'm still wary. I invested so much effort into this, it must not fail anymore.
So:
# rsync -av --delete var_lib_apt_170623_2247_gdOv/lib/apt/ /var/lib/apt/
sending incremental file list
./
extended_states
listchanges.db
lists/partial/
sent 58,708 bytes received 69 bytes 39,184.67 bytes/sec
total size is 147,310,863 speedup is 2,506.27
# rsync -av --delete var_cache_170623_2247_gdOv/cache/ /var/cache/
sending incremental file list
./
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
debconf/
debconf/config.dat
debconf/config.dat-old
debconf/templates.dat
debconf/templates.dat-old
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/de/index.db
man/es/
man/es/index.db
man/fi/
man/fr/
man/fr/index.db
man/hu/
man/id/
man/it/
man/it/index.db
man/ja/
man/ko/
man/nl/
man/nl/index.db
man/pl/
man/pl/index.db
man/pt/
man/pt_BR/
man/ru/
man/ru/index.db
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/
sent 60,667,540 bytes received 521 bytes 17,333,731.71 bytes/sec
total size is 194,079,023 speedup is 3.20
#
And the dry runs, I checked, either way, now return empty updating.
The xterm's "apt-get install xterm" done just to get it to be: "set to manually installed" was at:
-rw-r--r-- 1 mr mr 1748 2017-06-23 23:29 apt-get_install_xterm_170623_2329_gdOv
So the above archive update "170623_2247" is not sufficient... I do need to update with a later archive...
Let's see:
# rsync -nav --delete var_cache_170623_2254_gdOv/cache/ /var/cache/
sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/de/index.db
man/es/
man/fi/
man/fr/
man/hu/
man/id/
man/it/
man/ja/
man/ko/
man/nl/
man/pl/
man/pt/
man/pt_BR/
man/ru/
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/
sent 10,521 bytes received 197 bytes 21,436.00 bytes/sec
total size is 194,079,011 speedup is 18,107.76 (DRY RUN)
# rsync -nav --delete var_cache_170623_2322_gdOv/cache/ /var/cache/
sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/default-jre-headless_2%3a1.8-58_amd64.deb
apt/archives/default-jre_2%3a1.8-58_amd64.deb
apt/archives/gstreamer1.0-plugins-good_1.10.4-1_amd64.deb
apt/archives/libdrm-amdgpu1_2.4.74-1_amd64.deb
apt/archives/libgl1-mesa-dri_13.0.6-1+b2_amd64.deb
apt/archives/libllvm3.9_1%3a3.9.1-9_amd64.deb
apt/archives/libsensors4_1%3a3.4.0-4_amd64.deb
apt/archives/libtag1v5-vanilla_1.11.1+dfsg.1-0.1_amd64.deb
apt/archives/libtag1v5_1.11.1+dfsg.1-0.1_amd64.deb
apt/archives/openjdk-8-jre-headless_8u131-b11-2_amd64.deb
apt/archives/openjdk-8-jre_8u131-b11-2_amd64.deb
apt/archives/partial/
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/de/index.db
man/es/
man/fi/
man/fr/
man/hu/
man/id/
man/it/
man/ja/
man/ko/
man/nl/
man/pl/
man/pt/
man/pt_BR/
man/ru/
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/
sent 11,070 bytes received 236 bytes 22,612.00 bytes/sec
total size is 240,737,271 speedup is 21,292.88 (DRY RUN)
#
Ah! There I found what, if it weren't there when some of the commands that I will issue here in the Air-Gapped and which ought to accomplish just what the same that command from that bunch (see the for loop below) accomplished a day and a half ago, [there I found what] would get me worried and scared because the deb package(s) would not be found and error would be thrown...
But what command downloaded these deb package? Let's see... E.g. libgl1-mesa-dri_13.0.6-1+b2_amd64.deb. It's not in the keep-list.ls-1_TRY00...
Here:
#.. grep -r libgl1-mesa-dri_13.0.6-1+b2_amd64.deb ../LOG_/
../LOG_/apt-get_install_libgl1-mesa-dri_170623_2322_gdOv:Preparing to unpack .../libgl1-mesa-dri_13.0.6-1+b2_amd64.deb ...
#
The "libgl1-mesa-dri" is in the keep-list.ls-1_TRY00.
So...
# rsync -av --delete var_cache_170623_2322_gdOv/cache/ /var/cache/
sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/default-jre-headless_2%3a1.8-58_amd64.deb
apt/archives/default-jre_2%3a1.8-58_amd64.deb
apt/archives/gstreamer1.0-plugins-good_1.10.4-1_amd64.deb
apt/archives/libdrm-amdgpu1_2.4.74-1_amd64.deb
apt/archives/libgl1-mesa-dri_13.0.6-1+b2_amd64.deb
apt/archives/libllvm3.9_1%3a3.9.1-9_amd64.deb
apt/archives/libsensors4_1%3a3.4.0-4_amd64.deb
apt/archives/libtag1v5-vanilla_1.11.1+dfsg.1-0.1_amd64.deb
apt/archives/libtag1v5_1.11.1+dfsg.1-0.1_amd64.deb
apt/archives/openjdk-8-jre-headless_8u131-b11-2_amd64.deb
apt/archives/openjdk-8-jre_8u131-b11-2_amd64.deb
apt/archives/partial/
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/de/index.db
man/es/
man/fi/
man/fr/
man/hu/
man/id/
man/it/
man/ja/
man/ko/
man/nl/
man/pl/
man/pt/
man/pt_BR/
man/ru/
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/
sent 99,329,481 bytes received 512 bytes 18,059,998.73 bytes/sec
total size is 240,737,271 speedup is 2.42
#
But just, do these differences matter, or is Mister Apt tollerant and not too fussy for these to matter:
# rsync -nav --delete var_lib_apt_170623_2321_gdOv/ var_lib_apt_170623_2323_gdOv/
sending incremental file list
./
lib/
lib/apt/
lib/apt/extended_states
sent 856 bytes received 35 bytes 1,782.00 bytes/sec
total size is 147,310,010 speedup is 165,331.10 (DRY RUN)
#
# diff var_lib_apt_170623_2321_gdOv/lib/apt/extended_states var_lib_apt_170623_2323_gdOv/lib/apt/extended_states
409,412d408
< Package: libgstreamer-plugins-base1.0-0
< Architecture: amd64
< Auto-Installed: 1
<
517,520d512
< Package: libgl1-mesa-dri
< Architecture: amd64
< Auto-Installed: 1
<
533,536d524
< Package: gstreamer1.0-x
< Architecture: amd64
< Auto-Installed: 1
<
789,792d776
< Package: libgtk-3-bin
< Architecture: amd64
< Auto-Installed: 1
<
873,876d856
< Package: gtk2-engines
< Architecture: amd64
< Auto-Installed: 1
<
953,956d932
< Package: libasound2-plugins
< Architecture: amd64
< Auto-Installed: 1
<
1137,1140d1112
< Package: libgtk-3-0
< Architecture: amd64
< Auto-Installed: 1
<
1377,1380d1348
< Package: libgstreamer1.0-0
< Architecture: amd64
< Auto-Installed: 1
<
1469,1472d1436
< Package: java-common
< Architecture: amd64
< Auto-Installed: 1
<
2561,2564d2524
< Package: javascript-common
< Architecture: amd64
< Auto-Installed: 1
<
2865a2826,2841
> Architecture: amd64
> Auto-Installed: 1
>
> Package: libllvm3.9
> Architecture: amd64
> Auto-Installed: 1
>
> Package: libdrm-amdgpu1
> Architecture: amd64
> Auto-Installed: 1
>
> Package: libsensors4
> Architecture: amd64
> Auto-Installed: 1
>
> Package: gtk-update-icon-cache
#
I don't know, but I hope this is the best to try:
# rsync -av --delete var_lib_apt_170623_2323_gdOv/lib/apt/ /var/lib/apt/
sending incremental file list
./
extended_states
listchanges.db
lists/partial/
sent 57,461 bytes received 69 bytes 115,060.00 bytes/sec
total size is 147,309,616 speedup is 2,560.57
#
And now the for loop...
# for i in $(cat LOG_add_/keep-list.ls-1_TRY01); do echo apt-get install $i; ask; if [ "$?" == 0 ] ; then apt-get install $i |& tee LOG_/apt-get_install_${i}_$(date +%y%m%d_%H%M)_$(hostname) ; read FAKE ; fi ; done ;
Which loop also logs for me, again in the LOG_ dir, but I'll move these to a few-weeks-more permanent location...
It does install here in Air-Gap master just what the same those commands installed in the clone.
An excerpt:
...
Preparing to unpack .../openjdk-8-jre-headless_8u131-b11-2_amd64.deb ...
Unpacking openjdk-8-jre-headless:amd64 (8u131-b11-2) ...
Preparing to unpack .../default-jre_2%3a1.8-58_amd64.deb ...
Unpacking default-jre (2:1.8-58) over (2:1.7-52) ...
Preparing to unpack .../default-jre-headless_2%3a1.8-58_amd64.deb ...
Unpacking default-jre-headless (2:1.8-58) over (2:1.7-52) ...
Selecting previously unselected package openjdk-8-jre:amd64.
Preparing to unpack .../openjdk-8-jre_8u131-b11-2_amd64.deb ...
Unpacking openjdk-8-jre:amd64 (8u131-b11-2) ...
Processing triggers for mime-support (3.60) ...
Processing triggers for libc-bin (2.24-12) ...
Processing triggers for hicolor-icon-theme (0.15-1) ...
Setting up openjdk-8-jre-headless:amd64 (8u131-b11-2) ...
...
Continuing with the iterations of the for loop, I can tell that I'm not getting the "set to manually installed", probably because of how I manipulated the /var/lib/apt/, or should I say maybe because of that. Instead, I'm getting, say for dh-python package:
dh-python is already the newest version (2.20170125).
I guess that's fine and along with what teacher dev1fanboy meant in his tutorial.
Actually, based on the list keep-list.ls-1_TRY00 (in the post before previous), I'll correct what I shouldn't have left out. I didn't install geoip-database. I will this time. But I hope I don't need the geoip-database-extra.
Aaah... And now I get the "geoip-database set to manually installed."...
And now that I came to the iteration that throws at me:
apt-get install gstreamer1.0-plugins-good
[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
I can see the confirmation of my thinking:
The following additional packages will be installed:
libtag1v5 libtag1v5-vanilla
The following packages will be REMOVED:
libtag1-vanilla libtag1c2a
The following NEW packages will be installed:
libtag1v5 libtag1v5-vanilla
The following packages will be upgraded:
gstreamer1.0-plugins-good
1 upgraded, 2 newly installed, 2 to remove and 87 not upgraded.
Need to get 0 B/3,007 kB of archives.
After this operation, 257 kB of additional disk space will be used.
Do you want to continue? [Y/n]
And since I have updated my Air-Gapped with
...
apt/archives/libtag1v5-vanilla_1.11.1+dfsg.1-0.1_amd64.deb
apt/archives/libtag1v5_1.11.1+dfsg.1-0.1_amd64.deb
...
which you can find further above, I think I can calmly hit Enter to install those now.
True, I got:
Reading changelogs...
(Reading database ... 96624 files and directories currently installed.)
Preparing to unpack .../gstreamer1.0-plugins-good_1.10.4-1_amd64.deb ...
Unpacking gstreamer1.0-plugins-good:amd64 (1.10.4-1) over (1.4.4-2+deb8u3) ...
(Reading database ... 96621 files and directories currently installed.)
Removing libtag1c2a:amd64 (1.9.1-2.1) ...
Removing libtag1-vanilla:amd64 (1.9.1-2.1) ...
Selecting previously unselected package libtag1v5-vanilla:amd64.
(Reading database ... 96615 files and directories currently installed.)
Preparing to unpack .../libtag1v5-vanilla_1.11.1+dfsg.1-0.1_amd64.deb ...
Unpacking libtag1v5-vanilla:amd64 (1.11.1+dfsg.1-0.1) ...
Selecting previously unselected package libtag1v5:amd64.
Preparing to unpack .../libtag1v5_1.11.1+dfsg.1-0.1_amd64.deb ...
Unpacking libtag1v5:amd64 (1.11.1+dfsg.1-0.1) ...
Processing triggers for libc-bin (2.24-12) ...
Setting up libtag1v5-vanilla:amd64 (1.11.1+dfsg.1-0.1) ...
Setting up libtag1v5:amd64 (1.11.1+dfsg.1-0.1) ...
Setting up gstreamer1.0-plugins-good:amd64 (1.10.4-1) ...
Processing triggers for libc-bin (2.24-12) ...
2017/06/25 06:20:21 Reading config from: /etc/paxrat/paxrat.conf
But not I need to "update" again to get more work done... I just have to tread carefully until I get more familiar with these kind but potentially unforgiving local infrastructure (or what to call them).
However, I just mispasted what I planned to paste in here... And I think I was lucky...
This is what executed in the terminal that I update my /var/cache/ and my /var/lib/apt in:
rsync -nav --delete var_cache_170623_2323_gdOv/cache/ /var/cache/# rsync -av --delete var_cache_170623_2323_gdOv/cache/
Because rolling up in that terminal (xterm), I see:
# rsync -nav --delete var_cache_170623_2323_gdOv/cache/ /var/cache/# rsync -av --delete var_cache_170623_2323_gdOv/cache/ /var/cache/
sending incremental file list
rsync: link_stat "/var/cache/#" failed: No such file or directory (2)
rsync: link_stat "/home/mr/var_cache_var_lib_apt_17062.d/rsync" failed: No such file or directory (2)
removing duplicate name . from file list (2)
removing duplicate name apt from file list (4)
removing duplicate name debconf from file list (6)
removing duplicate name dictionaries-common from file list (8)
removing duplicate name fontconfig from file list (10)
removing duplicate name fonts from file list (12)
removing duplicate name ldconfig from file list (14)
...[and much much more]...
but it all ends with a:
total: matches=0 hash_hits=0 false_alarms=0 data=0
sent 22,608 bytes received 71,919 bytes 63,018.00 bytes/sec
total size is 485,500,582 speedup is 5,136.10 (DRY RUN)
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1196) [sender=3.1.2]
root@gdOv:/home/mr/var_cache_var_lib_apt_17062.d# sending incremental file list
bash: sending: command not found
#
, because I pasted in that terminal what I am finally pasting where I wanted to pasted it in. In this writing of mine:
# rsync -av --delete var_cache_170623_2323_gdOv/cache/ /var/cache/
sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/gtk-update-icon-cache_3.22.12-1_amd64.deb
apt/archives/libgtk-3-bin_3.22.12-1_amd64.deb
apt/archives/libgtk2.0-0_2.24.31-2_amd64.deb
apt/archives/libgtk2.0-bin_2.24.31-2_amd64.deb
apt/archives/partial/
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/es/
man/fi/
man/fr/
man/hu/
man/id/
man/it/
man/ja/
man/ko/
man/nl/
man/pl/
man/pt/
man/pt_BR/
man/ru/
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/
sent 54,646,583 bytes received 356 bytes 15,613,411.14 bytes/sec
total size is 242,750,291 speedup is 4.44
[code]
Luckily, after the prompt there already was this string "rsync -nav --delete var_cache_170623_2323_gdOv/cache/ /var/cache/"...
I'm only to confirm yet if I was lucky and didn't do any damage to my Air-Gapped...
Because all the rest also attempt to execute. An excerpt:
[code]
...
root@gdOv:/home/mr/var_cache_var_lib_apt_17062.d# man/
bash: man/: No such file or directory
root@gdOv:/home/mr/var_cache_var_lib_apt_17062.d# man/index.db
bash: man/index.db: No such file or directory
root@gdOv:/home/mr/var_cache_var_lib_apt_17062.d# man/cs/
bash: man/cs/: No such file or directory
root@gdOv:/home/mr/var_cache_var_lib_apt_17062.d# man/da/
bash: man/da/: No such file or directory
...
[/code]
I think it's OK, and that I can run what will install:
[code]
...
apt/archives/gtk-update-icon-cache_3.22.12-1_amd64.deb
apt/archives/libgtk-3-bin_3.22.12-1_amd64.deb
apt/archives/libgtk2.0-0_2.24.31-2_amd64.deb
apt/archives/libgtk2.0-bin_2.24.31-2_amd64.deb
...
[/code]
and I updated the cache with those.
Ah, let's instead of being too fussy, go a little faster and skip all the intermediates, and update so that all from the TRY00 loop can be apt-get install'd.
[b]# rsync -av --delete var_cache_170623_2336_gdOv/cache/ /var/cache/[/b]
[code]
sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/adwaita-icon-theme_3.22.0-1_all.deb
apt/archives/gnome-icon-theme_3.12.0-2_all.deb
apt/archives/libpoppler-glib8_0.48.0-2_amd64.deb
apt/archives/libpoppler64_0.48.0-2_amd64.deb
apt/archives/libxatracker2_13.0.6-1+b2_amd64.deb
apt/archives/libxfont2_1%3a2.0.1-3_amd64.deb
apt/archives/mate-icon-theme_1.16.2-1_all.deb
apt/archives/poppler-utils_0.48.0-2_amd64.deb
apt/archives/xpdf_3.04-4_amd64.deb
apt/archives/xserver-xorg-core_2%3a1.19.3-1_amd64.deb
apt/archives/xserver-xorg-input-all_1%3a7.7+19_amd64.deb
apt/archives/xserver-xorg-input-evdev_1%3a2.10.5-1_amd64.deb
apt/archives/xserver-xorg-input-libinput_0.23.0-2_amd64.deb
apt/archives/xserver-xorg-input-mouse_1%3a1.9.2-1+b1_amd64.deb
apt/archives/xserver-xorg-input-synaptics_1.9.0-1+b1_amd64.deb
apt/archives/xserver-xorg-input-wacom_0.34.0-1_amd64.deb
apt/archives/xserver-xorg-video-all_1%3a7.7+19_amd64.deb
apt/archives/xserver-xorg-video-amdgpu_1.2.0-1+b1_amd64.deb
apt/archives/xserver-xorg-video-ati_1%3a7.8.0-1+b1_amd64.deb
apt/archives/xserver-xorg-video-cirrus_1%3a1.5.3-1+b2_amd64.deb
apt/archives/xserver-xorg-video-fbdev_1%3a0.4.4-1+b5_amd64.deb
apt/archives/xserver-xorg-video-intel_2%3a2.99.917+git20161206-1_amd64.deb
apt/archives/xserver-xorg-video-mach64_6.9.5-1+b2_amd64.deb
apt/archives/xserver-xorg-video-mga_1%3a1.6.5-1_amd64.deb
apt/archives/xserver-xorg-video-neomagic_1%3a1.2.9-1+b2_amd64.deb
apt/archives/xserver-xorg-video-nouveau_1%3a1.0.13-3_amd64.deb
apt/archives/xserver-xorg-video-openchrome_1%3a0.5.0-3_amd64.deb
apt/archives/xserver-xorg-video-qxl_0.1.5-2_amd64.deb
apt/archives/xserver-xorg-video-r128_6.10.2-1_amd64.deb
apt/archives/xserver-xorg-video-radeon_1%3a7.8.0-1+b1_amd64.deb
apt/archives/xserver-xorg-video-savage_1%3a2.3.9-1_amd64.deb
apt/archives/xserver-xorg-video-siliconmotion_1%3a1.7.9-2_amd64.deb
apt/archives/xserver-xorg-video-sisusb_1%3a0.9.7-1_amd64.deb
apt/archives/xserver-xorg-video-tdfx_1%3a1.4.7-1_amd64.deb
apt/archives/xserver-xorg-video-trident_1%3a1.3.8-1_amd64.deb
apt/archives/xserver-xorg-video-vesa_1%3a2.3.4-1+b2_amd64.deb
apt/archives/xserver-xorg-video-vmware_1%3a13.2.1-1+b1_amd64.deb
apt/archives/xserver-xorg_1%3a7.7+19_amd64.deb
apt/archives/partial/
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/es/
man/fi/
man/fr/
man/hu/
man/id/
man/it/
man/ja/
man/ko/
man/nl/
man/pl/
man/pt/
man/pt_BR/
man/ru/
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/
sent 97,728,771 bytes received 1,002 bytes 27,922,792.29 bytes/sec
total size is 287,852,351 speedup is 2.95
[/code]
And the /var/lib/apt/:
[b]# rsync -av --delete var_lib_apt_170623_2336_gdOv/lib/apt/ /var/lib/apt/[/b]
[/code]
sending incremental file list
./
extended_states
listchanges.db
lists/partial/
sent 53,391 bytes received 69 bytes 106,920.00 bytes/sec
total size is 147,305,546 speedup is 2,755.43
#
Appears to be going fine:
...
Selecting previously unselected package libdrm-amdgpu1:amd64.
(Reading database ... 96627 files and directories currently installed.)
Preparing to unpack .../libdrm-amdgpu1_2.4.74-1_amd64.deb ...
Unpacking libdrm-amdgpu1:amd64 (2.4.74-1) ...
Selecting previously unselected package libllvm3.9:amd64.
Preparing to unpack .../libllvm3.9_1%3a3.9.1-9_amd64.deb ...
Unpacking libllvm3.9:amd64 (1:3.9.1-9) ...
Selecting previously unselected package libsensors4:amd64.
Preparing to unpack .../libsensors4_1%3a3.4.0-4_amd64.deb ...
Unpacking libsensors4:amd64 (1:3.4.0-4) ...
Preparing to unpack .../libgl1-mesa-dri_13.0.6-1+b2_amd64.deb ...
Unpacking libgl1-mesa-dri:amd64 (13.0.6-1+b2) over (10.3.2-1+deb8u1) ...
Setting up libdrm-amdgpu1:amd64 (2.4.74-1) ...
Setting up libllvm3.9:amd64 (1:3.9.1-9) ...
Processing triggers for libc-bin (2.24-12) ...
Setting up libsensors4:amd64 (1:3.4.0-4) ...
Setting up libgl1-mesa-dri:amd64 (13.0.6-1+b2) ...
Installing new version of config file /etc/drirc ...
Processing triggers for libc-bin (2.24-12) ...
2017/06/25 06:49:19 Reading config from: /etc/paxrat/paxrat.conf
...
and:
...
Preparing to unpack .../libgtk-3-bin_3.22.12-1_amd64.deb ...
Unpacking libgtk-3-bin (3.22.12-1) over (3.14.5-1+deb8u1) ...
Preparing to unpack .../libgtk2.0-bin_2.24.31-2_amd64.deb ...
Unpacking libgtk2.0-bin (2.24.31-2) over (2.24.25-3+deb8u1) ...
Preparing to unpack .../libgtk2.0-0_2.24.31-2_amd64.deb ...
Unpacking libgtk2.0-0:amd64 (2.24.31-2) over (2.24.25-3+deb8u1) ...
Selecting previously unselected package gtk-update-icon-cache.
Preparing to unpack .../gtk-update-icon-cache_3.22.12-1_amd64.deb ...
Removing 'diversion of /usr/sbin/update-icon-caches to /usr/sbin/update-icon-caches.gtk2 by libgtk-3-bin'
Removing 'diversion of /usr/share/man/man8/update-icon-caches.8.gz to /usr/share/man/man8/update-icon-caches.gtk2.8.gz by libgtk-3-bin'
Unpacking gtk-update-icon-cache (3.22.12-1) ...
Setting up libgtk2.0-0:amd64 (2.24.31-2) ...
Setting up gtk-update-icon-cache (3.22.12-1) ...
Processing triggers for libc-bin (2.24-12) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up libgtk2.0-bin (2.24.31-2) ...
Setting up libgtk-3-bin (3.22.12-1) ...
2017/06/25 06:50:55 Reading config from: /etc/paxrat/paxrat.conf
...
Next post...
title: Updating the Air-Gapped System
and some actual virus removal
---
This is a text that I had prepared three days ago, but hardware failure and complexity of the installation methods that I chose... and, I'm posting this only today... Just bear in mind the delay.
Also the other two topics were prepared three days ago. Sorry for the inconvenience.
---
Air-Gapped Devuan Install, Tentative
https://dev1galaxy.org/viewtopic.php?id=746
sans-dbus, Questions, Tips and Tricks on its Implementation
https://dev1galaxy.org/viewtopic.php?id=761
I'll use the two topics that I have been writing yesterday and today, to make a tip on updating the air-gapped master machine.
Just how many of you users and how often get the feeling, or come to ascertain to be the truth, that after having visited some website, or gone/done something else, whatever, on the internet, that something in your system is not right anymore...
Surely people experiencing escapades like these in their system:
System attacked, Konqueror went on window-popping spree!
https://forums.gentoo.org/viewtopic-t-905472.html
or
Postfix smtp/TLS, Bkp/Cloning Mthd, Censorship/Intrusion
https://forums.gentoo.org/viewtopic-t-9 … ml#7895428
( where find Schmoog and Yooch in (What?) Action )
or
Strange script planted with Bash
https://www.croatiafidelis.hr/foss/cap/ … ange-bash/
( and links from there )
are not so very common, but neither are they (or should I say: you) too rare to come across.
So how about being able to keep your system essentially as it was when you installed it offline, and from a verifiable and highly trusted sources like the Devuan install DVD? As it was in the sense of reliability and verifiability.
Well, I've just made a topic about Air-Gapping Devuan, and I want to make an addition on the actually more laborious and generally at least somewhat time-consuming daily to weekly (which depends on the tasks you do online) routine of updating the Air-Gapped Devuan machine with what you need to keep from the clone of it that you go to internet with.
I'm not going to repeat what I already wrote elsewhere, just show you by example how it can be done.
In fact, there could be at least a somewhat better way of Air-Gapping/Cloning than I do, but only if you can afford it. And that is getting yourself a one-way connection from the air-gapped to the online clone (which reliably does not let any traffick from the clone to happen, some so called one-way <whatever> reportedly mess it up), but I'm so poor at this time that I can't even afford to go and buy me a Lime2 yet, or and extra USB stick...
But even if you have that one way connection which cuts your efforts significantly because with it you can more quickly dd ("man dd") clone you Air-Gapped onto the online machine to completely overwrite the system partitions of the clone... [But even if you have that one way connection], you still need to selectively keep some stuff from the clone which you did whatever you do online with, and save it, and you have to save that stuff before you overwrite the clone clean!... That's the point!
And you have to save that stuff into the Air-Gapped (and some of it possibly elsewhere), so you can have (the part that you need again when you are online) all that which you gathered/downloaded/noted/whatever while you were online, [so you can have it] again, after having archived it, now redeployed, and in good healthy conditions, [so you can have it again] in your online machine, which have been in the meantime, in all other respects, completely recreated from the verifiable state of your Air-Gapped master machine.
So here goes my example of how I do it.
I have just, with a backup script, which you can probably easily figure out how to make a similar one for your needs, made these archives:
# ls -ABRgo
.:
total 928476
-rw-r--r-- 1 2351036 2017-06-24 13:13 Cmn_src_miroR_tshark-hosts-conv_170624_gdO.tar.gz
-rw-r--r-- 1 849401 2017-06-24 13:13 etc_170624_gdO.tar.gz
-rw-r--r-- 1 53011535 2017-06-24 13:16 mr_170624_gdO.tar.gz
-rw-r--r-- 1 18053 2017-06-24 13:15 root_170624_gdO.tar.gz
-rw-r--r-- 1 941 2017-06-24 13:24 SUMS
-rw-r--r-- 1 321 2017-06-24 14:00 SUMS.log
-rw-r--r-- 1 28261 2017-06-24 13:13 ulb_170624_gdO.tar.gz
-rw-r--r-- 1 358059023 2017-06-24 13:14 var_170624_gdO.tar.gz
-rw-r--r-- 1 334447229 2017-06-24 13:24 var_cache_170624_gdO.tar.gz
-rw-r--r-- 1 37119090 2017-06-24 13:23 var_lib_apt_170624_gdO.tar.gz
-rw-r--r-- 1 164830030 2017-06-24 13:15 var_lib_clamav_170624_gdO.tar.gz
-rw-r--r-- 1 13531 2017-06-24 13:16 var_mail_mr_170624_gdO.tar.gz
And now, line by line:
total 928476
That's some more than 900M. But contains likely all that I will need.
And this:
-rw-r--r-- 1 2351036 2017-06-24 13:13 Cmn_src_miroR_tshark-hosts-conv_170624_gdO.tar.gz
is my update of the:
https://github.com/miroR/tshark-hosts-c … ag/v0.99.2
That one actually is not on the system partition. But it is important to me.
This is entire /etc :
-rw-r--r-- 1 849401 2017-06-24 13:13 etc_170624_gdO.tar.gz
Not entire /home/mr, but stuff that I likely don't need, I put in a /home/mr/SOME-DIR and I add " --exlude=SOME-DIR when I tar czf the /home/mr :
-rw-r--r-- 1 53011535 2017-06-24 13:16 mr_170624_gdO.tar.gz
50M is not so much, lots of recesses and angles in there need to be perused for copying or, after untar'ing, rsyncing into the master's /home/mr/ ...
The /root, a must for archiving of course:
-rw-r--r-- 1 18053 2017-06-24 13:15 root_170624_gdO.tar.gz
The SUMS, just sha256, absolutely must match. There are no excuses there!
-rw-r--r-- 1 941 2017-06-24 13:24 SUMS
-rw-r--r-- 1 321 2017-06-24 14:00 SUMS.log
Ah, the new scripts that I realized that I needed for the online... :
-rw-r--r-- 1 28261 2017-06-24 13:13 ulb_170624_gdO.tar.gz
The /var . I keep the logs!
-rw-r--r-- 1 358059023 2017-06-24 13:14 var_170624_gdO.tar.gz
No stinking idiot is going to be telling me that I spam, like the idiots from my local providers invented that I did, and never replied when that alleged spamming happened!
https://forums.gentoo.org/viewtopic-t-9 … ml#7682770
This one (and the next one below):
-rw-r--r-- 1 334447229 2017-06-24 13:24 var_cache_170624_gdO.tar.gz
will very likely suffice, in the future (I mean two like those), instead of all my exercize in the earlier topic, the yesterday's one:
Air-Gapped Devuan Install, Tentative
But the principles behind all of this Air-Gapping tentative remain very well like I explained in it...
See my note at the item just above, it applies to this item too:
-rw-r--r-- 1 37119090 2017-06-24 13:23 var_lib_apt_170624_gdO.tar.gz
And this is simply /var/lib/clamav . Obviously necessary.
-rw-r--r-- 1 164830030 2017-06-24 13:15 var_lib_clamav_170624_gdO.tar.gz
And this is also necessary, else the system mail (root's as well, which goes to user mr, I will reconfigure this, but currently it would be lost if I don't copy this over into the mbox /var/mail/mr ofthe Air-Gapped system.
-rw-r--r-- 1 13531 2017-06-24 13:16 var_mail_mr_170624_gdO.tar.gz
But I can't go straight into updating my Air-Gapped with this stuff. First I want to check these with clamav. And I'll do that in the cloned machine. Less of a risk, because there is no such perfection with the intruders either, my cloned machine is likely not just yet and already compromised again... Because intrusions always show their disorderly signs, only less and less obvious ones as our times roll into the future... Those blackhats are getting ever smarter, only not that smart, I hope... Do compare the difference in the obviousness of the intrusions in the three links at the top! And the last, the latest would have become pretty bad and dangerous, maybe the most dangerous of the three. Except that... I don't use that system any more... for that reason.
So I want to check these with clamav. And in the cloned machine (notice that I write in the Air-Gapped, and but for that task and little else if anything, no other work I do in the cloned machine, until it is completely overwritten with the master dd dumps, updated master dd dumps of course)...
[And in the cloned machine] I'll run:
# for i in $(ls -1 *.tar.gz); do ls -l $i; tar tf $i | head -5; read FAKE; done ;
which is preliminary to see what I would get, and then:
# for i in $(ls -1 *.tar.gz); do ls -l $i; tar xf $i | head -5; read FAKE; done ;
( see 's/t/x/' there ).
And then:
# mkdir CHECK
# mv -iv */ CHECK/
and finally:
# clamscan -r -i CHECK /var/log/clamav/clamscan_$(date +%y%m%d_%H%M)_the_update.log
I am aware that this does not check it, say, for rootkits, but I'm very much afraid that the rootkits are more in the wild than what rkhunter is aware of...
And, anyway, who can protect you from stuff like this? Have a look:
phpBB Strange White Space problem
https://forums.gentoo.org/viewtopic-t-1 … ml#7838702
where my scripts that I had posted couldn't possibly work anymore because, as I elude, for peaceful euphemism, was the phpBB fault... And it consisted in replacing the plain ASCII 0x20 SPACE, with Unicode's:
U+00A0 c2 a0 NO-BREAK SPACE
But I sincerely hope such treason and bias, to the level of doing harm to members of your own community is not going to develop in Devuan community. I hope... I do hope, even knowing that the most known person in the history of the world lived with a traitor nearby, till the final betrayal, and torture and death...
But, we're all doing what we can.
Clamav found something and this is how I updated it (of course, the options were first: " -nav --delete", and only then the below):
# rsync -av /mnt/h_Ref2/170624_Add/170624_gdO/ /Cmn/m/B/170624_gdO/
sending incremental file list
./
clamscan_170624_1530_the_update.log
clamscan_170624_1608_the_update.log
clamscan_170624_1654_clean.log
history_170624_1700_gdOv
mr_170624_gdO_CLEAN.tar.gz
sent 52,766,884 bytes received 114 bytes 11,725,999.56 bytes/sec
total size is 1,003,486,450 speedup is 19.02
#
The 4 founds are all from the idiotic provider of mine (
T-com, privitized with the stolen moneys by former yugoslavian regime worst people in power that plundered the country around the time that Croatia gained independence from that despicable conglomerate-state, which (renamed "Croatian" T-com) is only nominally German-owned company, the German T-com being a way to launder money for the real shareholders...
This firm holds some 80% of share of the market in Croatia by sly and brute force means even though provides worst kind of service, and it may be hard to switch away from and go to some other provider)...
And a company of such stature affords to send these viri --how can a respectable mail server non detect these?... I never, I'll repeat: never, got any virus from https://www.plus.hr who host my www.CroatiaFidelis.hr NGO domain, and my miro.rovis @ <that domain> email address-- ...
So, these the 4 founds, all from that idiotic provider of mine:
# cat clamscan_170624_1608_the_update.log
HECK/mr/Maildir/.miroslavrovis1@zghthr.ththr-spam/new/1497451388.M191923P916V000000000000FC00I000000000030BC1B_0.gd0v,S=84115: Doc.Downloader.Jaff-6329915-0 FOUND
CHECK/mr/Maildir/.miroslavrovis1@zghthr.ththr-spam/new/1496056154.M304798P16485V000000000000FC00I000000000030B385_0.gd0v,S=95520: Doc.Downloader.Jaff-6329915-0 FOUND
CHECK/mr/Maildir/.miroslavrovis1@zghthr.ththr-spam/new/1497451396.M540165P1455V000000000000FC00I000000000030BC21_0.gd0v,S=84727: Doc.Downloader.Jaff-6329914-0 FOUND
CHECK/mr/Maildir/.miroslavrovis1@zghthr.ththr-spam/cur/1495636729.M683899P30849V000000000000FC00I000000000030B15C_0.gd0v,S=100000:2,: Doc.Downloader.Jaff-6329915-0 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 6298541
Engine version: 0.99.2
Scanned directories: 940
Scanned files: 7214
Infected files: 4
Data scanned: 1036.48 MB
Data read: 1031.12 MB (ratio 1.01:1)
Time: 321.662 sec (5 m 21 s)
That means I first had to remove those exact files (now's actual paste from the history_1706xxx above --because I may have made a mistake, and will have a question related to it):
754 ls -l $(cat /var/log/clamav/clamscan_170624_1608_the_update.log | grep FOUND | sed 's/: Doc\.Downloader\.Jaff-6329914-0 FOUND//' | sed 's/: Doc\.Downloader\.Jaff-6329915-0 FOUND//')
755 for i in $(ls -1 $(cat /var/log/clamav/clamscan_170624_1608_the_update.log | grep FOUND | sed 's/: Doc\.Downloader\.Jaff-6329914-0 FOUND//' | sed 's/: Doc\.Downloader\.Jaff-6329915-0 FOUND//')); do clamscan -r -i - ; done ;
756 for i in $(ls -1 $(cat /var/log/clamav/clamscan_170624_1608_the_update.log | grep FOUND | sed 's/: Doc\.Downloader\.Jaff-6329914-0 FOUND//' | sed 's/: Doc\.Downloader\.Jaff-6329915-0 FOUND//')); do cat $i | clamscan -r -i - ; done ;
757 ls -l $(cat /var/log/clamav/clamscan_170624_1608_the_update.log | grep FOUND | sed 's/: Doc\.Downloader\.Jaff-6329914-0 FOUND//' | sed 's/: Doc\.Downloader\.Jaff-6329915-0 FOUND//')
758 mkdir Test/
759 mv -vi $(cat /var/log/clamav/clamscan_170624_1608_the_update.log | grep FOUND | sed 's/: Doc\.Downloader\.Jaff-6329914-0 FOUND//' | sed 's/: Doc\.Downloader\.Jaff-6329915-0 FOUND//') Test/
760 ls -l Test/
761 clamscan -r -i Test/
762 clamscan -r -i Test/
763 bg
764 ls -l Test/
765 ls -lh Test/
766 cat /var/log/clamav/clamscan_170624_1608_the_update.log
767 clamscan -r -i CHECK/mr/Maildir/.miroslavrovis1\@zghthr.ththr-spam/ |& tee /var/log/clamav/clamscan_$(date +%y%m%d_%H%M)_clean.log
768 bg
769 ls -l
770 ls -l CHECK/mr/
771 cd CHECK/
772 tar tf ../mr_170624_gdO.tar.gz | head -5
773 tar czf ../mr_170624_gdO_CLEAN.tar.gz mr/
774 ls -l ../mr_170624_gdO.tar.gz ../mr_170624_gdO_CLEAN.tar.gz
775 history > ../history_$(date +%y%m%d_%H%M)_$(hostname)
If anyone can follow above, my question is, was the line that contains:
cat $i | clamscan -r -i -
right... I wanted to check if it found anything... But I'm not an expert. Maybe to cat a contaminated file is bad... And also how bad are these? But if it's too much I'm asking, forget it...
Anyway, the rest is removing those, and making the CLEAN archive.
Really glad I didn't try it in the master Air-Gap machine, on the other hand! Phew!
I forgot I should have expected to find stull like this. Possibly there is a break necessary now with this topic. Also because I'm struggling to make the other two topics this day, so I don't have to change the "today"s which I already wrote in the prepared texts.
But I guess the example is already mostly clear...
Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
adwaita-icon-theme aspell aspell-en at-spi2-core autopoint ca-certificates
ca-certificates-java clearlooks-phenix-purpy-theme cups-bsd cups-client
cups-common dconf-gsettings-backend dconf-service default-jre
default-jre-headless desktop-base dh-python dictionaries-common
dmz-cursor-theme docbook-xml docutils-common docutils-doc dosfstools
emacsen-common evince-common evince-gtk expect firefox-esr fonts-droid
fonts-sil-gentium fuse geoip-database geoip-database-extra ghostscript
giblib1 glib-networking glib-networking-common glib-networking-services
gnome-icon-theme gnome-icon-theme-symbolic gsettings-desktop-schemas gsfonts
gsfonts-x11 gstreamer1.0-libav gstreamer1.0-plugins-base
gstreamer1.0-plugins-good gstreamer1.0-x gtk2-engines hicolor-icon-theme
hunspell-en-us i965-va-driver iamerican ibritish ienglish-common iso-codes
ispell java-common javascript-common libaacs0 libabw-0.1-1 libarchive13
libasound2-plugins libaspell15 libasprintf-dev libasprintf0c2
batk-bridge2.0-0 libatk-wrapper-java libatk-wrapper-java-jni libatspi2.0-0
libauthen-sasl-perl libavcodec56 libavformat56 libavresample2 libavutil54
libbdplus0 libcairo-gobject2 libcairo-perl libcanberra0 libcdparanoia0
libcolord2 libcupsfilters1 libcupsimage2 libdjvulibre-text libdjvulibre21
libdrm-intel1 libdrm-nouveau2 libdrm-radeon1 libe-book-0.1-1
libegl1-mesa-drivers libencode-locale-perl libepoxy0 libept1.4.12
libevdocument3-4 libevview3-3 libfile-basedir-perl libfile-desktopentry-perl
libfile-listing-perl libfile-mimeinfo-perl libfont-afm-perl libfontenc1
libgconf2-4 libgettextpo-dev libgettextpo0 libgif4 libgl1-mesa-dri
libglib-perl libglib2.0-data libgs9 libgs9-common
libgstreamer-plugins-base1.0-0 libgstreamer1.0-0 libgtk-3-0 libgtk-3-bin
libgtk-3-common libgtk2-perl libgtk2.0-bin libgxps2 libhsqldb1.8.0-java
libhtml-form-perl libhtml-format-perl libhtml-parser-perl
libhtml-tagset-perl libhtml-tree-perl libhttp-cookies-perl
libhttp-daemon-perl libhttp-date-perl libhttp-message-perl
libhttp-negotiate-perl libhunspell-1.3-0 libijs-0.35 libio-html-perl
libio-socket-ip-perl libio-socket-ssl-perl libjasper1 libjbig2dec0
libjson-glib-1.0-0 libjson-glib-1.0-common libkpathsea6
liblwp-mediatypes-perl liblwp-protocol-https-perl libmailtools-perl
libmpdec2 libnet-dbus-perl libnet-http-perl libnet-smtp-ssl-perl
libnet-ssleay-perl libopenvg1-mesa liborc-0.4-0 libpam-cap libpango-perl
libpaper-utils libpaper1 libparted2 libpciaccess0 libpcsclite1
libperl4-corelibs-perl libpoppler-glib8 libpython3-stdlib libpython3.5
libpython3.5-minimal libpython3.5-stdlib libqgsttools-p1
libqt5multimedia5-plugins libqt5multimediawidgets5 libqt5opengl5 libqt5svg5
librarian0 libreoffice-avmedia-backend-gstreamer libreoffice-java-common
libreoffice-math libreoffice-sdbc-hsqldb libreoffice-writer librest-0.7-0
librsvg2-common libsasl2-modules libschroedinger-1.0-0 libsctp1 libshout3
libsoup-gnome2.4-1 libsoup2.4-1 libspectre1 libspeexdsp1 libtag1-vanilla
libtag1c2a libtie-ixhash-perl libtimedate-perl libtxc-dxtn-s2tc0 liburi-perl
libutempter0 libuuid-perl libv4l-0 libv4lconvert0 libvisual-0.4-0
libvisual-0.4-plugins libvpx1 libvte-2.90-9 libvte-2.90-common libwacom-bin
libwebp5 libwebpdemux1 libwebpmux1 libwww-perl libwww-robotrules-perl
libx11-protocol-perl libx264-142 libxapian22 libxatracker2 libxfont1
libxkbfile1 libxml-parser-perl libxml-sax-expat-perl libxml-twig-perl
libxml-xpathengine-perl lsb-release mate-icon-theme mesa-utils openjdk-7-jre
openjdk-7-jre-headless os-prober parted paxctl perl-openssl-defaults
poppler-data poppler-utils postfix-sqlite powermgmt-base psmisc python-cairo
python-docutils python-gobject-2 python-gtk2 python-numpy python-pil
python-pygments python-roman python-xdg python3 python3-minimal python3-uno
python3.5 python3.5-minimal qt5-gtk-platformtheme qttranslations5-l10n
rarian-compat rename scrot sgml-base sgml-data synaptic tango-icon-theme
tcl-expect tcpd tzdata-java util-linux-locales va-driver-all vdpau-va-driver
x11-utils x11-xkb-utils xbitmaps xdg-user-dirs xfonts-base xfonts-encodings
xfonts-utils xml-core xorg-docs-core xserver-common xserver-xorg
xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
xserver-xorg-input-mouse xserver-xorg-input-synaptics
xserver-xorg-input-vmmouse xserver-xorg-input-wacom xserver-xorg-video-all
xserver-xorg-video-ati xserver-xorg-video-cirrus xserver-xorg-video-fbdev
xserver-xorg-video-intel xserver-xorg-video-mach64 xserver-xorg-video-mga
xserver-xorg-video-modesetting xserver-xorg-video-neomagic
xserver-xorg-video-nouveau xserver-xorg-video-openchrome
xserver-xorg-video-qxl xserver-xorg-video-r128 xserver-xorg-video-radeon
xserver-xorg-video-savage xserver-xorg-video-siliconmotion
xserver-xorg-video-sisusb xserver-xorg-video-tdfx xserver-xorg-video-trident
xserver-xorg-video-vesa xserver-xorg-video-vmware xterm
Use 'apt autoremove' to remove them.
The following packages have been kept back:
adwaita-icon-theme apt-listchanges bind9-host cpp default-jre
default-jre-headless dnsutils evince-common evince-gtk file firefox-esr
gnome-icon-theme gnupg gnupg-agent gnupg2 gstreamer1.0-plugins-good
initramfs-tools isc-dhcp-client isc-dhcp-common libasprintf-dev libatomic1
libclamav7 libcloog-isl4 libcurl3 libcurl3-gnutls libevdocument3-4
libevview3-3 libfile-basedir-perl libgcc1 libgl1-mesa-dri libgomp1
libgtk-3-bin libgtk2.0-0 libgtk2.0-bin libhsqldb1.8.0-java libldap-2.4-2
libmagic1 libpoppler-glib8 libquadmath0 libstdc++6 libxatracker2
linux-image-amd64 lp-solve mate-icon-theme mutt nfs-common obconf openbox
pinentry-gtk2 poppler-utils procps python-debianbts python-pil reportbug
rsyslog synaptic tzdata vim vim-common vim-runtime vim-tiny wget xpdf
xserver-xorg xserver-xorg-core xserver-xorg-input-all
xserver-xorg-input-evdev xserver-xorg-input-mouse
xserver-xorg-input-synaptics xserver-xorg-input-wacom xserver-xorg-video-all
xserver-xorg-video-ati xserver-xorg-video-cirrus xserver-xorg-video-fbdev
xserver-xorg-video-intel xserver-xorg-video-mach64 xserver-xorg-video-mga
xserver-xorg-video-neomagic xserver-xorg-video-nouveau
xserver-xorg-video-openchrome xserver-xorg-video-qxl xserver-xorg-video-r128
xserver-xorg-video-radeon xserver-xorg-video-savage
xserver-xorg-video-siliconmotion xserver-xorg-video-sisusb
xserver-xorg-video-tdfx xserver-xorg-video-trident xserver-xorg-video-vesa
xserver-xorg-video-vmware
The following packages will be upgraded:
aptitude-common ghostscript gpgv kmod libc-bin libc-l10n libc6
libdirectfb-1.2-9 libexpat1 libgcrypt20 libgs9 libgs9-common
libio-socket-ssl-perl libkmod2 libmpg123-0 libmwaw-0.3-3 libnspr4 libnss3
libpng16-16 libpython3.5 libpython3.5-minimal libpython3.5-stdlib
libsnappy1v5 libtasn1-6 libusb-0.1-4 libv4l-0 libv4lconvert0 libvdpau1
libwacom-bin libwacom-common libwacom2 libwavpack1 libwps-0.4-4 locales
multiarch-support os-prober postfix postfix-doc postfix-sqlite psmisc
python3.5 python3.5-minimal xserver-common
43 upgraded, 0 newly installed, 0 to remove and 90 not upgraded.
Need to get 0 B/34.8 MB of archives.
After this operation, 10.3 MB of additional disk space will be used.
Do you want to continue? [Y/n] Y
I'll hit Enter...
Reading changelogs...
ghostscript (9.15~dfsg-1) unstable; urgency=medium
* Licensing changed to GNU Affero General Public License (AGPL).
Please ensure that all use complies with this new license.
-- Jonas Smedegaard <dr@jones.dk> Sun, 26 Jul 2015 17:34:11 +0200
apt-listchanges: Mailing root: apt-listchanges: news for gdOv
Extracting templates from packages: 100%
Preconfiguring packages ...
(Reading database ... 96341 files and directories currently installed.)
Preparing to unpack .../libc6_2.24-12_amd64.deb ...
Unpacking libc6:amd64 (2.24-12) over (2.24-11) ...
Setting up libc6:amd64 (2.24-12) ...
(Reading database ... 96341 files and directories currently installed.)
Preparing to unpack .../libc-bin_2.24-12_amd64.deb ...
Unpacking libc-bin (2.24-12) over (2.24-11) ...
Setting up libc-bin (2.24-12) ...
Updating /etc/nsswitch.conf to current default.
(Reading database ... 96341 files and directories currently installed.)
Preparing to unpack .../0-libexpat1_2.2.1-1_amd64.deb ...
Unpacking libexpat1:amd64 (2.2.1-1) over (2.2.0-2) ...
Preparing to unpack .../1-libpython3.5_3.5.3-3_amd64.deb ...
Unpacking libpython3.5:amd64 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../2-python3.5_3.5.3-3_amd64.deb ...
Unpacking python3.5 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../3-python3.5-minimal_3.5.3-3_amd64.deb ...
Unpacking python3.5-minimal (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../4-libpython3.5-stdlib_3.5.3-3_amd64.deb ...
Unpacking libpython3.5-stdlib:amd64 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../5-libpython3.5-minimal_3.5.3-3_amd64.deb ...
Unpacking libpython3.5-minimal:amd64 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../6-multiarch-support_2.24-12_amd64.deb ...
Unpacking multiarch-support (2.24-12) over (2.24-11) ...
Setting up multiarch-support (2.24-12) ...
(Reading database ... 96342 files and directories currently installed.)
Preparing to unpack .../libgcrypt20_1.7.7-2_amd64.deb ...
Unpacking libgcrypt20:amd64 (1.7.7-2) over (1.7.6-2) ...
Setting up libgcrypt20:amd64 (1.7.7-2) ...
(Reading database ... 96342 files and directories currently installed.)
Preparing to unpack .../gpgv_2.1.18-8_amd64.deb ...
Unpacking gpgv (2.1.18-8) over (2.1.18-6) ...
Setting up gpgv (2.1.18-8) ...
(Reading database ... 96342 files and directories currently installed.)
Preparing to unpack .../00-kmod_24-1_amd64.deb ...
Unpacking kmod (24-1) over (23-2) ...
Preparing to unpack .../01-libkmod2_24-1_amd64.deb ...
Unpacking libkmod2:amd64 (24-1) over (23-2) ...
Preparing to unpack .../02-libc-l10n_2.24-12_all.deb ...
Unpacking libc-l10n (2.24-12) over (2.24-11) ...
Preparing to unpack .../03-libtasn1-6_4.12-2_amd64.deb ...
Unpacking libtasn1-6:amd64 (4.12-2) over (4.10-1.1) ...
Preparing to unpack .../04-locales_2.24-12_all.deb ...
Unpacking locales (2.24-12) over (2.24-11) ...
Preparing to unpack .../05-aptitude-common_0.8.8-1_all.deb ...
Unpacking aptitude-common (0.8.8-1) over (0.8.7-1) ...
Preparing to unpack .../06-libpng16-16_1.6.29-3_amd64.deb ...
Unpacking libpng16-16:amd64 (1.6.29-3) over (1.6.28-1) ...
Preparing to unpack .../07-ghostscript_9.20~dfsg-3.2_amd64.deb ...
Unpacking ghostscript (9.20~dfsg-3.2) over (9.06~dfsg-2+deb8u5) ...
Preparing to unpack .../08-libgs9_9.20~dfsg-3.2_amd64.deb ...
Unpacking libgs9:amd64 (9.20~dfsg-3.2) over (9.06~dfsg-2+deb8u5) ...
Preparing to unpack .../09-libgs9-common_9.20~dfsg-3.2_all.deb ...
Unpacking libgs9-common (9.20~dfsg-3.2) over (9.06~dfsg-2+deb8u5) ...
Preparing to unpack .../10-libdirectfb-1.2-9_1.2.10.0-9_amd64.deb ...
Unpacking libdirectfb-1.2-9:amd64 (1.2.10.0-9) over (1.2.10.0-8) ...
Preparing to unpack .../11-libio-socket-ssl-perl_2.049-1_all.deb ...
Unpacking libio-socket-ssl-perl (2.049-1) over (2.044-1) ...
Preparing to unpack .../12-libmpg123-0_1.25.0-1_amd64.deb ...
Unpacking libmpg123-0:amd64 (1.25.0-1) over (1.23.8-1+b1) ...
Preparing to unpack .../13-libmwaw-0.3-3_0.3.11-3_amd64.deb ...
Unpacking libmwaw-0.3-3:amd64 (0.3.11-3) over (0.3.9-2) ...
Preparing to unpack .../14-libnspr4_2%3a4.15-1_amd64.deb ...
Unpacking libnspr4:amd64 (2:4.15-1) over (2:4.12-6) ...
Preparing to unpack .../15-libnss3_2%3a3.31-1_amd64.deb ...
Unpacking libnss3:amd64 (2:3.31-1) over (2:3.26.2-1.1) ...
Preparing to unpack .../16-libusb-0.1-4_2%3a0.1.12-31_amd64.deb ...
Unpacking libusb-0.1-4:amd64 (2:0.1.12-31) over (2:0.1.12-30) ...
Preparing to unpack .../17-libv4l-0_1.12.5-1_amd64.deb ...
Unpacking libv4l-0:amd64 (1.12.5-1) over (1.12.3-1) ...
Preparing to unpack .../18-libv4lconvert0_1.12.5-1_amd64.deb ...
Unpacking libv4lconvert0:amd64 (1.12.5-1) over (1.12.3-1) ...
Preparing to unpack .../19-libvdpau1_1.1.1-6_amd64.deb ...
Unpacking libvdpau1:amd64 (1.1.1-6) over (0.8-3+deb8u2) ...
Preparing to unpack .../20-libwacom2_0.24-1_amd64.deb ...
Unpacking libwacom2:amd64 (0.24-1) over (0.22-1+b1) ...
Preparing to unpack .../21-libwacom-common_0.24-1_all.deb ...
Unpacking libwacom-common (0.24-1) over (0.22-1) ...
Preparing to unpack .../22-libwacom-bin_0.24-1_amd64.deb ...
Unpacking libwacom-bin (0.24-1) over (0.22-1+b1) ...
Preparing to unpack .../23-libwavpack1_5.1.0-1_amd64.deb ...
Unpacking libwavpack1:amd64 (5.1.0-1) over (5.0.0-2) ...
Preparing to unpack .../24-libwps-0.4-4_0.4.6-2_amd64.deb ...
Unpacking libwps-0.4-4:amd64 (0.4.6-2) over (0.4.5-1) ...
Preparing to unpack .../25-psmisc_23.1-1_amd64.deb ...
Unpacking psmisc (23.1-1) over (22.21-2.1+b2) ...
Preparing to unpack .../26-xserver-common_2%3a1.19.3-1_all.deb ...
Unpacking xserver-common (2:1.19.3-1) over (2:1.19.2-1) ...
Preparing to unpack .../27-libsnappy1v5_1.1.4-2_amd64.deb ...
Unpacking libsnappy1v5:amd64 (1.1.4-2) over (1.1.3-3) ...
Preparing to unpack .../28-os-prober_1.75_amd64.deb ...
Unpacking os-prober (1.75) over (1.65) ...
Preparing to unpack .../29-postfix_3.2.2-1_amd64.deb ...
Removing sqlite map entry from /etc/postfix/dynamicmaps.cf
[ ok ] Stopping Postfix Mail Transport Agent: postfix.
[ ok ] Stopping Postfix Mail Transport Agent: postfix.
Unpacking postfix (3.2.2-1) over (3.1.4-7) ...
Preparing to unpack .../30-postfix-doc_3.2.2-1_all.deb ...
Unpacking postfix-doc (3.2.2-1) over (3.1.4-7) ...
Preparing to unpack .../31-postfix-sqlite_3.2.2-1_amd64.deb ...
Unpacking postfix-sqlite (3.2.2-1) over (3.1.4-7) ...
Setting up libgs9-common (9.20~dfsg-3.2) ...
Setting up libexpat1:amd64 (2.2.1-1) ...
Setting up libmwaw-0.3-3:amd64 (0.3.11-3) ...
Setting up xserver-common (2:1.19.3-1) ...
Setting up libwacom-common (0.24-1) ...
Setting up libwacom2:amd64 (0.24-1) ...
Setting up psmisc (23.1-1) ...
Processing triggers for mime-support (3.60) ...
Setting up libpng16-16:amd64 (1.6.29-3) ...
Setting up libwavpack1:amd64 (5.1.0-1) ...
Setting up libv4lconvert0:amd64 (1.12.5-1) ...
Setting up libdirectfb-1.2-9:amd64 (1.2.10.0-9) ...
Setting up libvdpau1:amd64 (1.1.1-6) ...
Processing triggers for menu (2.1.47+b1) ...
Setting up os-prober (1.75) ...
Setting up libnspr4:amd64 (2:4.15-1) ...
Setting up libkmod2:amd64 (24-1) ...
Setting up libio-socket-ssl-perl (2.049-1) ...
Setting up aptitude-common (0.8.8-1) ...
Setting up libtasn1-6:amd64 (4.12-2) ...
Setting up libwacom-bin (0.24-1) ...
Setting up postfix-doc (3.2.2-1) ...
Processing triggers for libc-bin (2.24-12) ...
Setting up libsnappy1v5:amd64 (1.1.4-2) ...
Setting up libc-l10n (2.24-12) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up libwps-0.4-4:amd64 (0.4.6-2) ...
Setting up libmpg123-0:amd64 (1.25.0-1) ...
Setting up libgs9:amd64 (9.20~dfsg-3.2) ...
Setting up libusb-0.1-4:amd64 (2:0.1.12-31) ...
Setting up locales (2.24-12) ...
Generating locales (this might take a while)...
en_GB.UTF-8... done
Generation complete.
Setting up postfix (3.2.2-1) ...
Installing new version of config file /etc/postfix/makedefs.out ...
[ ok ] Starting Postfix Mail Transport Agent: postfix.
Postfix (main.cf) configuration was untouched. If you need to make changes,
edit /etc/postfix/main.cf (and others) as needed. To view Postfix
configuration values, see postconf(1).
After modifying main.cf, be sure to run 'service postfix reload'.
Running newaliases
[ ok ] Stopping Postfix Mail Transport Agent: postfix.
[ ok ] Starting Postfix Mail Transport Agent: postfix.
Setting up libpython3.5-minimal:amd64 (3.5.3-3) ...
Setting up kmod (24-1) ...
Setting up libv4l-0:amd64 (1.12.5-1) ...
Setting up libpython3.5-stdlib:amd64 (3.5.3-3) ...
Setting up libnss3:amd64 (2:3.31-1) ...
Setting up ghostscript (9.20~dfsg-3.2) ...
Setting up python3.5-minimal (3.5.3-3) ...
Setting up postfix-sqlite (3.2.2-1) ...
Adding sqlite map entry to /etc/postfix/dynamicmaps.cf
Setting up python3.5 (3.5.3-3) ...
Setting up libpython3.5:amd64 (3.5.3-3) ...
Processing triggers for libc-bin (2.24-12) ...
2017/06/24 21:36:52 Reading config from: /etc/paxrat/paxrat.conf
#
Phew! It will all probably work... Phew!
So that is the way to air-gap update Devuan. It is.
A few more steps to go.
But pls. bear in mind all these pastes/logs were taken three days ago now... And that this is part of a broader installation tinkering, as explained in the first post.
I wrote most of the posts that I will hopefully be posting only today, up to three days from now... But, some things I found new information about, and I will likely be making a change to include some even better methods which I haven't known about previously, and which while they do not pertain to Air-Gapping, are related in the way that those are also methods for freedom and security...
(
such as:
Installing to existing partitions/mount? Full disk encrypt? Feedback.
https://dev1galaxy.org/viewtopic.php?id=559
and:
http://www.pavelkogan.com/2015/01/25/li … ncryption/
)
But I do need to post what I have done so far... Namely, at the time of posting this, I am indeed browsing and using my fully functional Devuan that I have cloned from Air-Gapped master. What I used previously, such as for posting of the first post of this topic, is gone, and it is gone every bit of it.
Every bit of it, except what I introduced from it, just the necessary small fraction of what I needed from the internet...
And that is Air-Gapping, gentle reader.
--------------------------------------------------
The rest of this post I wrote, as you can see by the timestamps, three days ago. I only filled it with links, and corrected the typoes today, as well as after I created another topic about sans-dbus and added the link to further below.
ls -ABgotr | grep var_lib_apt
-rw-r--r-- 1 125317120 2017-06-23 13:49 var_lib_apt_170623_1349_gdOvm.tar
-rw-r--r-- 1 125317120 2017-06-23 14:45 var_lib_apt_170623_1445_gdOv.tar
drwxr-xr-x 3 4096 2017-06-23 15:08 var_lib_apt_170623_1445
drwxr-xr-x 3 4096 2017-06-23 15:09 var_lib_apt_170623_1349m
-rw-r--r-- 1 147333120 2017-06-23 22:32 var_lib_apt_170623_2232_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 22:33 var_lib_apt_170623_2233_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 22:47 var_lib_apt_170623_2247_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 22:54 var_lib_apt_170623_2254_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 23:21 var_lib_apt_170623_2321_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 23:23 var_lib_apt_170623_2323_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 23:25 var_lib_apt_170623_2325_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-23 23:27 var_lib_apt_170623_2327_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-23 23:31 var_lib_apt_170623_2331_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-23 23:36 var_lib_apt_170623_2336_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-23 23:47 var_lib_apt_170623_2347_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-24 00:05 var_lib_apt_170624_0005_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-24 00:11 var_lib_apt_170624_0011_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-24 00:21 var_lib_apt_170624_0021_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-24 00:23 var_lib_apt_170624_0023_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-24 00:26 var_lib_apt_170624_0026_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-24 09:09 var_lib_apt_170624_0909_gdOv.tar
-rw-r--r-- 1 147322880 2017-06-24 09:12 var_lib_apt_170624_0912_gdOv.tar
---
ls -ABgotr | grep var_cache
-rw-r--r-- 1 164352000 2017-06-23 13:53 var_cache_170623_1352_gdOvm.tar
drwxr-xr-x 3 4096 2017-06-23 15:42 var_cache_170623_1352m
-rw-r--r-- 1 164352000 2017-06-23 15:43 var_cache_170623_1543_gdOv.tar
drwxr-xr-x 3 4096 2017-06-23 15:44 var_cache_170623_1543
-rw-r--r-- 1 194324480 2017-06-23 22:32 var_cache_170623_2231_gdOv.tar
-rw-r--r-- 1 194324480 2017-06-23 22:33 var_cache_170623_2233_gdOv.tar
-rw-r--r-- 1 194324480 2017-06-23 22:47 var_cache_170623_2247_gdOv.tar
-rw-r--r-- 1 194324480 2017-06-23 22:54 var_cache_170623_2254_gdOv.tar
-rw-r--r-- 1 240988160 2017-06-23 23:22 var_cache_170623_2322_gdOv.tar
-rw-r--r-- 1 243005440 2017-06-23 23:23 var_cache_170623_2323_gdOv.tar
-rw-r--r-- 1 244439040 2017-06-23 23:25 var_cache_170623_2325_gdOv.tar
-rw-r--r-- 1 252825600 2017-06-23 23:27 var_cache_170623_2327_gdOv.tar
-rw-r--r-- 1 288133120 2017-06-23 23:31 var_cache_170623_2331_gdOv.tar
-rw-r--r-- 1 288133120 2017-06-23 23:36 var_cache_170623_2336_gdOv.tar
-rw-r--r-- 1 295301120 2017-06-23 23:47 var_cache_170623_2347_gdOv.tar
-rw-r--r-- 1 295280640 2017-06-24 00:05 var_cache_170624_0005_gdOv.tar
-rw-r--r-- 1 295833600 2017-06-24 00:11 var_cache_170624_0011_gdOv.tar
-rw-r--r-- 1 370186240 2017-06-24 00:21 var_cache_170624_0021_gdOv.tar
-rw-r--r-- 1 370186240 2017-06-24 00:23 var_cache_170624_0023_gdOv.tar
-rw-r--r-- 1 370186240 2017-06-24 00:26 var_cache_170624_0026_gdOv.tar
-rw-r--r-- 1 370329600 2017-06-24 09:09 var_cache_170624_0909_gdOv.tar
-rw-r--r-- 1 371046400 2017-06-24 09:12 var_cache_170624_0912_gdOv.tar
---
And I'm crossing the thick gap of air now, taking these archives, as well as this text file, with me, into my master Air-Gapped machine.
Ah, the thick gap of air that only the Schmoog and such can surreptitiously traverse with stuff like your appliances communicating btwn themselves via out-of-band audio and whatever other witchcraft-like methods that they needed the poetterware for in the GNU/Linux FOSS --to accomodate for global bulk collection (== mass surveillance) just as they are accomodated for in M$ and Shmapple Schmac--, to subvert and conrol the FOSS just as well as they do those... But that is a different matter. A topic of its own it deserves. Pertaining here only inasmuch as: sans-systemd, sans-dbus, sans-*kit, sans-pulse --and other poetterware and relatives-- and you're much much safer from all the schmoogs of the world's intrusions.
But I had to go back over the streams-of-elecrons-resistant gap, because I forgot the logs! I logged what each and every apt- command did! Here:
$ ls -ABgo /mnt/h_Ref/170624/
total 7544916
-rw-r--r-- 1 3375 2017-06-24 11:00 Dev1_170624_Ascii.txt
-rw-r--r-- 1 788480 2017-06-24 11:30 LOG.tar
-rw-r--r-- 1 194324480 2017-06-23 22:32 var_cache_170623_2231_gdOv.tar
...
-rw-r--r-- 1 370186240 2017-06-24 00:23 var_cache_170624_0023_gdOv.tar
...
-rw-r--r-- 1 371046400 2017-06-24 09:12 var_cache_170624_0912_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 22:32 var_lib_apt_170623_2232_gdOv.tar
...
where the LOG.tar untars (very much shortened) as:
# tar tf /mnt/h_Ref/170624/LOG.tar
LOG_/
LOG_/apt-get_install-f_170624_0011_gdOv.log
LOG_/apt-cache_search_libevdev2_170624_0905_gdOv.log
LOG_/apt-get_remove_libgettextpo-dev_170624_0006_gdOv
...
LOG_/apt-get_install_lsb-release_170623_2324_gdOv
LOG_/apt-get_install_xserver-xorg-input-all_170623_2328_gdOv
LOG_/apt-get_remove_python-defusedxml_170624_0009_gdOv
LOG_/apt-get_install_mesa-utils_170623_2324_gdOv
...
LOG_/apt-get_install_python3.5-minimal_170623_2326_gdOv
LOG_/apt-get_install_libpython3.5-minimal_170623_2323_gdOv
...
LOG_/apt-get_dist-upgrade_170623_2246_gdOv.log
LOG_/apt-get_install_x11-xkb-utils_170623_2326_gdOv
...
LOG_/apt-get_install_libglib2.0-data_170624_0018_gdOv
LOG_/apt-get_remove_geoip-database_170623_2351_gdOv
...
LOG_/apt-get_remove_consolekit_170623_2346_gdOv
LOG_/apt-get_install_expect_170623_2319_gdOv
...
LOG_/apt-get_remove_libcupsfilters1_170624_0004_gdOv
LOG_/apt-get_install-f_170623_2353_gdOv.log
It actually holds:
# tar xf /mnt/h_Ref/170624/LOG.tar -C /Cmn/mr/
# ls -1 /Cmn/mr/LOG_/ | wc -l
208
#
that's 208 various apt- commands that I issued...
But first a story about the why-so-mercilessly-non-verbose tip at these pages with overlapping content:
https://git.devuan.org/dev1fanboy/Upgra … tall-guide
https://git.devuan.org/dev1fanboy/Upgra … minimalism
(which in my experience is necessary for, and should be linked to from the nominal without-dbus guide:
https://git.devuan.org/dev1fanboy/Upgra … thout-dbus
)
which I intend to make a separate topic about (and I promise to try and link to it from here
EDIT at the time of posting:
sans-dbus, Questions, Tips and Tricks on its Implementation
https://dev1galaxy.org/viewtopic.php?id=761
), because last night I figured about it what essentially eluded my understanding for years...
title: sans-dbus, Questions, Tips and Tricks on its Implementation
---
I'm continuing directly from the other topic:
Air-Gapped Devuan Install, Tentative
https://dev1galaxy.org/viewtopic.php?id=746#p2604
I am making a separate topic, but it's all intertwined... Won't work cleanly at all. But!...
But the separate topic is necessary to stress this aspect of my somewhat peculiar way of installing Devuan, the sans-dbus way.
And, the topic intertwining with the Air-Gapped Devuan Install, I'm even simply pasting the last lines from there (in bottom of that second post in that topic) into here (because I will also at certain stage have to send you back there to that topic again):
But first a story about the why-so-mercilessly-non-verbose tip at these pages with overlapping content:
https://git.devuan.org/dev1fanboy/Upgra … tall-guide
EDIT 2017-12-21 13:15+00:00:
Replacing configure-minimalism dead link with similar:
https://git.devuan.org/dev1fanboy/Upgra … ut-Systemd
EDIT CONTINUING (changing somewhat the next line):
(
because, even though it's for Ceres --which I'm running as I write-- in my experience, something similar is necessary for Jessie/Ascii as well, and should be created/brought back from backup and linked to from the nominal without-dbus guide:
And I'll give my current /etc/apt/preferences and /etc/apt/preferences.d/avoid-systemd in today's post in this topic.
EDIT END
https://git.devuan.org/dev1fanboy/Upgra … thout-dbus
)
which I intend to make a separate topic about (and I promise to try and link to it from here), because last night I figured about it what essentially eluded my understanding for years...
Because I can't try and update my system in the total seclusion from the global gynormous elecronic dance made up for and making way to myriads of eyes which we call the internet, a kind of true privacy secluded by the thick gap of, well, just plain and regular Croatian, Zagrebian air, I simply can't do that before I explain the enigmas that I had to solve after I stuck:
# cat /etc/apt/apt.conf.d/01lean
APT::Install-Suggests "0";
APT::Install-Recommends "0";
APT::AutoRemove::SuggestsImportant "false";
APT::AutoRemove::RecommendsImportant "false";
as per that great tutorial page on Devuan Installation.
Firstly, I updated my online clone successfully, but with these few snags and enigmas having given me pretty hard time to solve.
But I updated it successfuly. Here the last of the updates or let me see what it was... Here:
$ cat /Cmn/LOG_/apt-get_install_xserver-xorg-input-evdev-dbg_170624_0912_gdOv.log
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
ienglish-common ispell libaacs0 libabw-0.1-1 libarchive13 libaspell15
libasprintf-dev libasprintf0v5 libauthen-sasl-perl libbdplus0 libbind9-90
libcanberra0 libcolamd2.8.0 libdns100 libe-book-0.1-1 libept1.4.12 libgxps2
libhsqldb1.8.0-java libisc95 libisccc90 libisccfg90 libisl10 liblwres90
libsctp1 libspectre1 libtie-ixhash-perl libtxc-dxtn-s2tc0
libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common libwacom-bin
libxapian22 libxml-twig-perl libxml-xpathengine-perl
linux-image-3.16.0-4-amd64 qttranslations5-l10n
Use 'apt autoremove' to remove them.
The following NEW packages will be installed:
xserver-xorg-input-evdev-dbg
0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded.
Need to get 262 kB of archives.
After this operation, 288 kB of additional disk space will be used.
Get:1 http://packages.devuan.org/merged ascii/main amd64 xserver-xorg-input-evdev-dbg amd64 1:2.10.5-1 [262 kB]
Fetched 262 kB in 2s (89.0 kB/s)
Selecting previously unselected package xserver-xorg-input-evdev-dbg.
(Reading database ... 94605 files and directories currently installed.)
Preparing to unpack .../xserver-xorg-input-evdev-dbg_1%3a2.10.5-1_amd64.deb ...
Unpacking xserver-xorg-input-evdev-dbg (1:2.10.5-1) ...
Setting up xserver-xorg-input-evdev-dbg (1:2.10.5-1) ...
2017/06/24 09:12:09 Reading config from: /etc/paxrat/paxrat.conf
And these:
$ cat /Cmn/LOG_/apt-get_install_xserver-xorg-input-evdev-dbg_170624_0912_gdOv.log | grep -A9 longer
The following packages were automatically installed and are no longer required:
ienglish-common ispell libaacs0 libabw-0.1-1 libarchive13 libaspell15
...
linux-image-3.16.0-4-amd64 qttranslations5-l10n
Use 'apt autoremove' to remove them.
[these] few packages I couldn't even bother to care about them lying around in my system, because they're so few compared to, and I want to show you, to how many I had to deal with first! Let me see...
But in the meantime I think it could be a good thing to start another topic which is about updating the air-gapped system with whatever valuable data one got, and need to keep for longer, from the internet.
Updating the Air-Gapped System
https://dev1galaxy.org/viewtopic.php?id=763
Phew! There're some viri found there.
So... this is how many "no longer required", but have a look, also with "NEW packages" that "will be installed" I had to deal with earlier on:
apt-get_dist-upgrade_170623_2235_gdOv.log
Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
cpp-4.9 docutils-common docutils-doc evince-gtk gnome-icon-theme-symbolic
gstreamer1.0-libav gstreamer1.0-plugins-good gstreamer1.0-x libavcodec56
libavformat56 libavresample2 libavutil54 libbind9-90 libcloog-isl4
libcolamd2.8.0 libdns100 libegl1-mesa-drivers libept1.4.12 libgconf2-4
libgif4 libglade2-0 libhunspell-1.3-0 libisc95 libisccc90 libisccfg90
libisl10 libjasper1 libllvm3.5 liblwres90 libopenjpeg5 libopenvg1-mesa
libperl4-corelibs-perl libpng12-0 libpoppler46 libpth20
libschroedinger-1.0-0 libsctp1 libshout3 libtag1v5 libtag1v5-vanilla
libuuid-perl libv4l-0 libv4lconvert0 libvpx1 libvte-2.90-9
libvte-2.90-common libwebp5 libwebpdemux1 libwebpdemux2 libwebpmux1
libx264-142 libxapian22 python-cairo python-defusedxml python-docutils
python-gobject-2 python-gtk2 python-numpy python-pil python-pygments
python-roman python-soappy python-wstools
Use 'apt autoremove' to remove them.
The following packages will be REMOVED:
fonts-droid libasprintf0c2 libobrender29 libobt2 libtag1-vanilla libtag1c2a
openjdk-7-jre openjdk-7-jre-headless tzdata-java xserver-xorg-input-vmmouse
xserver-xorg-video-modesetting
The following NEW packages will be installed:
consolekit cpp-6 dbus default-java-plugin dirmngr evince firmware-linux-free
fonts-droid-fallback fonts-noto-mono gcc-7-base gnome-desktop3-data
gnupg-l10n gtk-update-icon-cache icedtea-8-plugin icedtea-netx
icedtea-netx-common initramfs-tools-core irqbalance keyutils libapparmor1
libasprintf0v5 libbind9-140 libck-connector0 libcolamd2 libdns-export162
libdns162 libdrm-amdgpu1 libept1.5.0 libgail-common libgail18 libgmime-2.6-0
libgnome-desktop-3-12 libidn2-0 libipc-system-simple-perl libisc-export160
libisc160 libisccc140 libisccfg140 libisl15 libjson-c3 libjsoncpp1
libldap-common libllvm3.8 libllvm3.9 liblwres141 libmagic-mgc
libnautilus-extension1a libnotmuch4 libnpth0 libobrender32v5 libobt2v5
libpam-ck-connector libpcre2-8-0 libpolkit-agent-1-0 libpolkit-backend-1-0
libpolkit-gobject-1-0 libpoppler64 libprocps4 libpsl5 libsecret-1-0
libsecret-common libsensors4 libservlet3.1-java libsuitesparseconfig4
libtag1v5 libtag1v5-vanilla libtfm1 libvdpau-va-gl1 libvte-2.91-0
libvte-2.91-common libwebpdemux2 libxapian30 libxfont2
linux-image-4.9.0-3-amd64 mesa-vdpau-drivers openjdk-8-jre
openjdk-8-jre-headless policykit-1 publicsuffix python-httplib2
python-pycurl python-pysimplesoap python3-apt python3-chardet python3-debian
python3-debianbts python3-httplib2 python3-pkg-resources python3-pycurl
python3-pysimplesoap python3-reportbug python3-requests python3-six
python3-urllib3 vdpau-driver-all xserver-xorg-input-libinput
xserver-xorg-legacy xserver-xorg-video-amdgpu xxd
The following packages will be upgraded:
adwaita-icon-theme apt-listchanges bind9-host cpp default-jre
default-jre-headless dnsutils evince-common evince-gtk file firefox-esr
ghostscript gnome-icon-theme gnupg gnupg-agent gnupg2
gstreamer1.0-plugins-good initramfs-tools isc-dhcp-client isc-dhcp-common
libasprintf-dev libatomic1 libclamav7 libcloog-isl4 libcurl3 libcurl3-gnutls
libevdocument3-4 libevview3-3 libfile-basedir-perl libgcc1 libgl1-mesa-dri
libgomp1 libgs9 libgs9-common libgtk-3-bin libgtk2.0-0 libgtk2.0-bin
libhsqldb1.8.0-java libldap-2.4-2 libmagic1 libpoppler-glib8 libquadmath0
libstdc++6 libvdpau1 libxatracker2 linux-image-amd64 lp-solve
mate-icon-theme mutt nfs-common obconf openbox pinentry-gtk2 poppler-utils
procps python-debianbts python-pil reportbug synaptic tzdata vim vim-common
vim-runtime vim-tiny wget xpdf xserver-xorg xserver-xorg-core
xserver-xorg-input-all xserver-xorg-input-evdev xserver-xorg-input-mouse
xserver-xorg-input-synaptics xserver-xorg-input-wacom xserver-xorg-video-all
xserver-xorg-video-ati xserver-xorg-video-cirrus xserver-xorg-video-fbdev
xserver-xorg-video-intel xserver-xorg-video-mach64 xserver-xorg-video-mga
xserver-xorg-video-neomagic xserver-xorg-video-nouveau
xserver-xorg-video-openchrome xserver-xorg-video-qxl xserver-xorg-video-r128
xserver-xorg-video-radeon xserver-xorg-video-savage
xserver-xorg-video-siliconmotion xserver-xorg-video-sisusb
xserver-xorg-video-tdfx xserver-xorg-video-trident xserver-xorg-video-vesa
xserver-xorg-video-vmware
93 upgraded, 99 newly installed, 11 to remove and 0 not upgraded.
Need to get 242 MB/249 MB of archives.
After this operation, 561 MB of additional disk space will be used.
Do you want to continue? [Y/n] Abort.
Pls. look at my scare there, right at the top of the listing of the "NEW packages" proposed:
consolekit ... dbus
The
https://git.devuan.org/dev1fanboy/Upgra … thout-dbus
(and the Minimal-install-guide)
is great, but non-advance users can't easily get it... I repeat, that's what the system wanted to do right after I stuck the /etc/apt/apt.conf.d/01lean in there...
And the Minimal-install-guide should be linked from the Devuan-without-dbus page, and more explanation is needed for users on it (I hope this page of mine will be somewhat helpful to that effect).
I think I know now, and I hope I'll be able to reproduce the cleanup that I did to get to those just a few left to deal with at the command output which I started this explanation with but which happened much later... at 2017-06-24_09h12min (170624_0912) compared to this huge installing enigma to solve which happened half a day earlier 2017-06-23_22h35min (170623_2235).
To be honest, this what shows with the logs/optput/listings is, in the clone, is my second try, on the firtst I gave up, and restored the clone from backup (== from the Air-Gapped dd dump). And in this Air-Gapped it should now, with the successful workout in the clone, be one final last time I hope.
But I'll go slowly. I also have these logs that actually accompany those "208 various apt- commands that I issued" and that all have their output in the LOG_ dir, pls. see the:
Air-Gapped Devuan Install, Tentative
https://dev1galaxy.org/viewtopic.php?id=746#p2604
(already linked above)
So I named this directory:
LOG_add_
$ ls -ABRgo
.:
total 176
-rw-r--r-- 1 21500 2017-06-23 23:50 history_170623_2350_gdOv
-rw-r--r-- 1 20773 2017-06-24 00:41 history_170624_0041_gdOv
-rw-r--r-- 1 26314 2017-06-24 09:14 history_170624_091417_gdOv
-rw-r--r-- 1 5223 2017-06-23 22:55 keep-list.ls-1
-rw-r--r-- 1 1654 2017-06-23 23:12 keep-list.ls-1_TRY00
-rw-r--r-- 1 1583 2017-06-23 23:13 keep-list.ls-1_TRY01
-rw-r--r-- 1 3637 2017-06-23 23:56 keep-or-remove_list_01.ls-1
-rw-r--r-- 1 1252 2017-06-24 00:02 keep-or-remove_list_01.ls-1_REMOVE.ls-1
-rw-r--r-- 1 2551 2017-06-24 00:12 keep-or-remove_list_02.ls-1
-rw-r--r-- 1 422 2017-06-24 00:17 keep-or-remove_list_02.ls-1_KEEP.ls-1
-rw-r--r-- 1 3939 2017-06-23 23:41 keep-or-remove_list.ls-1
-rw-r--r-- 1 269 2017-06-23 23:45 keep-or-remove_list.ls-1_00-REMOVE
-rw-r--r-- 1 61440 2017-06-24 09:58 libinput-debug-events_170624_0954_gdOv.log
E.g. the keep-list.ls-1 is just the fraction of the log:
apt-get_autoremove--purge_170623_2255_gdOv.log
Reading package lists...
Building dependency tree...
Reading state information...
The following packages will be REMOVED:
adwaita-icon-theme* aspell* aspell-en* at-spi2-core* autopoint*
ca-certificates* ca-certificates-java* clearlooks-phenix-purpy-theme*
cups-bsd* cups-client* cups-common* dconf-gsettings-backend* dconf-service*
default-jre* default-jre-headless* desktop-base* dh-python*
dictionaries-common* dmz-cursor-theme* docbook-xml* dosfstools*
emacsen-common* evince-common* evince-gtk* expect* firefox-esr* fonts-droid*
fonts-sil-gentium* fuse* geoip-database* geoip-database-extra* ghostscript*
giblib1* glib-networking* glib-networking-common* glib-networking-services*
gnome-icon-theme* gnome-icon-theme-symbolic* gsettings-desktop-schemas*
gsfonts* gsfonts-x11* gstreamer1.0-libav* gstreamer1.0-plugins-base*
gstreamer1.0-plugins-good* gstreamer1.0-x* gtk2-engines* hicolor-icon-theme*
hunspell-en-us* i965-va-driver* iamerican* ibritish* ienglish-common*
iso-codes* ispell* java-common* javascript-common* libaacs0* libabw-0.1-1*
libarchive13* libasound2-plugins* libaspell15* libasprintf-dev*
libasprintf0c2* libatk-bridge2.0-0* libatk-wrapper-java*
libatk-wrapper-java-jni* libatspi2.0-0* libauthen-sasl-perl* libbdplus0*
libcairo-gobject2* libcairo-perl* libcanberra0* libcdparanoia0* libcolord2*
libcupsfilters1* libcupsimage2* libdjvulibre-text* libdjvulibre21*
libdrm-intel1* libdrm-nouveau2* libdrm-radeon1* libe-book-0.1-1*
libencode-locale-perl* libepoxy0* libept1.4.12* libevdocument3-4*
libevview3-3* libfile-basedir-perl* libfile-desktopentry-perl*
libfile-listing-perl* libfile-mimeinfo-perl* libfont-afm-perl* libfontenc1*
libgconf2-4* libgettextpo-dev* libgettextpo0* libgif4* libgl1-mesa-dri*
libglib-perl* libglib2.0-data* libgs9* libgs9-common*
libgstreamer-plugins-base1.0-0* libgstreamer1.0-0* libgtk-3-0* libgtk-3-bin*
libgtk-3-common* libgtk2-perl* libgtk2.0-bin* libgxps2* libhsqldb1.8.0-java*
libhtml-form-perl* libhtml-format-perl* libhtml-parser-perl*
libhtml-tagset-perl* libhtml-tree-perl* libhttp-cookies-perl*
libhttp-daemon-perl* libhttp-date-perl* libhttp-message-perl*
libhttp-negotiate-perl* libijs-0.35* libio-html-perl* libio-socket-ip-perl*
libio-socket-ssl-perl* libjasper1* libjbig2dec0* libjson-glib-1.0-0*
libjson-glib-1.0-common* libkpathsea6* liblwp-mediatypes-perl*
liblwp-protocol-https-perl* libmailtools-perl* libmpdec2* libnet-dbus-perl*
libnet-http-perl* libnet-smtp-ssl-perl* libnet-ssleay-perl* liborc-0.4-0*
libpam-cap* libpango-perl* libpaper-utils* libpaper1* libparted2*
libpciaccess0* libpcsclite1* libpoppler-glib8* libpython3-stdlib*
libpython3.5* libpython3.5-minimal* libpython3.5-stdlib* libqgsttools-p1*
libqt5multimedia5-plugins* libqt5multimediawidgets5* libqt5opengl5*
libqt5svg5* librarian0* libreoffice-avmedia-backend-gstreamer*
libreoffice-java-common* libreoffice-math* libreoffice-sdbc-hsqldb*
libreoffice-writer* librest-0.7-0* librsvg2-common* libsasl2-modules*
libsctp1* libshout3* libsoup-gnome2.4-1* libsoup2.4-1* libspectre1*
libspeexdsp1* libtag1-vanilla* libtag1c2a* libtie-ixhash-perl*
libtimedate-perl* libtxc-dxtn-s2tc0* liburi-perl* libutempter0* libv4l-0*
libv4lconvert0* libvisual-0.4-0* libvisual-0.4-plugins* libvpx1*
libvte-2.90-9* libvte-2.90-common* libwacom-bin* libwww-perl*
libwww-robotrules-perl* libx11-protocol-perl* libxapian22* libxatracker2*
libxfont1* libxkbfile1* libxml-parser-perl* libxml-sax-expat-perl*
libxml-twig-perl* libxml-xpathengine-perl* lsb-release* mate-icon-theme*
mesa-utils* openjdk-7-jre* openjdk-7-jre-headless* os-prober* parted*
paxctl* perl-openssl-defaults* poppler-data* poppler-utils* postfix-sqlite*
powermgmt-base* psmisc* python-cairo* python-gobject-2* python-gtk2*
python-numpy* python-xdg* python3* python3-minimal* python3-uno* python3.5*
python3.5-minimal* qt5-gtk-platformtheme* qttranslations5-l10n*
rarian-compat* rename* scrot* sgml-base* sgml-data* synaptic*
tango-icon-theme* tcl-expect* tcpd* tzdata-java* util-linux-locales*
va-driver-all* vdpau-va-driver* x11-utils* x11-xkb-utils* xbitmaps*
xdg-user-dirs* xfonts-base* xfonts-encodings* xfonts-utils* xml-core*
xorg-docs-core* xserver-common* xserver-xorg* xserver-xorg-core*
xserver-xorg-input-all* xserver-xorg-input-evdev* xserver-xorg-input-mouse*
xserver-xorg-input-synaptics* xserver-xorg-input-vmmouse*
xserver-xorg-input-wacom* xserver-xorg-video-all* xserver-xorg-video-ati*
xserver-xorg-video-cirrus* xserver-xorg-video-fbdev*
xserver-xorg-video-intel* xserver-xorg-video-mach64* xserver-xorg-video-mga*
xserver-xorg-video-modesetting* xserver-xorg-video-neomagic*
xserver-xorg-video-nouveau* xserver-xorg-video-openchrome*
xserver-xorg-video-qxl* xserver-xorg-video-r128* xserver-xorg-video-radeon*
xserver-xorg-video-savage* xserver-xorg-video-siliconmotion*
xserver-xorg-video-sisusb* xserver-xorg-video-tdfx*
xserver-xorg-video-trident* xserver-xorg-video-vesa*
xserver-xorg-video-vmware* xterm*
0 upgraded, 0 newly installed, 276 to remove and 41 not upgraded.
After this operation, 627 MB disk space will be freed.
Do you want to continue? [Y/n] Abort.
because while the first time I didn't get so well at all what dev1fanboy meant with
Many recommended packages are not of an important nature, but this is not always the case. Therefore it is necessary to protect important packages from being removed in the process.
this time I thought much harder, and decided to try and pick up the right programs, this first time for installing, and later some other programs for removing.
And I now have to more or less replicate that behavior here in Air-Gapped.
And those var_cache_17062x_xxxx_gdOv.tar and var_lib_apt_17062x_xxxx_gdOv.tar backups serve exactly the purpose to get the necessary deb archives and lists properly installed at the right time to be able to replicate (more or less) what I did in the clone... ( pls. see the:
Air-Gapped Devuan Install, Tentative
for the var_cache... and var_lib_apt...)
So... let's go... I now see that today won't suffice for this task... We'll go into tomorrow quite a bit...
These:
keep-list.ls-1_TRY00
ca-certificates
default-jre desktop-base dh-python
docbook-xml dosfstools
expect fonts-droid
fonts-sil-gentium fuse geoip-database geoip-database-extra ghostscript
gsfonts gsfonts-x11 gstreamer1.0-libav gstreamer1.0-plugins-base
gstreamer1.0-plugins-good gstreamer1.0-x gtk2-engines hicolor-icon-theme
iso-codes ispell java-common javascript-common libaacs0 libabw-0.1-1
libarchive13 libasound2-plugins libaspell15 libasprintf-dev
libasprintf0c2
libgl1-mesa-dri
libgstreamer-plugins-base1.0-0 libgstreamer1.0-0 libgtk-3-0 libgtk-3-bin
libgtk-3-common libgtk2-perl libgtk2.0-bin
libpython3.5 libpython3.5-minimal libpython3.5-stdlib
libqt5multimedia5-plugins libqt5multimediawidgets5 libqt5opengl5
libqt5svg5 librarian0 libv4l-0
libv4lconvert0 libvisual-0.4-0 libvisual-0.4-plugins libvpx1
libxfont1 libxkbfile1 libxml-parser-perl libxml-sax-expat-perl
lsb-release
mesa-utils openjdk-7-jre openjdk-7-jre-headless os-prober parted
paxctl perl-openssl-defaults poppler-data poppler-utils postfix-sqlite
psmisc python-cairo python-gobject-2 python-gtk2
python-numpy python-xdg python3 python3-minimal python3-uno python3.5
python3.5-minimal
x11-utils x11-xkb-utils xbitmaps
xdg-user-dirs xfonts-base xfonts-encodings xfonts-utils xml-core
xorg-docs-core xserver-common xserver-xorg xserver-xorg-core
xserver-xorg-input-all xserver-xorg-input-evdev xserver-xorg-input-mouse
xserver-xorg-video-all xserver-xorg-video-ati
xserver-xorg-video-fbdev
xserver-xorg-video-modesetting xserver-xorg-video-neomagic
xserver-xorg-video-nouveau
xserver-xorg-video-radeon
xserver-xorg-video-vesa
xterm
are some of the packages that (I admit: because I was too late with my installation of the /etc/apt/apt.conf.d/01lean) apt offered to remove in the longer complete apt-get_autoremove--purge_170623_2255_gdOv.log above, and these packages missing would mean I wouldn't have X, and much more...! So I finally figured what dev1fanboy meant, and I composed a for loop to list and install the above choice that I took from the huge listing of the packages that apt offered to remove.
Actually I used keep-list.ls-1_TRY01 but that one is exactly as keep-list.ls-1_TRY00 only the newlines replaced with spaces. And this I ran:
# for i in $(cat keep-list.ls-1_TRY01); do echo apt-get install $i; ask; if [ "$?" == 0 ] ; then apt-get install $i |& tee LOG_/apt-get_install_${i}_$(date +%y%m%d_%H%M)_$(hostname) ; read FAKE ; fi ; done ;
My history file shows me that soon I decided to:
# tar cf var_cache_$(date +%y%m%d_%H%M)_$(hostname).tar /var/cache/ && tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname).tar /var/lib/apt/ &
And that was around here:
-rw-r--r-- 1 root root 252825600 2017-06-23 23:27 var_cache_170623_2327_gdOv.tar
-rw-r--r-- 1 root root 288133120 2017-06-23 23:31 var_cache_170623_2331_gdOv.tar
-rw-r--r-- 1 root root 288133120 2017-06-23 23:36 var_cache_170623_2336_gdOv.tar
-rw-r--r-- 1 root root 295301120 2017-06-23 23:47 var_cache_170623_2347_gdOv.tar
-rw-r--r-- 1 root root 295280640 2017-06-24 00:05 var_cache_170624_0005_gdOv.tar
here:
-rw-r--r-- 1 root root 147322880 2017-06-23 23:27 var_lib_apt_170623_2327_gdOv.tar
-rw-r--r-- 1 root root 147322880 2017-06-23 23:31 var_lib_apt_170623_2331_gdOv.tar
-rw-r--r-- 1 root root 147322880 2017-06-23 23:36 var_lib_apt_170623_2336_gdOv.tar
-rw-r--r-- 1 root root 147322880 2017-06-23 23:47 var_lib_apt_170623_2347_gdOv.tar
-rw-r--r-- 1 root root 147322880 2017-06-24 00:05 var_lib_apt_170624_0005_gdOv.tar
because the history says:
905 tar cf var_cache_$(date +%y%m%d_%H%M)_$(hostname).tar /var/cache/ && tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname).tar /var/lib/apt/ &
906 ls -ltr
907 rm var_cache_170623_2331_gdOv.tar
908 tar cf var_cache_$(date +%y%m%d_%H%M)_$(hostname).tar /var/cache/ && tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname).tar /var/lib/apt/ &
909 ls -ltr
where I believe var_cache_$(date +%y%m%d_%H%M)_$(hostname).tar created var_cache_170623_2331_gdOv.tar (the removing probably means just I ran it again quickly in that same minute).
But I lost track, and I think I should go back to the beginning of the evening, to be able to understand how to do this poor-user-hacking kind of update. Hacking it is, but not very expert at all...
Aarghhh!!... Let's see. So last night, more than a day ago now, I started this difficult-to-figure-out update here:
-rw-r--r-- 1 root root 194324480 2017-06-23 22:32 var_cache_170623_2231_gdOv.tar
-rw-r--r-- 1 root root 147333120 2017-06-23 22:32 var_lib_apt_170623_2232_gdOv.tar
Because I hadn't been doing any updating/upgrading/anything after:
-rw-r--r-- 1 164352000 2017-06-23 15:43 var_cache_170623_1543_gdOv.tar
-rw-r--r-- 1 125317120 2017-06-23 14:45 var_lib_apt_170623_1445_gdOv.tar
( pls. see the:
Air-Gapped Devuan Install, Tentative for the for the detailed preparation in that afternoon)
I hope it's best that I update these into my Air-Gapped first. Let's see.
And just one note in the meantime. I'm also checking the entire series of var_cache_ and var_apt_list_ with clamscan in a similar way as how I explained in the
Air-Gapped Devuan Install, Tentative
while I work on with this. Except, I just got:
LibClamAV Warning: RWX mapping denied: Can't allocate RWX Memory: Operation not permitted
LibClamAV Warning: Bytecode: disabling JIT because PaX is preventing 'mprotect' access.
Run 'paxctl -cm <executable>'
which I'll quickly sort like this:
# for i in $(ls -1 /usr/bin/clam*); do echo paxrat -s m $i ; read FAKE ; paxrat -s m $i ; done ;
paxrat -s m /usr/bin/clambc
2017/06/24 20:27:30 Reading config from: /etc/paxrat/paxrat.conf
paxrat -s m /usr/bin/clamscan
2017/06/24 20:27:34 Reading config from: /etc/paxrat/paxrat.conf
paxrat -s m /usr/bin/clamsubmit
2017/06/24 20:27:38 Reading config from: /etc/paxrat/paxrat.conf
but that didn't work, I got the same error... It had worked in the clone... (I'm doing this in master, right or wrong, I don't expect there had been viri at any stage in /var/lib/apt/ and /var/cache/... Should I expect?)
# for i in $(ls -1 /usr/bin/clam*); do echo paxctl -cm $i ; read FAKE ; paxctl -cm $i ; done ;
paxctl -cm /usr/bin/clambc
file /usr/bin/clambc had a PT_GNU_STACK program header, converted
paxctl -cm /usr/bin/clamscan
file /usr/bin/clamscan had a PT_GNU_STACK program header, converted
paxctl -cm /usr/bin/clamsubmit
file /usr/bin/clamsubmit had a PT_GNU_STACK program header, converted
Now the error does not repeat.
So... Clamscan is spending almost half of the power of this 10+ yrs old AMD 2 core processor:
KiB Swap: 6834172 total, 0 used, 6834172 free. 3044676 cached Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
7328 root 20 0 692344 538860 23936 D 86.8 13.4 1:50.47 clamscan
7059 root 20 0 0 0 0 R 9.8 0.0 1:00.98 kworker/u4:5
3378 root 20 0 25796 2932 2440 R 0.7 0.1 28:29.54 top
(it mostly goes below those 86%, but it varies)
I hope enough power remains.
( In the meantime:
# ls -l /var/log/clamav/clamscan-r-i_*_var_cache_var_lib_apt.log
-rw-r--r-- 1 root root 0 2017-06-24 20:24 /var/log/clamav/clamscan-r-i_170624_2024_var_cache_var_lib_apt.log
-rw-r--r-- 1 root root 0 2017-06-24 20:28 /var/log/clamav/clamscan-r-i_170624_2028_var_cache_var_lib_apt.log
-rw-r--r-- 1 root root 238 2017-06-24 20:37 /var/log/clamav/clamscan-r-i_170624_2031_var_cache_var_lib_apt.log
# cat /var/log/clamav/clamscan-r-i_*_var_cache_var_lib_apt.log
----------- SCAN SUMMARY -----------
Known viruses: 6298541
Engine version: 0.99.2
Scanned directories: 1938
Scanned files: 5467
Infected files: 0
Data scanned: 1353.88 MB
Data read: 7352.52 MB (ratio 0.18:1)
Time: 364.421 sec (6 m 4 s)
)
So no viri there. Good.
At 2017-06-23_22h23min I got with apt-get_update_170623_2223_gdOv:
Get:22 http://packages.devuan.org/merged ascii InRelease [113 kB]
Get:23 http://auto.mirror.devuan.org/merged ascii InRelease [113 kB]
Get:24 http://auto.mirror.devuan.org/merged ascii-updates InRelease [113 kB]
Get:26 http://packages.devuan.org/merged ascii/main Sources [7,005 kB]
Get:27 http://packages.devuan.org/merged ascii/main amd64 Packages [7,163 kB]
Get:25 http://amprolla.devuan.org/merged ascii-security InRelease [112 kB]
Get:28 http://auto.mirror.devuan.org/merged ascii/main Sources [7,005 kB]
Get:29 http://auto.mirror.devuan.org/merged ascii/main amd64 Packages [7,163 kB]
Fetched 28.8 MB in 14s (2,054 kB/s)
and I guess that must show btwn:
the master's /var/lib/apt/
and the untar'd archive:
# du -hs var_lib_apt_170623_2232_gdOv/ /var/lib/apt/
141M var_lib_apt_170623_2232_gdOv/
120M /var/lib/apt/
# rsync -nav --delete var_lib_apt_170623_2232_gdOv/ /var/lib/apt/
sending incremental file list
deleting periodic/
deleting mirrors/partial/
deleting mirrors/
deleting lists/partial/
deleting lists/lock
deleting lists/auto.mirror.devuan.org_merged_dists_ascii_main_source_Sources
deleting lists/auto.mirror.devuan.org_merged_dists_ascii_main_binary-amd64_Packages
deleting lists/auto.mirror.devuan.org_merged_dists_ascii_InRelease
deleting lists/auto.mirror.devuan.org_merged_dists_ascii-updates_InRelease
deleting lists/auto.mirror.devuan.org_merged_dists_ascii-security_InRelease
deleting lists/_home_mr_Devuan_dev-1_dists_jessie_non-free_binary-amd64_Packages
deleting lists/_home_mr_Devuan_dev-1_dists_jessie_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_dev-1_dists_jessie_Release
deleting lists/_home_mr_Devuan_d-9_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-9_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-9_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-8_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-8_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-8_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-7_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-7_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-7_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-6_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-6_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-6_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-5_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-5_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-5_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-4_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-4_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-4_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-3_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-3_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-3_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-2_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-2_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-2_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-1_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-1_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-14_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-14_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-13_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-13_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-13_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-12_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-12_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-12_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-11_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-11_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-11_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-10_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-10_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-10_dists_stretch_Release
deleting lists/Debian%20GNU_Linux%201.0-final%20%5fJessie%5f%20-%20Official%20amd64%20DVD%20Binary-1%2020170522-03:57_dists_jessie_non-free_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0-final%20%5fJessie%5f%20-%20Official%20amd64%20DVD%20Binary-1%2020170522-03:57_dists_jessie_main_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0%20%5fJessie%5f%20-%20Official%20Release%20Candidate%20amd64%20DVD%20Binary-1%2020170504-15:40_dists_jessie_non-free_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0%20%5fJessie%5f%20-%20Official%20Release%20Candidate%20amd64%20DVD%20Binary-1%2020170504-15:40_dists_jessie_main_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0%20%5fJessie%5f%20-%20Official%20Release%20Candidate%20amd64%20DVD%20Binary-1%2020170504-15:40_dists_jessie_contrib_binary-amd64_Packages
deleting lists/
deleting listchanges.db
deleting extended_states
deleting daily_lock
deleting cdroms.list~
deleting cdroms.list
./
lib/
lib/apt/
lib/apt/cdroms.list
lib/apt/cdroms.list~
lib/apt/daily_lock
lib/apt/extended_states
lib/apt/listchanges.db
lib/apt/lists/
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii-security_InRelease
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii-updates_InRelease
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii_InRelease
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii_main_binary-amd64_Packages
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii_main_source_Sources
lib/apt/lists/lock
lib/apt/lists/packages.devuan.org_merged_dists_ascii_InRelease
lib/apt/lists/packages.devuan.org_merged_dists_ascii_main_binary-amd64_Packages
lib/apt/lists/packages.devuan.org_merged_dists_ascii_main_source_Sources
lib/apt/lists/partial/
lib/apt/mirrors/
lib/apt/mirrors/partial/
lib/apt/periodic/
sent 908 bytes received 4,208 bytes 10,232.00 bytes/sec
total size is 147,312,122 speedup is 28,794.39 (DRY RUN)
#
I guess I could do this update. I'm almost sure that's the first thing to do.
# rsync -av --delete var_lib_apt_170623_2232_gdOv/ /var/lib/apt/
sending incremental file list
deleting periodic/
deleting mirrors/partial/
deleting mirrors/
deleting lists/partial/
deleting lists/lock
deleting lists/auto.mirror.devuan.org_merged_dists_ascii_main_source_Sources
deleting lists/auto.mirror.devuan.org_merged_dists_ascii_main_binary-amd64_Packages
deleting lists/auto.mirror.devuan.org_merged_dists_ascii_InRelease
deleting lists/auto.mirror.devuan.org_merged_dists_ascii-updates_InRelease
deleting lists/auto.mirror.devuan.org_merged_dists_ascii-security_InRelease
deleting lists/_home_mr_Devuan_dev-1_dists_jessie_non-free_binary-amd64_Packages
deleting lists/_home_mr_Devuan_dev-1_dists_jessie_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_dev-1_dists_jessie_Release
deleting lists/_home_mr_Devuan_d-9_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-9_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-9_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-8_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-8_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-8_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-7_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-7_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-7_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-6_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-6_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-6_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-5_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-5_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-5_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-4_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-4_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-4_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-3_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-3_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-3_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-2_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-2_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-2_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-1_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-1_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-14_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-14_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-13_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-13_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-13_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-12_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-12_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-12_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-11_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-11_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-11_dists_stretch_Release
deleting lists/_home_mr_Devuan_d-10_dists_stretch_main_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-10_dists_stretch_contrib_binary-amd64_Packages
deleting lists/_home_mr_Devuan_d-10_dists_stretch_Release
deleting lists/Debian%20GNU_Linux%201.0-final%20%5fJessie%5f%20-%20Official%20amd64%20DVD%20Binary-1%2020170522-03:57_dists_jessie_non-free_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0-final%20%5fJessie%5f%20-%20Official%20amd64%20DVD%20Binary-1%2020170522-03:57_dists_jessie_main_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0%20%5fJessie%5f%20-%20Official%20Release%20Candidate%20amd64%20DVD%20Binary-1%2020170504-15:40_dists_jessie_non-free_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0%20%5fJessie%5f%20-%20Official%20Release%20Candidate%20amd64%20DVD%20Binary-1%2020170504-15:40_dists_jessie_main_binary-amd64_Packages
deleting lists/Debian%20GNU_Linux%201.0%20%5fJessie%5f%20-%20Official%20Release%20Candidate%20amd64%20DVD%20Binary-1%2020170504-15:40_dists_jessie_contrib_binary-amd64_Packages
deleting lists/
deleting listchanges.db
deleting extended_states
deleting daily_lock
deleting cdroms.list~
deleting cdroms.list
./
lib/
lib/apt/
lib/apt/cdroms.list
lib/apt/cdroms.list~
lib/apt/daily_lock
lib/apt/extended_states
lib/apt/listchanges.db
lib/apt/lists/
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii-security_InRelease
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii-updates_InRelease
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii_InRelease
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii_main_binary-amd64_Packages
lib/apt/lists/auto.mirror.devuan.org_merged_dists_ascii_main_source_Sources
lib/apt/lists/lock
lib/apt/lists/packages.devuan.org_merged_dists_ascii_InRelease
lib/apt/lists/packages.devuan.org_merged_dists_ascii_main_binary-amd64_Packages
lib/apt/lists/packages.devuan.org_merged_dists_ascii_main_source_Sources
lib/apt/lists/partial/
lib/apt/mirrors/
lib/apt/mirrors/partial/
lib/apt/periodic/
sent 147,349,506 bytes received 4,436 bytes 19,647,192.27 bytes/sec
total size is 147,312,122 speedup is 1.00
#
Hmmhhh... Now the /var/cache/ I guess... Let's see.
# rsync -nav --delete var_cache_170623_2231_gdOv/ /var/cache/
sending incremental file list
deleting man/zh_TW/cat8/
deleting man/zh_TW/cat5/
deleting man/zh_TW/cat1/
deleting man/zh_TW/index.db
deleting man/zh_TW/CACHEDIR.TAG
deleting man/zh_TW/
deleting man/zh_CN/cat8/
deleting man/zh_CN/cat5/
deleting man/zh_CN/cat1/
deleting man/zh_CN/index.db
deleting man/zh_CN/CACHEDIR.TAG
deleting man/zh_CN/
deleting man/tr/cat8/
deleting man/tr/cat5/
deleting man/tr/cat1/
deleting man/tr/index.db
deleting man/tr/CACHEDIR.TAG
deleting man/tr/
deleting man/sv/cat8/
deleting man/sv/cat5/
deleting man/sv/cat1/
deleting man/sv/index.db
deleting man/sv/CACHEDIR.TAG
deleting man/sv/
deleting man/sl/cat8/
deleting man/sl/cat1/
deleting man/sl/index.db
deleting man/sl/CACHEDIR.TAG
deleting man/sl/
deleting man/ru/cat8/
deleting man/ru/cat5/
deleting man/ru/cat1/
deleting man/ru/index.db
deleting man/ru/CACHEDIR.TAG
deleting man/ru/
deleting man/pt_BR/cat8/
deleting man/pt_BR/cat5/
deleting man/pt_BR/cat1/
deleting man/pt_BR/index.db
deleting man/pt_BR/CACHEDIR.TAG
deleting man/pt_BR/
deleting man/pt/cat8/
deleting man/pt/cat5/
deleting man/pt/cat1/
deleting man/pt/index.db
deleting man/pt/CACHEDIR.TAG
deleting man/pt/
deleting man/pl/cat8/
deleting man/pl/cat5/
deleting man/pl/cat1/
deleting man/pl/index.db
deleting man/pl/CACHEDIR.TAG
deleting man/pl/
deleting man/nl/cat8/
deleting man/nl/cat5/
deleting man/nl/cat1/
deleting man/nl/index.db
deleting man/nl/CACHEDIR.TAG
deleting man/nl/
deleting man/ko/cat8/
deleting man/ko/cat5/
deleting man/ko/cat1/
deleting man/ko/index.db
deleting man/ko/CACHEDIR.TAG
deleting man/ko/
deleting man/ja/cat8/
deleting man/ja/cat5/
deleting man/ja/cat1/
deleting man/ja/index.db
deleting man/ja/CACHEDIR.TAG
deleting man/ja/
deleting man/it/cat8/
deleting man/it/cat5/
deleting man/it/cat1/
deleting man/it/index.db
deleting man/it/CACHEDIR.TAG
deleting man/it/
deleting man/id/cat8/
deleting man/id/cat5/
deleting man/id/cat1/
deleting man/id/index.db
deleting man/id/CACHEDIR.TAG
deleting man/id/
deleting man/hu/cat8/
deleting man/hu/cat5/
deleting man/hu/cat1/
deleting man/hu/index.db
deleting man/hu/CACHEDIR.TAG
deleting man/hu/
deleting man/fr/cat8/
deleting man/fr/cat5/
deleting man/fr/cat1/
deleting man/fr/index.db
deleting man/fr/CACHEDIR.TAG
deleting man/fr/
deleting man/fi/cat1/
deleting man/fi/index.db
deleting man/fi/CACHEDIR.TAG
deleting man/fi/
deleting man/es/cat8/
deleting man/es/cat5/
deleting man/es/cat1/
deleting man/es/index.db
deleting man/es/CACHEDIR.TAG
deleting man/es/
deleting man/de/cat8/
deleting man/de/cat5/
deleting man/de/cat1/
deleting man/de/index.db
deleting man/de/CACHEDIR.TAG
deleting man/de/
deleting man/da/cat8/
deleting man/da/cat5/
deleting man/da/cat1/
deleting man/da/index.db
deleting man/da/CACHEDIR.TAG
deleting man/da/
deleting man/cs/cat8/
deleting man/cs/cat5/
deleting man/cs/cat1/
deleting man/cs/index.db
deleting man/cs/CACHEDIR.TAG
deleting man/cs/
deleting man/cat8/
deleting man/cat7/
deleting man/cat6/
deleting man/cat5/
deleting man/cat4/
deleting man/cat3/
deleting man/cat2/
deleting man/cat1/
deleting man/index.db
deleting man/CACHEDIR.TAG
deleting man/
deleting ldconfig/aux-cache
deleting ldconfig/
deleting fonts/
deleting fontconfig/fe547fea3a41b43a38975d292a2b19c7-le64.cache-4
deleting fontconfig/f1f2465696798768e9653f19e17ccdc8-le64.cache-4
deleting fontconfig/e52a45a1c8c8fe895fc0fc8c4e6999b8-le64.cache-4
deleting fontconfig/e49e89034d371f0f9de17aab02136486-le64.cache-4
deleting fontconfig/e13b20fdb08344e0e664864cc2ede53d-le64.cache-4
deleting fontconfig/d82eb4fd963d448e2fcb7d7b793b5df3-le64.cache-4
deleting fontconfig/d589a48862398ed80a3d6066f4f56f4c-le64.cache-4
deleting fontconfig/d3e5c4ee2ceb1fc347f91d4cefc53bc0-le64.cache-4
deleting fontconfig/cabbd14511b9e8a55e92af97fb3a0461-le64.cache-4
deleting fontconfig/c855463f699352c367813e37f3f70ea7-le64.cache-4
deleting fontconfig/CACHEDIR.TAG
deleting fontconfig/95530828ff6c81d309f8258d8d02a23e-le64.cache-4
deleting fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-le64.cache-4
deleting fontconfig/7ef2298fde41cc6eeb7af42e48b7d293-le64.cache-4
deleting fontconfig/707971e003b4ae6c8121c3a920e507f5-le64.cache-4
deleting fontconfig/6333f38776742d18e214673cd2c24e34-le64.cache-4
deleting fontconfig/57e423e26b20ab21d0f2f29c145174c3-le64.cache-4
deleting fontconfig/4c599c202bc5c08e2d34565a40eac3b2-le64.cache-4
deleting fontconfig/4b14b093aebc79c320de5e86ae1d3314-le64.cache-4
deleting fontconfig/4794a0821666d79190d59a36cb4f44b5-le64.cache-4
deleting fontconfig/3f7329c5293ffd510edef78f73874cfd-le64.cache-4
deleting fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le64.cache-4
deleting fontconfig/3047814df9a2f067bd2d96a2b9c36e5a-le64.cache-4
deleting fontconfig/188ac73a183f12857f63bb60a4a6d603-le64.cache-4
deleting fontconfig/
deleting dictionaries-common/wordlist.db
deleting dictionaries-common/wordlist-default
deleting dictionaries-common/sqspell.php
deleting dictionaries-common/jed-ispell-dicts.sl
deleting dictionaries-common/ispell.db
deleting dictionaries-common/ispell-dicts-list.txt
deleting dictionaries-common/ispell-default
deleting dictionaries-common/hunspell.db
deleting dictionaries-common/emacsen-ispell-dicts.el
deleting dictionaries-common/emacsen-ispell-default.el
deleting dictionaries-common/aspell.db
deleting dictionaries-common/
deleting debconf/templates.dat-old
deleting debconf/templates.dat
deleting debconf/passwords.dat
deleting debconf/config.dat-old
deleting debconf/config.dat
deleting debconf/
deleting apt/archives/partial/
deleting apt/archives/wireshark_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/wireshark-qt_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/wireshark-common_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/whois_5.2.16_amd64.deb
deleting apt/archives/whiptail_0.52.20-1_amd64.deb
deleting apt/archives/wamerican_2017.01.22-1_all.deb
deleting apt/archives/udev_232-25_amd64.deb
deleting apt/archives/tshark_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/sysvinit_2.88dsf-59.3+devuan2_amd64.deb
deleting apt/archives/sudo_1.8.20p2-1_amd64.deb
deleting apt/archives/samba-libs_2%3a4.5.8+dfsg-2_amd64.deb
deleting apt/archives/rsync_3.1.2-2_amd64.deb
deleting apt/archives/python-six_1.10.0-4_all.deb
deleting apt/archives/python-numpy_1%3a1.12.1-3_amd64.deb
deleting apt/archives/python-gtk2_2.24.0-5.1_amd64.deb
deleting apt/archives/postfix_3.1.4-7_amd64.deb
deleting apt/archives/postfix-sqlite_3.1.4-7_amd64.deb
deleting apt/archives/postfix-doc_3.1.4-7_all.deb
deleting apt/archives/perl_5.24.1-3_amd64.deb
deleting apt/archives/perl-modules-5.24_5.24.1-3_all.deb
deleting apt/archives/perl-base_5.24.1-3_amd64.deb
deleting apt/archives/passwd_1%3a4.4-4.1_amd64.deb
deleting apt/archives/openssl_1.1.0f-3_amd64.deb
deleting apt/archives/netcat-traditional_1.10-41.1_amd64.deb
deleting apt/archives/multiarch-support_2.24-11_amd64.deb
deleting apt/archives/login_1%3a4.4-4.1_amd64.deb
deleting apt/archives/lock
deleting apt/archives/locales_2.24-11_all.deb
deleting apt/archives/linux-libc-dev_4.9.30-2_amd64.deb
deleting apt/archives/libwsutil7_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/libwscodecs1_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/libwiretap6_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/libwireshark8_2.2.6+g32dac6a-2_amd64.deb
deleting apt/archives/libwireshark-data_2.2.6+g32dac6a-2_all.deb
deleting apt/archives/libwbclient0_2%3a4.5.8+dfsg-2_amd64.deb
deleting apt/archives/libwacom2_0.24-1_amd64.deb
deleting apt/archives/libwacom-common_0.24-1_all.deb
deleting apt/archives/libvdpau1_1.1.1-6_amd64.deb
deleting apt/archives/libudev1_232-25_amd64.deb
deleting apt/archives/libtiff5_4.0.8-2_amd64.deb
deleting apt/archives/libtasn1-6_4.10-1.1_amd64.deb
deleting apt/archives/libsystemd0_232-25_amd64.deb
deleting apt/archives/libswscale4_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libswresample2_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libssl1.1_1.1.0f-3_amd64.deb
deleting apt/archives/libssl1.0.2_1.0.2l-2_amd64.deb
deleting apt/archives/libssh2-1_1.8.0-1_amd64.deb
deleting apt/archives/libsqlite3-0_3.16.2-5_amd64.deb
deleting apt/archives/libsndfile1_1.0.27-3_amd64.deb
deleting apt/archives/libsmbclient_2%3a4.5.8+dfsg-2_amd64.deb
deleting apt/archives/libproxy1v5_0.4.14-3_amd64.deb
deleting apt/archives/libpostproc54_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libperl5.24_5.24.1-3_amd64.deb
deleting apt/archives/libpam0g_1.1.8-3.6_amd64.deb
deleting apt/archives/libpam-runtime_1.1.8-3.6_all.deb
deleting apt/archives/libpam-modules_1.1.8-3.6_amd64.deb
deleting apt/archives/libpam-modules-bin_1.1.8-3.6_amd64.deb
deleting apt/archives/libp11-kit0_0.23.3-5_amd64.deb
deleting apt/archives/libnss3_2%3a3.26.2-1.1_amd64.deb
deleting apt/archives/libnghttp2-14_1.23.1-1_amd64.deb
deleting apt/archives/libnewt0.52_0.52.20-1_amd64.deb
deleting apt/archives/libmwaw-0.3-3_0.3.9-2_amd64.deb
deleting apt/archives/liblogging-stdlog0_1.0.6-1_amd64.deb
deleting apt/archives/liblapack3_3.7.0-2_amd64.deb
deleting apt/archives/libgxps2_0.2.5-1_amd64.deb
deleting apt/archives/libgtk-3-common_3.22.12-1_all.deb
deleting apt/archives/libgtk-3-0_3.22.12-1_amd64.deb
deleting apt/archives/libgs9_9.20~dfsg-3.2_amd64.deb
deleting apt/archives/libgs9-common_9.20~dfsg-3.2_all.deb
deleting apt/archives/libgnutls30_3.5.8-6_amd64.deb
deleting apt/archives/libgnutls-openssl27_3.5.8-6_amd64.deb
deleting apt/archives/libgme0_0.6.1-1_amd64.deb
deleting apt/archives/libgcrypt20_1.7.6-2_amd64.deb
deleting apt/archives/libfftw3-single3_3.3.6p2-1_amd64.deb
deleting apt/archives/libfftw3-double3_3.3.6p2-1_amd64.deb
deleting apt/archives/libelf1_0.168-1_amd64.deb
deleting apt/archives/libdbus-1-3_1.10.18-1+devuan2.3_amd64.deb
deleting apt/archives/libc6_2.24-11_amd64.deb
deleting apt/archives/libc-l10n_2.24-11_all.deb
deleting apt/archives/libc-bin_2.24-11_amd64.deb
deleting apt/archives/libc-ares2_1.12.0-2_amd64.deb
deleting apt/archives/libblas3_3.7.0-2_amd64.deb
deleting apt/archives/libblas-common_3.7.0-2_amd64.deb
deleting apt/archives/libavutil55_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libavresample3_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libavformat57_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libavfilter6_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libavdevice57_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libavcodec57_7%3a3.2.5-1_amd64.deb
deleting apt/archives/libapt-pkg5.0_1.4.6_amd64.deb
deleting apt/archives/libapt-inst2.0_1.4.6_amd64.deb
deleting apt/archives/keyboard-configuration_1.164_all.deb
deleting apt/archives/gitk_1%3a2.11.0-4_all.deb
deleting apt/archives/git_1%3a2.11.0-4_amd64.deb
deleting apt/archives/keyboard-configuration_1.164_all.deb
deleting apt/archives/gitk_1%3a2.11.0-4_all.deb
deleting apt/archives/git_1%3a2.11.0-4_amd64.deb
deleting apt/archives/git-man_1%3a2.11.0-4_all.deb
deleting apt/archives/git-doc_1%3a2.11.0-4_all.deb
deleting apt/archives/ghostscript_9.20~dfsg-3.2_amd64.deb
deleting apt/archives/ffmpeg_7%3a3.2.5-1_amd64.deb
deleting apt/archives/dpkg_1.18.24_amd64.deb
deleting apt/archives/devuan-baseconf_0.6.4+devuan2_all.deb
deleting apt/archives/debianutils_4.8.1.1_amd64.deb
deleting apt/archives/debian-reference-en_2.68_all.deb
deleting apt/archives/debian-reference-common_2.68_all.deb
deleting apt/archives/debian-archive-keyring_2017.5_all.deb
deleting apt/archives/debconf_1.5.61_all.deb
deleting apt/archives/debconf-i18n_1.5.61_all.deb
deleting apt/archives/console-setup_1.164_all.deb
deleting apt/archives/console-setup-linux_1.164_all.deb
deleting apt/archives/ca-certificates_20161130+nmu1_all.deb
deleting apt/archives/ca-certificates-java_20170531+nmu1_all.deb
deleting apt/archives/bash-completion_1%3a2.1-4.3+devuan1_all.deb
deleting apt/archives/apt_1.4.6_amd64.deb
deleting apt/archives/apt-utils_1.4.6_amd64.deb
deleting apt/archives/anacron_2.3-24_amd64.deb
deleting apt/archives/
deleting apt/srcpkgcache.bin
deleting apt/pkgcache.bin
deleting apt/
./
cache/
cache/apt/
cache/apt/pkgcache.bin
cache/apt/srcpkgcache.bin
cache/apt/archives/
cache/apt/archives/anacron_2.3-24_amd64.deb
cache/apt/archives/apt-utils_1.4.6_amd64.deb
cache/apt/archives/apt_1.4.6_amd64.deb
cache/apt/archives/aptitude-common_0.8.8-1_all.deb
cache/apt/archives/bash-completion_1%3a2.1-4.3+devuan1_all.deb
cache/apt/archives/ca-certificates-java_20170531+nmu1_all.deb
cache/apt/archives/ca-certificates_20161130+nmu1_all.deb
cache/apt/archives/console-setup-linux_1.164_all.deb
cache/apt/archives/console-setup_1.164_all.deb
cache/apt/archives/debconf-i18n_1.5.61_all.deb
cache/apt/archives/debconf_1.5.61_all.deb
cache/apt/archives/debian-archive-keyring_2017.5_all.deb
cache/apt/archives/debian-reference-common_2.68_all.deb
cache/apt/archives/debian-reference-en_2.68_all.deb
cache/apt/archives/debianutils_4.8.1.1_amd64.deb
cache/apt/archives/devuan-baseconf_0.6.4+devuan2_all.deb
cache/apt/archives/dpkg_1.18.24_amd64.deb
cache/apt/archives/ffmpeg_7%3a3.2.5-1_amd64.deb
cache/apt/archives/ghostscript_9.20~dfsg-3.2_amd64.deb
cache/apt/archives/git-doc_1%3a2.11.0-4_all.deb
cache/apt/archives/git-man_1%3a2.11.0-4_all.deb
cache/apt/archives/git_1%3a2.11.0-4_amd64.deb
cache/apt/archives/gitk_1%3a2.11.0-4_all.deb
cache/apt/archives/gpgv_2.1.18-8_amd64.deb
cache/apt/archives/keyboard-configuration_1.164_all.deb
cache/apt/archives/kmod_24-1_amd64.deb
cache/apt/archives/libapt-inst2.0_1.4.6_amd64.deb
cache/apt/archives/libapt-pkg5.0_1.4.6_amd64.deb
cache/apt/archives/libavcodec57_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libavdevice57_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libavfilter6_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libavformat57_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libavresample3_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libavutil55_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libblas-common_3.7.0-2_amd64.deb
cache/apt/archives/libblas3_3.7.0-2_amd64.deb
cache/apt/archives/libc-ares2_1.12.0-2_amd64.deb
cache/apt/archives/libc-bin_2.24-11_amd64.deb
cache/apt/archives/libc-bin_2.24-12_amd64.deb
cache/apt/archives/libc-l10n_2.24-11_all.deb
cache/apt/archives/libc-l10n_2.24-12_all.deb
cache/apt/archives/libc6_2.24-11_amd64.deb
cache/apt/archives/libc6_2.24-12_amd64.deb
cache/apt/archives/libdbus-1-3_1.10.18-1+devuan2.3_amd64.deb
cache/apt/archives/libdirectfb-1.2-9_1.2.10.0-9_amd64.deb
cache/apt/archives/libelf1_0.168-1_amd64.deb
cache/apt/archives/libexpat1_2.2.1-1_amd64.deb
cache/apt/archives/libfftw3-double3_3.3.6p2-1_amd64.deb
cache/apt/archives/libfftw3-single3_3.3.6p2-1_amd64.deb
cache/apt/archives/libgcrypt20_1.7.6-2_amd64.deb
cache/apt/archives/libgcrypt20_1.7.7-2_amd64.deb
cache/apt/archives/libgme0_0.6.1-1_amd64.deb
cache/apt/archives/libgnutls-openssl27_3.5.8-6_amd64.deb
cache/apt/archives/libgnutls30_3.5.8-6_amd64.deb
cache/apt/archives/libgs9-common_9.20~dfsg-3.2_all.deb
cache/apt/archives/libgs9_9.20~dfsg-3.2_amd64.deb
cache/apt/archives/libgtk-3-0_3.22.12-1_amd64.deb
cache/apt/archives/libgtk-3-common_3.22.12-1_all.deb
cache/apt/archives/libgxps2_0.2.5-1_amd64.deb
cache/apt/archives/libio-socket-ssl-perl_2.049-1_all.deb
cache/apt/archives/libkmod2_24-1_amd64.deb
cache/apt/archives/liblapack3_3.7.0-2_amd64.deb
cache/apt/archives/liblogging-stdlog0_1.0.6-1_amd64.deb
cache/apt/archives/libmpg123-0_1.25.0-1_amd64.deb
cache/apt/archives/libmwaw-0.3-3_0.3.11-3_amd64.deb
cache/apt/archives/libmwaw-0.3-3_0.3.9-2_amd64.deb
cache/apt/archives/libnewt0.52_0.52.20-1_amd64.deb
cache/apt/archives/libnghttp2-14_1.23.1-1_amd64.deb
cache/apt/archives/libnspr4_2%3a4.15-1_amd64.deb
cache/apt/archives/libnss3_2%3a3.26.2-1.1_amd64.deb
cache/apt/archives/libnss3_2%3a3.31-1_amd64.deb
cache/apt/archives/libp11-kit0_0.23.3-5_amd64.deb
cache/apt/archives/libpam-modules-bin_1.1.8-3.6_amd64.deb
cache/apt/archives/libpam-modules_1.1.8-3.6_amd64.deb
cache/apt/archives/libpam-runtime_1.1.8-3.6_all.deb
cache/apt/archives/libpam0g_1.1.8-3.6_amd64.deb
cache/apt/archives/libperl5.24_5.24.1-3_amd64.deb
cache/apt/archives/libpng16-16_1.6.29-3_amd64.deb
cache/apt/archives/libpostproc54_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libproxy1v5_0.4.14-3_amd64.deb
cache/apt/archives/libpython3.5-minimal_3.5.3-3_amd64.deb
cache/apt/archives/libpython3.5-stdlib_3.5.3-3_amd64.deb
cache/apt/archives/libpython3.5_3.5.3-3_amd64.deb
cache/apt/archives/libsmbclient_2%3a4.5.8+dfsg-2_amd64.deb
cache/apt/archives/libsnappy1v5_1.1.4-2_amd64.deb
cache/apt/archives/libsndfile1_1.0.27-3_amd64.deb
cache/apt/archives/libsqlite3-0_3.16.2-5_amd64.deb
cache/apt/archives/libssh2-1_1.8.0-1_amd64.deb
cache/apt/archives/libssl1.0.2_1.0.2l-2_amd64.deb
cache/apt/archives/libssl1.1_1.1.0f-3_amd64.deb
cache/apt/archives/libswresample2_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libswscale4_7%3a3.2.5-1_amd64.deb
cache/apt/archives/libsystemd0_232-25_amd64.deb
cache/apt/archives/libtasn1-6_4.10-1.1_amd64.deb
cache/apt/archives/libtasn1-6_4.12-2_amd64.deb
cache/apt/archives/libtiff5_4.0.8-2_amd64.deb
cache/apt/archives/libudev1_232-25_amd64.deb
cache/apt/archives/libusb-0.1-4_2%3a0.1.12-31_amd64.deb
cache/apt/archives/libv4l-0_1.12.5-1_amd64.deb
cache/apt/archives/libv4lconvert0_1.12.5-1_amd64.deb
cache/apt/archives/libvdpau1_1.1.1-6_amd64.deb
cache/apt/archives/libwacom-bin_0.24-1_amd64.deb
cache/apt/archives/libwacom-common_0.24-1_all.deb
cache/apt/archives/libwacom2_0.24-1_amd64.deb
cache/apt/archives/libwavpack1_5.1.0-1_amd64.deb
cache/apt/archives/libwbclient0_2%3a4.5.8+dfsg-2_amd64.deb
cache/apt/archives/libwireshark-data_2.2.6+g32dac6a-2_all.deb
cache/apt/archives/libwireshark8_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/libwiretap6_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/libwps-0.4-4_0.4.6-2_amd64.deb
cache/apt/archives/libwscodecs1_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/libwsutil7_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/linux-libc-dev_4.9.30-2_amd64.deb
cache/apt/archives/locales_2.24-11_all.deb
cache/apt/archives/locales_2.24-12_all.deb
cache/apt/archives/lock
cache/apt/archives/login_1%3a4.4-4.1_amd64.deb
cache/apt/archives/multiarch-support_2.24-11_amd64.deb
cache/apt/archives/multiarch-support_2.24-12_amd64.deb
cache/apt/archives/netcat-traditional_1.10-41.1_amd64.deb
cache/apt/archives/openssl_1.1.0f-3_amd64.deb
cache/apt/archives/os-prober_1.75_amd64.deb
cache/apt/archives/passwd_1%3a4.4-4.1_amd64.deb
cache/apt/archives/perl-base_5.24.1-3_amd64.deb
cache/apt/archives/perl-modules-5.24_5.24.1-3_all.deb
cache/apt/archives/perl_5.24.1-3_amd64.deb
cache/apt/archives/postfix-doc_3.1.4-7_all.deb
cache/apt/archives/postfix-doc_3.2.2-1_all.deb
cache/apt/archives/postfix-sqlite_3.1.4-7_amd64.deb
cache/apt/archives/postfix-sqlite_3.2.2-1_amd64.deb
cache/apt/archives/postfix_3.1.4-7_amd64.deb
cache/apt/archives/postfix_3.2.2-1_amd64.deb
cache/apt/archives/psmisc_23.1-1_amd64.deb
cache/apt/archives/python-gtk2_2.24.0-5.1_amd64.deb
cache/apt/archives/python-numpy_1%3a1.12.1-3_amd64.deb
cache/apt/archives/python-six_1.10.0-4_all.deb
cache/apt/archives/python3.5-minimal_3.5.3-3_amd64.deb
cache/apt/archives/python3.5_3.5.3-3_amd64.deb
cache/apt/archives/rsync_3.1.2-2_amd64.deb
cache/apt/archives/samba-libs_2%3a4.5.8+dfsg-2_amd64.deb
cache/apt/archives/sudo_1.8.20p2-1_amd64.deb
cache/apt/archives/sysvinit_2.88dsf-59.3+devuan2_amd64.deb
cache/apt/archives/tshark_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/udev_232-25_amd64.deb
cache/apt/archives/wamerican_2017.01.22-1_all.deb
cache/apt/archives/whiptail_0.52.20-1_amd64.deb
cache/apt/archives/whois_5.2.16_amd64.deb
cache/apt/archives/wireshark-common_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/wireshark-qt_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/wireshark_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/xserver-common_2%3a1.19.3-1_all.deb
cache/apt/archives/partial/
cache/debconf/
cache/debconf/config.dat
cache/debconf/config.dat-old
cache/debconf/passwords.dat
cache/debconf/templates.dat
cache/debconf/templates.dat-old
cache/dictionaries-common/
cache/dictionaries-common/aspell.db
cache/dictionaries-common/emacsen-ispell-default.el
cache/dictionaries-common/emacsen-ispell-dicts.el
cache/dictionaries-common/hunspell.db
cache/dictionaries-common/ispell-default
cache/dictionaries-common/ispell-dicts-list.txt
cache/dictionaries-common/ispell.db
cache/dictionaries-common/jed-ispell-dicts.sl
cache/dictionaries-common/sqspell.php
cache/dictionaries-common/wordlist-default
cache/dictionaries-common/wordlist.db
cache/fontconfig/
cache/fontconfig/188ac73a183f12857f63bb60a4a6d603-le64.cache-4
cache/fontconfig/3047814df9a2f067bd2d96a2b9c36e5a-le64.cache-4
cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le64.cache-4
cache/fontconfig/3f7329c5293ffd510edef78f73874cfd-le64.cache-4
cache/fontconfig/4794a0821666d79190d59a36cb4f44b5-le64.cache-4
cache/fontconfig/4b14b093aebc79c320de5e86ae1d3314-le64.cache-4
cache/fontconfig/4c599c202bc5c08e2d34565a40eac3b2-le64.cache-4
cache/fontconfig/57e423e26b20ab21d0f2f29c145174c3-le64.cache-4
cache/fontconfig/6333f38776742d18e214673cd2c24e34-le64.cache-4
cache/fontconfig/707971e003b4ae6c8121c3a920e507f5-le64.cache-4
cache/fontconfig/7ef2298fde41cc6eeb7af42e48b7d293-le64.cache-4
cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-le64.cache-4
cache/fontconfig/95530828ff6c81d309f8258d8d02a23e-le64.cache-4
cache/fontconfig/CACHEDIR.TAG
cache/fontconfig/c855463f699352c367813e37f3f70ea7-le64.cache-4
cache/fontconfig/cabbd14511b9e8a55e92af97fb3a0461-le64.cache-4
cache/fontconfig/d3e5c4ee2ceb1fc347f91d4cefc53bc0-le64.cache-4
cache/fontconfig/d589a48862398ed80a3d6066f4f56f4c-le64.cache-4
cache/fontconfig/d82eb4fd963d448e2fcb7d7b793b5df3-le64.cache-4
cache/fontconfig/e13b20fdb08344e0e664864cc2ede53d-le64.cache-4
cache/fontconfig/e49e89034d371f0f9de17aab02136486-le64.cache-4
cache/fontconfig/e52a45a1c8c8fe895fc0fc8c4e6999b8-le64.cache-4
cache/fontconfig/f1f2465696798768e9653f19e17ccdc8-le64.cache-4
cache/fontconfig/fe547fea3a41b43a38975d292a2b19c7-le64.cache-4
cache/fonts/
cache/ldconfig/
cache/ldconfig/aux-cache
cache/man/
cache/man/CACHEDIR.TAG
cache/man/index.db
cache/man/cat1/
cache/man/cat2/
cache/man/cat3/
cache/man/cat4/
cache/man/cat5/
cache/man/cat6/
cache/man/cat7/
cache/man/cat8/
cache/man/cs/
cache/man/cs/CACHEDIR.TAG
cache/man/cs/index.db
cache/man/cs/cat1/
cache/man/cs/cat5/
cache/man/cs/cat8/
cache/man/da/
cache/man/da/CACHEDIR.TAG
cache/man/da/index.db
cache/man/da/cat1/
cache/man/da/cat5/
cache/man/da/cat8/
cache/man/de/
cache/man/de/CACHEDIR.TAG
cache/man/de/index.db
cache/man/de/cat1/
cache/man/de/cat5/
cache/man/de/cat8/
cache/man/es/
cache/man/es/CACHEDIR.TAG
cache/man/es/index.db
cache/man/es/cat1/
cache/man/es/cat5/
cache/man/es/cat8/
cache/man/fi/
cache/man/fi/CACHEDIR.TAG
cache/man/fi/index.db
cache/man/fi/cat1/
cache/man/fr/
cache/man/fr/CACHEDIR.TAG
cache/man/fr/index.db
cache/man/fr/cat1/
cache/man/fr/cat5/
cache/man/fr/cat8/
cache/man/hu/
cache/man/hu/CACHEDIR.TAG
cache/man/hu/index.db
cache/man/hu/cat1/
cache/man/hu/cat5/
cache/man/hu/cat8/
cache/man/id/
cache/man/id/CACHEDIR.TAG
cache/man/id/index.db
cache/man/id/cat1/
cache/man/id/cat5/
cache/man/id/cat8/
cache/man/it/
cache/man/it/CACHEDIR.TAG
cache/man/it/index.db
cache/man/it/cat1/
cache/man/it/cat5/
cache/man/it/cat8/
cache/man/ja/
cache/man/ja/CACHEDIR.TAG
cache/man/ja/index.db
cache/man/ja/cat1/
cache/man/ja/cat5/
cache/man/ja/cat8/
cache/man/ko/
cache/man/ko/CACHEDIR.TAG
cache/man/ko/index.db
cache/man/ko/cat1/
cache/man/ko/cat5/
cache/man/ko/cat8/
cache/man/nl/
cache/man/nl/CACHEDIR.TAG
cache/man/nl/index.db
cache/man/nl/cat1/
cache/man/nl/cat5/
cache/man/nl/cat8/
cache/man/pl/
cache/man/pl/CACHEDIR.TAG
cache/man/pl/index.db
cache/man/pl/cat1/
cache/man/pl/cat5/
cache/man/pl/cat8/
cache/man/pt/
cache/man/pt/CACHEDIR.TAG
cache/man/pt/index.db
cache/man/pt/cat1/
cache/man/pt/cat5/
cache/man/pt/cat8/
cache/man/pt_BR/
cache/man/pt_BR/CACHEDIR.TAG
cache/man/pt_BR/index.db
cache/man/pt_BR/cat1/
cache/man/pt_BR/cat5/
cache/man/pt_BR/cat8/
cache/man/ru/
cache/man/ru/CACHEDIR.TAG
cache/man/ru/index.db
cache/man/ru/cat1/
cache/man/ru/cat5/
cache/man/ru/cat8/
cache/man/sl/
cache/man/sl/CACHEDIR.TAG
cache/man/sl/index.db
cache/man/sl/cat1/
cache/man/sl/cat8/
cache/man/sv/
cache/man/sv/CACHEDIR.TAG
cache/man/sv/index.db
cache/man/sv/cat1/
cache/man/sv/cat5/
cache/man/sv/cat8/
cache/man/tr/
cache/man/tr/CACHEDIR.TAG
cache/man/tr/index.db
cache/man/tr/cat1/
cache/man/tr/cat5/
cache/man/tr/cat8/
cache/man/zh_CN/
cache/man/zh_CN/CACHEDIR.TAG
cache/man/zh_CN/index.db
cache/man/zh_CN/cat1/
cache/man/zh_CN/cat5/
cache/man/zh_CN/cat8/
cache/man/zh_TW/
cache/man/zh_TW/CACHEDIR.TAG
cache/man/zh_TW/index.db
cache/man/zh_TW/cat1/
cache/man/zh_TW/cat5/
cache/man/zh_TW/cat8/
sent 11,490 bytes received 11,015 bytes 45,010.00 bytes/sec
total size is 194,080,332 speedup is 8,623.88 (DRY RUN)
It's a lot of updates. Most of it is just different timestamp on the file though, I guess. See:
# rsync -nav --delete var_cache_170623_2231_gdOv/ /var/cache/ | grep wireshark_2.2.6+g32dac6a-2_amd64
deleting apt/archives/wireshark_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/wireshark_2.2.6+g32dac6a-2_amd64.deb
# rsync -nav --delete var_cache_170623_2231_gdOv/ /var/cache/ | grep wireshark-qt_2.2.6+g32dac6a-2_amd64
deleting apt/archives/wireshark-qt_2.2.6+g32dac6a-2_amd64.deb
cache/apt/archives/wireshark-qt_2.2.6+g32dac6a-2_amd64.deb
#
but there shouldn't be any hard updating there.
(Not pasting it. But apt did what it said it would.)
# du -s var_lib_apt_170623_2232_gdOv/ /var/lib/apt/ /var/cache/ var_cache_170623_2231_gdOv/
143916 var_lib_apt_170623_2232_gdOv/
143916 /var/lib/apt/
190480 /var/cache/
190480 var_cache_170623_2231_gdOv/
Anyway, I certainly believe I cannot run update in Air-Gapped. The rsync'ing above did what update does in the wild.
But I should now run upgrade on this. To get what uprade did in the clone, with the internet connection set up, as in:
apt-get_upgrade_170623_2229_gdOv.log
Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
docutils-common docutils-doc libavcodec56 libavformat56 libavresample2
libavutil54 libegl1-mesa-drivers libhunspell-1.3-0 libopenvg1-mesa
libperl4-corelibs-perl libschroedinger-1.0-0 libuuid-perl libwebp5
libwebpdemux1 libwebpmux1 libx264-142 python-docutils python-pil
python-pygments python-roman
Use 'apt autoremove' to remove them.
The following packages have been kept back:
adwaita-icon-theme apt-listchanges bind9-host cpp default-jre
default-jre-headless dnsutils evince-common evince-gtk file firefox-esr
ghostscript gnome-icon-theme gnupg gnupg-agent gnupg2
gstreamer1.0-plugins-good initramfs-tools isc-dhcp-client isc-dhcp-common
libasprintf-dev libatomic1 libclamav7 libcloog-isl4 libcurl3 libcurl3-gnutls
libevdocument3-4 libevview3-3 libfile-basedir-perl libgcc1 libgl1-mesa-dri
libgomp1 libgs9 libgs9-common libgtk-3-bin libgtk2.0-0 libgtk2.0-bin
libhsqldb1.8.0-java libldap-2.4-2 libmagic1 libpoppler-glib8 libquadmath0
libstdc++6 libvdpau1 libxatracker2 linux-image-amd64 lp-solve
mate-icon-theme mutt nfs-common obconf openbox pinentry-gtk2 poppler-utils
procps python-debianbts python-pil reportbug rsyslog synaptic tzdata vim
vim-common vim-runtime vim-tiny wget xpdf xserver-xorg xserver-xorg-core
xserver-xorg-input-all xserver-xorg-input-evdev xserver-xorg-input-mouse
xserver-xorg-input-synaptics xserver-xorg-input-wacom xserver-xorg-video-all
xserver-xorg-video-ati xserver-xorg-video-cirrus xserver-xorg-video-fbdev
xserver-xorg-video-intel xserver-xorg-video-mach64 xserver-xorg-video-mga
xserver-xorg-video-neomagic xserver-xorg-video-nouveau
xserver-xorg-video-openchrome xserver-xorg-video-qxl xserver-xorg-video-r128
xserver-xorg-video-radeon xserver-xorg-video-savage
xserver-xorg-video-siliconmotion xserver-xorg-video-sisusb
xserver-xorg-video-tdfx xserver-xorg-video-trident xserver-xorg-video-vesa
xserver-xorg-video-vmware
The following packages will be upgraded:
aptitude-common gpgv kmod libc-bin libc-l10n libc6 libdirectfb-1.2-9
libexpat1 libgcrypt20 libio-socket-ssl-perl libkmod2 libmpg123-0
libmwaw-0.3-3 libnspr4 libnss3 libpng16-16 libpython3.5 libpython3.5-minimal
libpython3.5-stdlib libsnappy1v5 libtasn1-6 libusb-0.1-4 libv4l-0
libv4lconvert0 libwacom-bin libwacom-common libwacom2 libwavpack1
libwps-0.4-4 locales multiarch-support os-prober postfix postfix-doc
postfix-sqlite psmisc python3.5 python3.5-minimal xserver-common
39 upgraded, 0 newly installed, 0 to remove and 94 not upgraded.
Need to get 27.3 MB/27.4 MB of archives.
After this operation, 1,130 kB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://packages.devuan.org/merged ascii/main amd64 libc6 amd64 2.24-12 [2,692 kB]
Get:2 http://packages.devuan.org/merged ascii/main amd64 libc-bin amd64 2.24-12 [779 kB]
Get:3 http://packages.devuan.org/merged ascii/main amd64 libexpat1 amd64 2.2.1-1 [85.6 kB]
Get:4 http://packages.devuan.org/merged ascii/main amd64 libpython3.5 amd64 3.5.3-3 [1,373 kB]
Get:5 http://packages.devuan.org/merged ascii/main amd64 python3.5 amd64 3.5.3-3 [237 kB]
Get:6 http://packages.devuan.org/merged ascii/main amd64 python3.5-minimal amd64 3.5.3-3 [1,695 kB]
Get:7 http://packages.devuan.org/merged ascii/main amd64 libpython3.5-stdlib amd64 3.5.3-3 [2,170 kB]
Get:8 http://packages.devuan.org/merged ascii/main amd64 libpython3.5-minimal amd64 3.5.3-3 [577 kB]
Get:9 http://packages.devuan.org/merged ascii/main amd64 multiarch-support amd64 2.24-12 [200 kB]
Get:10 http://packages.devuan.org/merged ascii/main amd64 libgcrypt20 amd64 1.7.7-2 [412 kB]
Get:11 http://packages.devuan.org/merged ascii/main amd64 gpgv amd64 2.1.18-8 [480 kB]
Get:12 http://packages.devuan.org/merged ascii/main amd64 kmod amd64 24-1 [86.3 kB]
Get:13 http://packages.devuan.org/merged ascii/main amd64 libkmod2 amd64 24-1 [48.5 kB]
Get:14 http://packages.devuan.org/merged ascii/main amd64 libc-l10n all 2.24-12 [820 kB]
Get:15 http://packages.devuan.org/merged ascii/main amd64 libtasn1-6 amd64 4.12-2 [51.0 kB]
Get:16 http://packages.devuan.org/merged ascii/main amd64 locales all 2.24-12 [3,288 kB]
Get:17 http://packages.devuan.org/merged ascii/main amd64 aptitude-common all 0.8.8-1 [1,590 kB]
Get:18 http://packages.devuan.org/merged ascii/main amd64 libdirectfb-1.2-9 amd64 1.2.10.0-9 [605 kB]
Get:19 http://packages.devuan.org/merged ascii/main amd64 libio-socket-ssl-perl all 2.049-1 [201 kB]
Get:20 http://packages.devuan.org/merged ascii/main amd64 libmpg123-0 amd64 1.25.0-1 [138 kB]
Get:21 http://packages.devuan.org/merged ascii/main amd64 libmwaw-0.3-3 amd64 0.3.11-3 [2,202 kB]
Get:22 http://packages.devuan.org/merged ascii/main amd64 libnspr4 amd64 2:4.15-1 [117 kB]
Get:23 http://packages.devuan.org/merged ascii/main amd64 libnss3 amd64 2:3.31-1 [1,160 kB]
Get:24 http://packages.devuan.org/merged ascii/main amd64 libpng16-16 amd64 1.6.29-3 [281 kB]
Get:25 http://packages.devuan.org/merged ascii/main amd64 libusb-0.1-4 amd64 2:0.1.12-31 [23.1 kB]
Get:26 http://packages.devuan.org/merged ascii/main amd64 libv4l-0 amd64 1.12.5-1 [85.8 kB]
Get:27 http://packages.devuan.org/merged ascii/main amd64 libv4lconvert0 amd64 1.12.5-1 [120 kB]
Get:28 http://packages.devuan.org/merged ascii/main amd64 libwacom-bin amd64 0.24-1 [5,874 B]
Get:29 http://packages.devuan.org/merged ascii/main amd64 libwavpack1 amd64 5.1.0-1 [85.9 kB]
Get:30 http://packages.devuan.org/merged ascii/main amd64 libwps-0.4-4 amd64 0.4.6-2 [521 kB]
Get:31 http://packages.devuan.org/merged ascii/main amd64 psmisc amd64 23.1-1 [115 kB]
Get:32 http://packages.devuan.org/merged ascii/main amd64 xserver-common all 2:1.19.3-1 [2,061 kB]
Get:33 http://packages.devuan.org/merged ascii/main amd64 libsnappy1v5 amd64 1.1.4-2 [51.3 kB]
Get:34 http://packages.devuan.org/merged ascii/main amd64 os-prober amd64 1.75 [29.8 kB]
Get:35 http://packages.devuan.org/merged ascii/main amd64 postfix amd64 3.2.2-1 [1,448 kB]
Get:36 http://packages.devuan.org/merged ascii/main amd64 postfix-doc all 3.2.2-1 [1,183 kB]
Get:37 http://packages.devuan.org/merged ascii/main amd64 postfix-sqlite amd64 3.2.2-1 [324 kB]
Reading changelogs...
Extracting templates from packages: 76%
Extracting templates from packages: 100%
Preconfiguring packages ...
Fetched 27.3 MB in 7s (3,874 kB/s)
(Reading database ...
...
(Reading database ... 100%
(Reading database ... 96341 files and directories currently installed.)
Preparing to unpack .../libc6_2.24-12_amd64.deb ...
Unpacking libc6:amd64 (2.24-12) over (2.24-11) ...
Setting up libc6:amd64 (2.24-12) ...
(Reading database ...
...
(Reading database ... 100%
(Reading database ... 96341 files and directories currently installed.)
Preparing to unpack .../libc-bin_2.24-12_amd64.deb ...
Unpacking libc-bin (2.24-12) over (2.24-11) ...
Setting up libc-bin (2.24-12) ...
Updating /etc/nsswitch.conf to current default.
(Reading database ...
...
(Reading database ... 100%
(Reading database ... 96341 files and directories currently installed.)
Preparing to unpack .../0-libexpat1_2.2.1-1_amd64.deb ...
Unpacking libexpat1:amd64 (2.2.1-1) over (2.2.0-2) ...
Preparing to unpack .../1-libpython3.5_3.5.3-3_amd64.deb ...
Unpacking libpython3.5:amd64 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../2-python3.5_3.5.3-3_amd64.deb ...
Unpacking python3.5 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../3-python3.5-minimal_3.5.3-3_amd64.deb ...
Unpacking python3.5-minimal (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../4-libpython3.5-stdlib_3.5.3-3_amd64.deb ...
Unpacking libpython3.5-stdlib:amd64 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../5-libpython3.5-minimal_3.5.3-3_amd64.deb ...
Unpacking libpython3.5-minimal:amd64 (3.5.3-3) over (3.5.3-1) ...
Preparing to unpack .../6-multiarch-support_2.24-12_amd64.deb ...
Unpacking multiarch-support (2.24-12) over (2.24-11) ...
Setting up multiarch-support (2.24-12) ...
(Reading database ...
...
(Reading database ... 100%
(Reading database ... 96342 files and directories currently installed.)
Preparing to unpack .../libgcrypt20_1.7.7-2_amd64.deb ...
Unpacking libgcrypt20:amd64 (1.7.7-2) over (1.7.6-2) ...
Setting up libgcrypt20:amd64 (1.7.7-2) ...
(Reading database ...
...
(Reading database ... 100%
(Reading database ... 96342 files and directories currently installed.)
Preparing to unpack .../gpgv_2.1.18-8_amd64.deb ...
Unpacking gpgv (2.1.18-8) over (2.1.18-6) ...
Setting up gpgv (2.1.18-8) ...
(Reading database ...
...
(Reading database ... 100%
(Reading database ... 96342 files and directories currently installed.)
Preparing to unpack .../00-kmod_24-1_amd64.deb ...
Unpacking kmod (24-1) over (23-2) ...
Preparing to unpack .../01-libkmod2_24-1_amd64.deb ...
Unpacking libkmod2:amd64 (24-1) over (23-2) ...
Preparing to unpack .../02-libc-l10n_2.24-12_all.deb ...
Unpacking libc-l10n (2.24-12) over (2.24-11) ...
Preparing to unpack .../03-libtasn1-6_4.12-2_amd64.deb ...
Unpacking libtasn1-6:amd64 (4.12-2) over (4.10-1.1) ...
Preparing to unpack .../04-locales_2.24-12_all.deb ...
Unpacking locales (2.24-12) over (2.24-11) ...
Preparing to unpack .../05-aptitude-common_0.8.8-1_all.deb ...
Unpacking aptitude-common (0.8.8-1) over (0.8.7-1) ...
Preparing to unpack .../06-libdirectfb-1.2-9_1.2.10.0-9_amd64.deb ...
Unpacking libdirectfb-1.2-9:amd64 (1.2.10.0-9) over (1.2.10.0-8) ...
Preparing to unpack .../07-libio-socket-ssl-perl_2.049-1_all.deb ...
Unpacking libio-socket-ssl-perl (2.049-1) over (2.044-1) ...
Preparing to unpack .../08-libmpg123-0_1.25.0-1_amd64.deb ...
Unpacking libmpg123-0:amd64 (1.25.0-1) over (1.23.8-1+b1) ...
Preparing to unpack .../09-libmwaw-0.3-3_0.3.11-3_amd64.deb ...
Unpacking libmwaw-0.3-3:amd64 (0.3.11-3) over (0.3.9-2) ...
Preparing to unpack .../10-libnspr4_2%3a4.15-1_amd64.deb ...
Unpacking libnspr4:amd64 (2:4.15-1) over (2:4.12-6) ...
Preparing to unpack .../11-libnss3_2%3a3.31-1_amd64.deb ...
Unpacking libnss3:amd64 (2:3.31-1) over (2:3.26.2-1.1) ...
Preparing to unpack .../12-libpng16-16_1.6.29-3_amd64.deb ...
Unpacking libpng16-16:amd64 (1.6.29-3) over (1.6.28-1) ...
Preparing to unpack .../13-libusb-0.1-4_2%3a0.1.12-31_amd64.deb ...
Unpacking libusb-0.1-4:amd64 (2:0.1.12-31) over (2:0.1.12-30) ...
Preparing to unpack .../14-libv4l-0_1.12.5-1_amd64.deb ...
Unpacking libv4l-0:amd64 (1.12.5-1) over (1.12.3-1) ...
Preparing to unpack .../15-libv4lconvert0_1.12.5-1_amd64.deb ...
Unpacking libv4lconvert0:amd64 (1.12.5-1) over (1.12.3-1) ...
Preparing to unpack .../16-libwacom2_0.24-1_amd64.deb ...
Unpacking libwacom2:amd64 (0.24-1) over (0.22-1+b1) ...
Preparing to unpack .../17-libwacom-common_0.24-1_all.deb ...
Unpacking libwacom-common (0.24-1) over (0.22-1) ...
Preparing to unpack .../18-libwacom-bin_0.24-1_amd64.deb ...
Unpacking libwacom-bin (0.24-1) over (0.22-1+b1) ...
Preparing to unpack .../19-libwavpack1_5.1.0-1_amd64.deb ...
Unpacking libwavpack1:amd64 (5.1.0-1) over (5.0.0-2) ...
Preparing to unpack .../20-libwps-0.4-4_0.4.6-2_amd64.deb ...
Unpacking libwps-0.4-4:amd64 (0.4.6-2) over (0.4.5-1) ...
Preparing to unpack .../21-psmisc_23.1-1_amd64.deb ...
Unpacking psmisc (23.1-1) over (22.21-2.1+b2) ...
Preparing to unpack .../22-xserver-common_2%3a1.19.3-1_all.deb ...
Unpacking xserver-common (2:1.19.3-1) over (2:1.19.2-1) ...
Preparing to unpack .../23-libsnappy1v5_1.1.4-2_amd64.deb ...
Unpacking libsnappy1v5:amd64 (1.1.4-2) over (1.1.3-3) ...
Preparing to unpack .../24-os-prober_1.75_amd64.deb ...
Unpacking os-prober (1.75) over (1.65) ...
Preparing to unpack .../25-postfix_3.2.2-1_amd64.deb ...
Removing sqlite map entry from /etc/postfix/dynamicmaps.cf
[....] Stopping Postfix Mail Transport Agent: postfix.
[....] Stopping Postfix Mail Transport Agent: postfix.
Unpacking postfix (3.2.2-1) over (3.1.4-7) ...
Preparing to unpack .../26-postfix-doc_3.2.2-1_all.deb ...
Unpacking postfix-doc (3.2.2-1) over (3.1.4-7) ...
Preparing to unpack .../27-postfix-sqlite_3.2.2-1_amd64.deb ...
Unpacking postfix-sqlite (3.2.2-1) over (3.1.4-7) ...
Setting up libexpat1:amd64 (2.2.1-1) ...
Setting up libmwaw-0.3-3:amd64 (0.3.11-3) ...
Setting up xserver-common (2:1.19.3-1) ...
Setting up libwacom-common (0.24-1) ...
Setting up libwacom2:amd64 (0.24-1) ...
Setting up psmisc (23.1-1) ...
Processing triggers for mime-support (3.60) ...
Setting up libpng16-16:amd64 (1.6.29-3) ...
Setting up libwavpack1:amd64 (5.1.0-1) ...
Setting up libv4lconvert0:amd64 (1.12.5-1) ...
Setting up libdirectfb-1.2-9:amd64 (1.2.10.0-9) ...
Processing triggers for menu (2.1.47+b1) ...
Setting up os-prober (1.75) ...
Setting up libnspr4:amd64 (2:4.15-1) ...
Setting up libkmod2:amd64 (24-1) ...
Setting up libio-socket-ssl-perl (2.049-1) ...
Setting up aptitude-common (0.8.8-1) ...
Setting up libtasn1-6:amd64 (4.12-2) ...
Setting up libwacom-bin (0.24-1) ...
Setting up postfix-doc (3.2.2-1) ...
Processing triggers for libc-bin (2.24-12) ...
Setting up libsnappy1v5:amd64 (1.1.4-2) ...
Setting up libc-l10n (2.24-12) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up libwps-0.4-4:amd64 (0.4.6-2) ...
Setting up libmpg123-0:amd64 (1.25.0-1) ...
Setting up libusb-0.1-4:amd64 (2:0.1.12-31) ...
Setting up locales (2.24-12) ...
Generating locales (this might take a while)...
en_GB.UTF-8... done
Generation complete.
Setting up postfix (3.2.2-1) ...
Installing new version of config file /etc/postfix/makedefs.out ...
[....] Starting Postfix Mail Transport Agent: postfix.
Postfix (main.cf) configuration was untouched. If you need to make changes,
edit /etc/postfix/main.cf (and others) as needed. To view Postfix
configuration values, see postconf(1).
After modifying main.cf, be sure to run 'service postfix reload'.
Running newaliases
[....] Stopping Postfix Mail Transport Agent: postfix.
[....] Starting Postfix Mail Transport Agent: postfix.
Setting up libpython3.5-minimal:amd64 (3.5.3-3) ...
Setting up kmod (24-1) ...
Setting up libv4l-0:amd64 (1.12.5-1) ...
Setting up libpython3.5-stdlib:amd64 (3.5.3-3) ...
Setting up libnss3:amd64 (2:3.31-1) ...
Setting up python3.5-minimal (3.5.3-3) ...
Setting up postfix-sqlite (3.2.2-1) ...
Adding sqlite map entry to /etc/postfix/dynamicmaps.cf
Setting up python3.5 (3.5.3-3) ...
Setting up libpython3.5:amd64 (3.5.3-3) ...
Processing triggers for libc-bin (2.24-12) ...
2017/06/23 22:32:48 Reading config from: /etc/paxrat/paxrat.conf
The time and all corresponds. I should have the packages in /var/cache/apt/archives that were being installed in this log above...
Nope! Not yet. I botched it... I missed the forward slash or some such in some of the rsync command... See:
# ls -l /var/cache/cache/
total 28
drwxr-xr-x 3 root root 4096 2017-06-23 22:31 apt
drwxr-xr-x 2 root root 4096 2017-06-23 22:32 debconf
drwxr-xr-x 2 root root 4096 2017-05-15 23:26 dictionaries-common
drwxr-xr-x 2 root root 4096 2017-06-16 22:18 fontconfig
drwxr-xr-x 2 root root 4096 2017-01-17 02:45 fonts
drwx------ 2 root root 4096 2017-06-23 22:31 ldconfig
drwxr-xr-x 31 man man 4096 2017-06-23 07:48 man
But I fixed that:
# mv -iv /var/cache/cache/* /var/cache/
'/var/cache/cache/apt' -> '/var/cache/apt'
'/var/cache/cache/debconf' -> '/var/cache/debconf'
'/var/cache/cache/dictionaries-common' -> '/var/cache/dictionaries-common'
'/var/cache/cache/fontconfig' -> '/var/cache/fontconfig'
'/var/cache/cache/fonts' -> '/var/cache/fonts'
'/var/cache/cache/ldconfig' -> '/var/cache/ldconfig'
'/var/cache/cache/man' -> '/var/cache/man'
# rmdir -v /var/cache/cache/
And now (first two or three lines is me using tab to list those dirs):
# rsync -nav --delete var_cache_170623_2231_gdOv/cache/ /var/cache/
apt/ debconf/ dictionaries-common/ fontconfig/ fonts/ ldconfig/ man/
# rsync -nav --delete var_cache_170623_2231_gdOv/cache/ /var/cache/
apt/ debconf/ dictionaries-common/ fontconfig/ fonts/ ldconfig/ man/
# rsync -nav --delete var_cache_170623_2231_gdOv/cache/ /var/cache/
sending incremental file list
./
sent 10,445 bytes received 117 bytes 21,124.00 bytes/sec
total size is 194,080,332 speedup is 18,375.34 (DRY RUN)
# rsync -nav --delete /var/cache/ var_cache_170623_2231_gdOv/cache/
sending incremental file list
./
sent 10,450 bytes received 117 bytes 21,134.00 bytes/sec
total size is 194,080,332 speedup is 18,366.64 (DRY RUN)
#
Similarly wrong the update is in:
# ls -ld /var/lib/apt/lib/apt/ var_lib_apt_170623_2232_gdOv/lib/apt/
drwxr-xr-x 5 root root 4096 2017-06-23 22:30 var_lib_apt_170623_2232_gdOv/lib/apt/
drwxr-xr-x 5 root root 4096 2017-06-23 22:30 /var/lib/apt/lib/apt/
#
Fix is easy:
# mv -iv /var/lib/apt/lib/apt/* /var/lib/apt/
'/var/lib/apt/lib/apt/cdroms.list' -> '/var/lib/apt/cdroms.list'
'/var/lib/apt/lib/apt/cdroms.list~' -> '/var/lib/apt/cdroms.list~'
'/var/lib/apt/lib/apt/daily_lock' -> '/var/lib/apt/daily_lock'
'/var/lib/apt/lib/apt/extended_states' -> '/var/lib/apt/extended_states'
'/var/lib/apt/lib/apt/listchanges.db' -> '/var/lib/apt/listchanges.db'
'/var/lib/apt/lib/apt/lists' -> '/var/lib/apt/lists'
'/var/lib/apt/lib/apt/mirrors' -> '/var/lib/apt/mirrors'
'/var/lib/apt/lib/apt/periodic' -> '/var/lib/apt/periodic'
# rmdir -pv /var/lib/apt/lib/apt/
rmdir: removing directory, '/var/lib/apt/lib/apt/'
rmdir: removing directory, '/var/lib/apt/lib'
rmdir: removing directory, '/var/lib/apt'
rmdir: failed to remove directory '/var/lib/apt': Directory not empty
#
And now:
# rsync -nav --delete /var/lib/apt/ var_lib_apt_170623_2232_gdOv/lib/apt/
sending incremental file list
./
sent 800 bytes received 24 bytes 549.33 bytes/sec
total size is 147,312,122 speedup is 178,776.85 (DRY RUN)
# rsync -nav --delete var_lib_apt_170623_2232_gdOv/lib/apt/ /var/lib/apt/
sending incremental file list
./
sent 794 bytes received 24 bytes 1,636.00 bytes/sec
total size is 147,312,122 speedup is 180,088.17 (DRY RUN)
#
And now this should work.
So, if I issue:
# apt-get upgrade |& tee /Cmn/LOG_/apt-get_upgrade_$(date +%y%m%d_%H%M)_$(hostname)
now, will Mister Apt work it out like further above in the clone, when it got those packages from online?...
The moment of truth... (If it doesn't work, I'll be broken and sad, on top of exhausted that I already am anyway...)
In the next post, all of its own.
miroR, I'm sorry to say that, as far as I can tell, you can't do the same with MBR disks as I believe there is not enough room in the MBR for GRUB code installed to the MBR to have the capability of opening encrypted partitions. So on MBR-based systems, you will need to have a non-encrypted boot partition.
I'm very happy to be proved wrong.
I see. Well, I have a couple of systems (fit for my Air-Gapping method, same hardware more than two MBO), and I'll be back to apply full encryption like you made here. But that is later.
Regards!
Yes, I encrypt even /boot.
If you read my earlier posts carefully,
I wish I could have, but haven't yet gone through carefully. Out of time. And also I work terribly slow...
But, I now know where to look for information! Thanks!
you should be able to do it, especially if you follow the link to Pavel Kogan's post:
http://www.pavelkogan.com/2014/05/23/lu … ncryption/
Set up two partitions on the disk:
First: EFI System Partition
Not in this setup that I am currently using, such as for online (only Devuan for online since a month ago, be it Devuan proper or Heads).
In this setup, this --old-- MBO, it's MBR, not EFI.
I hope when I study some day, that there is options for MBR as well... in the links (and maybe in your own posts?)...
Second: Luks encrypted
Inside the LUKS encrypted partition run the Logical Volume Manager (lvm) and create as many volumes as you need.
Set up your chosen filesystem on each volume.
Make sure that GRUB2 includes the relevant encryption modules.
Make sure that the GRUB setup follows the recommendations given by Pavel Kogan above.What Pavel goes on to do is give a set-up that allows you to enter the encryption password/phrase once, rather than twice when booting. I've not done that, as I don't mind typing in the passphrase twice. For now, at least.
So /boot and swap are encrypted, as well as everything else, apart from the EFI System Partition.
Thanks! I will use your info some day, but it remains undefined how soon.
===========================================================================
miroR wrote:... [I couldn't get Refracta to]:
# update-initramfs -u -k <the-kernel-version>
so I am wondering now, maybe there is an issue with Refracta?
Of course, it is (pasting, except to the ellipsis):
http://linux.softpedia.com/get/System/O … 2636.shtml
Refracta [...] 8.3 Beta 20170305That should have worked. Was there an error message?
Yes there was, but I don't remember any details of it now... My mind has started shedding info that I have prepared (and have some in writing) for the Air-Gapped Devuan Install, Tentative topic (linked in my previous post in this topic), and what happeded more exactly with Refracta is lost information here at this time... Sorry!
But I will try again, only really don't know how soon or less soon it will be...
It seems odd that softpedia labels that iso as beta. It's 8.3.
sha256sum
2b9a39c0e4bbee600607ef24053a65685282d4b47c8a6b76418020e59646ad8e refracta8.3_xfce_amd64-20170305_0250.iso
Yes, I checked (that's quick, the try and run update-initramfs with Refracta is the --unknown how soon-- next time)... That's the DVD I used.
Here's where I put my isos (and .asc files if you want to check the signature.)
https://sourceforge.net/projects/refrac … isohybrid/
You should... Ah, a private PM is due.
Thanks!
Just a not on this failure below.
I tried the installer, rather than the live iso, using the Expert option and manual partitioning.
...
Everything worked fine until writing out the GRUB2 loader, which reported failure.
I couldn't get Refracta to, after regularly chroot'ing into a working distro cloned onto another hard disk to put it into another machine [I couldn't get Refracta to]:
# update-initramfs -u -k <the-kernel-version>
so I am wondering now, maybe there is an issue with Refracta?
Because I could, on the last Gentoo instance that I still have for use, arrange for, and mount the new system partitions and all, and chroot into it, from that Gentoo, and perfectly and successfully run the:
# update-initramfs -u -k <the-kernel-version>
Actually I am now running that new machine (new by way of all cloned anew onto the HDD; but MBO was already previously in use), as I am writing this.
Of course, it is (pasting, except to the ellipsis):
http://linux.softpedia.com/get/System/O … 2636.shtml
Refracta [...] 8.3 Beta 20170305
And just a remark:
I don't want (nor need) to use this one (used it in the past a lot, also a few times the Super GRUB2):
Booting from a SystemRescueCD USB drive
...
on principle. It's SystemDestruction-contaminated...
I do have all (and I mean all) encrypted except the /boot. If you Simplicio really manage it to encrypt even /boot, pls. teach us.
But I have to go now and update my topic over at:
Air-Gapped Devuan Install, Tentative
https://dev1galaxy.org/viewtopic.php?id=746
Regards!
initial title (could remain for longer): Air-Gapped Devuan Install, Tentative
---
EDIT 2017-07-15 22:59 UT START
This was pretty long and winding... And I have to warn the reader that, while the testing that I did, and which remains in all these verbose posts, was useful, it all comes down to much simpler things to do, to be able to do the Air-Gap installing/updating of your Devuan.
By this time, I have done some four complete cycles, everytime starting from almost tabula rasa as far as stuff from contact with the internet goes, so likely from as clean a system as an honest distribution, which I believe Devuan GNU/Linux is, can offer you.
It is much simpler, and I'll try and offer more explanation in today's post:
https://dev1galaxy.org/viewtopic.php?id=746#p3357
( done )
EDIT 2017-07-15 22:59 UT END
I'm preparing to update my Air-Gapped Devuan and I want to explain to the interested how it is done.
I had explained it while Debian was still feasibly systemd-free (and even dbus-free, and *kit-free, and pulse-free; in short: any-poetterware free). Pick what you may need from the read below, careful to shed useful from useless, esp. with older reads.
Air-Gapped Gentoo Install, Tentative
https://forums.gentoo.org/viewtopic-t-987268.html
There is also:
Air-Gapped Debian Install for Newbies
http://forums.debian.net/viewtopic.php?f=16&t=119648
( but I use monolithic encrypted one-system / partition now, and clear /boot, as in:
Install Devuan into encrypted root and swap partitions
https://dev1galaxy.org/viewtopic.php?id=597
)
How to Remove Systemd and Related Packages from Your Debian
http://forums.debian.net/viewtopic.php?f=16&t=118197
I've only figured out how to do this the day before yesterday (in case this opening post won't be longer than a day to write, nota bene, current time: 2017-06-23 14:29 UTC). So in some later post much may become clearer... But regarding later time: Devuan will be so much stronger in time to come. It is still a kid. Devuan is still a kid, a very promising kid, but just a kid at this time. Later we'll be able to Air-Gap install Devuan just as easily as Debian or as Gentoo, or any other long time-honored distro of GNU/Linux.
In my Air-Gapped master, I have done this (just copying from my history lines), all as root:
tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname)m.tar /var/lib/apt/
du -hs var_lib_apt_170623_1349_gdOvm.tar /var/lib/apt/
tar tf var_lib_apt_170623_1349_gdOvm.tar
That was tar'ing the /var/lib/apt directory, and giving it the current timestamp and listing it.
And this is checking it:
tar xf var_lib_apt_170623_1349_gdOvm.tar
rsync -nav --delete var/lib/apt/ /var/lib/apt/
rsync -nav --delete /var/lib/apt/ var/lib/apt/
Both lines would update nothing because they are identical directories and files.
(Let me note here that I tar'd up also /var/cache/ directory in just about the same way. Later about that one.)
Now, and I'm courious about it myself, namely where we are now, is the clone of that Air-Gapped system. We are not anymore in Air-Gapped... Well, while I write, I'm not connected to the internet, but from this clone (same/similar hardware models of MBO and HDD, but initially to-the-bit same software! gotten with dd dumping, and hashed-verified...)... [But from this clone] I do connect, while from the Air-Gapped I never do!
[And I'm courious] myself if I will find any differences with the /var/lib/apt/ of this cloned system, in which I haven't run apt-get since I cloned it. There shouldn't be any should there?
Let's see.
Ah, the opening lines from history may be a little difficult to follow, for the newbies which I always bear in mind, seniors pls allow more verbosity.
root@gdOv:/home/mr# tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname).tar /var/lib/apt/
tar: Removing leading `/' from member names
root@gdOv:/home/mr#
That's actual run.
The gdOv is the hostname. Same hostname here as in the master, and for that reason, I added an "m" (for "master") before ".tar" in what I ran in the master.
And this is actual paste from my terminal:
root@gdOv:/home/mr# cp -iav /mnt/h_Ref2/170623/var_* .
'/mnt/h_Ref2/170623/var_cache_170623_1352_gdOvm.tar' -> './var_cache_170623_1352_gdOvm.tar'
'/mnt/h_Ref2/170623/var_history_170623_1404_gdOvm.txt' -> './var_history_170623_1404_gdOvm.txt'
'/mnt/h_Ref2/170623/var_lib_apt_170623_1349_gdOvm.tar' -> './var_lib_apt_170623_1349_gdOvm.tar'
root@gdOv:/home/mr#
(Pls. also note the var_cache_170623_1352_gdOvm.tar which is the tar'd archive od the /var/cache/ directory in my master. Later about that one.)
By the way, I use almost exclusively Devuan these days. The "Ref" in "/mnt/h_Ref2/170623/" above (the 170623 being for 2017-06-23), [the "Ref"] is for "Refracta". Because when I clone systems, I use Refracta on a USB-stick, and I can dd dump partitions from one system's HDD to the other system's HDD. How that is performed is explained well enough (I hope) in the PART 2 of:
Postfix smtp/TLS, Bkp/Cloning Mthd, Censorship/Intrusion
https://forums.gentoo.org/viewtopic-t-9 … ml#7613044
.
But I will be removing "root@gdOv:/home/mr" from pastes, and leaving only "#" for root. Point made, they're not necessary any more.
Let's see:
# ls -l var_lib_apt_170623_1???_gdOv*.tar
-rw-r--r-- 1 root root 125317120 2017-06-23 13:49 var_lib_apt_170623_1349_gdOvm.tar
-rw-r--r-- 1 root root 125317120 2017-06-23 14:45 var_lib_apt_170623_1445_gdOv.tar
#
Looks same... Is it?
# sha256sum var_lib_apt_170623_1???_gdOv*.tar
4ba211401f373b863eeb44f5bee8ba5a3bcee0bbd963e625f2fd3e997605eb51 var_lib_apt_170623_1349_gdOvm.tar
6362458a9b527b3c5b205e44d564fd65c7b8d5c412aae57ce86100b02e30ef32 var_lib_apt_170623_1445_gdOv.tar
#
Nope... What is the difference btwn the two?... Could it be just the timestamp by tar?... No it's not something like the tar program timestamp or such, because:
# tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname).tar /var/lib/apt/
tar: Removing leading `/' from member names
# sha256sum var_lib_apt_170623_14???_gdOv*.tar
var_lib_apt_170623_1445_gdOv.tar var_lib_apt_170623_1457_gdOv.tar
# sha256sum var_lib_apt_170623_14??_gdOv.tar
6362458a9b527b3c5b205e44d564fd65c7b8d5c412aae57ce86100b02e30ef32 var_lib_apt_170623_1445_gdOv.tar
6362458a9b527b3c5b205e44d564fd65c7b8d5c412aae57ce86100b02e30ef32 var_lib_apt_170623_1457_gdOv.tar
# rm var_lib_apt_170623_1457_gdOv.tar
#
So what is different?... Let's investigate. Undestanding of these matters is needed for manual air-gapping that I will (hopefully) perform today. Because that update of the Air-Gapped master can only be successfuly perfomed based on correct understanding of what changes will have happened once I will have run apt-get update and friends later in this online system.
# tar tf var_lib_apt_170623_1445_gdOv.tar | head -5
var/lib/apt/
var/lib/apt/periodic/
var/lib/apt/lists/
var/lib/apt/lists/_home_mr_Devuan_dev-1_dists_jessie_Release
var/lib/apt/lists/_home_mr_Devuan_d-9_dists_stretch_main_binary-amd64_Packages
# ls -l var
ls: cannot access 'var': No such file or directory
#
( This is check to see that I won't be overwriting anything by untar'ing. )
# tar xf var_lib_apt_170623_1445_gdOv.tar && mv -iv var var_170623_1445
'var' -> 'var_170623_1445'
Moving var to the 2017-06-23_14h_45min-stamped dir to make sure var/ is still free to untar into afresh:
# tar xf var_lib_apt_170623_1349_gdOvm.tar && mv -iv var var_170623_1349m
'var' -> 'var_170623_1349m'
In the dir marked with the ending "m":
# ls -l var_170623_1349m/
total 4
drwxr-xr-x 3 root root 4096 2017-06-23 15:09 lib
is the archive from the master machine.
So, now:
# rsync -nav --delete var_170623_1349m/lib/apt/ var_170623_1445/lib/apt/
is the command to run, to find out the difference between the two untar'd archives. Of course, being in the clone I could make the same check with:
# rsync -nav --delete var_170623_1349m/lib/apt/ /var/lib/apt/
But these are still to-the-bit same, both:
# rsync -nav --delete var_170623_1349m/lib/apt/ var_170623_1445/lib/apt/
sending incremental file list
./
daily_lock
sent 3,678 bytes received 27 bytes 7,410.00 bytes/sec
total size is 125,258,781 speedup is 33,808.04 (DRY RUN)
# rsync -nav --delete var_170623_1349m/lib/apt/ /var/lib/apt/
sending incremental file list
./
daily_lock
sent 3,678 bytes received 27 bytes 7,410.00 bytes/sec
total size is 125,258,781 speedup is 33,808.04 (DRY RUN)
#
It is the same the other way round (important is to know you can use the inverse for double checking, but I cut it short to not duplicate too much):
# rsync -nav --delete var_170623_1445/lib/apt/ var_170623_1349m/lib/apt/
...
daily_lock
...
# rsync -nav --delete /var/lib/apt/ var_170623_1349m/lib/apt/
...
daily_lock
...
#
Mistery solved! It's just the daily_lock. And it's just the file's timestamp! See:
# ls -l /var/lib/apt/daily_lock var_170623_1349m/lib/apt/daily_lock
-rw-r--r-- 1 root root 0 2017-06-23 12:51 var_170623_1349m/lib/apt/daily_lock
-rw-r--r-- 1 root root 0 2017-06-23 07:48 /var/lib/apt/daily_lock
#
I do believe that qualifies for the sole difference btwn the two archives.
Enough of the initial checking.
The other archive that I mentioned above is equally essential for this young-distro air-gapping.
It's the var_cache_170623_1352_gdOvm.tar.
# tar -tf var_cache_170623_1352_gdOvm.tar | head -5
var/cache/
var/cache/apt/
var/cache/apt/pkgcache.bin
var/cache/apt/archives/
var/cache/apt/archives/perl_5.24.1-3_amd64.deb
# ls -l var
ls: cannot access 'var': No such file or directory
#
But I'm not happy with the naming. First:
# mv -iv var_170623_1349m/ var_lib_apt_170623_1349m
'var_170623_1349m/' -> 'var_lib_apt_170623_1349m'
# mv -iv var_170623_1445/ var_lib_apt_170623_1445
'var_170623_1445/' -> 'var_lib_apt_170623_1445'
#
Now:
# tar -xf var_cache_170623_1352_gdOvm.tar && mv -iv var var_cache_170623_1352m
'var' -> 'var_cache_170623_1352m'
And I want to do the same checking as with the var_lib_apt archives.
# tar xf var_cache_170623_1543_gdOv.tar && mv -iv var var_cache_170623_1543
'var' -> 'var_cache_170623_1543'
# rsync -nav --delete var_cache_170623_1352 var_cache_170623_1543
var_cache_170623_1352_gdOvm.tar var_cache_170623_1352m/
# rsync -nav --delete var_cache_170623_1352m/ var_cache_170623_1543
var_cache_170623_1543/ var_cache_170623_1543_gdOv.tar
# rsync -nav --delete var_cache_170623_1352m/ var_cache_170623_1543/
sending incremental file list
./
cache/apt/archives/partial/
cache/man/
cache/man/cs/
cache/man/da/
cache/man/de/
cache/man/es/
cache/man/fi/
cache/man/fr/
cache/man/hu/
cache/man/id/
cache/man/it/
cache/man/ja/
cache/man/ko/
cache/man/nl/
cache/man/pl/
cache/man/pt/
cache/man/pt_BR/
cache/man/ru/
cache/man/sl/
cache/man/sv/
cache/man/tr/
cache/man/zh_CN/
cache/man/zh_TW/
sent 9,144 bytes received 187 bytes 18,662.00 bytes/sec
total size is 164,141,650 speedup is 17,591.00 (DRY RUN)
# rsync -nav --delete var_cache_170623_1543/ var_cache_170623_1352m/
sending incremental file list
./
cache/apt/archives/partial/
cache/man/
cache/man/cs/
cache/man/da/
cache/man/de/
cache/man/es/
cache/man/fi/
cache/man/fr/
cache/man/hu/
cache/man/id/
cache/man/it/
cache/man/ja/
cache/man/ko/
cache/man/nl/
cache/man/pl/
cache/man/pt/
cache/man/pt_BR/
cache/man/ru/
cache/man/sl/
cache/man/sv/
cache/man/tr/
cache/man/zh_CN/
cache/man/zh_TW/
sent 9,144 bytes received 187 bytes 18,662.00 bytes/sec
total size is 164,141,650 speedup is 17,591.00 (DRY RUN)
#
Counting the lines of differences either way:
# rsync -nav --delete var_cache_170623_1543/ var_cache_170623_1352m/| wc -l
28
root@gdOv:/home/mr# rsync -nav --delete var_cache_170623_1352m/ var_cache_170623_1543/| wc -l
28
#
and subtracting the leading two and the last three lines, I can try and list what the differences really are:
# for i in $(rsync -nav --delete var_cache_170623_1352m/ var_cache_170623_1543/| head -25| tail -23); do ls -ld var_cache_170623_1352m/$i var_cache_170623_1543/$i ; read FAKE ; done ;
drwx------ 2 _apt root 4096 2017-06-21 08:39 var_cache_170623_1352m/cache/apt/archives/partial/
drwx------ 2 _apt root 4096 2017-06-22 14:13 var_cache_170623_1543/cache/apt/archives/partial/
drwxr-xr-x 31 man man 4096 2017-06-23 12:51 var_cache_170623_1352m/cache/man/
drwxr-xr-x 31 man man 4096 2017-06-23 07:48 var_cache_170623_1543/cache/man/
...
and it does appear to be just timestamps... I must have tried in either of the two, master or clone, to apt-get install something, which failed... Yes I did so... and in the master, and after I cloned it, as the timestamps clearly show. Shouldn't have, but no harm done...
I also ran:
for i in $(rsync -nav --delete var_cache_170623_1352m/ var_cache_170623_1543/| head -25| tail -23); do ls -ld var_cache_170623_1352m/$i ; read FAKE ; ls -ld var_cache_170623_1352m/$i ; read FAKE ; ls -l var_cache_170623_1543/$i ; read FAKE ; ls -l var_cache_170623_1543/$i ; read FAKE ; done ;
but I won't bother with the output. Just these kind of loops may be necessary later on. ( They are really good for sorting archives when you have duplicates and you don't want them all over but, say in only two different places, and in both of those tow you want exact same copies of all data, in, say encrypted storage... )
So, I've checked, and I am starting from same environment, apt-wise, same files in storage (the cache) and in listing (the lib/apt), both those in /var of course, in both the master and this clone.
Because the manual air-gapping will consist in updating this clone, and getting the /var/cache/
(
especially the /var/cache/apt/archives, namely that one holds what I yesterday updated my originally Devuan jessie --in the interim updated with Debian stretch-- ...
[the /var/cache/apt/archives/, namely that one holds what I yesterday updated my Devuan jessie --interim-updated with Debian-stretch-- to Devuan ascii
How to update to ascii?
https://dev1galaxy.org/viewtopic.php?id=721&p=2#p2416
Here:
# ls /var/cache/apt/archives/
/var/cache/apt/archives/:
anacron_2.3-24_amd64.deb libpam-modules_1.1.8-3.6_amd64.deb
apt_1.4.6_amd64.deb libpam-modules-bin_1.1.8-3.6_amd64.deb
apt-utils_1.4.6_amd64.deb libpam-runtime_1.1.8-3.6_all.deb
bash-completion_1%3a2.1-4.3+devuan1_all.deb libperl5.24_5.24.1-3_amd64.deb
ca-certificates_20161130+nmu1_all.deb libpostproc54_7%3a3.2.5-1_amd64.deb
ca-certificates-java_20170531+nmu1_all.deb libproxy1v5_0.4.14-3_amd64.deb
console-setup_1.164_all.deb libsmbclient_2%3a4.5.8+dfsg-2_amd64.deb
console-setup-linux_1.164_all.deb libsndfile1_1.0.27-3_amd64.deb
debconf_1.5.61_all.deb libsqlite3-0_3.16.2-5_amd64.deb
debconf-i18n_1.5.61_all.deb libssh2-1_1.8.0-1_amd64.deb
debian-archive-keyring_2017.5_all.deb libssl1.0.2_1.0.2l-2_amd64.deb
debian-reference-common_2.68_all.deb libssl1.1_1.1.0f-3_amd64.deb
debian-reference-en_2.68_all.deb libswresample2_7%3a3.2.5-1_amd64.deb
debianutils_4.8.1.1_amd64.deb libswscale4_7%3a3.2.5-1_amd64.deb
devuan-baseconf_0.6.4+devuan2_all.deb libsystemd0_232-25_amd64.deb
dpkg_1.18.24_amd64.deb libtasn1-6_4.10-1.1_amd64.deb
ffmpeg_7%3a3.2.5-1_amd64.deb libtiff5_4.0.8-2_amd64.deb
ghostscript_9.20~dfsg-3.2_amd64.deb libudev1_232-25_amd64.deb
git_1%3a2.11.0-4_amd64.deb libvdpau1_1.1.1-6_amd64.deb
git-doc_1%3a2.11.0-4_all.deb libwacom2_0.24-1_amd64.deb
gitk_1%3a2.11.0-4_all.deb libwacom-common_0.24-1_all.deb
git-man_1%3a2.11.0-4_all.deb libwbclient0_2%3a4.5.8+dfsg-2_amd64.deb
keyboard-configuration_1.164_all.deb libwireshark8_2.2.6+g32dac6a-2_amd64.deb
libapt-inst2.0_1.4.6_amd64.deb libwireshark-data_2.2.6+g32dac6a-2_all.deb
libapt-pkg5.0_1.4.6_amd64.deb libwiretap6_2.2.6+g32dac6a-2_amd64.deb
libavcodec57_7%3a3.2.5-1_amd64.deb libwscodecs1_2.2.6+g32dac6a-2_amd64.deb
libavdevice57_7%3a3.2.5-1_amd64.deb libwsutil7_2.2.6+g32dac6a-2_amd64.deb
libavfilter6_7%3a3.2.5-1_amd64.deb linux-libc-dev_4.9.30-2_amd64.deb
libavformat57_7%3a3.2.5-1_amd64.deb locales_2.24-11_all.deb
libavresample3_7%3a3.2.5-1_amd64.deb lock
libavutil55_7%3a3.2.5-1_amd64.deb login_1%3a4.4-4.1_amd64.deb
libblas3_3.7.0-2_amd64.deb multiarch-support_2.24-11_amd64.deb
libblas-common_3.7.0-2_amd64.deb netcat-traditional_1.10-41.1_amd64.deb
libc6_2.24-11_amd64.deb openssl_1.1.0f-3_amd64.deb
libc-ares2_1.12.0-2_amd64.deb partial
libc-bin_2.24-11_amd64.deb passwd_1%3a4.4-4.1_amd64.deb
libc-l10n_2.24-11_all.deb perl_5.24.1-3_amd64.deb
libdbus-1-3_1.10.18-1+devuan2.3_amd64.deb perl-base_5.24.1-3_amd64.deb
libelf1_0.168-1_amd64.deb perl-modules-5.24_5.24.1-3_all.deb
libfftw3-double3_3.3.6p2-1_amd64.deb postfix_3.1.4-7_amd64.deb
libfftw3-single3_3.3.6p2-1_amd64.deb postfix-doc_3.1.4-7_all.deb
libgcrypt20_1.7.6-2_amd64.deb postfix-sqlite_3.1.4-7_amd64.deb
libgme0_0.6.1-1_amd64.deb python-gtk2_2.24.0-5.1_amd64.deb
libgnutls30_3.5.8-6_amd64.deb python-numpy_1%3a1.12.1-3_amd64.deb
libgnutls-openssl27_3.5.8-6_amd64.deb python-six_1.10.0-4_all.deb
libgs9_9.20~dfsg-3.2_amd64.deb rsync_3.1.2-2_amd64.deb
libgs9-common_9.20~dfsg-3.2_all.deb samba-libs_2%3a4.5.8+dfsg-2_amd64.deb
libgtk-3-0_3.22.12-1_amd64.deb sudo_1.8.20p2-1_amd64.deb
libgtk-3-common_3.22.12-1_all.deb sysvinit_2.88dsf-59.3+devuan2_amd64.deb
libgxps2_0.2.5-1_amd64.deb tshark_2.2.6+g32dac6a-2_amd64.deb
liblapack3_3.7.0-2_amd64.deb udev_232-25_amd64.deb
liblogging-stdlog0_1.0.6-1_amd64.deb wamerican_2017.01.22-1_all.deb
libmwaw-0.3-3_0.3.9-2_amd64.deb whiptail_0.52.20-1_amd64.deb
libnewt0.52_0.52.20-1_amd64.deb whois_5.2.16_amd64.deb
libnghttp2-14_1.23.1-1_amd64.deb wireshark_2.2.6+g32dac6a-2_amd64.deb
libnss3_2%3a3.26.2-1.1_amd64.deb wireshark-common_2.2.6+g32dac6a-2_amd64.deb
libp11-kit0_0.23.3-5_amd64.deb wireshark-qt_2.2.6+g32dac6a-2_amd64.deb
libpam0g_1.1.8-3.6_amd64.deb
/var/cache/apt/archives/partial:
#
)
[Because the manual air-gapping will consist in updating this clone, and getting the /var/cache/] and /var/lib/apt/ into master and nothing else! And nothing else... That's what air-gapping is. You keep the system laboratory-style clean from all the internet. Internet doesn't touch it. You install only what you can verify.
In the end that was the reason that I shouted so loud when things weren't verifiable, as soon as I noticed the SHA256 sums didn't match somewhere important! See:
BAD sig with Devuan Jessie 1.0.0-RC
https://lists.dyne.org/lurker/message/2 … b0.en.html
also:
<same title as the email>
https://dev1galaxy.org/viewtopic.php?id=568
Pls. notice that on top of air-gapping, I also constantly read and decrypt the network wherever I go.
Alright. All this may sound like a lot, but the alternative is an unverifiable system... In linux
(
the Mr Linux's own kernel is not very secure thanks to his [ N ]ot [ I ]nvented [ H ]ere-attitude, which recently turned into ripping of that very code that previously wouldn't be accepted because of the NIH-attitude... How bizzare!... But that ripoff has made us poor of grsecurity for any kernels after 4.9... Luckily the 4.9 kernel is LTS... Pls. read what one of the core Devuan developers and inventor and main developer of Heads said about it, and don't worry for years longer:
On grsecurity and status of heads (2017-04-26)
https://heads.dyne.org/news/2017/04/on-grsec.html
)
[In linux] security is not good at all, grsecurity fixes a lot (
Grsecurity/Pax installation on Devuan GNU/Linux
https://dev1galaxy.org/viewtopic.php?id=596
), but still...
Ah... Next, I'll try to check how my method (that I am actually in the process of inventing here) fares in real apt-get'ing. (And I'm posting this upfront. I'm pretty confident in my method that I'm inventing as I write this... Also I'm kind of betting on it... and that is believing that will happen... There's quite some amount of suspense that I feel now...)
Pls. bear with me, I work slowly.
As I said above, replace rsyslog first.
Or maybe wait a few weeks.
( and there is more talk of rsyslog in other posts, on the first page )
Well, guys, I don't have any problems with my rsyslog... And I have managed to upgrade to ascii, and also by using my Air-Gapped/cloning method(s) (links below, or soon).
EDIT 2017-06-23 04:52 UT: (seeing keos had to replace rsyslog in next post) I really don't have issues with rsyslog... But maybe because I installed in peculiar way, as I explained more than 24 hours ago, is below... Or because I am on a non-dbus system [1]
But first, you guys got me scared that I would have to do it all over... which I didn't have to... Namely some of you said somewhere in these forums that Debian stretch can not be updated to Devuan ascii. And I'm not saying that isn't tru. It might be... However...
However, Air-Gapped install and cloning being my way of managing my systems --and I'm almost completely on Devuan only currently in some four (4) or, soon to be, five (5) systems-- I first installed purely in Air-Gapped once Jessie install DVD was out, some two months ago now... Then...
Then, a week or more ago, I realized I needed stuff like mplayer (the time-honored original one, bundled upstream with mencoder <-- that one I need irreplaceably, link below, or soon), and FFmpeg, which were not available in Jessie (neither Debian nor, my choice of course, Devuan), and I have only recently managed to figure out how to install in Air-Gapped by getting packages from a cloned online system, only yesterday I figured that out... I hadn't known how to do that a week or so ago... So...
So, a week or more ago, I realized I needed MPlayer, Mencoder, FFmpeg, and they were available in Debian Stretch, I went for it... With the aid of my:
https://github.com/miroR/jigdo-automate-scripts
and I added the mounted DVDs with file:/// protocol to sources, and updated...
And then I got scared when I found some of you said on this forum that Debian Stretch can not be updated to Devuan Ascii... That being probably so...
That being probably so, I didn't have pure Debian Stretch by any means... My system was Devuan Jessie based... And I was yesterday able to add the sources.d like in:
https://dev1galaxy.org/viewtopic.php?id=721#p2300
And it worked! I have more or less pure shiny lovable Ascii in this cloned machine of my Air-Gapped master machine!
And I'm so happy about it!
Just wanted to share my experience with you... Ascii can be, but it's a little hacking to figure out, be installed in Air-Gapped... I plan to tell more, but...
But first, I'm reporting this only today, because I spent the entire day in checking in details my network traffic of yesterday, and it doesn't look bad... A few things to fix, but it's already passing grade, and I'm not very lenient... Also...
Also pls. bear in mind I work very slowly... I am figuring ways to inspect network traffic pretty deep...
(
network traffic being where things happen on our machines, and where most of the troubles comes form... pls. note that even with my huge care of my systems, my Gentoo was (extremely likely) broken (into)...which happened, in all likelyhood, from the web
)
[figuring ways to inspect network traffic pretty deep] but that's always a tenfold or hundredfold or thousandfold the time to inspect the traffic versus the actual time on the network... Often so much info in just a fraction of a second, let alone long time connected online...
So... I'm very happy with my Ascii deployed in four, soon five, systems of mine...
And I'll populate this post with links that explain the Air-Gapping/Cloning that I use, and other stuff that I mentioned...
Now I first have to examine the traffick... And...
And there's more installing on my loving gleaming and kind Ascii... more configuring it, tweaking it... in slow time...
---
[1] for the Air-Gapped/Cloning, and also for the sans-dbus, and also on how I know my Gentoo was (very likely) broken (into), there are links, in:
https://lists.dyne.org/lurker/message/2 … 7a.en.html
or in the thread it belongs to
Gotto go... More to be added here (or explain with a link to more), and also to fix typoes, pls. bear with me.
Asking for help on Pale Moon forum as well:
Building Pale Moon on Devuan fails
https://forum.palemoon.org/viewtopic.php?f=57&t=15751
And receiving, and also providing some tips at the newest post:
( same title as above, actually it's the same topic )
https://forum.palemoon.org/viewtopic.ph … 51#p114421
But, I think I talked my Palemoon to log SSL-keys... Taken before I posted that, but it's this one, I think:
4523354827de15973a92035031d6ea6a480dc5311650f2c7f6fcec51279535a0 dump_170521_1448_loc.pcap
However, I got to rush now... There're also some not-so-good realizations... But, gotta go.
Asking for help on Pale Moon forum as well:
Building Pale Moon on Devuan fails
https://forum.palemoon.org/viewtopic.php?f=57&t=15751
The build phase went well (I fixed a number of compilation failures that were just because of missing requirements).
But the packaging phase failed, and it failed like this:
0:00.25 /usr/bin/make -C . -j5 -s -w package
0:00.27 make: Entering directory '/home/mr/pmmain/native/pmbuild'
0:00.29 make[1]: Entering directory '/home/mr/pmmain/native/pmbuild/browser/installer'
0:00.33 make[2]: Entering directory '/home/mr/pmmain/native/pmbuild/browser/installer'
0:00.34 make[3]: Entering directory '/home/mr/pmmain/native/pmbuild/browser/installer'
0:06.39 Executing /home/mr/pmmain/native/pmbuild/dist/bin/xpcshell -g /home/mr/pmmain/native/pmbuild/dist/bin/ -a /home/mr/pmmain/native/pmbuild/dist/bin/ -f /home/mr/pmmain/pmsrc/toolkit/mozapps/installer/precompile_cache.js -e precompile_startupcache("resource://gre/");
0:06.44 out of memory
0:06.44 Assertion failure: [unhandlable oom] OOM in createJitRuntime, at /home/mr/pmmain/pmsrc/js/src/jscntxt.cpp:1183
0:06.45 Traceback (most recent call last):
0:06.45 File "/home/mr/pmmain/pmsrc/toolkit/mozapps/installer/packager.py", line 405, in <module>
0:06.45 main()
0:06.45 File "/home/mr/pmmain/pmsrc/toolkit/mozapps/installer/packager.py", line 399, in main
0:06.45 args.source, gre_path, base)
0:06.45 File "/home/mr/pmmain/pmsrc/toolkit/mozapps/installer/packager.py", line 157, in precompile_cache
0:06.45 errors.fatal('Error while running startup cache precompilation')
0:06.45 File "/home/mr/pmmain/native/pmsrc/python/mozbuild/mozpack/errors.py", line 101, in fatal
0:06.45 self._handle(self.FATAL, msg)
0:06.45 File "/home/mr/pmmain/native/pmsrc/python/mozbuild/mozpack/errors.py", line 96, in _handle
0:06.45 raise ErrorMessage(msg)
0:06.45 mozpack.errors.ErrorMessage: Error: Error while running startup cache precompilation
0:06.47 /home/mr/pmmain/pmsrc/toolkit/mozapps/installer/packager.mk:36: recipe for target 'stage-package' failed
0:06.47 make[3]: *** [stage-package] Error 1
0:06.47 make[3]: Leaving directory '/home/mr/pmmain/native/pmbuild/browser/installer'
0:06.47 /home/mr/pmmain/pmsrc/toolkit/mozapps/installer/packager.mk:81: recipe for target 'make-package' failed
0:06.48 make[2]: *** [make-package] Error 2
0:06.48 make[2]: Leaving directory '/home/mr/pmmain/native/pmbuild/browser/installer'
0:06.48 /home/mr/pmmain/pmsrc/config/rules.mk:541: recipe for target 'default' failed
0:06.48 make[1]: *** [default] Error 2
0:06.48 make[1]: Leaving directory '/home/mr/pmmain/native/pmbuild/browser/installer'
0:06.48 /home/mr/pmmain/pmsrc/browser/build.mk:9: recipe for target 'package' failed
0:06.48 make: *** [package] Error 2
0:06.48 make: Leaving directory '/home/mr/pmmain/native/pmbuild'
I'll gladly provide any additional info necessary.
current title: Palemoon installation from source
---
I'm aware of topic on:
Browser: Palemoon!
https://dev1galaxy.org/viewtopic.php?id=169
and reference to Palemoon in:
Make a live-CD with live-sdk
https://dev1galaxy.org/viewtopic.php?id=551
( as well as the talk that has been there on the Devuan DNG ML, such as:
Life After Firefox 56
https://lists.dyne.org/lurker/message/2 … 9c.en.html
)
But that deb package doesn't hold an option to:
How to re-enable key logging to $SSLKEYLOGFILE
https://forum.palemoon.org/viewtopic.php?f=57&t=15080
( or more here as well:
Tracking protection and NSS SSL secrets logging (two security questions)?
https://forum.palemoon.org/viewtopic.php?f=26&t=12544 )
In other words, I have to compile my own Palemoon...
And I've been trying that the whole day today.
And I'm stuck.
First of all, I chose to follow:
A linux build framework for Pale Moon
https://forum.palemoon.org/viewtopic.ph … 8&start=20
And the reason that I'm reporting my issue here is because it might be some package needs tweaking in my Devuan, so it might be someone could envisage the solution here sooner than in Palemoon Forum (but I will ask there as well).
So, the error in the next post, it tells stories to the knowledgeable.
Wow. It took me five attempts to get it right. Here's a video of manual partitioning
...
http://distro.ibiblio.org/refracta/misc … rypt-4.ogv
I think I see now... It took you five attempts, and it took me applying workarounds instead, for my main Devuan Air-Gapped + cloned system(s).
But the two, first 8min of 81min video (the remaining 73min is randomizing the three volumes) and the second 4 min video, are both on another Devuan system of mine, in the works.
And thanks to your demonstration, I think I can now do it.
I think I'll soon (well, it's late now in Europe, and in your UK, if I correctly placed you in my memory)...
I think I'll soon be able to thank you for making sense out of this tips page...
--
LATER: Yes. It works! Thanks! I'll post the successful encrypted root+swap (and one more partition, just the /boot is unencrypted in the entire 200GB old Western Digital) screencast tomorrow I hope.
Wow. It took me five attempts to get it right. Here's a video of manual partitioning (you can get there from non-expert as well as expert install).
Create a boot partition
Create a partition to be used as physical volume for encryption.
Uh... watch the video.There are a lot of places where I drop the highlight down below the item I'm about to select, and then move up one line and select it. Did that in case it's hard to read in the red highlight.
http://distro.ibiblio.org/refracta/misc … rypt-4.ogv
I didn't know you were doing it... And I can't view it before I give the links of my videos that show where I get stuck...
Because I just minimally prepared the videos, and I like to post the sooned the more credible, when I document things:
https://www.croatiafidelis.hr/foss/cap/ … rypt-root/
(no HTML at the time of posting this)
But the videos (verifiable with SHA256 hashes, PGP-signed):
https://www.croatiafidelis.hr/foss/cap/ … 81min.webm
https://www.croatiafidelis.hr/foss/cap/ … _2309.webm
show where I'm stuck...
Got to rush (I'm online, and I'm not a wizard... been owned in the past), and then I'll watch your video...
I can believe that encrypted install with the debian-installer failed. It is not intuitive or straightforward, but if you can find the right path through the maze, you will get to the end. Here's a guide. Unfortunately, the pictures are long gone, but the words should help you get the steps in the right order. Also, if you go to forums.debian.net and search for posts about encrypted lvm install, you will find a couple of guides.
Read it, up unto "Adding a keyfile (optional)" (because in the:
/usr/share/doc/cryptsetup/README.initramfs.gz
there is great stuff that I want to re-read (and re-read till I can apply it, such as decrypt_derived) first.
Maybe it's the maze, but I do think I tried the way explained in that guide, but it wouldn't work for me... Not sure, maybe I get a way to retry soon (really don't know...) and be able to tell...
Thanks for caring!
I successfully compiled grsecurity for my Gentoo, and also for my Devuan, from that git repo that you can read in that emal (on either location):
...grsec, unofficial, by minipli
https://github.com/minipli/linux-unoffi … cial_grsec
I have then used paxrat, which I haven't found in Devuan (could be my lack of understanding):
https://packages.debian.org/sid/paxrat
installed it:
# dpkg -i <the-package>
applied it, and now I browse and am posting this with Iceweasel.
$ uname -a
Linux localhost 4.9.27-unofficial+grsec170512-22 #1 SMP PREEMPT Fri May 12 22:33:08 UTC 2017 x86_64 GNU/Linux
$
The regular installer isos use the debian installer, so encryption is supported.
That's what the books say. But, I tried quite a few times. Unfortunately, my Gentoo is broken currently, and I couldn't demonstrate it my usual way, with screencasts and traffic dumps while running Devuan in a VM... (And adapting my uncenz set of scripts for Devuan will take longer.)
But I assure you it was a real no go. Encrypt the partitions -- fine, but can't use them, no setting / on any of the partitions set to be encrypted... Try again. Set a partition to be / , well then you have to set some file system on it (ext4 the usual choice)... And then you can't encrypt them any more... And I didn't want to use LVM, just plain one /boot and the rest of the system all in / and one swap...
You can encrypt individual partitions or use lvm to have multiple partitions inside one encrypted volume. For lvm, you can do it manually or let the installer do the partitioning for you.
The devuan-live isos use refractainstaller, which supports encryption of separate root and/or home partitions. It does not support lvm, and it does not support encrypted swap partition, but it can create a swapfile inside the encrypted root partition.
It would be great if I could find time and dive into the above more... I trust your word though that it is so, but I couldn't get it to work for me.
I had to chroot into a copied content of my / partition, and run:
# update-initramfs -t
from it, and only then my encrypted / (and swap as well!) were functional. (And there were more interim steps, which I can not remember in detail any more, but they were either what I found in the links or in some manpages available in Devuan installation.) And now that I compiled unoffic-grsec kernel, the initrd for it is just perfect... It all set into place...
For now, I'll only get readers the links, without repeating what is clearly explained in those.
First of all, installing an encrypted root+swap Devuan system may already be supported in Devuan, but I wasn't able to get it (and I made numerous tries), or if it isn't at the time of writing this how-to, it is likely to be in the future when, kind aspirant Devuaner, are reading it. Pls. check around before diving in here!
(We need not shy from our precursor's ducumentation, and they cherich it in the free way, and we need to thank them for that:)
https://wiki.debian.org/initramfs
needed, the key to build an encrypted root+swap Devuan system.
LINKS/NAMES OF MAN PAGES
https://wiki.debian.org/InitramfsDebug
my first booting into a freshly installed partially working encrypted root+swap Devuan system was thanks to the sticking of "break" into kernel command line
There's also:
https://wiki.debian.org/CryptsetupDebug
but it hasn't been needed (yet) in my tentatives
Here is where, allegedly by some, encrypted root+swap is available out-of-the-box:
https://wiki.debian.org/DebianInstaller/PartmanCrypto
and also Ubuntu installer claims it can do it, as I read somewhere in some links starting from this page:
https://help.ubuntu.com/community/EncryptedFilesystem
This one is four (4) years old, but it helped me a lot to get going:
http://madduck.net/docs/cryptdisk/
And there is this guide, from my other home-distro:
https://wiki.gentoo.org/wiki/Custom_Initramfs
And maybe bug reports like this:
initramfs-tools: Missing crypto-components in initramfs when explicitly requested
https://bugs.debian.org/cgi-bin/bugrepo … bug=783393
That much for now. And just: after reading the madduck's page linked above (http://madduck.net/docs/cryptdisk/) I slowly started figuring out how to do it...
This is a placeholder. I managed to do it, and I need the link, see also:
Grsecurity/Pax installation on Devuan GNU/Linux
https://dev1galaxy.org/viewtopic.php?pid=1422#p1422
It's still partly a placeholder. Quickly, if I manage to paste from lynx... Namely I don't (yet) know where to get and how to install
paxctl-ng, and Iceweasel crashes yet, without paxctl{,-ng} treatment...
But, hey, I'm pasting here from my Devuan! ...
This is a placeholder. I managed to do it, and I need the link before I go to sleep.
(
I'll be posting from Devuan, but my Mutt is only in Gentoo yet, and the link I need for this thread:
unoffic-grsec 4.9.27 kernel compile, one last hurdle
https://lists.dyne.org/lurker/message/2 … 31.en.html [1]
where I need to send an email to, just next... --and then go to sleep, so tired, but so happy!--
)
---
[1] EDIT: Unfortunately, Devuan DNG Mailing List appears to (currently) scrub all attachments. Another mail archive to the rescue! Pls., for now, advanced users can find useful tips if they study esp. this attachment:
grsec-dev1-compile.sh.gz
which is part of this email:
unoffic-grsec 4.9.27 kernel compile, one last hurdle
(which is the same email as in Devuan DNG ML, just the attachments are available)
(of course I hope that condition will be fixed in Devuan DNG; I did write a report --or here-- about it)
It's been fixed and is in the process of being automated to eliminate such errors in the future.
Yeah, and I'm at peace. Dear golinux, did you read my praise of you in my follow-up to that Jaromil's email?
( I mean in the attachment that I published there under condition of invalidity, just to show what I was going through. )
I'm happy, and I hope that I can be forgiven for my not-so-strong doubt in how the project was handled that I expressed in that follow-up email, as well as some harshness...
I really saw the matter as urgent, and I went without sleep to give full information on the matter... And it is now full information, but I need to explain it so that less advanced users can understand it in details, such as extractions of the downloaded files from SSL-encrypted conversations...
Devuan is getting very strong! Eviva Devuan!
People, keep humble, don't relish in others' defeat, but be generous and understanding as long as not hurting FOSS and Devuan project... Keep humble, as there will be more fight. Guarrantied! (I feel it.)
It really would be a good thing to reply to what I kindly asked in the bottom part of my email:
BAD sig with Devuan Jessie 1.0.0-RC
https://lists.dyne.org/lurker/message/2 … b0.en.html
and to reply with a PGP-signed email... It's a boolean value, true or false, that I'm asking about... But here is also fine.
So I'll repeat my query, by pasting from there.
Is this media:
devuan_jessie_1.0.0-RC_amd64_DVD.iso
from:
https://files.devuan.org/devuan_jessie_rc/
correct if its hash is:
f4b0fc1fd3c7769055f4b611d8173a6a3be38eced0bcc72c65cc2fefa0914837 devuan_jessie_1.0.0-RC_amd64_DVD.iso
?
Thank you!
title: BAD sig with Devuan Jessie 1.0.0-RC
---
There is, apparently, an issue with PGP-verification of the media at:
https://files.devuan.org/devuan_jessie_rc/
I have tried to, be it alert the team about it, in case the fault lies at the server or humans at Devuan, be it get some help in case the issue is on the way or at my premises. The former looks to me more and more likely as I study this case.
Pls find more information in the thread on Devuan is Not Gnome ML starting from:
BAD sig with Devuan Jessie 1.0.0-RC
https://lists.dyne.org/lurker/message/2 … 59.en.html
as well as at:
BAD sig with Devuan Jessie 1.0.0-RC
https://www.croatiafidelis.hr/foss/cap/ … n-iso-sig/
(
where from, don't skip visiting:
https://www.croatiafidelis.hr/foss/devu … 78.en.html
which is the same, but complete email --in the dyne.org is the resent same message, just without attachment-- that was dropped from the list because it was 110k in size, due to the attachment:
dump_170423_1642_g0n.pcap (application/vnd.tcpdump.pcap)
)
I will pick up where I reached in those two internet places linked above.
This time, I need to leave mostly intact (I'll add a space in wget lines, so they don't be links, and other minor redacting) the following paste from my terminal, else I couldn't explain the cd'ing into directory with nearly two months old:
-rw-r--r-- 1 miro miro 2327 2016-04-29 11:07 SHA256SUMS
-rw-r--r-- 1 miro miro 1513 2016-04-29 11:09 SHA256SUMS.asc
hashes and sig that verify correctly (sic!). They are, obviously, from the beta2, IIRC. And what that fact proves, is that Jaromil's PGP public key that I had received/imported into my GnuPG is very likely the correct PGP key, and also that my GnuPG works correctly.
miro@g0n /some/where/Devuan $ history | grep SHA256SUMS | grep wget
522 wget -nc https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS.asc
527 wget -nc https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS.asc
529 wget -nc https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS
538 wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS
539 wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS.asc
595 wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS
596 wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS.asc
611 wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS.asc
612 wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS
760 wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS
765 history | grep SHA256SUMS | grep wget
miro@g0n /some/where/Devuan $ !611
wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS.asc
--2017-04-24 09:00:48-- https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS.asc
Resolving files.devuan.org... 104.236.249.173
Connecting to files.devuan.org|104.236.249.173|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1513 (1.5K) [application/octet-stream]
Saving to: ‘SHA256SUMS.asc’
SHA256SUMS.asc 100%[========================================>] 1.48K --.-KB/s in 0s
2017-04-24 09:00:49 (11.0 MB/s) - ‘SHA256SUMS.asc’ saved [1513/1513]
miro@g0n /some/where/Devuan $ !612
wget https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS
--2017-04-24 09:00:51-- https://files.devuan.org/devuan_jessie_rc/installer-iso/SHA256SUMS
Resolving files.devuan.org... 104.236.249.173
Connecting to files.devuan.org|104.236.249.173|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 621 [application/octet-stream]
Saving to: ‘SHA256SUMS’
SHA256SUMS 100%[========================================>] 621 --.-KB/s in 0s
2017-04-24 09:00:51 (3.92 MB/s) - ‘SHA256SUMS’ saved [621/621]
miro@g0n /some/where/Devuan $ cd Prev/
miro@g0n /some/where/Devuan/Prev $ gpg --verify SHA256SUMS.asc SHA256SUMS
gpg: Signature made Fri 29 Apr 2016 11:10:22 CEST
gpg: using RSA key 73B35DA54ACB7D10
gpg: Good signature from "Denis Roio (Jaromil) <jaromil@dyne.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6113 D89C A825 C5CE DD02 C872 73B3 5DA5 4ACB 7D10
miro@g0n /some/where/Devuan/Prev $ ls -l SHA256SUMS.asc SHA256SUMS
-rw-r--r-- 1 miro miro 2327 2016-04-29 11:07 SHA256SUMS
-rw-r--r-- 1 miro miro 1513 2016-04-29 11:09 SHA256SUMS.asc
miro@g0n /some/where/Devuan/Prev $ cd ../
miro@g0n /some/where/Devuan $ ls -l SHA256SUMS.asc SHA256SUMS
-rw-r--r-- 1 miro miro 621 2017-04-21 17:56 SHA256SUMS
-rw-r--r-- 1 miro miro 1513 2017-04-22 09:40 SHA256SUMS.asc
miro@g0n /some/where/Devuan $ gpg --verify SHA256SUMS.asc SHA256SUMS
gpg: Signature made Sat 22 Apr 2017 09:44:23 CEST
gpg: using RSA key 73B35DA54ACB7D10
gpg: BAD signature from "Denis Roio (Jaromil) <jaromil@dyne.org>" [unknown]
miro@g0n /some/where/Devuan $
I have also made other easy/quick PGP verifying on:
Devuan Release Archive
https://files.devuan.org/devuan_jessie_rc/
I checked embedded/ and virtual/ and rechecked installer-iso/ which all contain files named SHA256SUMS SHA256SUMS.asc, by downloading/re-downloading those, and all the three pairs fail.
So, firstly I hope someone is working on investigating these findings of mine, and if they are true, fixing the issue.
Secondly, I'd kindly re-ask of Devuan devs just a simple confirmation, and I'll put it in a separate post, next.