The officially official Devuan Forum!

You are not logged in.

#1 Hardware & System Configuration » make opensnitch installable for systemdless systems » 2021-12-26 10:54:16

labrona
Replies: 1

I have devuan (systemdless debian) and i can't install opensnitch without systemctl.
Can you please make it possible to install opensnitch without systemd?

Yes, manually

root@refracta:~# opensnitchd
[2021-12-09 11:40:22]  IMP  Starting opensnitch-daemon v1.4.1
[2021-12-09 11:40:22]  INF  Loading rules from /root/rules ...
[2021-12-09 11:40:22]  !!!  Path '/root/rules' does not exist
root@refracta:~# mkdir rules
root@refracta:~# opensnitchd
[2021-12-09 11:40:39]  IMP  Starting opensnitch-daemon v1.4.1
[2021-12-09 11:40:39]  INF  Loading rules from /root/rules ...
OK: libnetfiler_queue supports nfq_get_uid
OK: libnetfiler_queue supports nfq_get_uid

OpenSnitch is a GNU/Linux port of the Little Snitch firewall. You can launch the GUI from the icon or from the system menu. The daemon will start intercepting connections, prompting you to allow or deny them. If you don't apply an action, after 15 seconds (configurable) it'll apply the default action configured. When you open the GUI, you'll see all the connections and processes that the daemon has intercepted.

https://github.com/evilsocket/opensnitch/releases

I installed Opensnitch on a systemdless system : DevuanDog from Fredx.  It runs on this OS without a glitch.

Also, thanks to some research done on internet, i found an alternative to Opensnitch, called Douane.  There is an installer available for Debian.  I did an install on Refracta, but i could not make it launch on my machine (maybe because i still use Refracta from ascii). 

johnny@refracta:~/douane-installer$ ./douane-installer
Traceback (most recent call last):
  File "./douane-installer", line 41, in <module>
    from installer.application import Application
  File "/home/johnny/douane-installer/src/installer/application.py", line 79
    self.logger.debug(f'Setting the page {page.__class__.__name__} '
                                                                   ^
SyntaxError: invalid syntax

It's good to have a firewall for incoming connections, but we should all have a firewall for outgoing connections as well, such as Opensnitch or Douane.

#2 Re: Devuan Derivatives » Refracta 10 issues with » 2020-08-13 22:09:13

I was asked about i2p.  There is a link by labbe5 which is very informative : http://oldforum.puppylinux.com/puppy/vi … c2f513c854

Since in my previous post i also wrote about VPNs, there is another very informative link by labbe5 and a very popular read : http://oldforum.puppylinux.com/puppy/vi … c2f513c854

#3 Devuan Derivatives » Refracta 10 issues with » 2020-08-12 11:21:35

labrona
Replies: 8

Hi,
I am a Linux user for fifteen years now, and an happy user of Refracta 9 for two (or three).  I just wanted to let you know i much i love it, and why.
First of all, security-wise, it is a boon to have it run in ram, to have firejail already installed with a firejail menu, to have Services which enables us to deactivate some services we do not use, such as cups, and plenty of others in my case.  Every time i have Refracta 9 up and running for days at a time, i make sure source.list has everything checked except security and i update my installation for newest security packages.  A very easy task, security-wise.  And i make sure i have latest instance of Firefox-esr installed too.

I do not install OS anymore.  I much prefer having my OS run in ram.  I have a 2tb hard drive installed lately instead of what i had (150 Gb), used only for storage.  It is at once more convenient and more secure that way. All my hardware run well with Refracta 9.  Thanks to developer for a well-rounded OS that i prefer over everything else.  I know for a fact that choosing a Linux OS is not an easy task, so much choice around.  Every OS competes with each other for your attention, and to make a decision you have to consider security, convenience, habits, your ram, your hardware.  With Windows, you make do with what it offers.  With Linux, you have to make a choice.  Plenty of choice.  It takes time to learn what you like and dislike in an OS.

As for Refracta 10, that is something else.  I still use Refracta 9, because the latest Refracta instance lacks some features i like.  No Service menu, updating packages is met with a problem : Firefox-esr does not upgrade itself due to corrupt files.  sudo apt remove --purge firefox-esr let me get rid of corrupt files  before installing Firefox-esr again.  But I decided to use Firefox portable, or chromium chromium-sandbox, for my web browsing needs while using Refracta 10 for a while.

Why change when Refracta 9 is so good you ask?  Because i wanted to use i2p.  I2P is not available with Devuan ascii repositories.  Before you ask, let me tell you that i2p is what you could refer to as security by design, you can do pretty much anything under the radar, including using a torrent client named I2PSnark.  VPNs are refered to as security by policy, you have to have confidence in your VPN service provider that it does not share your data with government agencies and/or commercial entities, which free VPNs do without any shame.

So I have tested Refracta 10, and found that it lacks the polish of preceding instance. I check if the developer of Refracta publishes another version from time to time, more polished.  Up to now, no new version.

But thumbs up for Refracta 9.  5 out of 5.
Refracta 10 : 4 out of 5

Board footer

Forum Software