https://sup.dyne.org/

This is apparently a replacement option

I just decided to make a quick sysV init script to configure iptables at boot rather then install iptables-persistance
Mainly because I've made mistake of not enabling ufw and then starting plugging away about my computing lol.
I'd say it's a good early step.  Just add your iptable script to /etc/init.d
then run

update-rc.d "$iptables_default_script" defaults
update-rc.d $iptables_default_script enable

I don't know much about dnsmasq. I just set it  in /etc/resolv.conf I know it's probably wrong way but it's simple

an example script could look like this

#!/bin/sh
### BEGIN INIT INFO
# Provides:          iptable_defaults
# Required-Start:    $network
# Required-Stop:
# Should-Start:	     
# Should-Stop:       
# X-Start-Before:    
# Default-Start:     2 3 4 5
# Default-Stop:
# Short-Description: simple-iptables
# Description:       configure iptables before connecting to internet
### END INIT INFO
ip=iptables
ip6=ip6tables

$ip6 -A INPUT -j DROP
$ip -A INPUT -j DROP
$ip -A FORWARD -j DROP
$ip6 -A FORWARD -j DROP

I'd be careful with some git repos or even possible for spoofing to MitM attack package distribution.

Ideally if you had a rsync of a mirror locally you could update systems through a lan connection much more securely without having to go through internet hoops.

possible for gzip to provide a different hash depending on gzip version?

First fuse is kind of like a pipe. I'd maybe start to see what happens right after fuse.
a perf event could be indication of a signal interrupt or something slowed down the kernel.
Also then you see a bridge and virbo.
If you are on a tower or your laptop turn off your Virtualization features in bios. hope it gets enforced.
As for checking your logs after you could probably just suppress output.

Did you try system on different hardware? could fix error.

I made a switch to try wayland and sway. It ran fine from user space on tty6. While Xorg was running on 7.

Have not done much testing. Been more busy looking at other stuff lower.

could be a block size issue. If you are expecting 1024 bs but you are sending 512 and only get half a block. It might not write everything.

Apt is default package manager in devuan.

There is also sudo -i to just pretty much login as root.

to make it request password everytime you might need to set alias in .bashrc when sudo is invoked.
Although I am unsure how to block sudo -i using an alias.

have you tried installing seatd?

I recently removed it and slim works fine. There must of been a fix upstream?

However, I removed sudo and make live system. It still autologin into user 1000.
But interesting when I run w. slim session is invisible. When login it shows a user. But I don't see tty7 in daedalus where I would see the openbox session in chimaera.

But yeah you don't need sudo.

Lenart now works at microsoft.

Make up your mind on that.

Try to disable kvm or intel virtualization on your bios.

This usually fixes any boot issues regarding kvm.

I believe this is something that should get looked into.

Maybe, but as mentioned devuan installer iso's only boot in mbr.
a uefi only system is not ideal. Probe through your bios and try different settings.