You are not logged in.
Try it again - the installer was just rebuilt.
mini.iso 07-Feb-2019 12:06 47185920I installed from your first zip. I saw the icon and clicked on it, but it just disappeared. Made the changes you suggested and I'm waiting to see that icon again. Anyway, I have a question and a comment.
How/where is 'apt-get update' happening?
This code won't work with a devuan-live (or with most debian-live derivatives):
# Do not run in a LiveCD session
import os.path
import sys
if os.path.exists('/etc/pointlinux-installer/install.conf'):
print "Can't run in a LiveCD session!"
sys.exit()This would probably work better:
# Do not run in a LiveCD session
import os.path
import sys
if os.path.exists('/lib/live/mount/medium'):
print "Can't run in a LiveCD session!"
sys.exit()Note: It will still work in a live session with persistence, because in that case, the path would be '/lib/live/mount/persistence'. If you used '/lib/live/mount' in the code, that would keep it from working in both cases (with or without persistence.)
Turns out there are some files created by live-config that get in the way. I will add them to the installer's exclude list.
- /etc/PolicyKit/PolicyKit.conf
- /var/lib/polkit-1/localauthority/10-vendor.d/10-live-cd.pkla
- /home/*/.su-to-rootrc
- /home/*/.*/share/config/kdesurc
- /home/*/.*/share/config/tdesurc(Note: the last three also need to be added to home_boot_exlclude.list)
...and make sure policykit-1-gnome is installed.
Edit: added files specific to kde or tde.
Upgrade from Ascii to Beowulf went smooth, but that one boot to grub console - wtf? Booted once more with installer, aborted and next boot Beowulf with MATE came to life and ever since
Welcome to devuan. If you found "no-install-recommends" on your first day, you will do fine here.
I know there's an issue with grub-install in uefi with the signed bootloader. You get EFI/devuan on the efi partition, but the bootloader looks for EFI/debian, and you end up with a grub promp instead of a boot menu. I don't understand what you did when you booted with the installer and fixed it.
The fixes I know about are to either remove grub-efi-amd64-signed and run 'grub-install' and 'update-grub' or else run 'grub-install --bootloader-id=debian' and then 'update-grub'.
Thanks for the link, I'll give it a try. Is it correct that the image is dated something like April 18?
No! You want the one dated December 31, 2018. Note that both files have the same name. You need to rename one or keep them in separate directories.
When I boot from a virtual hard drive in vbox, it brings me to UEFI Interactive Shell. At the prompt, I type 'exit' and it gives me a menu. I select 'Boot maintenance manager' and then in the next menu select 'Boot from file'. This gives me a directory tree showing the EFI directory. I can drill down until I see grubx64.efi and choose that file. Then it boots. There's no typing involved, but it's still annoying to go through all of that.
When I boot from a uefi-compatible live-iso, it boots correctly.
Sorry I don't have a better answer.
wget -c https://files.roundr.devuan.org/devuan_ascii/installer-iso/devuan_ascii_2.0.0_amd64_netinst.isoIf the download is interrupted, re-run the same command and it will continue from where it left off. (You can replace the address with your favorite mirror if you want.)
Get package name, version, archive
aptitude search ~i -F"%p# %v# %t#"Don't feel bad. I've been using linux for 18 years, and I never heard of rcconf. I have heard of sysv-rc-conf, and that's what I use. It allows you to turn services on or off in specific runlevels. The really hard-core geeks use update-rc.d.
If you check just the first box, you should get xfce, because it's the first of the three desktops recommended by task-desktop.
If you check just the xfce box, you'll get task-desktop because xfce depends on it.
So, checking first box only, second box only, or first and second box should all give the same result. (I haven't tested this.)
$ apt-cache depends task-desktop
task-desktop
Depends: tasksel
Depends: xorg
Depends: xserver-xorg-video-all
Depends: xserver-xorg-input-all
Depends: desktop-base
|Recommends: task-xfce-desktop
|Recommends: task-lxde-desktop
Recommends: task-mate-desktop
Recommends: xdg-utils
Recommends: avahi-daemon
avahi-daemon:i386
Recommends: libnss-mdns
Recommends: anacron
systemd-cron
Recommends: eject
eject:i386
Recommends: iw
iw:i386
Recommends: alsa-utils
alsa-utils:i386$ apt-cache depends task-xfce-desktop
task-xfce-desktop
Depends: tasksel
Depends: task-desktop
Depends: xfce4
Depends: slim
Recommends: xfce4-goodies
Recommends: xfce4-power-manager
Recommends: xfce4-mixer
Recommends: xfce4-terminal
Recommends: mousepad
Recommends: orage
Recommends: libreoffice-gtk
Recommends: dbus-x11
dbus-x11:i386
Recommends: xsane
xsane:i386
Recommends: vlc
Recommends: quodlibet
|Recommends: evince-gtk
Recommends: evince
Recommends: tango-icon-theme
Recommends: wicd
Recommends: synaptic
Recommends: iceweasel
Recommends: libreoffice
Recommends: libreoffice-help-en-us
Recommends: mythes-en-us
Recommends: hunspell-en-us
Recommends: hyphen-en-us
Recommends: system-config-printer
Recommends: gnome-orcahttps://files.devuan.org/devuan_ascii/Release_notes.txt
Skip down to the section 'Starting X from a terminal'.
I suppose I should quote the translation, in case one of our Spanish-speaking members notices a translation error, and also for the English-speaking members so they don't have to go to the translator just to follow the thread.
Your ssh files look good. If you are very paranoid, you could download the deb package and compare against the md5sums inside the package instead of the list in /var/lib/dpkg/info/.
apt-get download openssh-server
debsums openssh-server_1%3a7.4p1-10+deb9u4_amd64.debThen do the same for the client package.
I don't know ufw. Maybe start a separate discussion for that problem. It might be a policykit problem.
Try xcalc. It's part of the x11-apps package and may already be installed.
apt-cache search software lists the following package among others.
$ apt-cache policy software-properties-gtk
software-properties-gtk:
Installed: (none)
Candidate: 0.96.20.2-1
Version table:
0.96.20.2-1 500
500 http://deb.devuan.org/merged ascii/main amd64 PackagesNo GUI user management.
That's an xfce thing. Other desktops have their own management tools.
I don't know how to interpret the output from dpkg -V. I like debsums better.
Check the installed package:
$ debsums openssh-server
/lib/systemd/system/ssh.service OK
/lib/systemd/system/ssh.socket OK
/lib/systemd/system/ssh@.service OK
/usr/lib/tmpfiles.d/sshd.conf OK
/usr/sbin/sshd OK
/usr/share/apport/package-hooks/openssh-server.py OK
/usr/share/doc/openssh-client/examples/sshd_config OK
/usr/share/lintian/overrides/openssh-server OK
/usr/share/man/man5/sshd_config.5.gz OK
/usr/share/man/man8/sshd.8.gz OKList changed package files from all installed packages with checksums. (Run this one as root)
# debsums -ca
/usr/share/abiword-3.0/system.profile
/usr/share/applications/sol.desktop
/etc/apache2/sites-available/000-default.conf
/etc/cron.daily/apt
/etc/firejail/thunderbird.profile
/etc/firejail/firefox.profile
/usr/bin/firemenu
/usr/share/applications/gparted.desktop
/etc/grub.d/05_debian_themeI have some files that were changed. This is OK - I know that I changed these files. (Note: I just learned this command, and I really like it a lot. The above list was much longer, but I truncated it. It shows all the system files I've edited, including all the ones I forgot about.)
/etc/shadow- and /etc/gshadow- are backup files that get created when you add/remove a user or group. Their presence does not indicate that you have been hacked. And if you have been hacked, removing those files will not help you.
Edit: If you remove /etc/shadow or /etc/gshadow, you won't be able to log in.
See man shadow and man gshadow for more information.
https://www.securityweek.com/researcher … -backdoors
On a Debian-based distribution,
debsums or dpkg -V can be used to compare MD5 hashes of installed files with a manifest stored on disk in /var/lib/dpkg/info/. It’s a start, but the manifest file, which only contains paths and MD5 sums, can be tampered with. An mportant thing to know is that in the Debian and Ubuntu official repositories, only the metadata is PGP-signed. The .deb package itself isn’t signed. The metadata contains the hash of .deb packages and that is the only thing that can be trusted.
Sorry I wasn't available earlier. I'd like to know how this turned out. Did fixing crypttab fix the problem?
Also, for clarification...
The installer in the live isos (refractainstaller and refractainstaller-yad) will let you encrypt /home or / but without lvm. Instead of an encrypted swap partition, it can create a swap file on the encrypted root partition.
It's possible to manually create lvm and then use refractainstaller (cli version only) to install the system. See the link that Simplicio provided in the previous post for some examples.
If you (alphalpha) have a modified refractainstaller script that does lvm, I'd like to see it. Thanks.
For the live installer, choose sudo at the beginning. It's easier - you won't have to enter a password. It has no effect on whether you use sudo or not in the installed system.
I prefer the live installer - it's a faster install. (I may be biased - I wrote it.) If you want the default xfce desktop, you can have it in about 10 minutes. If you want a more customized system, you may be better off with one of the installer isos.
If you use a gpt partition table on a system that's booting in bios (legacy) mode, you'll need to create a small, unformatted partition with bios_grub flag in gparted (or EF02 in gdisk). (Click on Help from inside the installer for more info about this.)
The warning about the version of yad might be obsolete. It's been working fine for me for a few months. My best guess is that something got fixed in gtk3 or in virtualbox.
Are you using ascii or beowulf? Try installing xfce4 in parts instead of with the metapackage, and maybe you'll see what is pulling in pulseaudio. They might have added the dep because there's no more xfce4-mixer.
I know that Refracta ascii does not have pulseaudio installed, so I know it's possible in ascii, and I'm pretty sure it's possible in beowulf.
Yes, TDE with devuan is possible. Here is one you might want to look at:
http://exegnulinux.net/
Looks like that bug only affects systemd. I've been using that version of live-config in ascii and haven't run into problems with it. But what live iso are you using? Both the desktop-live and minimal-live should have refractainstaller installed already. You could use the cli version of the installer and then add vnc to the installed system later.
I didn't think of it this morning, but you could just add 'noautologin' to the boot command. That would do the same as commenting out the sed command in 0160-sysvinit.
You might need to add some options to the genisoimage command. The xorriso command used to create the iso looks something like this.
xorriso -as mkisofs -r -J -joliet-long -l ${isohybrid_opt} \
-partition_offset 16 -V "snapshot-live-cd" -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot \
-boot-load-size 4 -boot-info-table ${uefi_opt} -o "$snapshot_dir"/"$filename" iso/isohybrid_opt is the path to isohdpfx.bin which is somewhere in /usr/lib/syslinux or /usr/lib/ISOLINUX. The exact location varies with the version of syslinux.
uefi_opt="-eltorito-alt-boot -e boot/grub/efiboot.img -isohybrid-gpt-basdat -no-emul-boot"
I'd be interested to know what error messages you got when trying to install refracta tools. If you don't want to do that in this thread, feel free to start another or email me. Thanks.
The inittab in the live session does not contain the line you posted for the getty. It gets changed by /lib/live/config/0160-sysvinit to the following:
1:2345:respawn:/bin/login -f devuan </dev/tty1 >/dev/tty1 2>&1If you want to change it again, you could make a hook script that runs after the other live-config scripts, but I'm not sure where you could put it without rebuilding the iso. In the refracta8 (jessie) isos, I put a hook script in /live/hooks and then add 'hooks=file:///live/hooks/myscript' to the boot command. (yes, three slashes, and this is from memory, so check man live-config)
Or, if you're going to mount the iso and mess with files, you could just change that live-config script to do what you want.
The failsafe entry in the syslinux boot menu is missing 'username=devuan'. I checked the amd64 so far. It's probably the same in the i386. Thanks for bringing this to my attention. If/when we do a point release, I'll fix it. (And in beowulf, too.)
It's not a known issue. That iso should work on hardware as new as yours. (2008?)
How far into the boot do you get?
Make sure the boot command contains 'username=devuan'.
Maybe try adding 'nomodeset' to the boot command. (That might be in the failsafe entry, which you should also try.)