The officially official Devuan Forum!

miroR

Member

From: Zagreb, Croatia

Registered: 2016-11-30

Posts: 217  

Website

Air-Gapped Devuan Install, Tentative

initial title (could remain for longer): Air-Gapped Devuan Install, Tentative
---

EDIT 2017-07-15 22:59 UT START
This was pretty long and winding... And I have to warn the reader that, while the testing that I did, and which remains in all these verbose posts, was useful, it all comes down to much simpler things to do, to be able to do the Air-Gap installing/updating of your Devuan.

By this time, I have done some four complete cycles, everytime starting from almost tabula rasa as far as stuff from contact with the internet goes, so likely from as clean a system as an honest distribution, which I believe Devuan GNU/Linux is, can offer you.

It is much simpler, and I'll try and offer more explanation in today's post:
https://dev1galaxy.org/viewtopic.php?id=746#p3357
( done )

EDIT 2017-07-15 22:59 UT END

I'm preparing to update my Air-Gapped Devuan and I want to explain to the interested how it is done.

I had explained it while Debian was still feasibly systemd-free (and even dbus-free, and *kit-free, and pulse-free; in short: any-poetterware free). Pick what you may need from the read below, careful to shed useful from useless, esp. with older reads.

Air-Gapped Gentoo Install, Tentative
https://forums.gentoo.org/viewtopic-t-987268.html

There is also:
Air-Gapped Debian Install for Newbies
http://forums.debian.net/viewtopic.php?f=16&t=119648
( but I use monolithic encrypted one-system / partition now, and clear /boot, as in:
Install Devuan into encrypted root and swap partitions
https://dev1galaxy.org/viewtopic.php?id=597
)

How to Remove Systemd and Related Packages from Your Debian
http://forums.debian.net/viewtopic.php?f=16&t=118197

I've only figured out how to do this the day before yesterday (in case this opening post won't be longer than a day to write, nota bene, current time: 2017-06-23 14:29 UTC). So in some later post much may become clearer... But regarding later time: Devuan will be so much stronger in time to come. It is still a kid. Devuan is still a kid, a very promising kid, but just a kid at this time. Later we'll be able to Air-Gap install Devuan just as easily as Debian or as Gentoo, or any other long time-honored distro of GNU/Linux.

In my Air-Gapped master, I have done this (just copying from my history lines), all as root:

tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname)m.tar /var/lib/apt/
du -hs var_lib_apt_170623_1349_gdOvm.tar /var/lib/apt/
tar tf var_lib_apt_170623_1349_gdOvm.tar 

That was tar'ing the /var/lib/apt directory, and giving it the current timestamp and listing it.

And this is checking it:

tar xf var_lib_apt_170623_1349_gdOvm.tar 
rsync -nav --delete var/lib/apt/ /var/lib/apt/
rsync -nav --delete /var/lib/apt/ var/lib/apt/

Both lines would update nothing because they are identical directories and files.

(Let me note here that I tar'd up also /var/cache/ directory in just about the same way. Later about that one.)

Now, and I'm courious about it myself, namely where we are now, is the clone of that Air-Gapped system. We are not anymore in Air-Gapped... Well, while I write, I'm not connected to the internet, but from this clone (same/similar hardware models of MBO and HDD, but initially to-the-bit same software! gotten with dd dumping, and hashed-verified...)... [But from this clone] I do connect, while from the Air-Gapped I never do!

[And I'm courious] myself if I will find any differences with the /var/lib/apt/ of this cloned system, in which I haven't run apt-get since I cloned it. There shouldn't be any should there?

Let's see.

Ah, the opening lines from history may be a little difficult to follow, for the newbies which I always bear in mind, seniors pls allow more verbosity.

 
root@gdOv:/home/mr# tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname).tar /var/lib/apt/
tar: Removing leading `/' from member names
root@gdOv:/home/mr# 

That's actual run.

The gdOv is the hostname. Same hostname here as in the master, and for that reason, I added an "m" (for "master") before ".tar" in what I ran in the master.

And this is actual paste from my terminal:

root@gdOv:/home/mr# cp -iav /mnt/h_Ref2/170623/var_* .
'/mnt/h_Ref2/170623/var_cache_170623_1352_gdOvm.tar' -> './var_cache_170623_1352_gdOvm.tar'
'/mnt/h_Ref2/170623/var_history_170623_1404_gdOvm.txt' -> './var_history_170623_1404_gdOvm.txt'
'/mnt/h_Ref2/170623/var_lib_apt_170623_1349_gdOvm.tar' -> './var_lib_apt_170623_1349_gdOvm.tar'
root@gdOv:/home/mr#

(Pls. also note the var_cache_170623_1352_gdOvm.tar which is the tar'd archive od the /var/cache/ directory in my master. Later about that one.)

By the way, I use almost exclusively Devuan these days. The "Ref" in "/mnt/h_Ref2/170623/" above (the 170623 being for 2017-06-23), [the "Ref"] is for "Refracta". Because when I clone systems, I use Refracta on a USB-stick, and I can dd dump partitions from one system's HDD to the other system's HDD. How that is performed is explained well enough (I hope) in the PART 2 of:
Postfix smtp/TLS, Bkp/Cloning Mthd, Censorship/Intrusion
https://forums.gentoo.org/viewtopic-t-9 … ml#7613044
.

But I will be removing "root@gdOv:/home/mr" from pastes, and leaving only "#" for root. Point made, they're not necessary any more.

Let's see:

# ls -l var_lib_apt_170623_1???_gdOv*.tar 
-rw-r--r-- 1 root root 125317120 2017-06-23 13:49 var_lib_apt_170623_1349_gdOvm.tar
-rw-r--r-- 1 root root 125317120 2017-06-23 14:45 var_lib_apt_170623_1445_gdOv.tar
#

Looks same... Is it?

# sha256sum var_lib_apt_170623_1???_gdOv*.tar 
4ba211401f373b863eeb44f5bee8ba5a3bcee0bbd963e625f2fd3e997605eb51  var_lib_apt_170623_1349_gdOvm.tar
6362458a9b527b3c5b205e44d564fd65c7b8d5c412aae57ce86100b02e30ef32  var_lib_apt_170623_1445_gdOv.tar
#

Nope... What is the difference btwn the two?... Could it be just the timestamp by tar?... No it's not something like the tar program timestamp or such, because:

# tar cf var_lib_apt_$(date +%y%m%d_%H%M)_$(hostname).tar /var/lib/apt/
tar: Removing leading `/' from member names
# sha256sum var_lib_apt_170623_14???_gdOv*.tar 
var_lib_apt_170623_1445_gdOv.tar  var_lib_apt_170623_1457_gdOv.tar
# sha256sum var_lib_apt_170623_14??_gdOv.tar 
6362458a9b527b3c5b205e44d564fd65c7b8d5c412aae57ce86100b02e30ef32  var_lib_apt_170623_1445_gdOv.tar
6362458a9b527b3c5b205e44d564fd65c7b8d5c412aae57ce86100b02e30ef32  var_lib_apt_170623_1457_gdOv.tar
# rm var_lib_apt_170623_1457_gdOv.tar 
#

So what is different?... Let's investigate. Undestanding of these matters is needed for manual air-gapping that I will (hopefully) perform today. Because that update of the Air-Gapped master can only be successfuly perfomed based on correct understanding of what changes will have happened once I will have run apt-get update and friends later in this online system.

# tar tf var_lib_apt_170623_1445_gdOv.tar | head -5
var/lib/apt/
var/lib/apt/periodic/
var/lib/apt/lists/
var/lib/apt/lists/_home_mr_Devuan_dev-1_dists_jessie_Release
var/lib/apt/lists/_home_mr_Devuan_d-9_dists_stretch_main_binary-amd64_Packages
# ls -l var
ls: cannot access 'var': No such file or directory
#

( This is check to see that I won't be overwriting anything by untar'ing. )

# tar xf var_lib_apt_170623_1445_gdOv.tar && mv -iv var var_170623_1445
'var' -> 'var_170623_1445'

Moving var to the 2017-06-23_14h_45min-stamped dir to make sure var/ is still free to untar into afresh:

# tar xf var_lib_apt_170623_1349_gdOvm.tar && mv -iv var var_170623_1349m
'var' -> 'var_170623_1349m'

In the dir marked with the ending "m":

# ls -l var_170623_1349m/
total 4
drwxr-xr-x 3 root root 4096 2017-06-23 15:09 lib

is the archive from the master machine.

So, now:

# rsync -nav --delete var_170623_1349m/lib/apt/  var_170623_1445/lib/apt/

is the command to run, to find out the difference between the two untar'd archives. Of course, being in the clone I could make the same check with:

# rsync -nav --delete var_170623_1349m/lib/apt/  /var/lib/apt/

But these are still to-the-bit same, both:

# rsync -nav --delete var_170623_1349m/lib/apt/  var_170623_1445/lib/apt/
sending incremental file list
./
daily_lock

sent 3,678 bytes  received 27 bytes  7,410.00 bytes/sec
total size is 125,258,781  speedup is 33,808.04 (DRY RUN)
# rsync -nav --delete var_170623_1349m/lib/apt/  /var/lib/apt/
sending incremental file list
./
daily_lock

sent 3,678 bytes  received 27 bytes  7,410.00 bytes/sec
total size is 125,258,781  speedup is 33,808.04 (DRY RUN)
#

It is the same the other way round (important is to know you can use the inverse for double checking, but I cut it short to not duplicate too much):

# rsync -nav --delete var_170623_1445/lib/apt/  var_170623_1349m/lib/apt/
...
daily_lock
...
# rsync -nav --delete  /var/lib/apt/ var_170623_1349m/lib/apt/
...
daily_lock
...
#

Mistery solved! It's just the daily_lock. And it's just the file's timestamp! See:

# ls -l  /var/lib/apt/daily_lock var_170623_1349m/lib/apt/daily_lock 
-rw-r--r-- 1 root root 0 2017-06-23 12:51 var_170623_1349m/lib/apt/daily_lock
-rw-r--r-- 1 root root 0 2017-06-23 07:48 /var/lib/apt/daily_lock
#

I do believe that qualifies for the sole difference btwn the two archives.

Enough of the initial checking.

The other archive that I mentioned above is equally essential for this young-distro air-gapping.

It's the var_cache_170623_1352_gdOvm.tar.

# tar -tf var_cache_170623_1352_gdOvm.tar | head -5
var/cache/
var/cache/apt/
var/cache/apt/pkgcache.bin
var/cache/apt/archives/
var/cache/apt/archives/perl_5.24.1-3_amd64.deb
# ls -l var
ls: cannot access 'var': No such file or directory
#

But I'm not happy with the naming. First:

# mv -iv var_170623_1349m/ var_lib_apt_170623_1349m
'var_170623_1349m/' -> 'var_lib_apt_170623_1349m'
# mv -iv var_170623_1445/ var_lib_apt_170623_1445
'var_170623_1445/' -> 'var_lib_apt_170623_1445'
#

Now:

# tar -xf var_cache_170623_1352_gdOvm.tar && mv -iv var  var_cache_170623_1352m
'var' -> 'var_cache_170623_1352m'

And I want to do the same checking as with the var_lib_apt archives.

# tar xf var_cache_170623_1543_gdOv.tar && mv -iv var var_cache_170623_1543
'var' -> 'var_cache_170623_1543'
# rsync -nav --delete var_cache_170623_1352 var_cache_170623_1543
var_cache_170623_1352_gdOvm.tar  var_cache_170623_1352m/          
# rsync -nav --delete var_cache_170623_1352m/ var_cache_170623_1543
var_cache_170623_1543/          var_cache_170623_1543_gdOv.tar  
# rsync -nav --delete var_cache_170623_1352m/ var_cache_170623_1543/
sending incremental file list
./
cache/apt/archives/partial/
cache/man/
cache/man/cs/
cache/man/da/
cache/man/de/
cache/man/es/
cache/man/fi/
cache/man/fr/
cache/man/hu/
cache/man/id/
cache/man/it/
cache/man/ja/
cache/man/ko/
cache/man/nl/
cache/man/pl/
cache/man/pt/
cache/man/pt_BR/
cache/man/ru/
cache/man/sl/
cache/man/sv/
cache/man/tr/
cache/man/zh_CN/
cache/man/zh_TW/

sent 9,144 bytes  received 187 bytes  18,662.00 bytes/sec
total size is 164,141,650  speedup is 17,591.00 (DRY RUN)
# rsync -nav --delete var_cache_170623_1543/ var_cache_170623_1352m/
sending incremental file list
./
cache/apt/archives/partial/
cache/man/
cache/man/cs/
cache/man/da/
cache/man/de/
cache/man/es/
cache/man/fi/
cache/man/fr/
cache/man/hu/
cache/man/id/
cache/man/it/
cache/man/ja/
cache/man/ko/
cache/man/nl/
cache/man/pl/
cache/man/pt/
cache/man/pt_BR/
cache/man/ru/
cache/man/sl/
cache/man/sv/
cache/man/tr/
cache/man/zh_CN/
cache/man/zh_TW/

sent 9,144 bytes  received 187 bytes  18,662.00 bytes/sec
total size is 164,141,650  speedup is 17,591.00 (DRY RUN)
#

Counting the lines of differences either way:

# rsync -nav --delete var_cache_170623_1543/ var_cache_170623_1352m/| wc -l
28
root@gdOv:/home/mr# rsync -nav --delete  var_cache_170623_1352m/ var_cache_170623_1543/| wc -l
28
#

and subtracting the leading two and the last three lines, I can try and list what the differences really are:

# for i in $(rsync -nav --delete  var_cache_170623_1352m/ var_cache_170623_1543/| head -25| tail -23); do ls -ld var_cache_170623_1352m/$i var_cache_170623_1543/$i ; read FAKE ; done ;
drwx------ 2 _apt root 4096 2017-06-21 08:39 var_cache_170623_1352m/cache/apt/archives/partial/
drwx------ 2 _apt root 4096 2017-06-22 14:13 var_cache_170623_1543/cache/apt/archives/partial/

drwxr-xr-x 31 man man 4096 2017-06-23 12:51 var_cache_170623_1352m/cache/man/
drwxr-xr-x 31 man man 4096 2017-06-23 07:48 var_cache_170623_1543/cache/man/

...

and it does appear to be just timestamps... I must have tried in either of the two, master or clone, to apt-get install something, which failed... Yes I did so... and in the master, and after I cloned it, as the timestamps clearly show. Shouldn't have, but no harm done...

I also ran:

for i in $(rsync -nav --delete  var_cache_170623_1352m/ var_cache_170623_1543/| head -25| tail -23); do ls -ld var_cache_170623_1352m/$i ; read FAKE ; ls -ld var_cache_170623_1352m/$i ; read FAKE ; ls -l var_cache_170623_1543/$i ; read FAKE ; ls -l var_cache_170623_1543/$i ; read FAKE ; done ;

but I won't bother with the output. Just these kind of loops may be necessary later on. ( They are really good for sorting archives when you have duplicates and you don't want them all over but, say in only two different places, and in both of those tow you want exact same copies of all data, in, say encrypted storage... )

So, I've checked, and I am starting from same environment, apt-wise, same files in storage (the cache) and in listing (the lib/apt), both those in /var of course, in both the master and this clone.

Because the manual air-gapping will consist in updating this clone, and getting the /var/cache/

(
especially the /var/cache/apt/archives, namely that one holds what I yesterday updated my originally Devuan jessie --in the interim updated with Debian stretch-- ...

[the /var/cache/apt/archives/, namely that one holds what I yesterday updated my Devuan jessie --interim-updated with Debian-stretch-- to Devuan ascii

How to update to ascii?
https://dev1galaxy.org/viewtopic.php?id=721&p=2#p2416

Here:

# ls /var/cache/apt/archives/
/var/cache/apt/archives/:
anacron_2.3-24_amd64.deb                     libpam-modules_1.1.8-3.6_amd64.deb
apt_1.4.6_amd64.deb                          libpam-modules-bin_1.1.8-3.6_amd64.deb
apt-utils_1.4.6_amd64.deb                    libpam-runtime_1.1.8-3.6_all.deb
bash-completion_1%3a2.1-4.3+devuan1_all.deb  libperl5.24_5.24.1-3_amd64.deb
ca-certificates_20161130+nmu1_all.deb        libpostproc54_7%3a3.2.5-1_amd64.deb
ca-certificates-java_20170531+nmu1_all.deb   libproxy1v5_0.4.14-3_amd64.deb
console-setup_1.164_all.deb                  libsmbclient_2%3a4.5.8+dfsg-2_amd64.deb
console-setup-linux_1.164_all.deb            libsndfile1_1.0.27-3_amd64.deb
debconf_1.5.61_all.deb                       libsqlite3-0_3.16.2-5_amd64.deb
debconf-i18n_1.5.61_all.deb                  libssh2-1_1.8.0-1_amd64.deb
debian-archive-keyring_2017.5_all.deb        libssl1.0.2_1.0.2l-2_amd64.deb
debian-reference-common_2.68_all.deb         libssl1.1_1.1.0f-3_amd64.deb
debian-reference-en_2.68_all.deb             libswresample2_7%3a3.2.5-1_amd64.deb
debianutils_4.8.1.1_amd64.deb                libswscale4_7%3a3.2.5-1_amd64.deb
devuan-baseconf_0.6.4+devuan2_all.deb        libsystemd0_232-25_amd64.deb
dpkg_1.18.24_amd64.deb                       libtasn1-6_4.10-1.1_amd64.deb
ffmpeg_7%3a3.2.5-1_amd64.deb                 libtiff5_4.0.8-2_amd64.deb
ghostscript_9.20~dfsg-3.2_amd64.deb          libudev1_232-25_amd64.deb
git_1%3a2.11.0-4_amd64.deb                   libvdpau1_1.1.1-6_amd64.deb
git-doc_1%3a2.11.0-4_all.deb                 libwacom2_0.24-1_amd64.deb
gitk_1%3a2.11.0-4_all.deb                    libwacom-common_0.24-1_all.deb
git-man_1%3a2.11.0-4_all.deb                 libwbclient0_2%3a4.5.8+dfsg-2_amd64.deb
keyboard-configuration_1.164_all.deb         libwireshark8_2.2.6+g32dac6a-2_amd64.deb
libapt-inst2.0_1.4.6_amd64.deb               libwireshark-data_2.2.6+g32dac6a-2_all.deb
libapt-pkg5.0_1.4.6_amd64.deb                libwiretap6_2.2.6+g32dac6a-2_amd64.deb
libavcodec57_7%3a3.2.5-1_amd64.deb           libwscodecs1_2.2.6+g32dac6a-2_amd64.deb
libavdevice57_7%3a3.2.5-1_amd64.deb          libwsutil7_2.2.6+g32dac6a-2_amd64.deb
libavfilter6_7%3a3.2.5-1_amd64.deb           linux-libc-dev_4.9.30-2_amd64.deb
libavformat57_7%3a3.2.5-1_amd64.deb          locales_2.24-11_all.deb
libavresample3_7%3a3.2.5-1_amd64.deb         lock
libavutil55_7%3a3.2.5-1_amd64.deb            login_1%3a4.4-4.1_amd64.deb
libblas3_3.7.0-2_amd64.deb                   multiarch-support_2.24-11_amd64.deb
libblas-common_3.7.0-2_amd64.deb             netcat-traditional_1.10-41.1_amd64.deb
libc6_2.24-11_amd64.deb                      openssl_1.1.0f-3_amd64.deb
libc-ares2_1.12.0-2_amd64.deb                partial
libc-bin_2.24-11_amd64.deb                   passwd_1%3a4.4-4.1_amd64.deb
libc-l10n_2.24-11_all.deb                    perl_5.24.1-3_amd64.deb
libdbus-1-3_1.10.18-1+devuan2.3_amd64.deb    perl-base_5.24.1-3_amd64.deb
libelf1_0.168-1_amd64.deb                    perl-modules-5.24_5.24.1-3_all.deb
libfftw3-double3_3.3.6p2-1_amd64.deb         postfix_3.1.4-7_amd64.deb
libfftw3-single3_3.3.6p2-1_amd64.deb         postfix-doc_3.1.4-7_all.deb
libgcrypt20_1.7.6-2_amd64.deb                postfix-sqlite_3.1.4-7_amd64.deb
libgme0_0.6.1-1_amd64.deb                    python-gtk2_2.24.0-5.1_amd64.deb
libgnutls30_3.5.8-6_amd64.deb                python-numpy_1%3a1.12.1-3_amd64.deb
libgnutls-openssl27_3.5.8-6_amd64.deb        python-six_1.10.0-4_all.deb
libgs9_9.20~dfsg-3.2_amd64.deb               rsync_3.1.2-2_amd64.deb
libgs9-common_9.20~dfsg-3.2_all.deb          samba-libs_2%3a4.5.8+dfsg-2_amd64.deb
libgtk-3-0_3.22.12-1_amd64.deb               sudo_1.8.20p2-1_amd64.deb
libgtk-3-common_3.22.12-1_all.deb            sysvinit_2.88dsf-59.3+devuan2_amd64.deb
libgxps2_0.2.5-1_amd64.deb                   tshark_2.2.6+g32dac6a-2_amd64.deb
liblapack3_3.7.0-2_amd64.deb                 udev_232-25_amd64.deb
liblogging-stdlog0_1.0.6-1_amd64.deb         wamerican_2017.01.22-1_all.deb
libmwaw-0.3-3_0.3.9-2_amd64.deb              whiptail_0.52.20-1_amd64.deb
libnewt0.52_0.52.20-1_amd64.deb              whois_5.2.16_amd64.deb
libnghttp2-14_1.23.1-1_amd64.deb             wireshark_2.2.6+g32dac6a-2_amd64.deb
libnss3_2%3a3.26.2-1.1_amd64.deb             wireshark-common_2.2.6+g32dac6a-2_amd64.deb
libp11-kit0_0.23.3-5_amd64.deb               wireshark-qt_2.2.6+g32dac6a-2_amd64.deb
libpam0g_1.1.8-3.6_amd64.deb

/var/cache/apt/archives/partial:
#

)

[Because the manual air-gapping will consist in updating this clone, and getting the /var/cache/] and /var/lib/apt/ into master and nothing else! And nothing else... That's what air-gapping is. You keep the system laboratory-style clean from all the internet. Internet doesn't touch it. You install only what you can verify.

In the end that was the reason that I shouted so loud when things weren't verifiable, as soon as I noticed the SHA256 sums didn't match somewhere important! See:
BAD sig with Devuan Jessie 1.0.0-RC
https://lists.dyne.org/lurker/message/2 … b0.en.html
also:
<same title as the email>
https://dev1galaxy.org/viewtopic.php?id=568

Pls. notice that on top of air-gapping, I also constantly read and decrypt the network wherever I go.

Alright. All this may sound like a lot, but the alternative is an unverifiable system... In linux
(
the Mr Linux's own kernel is not very secure thanks to his [ N ]ot [ I ]nvented [ H ]ere-attitude, which recently turned into ripping of that very code that previously wouldn't be accepted because of the NIH-attitude... How bizzare!...  But that ripoff has made us poor of grsecurity for any kernels after 4.9... Luckily the 4.9 kernel is LTS... Pls. read what one of the core Devuan developers and inventor and main developer of Heads said about it, and don't worry for years longer:
On grsecurity and status of heads (2017-04-26)
https://heads.dyne.org/news/2017/04/on-grsec.html
)
[In linux] security is not good at all, grsecurity fixes a lot (
Grsecurity/Pax installation on Devuan GNU/Linux
https://dev1galaxy.org/viewtopic.php?id=596
), but still...

Ah... Next, I'll try to check how my method (that I am actually in the process of inventing here) fares in real apt-get'ing. (And I'm posting this upfront. I'm pretty confident in my method that I'm inventing as I write this... Also I'm kind of betting on it... and that is believing that will happen... There's quite some amount of suspense that I feel now...)

Pls. bear with me, I work slowly.

Last edited by miroR (2017-07-15 23:30:13)

---

Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

miroR

Member

From: Zagreb, Croatia

Registered: 2016-11-30

Posts: 217  

Website

Re: Air-Gapped Devuan Install, Tentative

I wrote most of the posts that I will hopefully be posting only today, up to three days from now... But, some things I found new information about, and I will likely be making a change to include some even better methods which I haven't known about previously, and which while they do not pertain to Air-Gapping, are related in the way that those are also methods for freedom and security...

(
such as:
Installing to existing partitions/mount? Full disk encrypt? Feedback.
https://dev1galaxy.org/viewtopic.php?id=559
and:
http://www.pavelkogan.com/2015/01/25/li … ncryption/
)

But I do need to post what I have done so far... Namely, at the time of posting this, I am indeed browsing and using my fully functional Devuan that I have cloned from Air-Gapped master. What I used previously, such as for posting of the first post of this topic, is gone, and it is gone every bit of it.

Every bit of it, except what I introduced from it, just the necessary small fraction of what I needed from the internet...

And that is Air-Gapping, gentle reader.
--------------------------------------------------

The rest of this post I wrote, as you can see by the timestamps, three days ago. I only filled it with links, and corrected the typoes today, as well as after I created another topic about sans-dbus and added the link to further below.

ls -ABgotr | grep var_lib_apt
-rw-r--r--  1 125317120 2017-06-23 13:49 var_lib_apt_170623_1349_gdOvm.tar
-rw-r--r--  1 125317120 2017-06-23 14:45 var_lib_apt_170623_1445_gdOv.tar
drwxr-xr-x  3      4096 2017-06-23 15:08 var_lib_apt_170623_1445
drwxr-xr-x  3      4096 2017-06-23 15:09 var_lib_apt_170623_1349m
-rw-r--r--  1 147333120 2017-06-23 22:32 var_lib_apt_170623_2232_gdOv.tar
-rw-r--r--  1 147333120 2017-06-23 22:33 var_lib_apt_170623_2233_gdOv.tar
-rw-r--r--  1 147333120 2017-06-23 22:47 var_lib_apt_170623_2247_gdOv.tar
-rw-r--r--  1 147333120 2017-06-23 22:54 var_lib_apt_170623_2254_gdOv.tar
-rw-r--r--  1 147333120 2017-06-23 23:21 var_lib_apt_170623_2321_gdOv.tar
-rw-r--r--  1 147333120 2017-06-23 23:23 var_lib_apt_170623_2323_gdOv.tar
-rw-r--r--  1 147333120 2017-06-23 23:25 var_lib_apt_170623_2325_gdOv.tar
-rw-r--r--  1 147322880 2017-06-23 23:27 var_lib_apt_170623_2327_gdOv.tar
-rw-r--r--  1 147322880 2017-06-23 23:31 var_lib_apt_170623_2331_gdOv.tar
-rw-r--r--  1 147322880 2017-06-23 23:36 var_lib_apt_170623_2336_gdOv.tar
-rw-r--r--  1 147322880 2017-06-23 23:47 var_lib_apt_170623_2347_gdOv.tar
-rw-r--r--  1 147322880 2017-06-24 00:05 var_lib_apt_170624_0005_gdOv.tar
-rw-r--r--  1 147322880 2017-06-24 00:11 var_lib_apt_170624_0011_gdOv.tar
-rw-r--r--  1 147322880 2017-06-24 00:21 var_lib_apt_170624_0021_gdOv.tar
-rw-r--r--  1 147322880 2017-06-24 00:23 var_lib_apt_170624_0023_gdOv.tar
-rw-r--r--  1 147322880 2017-06-24 00:26 var_lib_apt_170624_0026_gdOv.tar
-rw-r--r--  1 147322880 2017-06-24 09:09 var_lib_apt_170624_0909_gdOv.tar
-rw-r--r--  1 147322880 2017-06-24 09:12 var_lib_apt_170624_0912_gdOv.tar
---
ls -ABgotr | grep var_cache
-rw-r--r--  1 164352000 2017-06-23 13:53 var_cache_170623_1352_gdOvm.tar
drwxr-xr-x  3      4096 2017-06-23 15:42 var_cache_170623_1352m
-rw-r--r--  1 164352000 2017-06-23 15:43 var_cache_170623_1543_gdOv.tar
drwxr-xr-x  3      4096 2017-06-23 15:44 var_cache_170623_1543
-rw-r--r--  1 194324480 2017-06-23 22:32 var_cache_170623_2231_gdOv.tar
-rw-r--r--  1 194324480 2017-06-23 22:33 var_cache_170623_2233_gdOv.tar
-rw-r--r--  1 194324480 2017-06-23 22:47 var_cache_170623_2247_gdOv.tar
-rw-r--r--  1 194324480 2017-06-23 22:54 var_cache_170623_2254_gdOv.tar
-rw-r--r--  1 240988160 2017-06-23 23:22 var_cache_170623_2322_gdOv.tar
-rw-r--r--  1 243005440 2017-06-23 23:23 var_cache_170623_2323_gdOv.tar
-rw-r--r--  1 244439040 2017-06-23 23:25 var_cache_170623_2325_gdOv.tar
-rw-r--r--  1 252825600 2017-06-23 23:27 var_cache_170623_2327_gdOv.tar
-rw-r--r--  1 288133120 2017-06-23 23:31 var_cache_170623_2331_gdOv.tar
-rw-r--r--  1 288133120 2017-06-23 23:36 var_cache_170623_2336_gdOv.tar
-rw-r--r--  1 295301120 2017-06-23 23:47 var_cache_170623_2347_gdOv.tar
-rw-r--r--  1 295280640 2017-06-24 00:05 var_cache_170624_0005_gdOv.tar
-rw-r--r--  1 295833600 2017-06-24 00:11 var_cache_170624_0011_gdOv.tar
-rw-r--r--  1 370186240 2017-06-24 00:21 var_cache_170624_0021_gdOv.tar
-rw-r--r--  1 370186240 2017-06-24 00:23 var_cache_170624_0023_gdOv.tar
-rw-r--r--  1 370186240 2017-06-24 00:26 var_cache_170624_0026_gdOv.tar
-rw-r--r--  1 370329600 2017-06-24 09:09 var_cache_170624_0909_gdOv.tar
-rw-r--r--  1 371046400 2017-06-24 09:12 var_cache_170624_0912_gdOv.tar
---

And I'm crossing the thick gap of air now, taking these archives, as well as this text file, with me, into my master Air-Gapped machine.

Ah, the thick gap of air that only the Schmoog and such can surreptitiously traverse with stuff like your appliances communicating btwn themselves via out-of-band audio and whatever other witchcraft-like methods that they needed the poetterware for in the GNU/Linux FOSS --to accomodate for global bulk collection (== mass surveillance) just as they are accomodated for in M$ and Shmapple Schmac--, to subvert and conrol the FOSS just as well as they do those... But that is a different matter. A topic of its own it deserves. Pertaining here only inasmuch as: sans-systemd, sans-dbus, sans-*kit, sans-pulse --and other poetterware and relatives-- and you're much much safer from all the schmoogs of the world's intrusions.

But I had to go back over the streams-of-elecrons-resistant gap, because I forgot the logs! I logged what each and every apt- command did! Here:

$ ls -ABgo /mnt/h_Ref/170624/
total 7544916
-rw-r--r-- 1      3375 2017-06-24 11:00 Dev1_170624_Ascii.txt
-rw-r--r-- 1    788480 2017-06-24 11:30 LOG.tar
-rw-r--r-- 1 194324480 2017-06-23 22:32 var_cache_170623_2231_gdOv.tar
...
-rw-r--r-- 1 370186240 2017-06-24 00:23 var_cache_170624_0023_gdOv.tar
...
-rw-r--r-- 1 371046400 2017-06-24 09:12 var_cache_170624_0912_gdOv.tar
-rw-r--r-- 1 147333120 2017-06-23 22:32 var_lib_apt_170623_2232_gdOv.tar
...

where the LOG.tar untars (very much shortened) as:

# tar tf /mnt/h_Ref/170624/LOG.tar
LOG_/
LOG_/apt-get_install-f_170624_0011_gdOv.log
LOG_/apt-cache_search_libevdev2_170624_0905_gdOv.log
LOG_/apt-get_remove_libgettextpo-dev_170624_0006_gdOv
...
LOG_/apt-get_install_lsb-release_170623_2324_gdOv
LOG_/apt-get_install_xserver-xorg-input-all_170623_2328_gdOv
LOG_/apt-get_remove_python-defusedxml_170624_0009_gdOv
LOG_/apt-get_install_mesa-utils_170623_2324_gdOv
...
LOG_/apt-get_install_python3.5-minimal_170623_2326_gdOv
LOG_/apt-get_install_libpython3.5-minimal_170623_2323_gdOv
...
LOG_/apt-get_dist-upgrade_170623_2246_gdOv.log
LOG_/apt-get_install_x11-xkb-utils_170623_2326_gdOv
...
LOG_/apt-get_install_libglib2.0-data_170624_0018_gdOv
LOG_/apt-get_remove_geoip-database_170623_2351_gdOv
...
LOG_/apt-get_remove_consolekit_170623_2346_gdOv
LOG_/apt-get_install_expect_170623_2319_gdOv
...
LOG_/apt-get_remove_libcupsfilters1_170624_0004_gdOv
LOG_/apt-get_install-f_170623_2353_gdOv.log

It actually holds:

# tar xf /mnt/h_Ref/170624/LOG.tar -C /Cmn/mr/
# ls -1 /Cmn/mr/LOG_/ | wc -l
208
#

that's 208 various apt- commands that I issued...

But first a story about the why-so-mercilessly-non-verbose tip at these pages with overlapping content:
https://git.devuan.org/dev1fanboy/Upgra … tall-guide
https://git.devuan.org/dev1fanboy/Upgra … minimalism
(which in my experience is necessary for, and should be linked to from the nominal without-dbus guide:
https://git.devuan.org/dev1fanboy/Upgra … thout-dbus
)
which I intend to make a separate topic about (and I promise to try and link to it from here
EDIT at the time of posting:
sans-dbus, Questions, Tips and Tricks on its Implementation
https://dev1galaxy.org/viewtopic.php?id=761
), because last night I figured about it what essentially eluded my understanding for years...

---

Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

miroR

Member

From: Zagreb, Croatia

Registered: 2016-11-30

Posts: 217  

Website

Re: Air-Gapped Devuan Install, Tentative

Pls. look up the dbus topic that I sent you at the end of the previous post, because it's twin aspect, but both are needed for understanding of what, and how, it happened.

This post could be a continuation after the second post of:
sans-dbus, Questions, Tips and Tricks on its Implementation
https://dev1galaxy.org/viewtopic.php?id=761#p2606
That topic and this Air-Gapped Devuan Install that you're reading, are intertwined, because of the circumstances of my installation...

But I decided to return the reader from that dbus-aspect-stressed-in-it topic to here, because... Because Air-Gapping, this manual non-expert hacking kind, works in Devuan, and I'm happy that I made it.
(All posted three days after having been written.)
Sorry for all the inconveniences, but all of this is not so very trivial...
---

Without some of these I would not have X. Which ones are indispensable, and exactly what each single one of these does, I don't know in much detail. But my guesswork might prove good enough...
The loop from the previous post reached this iteration:
apt-get install xserver-xorg
which I accepted (I forgot to say how the "read FAKE;" in my scripts does nothing, just wait for you to either hit Enter to continue with what it is in, say a loop, or to issue Ctrl-C.

And, importantly, the "ask" is a function taken from Mendel Cooper's Advanced Bash Scripting Guide. I put a line:

source ~/.bashrc.ask

in both /root's and in /home/mr's ~/.bashrc

and this is it:
$ cat ~/.bashrc.ask

function ask()
{
    echo -n "$@" '[y/n] ' ; read ans
    case "$ans" in
        y*|Y*) return 0 ;;
        *) return 1 ;;
    esac
}

But I was saying, that I accepted:
apt-get install xserver-xorg

[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  aspell aspell-en at-spi2-core autopoint cups-bsd cups-client cups-common
  dictionaries-common emacsen-common firefox-esr geoip-database
  geoip-database-extra giblib1 hunspell-en-us i965-va-driver iamerican
  ibritish ienglish-common ispell libaspell15 libasprintf-dev libasprintf0c2
  libauthen-sasl-perl libbdplus0 libcanberra0 libcupsfilters1 libe-book-0.1-1
  libept1.4.12 libfile-basedir-perl libfile-desktopentry-perl
  libfile-mimeinfo-perl libfont-afm-perl libgconf2-4 libgettextpo-dev
  libgettextpo0 libglib2.0-data libhsqldb1.8.0-java libhtml-form-perl
  libhtml-format-perl libhttp-daemon-perl libjasper1 libmailtools-perl
  libnet-dbus-perl libnet-smtp-ssl-perl libpam-cap libpaper-utils
  libreoffice-avmedia-backend-gstreamer libreoffice-java-common
  libreoffice-math libreoffice-sdbc-hsqldb libreoffice-writer libsasl2-modules
  libtie-ixhash-perl libtxc-dxtn-s2tc0 libvte-2.90-9 libvte-2.90-common
  libwacom-bin libx11-protocol-perl libxapian22 libxml-twig-perl
  libxml-xpathengine-perl powermgmt-base qt5-gtk-platformtheme
  qttranslations5-l10n rarian-compat rename scrot synaptic tango-icon-theme
  tcpd util-linux-locales va-driver-all vdpau-va-driver
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  libxfont2 xserver-xorg-core xserver-xorg-input-all xserver-xorg-input-evdev
  xserver-xorg-input-libinput xserver-xorg-input-mouse
  xserver-xorg-input-synaptics xserver-xorg-input-wacom xserver-xorg-video-ati
  xserver-xorg-video-cirrus xserver-xorg-video-fbdev xserver-xorg-video-intel
  xserver-xorg-video-mach64 xserver-xorg-video-mga xserver-xorg-video-neomagic
  xserver-xorg-video-nouveau xserver-xorg-video-openchrome
  xserver-xorg-video-qxl xserver-xorg-video-r128 xserver-xorg-video-radeon
  xserver-xorg-video-savage xserver-xorg-video-siliconmotion
  xserver-xorg-video-sisusb xserver-xorg-video-tdfx xserver-xorg-video-trident
  xserver-xorg-video-vesa xserver-xorg-video-vmware
Suggested packages:
  xfonts-100dpi | xfonts-75dpi xfonts-scalable gpointing-device-settings
  touchfreeze xinput firmware-linux firmware-amd-graphics
Recommended packages:
  xserver-xorg-legacy libpam-systemd
The following packages will be REMOVED:
  xserver-xorg-input-vmmouse xserver-xorg-video-modesetting
The following NEW packages will be installed:
  libxfont2 xserver-xorg-input-libinput
The following packages will be upgraded:
  xserver-xorg xserver-xorg-core xserver-xorg-input-all
  xserver-xorg-input-evdev xserver-xorg-input-mouse
  xserver-xorg-input-synaptics xserver-xorg-input-wacom xserver-xorg-video-ati
  xserver-xorg-video-cirrus xserver-xorg-video-fbdev xserver-xorg-video-intel
  xserver-xorg-video-mach64 xserver-xorg-video-mga xserver-xorg-video-neomagic
  xserver-xorg-video-nouveau xserver-xorg-video-openchrome
  xserver-xorg-video-qxl xserver-xorg-video-r128 xserver-xorg-video-radeon
  xserver-xorg-video-savage xserver-xorg-video-siliconmotion
  xserver-xorg-video-sisusb xserver-xorg-video-tdfx xserver-xorg-video-trident
  xserver-xorg-video-vesa xserver-xorg-video-vmware
26 upgraded, 2 newly installed, 2 to remove and 56 not upgraded.
Need to get 0 B/8,364 kB of archives.
After this operation, 793 kB of additional disk space will be used.
Do you want to continue? [Y/n]

And now I'll hit Enter:

Do you want to continue? [Y/n]
Reading changelogs...
(Reading database ... 96673 files and directories currently installed.)
Preparing to unpack .../00-xserver-xorg_1%3a7.7+19_amd64.deb ...
Unpacking xserver-xorg (1:7.7+19) over (1:7.7+7) ...
Preparing to unpack .../01-xserver-xorg-video-sisusb_1%3a0.9.7-1_amd64.deb ...
Unpacking xserver-xorg-video-sisusb (1:0.9.7-1) over (1:0.9.6-2+b2) ...
Preparing to unpack .../02-xserver-xorg-video-ati_1%3a7.8.0-1+b1_amd64.deb ...
Unpacking xserver-xorg-video-ati (1:7.8.0-1+b1) over (1:7.5.0-1) ...
Preparing to unpack .../03-xserver-xorg-video-mach64_6.9.5-1+b2_amd64.deb ...
Unpacking xserver-xorg-video-mach64 (6.9.5-1+b2) over (6.9.4-2) ...
Preparing to unpack .../04-xserver-xorg-video-tdfx_1%3a1.4.7-1_amd64.deb ...
Unpacking xserver-xorg-video-tdfx (1:1.4.7-1) over (1:1.4.5-1+b2) ...
Preparing to unpack .../05-xserver-xorg-video-cirrus_1%3a1.5.3-1+b2_amd64.deb ...
Unpacking xserver-xorg-video-cirrus (1:1.5.3-1+b2) over (1:1.5.2-2+b1) ...
Preparing to unpack .../06-xserver-xorg-video-vesa_1%3a2.3.4-1+b2_amd64.deb ...
Unpacking xserver-xorg-video-vesa (1:2.3.4-1+b2) over (1:2.3.3-1+b3) ...
Preparing to unpack .../07-xserver-xorg-video-radeon_1%3a7.8.0-1+b1_amd64.deb ...
Unpacking xserver-xorg-video-radeon (1:7.8.0-1+b1) over (1:7.5.0-1) ...
Preparing to unpack .../08-xserver-xorg-video-siliconmotion_1%3a1.7.9-2_amd64.deb ...
Unpacking xserver-xorg-video-siliconmotion (1:1.7.9-2) over (1:1.7.7-2+b2) ...
Preparing to unpack .../09-xserver-xorg-video-trident_1%3a1.3.8-1_amd64.deb ...
Unpacking xserver-xorg-video-trident (1:1.3.8-1) over (1:1.3.6-2+b2) ...
Preparing to unpack .../10-xserver-xorg-video-vmware_1%3a13.2.1-1+b1_amd64.deb ...
Unpacking xserver-xorg-video-vmware (1:13.2.1-1+b1) over (1:13.0.2-3.1) ...
Preparing to unpack .../11-xserver-xorg-video-neomagic_1%3a1.2.9-1+b2_amd64.deb ...
Unpacking xserver-xorg-video-neomagic (1:1.2.9-1+b2) over (1:1.2.8-1+b2) ...
Preparing to unpack .../12-xserver-xorg-video-openchrome_1%3a0.5.0-3_amd64.deb ...
Unpacking xserver-xorg-video-openchrome (1:0.5.0-3) over (1:0.3.3-1+b2) ...
Preparing to unpack .../13-xserver-xorg-video-mga_1%3a1.6.5-1_amd64.deb ...
Unpacking xserver-xorg-video-mga (1:1.6.5-1) over (1:1.6.3-2+b1) ...
Preparing to unpack .../14-xserver-xorg-video-savage_1%3a2.3.9-1_amd64.deb ...
Unpacking xserver-xorg-video-savage (1:2.3.9-1) over (1:2.3.7-2+b2) ...
Preparing to unpack .../15-xserver-xorg-video-fbdev_1%3a0.4.4-1+b5_amd64.deb ...
Unpacking xserver-xorg-video-fbdev (1:0.4.4-1+b5) over (1:0.4.4-1+b2) ...
Preparing to unpack .../16-xserver-xorg-video-nouveau_1%3a1.0.13-3_amd64.deb ...
Unpacking xserver-xorg-video-nouveau (1:1.0.13-3) over (1:1.0.11-1) ...
Preparing to unpack .../17-xserver-xorg-video-qxl_0.1.5-2_amd64.deb ...
Unpacking xserver-xorg-video-qxl (0.1.5-2) over (0.1.1-2+b1) ...
Preparing to unpack .../18-xserver-xorg-video-r128_6.10.2-1_amd64.deb ...
Unpacking xserver-xorg-video-r128 (6.10.2-1) over (6.9.2-1+b2) ...
Preparing to unpack .../19-xserver-xorg-video-intel_2%3a2.99.917+git20161206-1_amd64.deb ...
Unpacking xserver-xorg-video-intel (2:2.99.917+git20161206-1) over (2:2.21.15-2+b2) ...
Preparing to unpack .../20-xserver-xorg-input-mouse_1%3a1.9.2-1+b1_amd64.deb ...
Unpacking xserver-xorg-input-mouse (1:1.9.2-1+b1) over (1:1.9.1-1) ...
Preparing to unpack .../21-xserver-xorg-input-synaptics_1.9.0-1+b1_amd64.deb ...
Unpacking xserver-xorg-input-synaptics (1.9.0-1+b1) over (1.8.1-1) ...
Preparing to unpack .../22-xserver-xorg-input-wacom_0.34.0-1_amd64.deb ...
Unpacking xserver-xorg-input-wacom (0.34.0-1) over (0.26.0+20140918-1) ...
Preparing to unpack .../23-xserver-xorg-input-all_1%3a7.7+19_amd64.deb ...
Unpacking xserver-xorg-input-all (1:7.7+19) over (1:7.7+7) ...
(Reading database ... 96669 files and directories currently installed.)
Removing xserver-xorg-input-vmmouse (1:13.0.0-1+b3) ...
dpkg: xserver-xorg-video-modesetting: dependency problems, but removing anyway as you requested:
 xserver-xorg-video-all depends on xserver-xorg-video-modesetting; however:
  Package xserver-xorg-video-modesetting is to be removed.

Removing xserver-xorg-video-modesetting (0.9.0-2) ...
(Reading database ... 96651 files and directories currently installed.)
Preparing to unpack .../xserver-xorg-core_2%3a1.19.3-1_amd64.deb ...
Unpacking xserver-xorg-core (2:1.19.3-1) over (2:1.16.4-1) ...
Preparing to unpack .../xserver-xorg-input-evdev_1%3a2.10.5-1_amd64.deb ...
Unpacking xserver-xorg-input-evdev (1:2.10.5-1) over (1:2.9.0-2) ...
Selecting previously unselected package libxfont2:amd64.
Preparing to unpack .../libxfont2_1%3a2.0.1-3_amd64.deb ...
Unpacking libxfont2:amd64 (1:2.0.1-3) ...
Selecting previously unselected package xserver-xorg-input-libinput.
Preparing to unpack .../xserver-xorg-input-libinput_0.23.0-2_amd64.deb ...
Unpacking xserver-xorg-input-libinput (0.23.0-2) ...
Setting up libxfont2:amd64 (1:2.0.1-3) ...
Setting up xserver-xorg-core (2:1.19.3-1) ...
Setting up xserver-xorg-video-radeon (1:7.8.0-1+b1) ...
Setting up xserver-xorg-video-vesa (1:2.3.4-1+b2) ...
Processing triggers for libc-bin (2.24-12) ...
Setting up xserver-xorg-video-cirrus (1:1.5.3-1+b2) ...
Setting up xserver-xorg-video-tdfx (1:1.4.7-1) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up xserver-xorg-input-wacom (0.34.0-1) ...
Setting up xserver-xorg-input-synaptics (1.9.0-1+b1) ...
Setting up xserver-xorg-video-mach64 (6.9.5-1+b2) ...
Setting up xserver-xorg-video-ati (1:7.8.0-1+b1) ...
Setting up xserver-xorg-video-sisusb (1:0.9.7-1) ...
Setting up xserver-xorg-video-intel (2:2.99.917+git20161206-1) ...
Setting up xserver-xorg-video-r128 (6.10.2-1) ...
Setting up xserver-xorg-video-qxl (0.1.5-2) ...
Setting up xserver-xorg-input-mouse (1:1.9.2-1+b1) ...
Setting up xserver-xorg-input-evdev (1:2.10.5-1) ...
Setting up xserver-xorg-video-nouveau (1:1.0.13-3) ...
Setting up xserver-xorg-video-fbdev (1:0.4.4-1+b5) ...
Setting up xserver-xorg-video-savage (1:2.3.9-1) ...
Setting up xserver-xorg-video-mga (1:1.6.5-1) ...
Setting up xserver-xorg-video-openchrome (1:0.5.0-3) ...
Setting up xserver-xorg-input-libinput (0.23.0-2) ...
Setting up xserver-xorg-video-neomagic (1:1.2.9-1+b2) ...
Setting up xserver-xorg-video-vmware (1:13.2.1-1+b1) ...
Setting up xserver-xorg-video-trident (1:1.3.8-1) ...
Setting up xserver-xorg-video-siliconmotion (1:1.7.9-2) ...
Setting up xserver-xorg (1:7.7+19) ...
Setting up xserver-xorg-input-all (1:7.7+19) ...
Processing triggers for libc-bin (2.24-12) ...
2017/06/25 08:55:33 Reading config from: /etc/paxrat/paxrat.conf

It appears to all be going well.

Similarly, but if it goes well, I'll cut it shorter:

apt-get install xserver-xorg-video-all
[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  aspell aspell-en at-spi2-core autopoint cups-bsd cups-client cups-common
  dictionaries-common emacsen-common firefox-esr geoip-database
  geoip-database-extra giblib1 hunspell-en-us i965-va-driver iamerican
  ibritish ienglish-common ispell libaspell15 libasprintf-dev libasprintf0c2
  libauthen-sasl-perl libbdplus0 libcanberra0 libcupsfilters1 libe-book-0.1-1
  libept1.4.12 libfile-basedir-perl libfile-desktopentry-perl
  libfile-mimeinfo-perl libfont-afm-perl libgconf2-4 libgettextpo-dev
  libgettextpo0 libglib2.0-data libhsqldb1.8.0-java libhtml-form-perl
  libhtml-format-perl libhttp-daemon-perl libjasper1 libmailtools-perl
  libnet-dbus-perl libnet-smtp-ssl-perl libpam-cap libpaper-utils
  libreoffice-avmedia-backend-gstreamer libreoffice-java-common
  libreoffice-math libreoffice-sdbc-hsqldb libreoffice-writer libsasl2-modules
  libtie-ixhash-perl libtxc-dxtn-s2tc0 libvte-2.90-9 libvte-2.90-common
  libwacom-bin libx11-protocol-perl libxapian22 libxml-twig-perl
  libxml-xpathengine-perl powermgmt-base qt5-gtk-platformtheme
  qttranslations5-l10n rarian-compat rename scrot synaptic tango-icon-theme
  tcpd util-linux-locales va-driver-all vdpau-va-driver
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  xserver-xorg-video-amdgpu
Suggested packages:
  firmware-amd-graphics
The following NEW packages will be installed:
  xserver-xorg-video-amdgpu
The following packages will be upgraded:
  xserver-xorg-video-all
1 upgraded, 1 newly installed, 0 to remove and 55 not upgraded.
Need to get 0 B/125 kB of archives.
After this operation, 189 kB of additional disk space will be used.
Do you want to continue? [Y/n] y

It did install it's packages... And the rest. Now just the last, the xterm:

apt-get install xterm
[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
xterm is already the newest version (327-2).
The following packages were automatically installed and are no longer required:
  aspell aspell-en at-spi2-core autopoint cups-bsd cups-client cups-common
  dictionaries-common emacsen-common firefox-esr geoip-database
  geoip-database-extra giblib1 hunspell-en-us i965-va-driver iamerican
  ibritish ienglish-common ispell libaspell15 libasprintf-dev libasprintf0c2
  libauthen-sasl-perl libbdplus0 libcanberra0 libcupsfilters1 libe-book-0.1-1
  libept1.4.12 libfile-basedir-perl libfile-desktopentry-perl
  libfile-mimeinfo-perl libfont-afm-perl libgconf2-4 libgettextpo-dev
  libgettextpo0 libglib2.0-data libhsqldb1.8.0-java libhtml-form-perl
  libhtml-format-perl libhttp-daemon-perl libjasper1 libmailtools-perl
  libnet-dbus-perl libnet-smtp-ssl-perl libpam-cap libpaper-utils
  libreoffice-avmedia-backend-gstreamer libreoffice-java-common
  libreoffice-math libreoffice-sdbc-hsqldb libreoffice-writer libsasl2-modules
  libtie-ixhash-perl libtxc-dxtn-s2tc0 libvte-2.90-9 libvte-2.90-common
  libwacom-bin libx11-protocol-perl libxapian22 libxml-twig-perl
  libxml-xpathengine-perl powermgmt-base qt5-gtk-platformtheme
  qttranslations5-l10n rarian-compat rename scrot synaptic tango-icon-theme
  tcpd util-linux-locales va-driver-all vdpau-va-driver
Use 'apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 55 not upgraded.

# 

(see how the prompt returned there? it was all in a long for loop until now, the xterm was the last entry)

Because what follows next is some removing of packages that, as best I understand, very very likely inextricably (at this time) depend on dbus.

This is how it went in the clone, one day and a half ago:

...
-rw-r--r-- 1 mr   mr    1814 2017-06-23 23:29 apt-get_install_xserver-xorg-video-fbdev_170623_2329_gdOv
-rw-r--r-- 1 mr   mr    1753 2017-06-23 23:29 apt-get_install_xserver-xorg-video-modesetting_170623_2329_gdOv
-rw-r--r-- 1 mr   mr    1820 2017-06-23 23:29 apt-get_install_xserver-xorg-video-neomagic_170623_2329_gdOv
-rw-r--r-- 1 mr   mr    1816 2017-06-23 23:29 apt-get_install_xserver-xorg-video-nouveau_170623_2329_gdOv
-rw-r--r-- 1 mr   mr    1816 2017-06-23 23:29 apt-get_install_xserver-xorg-video-radeon_170623_2329_gdOv
-rw-r--r-- 1 mr   mr    1812 2017-06-23 23:29 apt-get_install_xserver-xorg-video-vesa_170623_2329_gdOv
-rw-r--r-- 1 mr   mr    1748 2017-06-23 23:29 apt-get_install_xterm_170623_2329_gdOv
-rw-r--r-- 1 mr   mr     272 2017-06-23 23:29 apt-get_update_170623_2329_gdOv.log
-rw-r--r-- 1 mr   mr    5305 2017-06-23 23:32 apt-get_upgrade_170623_2329_gdOv.log
-rw-r--r-- 1 mr   mr    4193 2017-06-23 23:32 apt-get_dist-upgrade_170623_2332_gdOv.log
-rw-r--r-- 1 mr   mr    2908 2017-06-23 23:35 apt-get_remove_evince-common_evince-gtk_pinentry-gtk2_170623_2335_gdOv.log
-rw-r--r-- 1 mr   mr     491 2017-06-23 23:36 apt-get_update_170623_2336_gdOv.log
-rw-r--r-- 1 mr   mr    3946 2017-06-23 23:37 apt-get_dist-upgrade_170623_2336_gdOv.log
-rw-r--r-- 1 mr   mr    1721 2017-06-23 23:41 apt-get_remove_dbus_170623_2341_gdOv.log
-rw-r--r-- 1 mr   mr    3939 2017-06-23 23:41 apt-get_dist-upgrade_170623_2341_gdOv.log
-rw-r--r-- 1 mr   mr    2520 2017-06-23 23:46 apt-get_remove_at-spi2-core_170623_2345_gdOv
-rw-r--r-- 1 mr   mr    2552 2017-06-23 23:46 apt-get_remove_autopoint_170623_2346_gdOv
-rw-r--r-- 1 mr   mr    1702 2017-06-23 23:46 apt-get_remove_consolekit_170623_2346_gdOv
-rw-r--r-- 1 mr   mr    3329 2017-06-23 23:46 apt-get_remove_cpp-4.9_170623_2346_gdOv
-rw-r--r-- 1 mr   mr    4325 2017-06-23 23:47 apt-get_remove_cpp-4.9_170623_2347_gdOv
-rw-r--r-- 1 mr   mr    2561 2017-06-23 23:48 apt-get_remove_cups-bsd_170623_2347_gdOv
-rw-r--r-- 1 mr   mr    2555 2017-06-23 23:48 apt-get_remove_cups-client_170623_2348_gdOv
-rw-r--r-- 1 mr   mr    2497 2017-06-23 23:48 apt-get_remove_cups-common_170623_2348_gdOv
...

See the timing there. Now. first, more rsync-updating my Air-Gapped master, and then another loop, but a loop for removing those dbus-dependent packages.

However I made another mistake. I lost my real extended_states file.

Because I issued:
# rsync -av --delete var_lib_apt_170623_2336_gdOv/lib/apt/  /var/lib/apt/

sending incremental file list
./
daily_lock
extended_states

sent 41,092 bytes  received 62 bytes  82,308.00 bytes/sec
total size is 147,305,546  speedup is 3,579.37

And I did make a few saner choices than in the clone... Will Apt now not know about those and think it is all as it was in the clone? .... Aaarghhh... I hope this mistake is not so serious.

Anyway:
# rsync -av --delete var_cache_170623_2347_gdOv/cache/  /var/cache/

sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/cpp-6_6.3.0-18_amd64.deb
apt/archives/cpp_4%3a6.3.0-4_amd64.deb
apt/archives/libisl15_0.18-1_amd64.deb
apt/archives/partial/
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/de/index.db
man/es/
man/es/index.db
man/fi/
man/fr/
man/fr/index.db
man/hu/
man/id/
man/it/
man/it/index.db
man/ja/
man/ko/
man/nl/
man/nl/index.db
man/pl/
man/pl/index.db
man/pt/
man/pt_BR/
man/ru/
man/ru/index.db
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/

sent 59,925,629 bytes  received 498 bytes  17,121,750.57 bytes/sec
total size is 295,014,420  speedup is 4.92

However, I should not start removing yet, because before that, which happened:

...
-rw-r--r-- 1 mr mr  1252 2017-06-24 00:02 keep-or-remove_list_01.ls-1_REMOVE.ls-1
...

I had done some updating in the clone, which of course I do with rsync'ing here in the master, not with apt-get update'ing.

Here in this Air-Gapped. I do with rsync'ing the equivalent of:

-rw-r--r-- 1 mr   mr     272 2017-06-23 23:29 apt-get_update_170623_2329_gdOv.log

and such.

And after that I can run "apt-get upgrade" in Air-Gapped as if I was in the clone:

-rw-r--r-- 1 mr   mr    5305 2017-06-23 23:32 apt-get_upgrade_170623_2329_gdOv.log

Can I now, since:

-rw-r--r-- 1 mr   mr    4193 2017-06-23 23:32 apt-get_dist-upgrade_170623_2332_gdOv.log

that was what I ran in the clone at this stage, try and run:

apt-get upgrade |& tee /Cmn/LOG_/apt-get_upgrade_$(date +%y%m%d_%H%M)_$(hostname)

?

And I ran it:
# apt-get upgrade |& tee /Cmn/LOG_/apt-get_upgrade_$(date +%y%m%d_%H%M)_$(hostname)

Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
  aspell aspell-en at-spi2-core autopoint cups-bsd cups-client cups-common
  dictionaries-common emacsen-common firefox-esr geoip-database
  geoip-database-extra giblib1 hunspell-en-us i965-va-driver iamerican
  ibritish ienglish-common ispell libaacs0 libabw-0.1-1 libaspell15
  libasprintf-dev libasprintf0c2 libauthen-sasl-perl libbdplus0 libcanberra0
  libcupsfilters1 libe-book-0.1-1 libept1.4.12 libfile-basedir-perl
  libfile-desktopentry-perl libfile-mimeinfo-perl libfont-afm-perl libgconf2-4
  libgettextpo-dev libgettextpo0 libglib2.0-data libhsqldb1.8.0-java
  libhtml-form-perl libhtml-format-perl libhttp-daemon-perl libjasper1
  libmailtools-perl libnet-dbus-perl libnet-smtp-ssl-perl libpam-cap
  libpaper-utils libpoppler46 libreoffice-avmedia-backend-gstreamer
  libreoffice-java-common libreoffice-math libreoffice-sdbc-hsqldb
  libreoffice-writer libsasl2-modules libtie-ixhash-perl libtxc-dxtn-s2tc0
  libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common libwacom-bin
  libx11-protocol-perl libxapian22 libxml-twig-perl libxml-xpathengine-perl
  powermgmt-base qt5-gtk-platformtheme qttranslations5-l10n rarian-compat
  rename scrot synaptic tango-icon-theme tcpd util-linux-locales va-driver-all
  vdpau-va-driver
Use 'apt autoremove' to remove them.
The following packages have been kept back:
  apt-listchanges bind9-host cpp dnsutils evince-common evince-gtk file
  firefox-esr gnupg gnupg-agent gnupg2 initramfs-tools isc-dhcp-client
  isc-dhcp-common libasprintf-dev libatomic1 libclamav7 libcloog-isl4 libcurl3
  libcurl3-gnutls libevdocument3-4 libevview3-3 libfile-basedir-perl libgcc1
  libgomp1 libhsqldb1.8.0-java libldap-2.4-2 libmagic1 libquadmath0 libstdc++6
  linux-image-amd64 lp-solve mutt nfs-common obconf openbox pinentry-gtk2
  procps python-debianbts python-pil reportbug rsyslog synaptic tzdata vim
  vim-common vim-runtime vim-tiny wget
The following packages will be upgraded:
  adwaita-icon-theme gnome-icon-theme libpoppler-glib8 libxatracker2
  mate-icon-theme xpdf
6 upgraded, 0 newly installed, 0 to remove and 49 not upgraded.
Need to get 0 B/35.2 MB of archives.
After this operation, 35.0 MB of additional disk space will be used.
Do you want to continue? [Y/n]

And, before I tell you that I think I can try that, I need to tell you that it diverges from what it looked like in the clone, where it was still pulling in dbus, as evince, cups, firefox-esr, and other were still in there... Hmmmhhh...

Let's try accepting that with Enter:

Do you want to continue? [Y/n] 
Reading changelogs...
(Reading database ... 96673 files and directories currently installed.)
Preparing to unpack .../0-adwaita-icon-theme_3.22.0-1_all.deb ...
Unpacking adwaita-icon-theme (3.22.0-1) over (3.14.0-2) ...
Preparing to unpack .../1-gnome-icon-theme_3.12.0-2_all.deb ...
Unpacking gnome-icon-theme (3.12.0-2) over (3.12.0-1) ...
Preparing to unpack .../2-libpoppler-glib8_0.48.0-2_amd64.deb ...
Unpacking libpoppler-glib8:amd64 (0.48.0-2) over (0.26.5-2+deb8u1) ...
Preparing to unpack .../3-libxatracker2_13.0.6-1+b2_amd64.deb ...
Unpacking libxatracker2:amd64 (13.0.6-1+b2) over (10.3.2-1+deb8u1) ...
Preparing to unpack .../4-mate-icon-theme_1.16.2-1_all.deb ...
Unpacking mate-icon-theme (1.16.2-1) over (1.8.0-1) ...
Preparing to unpack .../5-xpdf_3.04-4_amd64.deb ...
Unpacking xpdf (3.04-4) over (3.03-17+b1) ...
Setting up libpoppler-glib8:amd64 (0.48.0-2) ...
Processing triggers for mime-support (3.60) ...
Processing triggers for menu (2.1.47+b1) ...
Setting up gnome-icon-theme (3.12.0-2) ...
Setting up libxatracker2:amd64 (13.0.6-1+b2) ...
Setting up xpdf (3.04-4) ...
Processing triggers for libc-bin (2.24-12) ...
Processing triggers for man-db (2.7.6.1-2) ...
Processing triggers for hicolor-icon-theme (0.15-1) ...
Setting up mate-icon-theme (1.16.2-1) ...
Setting up adwaita-icon-theme (3.22.0-1) ...
update-alternatives: using /usr/share/icons/Adwaita/cursor.theme to provide /usr/share/icons/default/index.theme (x-cursor-theme) in auto mode
2017/06/25 09:29:03 Reading config from: /etc/paxrat/paxrat.conf

But I next in the clone removed:

-rw-r--r-- 1 mr   mr    2908 2017-06-23 23:35 apt-get_remove_evince-common_evince-gtk_pinentry-gtk2_170623_2335_gdOv.log

Can I do that in Air-Gapped with this fake rsync'd updates?
# apt-get remove evince-common evince-gtk pinentry-gtk2 |& tee LOG_/apt-get_remove_evince-common_evince-gtk_pinentry-gtk2_$(date +%y%m%d_%H%M)_$(hostname).log

Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  aspell aspell-en at-spi2-core autopoint cups-bsd cups-client cups-common
  dictionaries-common emacsen-common firefox-esr geoip-database
  geoip-database-extra giblib1 gnome-icon-theme-symbolic hunspell-en-us
  i965-va-driver iamerican ibritish ienglish-common ispell libaacs0
  libabw-0.1-1 libarchive13 libaspell15 libasprintf-dev libasprintf0c2
  libauthen-sasl-perl libbdplus0 libcanberra0 libcupsfilters1
  libdjvulibre-text libdjvulibre21 libe-book-0.1-1 libept1.4.12
  libevdocument3-4 libevview3-3 libfile-basedir-perl libfile-desktopentry-perl
  libfile-mimeinfo-perl libfont-afm-perl libgconf2-4 libgettextpo-dev
  libgettextpo0 libglib2.0-data libgxps2 libhsqldb1.8.0-java libhtml-form-perl
  libhtml-format-perl libhttp-daemon-perl libjasper1 libkpathsea6
  libmailtools-perl libnet-dbus-perl libnet-smtp-ssl-perl libpam-cap
  libpaper-utils libpoppler-glib8 libpoppler46
  libreoffice-avmedia-backend-gstreamer libreoffice-java-common
  libreoffice-math libreoffice-sdbc-hsqldb libreoffice-writer libsasl2-modules
  libspectre1 libtie-ixhash-perl libtxc-dxtn-s2tc0 libvisual-0.4-plugins
  libvte-2.90-9 libvte-2.90-common libwacom-bin libx11-protocol-perl
  libxapian22 libxml-twig-perl libxml-xpathengine-perl powermgmt-base
  qt5-gtk-platformtheme qttranslations5-l10n rarian-compat rename scrot
  synaptic tango-icon-theme tcpd util-linux-locales va-driver-all
  vdpau-va-driver
Use 'apt autoremove' to remove them.
The following packages will be REMOVED:
  evince-common evince-gtk pinentry-gtk2
0 upgraded, 0 newly installed, 3 to remove and 46 not upgraded.
After this operation, 12.1 MB disk space will be freed.
Do you want to continue? [Y/n] 
(Reading database ... 100143 files and directories currently installed.)
Removing evince-gtk (3.14.1-2+deb8u1) ...
Removing evince-common (3.14.1-2+deb8u1) ...
Removing pinentry-gtk2 (0.8.3-2) ...
Processing triggers for mime-support (3.60) ...
Processing triggers for libglib2.0-0:amd64 (2.50.3-2) ...
Processing triggers for menu (2.1.47+b1) ...
Processing triggers for man-db (2.7.6.1-2) ...
Processing triggers for hicolor-icon-theme (0.15-1) ...
2017/06/25 09:41:27 Reading config from: /etc/paxrat/paxrat.conf

Appears to have gone fine.

And, what if I tried "apt-get dist-upgrade"? In the clone,

-rw-r--r-- 1 mr   mr    3946 2017-06-23 23:37 apt-get_dist-upgrade_170623_2336_gdOv.log

without bringing all the details (there are explanations previously), I had to abort it:

...
The following packages will be upgraded:
  adwaita-icon-theme apt-listchanges bind9-host cpp default-jre
...
  xserver-xorg-video-radeon xserver-xorg-video-savage
  xserver-xorg-video-siliconmotion xserver-xorg-video-sisusb
  xserver-xorg-video-tdfx xserver-xorg-video-trident xserver-xorg-video-vesa
  xserver-xorg-video-vmware
93 upgraded, 99 newly installed, 11 to remove and 0 not upgraded.
Need to get 242 MB/249 MB of archives.
After this operation, 561 MB of additional disk space will be used.
Do you want to continue? [Y/n] Abort.

Let's see:
# apt-get dist-upgrade |& tee LOG_/apt-get_dist-upgrade_$(date +%y%m%d_%H%M)_$(hostname).log

Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
  aspell aspell-en at-spi2-core autopoint consolekit cpp-4.9 cups-bsd
  cups-client cups-common dbus dictionaries-common emacsen-common firefox-esr
  geoip-database geoip-database-extra giblib1 gnome-icon-theme-symbolic
  hunspell-en-us i965-va-driver iamerican ibritish ienglish-common ispell
  libaacs0 libabw-0.1-1 libapparmor1 libarchive13 libaspell15 libasprintf-dev
  libasprintf0v5 libauthen-sasl-perl libbdplus0 libbind9-90 libcanberra0
  libck-connector0 libcloog-isl4 libcolamd2.8.0 libcupsfilters1
  libdjvulibre-text libdjvulibre21 libdns100 libe-book-0.1-1 libept1.4.12
  libept1.5.0 libevdocument3-4 libevview3-3 libfile-basedir-perl
  libfile-desktopentry-perl libfile-mimeinfo-perl libfont-afm-perl libgconf2-4
  libgettextpo-dev libgettextpo0 libgif4 libglade2-0 libglib2.0-data libgxps2
  libhsqldb1.8.0-java libhtml-form-perl libhtml-format-perl
  libhttp-daemon-perl libipc-system-simple-perl libisc95 libisccc90
  libisccfg90 libisl10 libjasper1 libjsoncpp1 libkpathsea6 libllvm3.5
  liblwres90 libmailtools-perl libnet-dbus-perl libnet-smtp-ssl-perl
  libpam-cap libpaper-utils libpcre2-8-0 libpng12-0 libpolkit-agent-1-0
  libpolkit-backend-1-0 libpolkit-gobject-1-0 libpoppler-glib8 libpoppler46
  libpth20 libreoffice-avmedia-backend-gstreamer libreoffice-java-common
  libreoffice-math libreoffice-sdbc-hsqldb libreoffice-writer libsasl2-modules
  libsctp1 libservlet3.1-java libspectre1 libtie-ixhash-perl libtxc-dxtn-s2tc0
  libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common libvte-2.91-0
  libvte-2.91-common libwacom-bin libx11-protocol-perl libxapian22
  libxml-twig-perl libxml-xpathengine-perl policykit-1 powermgmt-base
  python-defusedxml python-soappy python-wstools qt5-gtk-platformtheme
  qttranslations5-l10n rarian-compat rename scrot synaptic tango-icon-theme
  tcpd util-linux-locales va-driver-all vdpau-va-driver
Use 'apt autoremove' to remove them.
The following packages will be REMOVED:
  libasprintf0c2 libobrender29 libobt2 openjdk-7-jre openjdk-7-jre-headless
  tzdata-java
The following NEW packages will be installed:
  consolekit cpp-6 dbus dirmngr gcc-7-base initramfs-tools-core keyutils
  libapparmor1 libasprintf0v5 libbind9-140 libck-connector0 libcolamd2
  libdns-export162 libdns162 libept1.5.0 libgmime-2.6-0 libidn2-0
  libipc-system-simple-perl libisc-export160 libisc160 libisccc140
  libisccfg140 libisl15 libjson-c3 libjsoncpp1 libldap-common libllvm3.8
  liblwres141 libmagic-mgc libnotmuch4 libnpth0 libobrender32v5 libobt2v5
  libpcre2-8-0 libpolkit-agent-1-0 libpolkit-backend-1-0 libpolkit-gobject-1-0
  libprocps4 libpsl5 libservlet3.1-java libsuitesparseconfig4 libtfm1
  libvte-2.91-0 libvte-2.91-common libwebpdemux2 libxapian30
  linux-image-4.9.0-3-amd64 policykit-1 python-httplib2 python-pycurl
  python-pysimplesoap python3-apt python3-chardet python3-debian
  python3-debianbts python3-httplib2 python3-pkg-resources python3-pycurl
  python3-pysimplesoap python3-reportbug python3-requests python3-six
  python3-urllib3 xxd
The following packages will be upgraded:
  apt-listchanges bind9-host cpp dnsutils file firefox-esr gnupg gnupg-agent
  gnupg2 initramfs-tools isc-dhcp-client isc-dhcp-common libasprintf-dev
  libatomic1 libclamav7 libcloog-isl4 libcurl3 libcurl3-gnutls
  libevdocument3-4 libevview3-3 libfile-basedir-perl libgcc1 libgomp1
  libhsqldb1.8.0-java libldap-2.4-2 libmagic1 libquadmath0 libstdc++6
  linux-image-amd64 lp-solve mutt nfs-common obconf openbox procps
  python-debianbts python-pil reportbug synaptic tzdata vim vim-common
  vim-runtime vim-tiny wget
45 upgraded, 64 newly installed, 6 to remove and 0 not upgraded.
Need to get 127 MB/135 MB of archives.
After this operation, 234 MB of additional disk space will be used.
Do you want to continue? [Y/n] n
Abort.

And I had to abort it here too. See the dbus, the consolekit, the firefox-esr...

But not so much more... Remember it was much worse previously!

So, the removal list is:
# cat LOG_add_/keep-or-remove_list_01.ls-1_REMOVE.ls-1

consolekit dbus i965-va-driver ienglish-common ispell libaacs0 libabw-0.1-1 libarchive13 libaspell15 libasprintf-dev libasprintf0v5 libauthen-sasl-perl libbdplus0 libbind9-90 libcanberra0 libck-connector0 libcloog-isl4 libcolamd2.8.0 libcupsfilters1 libdjvulibre-text libdjvulibre21 libdns100 libe-book-0.1-1 libept1.4.12 libept1.5.0 libevdocument3-4 libevview3-3 libfile-basedir-perl libfile-desktopentry-perl libfile-mimeinfo-perl libfont-afm-perl libgconf2-4 libgettextpo-dev libgettextpo0 libgif4 libglade2
-0 libglib2.0-data libgxps2 libhsqldb1.8.0-java libhtml-form-perl libhtml-format-perl libhttp-daemon-perl libipc-system-simple-perl libisc95 libisccc90 libisccfg90 libisl10 liblwres90 libmailtools-perl libnet-dbus-perl libnet-smtp-ssl-perl libpoppler-glib8 libpoppler46 libpth20 libreoffice-avmedia-backend-gstreamer libreoffice-java-common libreoffice-math libreoffice-sdbc-hsqldb libreoffice-writer libsctp1 libservlet3.1-java libspectre1 libtie-ixhash-perl libtxc-dxtn-s2tc0 libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common libvte-2.91-0 libvte-2.91-common libwacom-bin libx11-protocol-perl libxapian22 libxml-twig-perl libxml-xpathengine-perl powermgmt-base python-defusedxml python-soappy python-wstools synaptic tango-icon-theme 

and it is made out of the aborted dist-upgrade above, just picked up some, and left out some other.
And let me see what the for loop I ran with it in the histories that I saved from the two terminals that I ran those command in in the clone...

Hmmhh... I actually ran that one later.

I ran another loop first, this one:

# for i in $(cat keep-or-remove_list.ls-1_00-REMOVE); do echo apt-get remove $i;  ask; if [ "$?" == 0 ] ; then apt-get remove $i |& tee BAK_/apt-get_remove_${i}_$(date +%y%m%d_%H%M)_$(hostname) ; read FAKE ; fi ; done ;

and it is based on this file:
# cat ../LOG_add_/keep-or-remove_list.ls-1_00-REMOVE

at-spi2-core autopoint consolekit cpp-4.9 cups-bsd cups-client cups-common dbus dictionaries-common emacsen-common firefox-esr geoip-database geoip-database-extra giblib1 gnome-icon-theme-symbolic hunspell-en-us i965-va-driver iamerican ibritish ienglish-common ispell

And that was at the time that the timestamps show:

...
-rw-r--r-- 1 mr   mr    2520 2017-06-23 23:46 apt-get_remove_at-spi2-core_170623_2345_gdOv
-rw-r--r-- 1 mr   mr    2552 2017-06-23 23:46 apt-get_remove_autopoint_170623_2346_gdOv
-rw-r--r-- 1 mr   mr    1702 2017-06-23 23:46 apt-get_remove_consolekit_170623_2346_gdOv
-rw-r--r-- 1 mr   mr    3329 2017-06-23 23:46 apt-get_remove_cpp-4.9_170623_2346_gdOv
...

So, do I need to update my /var/cache/ and my /var/lib/apt/ ?

# rsync -nav --delete var_cache_170623_2347_gdOv/cache/  /var/cache/
sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
man/de/
man/de/index.db
man/es/
man/es/index.db
man/fi/
man/fr/
man/fr/index.db
man/hu/
man/id/
man/it/
man/it/index.db
man/ja/
man/ko/
man/nl/
man/nl/index.db
man/pl/
man/pl/index.db
man/pt/
man/pt_BR/
man/ru/
man/ru/index.db
man/sl/
man/sv/
man/tr/
man/zh_CN/
man/zh_TW/

sent 13,294 bytes  received 217 bytes  9,007.33 bytes/sec
total size is 295,014,420  speedup is 21,835.13 (DRY RUN)
# rsync -nav --delete var_lib_apt_170623_2347_gdOv/lib/  /var/lib/apt/
cdroms.list      cdroms.list~     daily_lock       extended_states  listchanges.db   lists/           mirrors/         periodic/        
root@gdOv:/home/mr/var_cache_var_lib_apt_17062.d# rsync -nav --delete var_lib_apt_170623_2347_gdOv/lib/apt/  /var/lib/apt/
sending incremental file list
./
extended_states
lists/partial/

sent 800 bytes  received 30 bytes  1,660.00 bytes/sec
total size is 147,305,482  speedup is 177,476.48 (DRY RUN)
#

But while I don't know, I think I had better leave that as is.

Let's run that loop:
# for i in $(cat LOG_add_/keep-or-remove_list.ls-1_00-REMOVE); do echo apt-get remove $i;  ask; if [ "$?" == 0 ] ; then apt-get remove $i |& tee LOG_/apt-get_remove_${i}_$(date +%y%m%d_%H%M)_$(hostname) ; read FAKE ; fi ; done ;

...
apt-get remove cpp-4.9
[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  aspell aspell-en cups-bsd cups-client cups-common dictionaries-common
  emacsen-common firefox-esr geoip-database geoip-database-extra giblib1
  gnome-icon-theme-symbolic hunspell-en-us i965-va-driver iamerican ibritish
  ienglish-common ispell libaacs0 libabw-0.1-1 libarchive13 libaspell15
  libasprintf-dev libasprintf0c2 libauthen-sasl-perl libbdplus0 libcanberra0
  libcloog-isl4 libcupsfilters1 libdjvulibre-text libdjvulibre21
  libe-book-0.1-1 libept1.4.12 libevdocument3-4 libevview3-3
  libfile-basedir-perl libfile-desktopentry-perl libfile-mimeinfo-perl
  libfont-afm-perl libgconf2-4 libgettextpo-dev libgettextpo0 libglib2.0-data
  libgxps2 libhsqldb1.8.0-java libhtml-form-perl libhtml-format-perl
  libhttp-daemon-perl libisl10 libjasper1 libkpathsea6 libmailtools-perl
  libnet-dbus-perl libnet-smtp-ssl-perl libpam-cap libpaper-utils
  libpoppler-glib8 libpoppler46 libreoffice-avmedia-backend-gstreamer
  libreoffice-java-common libreoffice-math libreoffice-sdbc-hsqldb
  libreoffice-writer libsasl2-modules libspectre1 libtie-ixhash-perl
  libtxc-dxtn-s2tc0 libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common
  libwacom-bin libx11-protocol-perl libxapian22 libxml-twig-perl
  libxml-xpathengine-perl powermgmt-base qt5-gtk-platformtheme
  qttranslations5-l10n rarian-compat rename scrot synaptic tango-icon-theme
  tcpd util-linux-locales va-driver-all vdpau-va-driver
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  cpp cpp-6 libisl15
Suggested packages:
  cpp-doc gcc-6-locales
The following packages will be REMOVED:
  cpp-4.9
The following NEW packages will be installed:
  cpp-6 libisl15
The following packages will be upgraded:
  cpp
1 upgraded, 2 newly installed, 1 to remove and 45 not upgraded.
Need to get 0 B/7,162 kB of archives.
After this operation, 8,281 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
...

I have those, rsync-updated those, shown further above. They did install of course.

And the rest of the removals went fine (but I didn't remove geoip-database. Did remove geoip-database-extra.

I believe this one will be necessary soon;
# rsync -av --delete var_cache_170624_0011_gdOv/cache/  /var/cache/

sending incremental file list
./
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/libcurl3-gnutls_7.52.1-5_amd64.deb
apt/archives/libidn2-0_0.16-1_amd64.deb
apt/archives/libpsl5_0.17.0-4_amd64.deb
apt/archives/python-debianbts_2.6.1_all.deb
apt/archives/python-httplib2_0.9.2+dfsg-1_all.deb
apt/archives/python-pycurl_7.43.0-2_amd64.deb
apt/archives/python-pysimplesoap_1.16-2_all.deb
apt/archives/partial/
debconf/
debconf/config.dat
debconf/config.dat-old
debconf/templates.dat
debconf/templates.dat-old
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
...
man/zh_CN/
man/zh_TW/

sent 61,188,311 bytes  received 663 bytes  17,482,564.00 bytes/sec
total size is 295,549,917  speedup is 4.83

More removing now.
# for i in $(cat LOG_add_/keep-or-remove_list_01.ls-1_REMOVE.ls-1); do echo apt-get remove $i;  ask; if [ "$?" == 0 ] ; then apt-get remove $i |& tee LOG_/apt-get_remove_${i}_$(date +%y%m%d_%H%M)_$(hostname) ; read FAKE ; fi ; done ;

But I quit, to first:

# rsync -av --delete  var_cache_170624_0023_gdOv/cache/ /var/cache/

sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/apt-listchanges_3.10_all.deb
apt/archives/bind9-host_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/dirmngr_2.1.18-8_amd64.deb
apt/archives/dnsutils_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/file_1%3a5.30-1_amd64.deb
apt/archives/gcc-7-base_7.1.0-7_amd64.deb
apt/archives/gnupg-agent_2.1.18-8_amd64.deb
apt/archives/gnupg2_2.1.18-8_all.deb
apt/archives/gnupg_2.1.18-8_amd64.deb
apt/archives/initramfs-tools-core_0.130_all.deb
apt/archives/initramfs-tools_0.130_all.deb
apt/archives/isc-dhcp-client_4.3.5-3_amd64.deb
apt/archives/isc-dhcp-common_4.3.5-3_amd64.deb
apt/archives/keyutils_1.5.9-9_amd64.deb
apt/archives/libasprintf-dev_0.19.8.1-2_amd64.deb
apt/archives/libasprintf0v5_0.19.8.1-2_amd64.deb
apt/archives/libatomic1_7.1.0-7_amd64.deb
apt/archives/libbind9-140_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libclamav7_0.99.2+dfsg-6+b1_amd64.deb
apt/archives/libcolamd2_1%3a4.5.4-1_amd64.deb
apt/archives/libcurl3_7.52.1-5_amd64.deb
apt/archives/libdns-export162_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libdns162_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libgcc1_1%3a7.1.0-7_amd64.deb
apt/archives/libgmime-2.6-0_2.6.22+dfsg2-1_amd64.deb
apt/archives/libgomp1_7.1.0-7_amd64.deb
apt/archives/libhsqldb1.8.0-java_1.8.0.10+dfsg-7_all.deb
apt/archives/libisc-export160_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libisc160_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libisccc140_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libisccfg140_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libjson-c3_0.12.1-1.1_amd64.deb
apt/archives/libldap-2.4-2_2.4.44+dfsg-5_amd64.deb
apt/archives/libldap-common_2.4.44+dfsg-5_all.deb
apt/archives/libllvm3.8_1%3a3.8.1-24_amd64.deb
apt/archives/liblwres141_1%3a9.10.3.dfsg.P4-12.3_amd64.deb
apt/archives/libmagic-mgc_1%3a5.30-1_amd64.deb
apt/archives/libmagic1_1%3a5.30-1_amd64.deb
apt/archives/libnotmuch4_0.23.7-3_amd64.deb
apt/archives/libnpth0_1.3-1_amd64.deb
apt/archives/libobrender32v5_3.6.1-4_amd64.deb
apt/archives/libobt2v5_3.6.1-4_amd64.deb
apt/archives/libprocps4_2%3a3.3.10-4+devuan1.0_amd64.deb
apt/archives/libquadmath0_7.1.0-7_amd64.deb
apt/archives/libservlet3.1-java_8.5.14-2_all.deb
apt/archives/libstdc++6_7.1.0-7_amd64.deb
apt/archives/libsuitesparseconfig4_1%3a4.5.4-1_amd64.deb
apt/archives/libtfm1_0.13-4_amd64.deb
apt/archives/libxapian30_1.4.3-2_amd64.deb
apt/archives/linux-image-4.9.0-3-amd64_4.9.30-2_amd64.deb
apt/archives/linux-image-amd64_4.9+80_amd64.deb
apt/archives/lp-solve_5.5.0.15-4+b1_amd64.deb
apt/archives/mutt_1.8.0-1_amd64.deb
apt/archives/nfs-common_1%3a1.3.4-2.1_amd64.deb
apt/archives/obconf_1%3a2.0.4+git20150213-2_amd64.deb
apt/archives/openbox_3.6.1-4_amd64.deb
apt/archives/procps_2%3a3.3.10-4+devuan1.0_amd64.deb
apt/archives/python3-apt_1.4.0~beta3_amd64.deb
apt/archives/python3-chardet_2.3.0-2_all.deb
apt/archives/python3-debian_0.1.30_all.deb
apt/archives/python3-debianbts_2.6.1_all.deb
apt/archives/python3-httplib2_0.9.2+dfsg-1_all.deb
apt/archives/python3-pkg-resources_33.1.1-1_all.deb
apt/archives/python3-pycurl_7.43.0-2_amd64.deb
apt/archives/python3-pysimplesoap_1.16-2_all.deb
apt/archives/python3-reportbug_7.1.6+devuan2.1_all.deb
apt/archives/python3-requests_2.12.4-1_all.deb
apt/archives/python3-six_1.10.0-4_all.deb
apt/archives/python3-urllib3_1.19.1-1_all.deb
apt/archives/reportbug_7.1.6+devuan2.1_all.deb
apt/archives/tzdata_2017b-1_all.deb
apt/archives/vim-common_2%3a8.0.0197-4_all.deb
apt/archives/vim-runtime_2%3a8.0.0197-4_all.deb
apt/archives/vim-tiny_2%3a8.0.0197-4_amd64.deb
apt/archives/vim_2%3a8.0.0197-4_amd64.deb
apt/archives/wget_1.19.1-3_amd64.deb
apt/archives/xxd_2%3a8.0.0197-4_amd64.deb
apt/archives/partial/
debconf/
debconf/config.dat
debconf/config.dat-old
debconf/templates.dat
debconf/templates.dat-old
ldconfig/
ldconfig/aux-cache
man/
man/index.db
man/cs/
man/da/
...
man/tr/index.db
man/zh_CN/
man/zh_TW/

sent 134,993,400 bytes  received 2,032 bytes  20,768,528.00 bytes/sec
total size is 369,846,444  speedup is 2.74
#

and will now restart the loop.

E.g., this should now work (didn't just a few minutes ago):

apt-get remove libdns100
[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  geoip-database giblib1 libasprintf0c2 libbdplus0 libcanberra0
  libdjvulibre-text libdjvulibre21 libe-book-0.1-1 libept1.4.12
  libfile-basedir-perl libfile-desktopentry-perl libfile-mimeinfo-perl
  libfont-afm-perl libgconf2-4 libgettextpo-dev libgettextpo0 libglib2.0-data
  libhsqldb1.8.0-java libhtml-form-perl libhtml-format-perl
  libhttp-daemon-perl libisc95 libisccc90 libisl10 libjasper1 libkpathsea6
  liblwres90 libmailtools-perl libnet-dbus-perl libnet-smtp-ssl-perl
  libpam-cap libpaper-utils libpoppler-glib8 libpoppler46
  libreoffice-avmedia-backend-gstreamer libreoffice-java-common
  libreoffice-math libreoffice-sdbc-hsqldb libsasl2-modules libspectre1
  libtie-ixhash-perl libtxc-dxtn-s2tc0 libvisual-0.4-plugins libvte-2.90-9
  libvte-2.90-common libwacom-bin libx11-protocol-perl libxapian22
  libxml-twig-perl libxml-xpathengine-perl powermgmt-base
  qt5-gtk-platformtheme qttranslations5-l10n rarian-compat rename scrot
  synaptic tango-icon-theme tcpd util-linux-locales vdpau-va-driver
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  bind9-host dnsutils libbind9-140 libdns162 libisc160 libisccc140
  libisccfg140 liblwres141
Suggested packages:
  rblcheck
The following packages will be REMOVED:
  libbind9-90 libdns100 libisccfg90
The following NEW packages will be installed:
  libbind9-140 libdns162 libisc160 libisccc140 libisccfg140 liblwres141
The following packages will be upgraded:
  bind9-host dnsutils
2 upgraded, 6 newly installed, 3 to remove and 38 not upgraded.
Need to get 0 B/2,826 kB of archives.
After this operation, 4,753 kB of additional disk space will be used.
Do you want to continue? [Y/n]

And it did install.

But I hit a snag now:
apt-get remove libept1.4.12

[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  consolekit dbus geoip-database giblib1 libapparmor1 libasprintf0c2
  libbdplus0 libcanberra0 libck-connector0 libdjvulibre-text libdjvulibre21
  libept1.5.0 libfile-basedir-perl libfile-desktopentry-perl
  libfile-mimeinfo-perl libfont-afm-perl libgconf2-4 libgettextpo-dev
  libgettextpo0 libglib2.0-data libhsqldb1.8.0-java libhtml-form-perl
  libhtml-format-perl libhttp-daemon-perl libisc95 libisccc90 libisl10
  libjasper1 libkpathsea6 liblwres90 libmailtools-perl libnet-dbus-perl
  libnet-smtp-ssl-perl libpam-cap libpaper-utils libpcre2-8-0
  libpolkit-agent-1-0 libpolkit-backend-1-0 libpolkit-gobject-1-0
  libpoppler-glib8 libpoppler46 libreoffice-avmedia-backend-gstreamer
  libreoffice-java-common libreoffice-math libreoffice-sdbc-hsqldb
  libsasl2-modules libspectre1 libtie-ixhash-perl libtxc-dxtn-s2tc0
  libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common libvte-2.91-0
  libvte-2.91-common libwacom-bin libx11-protocol-perl libxapian22 libxapian30
  libxml-twig-perl libxml-xpathengine-perl policykit-1 powermgmt-base
  qt5-gtk-platformtheme qttranslations5-l10n rarian-compat rename scrot
  synaptic tango-icon-theme tcpd util-linux-locales vdpau-va-driver
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  consolekit dbus libapparmor1 libck-connector0 libept1.5.0 libpcre2-8-0
  libpolkit-agent-1-0 libpolkit-backend-1-0 libpolkit-gobject-1-0
  libvte-2.91-0 libvte-2.91-common libxapian30 policykit-1 synaptic
Suggested packages:
  default-dbus-session-bus | dbus-session-bus xapian-tools dwww deborphan
  apt-xapian-index software-properties-gtk
Recommended packages:
  libpam-ck-connector
The following packages will be REMOVED:
  libept1.4.12
The following NEW packages will be installed:
  consolekit dbus libapparmor1 libck-connector0 libept1.5.0 libpcre2-8-0
  libpolkit-agent-1-0 libpolkit-backend-1-0 libpolkit-gobject-1-0
  libvte-2.91-0 libvte-2.91-common libxapian30 policykit-1
The following packages will be upgraded:
  synaptic
1 upgraded, 13 newly installed, 1 to remove and 37 not upgraded.
Need to get 4,136 kB/5,203 kB of archives.
After this operation, 6,856 kB of additional disk space will be used.
Do you want to continue? [Y/n] 

Of course:

Do you want to continue? [Y/n] n
Abort.

Maybe because liberoffice, which does not have to be dbus-dependent (just like firefox until recently didn't have to be, and certainly firefox-esr does not have to be, but I fear it is
(
however, I compile palemoon without dbus, hah! hah!:
Palemoon installation from source
https://dev1galaxy.org/viewtopic.php?id=616
)
), but is probably installed with dbus dependency, was still installed?

Anyway, those have mostly been removed.

This isn't anymore so bad:
# apt-get install -f |& tee LOG_/apt-get_install-f_${i}_$(date +%y%m%d_%H%M)_$(hostname).log

Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  geoip-database giblib1 libasprintf0c2 libbdplus0 libcanberra0
  libdjvulibre-text libdjvulibre21 libept1.4.12 libfile-basedir-perl
  libgettextpo-dev libgettextpo0 libglib2.0-data libhsqldb1.8.0-java
  libhtml-form-perl libhttp-daemon-perl libisc95 libisccc90 libisl10
  libjasper1 libkpathsea6 liblwres90 libpam-cap libpaper-utils
  libpoppler-glib8 libpoppler46 libsasl2-modules libspectre1
  libtie-ixhash-perl libtxc-dxtn-s2tc0 libvisual-0.4-plugins libvte-2.90-9
  libvte-2.90-common libwacom-bin libx11-protocol-perl libxapian22
  libxml-twig-perl libxml-xpathengine-perl python-defusedxml
  qt5-gtk-platformtheme qttranslations5-l10n rarian-compat rename scrot tcpd
  util-linux-locales vdpau-va-driver
Use 'apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 35 not upgraded.

And the:
# apt-get dist-upgrade |& tee LOG_/apt-get_dist-upgrade-f_${i}_$(date +%y%m%d_%H%M)_$(hostname).log

Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
  geoip-database giblib1 libasprintf0c2 libbdplus0 libcanberra0 libcolamd2.8.0
  libdjvulibre-text libdjvulibre21 libept1.4.12 libfile-basedir-perl
  libgettextpo-dev libgettextpo0 libgif4 libglade2-0 libglib2.0-data
  libhsqldb1.8.0-java libhtml-form-perl libhttp-daemon-perl
  libipc-system-simple-perl libisc95 libisccc90 libisl10 libjasper1
  libkpathsea6 libllvm3.5 liblwres90 libpam-cap libpaper-utils libpng12-0
  libpoppler-glib8 libpoppler46 libpth20 libsasl2-modules libsctp1
  libservlet3.1-java libspectre1 libtie-ixhash-perl libtxc-dxtn-s2tc0
  libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common libwacom-bin
  libx11-protocol-perl libxapian22 libxml-twig-perl libxml-xpathengine-perl
  python-defusedxml qt5-gtk-platformtheme qttranslations5-l10n rarian-compat
  rename scrot tcpd util-linux-locales vdpau-va-driver
Use 'apt autoremove' to remove them.
The following packages will be REMOVED:
  libobrender29 libobt2 openjdk-7-jre openjdk-7-jre-headless tzdata-java
The following NEW packages will be installed:
  dirmngr gcc-7-base initramfs-tools-core keyutils libcolamd2 libdns-export162
  libgmime-2.6-0 libipc-system-simple-perl libisc-export160 libjson-c3
  libldap-common libllvm3.8 libmagic-mgc libnotmuch4 libnpth0 libobrender32v5
  libobt2v5 libprocps4 libservlet3.1-java libsuitesparseconfig4 libtfm1
  libwebpdemux2 libxapian30 linux-image-4.9.0-3-amd64 python3-apt
  python3-chardet python3-debian python3-debianbts python3-httplib2
  python3-pkg-resources python3-pycurl python3-pysimplesoap python3-reportbug
  python3-requests python3-six python3-urllib3 xxd
The following packages will be upgraded:
  apt-listchanges file gnupg gnupg-agent gnupg2 initramfs-tools
  isc-dhcp-client isc-dhcp-common libatomic1 libclamav7 libcurl3
  libfile-basedir-perl libgcc1 libgomp1 libhsqldb1.8.0-java libldap-2.4-2
  libmagic1 libquadmath0 libstdc++6 linux-image-amd64 lp-solve mutt nfs-common
  obconf openbox procps python-pil reportbug tzdata vim vim-common vim-runtime
  vim-tiny wget
34 upgraded, 37 newly installed, 5 to remove and 0 not upgraded.
Need to get 495 kB/71.9 MB of archives.
After this operation, 186 MB of additional disk space will be used.
Do you want to continue? [Y/n]

is such a beauty to me.

Mind you that we are in Air-Gapped.

My fears that I wouldn't be able to accomplish Air-Gap Devuan updating are all but gone.

But I have to follow what I did in the clone. I have no alternatives, but only the archives that I got in in the clone.

# cat keep-or-remove_list_02.ls-1_KEEP.ls-1

libgettextpo-dev libgettextpo0 libgif4 libglade2-0 libglib2.0-data libhsqldb1.8.0-java libhtml-form-perl libhttp-daemon-perl libjasper1 libkpathsea6 libllvm3.5 libopenjpeg5 libpam-cap libpaper-utils libpng12-0 libpoppler-glib8 libpoppler46 libpth20 libsasl2-modules libx11-protocol-perl powermgmt-base python-wstools qt5-gtk-platformtheme qttranslations5-l10n rarian-compat rename tcpd util-linux-locales vdpau-va-driver 

And the loop is:

# for i in $(cat LOG_add_/keep-or-remove_list_02.ls-1_KEEP.ls-1); do echo apt-get install $i;  ask; if [ "$?" == 0 ] ; then apt-get install $i |& tee LOG_/apt-get_install_${i}_$(date +%y%m%d_%H%M)_$(hostname) ; read FAKE ; fi ; done ;

One more snag:
apt-get install powermgmt-base

[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  geoip-database giblib1 libasprintf0c2 libbdplus0 libcanberra0
  libdjvulibre-text libdjvulibre21 libept1.4.12 libfile-basedir-perl
  libhsqldb1.8.0-java libisc95 libisccc90 libisl10 liblwres90 libspectre1
  libtie-ixhash-perl libtxc-dxtn-s2tc0 libvisual-0.4-plugins libvte-2.90-9
  libvte-2.90-common libwacom-bin libxapian22 libxml-twig-perl
  libxml-xpathengine-perl python-defusedxml qt5-gtk-platformtheme
  qttranslations5-l10n rarian-compat rename scrot tcpd util-linux-locales
  vdpau-va-driver
Use 'apt autoremove' to remove them.
The following NEW packages will be installed:
  powermgmt-base
0 upgraded, 1 newly installed, 0 to remove and 34 not upgraded.
Need to get 9,240 B of archives.
After this operation, 52.2 kB of additional disk space will be used.
Err:1 http://packages.devuan.org/merged ascii/main amd64 powermgmt-base all 1.31+nmu1
  Temporary failure resolving 'packages.devuan.org'
Err:1 http://auto.mirror.devuan.org/merged ascii/main amd64 powermgmt-base all 1.31+nmu1
  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/p/powermgmt-base/powermgmt-base_1.31+nmu1_all.deb  Temporary failure resolving 'packages.devuan.org'
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

While I could try "--fix-missing", I searched, and really don't have this packaged downloaded... Hmmhh..

And there's neither a way for me to (easily and quickly) recover it from the clone, where I just checked, it is installed... So I shouldn't have removed it in this master... Argh... Hope it will be easily fixed...

Similarly:
apt-get install python-wstools

[y/n] y
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  geoip-database giblib1 libasprintf0c2 libbdplus0 libcanberra0
  libdjvulibre-text libdjvulibre21 libept1.4.12 libfile-basedir-perl
  libhsqldb1.8.0-java libisc95 libisccc90 libisl10 liblwres90 libspectre1
  libtie-ixhash-perl libtxc-dxtn-s2tc0 libvisual-0.4-plugins libvte-2.90-9
  libvte-2.90-common libwacom-bin libxapian22 libxml-twig-perl
  libxml-xpathengine-perl python-defusedxml qt5-gtk-platformtheme
  qttranslations5-l10n rarian-compat rename scrot tcpd util-linux-locales
  vdpau-va-driver
Use 'apt autoremove' to remove them.
The following NEW packages will be installed:
  python-wstools
0 upgraded, 1 newly installed, 0 to remove and 34 not upgraded.
Need to get 141 kB of archives.
After this operation, 444 kB of additional disk space will be used.
Err:1 http://packages.devuan.org/merged ascii/main amd64 python-wstools all 0.4.3-3
  Temporary failure resolving 'packages.devuan.org'
Err:1 http://auto.mirror.devuan.org/merged ascii/main amd64 python-wstools all 0.4.3-3
  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/p/python-wstools/python-wstools_0.4.3-3_all.deb  Temporary failure resolving 'packages.devuan.org'
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

My attention span had weakened and I made mistakes...

# rsync -av --delete  var_cache_170624_0912_gdOv/cache/ /var/cache/

sending incremental file list
apt/
apt/pkgcache.bin
apt/srcpkgcache.bin
apt/archives/
apt/archives/libevdev-dev_1.5.6+dfsg-1_amd64.deb
apt/archives/libevdev-tools_1.5.6+dfsg-1_amd64.deb
apt/archives/libinput-dev_1.6.3-1_amd64.deb
apt/archives/libinput-tools_1.6.3-1_amd64.deb
apt/archives/libjs-jquery_3.1.1-2_all.deb
apt/archives/libudev-dev_232-25_amd64.deb
apt/archives/xserver-xorg-input-evdev-dbg_1%3a2.10.5-1_amd64.deb
apt/archives/xserver-xorg-input-evdev-dev_1%3a2.10.5-1_all.deb
apt/archives/xserver-xorg-input-libinput-dev_0.23.0-2_all.deb
apt/archives/partial/
debconf/
debconf/config.dat
...
man/zh_CN/
man/zh_TW/

sent 61,554,230 bytes  received 763 bytes  17,587,140.86 bytes/sec
total size is 370,703,087  speedup is 6.02

Now:
# apt-get dist-upgrade |& tee LOG_/apt-get_dist-upgrade_$(date +%y%m%d_%H%M)_$(hostname).log

Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following packages were automatically installed and are no longer required:
  geoip-database giblib1 libasprintf0c2 libbdplus0 libcanberra0 libcolamd2.8.0
  libdjvulibre-text libdjvulibre21 libept1.4.12 libfile-basedir-perl
  libhsqldb1.8.0-java libipc-system-simple-perl libisc95 libisccc90 libisl10
  liblwres90 libsctp1 libspectre1 libtie-ixhash-perl libtxc-dxtn-s2tc0
  libvisual-0.4-plugins libvte-2.90-9 libvte-2.90-common libwacom-bin
  libxapian22 libxml-twig-perl libxml-xpathengine-perl python-defusedxml scrot
Use 'apt autoremove' to remove them.
The following packages will be REMOVED:
  libobrender29 libobt2 openjdk-7-jre openjdk-7-jre-headless tzdata-java
The following NEW packages will be installed:
  dirmngr gcc-7-base initramfs-tools-core keyutils libcolamd2 libdns-export162
  libgmime-2.6-0 libipc-system-simple-perl libisc-export160 libjson-c3
  libldap-common libllvm3.8 libmagic-mgc libnotmuch4 libnpth0 libobrender32v5
  libobt2v5 libprocps4 libsuitesparseconfig4 libtfm1 libwebpdemux2 libxapian30
  linux-image-4.9.0-3-amd64 python3-apt python3-chardet python3-debian
  python3-debianbts python3-httplib2 python3-pkg-resources python3-pycurl
  python3-pysimplesoap python3-reportbug python3-requests python3-six
  python3-urllib3 xxd
The following packages will be upgraded:
  apt-listchanges file gnupg gnupg-agent gnupg2 initramfs-tools
  isc-dhcp-client isc-dhcp-common libatomic1 libclamav7 libcurl3
  libfile-basedir-perl libgcc1 libgomp1 libldap-2.4-2 libmagic1 libquadmath0
  libstdc++6 linux-image-amd64 lp-solve mutt nfs-common obconf openbox procps
  python-pil reportbug tzdata vim vim-common vim-runtime vim-tiny wget
33 upgraded, 36 newly installed, 5 to remove and 0 not upgraded.
Need to get 495 kB/70.8 MB of archives.
After this operation, 186 MB of additional disk space will be used.
Do you want to continue? [Y/n]

And here are more of my errors that show:

Err:1 http://packages.devuan.org/merged ascii/main amd64 libipc-system-simple-perl all 1.25-3
  Temporary failure resolving 'packages.devuan.org'
Ign:2 http://packages.devuan.org/merged ascii/main amd64 libfile-basedir-perl all 0.07-1
Ign:3 http://packages.devuan.org/merged ascii/main amd64 libwebpdemux2 amd64 0.5.2-1
Ign:4 http://packages.devuan.org/merged ascii/main amd64 python-pil amd64 4.0.0-4
Err:1 http://auto.mirror.devuan.org/merged ascii/main amd64 libipc-system-simple-perl all 1.25-3
  Temporary failure resolving 'packages.devuan.org'
Err:2 http://auto.mirror.devuan.org/merged ascii/main amd64 libfile-basedir-perl all 0.07-1
  Temporary failure resolving 'packages.devuan.org'
Err:3 http://auto.mirror.devuan.org/merged ascii/main amd64 libwebpdemux2 amd64 0.5.2-1
  Temporary failure resolving 'packages.devuan.org'
Err:4 http://auto.mirror.devuan.org/merged ascii/main amd64 python-pil amd64 4.0.0-4
  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/libi/libipc-system-simple-perl/libipc-system-simple-perl_1.25-3_all.deb  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/libf/libfile-basedir-perl/libfile-basedir-perl_0.07-1_all.deb  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/libw/libwebp/libwebpdemux2_0.5.2-1_amd64.deb  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/p/pillow/python-pil_4.0.0-4_amd64.deb  Temporary failure resolving 'packages.devuan.org'
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

But that won't be so much to fix...

If the system is workable, I'll clone it as is, because it's the other work pertaining to air-gapping that is a lot of work and which I have done already for it.

I am not going online with that clone anymore.

In the next post, I'll use "--fix-missing".

---

Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

miroR

Member

From: Zagreb, Croatia

Registered: 2016-11-30

Posts: 217  

Website

Re: Air-Gapped Devuan Install, Tentative

NOTE at the time of posting (which is three days later than I have written these). This is probably with added option:

--fix-missing

but I'm afraid I can not be 100% sure at this time.
---

See previous post for up to this prompt, pls.

Do you want to continue? [Y/n]
Err:1 http://packages.devuan.org/merged ascii/main amd64 libipc-system-simple-perl all 1.25-3
  Temporary failure resolving 'packages.devuan.org'
Ign:2 http://packages.devuan.org/merged ascii/main amd64 libfile-basedir-perl all 0.07-1
Ign:3 http://packages.devuan.org/merged ascii/main amd64 libwebpdemux2 amd64 0.5.2-1
Ign:4 http://packages.devuan.org/merged ascii/main amd64 python-pil amd64 4.0.0-4
Err:1 http://auto.mirror.devuan.org/merged ascii/main amd64 libipc-system-simple-perl all 1.25-3
  Temporary failure resolving 'packages.devuan.org'
Err:2 http://auto.mirror.devuan.org/merged ascii/main amd64 libfile-basedir-perl all 0.07-1
  Temporary failure resolving 'packages.devuan.org'
Err:3 http://auto.mirror.devuan.org/merged ascii/main amd64 libwebpdemux2 amd64 0.5.2-1
  Temporary failure resolving 'packages.devuan.org'
Err:4 http://auto.mirror.devuan.org/merged ascii/main amd64 python-pil amd64 4.0.0-4
  Temporary failure resolving 'packages.devuan.org'
Reading changelogs...
apt-listchanges (3.3) unstable; urgency=medium

  Short summary of the most important changes done since version 3.0 up to 3.3:

  - apt-listchanges was migrated to python3.  The "gtk" frontend now requires
    the python3-gi package to work.

  - The "browser", "xterm-pager", and "xterm-browser" frontends will now try
    to drop root privileges before spawning external commands.  This only works
    when upgrade was initiated from a regular user account with commands like
       sudo|su  apt-get|aptitude  upgrade|install|etc.

  - The way apt-listchanges cooperates with apt was slightly changed; please
    make sure to accept the new version of `/etc/apt/apt.conf.d/20listchanges'
    configuration file in case dpkg prompts about the file.

  - apt-listchanges no longer supports deprecated frontends (e.g. "w3m")
    or ancient (i.e. more than about 15 years old) *.deb packages.

 -- Robert Luberda <robert@debian.org>  Mon, 15 Aug 2016 21:55:31 +0200

apt-listchanges (2.87) unstable; urgency=medium

  For better integration with package management system, apt-listchanges
  automatically switches to the non-interactive "text" frontend:
   - when the `-y'/`--assume-yes' option is passed to apt-get
   - or when DEBIAN_FRONTEND environment variable is set to "noninteractive".
  The new behavior can be disabled in the configuration file (or via the
  command-line parameters), refer to apt-listchanges(1) man page for details.

  The "mail" frontend can optionally send e-mails in the HTML format, see the
  description of `--email-format' option in the man page for more information.

  For the sake of consistency the `--all' and `--show_seen' options were
  renamed to `--show-all' and `--show-seen' respectively.

 -- Robert Luberda <robert@debian.org>  Sat, 02 Apr 2016 20:24:43 +0200

initramfs-tools (0.129) unstable; urgency=medium

  * Some systems that do not support suspend-to-disk (hibernation) will
    require a configuration change to explicitly disable this.

    From version 0.128, the boot code waits for a suspend/resume device
    to appear, rather than checking just once.  If the configured or
    automatically selected resume device is not available at boot time,
    this results in a roughly 30 second delay.

    You should set the RESUME variable in
    /etc/initramfs-tools/conf.d/resume or
    /etc/initramfs-tools/initramfs.conf to one of:

    - auto - select the resume device automatically
    - none - disable use of a resume device
    - UUID=<uuid> - use a specific resume device (by UUID)
    - /dev/<name> - use a specific resume device (by kernel name)

 -- Ben Hutchings <ben@decadent.org.uk>  Thu, 20 Apr 2017 23:21:32 +0100

initramfs-tools (0.121~rc1) unstable; urgency=medium

  * If initramfs-tools is configured to use busybox but it is not
    installed, mkinitramfs will now fail.  Previously it would quietly use
    klibc instead, sometimes producing a broken initramfs.  You may need
    to modify /etc/initramfs-tools/initramfs.conf or install busybox when
    upgrading.
  * Support for loop-aes has been removed.  If you use loop-aes encryption
    for the root or /usr filesystem, you will need to switch to cryptsetup.
    See the 'loop-AES extension' section in cryptsetup(8).

 -- Ben Hutchings <ben@decadent.org.uk>  Tue, 22 Dec 2015 21:56:40 +0000

linux-latest (76) unstable; urgency=medium

  * From Linux 4.8, several changes have been made in the kernel
    configuration to 'harden' the system, i.e. to mitigate security bugs.
    Some changes may cause legitimate applications to fail, and can be
    reverted by run-time configuration:
    - On most architectures, the /dev/mem device can no longer be used to
      access devices that also have a kernel driver.  This breaks dosemu
      and some old user-space graphics drivers.  To allow this, set the
      kernel parameter: iomem=relaxed
    - The kernel log is no longer readable by unprivileged users.  To
      allow this, set the sysctl: kernel.dmesg_restrict=0

 -- Ben Hutchings <ben@decadent.org.uk>  Sat, 29 Oct 2016 02:05:32 +0100

linux-latest (75) unstable; urgency=medium

  * From Linux 4.7, the iptables connection tracking system will no longer
    automatically load helper modules.  If your firewall configuration
    depends on connection tracking helpers, you should explicitly load the
    required modules.  For more information, see
    <https://home.regit.org/netfilter-en/secure-use-of-helpers/>.

 -- Ben Hutchings <ben@decadent.org.uk>  Sat, 29 Oct 2016 01:53:18 +0100

mutt (1.7.0-6) unstable; urgency=medium

  As of result of the switch to gpgme in 1.7.0-2, all pgp_* commands that
  reference a pgp/gnupg command are now ignored (unless crypt_use_gpgme is
  manually set to 'no'). If you had an --encrypt-to in those commands, to
  encrypt outgoing mail to yourself, then you will have to set
  pgp_encrypt_self=yes to maintain the same behavior.

  Starting from this version of mutt, $locale is not an option anymore, you will
  have to use $attribution_locale instead, which hich controls the translation
  of the "On {date}, {user} wrote" reply string. More details
  on https://www.mail-archive.com/mutt-dev@mutt.org/msg11544.html.

  As of this version mailto_allow will also include In-Reply-To, Cc and
  References by default, to change it set mailto_allow in your ~/.muttrc.

 -- Antonio Radici <antonio@debian.org>  Sun, 25 Sep 2016 08:48:10 +0100

mutt (1.7.0-2) unstable; urgency=medium

  Starting from this version, we enable 'crypt_use_gpgme=yes' by default.
  The GPGME delegates all crypto support to gnupg, which is designed to hold
  your crypto data securely.

  The drawback is that inline signatures are no longer supported in favour of
  PGP/MIME. If you need to sign your email with inline signatures please use
  'set crypt_use_gpgme=no' in your .muttrc.

  To solve #828751 we also had to add '--pinentry-mode loopback' to all commands
  in gpg.rc, that breaks compatibility with gpg v1, if you are still using gpg
  v1 please remove that option from the invocations of the command in
  /etc/Muttrc.d/gpg.rc

 -- Antonio Radici <antonio@debian.org>  Wed, 07 Sep 2016 21:02:51 +0100

mutt (1.6.2-1) unstable; urgency=medium

  The mutt package now incorporates the NeoMutt patchset, which includes a
  number of important security, performance and stability fixes. It also
  includes a number of UI improvements and a plethora of new features,
  including many previously shipped by Debian. Among these is the
  functionality of both the mutt-patched (sidebar, NNTP) and the mutt-kz
  (notmuch) packages, that are now both obsolete and replaced by the mutt
  package. More information about NeoMutt can be found on its website:
  http://www.neomutt.org/

  The sidebar patch has been polished up and merged upstream in what will
  eventually be Mutt 1.7.0 -- and then backported again by NeoMutt. For
  compatibility with upstream's default and since there is no mutt-patched
  package anymore, the sidebar is now off by default. Moreover, this new
  version renamed the sidebar's configuration options. To keep the old
  behavior, use this in your .muttrc:
    set mail_check_stats=yes
    set sidebar_visible=yes
    set sidebar_format="%B%*  %S%?N?(%N)?%?F?[%F]?"
    set sidebar_indent_string=" "
  and optionally:
    set sidebar_folder_indent=yes
    set sidebar_short_path=yes

  The "file_charset" option has been renamed to "attach_charset", as part of
  its inclusion upstream.

 -- Faidon Liambotis <paravoid@debian.org>  Mon, 25 Jul 2016 18:45:08 +0300

vim (2:8.0.0022-1) unstable; urgency=medium

  Vim now ships with a defaults.vim file which, when the user has no vimrc,
  enables some options that have historically been disabled by default.  This
  is described in more detail at ":help defaults.vim".

  Since defaults.vim is loaded when the user's vimrc would typically be
  loaded, it will override any settings in /etc/vim/vimrc(.local).  In order
  to disable the loading of defaults.vim, add

    let g:skip_defaults_vim = 1

  to /etc/vim/vimrc(.local).

 -- James McCoy <jamessan@debian.org>  Tue, 04 Oct 2016 20:28:02 -0400

vim (2:7.4.2330-1) unstable; urgency=medium

  The Python language bindings have been switched from python2 to python3.
  If you have plugins/addons that use Python, they may need to be updated to
  support python3.

  Similarly, python3 specific packages may need to be installed to re-enable
  plugins (e.g., python-powerline is replaced by python3-powerline) or plugin
  features.

 -- James McCoy <jamessan@debian.org>  Wed, 07 Sep 2016 22:12:11 -0400

...

apt-listchanges: Mailing root: apt-listchanges: news for gdOv
Extracting templates from packages: 100%
Preconfiguring packages ...
(Reading database ... 91044 files and directories currently installed.)
Preparing to unpack .../obconf_1%3a2.0.4+git20150213-2_amd64.deb ...
Unpacking obconf (1:2.0.4+git20150213-2) over (1:2.0.4-2) ...
Preparing to unpack .../openbox_3.6.1-4_amd64.deb ...
Unpacking openbox (3.6.1-4) over (3.5.2-8+deb8u1) ...
(Reading database ... 91040 files and directories currently installed.)
Removing libobrender29 (3.5.2-8+deb8u1) ...
Removing libobt2 (3.5.2-8+deb8u1) ...
Selecting previously unselected package libobt2v5.
(Reading database ... 91028 files and directories currently installed.)
Preparing to unpack .../libobt2v5_3.6.1-4_amd64.deb ...
Unpacking libobt2v5 (3.6.1-4) ...
Selecting previously unselected package libobrender32v5.
Preparing to unpack .../libobrender32v5_3.6.1-4_amd64.deb ...
Unpacking libobrender32v5 (3.6.1-4) ...
(Reading database ... 91040 files and directories currently installed.)
Removing openjdk-7-jre:amd64 (7u111-2.6.7-1~deb8u1) ...
Removing openjdk-7-jre-headless:amd64 (7u111-2.6.7-1~deb8u1) ...
Removing tzdata-java (2017b-0+deb8u1) ...
Selecting previously unselected package gcc-7-base:amd64.
(Reading database ... 90409 files and directories currently installed.)
Preparing to unpack .../gcc-7-base_7.1.0-7_amd64.deb ...
Unpacking gcc-7-base:amd64 (7.1.0-7) ...
Setting up gcc-7-base:amd64 (7.1.0-7) ...
(Reading database ... 90416 files and directories currently installed.)
Preparing to unpack .../libgcc1_1%3a7.1.0-7_amd64.deb ...
Unpacking libgcc1:amd64 (1:7.1.0-7) over (1:6.3.0-18) ...
Setting up libgcc1:amd64 (1:7.1.0-7) ...
(Reading database ... 90416 files and directories currently installed.)
Preparing to unpack .../libstdc++6_7.1.0-7_amd64.deb ...
Unpacking libstdc++6:amd64 (7.1.0-7) over (6.3.0-18) ...
Setting up libstdc++6:amd64 (7.1.0-7) ...
(Reading database ... 90416 files and directories currently installed.)
Preparing to unpack .../00-tzdata_2017b-1_all.deb ...
Unpacking tzdata (2017b-1) over (2017b-0+deb8u1) ...
Selecting previously unselected package libnpth0:amd64.
Preparing to unpack .../01-libnpth0_1.3-1_amd64.deb ...
Unpacking libnpth0:amd64 (1.3-1) ...
Preparing to unpack .../02-gnupg2_2.1.18-8_all.deb ...
Unpacking gnupg2 (2.1.18-8) over (2.0.26-6+deb8u1) ...
Preparing to unpack .../03-gnupg-agent_2.1.18-8_amd64.deb ...
Unpacking gnupg-agent (2.1.18-8) over (2.0.26-6+deb8u1) ...
Preparing to unpack .../04-gnupg_2.1.18-8_amd64.deb ...
Unpacking gnupg (2.1.18-8) over (1.4.18-7+deb8u3) ...
Selecting previously unselected package libisc-export160.
Preparing to unpack .../05-libisc-export160_1%3a9.10.3.dfsg.P4-12.3_amd64.deb ...
Unpacking libisc-export160 (1:9.10.3.dfsg.P4-12.3) ...
Selecting previously unselected package libdns-export162.
Preparing to unpack .../06-libdns-export162_1%3a9.10.3.dfsg.P4-12.3_amd64.deb ...
Unpacking libdns-export162 (1:9.10.3.dfsg.P4-12.3) ...
Preparing to unpack .../07-isc-dhcp-client_4.3.5-3_amd64.deb ...
Unpacking isc-dhcp-client (4.3.5-3) over (4.3.1-6+deb8u2) ...
Preparing to unpack .../08-isc-dhcp-common_4.3.5-3_amd64.deb ...
Unpacking isc-dhcp-common (4.3.5-3) over (4.3.1-6+deb8u2) ...
Selecting previously unselected package libprocps4:amd64.
Preparing to unpack .../09-libprocps4_2%3a3.3.10-4+devuan1.0_amd64.deb ...
Unpacking libprocps4:amd64 (2:3.3.10-4+devuan1.0) ...
Selecting previously unselected package libxapian30:amd64.
Preparing to unpack .../10-libxapian30_1.4.3-2_amd64.deb ...
Unpacking libxapian30:amd64 (1.4.3-2) ...
Preparing to unpack .../11-procps_2%3a3.3.10-4+devuan1.0_amd64.deb ...
Unpacking procps (2:3.3.10-4+devuan1.0) over (2:3.3.9-9) ...
Preparing to unpack .../12-vim_2%3a8.0.0197-4_amd64.deb ...
Unpacking vim (2:8.0.0197-4) over (2:7.4.488-7+deb8u3) ...
Preparing to unpack .../13-vim-tiny_2%3a8.0.0197-4_amd64.deb ...
Unpacking vim-tiny (2:8.0.0197-4) over (2:7.4.488-7+deb8u3) ...
Preparing to unpack .../14-vim-runtime_2%3a8.0.0197-4_all.deb ...
Adding 'diversion of /usr/share/vim/vim80/doc/help.txt to /usr/share/vim/vim80/doc/help.txt.vim-tiny by vim-runtime'
Adding 'diversion of /usr/share/vim/vim80/doc/tags to /usr/share/vim/vim80/doc/tags.vim-tiny by vim-runtime'
Unpacking vim-runtime (2:8.0.0197-4) over (2:7.4.488-7+deb8u3) ...
Removing 'diversion of /usr/share/vim/vim74/doc/help.txt to /usr/share/vim/vim74/doc/help.txt.vim-tiny by vim-runtime'
Removing 'diversion of /usr/share/vim/vim74/doc/tags to /usr/share/vim/vim74/doc/tags.vim-tiny by vim-runtime'
Preparing to unpack .../15-vim-common_2%3a8.0.0197-4_all.deb ...
Unpacking vim-common (2:8.0.0197-4) over (2:7.4.488-7+deb8u3) ...
Selecting previously unselected package xxd.
Preparing to unpack .../16-xxd_2%3a8.0.0197-4_amd64.deb ...
Unpacking xxd (2:8.0.0197-4) ...
Preparing to unpack .../17-wget_1.19.1-3_amd64.deb ...
Unpacking wget (1.19.1-3) over (1.16-1+deb8u2) ...
Selecting previously unselected package python3-apt.
Preparing to unpack .../18-python3-apt_1.4.0~beta3_amd64.deb ...
Unpacking python3-apt (1.4.0~beta3) ...
Preparing to unpack .../19-apt-listchanges_3.10_all.deb ...
Unpacking apt-listchanges (3.10) over (2.85.13+nmu1) ...
Preparing to unpack .../20-file_1%3a5.30-1_amd64.deb ...
Unpacking file (1:5.30-1) over (1:5.22+15-2+deb8u3) ...
Preparing to unpack .../21-libmagic1_1%3a5.30-1_amd64.deb ...
Unpacking libmagic1:amd64 (1:5.30-1) over (1:5.22+15-2+deb8u3) ...
Selecting previously unselected package libmagic-mgc.
Preparing to unpack .../22-libmagic-mgc_1%3a5.30-1_amd64.deb ...
Unpacking libmagic-mgc (1:5.30-1) ...
Selecting previously unselected package libldap-common.
Preparing to unpack .../23-libldap-common_2.4.44+dfsg-5_all.deb ...
Unpacking libldap-common (2.4.44+dfsg-5) ...
Replacing files in old package libldap-2.4-2:amd64 (2.4.40+dfsg-1+deb8u2) ...
Preparing to unpack .../24-libldap-2.4-2_2.4.44+dfsg-5_amd64.deb ...
Unpacking libldap-2.4-2:amd64 (2.4.44+dfsg-5) over (2.4.40+dfsg-1+deb8u2) ...
Selecting previously unselected package python3-pkg-resources.
Preparing to unpack .../25-python3-pkg-resources_33.1.1-1_all.deb ...
Unpacking python3-pkg-resources (33.1.1-1) ...
Selecting previously unselected package python3-chardet.
Preparing to unpack .../26-python3-chardet_2.3.0-2_all.deb ...
Unpacking python3-chardet (2.3.0-2) ...
Selecting previously unselected package python3-six.
Preparing to unpack .../27-python3-six_1.10.0-4_all.deb ...
Unpacking python3-six (1.10.0-4) ...
Selecting previously unselected package python3-debian.
Preparing to unpack .../28-python3-debian_0.1.30_all.deb ...
Unpacking python3-debian (0.1.30) ...
Selecting previously unselected package python3-httplib2.
Preparing to unpack .../29-python3-httplib2_0.9.2+dfsg-1_all.deb ...
Unpacking python3-httplib2 (0.9.2+dfsg-1) ...
Selecting previously unselected package python3-pycurl.
Preparing to unpack .../30-python3-pycurl_7.43.0-2_amd64.deb ...
Unpacking python3-pycurl (7.43.0-2) ...
Selecting previously unselected package python3-pysimplesoap.
Preparing to unpack .../31-python3-pysimplesoap_1.16-2_all.deb ...
Unpacking python3-pysimplesoap (1.16-2) ...
Selecting previously unselected package python3-debianbts.
Preparing to unpack .../32-python3-debianbts_2.6.1_all.deb ...
Unpacking python3-debianbts (2.6.1) ...
Selecting previously unselected package python3-urllib3.
Preparing to unpack .../33-python3-urllib3_1.19.1-1_all.deb ...
Unpacking python3-urllib3 (1.19.1-1) ...
Selecting previously unselected package python3-requests.
Preparing to unpack .../34-python3-requests_2.12.4-1_all.deb ...
Unpacking python3-requests (2.12.4-1) ...
Selecting previously unselected package python3-reportbug.
Preparing to unpack .../35-python3-reportbug_7.1.6+devuan2.1_all.deb ...
Unpacking python3-reportbug (7.1.6+devuan2.1) ...
Preparing to unpack .../36-reportbug_7.1.6+devuan2.1_all.deb ...
Unpacking reportbug (7.1.6+devuan2.1) over (6.6.3+devuan1.3) ...
Selecting previously unselected package dirmngr.
Preparing to unpack .../37-dirmngr_2.1.18-8_amd64.deb ...
Unpacking dirmngr (2.1.18-8) ...
Preparing to unpack .../38-initramfs-tools_0.130_all.deb ...
'/etc/initramfs-tools/initramfs.conf' -> '/etc/initramfs-tools/initramfs.conf.dpkg-remove'
Unpacking initramfs-tools (0.130) over (0.120+deb8u3) ...
dpkg: warning: unable to delete old directory '/var/lib/initramfs-tools': Directory not empty
Selecting previously unselected package initramfs-tools-core.
Preparing to unpack .../39-initramfs-tools-core_0.130_all.deb ...
Unpacking initramfs-tools-core (0.130) ...
Selecting previously unselected package keyutils.
Preparing to unpack .../40-keyutils_1.5.9-9_amd64.deb ...
Unpacking keyutils (1.5.9-9) ...
Preparing to unpack .../41-libatomic1_7.1.0-7_amd64.deb ...
Unpacking libatomic1:amd64 (7.1.0-7) over (6.3.0-18) ...
Selecting previously unselected package libjson-c3:amd64.
Preparing to unpack .../42-libjson-c3_0.12.1-1.1_amd64.deb ...
Unpacking libjson-c3:amd64 (0.12.1-1.1) ...
Selecting previously unselected package libllvm3.8:amd64.
Preparing to unpack .../43-libllvm3.8_1%3a3.8.1-24_amd64.deb ...
Unpacking libllvm3.8:amd64 (1:3.8.1-24) ...
Selecting previously unselected package libtfm1:amd64.
Preparing to unpack .../44-libtfm1_0.13-4_amd64.deb ...
Unpacking libtfm1:amd64 (0.13-4) ...
Preparing to unpack .../45-libclamav7_0.99.2+dfsg-6+b1_amd64.deb ...
Unpacking libclamav7:amd64 (0.99.2+dfsg-6+b1) over (0.99.2+dfsg-0+deb8u2) ...
Selecting previously unselected package libsuitesparseconfig4:amd64.
Preparing to unpack .../46-libsuitesparseconfig4_1%3a4.5.4-1_amd64.deb ...
Unpacking libsuitesparseconfig4:amd64 (1:4.5.4-1) ...
Selecting previously unselected package libcolamd2:amd64.
Preparing to unpack .../47-libcolamd2_1%3a4.5.4-1_amd64.deb ...
Unpacking libcolamd2:amd64 (1:4.5.4-1) ...
Preparing to unpack .../48-libcurl3_7.52.1-5_amd64.deb ...
Unpacking libcurl3:amd64 (7.52.1-5) over (7.38.0-4+deb8u5) ...
Selecting previously unselected package libgmime-2.6-0:amd64.
Preparing to unpack .../49-libgmime-2.6-0_2.6.22+dfsg2-1_amd64.deb ...
Unpacking libgmime-2.6-0:amd64 (2.6.22+dfsg2-1) ...
Preparing to unpack .../50-libgomp1_7.1.0-7_amd64.deb ...
Unpacking libgomp1:amd64 (7.1.0-7) over (6.3.0-18) ...
Selecting previously unselected package libnotmuch4.
Preparing to unpack .../51-libnotmuch4_0.23.7-3_amd64.deb ...
Unpacking libnotmuch4 (0.23.7-3) ...
Preparing to unpack .../52-libquadmath0_7.1.0-7_amd64.deb ...
Unpacking libquadmath0:amd64 (7.1.0-7) over (6.3.0-18) ...
Selecting previously unselected package linux-image-4.9.0-3-amd64.
Preparing to unpack .../53-linux-image-4.9.0-3-amd64_4.9.30-2_amd64.deb ...
Unpacking linux-image-4.9.0-3-amd64 (4.9.30-2) ...
Preparing to unpack .../54-linux-image-amd64_4.9+80_amd64.deb ...
Unpacking linux-image-amd64 (4.9+80) over (3.16+63) ...
Preparing to unpack .../55-lp-solve_5.5.0.15-4+b1_amd64.deb ...
Unpacking lp-solve (5.5.0.15-4+b1) over (5.5.0.13-7+b1) ...
Preparing to unpack .../56-mutt_1.8.0-1_amd64.deb ...
Unpacking mutt (1.8.0-1) over (1.5.23-3) ...
Preparing to unpack .../57-nfs-common_1%3a1.3.4-2.1_amd64.deb ...
Unpacking nfs-common (1:1.3.4-2.1) over (1:1.2.8-9) ...
Setting up libquadmath0:amd64 (7.1.0-7) ...
Setting up libnpth0:amd64 (1.3-1) ...
Setting up libgomp1:amd64 (7.1.0-7) ...
Setting up libatomic1:amd64 (7.1.0-7) ...
Setting up libllvm3.8:amd64 (1:3.8.1-24) ...
Setting up libxapian30:amd64 (1.4.3-2) ...
Setting up libtfm1:amd64 (0.13-4) ...
Setting up python3-pycurl (7.43.0-2) ...
Setting up python3-apt (1.4.0~beta3) ...
Setting up libisc-export160 (1:9.10.3.dfsg.P4-12.3) ...
Processing triggers for mime-support (3.60) ...
Setting up xxd (2:8.0.0197-4) ...
Setting up isc-dhcp-common (4.3.5-3) ...
Setting up libldap-common (2.4.44+dfsg-5) ...
Setting up initramfs-tools-core (0.130) ...
removed '/etc/initramfs-tools/initramfs.conf.dpkg-remove'
Processing triggers for install-info (6.3.0.dfsg.1-1+b2) ...
Setting up libobt2v5 (3.6.1-4) ...
Setting up libjson-c3:amd64 (0.12.1-1.1) ...

...

Setting up tzdata (2017b-1) ...

Current default time zone: 'Etc/UTC'
Local time is now:      Sun Jun 25 11:30:08 UTC 2017.
Universal Time is now:  Sun Jun 25 11:30:08 UTC 2017.
Run 'dpkg-reconfigure tzdata' if you wish to change it.

Setting up libclamav7:amd64 (0.99.2+dfsg-6+b1) ...
Setting up python3-six (1.10.0-4) ...
Setting up libdns-export162 (1:9.10.3.dfsg.P4-12.3) ...
Setting up keyutils (1.5.9-9) ...
Setting up libsuitesparseconfig4:amd64 (1:4.5.4-1) ...
Processing triggers for menu (2.1.47+b1) ...
Setting up initramfs-tools (0.130) ...
Installing new version of config file /etc/kernel/postinst.d/initramfs-tools ...
update-initramfs: deferring update (trigger activated)
Removing obsolete conffile /etc/bash_completion.d/initramfs-tools ...
Setting up python3-pkg-resources (33.1.1-1) ...
Setting up libmagic-mgc (1:5.30-1) ...
Setting up isc-dhcp-client (4.3.5-3) ...
Installing new version of config file /etc/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes ...
Installing new version of config file /etc/dhcp/dhclient.conf ...
Setting up libmagic1:amd64 (1:5.30-1) ...
Setting up libobrender32v5 (3.6.1-4) ...
Processing triggers for libc-bin (2.24-12) ...
Setting up libldap-2.4-2:amd64 (2.4.44+dfsg-5) ...
Setting up python3-chardet (2.3.0-2) ...
Setting up libgmime-2.6-0:amd64 (2.6.22+dfsg2-1) ...
Setting up python3-httplib2 (0.9.2+dfsg-1) ...
Setting up wget (1.19.1-3) ...
Installing new version of config file /etc/wgetrc ...
Setting up vim-common (2:8.0.0197-4) ...
Installing new version of config file /etc/vim/vimrc ...
Setting up apt-listchanges (3.10) ...
Installing new version of config file /etc/apt/apt.conf.d/20listchanges ...
Setting up libcolamd2:amd64 (1:4.5.4-1) ...
Setting up python3-pysimplesoap (1.16-2) ...
Processing triggers for man-db (2.7.6.1-2) ...
Processing triggers for shared-mime-info (1.8-1) ...
Setting up vim-runtime (2:8.0.0197-4) ...
Setting up python3-urllib3 (1.19.1-1) ...
Setting up gnupg-agent (2.1.18-8) ...
Installing new version of config file /etc/X11/Xsession.d/90gpg-agent ...
Setting up linux-image-4.9.0-3-amd64 (4.9.30-2) ...
I: /vmlinuz.old is now a symlink to boot/vmlinuz-3.16.0-4-amd64
I: /initrd.img.old is now a symlink to boot/initrd.img-3.16.0-4-amd64
I: /vmlinuz is now a symlink to boot/vmlinuz-4.9.0-3-amd64
I: /initrd.img is now a symlink to boot/initrd.img-4.9.0-3-amd64
/etc/kernel/postinst.d/initramfs-tools:
update-initramfs: Generating /boot/initrd.img-4.9.0-3-amd64
/etc/kernel/postinst.d/zz-update-grub:
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-4.9.27-unofficial+grsec170512-22
Found initrd image: /boot/initrd.img-4.9.27-unofficial+grsec170512-22
Found linux image: /boot/vmlinuz-4.9.0-3-amd64
Found initrd image: /boot/initrd.img-4.9.0-3-amd64
Found linux image: /boot/vmlinuz-3.16.0-4-amd64
Found initrd image: /boot/initrd.img-3.16.0-4-amd64
Found Windows Vista on /dev/sdc4
done
Setting up obconf (1:2.0.4+git20150213-2) ...
Setting up dirmngr (2.1.18-8) ...
Setting up libprocps4:amd64 (2:3.3.10-4+devuan1.0) ...
Processing triggers for hicolor-icon-theme (0.15-1) ...
Setting up python3-debian (0.1.30) ...
Setting up vim-tiny (2:8.0.0197-4) ...
Installing new version of config file /etc/vim/vimrc.tiny ...
Setting up lp-solve (5.5.0.15-4+b1) ...
Setting up libnotmuch4 (0.23.7-3) ...
Setting up vim (2:8.0.0197-4) ...
Setting up libcurl3:amd64 (7.52.1-5) ...
Setting up nfs-common (1:1.3.4-2.1) ...
Replacing config file /etc/idmapd.conf with new version
[ ok ] Stopping NFS common utilities: idmapd statd.
[ ok ] Starting NFS common utilities: statd idmapd.
Setting up openbox (3.6.1-4) ...
Setting up gnupg (2.1.18-8) ...
Setting up file (1:5.30-1) ...
Setting up python3-debianbts (2.6.1) ...
Setting up procps (2:3.3.10-4+devuan1.0) ...
[ ok ] Setting kernel variables ...done.
Setting up linux-image-amd64 (4.9+80) ...
Setting up gnupg2 (2.1.18-8) ...
Setting up python3-requests (2.12.4-1) ...
Setting up mutt (1.8.0-1) ...
Installing new version of config file /etc/Muttrc ...
Installing new version of config file /etc/Muttrc.d/gpg.rc ...
Installing new version of config file /etc/Muttrc.d/smime.rc ...
Setting up python3-reportbug (7.1.6+devuan2.1) ...
Setting up reportbug (7.1.6+devuan2.1) ...
Processing triggers for initramfs-tools (0.130) ...
update-initramfs: Generating /boot/initrd.img-4.9.27-unofficial+grsec170512-22
Processing triggers for libc-bin (2.24-12) ...
Processing triggers for menu (2.1.47+b1) ...
2017/06/25 11:32:01 Reading config from: /etc/paxrat/paxrat.conf
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/libi/libipc-system-simple-perl/libipc-system-simple-perl_1.25-3_all.deb  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/libf/libfile-basedir-perl/libfile-basedir-perl_0.07-1_all.deb  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/libw/libwebp/libwebpdemux2_0.5.2-1_amd64.deb  Temporary failure resolving 'packages.devuan.org'
E: Failed to fetch http://auto.mirror.devuan.org/merged/pool/DEBIAN/main/p/pillow/python-pil_4.0.0-4_amd64.deb  Temporary failure resolving 'packages.devuan.org'
#

And I also installed:
# apt-get install libinput-dev libinput-tools libinput10 xserver-xorg-input-libinput xserver-xorg-input-libinput-dev libevdev-dev libevdev-tools libevdev2 xserver-xorg-input-evdev xserver-xorg-input-evdev-dbg xserver-xorg-input-evdev-dev |& tee apt-get_install__libinput__libevdev__$(date +%y%m%d_%H%M)_$(hostname).log
because I wondered what to do when I couldn't use neither keyboard nor mouse in my openbox sessions...

In short, manual Air-Gap Devuan Install can be done.

I am posting this with a clone of my Air-Gapped Devuan.

I hope there will be other users who will find this useful

Cheers!

---

Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

miroR

Member

From: Zagreb, Croatia

Registered: 2016-11-30

Posts: 217  

Website

Re: Air-Gapped Devuan Install, Tentative

There is also:

Updating the Air-Gapped System
https://dev1galaxy.org/viewtopic.php?id=763

which is a depicts the regular chores that Air-Gapping implies (and there's some viri removal)...

---

Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html

miroR

Member

From: Zagreb, Croatia

Registered: 2016-11-30

Posts: 217  

Website

Re: Air-Gapped Devuan Install, Tentative

I made the remark at the opening of this topic to cut, somewhat only: pls., don't misunderstand me, if you want to go Air-Gapped you need to be able to follow most of those experiments that I went through, days upon days, you need to be able to, not perform them, but understand them...

I made the remark at the opening of this topic to cut, somewhat, the effort needed to those who would  lilke to go Air-Gap installing their Devuan machines and using a cloned machine for online.

There is something pretty similar, and available for a couple of years if not longer already, and that it this package:

# apt-cache show apt-doc
Package: apt-doc
Source: apt
Version: 1.4.6
Installed-Size: 901
Maintainer: APT Development Team <deity@lists.debian.org>
Architecture: all
Description: documentation for APT
Description-md5: bc2b838ed28e60af95d78926380a3300
Tag: admin::package-management, hardware::storage, hardware::storage:cd,
 made-of::html, protocol::ftp, protocol::http, protocol::ipv6,
 role::documentation, suite::debian, use::downloading, use::searching,
 works-with-format::html, works-with-format::plaintext,
 works-with::software:package
Section: doc
Priority: optional
Filename: pool/DEBIAN/main/a/apt/apt-doc_1.4.6_all.deb
Size: 364458
MD5sum: 76ada48f0819ced8efceeba853faf738
SHA256: bb54cdf587165345326699fe73ce4d396876d90ce6c0547afcc4d4b8cd6bc50c
#

I think it is, once you install it, here:

$ ls -l /usr/share/doc/apt-doc/offline.html/
total 28
-rw-r--r-- 1 root root 3790 2017-06-01 08:50 ch1.html
-rw-r--r-- 1 root root 6676 2017-06-01 08:50 ch2.html
-rw-r--r-- 1 root root 4421 2017-06-01 08:50 ch3.html
-rw-r--r-- 1 root root 4795 2017-06-01 08:50 index.html
$

And I'm not going to repeat that information. And neither is that info nominally meant for Air-Gap/cloning. But it's the same/similar thing that I do and achieve as what that method does and achieves!

But it's even less that is really needed. Aarggghhh, tired a little... But let me complete this topic with the last bit of stamina lest after a long work on my installs...

All that you need to copy from the clone which you got the deb packages from is

• /var/cache/apt/archives/

yes, only the archives/ folder

• /var/lib/apt/lists/

yes, only the lists/ folder

• reproduce the exact same commands that you did on the clone

Only those. Because Devuan is not like Windows where you can't clone it to another HDD in another same MBO machine, because Billy the moral robber of the world couldn't resist to stifle more in the moneys... Devuan is free! No artificial obstacles made. It is instead done in such way to make it easy for you to use it any way you like it. It is free and freeing you and me!

That's all, those three things above... But, you do need to understand the rsync'ing, the hashing, and other stuff. And it must be copied in exact same places, done exactly like in the clone, all of it. And done with understanding. If you find it hard, study harder. I knew none of this, many of us didn't know any of what we can do now... It takes effort and perseverance.

Regards!

---

Devs/testers/users of FOSS, what might be ahead for GNU/Linux after we lost PaX Team and spender? spender wrote:
https://forums.grsecurity.net/viewtopic … 699#p17127
Google made the choice to engage in underhanded competition against us with our own code...
grsecurity ripoff by Google, w/ Linus approval https://lists.dyne.org/lurker/message/2 … 4b.en.html