Clarification: Debian and Devuan packages are not incompatible. They are exactly the same packages. We filter out and fork the packages that require systemd. If you use debian sources with devuan sources, you'll still get mostly the same packages, but you won't have the filter, and you'll probably screw up your system by installing things that do require systemd.

anacron is useful for systems that are not running 24 hours a day, like laptops for example, so that scheduled cron jobs will run somewhat according to their schedules. It's safe to remove it if you don't need it.

Here's a thought. If you only run the computer for short times, you might be shutting down while it's trying to run a job. Only way I can think of to check this would be to look in syslog right before you shut down. If cron is active, wait for it to finish and then see if shutdown is faster.

Fixed in trixie and forky/sid. (i.e. excalibur and freia/ceres) Older versions not affected.
https://security-tracker.debian.org/tra … 2025-32463

(I duck-searched the CVE with the words 'debian security' - first hit.)

Oh, interesting. I don't have that one. I have:

ii  acpi-fakekey                     0.143-5.1                     amd64        tool to generate fake key events
ii  acpi-support                     0.143-5.1                     all          scripts for handling many ACPI events
ii  acpi-support-base                0.143-5.1                     all          scripts for handling base ACPI events such as the power button
ii  acpid                            1:2.0.33-2+b1                 amd64        Advanced Configuration and Power Interface event daemon

I don't know what you need, but -support and -support-base are probably good ones to try first.

I think there is a significant security risk - if there's a vulnerability in some piece of software that gives an attacker access to your session, they don't have to bother with escalating privileges because they're already root. Imagine running a web browser as root and allowing all unknown entities to run javascript as root on your machine. Up until recently, xorg always ran as root. It was changed because it was a security risk.

See if this fixes it:

 gpg --keyserver keyserver.ubuntu.com --refresh-keys

I'm still not understanding this "Wired connection" file. I can't tell if it does anything or not.

I have "Ethernet connection 1.nmconnection"  and I moved it out of the way and deleted all the lease files in /var/lib/NetworkManager and rebooted. The missing nmconnection file did not get regenerated, but I do have a working ethernet connection. And note that mine does not have the same name that yours does. This is in daedalus on a laptop and /e/n/i only has the loopback interface defined.

I think it means that you have to do one of two things - either set the system locale to one that uses UTF-8 or else set the environment variable in that program as explained in the README they mention.

To set the system locale, run dpkg-reconfigure locales as root.
or
To set the locale in the program... (do whatever it says in the README.)

The -0, -1, or -10 at the end of the filename corresponds to the $DISPLAY that was used.

If you switch to console without stopping the desktop, log in and then start a second desktop on :1, you'll get another file in ~/.dbus/session-bus with the same number as /var/lib/dbus/machine-id except with -1 at the end, but only if there's a number in dbus/machine-id. If you delete that file first, you won't get another one in your home unless you also restart dbus. (e.g. cycle through 'init 1' and 'ctrl-d')

> ctrl-alt-f1 to get to console
> log in as user
Run:
  startx -- :1 

If you have both ceres and freia in sources.list, you will only get ceres packages unless you pin ceres to a lower priority than freia.

There's no -security for ceres or freia, and excalibur-security won't have package versions that match what's in freia/ceres right now.

Excalibur is currently in the twilight zone between testing and stable. It hasn't been declared Stable yet, but it has been disconnected from the unstable to testing pipeline, and it's based on Debian Trixie which is their stable release. That's why freia exists, which will be our next testing suite.

I should have mentioned this in my last post. Default behavior in devuan is for /var/lib/dbus/machine-id to be replaced on reboot. This can be disabled to revert to the upstream default by commenting the line that says: IDTYPE="RANDOM" in /etc/default/dbus. If you do that, the id number will be constant. I don't know if there are other situations where it will change. Maybe on update of dbus packages? That's just a guess.

b) IDTYPE="RANDOM"

Feature.

e) ntpsec-ntpdate

I'm not sure if that one runs when you reboot. I have a script to run it when I think my time has drifted. Fuzzy, I know.

For full synchronization, use the ntp package.