You are not logged in.
- Topics: Active | Unanswered
Pages: 1
#1 Re: Hardware & System Configuration » [CLOSED] secure erase failure - unlock ssd with hdparm not possible » 2019-09-13 17:46:17
thx b3bgd.
Of course I forgot....
However that gave me an:
SECURITY_UNLOCK: Invalid argumentinstead, but this too:
Security:
Master password revision code = 1
supported
enabled
not locked
not frozen
not expired: security count
supported: enhanced erase
20min for SECURITY ERASE UNIT. 60min for ENHANCED SECURITY ERASE UNIT.so I can run the erase command.
I have done that already and it was running corectly accept that:
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.was showing up again.
Hower the:
Master password revision code = 65534has changed to
Master password revision code = 1and after the erase it is still there....
Dunno what's the problem but I do not care anymore, a friend of mine took the SSD to use it so I do not need a solution here anymore.
#2 Hardware & System Configuration » [CLOSED] secure erase failure - unlock ssd with hdparm not possible » 2019-09-11 01:05:27
- nogeek
- Replies: 3
I have connected the SSD via a SATA to USB 2.0 Adpater and it is reconized by the computer:
$ lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sdb 8:16 0 447.1G 0 disk#
Checking if secure erase is possible (printing here only the security section):
$ hdparm -I /dev/sdb
Security:
supported
not enabled
not locked
not frozen
not expired: security count
supported: enhanced erase
20min for SECURITY ERASE UNIT. 60min for ENHANCED SECURITY ERASE UNIT.#
Have had set a passwort.
$ hdparm --user-master u --security-set-pass sec123abc /dev/sdb
security_password: "sec123abc"
/dev/sdb:
Issuing SECURITY_SET_PASS command, password="sec123abc", user=user, mode=high
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.
SECURITY_SET_PASS: Invalid argument#
Because of this error I checked the SSD again and three time in a row I get different output each time I run the command:
$ hdparm -I /dev/sdb
/dev/sdb:
ATA device, with non-removable media
Standards:
Likely used: 1
Configuration:
soft sectored
head switch time > 15us
fixed drive
disk xfer rate <= 5Mbs
disk xfer rate > 5Mbs, <= 10Mbs
data strobe offset option
format speed tolerance gap reqd
Logical max current
cylinders 21314 0
heads 0 0
sectors/track 0 0
--
Logical/Physical Sector size: 512 bytes
device size with M = 1024*1024: 0 MBytes
device size with M = 1000*1000: 0 MBytes
cache/buffer size = unknown
Capabilities:
IORDY not likely
Cannot perform double-word IO
R/W multiple sector transfer: not supported
DMA: not supported
PIO: pio0#
$ hdparm -I /dev/sdb
/dev/sdb:
SG_IO: bad/missing sense data, sb[]: 70 00 03 00 00 00 00 0a 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ATA device, with non-removable media
Standards:
Likely used: 1
Configuration:
Logical max current
cylinders 0 0
heads 0 0
sectors/track 0 0
--
Logical/Physical Sector size: 512 bytes
device size with M = 1024*1024: 0 MBytes
device size with M = 1000*1000: 0 MBytes
cache/buffer size = unknown
Capabilities:
IORDY not likely
Cannot perform double-word IO
R/W multiple sector transfer: not supported
DMA: not supported
PIO: pio0
#
$ hdparm -I /dev/sdb
/dev/sdb:
ATA device, with non-removable media
Model Number: TOSHIBA-TR200
Serial Number: 49QB725OKBSN
Firmware Revision: SBFA15.2
Transport: Serial, ATA8-AST, SATA 1.0a, SATA II Extensions, SATA Rev 2.5, SATA Rev 2.6, SATA Rev 3.0
Standards:
Supported: 11 10 9 8 7 6 5
Likely used: 11
Configuration:
Logical max current
cylinders 16383 16383
heads 16 16
sectors/track 63 63
--
CHS current addressable sectors: 16514064
LBA user addressable sectors: 268435455
LBA48 user addressable sectors: 937703088
Logical Sector size: 512 bytes
Physical Sector size: 512 bytes
Logical Sector-0 offset: 0 bytes
device size with M = 1024*1024: 457862 MBytes
device size with M = 1000*1000: 480103 MBytes (480 GB)
cache/buffer size = unknown
Form Factor: 2.5 inch
Nominal Media Rotation Rate: Solid State Device
Capabilities:
LBA, IORDY(can be disabled)
Queue depth: 32
Standby timer values: spec'd by Standard, no device specific minimum
R/W multiple sector transfer: Max = 16 Current = 16
DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6
Cycle time: min=120ns recommended=120ns
PIO: pio0 pio1 pio2 pio3 pio4
Cycle time: no flow control=120ns IORDY flow control=120ns
Commands/features:
Enabled Supported:
* SMART feature set
Security Mode feature set
* Power Management feature set
* Write cache
* Look-ahead
* Host Protected Area feature set
* WRITE_BUFFER command
* READ_BUFFER command
* NOP cmd
* DOWNLOAD_MICROCODE
SET_MAX security extension
* 48-bit Address feature set
* Mandatory FLUSH_CACHE
* FLUSH_CACHE_EXT
* SMART error logging
* General Purpose Logging feature set
* WRITE_{DMA|MULTIPLE}_FUA_EXT
* 64-bit World wide name
* {READ,WRITE}_DMA_EXT_GPL commands
* Segmented DOWNLOAD_MICROCODE
* Gen1 signaling speed (1.5Gb/s)
* Gen2 signaling speed (3.0Gb/s)
* Gen3 signaling speed (6.0Gb/s)
* Native Command Queueing (NCQ)
* Phy event counters
* READ_LOG_DMA_EXT equivalent to READ_LOG_EXT
DMA Setup Auto-Activate optimization
Device-initiated interface power management
* Software settings preservation
Device Sleep (DEVSLP)
* DOWNLOAD MICROCODE DMA command
* SET MAX SETPASSWORD/UNLOCK DMA commands
* WRITE BUFFER DMA command
* READ BUFFER DMA command
* Data Set Management TRIM supported (limit 8 blocks)
Security:
Master password revision code = 65534
supported
not enabled
not locked
not frozen
not expired: security count
supported: enhanced erase
20min for SECURITY ERASE UNIT. 60min for ENHANCED SECURITY ERASE UNIT.
Logical Unit WWN Device Identifier: 58ce38ec0124245e
NAA : 5
IEEE OUI : 8ce38e
Unique ID : c0124245e
Device Sleep:
DEVSLP Exit Timeout (DETO): 100 ms (drive)
Minimum DEVSLP Assertion Time (MDAT): 10 ms (drive)
Checksum: correct#
When I run the command now I only get the last sort of output.
It says that there is a password now, but if I try to unlock the SSD the following happens:
$ hdparm --user-master u --security-unlock sec123abc /dev/sdb
security_password: "sec123abc"
/dev/sdb:
Issuing SECURITY_UNLOCK command, password="sec123abc", user=user
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.
SECURITY_UNLOCK: Invalid argument#
I tried to disable it again (I know that I have to unlock it first but everything before works strange, so I just give it a try):
$ hdparm --user-master u --security-disable sec123abc /dev/sdb
security_password: "sec123abc"
/dev/sdb:
Issuing SECURITY_DISABLE command, password="sec123abc", user=user
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.
SECURITY_UNLOCK: Invalid argumentSo something seems to be wrong with the kernel?
My Kernel is linux-image-5.2.13-gnu (it is linux-libre), I did not modify it or something like that.
#
Then I red here:
https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase
that using a USB-Interface makes problems... (to late badly)
#
So I put the SSD into a SATA drive of another computer with devuan live minimal running, install hdparm and try to unlock and disable, what gives me the same output like this guy here got:
https://www.overclockers.com/forums/arc … 93716.html
On the live system runs the default devuan kernel.
Further he solved his problem by using a master password to unlock his SSD.
There are (unofficial) lists on the web with them. here is one of them:
https://ipv5.wordpress.com/2008/04/14/l … passwords/
I have a Toshiba device here and figured out that "the" masterpassword (it is the only one I have found in several lists) is 32 spaces, but that did not work:
$ hdparm --user-master m --security-set-pass /dev/sdb
missing PASSWDI tried 34 spaces between "--security-set-pass" and "/dev/sdb", because you need a space after each option/parameter and 32 spaces (because the first logical did not work and I am frustrated...).
#
I did not run the erase command and I do not will!
It would be nice if anyone could help me out....
#3 Re: Desktop and Multimedia » Does this reminds you of systemd? » 2019-06-23 21:56:05
I always do a minimal installation and never get any package with "pulse" in the name.
Only libpulse0 is on my final-system, cause mpv and ffmpeg need it.
apt-cache rdepends *pulse*let you see all packages wich are depending on packages with "pulse" in the name.
#4 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-23 15:15:03
Why do you care if your ISP can see which packages you are downloading?
https does not only pretend listening, it also pretends Man-in-the-Middle-Attacks.
And even if it only protects me from listening: my ISP do not need to know anything (data economy). ;-)
Try
wget https://deb.debian.org/debian-security/pool/updates/main/f/firefox-esr/firefox-esr_60.7.1esr-1~deb9u1_amd64.deb # dpkg -i firefox-esr_60.7.1esr-1~deb9u1_amd64.deb
If I would do this I would run:
torsocks wget --https-only --no-cookies foobar But just as I say above it is not Firefox ESR 60.7.2.
https://www.mozilla.org/en-US/security/ … sa2019-19/
You just downloaded the source package, [..]
I just posted the wrong link (was tired) but thanks I will correct the other post ;-)
Thank you all for you posts and have a nice day! :-)
#5 Re: Hardware & System Configuration » safe networking with only one tool » 2019-06-23 03:37:58
nogeek wrote:It do not work for me.
You need to post exactly what you tried so that we can see where you went wrong.
Have you populated /etc/resolv.conf with valid nameservers?
Hey Head_on_a_Stick.
It is some time ago I have done this, so I mostly forgot what I have done...
But yes I have had populated /etc/resolv.conf with valid nameservers.
nogeek wrote:ip addr add 192.168.0.254/27 brd + dev eth0followed by
ip link set eth0 upThat address looks wrong — are you sure you need a /27 subnet mask? Most networks will use /24 instead.
And you don't need the brd + bit at all.
To determine the correct address range enable DHCP, use that to connect and then run
ip a ip rThe addresses can then be copied for your custom commands.
I use the plain ip command & wpa_supplicant to connect via wireless on my laptop, it works well.
Thank you for the advice of a professional! ;-)
I hope I will soon find some time to try this out, and I will reporting it here if it works for me or not with a precise description what I have done (like in my first post).
#6 Re: Hardware & System Configuration » safe networking with only one tool » 2019-06-23 03:28:12
IMO you're too paranoid about DHCP.
Maybe you should read my first post again... and the wikipedia entries too.
I figured out that in "Computer-Stuff" forums some people call you paranoid when you just a careful person...
I do not understand this and to me it sounds like a slander...
But maybe this people just do not known what being paranoid is like?
Paranoid means the fear of something that do not exist, that's all!
But the security issues about dhcp do exist.
I've noticed you mentioned your setup uses a router, so I assume that's also your gateway to the web via your ISP.
Is it possible to setup a network without using a router (and ISP) (maybe that is a hint for mesh networking? yeah... I am a noob in the most things...).
That router has a firewall to prevent access from outside to your network.
I am not sure about that firewall in the router you have talked about, I can not find anything like that in the router preferences.
Btw: Soon I will buy a Free-Open-Hardware LAN-Router from ThinkPenguin with LibreCMC pre-installed. ;-)
Re-install DHCP, re-enable it on your router so you can spend your time on other things.
At the moment I am using ifup and ifdown and I will never need or want dhcp again.
#7 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-23 03:00:44
If you need the latest version right away, you can always get it directly from mozilla and just unpack it and run it. That's a more conservative choice than upgrading to ceres.
Hey, thanks for your answer.
Yeah I ment a package with the newest security patches (version was the wrong word sorry).
Before you posted this I have had it already downloaded from here:
https://releases.mozilla.org/pub/firefox/releases/
I downloaded the Firefox ESR package from here:
https://packages.debian.org/stretch/firefox-esr
I now this website, but this link is not the source where you have to download it from, it is here:http://security.debian.org/debian-secur … ian.tar.xz
http://security.debian.org/debian-secur … _amd64.deb
and this is not https.
#8 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-21 23:06:06
http://auto.mirror.devuan.org/merged
does not exist anymore, it redirects to
http://packages.roundr.devuan.org/merged
now.
I tried this http-only-shit after I tried all https-mirros from this list:
https://pkgmaster.devuan.org/mirror_list.txt
(btw:https://espejito.fder.edu.uy/devuan does not exist either...)
I runned
apt update -o Acquire::http::AllowRedirect=falsefollowed by
apt list --upgradableand got
firefox-esr/stable-security 60.7.1esr-1~deb9u1 amd64 [upgradable from: 60.7.0esr-1~deb9u1]
vim-common/stable-security 2:8.0.0197-4+deb9u2 all [upgradable from: 2:8.0.0197-4+deb9u1]
vim-tiny/stable-security 2:8.0.0197-4+deb9u2 amd64 [upgradable from: 2:8.0.0197-4+deb9u1]
xxd/stable-security 2:8.0.0197-4+deb9u2 amd64 [upgradable from: 2:8.0.0197-4+deb9u1]So no actual version of firefox either!
I am not an expert, but this is big crap!
I really need firefox, a safe one!
At least: I would never upgrade my system over http...
#9 Re: Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-20 23:31:31
Try the old repository :
deb http://auto.mirror.devuan.org/merged ascii main contrib non-free deb http://auto.mirror.devuan.org/merged ascii-backports main contrib non-free deb http://auto.mirror.devuan.org/merged ascii-updates main contrib non-free deb http://auto.mirror.devuan.org/merged ascii-security main contrib non-free
This mirror do not work with https, so I won't use it.
OMG! Not another thread about this . . .
Like wich ones before?
UPDATE:
The link did not work, it was search for the word 'firefox' in this forum
Seems like there is no up2date version of firefox in all branches:
https://pkginfo.devuan.org/cgi-bin/d1pk … elease=any
Or is this website out of date and if so why it exists?
BTW:
I am using this repo:
deb https://pkgmaster.devuan.org/merged ascii main
deb https://pkgmaster.devuan.org/merged ascii-security main
deb https://pkgmaster.devuan.org/merged ascii-updates main
#10 Re: Hardware & System Configuration » safe networking with only one tool » 2019-06-20 22:33:50
I forgot to post here in the past:
It do not work for me.
#11 Desktop and Multimedia » [SOLVED] firefox-esr update » 2019-06-20 22:32:02
- nogeek
- Replies: 13
There are two new Versions of firefox-esr because of two bugs one critical and one high:
https://www.mozilla.org/en-US/security/ … sa2019-18/
https://www.mozilla.org/en-US/security/ … sa2019-19/
But a apt update do not get me these versions.
Why?
It is not the first time I have to wait long time before I can upgrade firefox...
That is a high security risc, cause some people need to allow Javascript for banking or something else...
#12 Hardware & System Configuration » safe networking with only one tool » 2019-01-31 05:06:46
- nogeek
- Replies: 7
Hello everybody.
=->
I am at the beginning of learning how networking works.
Long time ago I have removed wicd-gtk and from there on I used only the dhclient command.
I have read some explanations and manual entries about networking with GNU / Linux and there are still many things I do not understand (seems like an own world to me ^o^), but I figured out, that dhcp has some heavy security issues:
https://en.wikipedia.org/wiki/Dynamic_H … l#Security
https://en.wikipedia.org/wiki/Rogue_DHCP
https://en.wikipedia.org/wiki/DHCP_snooping
https://en.wikipedia.org/wiki/Network_i … starvation
, so I decided not to use it anymore, removed the dhcp packages and disabled it in my router.
Further I understand that the net-tools seems to be obsolet and that it will be totally replaced by iproute2 in the future (correct me if I am wrong), and that they are only in the repos (and the basic install) because some scripts or programs are still use them.
I have removed net-tools from my system, cause I do not have any packages installed wich depend on it:
apt-cache rdepends net-toolsAt the moment I am using ifupdown to get my network working after I logged in.
But I think I have understand that ifupdown is only a tool to using iproute2 with, so I wanted to know if it is possible to use only iproute2 to get my network working.
I have removed ifupdown, /etc/network (it was created by iproute2 but contains only ifupdown stuff), reboot the system and runned
ip addr add 192.168.0.254/27 brd + dev eth0followed by
ip link set eth0 upand dmesg said that the link becomes ready but I can not get a connection...
What is missing?
Also after a few playing with ifupdown (after installed it again from a local repo) I have figured out that the files /etc/networks and /etc/resolv.conf seems to be necessary to get a connection...
(resolv.conf was configured by the dhclient comand I used in the past I think...)
At least: is netbase a necessary package for networking?
apt show -a netbase | tail -n 2
Description: Basic TCP/IP networking systemifconfig has it as a depedencie but iproute2 not, also not its dependencies or sub dependencies...
#13 Re: Other Issues » [SOLVED] no german umlauts » 2018-08-05 16:16:48
locale -a
C
C.UTF-8
POSIXin
cat /etc/default/localeI changed
LANG="C"to
LANG="C.UTF-8"now it works thx 
#14 Re: Other Issues » [SOLVED] no german umlauts » 2018-08-05 02:07:37
Of course I do not choose german...
The only available locale is english.
I only use setxkbmap keyboard-configuration in x, I only need german 4 some translation work.
I got different hardware-keyboards here but the keys üöä on the german one doesn't work in the terminalemulator or in vim-tiny.
EDIT: oh and I skip all of the first expert-installer steps and starting with detect cdrom, so everything is really basicly
#15 Other Issues » [SOLVED] no german umlauts » 2018-08-04 22:43:40
- nogeek
- Replies: 4
Hej!
I have made a very small devuan basic install but I need german umlauts for some translations what package(s) do I need?
thx 4 ur help!
#16 Re: Installation » kiosk system for online banking with devuan ascii » 2018-07-16 15:03:52
Thank you all for your answers.
Nice to see you here.
thx! =-)
grub-efi-amd64 and dosfstools are packages, and it may be that these are required to create a bootable live iso. I would try an install of these 2 packages prior to the iso create step, and try again.
the T61 has no UEFI so I do not need it, sorry I had have to say this.
I/O errors suggest a hardware problem. Maybe there were errors burning the CD.
Hmm.. wodim didn't say anything...
This page explains how to get the checksum from a burned CD. Replace md5sum with sha256sum if you want to compare it to the checksum in the SHA256SUMS file where you downloaded the iso.
Of course I've checked the devuan iso and mine too (refractasnapshot builds an iso and a sha256 for it.)
#17 Installation » kiosk system for online banking with devuan ascii » 2018-07-15 21:07:42
- nogeek
- Replies: 4
Hi. =-)
Finally I am a member yay!!1! ;-)
machine: Lenovo ThinkPad T61
project: building an live-iso for online banking - minimal packages, minimal xserver and only firefox-esr (no windowmanager or terminal emulator)
I use this iso:
https://files.devuan.org/devuan_ascii/minimal-live/devuan_ascii_2.0.0_amd64_minimal-live.isoThis iso includes the following packages:
abook install
acpi install
acpi-support-base install
acpid install
adduser install
alsa-utils install
apcalc install
apcalc-common install
apt install
apt-utils install
aspell install
aspell-en install
at install
atmel-firmware install
base-files install
base-passwd install
bash install
bash-completion install
bastet install
bc install
beep install
bind9-host install
bittornado install
bluez-firmware install
bombardier install
brltty install
bsdgames install
bsdmainutils install
bsdutils install
busybox install
bzip2 install
ca-certificates install
caca-utils install
calcurse install
cavezofphear install
clex install
cmatrix install
console-common install
console-data install
console-setup install
console-setup-linux install
consolekit install
coreutils install
cowsay install
cpio install
crawl install
crawl-common install
cron install
cryptsetup install
cryptsetup-bin install
curl install
curseofwar install
dahdi-firmware-nonfree install
dash install
dbus install
dc install
debconf install
debconf-i18n install
debian-archive-keyring install
debianutils install
debootstrap install
devuan-baseconf install
devuan-keyring install
dh-python install
dialog install
dictionaries-common install
diffutils install
discover install
discover-data install
dmidecode install
dmsetup install
dnsutils install
dpkg install
dselect install
dvtm install
e2fslibs:amd64 install
e2fsprogs install
ed install
edbrowse install
eject install
emacsen-common install
empire install
entr install
espeak install
espeak-data:amd64 install
espeak-ng-data:amd64 install
espeakup install
eudev install
fbi install
fbterm install
fetchmail install
figlet install
file install
findutils install
firmware-amd-graphics install
firmware-atheros install
firmware-bnx2 install
firmware-bnx2x install
firmware-brcm80211 install
firmware-cavium install
firmware-crystalhd install
firmware-intel-sound install
firmware-intelwimax install
firmware-iwlwifi install
firmware-libertas install
firmware-linux-free install
firmware-linux-nonfree install
firmware-misc-nonfree install
firmware-myricom install
firmware-netxen install
firmware-qlogic install
firmware-realtek install
firmware-ti-connectivity install
firmware-zd1211 install
fontconfig install
fontconfig-config install
fonts-dejavu-core install
fortune-mod install
fortunes-min install
freesweep install
ftp install
gawk install
gcc-6-base:amd64 install
gddrescue install
gdisk install
geoip-bin install
gettext-base install
ghostscript install
git install
gnuchess install
gnupg install
gnupg-agent install
gnupg2 install
gpgv install
gpm install
greed install
grep install
groff-base install
grub-common install
grub-pc install
grub-pc-bin install
grub2-common install
guile-2.0 install
guile-2.0-libs:amd64 install
gzip install
hasciicam install
hicolor-icon-theme install
hostname install
htop install
iftop install
ifupdown install
imagemagick install
imagemagick-6-common install
imagemagick-6.q16 install
info install
init install
init-system-helpers install
initramfs-tools install
initramfs-tools-core install
initscripts install
insserv install
install-info install
iotop install
iproute2 install
iptables install
iputils-ping install
irqbalance install
irssi install
isc-dhcp-client install
isc-dhcp-common install
isolinux install
iw install
jhead install
kbd install
keyboard-configuration install
klibc-utils install
kmod install
krb5-locales install
laptop-detect install
less install
lftp install
libaa1:amd64 install
libacl1:amd64 install
libapparmor1:amd64 install
libapt-inst2.0:amd64 install
libapt-pkg5.0:amd64 install
libasound2:amd64 install
libasound2-data install
libaspell15:amd64 install
libassuan0:amd64 install
libasyncns0:amd64 install
libattr1:amd64 install
libaudit-common install
libaudit1:amd64 install
libavahi-client3:amd64 install
libavahi-common-data:amd64 install
libavahi-common3:amd64 install
libbind9-140:amd64 install
libblkid1:amd64 install
libbluetooth3:amd64 install
libboost-program-options1.62.0:amd64 install
libbrlapi0.6:amd64 install
libbsd0:amd64 install
libburn4:amd64 install
libbz2-1.0:amd64 install
libc-bin install
libc-dev-bin install
libc-l10n install
libc6:amd64 install
libc6-dev:amd64 install
libcaca0:amd64 install
libcairo2:amd64 install
libcanlock2 install
libcap-ng0:amd64 install
libcap2:amd64 install
libck-connector0:amd64 install
libcomerr2:amd64 install
libcroco3:amd64 install
libcryptsetup4:amd64 install
libcups2:amd64 install
libcupsimage2:amd64 install
libcurl3:amd64 install
libcurl3-gnutls:amd64 install
libdatrie1:amd64 install
libdb5.3:amd64 install
libdbus-1-3:amd64 install
libdbus-glib-1-2:amd64 install
libdebconfclient0:amd64 install
libdevmapper1.02.1:amd64 install
libdirectfb-1.2-9:amd64 install
libdiscover2 install
libdns-export162 install
libdns162:amd64 install
libedit2:amd64 install
libelf1:amd64 install
libenca0:amd64 install
libespeak-ng1:amd64 install
libespeak1:amd64 install
libestr0 install
libeudev1:amd64 install
libevent-2.0-5:amd64 install
libexif12:amd64 install
libexpat1:amd64 install
libfaad2:amd64 install
libfastjson4:amd64 install
libfdisk1:amd64 install
libffi6:amd64 install
libfftw3-double3:amd64 install
libfftw3-single3:amd64 install
libflac8:amd64 install
libfontconfig1:amd64 install
libfreetype6:amd64 install
libftp4:amd64 install
libfuse2:amd64 install
libgc1c2:amd64 install
libgcc1:amd64 install
libgcrypt20:amd64 install
libgdbm3:amd64 install
libgdk-pixbuf2.0-0:amd64 install
libgdk-pixbuf2.0-common install
libgeoip1:amd64 install
libgif7:amd64 install
libglib2.0-0:amd64 install
libgmime-2.6-0:amd64 install
libgmp10:amd64 install
libgnutls30:amd64 install
libgomp1:amd64 install
libgpg-error0:amd64 install
libgpgme11:amd64 install
libgpm2:amd64 install
libgraphite2-3:amd64 install
libgs9:amd64 install
libgs9-common install
libgsasl7 install
libgsm1:amd64 install
libgssapi-krb5-2:amd64 install
libharfbuzz0b:amd64 install
libhogweed4:amd64 install
libice6:amd64 install
libicu57:amd64 install
libid3tag0:amd64 install
libidn11:amd64 install
libidn2-0:amd64 install
libijs-0.35:amd64 install
libimlib2:amd64 install
libip4tc0:amd64 install
libip6tc0:amd64 install
libiptc0:amd64 install
libisc-export160 install
libisc160:amd64 install
libisccc140:amd64 install
libisccfg140:amd64 install
libisoburn1:amd64 install
libisofs6:amd64 install
libiw30:amd64 install
libjack-jackd2-0:amd64 install
libjbig0:amd64 install
libjbig2dec0:amd64 install
libjpeg-turbo-progs install
libjpeg62-turbo:amd64 install
libjte1 install
libk5crypto3:amd64 install
libkeyutils1:amd64 install
libklibc install
libkmod2:amd64 install
libkrb5-3:amd64 install
libkrb5support0:amd64 install
libksba8:amd64 install
liblcms2-2:amd64 install
libldap-2.4-2:amd64 install
libldap-common install
liblocale-gettext-perl install
liblogging-stdlog0:amd64 install
liblognorm5:amd64 install
libloudmouth1-0:amd64 install
liblqr-1-0:amd64 install
libltdl7:amd64 install
liblua5.1-0:amd64 install
liblwres141:amd64 install
liblz4-1:amd64 install
liblzma5:amd64 install
liblzo2-2:amd64 install
libmad0:amd64 install
libmagic-mgc install
libmagic1:amd64 install
libmagickcore-6.q16-3:amd64 install
libmagickwand-6.q16-3:amd64 install
libmnl0:amd64 install
libmodplug1:amd64 install
libmount1:amd64 install
libmozjs-24-0:amd64 install
libmpcdec6:amd64 install
libmpdec2:amd64 install
libmpfr4:amd64 install
libncurses5:amd64 install
libncursesw5:amd64 install
libnetfilter-acct1:amd64 install
libnetfilter-conntrack3:amd64 install
libnettle6:amd64 install
libnewt0.52:amd64 install
libnfnetlink0:amd64 install
libnghttp2-14:amd64 install
libnl-3-200:amd64 install
libnl-genl-3-200:amd64 install
libnotmuch4 install
libnpth0:amd64 install
libnspr4:amd64 install
libnss3:amd64 install
libntlm0:amd64 install
libnuma1:amd64 install
libogg0:amd64 install
libopencore-amrnb0:amd64 install
libopencore-amrwb0:amd64 install
libopenjp2-7:amd64 install
libopts25:amd64 install
libopus0:amd64 install
libopusfile0 install
libotr5 install
libp11-kit0:amd64 install
libpam-modules:amd64 install
libpam-modules-bin install
libpam-runtime install
libpam0g:amd64 install
libpango-1.0-0:amd64 install
libpangocairo-1.0-0:amd64 install
libpangoft2-1.0-0:amd64 install
libpaper1:amd64 install
libparted2:amd64 install
libpcap0.8:amd64 install
libpcaudio0 install
libpci3:amd64 install
libpcre3:amd64 install
libpcsclite1:amd64 install
libperl5.24:amd64 install
libpipeline1:amd64 install
libpixman-1-0:amd64 install
libpng16-16:amd64 install
libpolkit-agent-1-0:amd64 install
libpolkit-backend-1-0 install
libpolkit-backend-consolekit-1-0:amd64 install
libpolkit-gobject-1-0 install
libpolkit-gobject-consolekit-1-0:amd64 install
libpoppler64:amd64 install
libpopt0:amd64 install
libportaudio2:amd64 install
libprocps4:amd64 install
libprocps6:amd64 install
libprotobuf10:amd64 install
libpsl5:amd64 install
libpulse0:amd64 install
libpython-stdlib:amd64 install
libpython2.7-minimal:amd64 install
libpython2.7-stdlib:amd64 install
libpython3-stdlib:amd64 install
libpython3.5-minimal:amd64 install
libpython3.5-stdlib:amd64 install
librcc0 install
librcd0 install
libreadline7:amd64 install
librecode0:amd64 install
libresid-builder0c2a install
librsvg2-2:amd64 install
librtmp1:amd64 install
libsamplerate0:amd64 install
libsasl2-2:amd64 install
libsasl2-modules:amd64 install
libsasl2-modules-db:amd64 install
libselinux1:amd64 install
libsemanage-common install
libsemanage1:amd64 install
libsensors4:amd64 install
libsepol1:amd64 install
libsidplay2 install
libsidutils0 install
libsigsegv2:amd64 install
libslang2:amd64 install
libsm6:amd64 install
libsmartcols1:amd64 install
libsndfile1:amd64 install
libsonic0:amd64 install
libsox-fmt-alsa:amd64 install
libsox-fmt-base:amd64 install
libsox2:amd64 install
libspeex1:amd64 install
libsqlite3-0:amd64 install
libss2:amd64 install
libssh2-1:amd64 install
libssl1.0.2:amd64 install
libssl1.1:amd64 install
libstdc++6:amd64 install
libsystemd0:amd64 install
libtag1v5:amd64 install
libtag1v5-vanilla:amd64 install
libtagc0:amd64 install
libtalloc2:amd64 install
libtasn1-6:amd64 install
libtext-charwidth-perl install
libtext-iconv-perl install
libtext-wrapi18n-perl install
libthai-data install
libthai0:amd64 install
libtidy5 install
libtiff5:amd64 install
libtinfo5:amd64 install
libtokyocabinet9:amd64 install
libturbojpeg0:amd64 install
libunistring0:amd64 install
libusb-0.1-4:amd64 install
libustr-1.0-1:amd64 install
libutempter0:amd64 install
libuu0 install
libuuid1:amd64 install
libvorbis0a:amd64 install
libvorbisenc2:amd64 install
libvorbisfile3:amd64 install
libwavpack1:amd64 install
libwrap0:amd64 install
libx11-6:amd64 install
libx11-data install
libx11-xcb1:amd64 install
libx86-1:amd64 install
libxapian30:amd64 install
libxau6:amd64 install
libxcb-render0:amd64 install
libxcb-shm0:amd64 install
libxcb1:amd64 install
libxdmcp6:amd64 install
libxext6:amd64 install
libxi6:amd64 install
libxml2:amd64 install
libxrender1:amd64 install
libxtables12:amd64 install
libxtst6:amd64 install
links2 install
linux-base install
linux-image-4.9.0-6-amd64 install
linux-image-amd64 install
linux-live-boot install
live-boot-initramfs-tools install
live-config install
live-config-sysvinit install
locales install
login install
logrotate install
lrzsz install
lsb-base install
lsof install
lynx install
lynx-common install
m4 install
man-db install
manpages install
manpages-dev install
matanza install
mawk install
mc install
mc-data install
mcabber install
mime-support install
minicom install
mlocate install
moc install
moria install
mosh install
mount install
msmtp install
mtools install
mtr-tiny install
multiarch-support install
multitail install
mutt install
nano install
ncdu install
ncurses-base install
ncurses-bin install
net-tools install
netbase install
netcat install
netcat-traditional install
nethack-common install
nethack-console install
nfacct install
ninvaders install
nrss install
ntp install
omega-rpg install
openssh-client install
openssh-server install
openssh-sftp-server install
openssl install
pacman4console install
parallel install
parted install
passwd install
patch install
pciutils install
pente install
perl install
perl-base install
perl-modules-5.24 install
pinentry-curses install
policykit-1 install
poppler-data install
poppler-utils install
procmail install
procps install
psmisc install
python install
python-minimal install
python2.7 install
python2.7-minimal install
python3 install
python3-minimal install
python3.5 install
python3.5-minimal install
radio install
readline-common install
refractainstaller-base install
refractasnapshot-base install
rename install
rpl install
rsync install
rsyslog install
sc install
screen install
sed install
sensible-utils install
setnet install
shared-mime-info install
sox install
squashfs-tools install
startpar install
sudo install
sudoku install
syslinux install
syslinux-common install
sysstat install
sysv-rc install
sysvinit install
sysvinit-core install
sysvinit-utils install
tar install
tasksel install
taskwarrior install
tcc install
telnet install
termsaver install
time install
tin install
tmux install
toilet install
toilet-fonts install
traceroute install
ttyrec install
tzdata install
ucf install
unzip install
util-linux install
util-linux-locales install
vim-common install
vim-runtime install
vim-tiny install
w3m install
wamerican install
wavemon install
wget install
whiptail install
whois install
wireless-tools install
wpasupplicant install
x11-common install
xkb-data install
xorriso install
xxd install
xz-utils install
yasr install
zile install
zlib1g:amd64 install
zsh install
zsh-common installNow I customize it with my glorious noob-scripts:
001 replace default user
deluser devuan &
delgroup devuan &
rm -r /home/devuan &
adduser banking002 minimalizing the system
Here i use a packagelist of my customize minimal installation of devuan ascii wich is installed on my hdd.
This system works, it runs at the moment but with linux-libre as kernel and of course without the live-* packages
the packagelist:
adduser install
apt install
apt-utils install
base-files install
base-passwd install
bash install
bsdutils install
busybox install
console-setup install
console-setup-linux install
coreutils install
cpio install
cron install
cryptsetup install
cryptsetup-bin install
dash install
debconf install
debian-archive-keyring install
debianutils install
devuan-baseconf install
devuan-keyring install
diffutils install
dmidecode install
dmsetup install
dpkg install
e2fslibs:amd64 install
e2fsprogs install
eject install
eudev install
findutils install
gcc-6-base:amd64 install
gettext-base install
gpgv install
grep install
grub-common install
grub-pc install
grub-pc-bin install
grub2-common install
gzip install
hostname install
ifupdown install
init install
init-system-helpers install
initramfs-tools install
initramfs-tools-core install
initscripts install
insserv install
iproute2 install
iptables install
iputils-ping install
isolinux install
kbd install
keyboard-configuration install
klibc-utils install
kmod install
libacl1:amd64 install
libapt-inst2.0:amd64 install
libapt-pkg5.0:amd64 install
libattr1:amd64 install
libaudit-common install
libaudit1:amd64 install
libblkid1:amd64 install
libburn4:amd64 install
libbz2-1.0:amd64 install
libc-bin install
libc-l10n install
libc6:amd64 install
libcap-ng0:amd64 install
libcap2:amd64 install
libcomerr2:amd64 install
libcryptsetup4:amd64 install
libdb5.3:amd64 install
libdebconfclient0:amd64 install
libdevmapper1.02.1:amd64 install
libelf1:amd64 install
libestr0 install
libeudev1:amd64 install
libfastjson4:amd64 install
libfdisk1:amd64 install
libfreetype6:amd64 install
libfuse2:amd64 install
libgcc1:amd64 install
libgcrypt20:amd64 install
libgpg-error0:amd64 install
libidn11:amd64 install
libip4tc0:amd64 install
libip6tc0:amd64 install
libiptc0:amd64 install
libisoburn1:amd64 install
libisofs6:amd64 install
libjte1 install
libklibc install
libkmod2:amd64 install
liblocale-gettext-perl install
liblogging-stdlog0:amd64 install
liblognorm5:amd64 install
liblz4-1:amd64 install
liblzma5:amd64 install
liblzo2-2:amd64 install
libmnl0:amd64 install
libmount1:amd64 install
libncurses5:amd64 install
libncursesw5:amd64 install
libnetfilter-conntrack3:amd64 install
libnettle6:amd64 install
libnewt0.52:amd64 install
libnfnetlink0:amd64 install
libpam-modules:amd64 install
libpam-modules-bin install
libpam-runtime install
libpam0g:amd64 install
libpci3:amd64 install
libpcre3:amd64 install
libpng16-16:amd64 install
libpopt0:amd64 install
libprocps6:amd64 install
libreadline7:amd64 install
libselinux1:amd64 install
libsemanage-common install
libsemanage1:amd64 install
libsepol1:amd64 install
libslang2:amd64 install
libsmartcols1:amd64 install
libss2:amd64 install
libstdc++6:amd64 install
libtext-charwidth-perl install
libtext-iconv-perl install
libtext-wrapi18n-perl install
libtinfo5:amd64 install
libustr-1.0-1:amd64 install
libuuid1:amd64 install
libxtables12:amd64 install
linux-base install
linux-image-4.9.0-6-amd64 install
linux-image-amd64 install
live-boot install
live-boot-initramfs-tools install
live-config install
live-config-sysvinit install
locales install
login install
logrotate install
lsb-base install
mawk install
mount install
mtools install
multiarch-support install
ncurses-base install
ncurses-bin install
net-tools install
netbase install
passwd install
pciutils install
perl-base install
procps install
readline-common install
refractasnapshot-base install
rsync install
rsyslog install
sed install
sensible-utils install
squashfs-tools install
startpar install
syslinux install
syslinux-common install
sysv-rc install
sysvinit install
sysvinit-core install
sysvinit-utils install
tar install
tasksel install
tasksel-data install
tzdata install
ucf install
util-linux install
vim-common install
vim-tiny install
xkb-data install
xorriso install
xxd install
zlib1g:amd64 installIsn't it cute and tiny?
=-D
The following script is using this list for "$@" :
#prevent apt from installing recommend packages
echo "APT::Install-Recommends "0";" > /etc/apt/apt.conf.d/01lean &&
echo "APT::AutoRemove:RecommendsImportant "false";" >> /etc/apt/apt.conf.d/01lean &&
#add the devuan repository to /etc/apt/sources.list
echo "# devuan repository" > /etc/apt/sources.list &&
echo "deb http://pkgmaster.devuan.org/merged ascii main" >> /etc/apt/sources.list &&
echo "deb http://pkgmaster.devuan.org/merged ascii-security main" >> /etc/apt/sources.list &&
echo "deb http://pkgmaster.devuan.org/merged ascii-updates main" >> /etc/apt/sources.list &&
apt update &&
#minimalize the number of packages and remove all non-free packages (needs a packagelist builded with "dpkg --get-seletions > PACKAGELIST")
dpkg --clear-selections &&
dpkg --set-selections < "$@" &&
apt-get dselect-upgrade &&
apt-get autoclean &&
apt-get clean &&
dpkg --get-selections > remove &&
grep deinstall remove | sed s/deinstall//g | sed 's/\t//g' | sed ':a;N;$!ba;s/\n/ /g' | xargs apt-get autoremove --purge -y &&
rm remove &&
apt install deborphan &&
deborphan | xargs apt-get autoremove --purge -y &&
apt-get autoclean &&
apt-get clean003 install linux-libre kernel
apt update &&
apt install ca-certificates >> ca-certificates_packages # wget needs it for https &&
apt install gnupg >> gnupg_packages # linux-libre needs it at first install (i don't know why it's not listed in recommends...) &&
apt install wget >> wget_packages # for downloading the key &&
echo "# linux-libre kernel" >> /etc/apt/sources.list &&
echo "deb mirror://linux-libre.fsfla.org/pub/linux-libre/freesh/mirrors.txt freesh main" >> /etc/apt/sources.list &&
wget https://jxself.org/gpg.inc &&
gpg --import gpg.inc && # doing these two steps
gpg --list-keys && # because gpg --with-fingerprint doesn't work...
echo "Key fingerprint should be = F611 A908 FFA1 65C6 9958 4ED4 9D0D B31B 545A 3198" &&
apt-key add gpg.inc &&
rm gpg.inc &&
apt update &&
apt list linux-libre* &&
read -p "choose a kernel from the list above: " kernel
apt install --no-install-recommends --no-install-suggests $kernel && # i use linux-libre-4.14
rm -r /root/.gnupg &&
head -n 15 ca-certificates_packages &&
head -n 15 gnupg_packages &&
head -n 15 wget_packages &&
echo "remove and purge the packages above by hand (don't know hw to automate this...)"004 little clean up
dmsg --clear
echo "" > ~/.bash_history
echo "" > /home/banking/.bash_history
rm -r /var/log/*So now i like to build a bootable iso, boot that iso with the linux-libre kernel, remove the old kernel and do some configs and then building a iso again (the final one).
That for I run :
refractasnapshotEDIT>
It is saying that grub-efi-amd64 and dosfstools are missing, but i go on and making a snapshot cause the T61 has no UEFI.
<EDIT
I save the iso on a removable media, start another system and burning it on a CD.
Now i boot that CD, but i get errors:
[EDIT: sorry the image was removed by the imagehoster...]
Pages: 1
Board footer
