Either switch to the non-backports kernel or build a new module from Larry Finger's github site.

The Ubuntu kernels are fixed now but the twats haven't passed it upstream. As usual.

Perhaps the key is sticking. Can you test with a different keyboard? Or perhaps try a live session to eliminate mis-configuration.

Please open a new thread for this problem, thanks.

I am absolutely sure that the dnssec-trigger package from Devuan does not set /etc/resolv.conf immutable so please include details of how you installed it and also the full output of apt policy in the new OP.

Well I've just tried installing the dnssec-trigger package in the Devuan ASCII live environment and it did not set resolv.conf immutable, I was able to alter and delete the file afterwards with the usual root permissions.

If you decide to go with a conventional installation to the USB stick:

It is possible to have full disk encryption with /boot included: https://bugs.debian.org/cgi-bin/bugrepo … =814798#15

To have a system that is bootable from both UEFI & non-UEFI machines use a GUID partition table (GPT) and include a BIOS boot partition[1] as well as an EFI system partition (ESP)[2] then install in non-UEFI mode, boot the system and run

# apt install grub-efi-{amd64,ia32}-bin
# mount /dev/sdXY /mnt
# grub-install --target=x86_64-efi --efi-directory=/mnt --removable
# grub-install --target=i386-efi --efi-directory=/mnt --removable

^ That will install the 32- & 64-bit UEFI versions of GRUB and allow booting in both modes (replace X & Y with the drive letter & partition number assigned to the ESP).

There is a chance that some very old machines won't boot from a GUID partition table but I think the above method gives the best chance of universality.

[1] Apply the "bios_grub" flag in gparted or type "EF02" in gdisk, it should have no filesystem, I prefer to use sectors 34-2047 which should be free in a correctly aligned disk.

[2] Apply the "boot,esp" flag in gparted or type "EF00" in gdisk, it should be FAT-formatted, I prefer to use 512MiB but ~100MiB should be plenty.

They are awesome, thanks for sharing!

You must have blindly copy&pasted some forum suggestion, no De??an package would use such an awful hack.

You should probably open a new thread for that problem, dnssec-trigger & unbound should work just fine.

Sorry for the trouble, I presumed you had tested the new kernel before attempting to remove the old versions.

Use apt to re-install the old kernel versions:

cd /var/cache/apt/archives
sudo apt install ./name_of_old_kernel_version.deb

^ That will downgrade automatically.

You did that yourself, Devuan ASCII doesn't have dnssec-trigger installed by default and /etc/resolv.conf is not set immutable.

Sorry Micronaut, my dyslexia is playing up again — I read "4.9" as "4.19", you have the correct kernel version for ASCII.

For your networking problem check the output of rfkill, there have been a couple of threads involving that recently.

You have a metapackage (linux-image-amd64, to keep the kernel updated) and four different ABI versions.

Run

# aptitude purge linux-image-4.9.0-{6,9,11}-amd64

To get rid of the old ABI versions.

See also https://kernel-team.pages.debian.net/ke … sions.html

EDIT: better link.

EDIT2: I can't count...

Just add your rfkill command on a single line at the end of the file at /etc/rc.local

Good.

You can add the rfkill command to /etc/rc.local to get it to run automatically on boot. Or make a custom service to run it if you want more control.