- Grml-devel - lists.mur.at

Shared screen locking solution for live distributions in Debian
by sajolida 03 Jan '15

03 Jan '15

Hi, I'm part of the people working on Tails, a live distribution that aims at preserving privacy and anonymity: https://tails.boum.org/. Tails is currently lacking a screen locker and this has been a frequent feature request. See https://labs.riseup.net/code/issues/5684. For example, as Tails is been adopted more and more by journalists, they want to be able to leave their computer unattended in their office to go to the toilets for a minute and have their screen locked. I'm writing this emails to various Live distributions based on Debian (Knoppix, Grml, Jondo, Kali, Debian Live, and Tanglu). I'm also putting Micah Lee in copy as he has shown particular interest in this feature. I've been investigating the screen locking mechanism of those various Debian based live distributions, and I found out that none of them had a real mechanism to do so. They either: - Do not provide any screen locking mechanism (Knoppix, Grml, Jondo Live). - Either rely on their default password to unlock the screen (Kali, Tanglu, Debian Live). The purpose of this email is to know whether you would be interested in working on a common Debian package to provide a generic screen locking solution for Debian based live distributions. The core usability issue that we are facing here is the one of the unlocking password. As we are live distributions, there either is no password or a default one. Still, screen locking only make sense if the user is able to use a custom password. As an interesting exception, note that in Jondo Live, the user is prompted for a user password on boot. In Tails the user can set up an administration password but this is disabled by default for security reasons so we cannot rely on this for screen locking. During our last monthly meeting we came up with the idea of asking for a custom password *in the process of locking the screen* for the first time. For example, in GNOME, when doing Meta+L for the first time, the user would be prompted to enter a screen locking password, then only the screen would get locked. If she locks the screen again, the same password would be reused. What do you think? Please answer to tails-dev(a)boum.org and feel free to subscribe to the list to follow the thread: https://mailman.boum.org/listinfo/tails-dev/ -- sajolida

5 5

Grml - new stable release 2014.11 available
by Michael Prokop 18 Nov '14

18 Nov '14

Hi, we just released Grml 2014.11 - Gschistigschasti This Grml release provides fresh software packages from Debian testing (AKA jessie). As usual it also incorporates up2date hardware support and fixes known bugs from the previous Grml release. More information is available in the release notes of Grml 2014.11: http://grml.org/changelogs/README-grml-2014.11/ Grab the latest Grml ISO(s) and spread the word! http://grml.org/download/ PS: Special thanks to Christian Hofstaedtler for helping us in solving a big release stopper caused by udev's net.agent on systems without systemd (AKA http://bugs.debian.org/754987 ) Thanks everyone and happy grml-ing, -mika-

3 3

First Release Candidate of Grml version 2014.10 available
by Michael Prokop 31 Okt '14

31 Okt '14

Hi, so we did it again, the first release candidate of the upcoming Grml version 2014.10, code-named 'Gschistigschasti' was released. This Grml release provides fresh software packages from Debian testing (AKA jessie). As usual it also incorporates up2date hardware support and fixes known bugs from the previous Grml release. For detailed information about the changes between 2014.03 and 2014.10 have a look at the official release announcement: http://grml.org/changelogs/README-grml-2014.10-rc1/ Please test the ISOs and everything you usually use and report back so we can complete the stable release soon. If no major problems come up, the next iteration will be the stable release, which is scheduled for the end of October. Thanks to all contributors! regards, -mika- - for the Grml.org project

3 4

[PATCH 1/4] Remove hardcoded scripts path if not building from pkg.
by Krisztian VASAS 03 Jul '14

03 Jul '14

--- .../files/etc/apt/sources.list.d/debian.list/DEBIAN_WHEEZY | 4 ++++ etc/grml/grml-live.conf | 1 + grml-live | 11 +++++++---- 3 files changed, 12 insertions(+), 4 deletions(-) diff --git a/etc/grml/fai/config/files/etc/apt/sources.list.d/debian.list/DEBIAN_WHEEZY b/etc/grml/fai/config/files/etc/apt/sources.list.d/debian.list/DEBIAN_WHEEZY index 90bbbbf..44fcedc 100644 --- a/etc/grml/fai/config/files/etc/apt/sources.list.d/debian.list/DEBIAN_WHEEZY +++ b/etc/grml/fai/config/files/etc/apt/sources.list.d/debian.list/DEBIAN_WHEEZY @@ -6,6 +6,10 @@ deb http://security.debian.org/ wheezy/updates main contrib deb-src http://security.debian.org/ wheezy/updates main contrib +# backports: + deb http://http.debian.net/debian wheezy-backports main + deb-src http://http.debian.net/debian wheezy-backports main + # official debian repository: # deb http://ftp.debian.org/debian/ wheezy main contrib non-free # deb-src http://ftp.debian.org/debian/ wheezy main contrib non-free diff --git a/etc/grml/grml-live.conf b/etc/grml/grml-live.conf index 84fe564..62a32dd 100644 --- a/etc/grml/grml-live.conf +++ b/etc/grml/grml-live.conf @@ -132,6 +132,7 @@ # template directory but please make sure it looks # likes the default directory [/usr/share/grml-live/templates] # TEMPLATE_DIRECTORY='/usr/share/grml-live/templates' +# SCRIPTS_DIRECTORY='/usr/share/grml-live/scripts' # Do you want to use console based isolinux boot splash # instead of the default graphical menu? diff --git a/grml-live b/grml-live index c5c2250..05be0e3 100755 --- a/grml-live +++ b/grml-live @@ -65,6 +65,7 @@ Usage: $PN [options, see as follows] -Q skip netboot package build -r <release_name> release name -s <suite> Debian suite/release, like: stable, testing, unstable + -S <script_directory> place of the scripts -t <template_directory> place of the templates -u update existing chroot instead of rebuilding it from scratch -U <username> arrange output to be owned by specified username @@ -310,7 +311,7 @@ copy_addon_file() { # }}} # command line parsing {{{ -while getopts "a:C:c:d:D:e:g:i:I:o:r:s:t:U:v:AbBFhnNqQuVz" opt; do +while getopts "a:C:c:d:D:e:g:i:I:o:r:s:S:t:U:v:AbBFhnNqQuVz" opt; do case "$opt" in a) ARCH="$OPTARG" ;; A) CLEAN_ARTIFACTS=1 ;; @@ -332,6 +333,7 @@ while getopts "a:C:c:d:D:e:g:i:I:o:r:s:t:U:v:AbBFhnNqQuVz" opt; do Q) SKIP_NETBOOT=1 ;; r) RELEASENAME="$OPTARG" ;; s) SUITE="$OPTARG" ;; + S) SCRIPTS_DIRECTORY="$OPTARG";; t) TEMPLATE_DIRECTORY="$OPTARG";; v) VERSION="$OPTARG" ;; F) FORCE=1 ;; @@ -392,6 +394,7 @@ fi [ -n "$SQUASHFS_EXCLUDES_FILE" ] || SQUASHFS_EXCLUDES_FILE="${GRML_FAI_CONFIG}/config/grml/squashfs-excludes" [ -n "$SUITE" ] || SUITE='testing' [ -n "$TEMPLATE_DIRECTORY" ] || TEMPLATE_DIRECTORY='/usr/share/grml-live/templates' +[ -n "$SCRIPTS_DIRECTORY" ] || SCRIPTS_DIRECTORY='/usr/share/grml-live/scripts' [ -n "$USERNAME" ] || USERNAME='grml' [ -n "$VERSION" ] || VERSION='0.0.1' @@ -1329,7 +1332,7 @@ else # make a 2048-byte bootsector for El Torito dd if=/dev/zero of=boot/grub/toriboot.bin bs=512 count=4 2>/dev/null # those are in 2048-byte sectors, so 1 16 matches 4 63 below - echo 1 16 | mksh /usr/share/grml-live/scripts/bootgrub.mksh -B 11 | \ + echo 1 16 | mksh ${SCRIPTS_DIRECTORY}/bootgrub.mksh -B 11 | \ dd of=boot/grub/toriboot.bin conv=notrunc 2>/dev/null fi log "$MKISOFS -V '${GRML_NAME} ${VERSION}' -publisher 'grml-live | grml.org' -l -r -J $BOOT_ARGS -o ${ISO_OUTPUT}/${ISO_NAME} ." @@ -1371,13 +1374,13 @@ else log "Creating hybrid ISO file with manifold/grub2 method" einfo "Creating hybrid ISO file with manifold/grub2 method" # 512 bytes: MBR, partition table, load GRUB 2 - echo 4 63 | mksh /usr/share/grml-live/scripts/bootgrub.mksh -A -M 4:0x96 -g $cyls:16:32 + echo 4 63 | mksh ${SCRIPTS_DIRECTORY}/bootgrub.mksh -A -M 4:0x96 -g $cyls:16:32 else log "Creating hybrid ISO file with manifold method" einfo "Creating hybrid ISO file with manifold method" # read only one but 2048-byte sized (scale: << 2) sector echo $bootoff $bootoff | \ - mksh /usr/share/grml-live/scripts/bootilnx.mksh -A -M 4:0x96 -g $cyls:16:32 -S 2 + mksh ${SCRIPTS_DIRECTORY}/bootilnx.mksh -A -M 4:0x96 -g $cyls:16:32 -S 2 fi | dd of="${ISO_OUTPUT}/${ISO_NAME}" conv=notrunc 2>/dev/null eend $? fi -- 1.9.1

3 6

Grml.org not reachable via IPv6
by Heiko Schlittermann 25 Jun '14

25 Jun '14

Hello, I'm just trying to reach grml.org ;; ANSWER SECTION: grml.org. 168 IN AAAA 2a02:790:1:12::6 via ipv6. It does not work. My uplink is via Sixxs and normally stable. ping6 to heise.de works. ping6 to grml.org doesn't work and connecting to port 80 does not work: listening on sixxs, link-type RAW (Raw IP), capture size 65535 bytes 11:10:42.139760 IP6 2a01:1e8:e100:272::2.60585 > 2a02:790:1:12::6.80: Flags [S], seq 1425174929, win 12200, options [mss 1220,sackOK,TS val 779758502 ecr 0,nop,wscale 7], length 0 11:10:43.137952 IP6 2a01:1e8:e100:272::2.60585 > 2a02:790:1:12::6.80: Flags [S], seq 1425174929, win 12200, options [mss 1220,sackOK,TS val 779758752 ecr 0,nop,wscale 7], length 0 11:10:45.141995 IP6 2a01:1e8:e100:272::2.60585 > 2a02:790:1:12::6.80: Flags [S], seq 1425174929, win 12200, options [mss 1220,sackOK,TS val 779759253 ecr 0,nop,wscale 7], length 0 11:10:49.154020 IP6 2a01:1e8:e100:272::2.60585 > 2a02:790:1:12::6.80: Flags [S], seq 1425174929, win 12200, options [mss 1220,sackOK,TS val 779760256 ecr 0,nop,wscale 7], length 0 ^C 4 packets captured 4 packets received by filter 0 packets dropped by kernel If you do not provide IPv6 connectivity, you should completly disable it or reject the connections instead of dropping them. This would enable a fast fallback to IPv4 on the client side. Best regards from Dresden/Germany Viele GrÃ¼ÃŸe aus Dresden Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: 7CBF764A - gnupg fingerprint: 9288 F17D BBF9 9625 5ABC 285C 26A9 687E 7CBF 764A - (gnupg fingerprint: 3061 CFBF 2D88 F034 E8D2 7E92 EE4E AC98 48D0 359B)-

2 1

Grml - new stable release 2014.03 available
by Michael Prokop 31 Mär '14

31 Mär '14

Hi, we just released Grml 2014.03 - Ponywagon. This Grml release provides fresh software packages from Debian testing (AKA jessie). As usual it also incorporates up2date hardware support and fixes known bugs from the previous Grml release. More information is available in the release notes of Grml 2014.03: http://grml.org/changelogs/README-grml-2014.03/ Grab the latest Grml ISO(s) and spread the word! http://grml.org/download/ Thanks everyone and happy grml-ing, -mika-

1 0

First Release Candidate of Grml version 2014.03 released
by Michael Prokop 29 Mär '14

29 Mär '14

Hi, so we did it again, the first release candidate of the upcoming Grml version 2014.03, code-named 'Ponywagon' was released. This Grml release provides fresh software packages from Debian testing (AKA jessie). As usual it also incorporates up2date hardware support and fixes known bugs from the previous Grml release. For detailed information about the changes between 2013.09 and 2014.03 have a look at the official release announcement: http://grml.org/changelogs/README-grml-2014.03-rc1/ Please test the ISOs and everything you usually use and report back so we can complete the stable release soon. If no major problems come up, the next iteration will be the stable release, which is scheduled for the end of March (2014 ;)). PS: As you might notice the ISOs increased again (e.g. from ~350MB to 400MB for grml-full), if someone is interested in reducing the ISO we welcome any patches, concrete feedback,.. Thanks to all contributors! regards, -mika- - for the Grml.org project

6 25

Re: [Grml-devel] Grml-devel Digest, Vol 40, Issue 3
by Arne de Boer 26 Mär '14

26 Mär '14

Re: HDD's not recognised on the latest grml-full 64 bits ________________________________ From: "grml-devel-request(a)ml.grml.org" <grml-devel-request(a)ml.grml.org> To: grml-devel(a)ml.grml.org Â 3. HDD's not recognised on the latest grml-full 64 bits Â Â Â (Arne de Boer) Â 4. Re: HDD's not recognised on the latest grml-full 64 bits Â Â Â (Michael Prokop) This was my fault, I forgot I was working on a different system than the one I am used to. This system only has sda and sdb So nothing is wrong with grml . Thanks!, Arne ---------------------------------------------------------------------- Message: 1 Date: Tue, 25 Mar 2014 12:48:56 +0100 From: Axel Beckert <abe(a)deuxchevaux.org> To: grml-devel(a)ml.grml.org Subject: Re: [Grml-devel] First Release Candidate of Grml version Â Â Â 2014.03 released Message-ID: <20140325114856.GK27889(a)sym.noone.org> Content-Type: text/plain; charset=us-ascii Hi, On Tue, Mar 25, 2014 at 09:20:07AM +0100, Michael Prokop wrote: > > Started it via grml-rescueboot on my EeePC 900A. > > > The font in the boot menu seems to be truncated at the bottom of each > > line, especially the letters g, p and y are cut off at the font's base > > line. > > > Interestingly this is not the case in the help text below the menu, > > i.e. the "y" in "E to edit menu entry" looks fine. (This does not > > happen if I use grub-imageboot, only with grml-rescueboot. The menu > > looks different, like syslinux vs grub or so.) > > That's strange. The font issue or the different boot loaders? > > If I choose "copy grml to RAM" I get an error message about something > > with "error: null src bitmap in grub_video_bitmap_create_scaled" and > > "Press any key to continue", but it continues after 5 seconds or such > > anyway (took me several reboots to manually copy the message) and > > boots grml without further issues. Does not happen if I use the > > default boot entry. > > Hm ok, which grub version are you using here? The one currently in Debian Unstable, 2.02~beta2-7. > > Starting X works fine, but Ctrl-Alt-Backspace doesn't work. Need to > > use the menu of the window manager. > > Ok, that might need further configuration to work again with recent > X.org versions. .oO( Sounds familiar. :-) > > gcc-4.7-base and libprocps0 can be removed without harm, they're no > > more needed. (procps depends on libprocps3 nowadays and there's no > > gcc-4.7 left on the system.) > > They seem to be brought in via depends/suggests/... since there's no > explicit dependency on it in grml-live, needs investigation. Haven't grml running currently but "aptitude search '?depends(gcc-4.7-base) ~i'" or "aptitude search '?recommends(gcc-4.7-base) ~i'" should help to find the culprit. > > debconf-i18n (> 1 MB) can probably removed, too. > > Same here If you install recommends by default, this looks obvious to me: debconf recommends debconf-i18n. > > iproute (transitional package to iproute2) could be removed, if > > grml-shlib, isc-dhcp-client and vlan wouldn't still depend on it. > > grml-hwinfo still recommends it. (At least the grml-* packages could > > be fixed by grml. :-) > > grml-shlib already uses "iproute2 | iproute" in its Depends, so > nothing to do here from my PoV. Ah, sorry, I just looked at the reverse dependencies, but not how they specify it. My fault, I just saw a transitional package and looked at its reverse dependencies. > > Does grml really need tasksel and tasksel-data? (> 1,2 MB together) > > Nope, wondering which packages brings that in... thanks Similar aptitude commands as above may help here, too. I've run the following on a machine with Stable, Testing and Unstable in its sources.list: $ aptitude search '( ?recommends(tasksel) | ?depends(tasksel) | ?suggests(tasksel) ) !^task !-tasks$' i A aptitudeÂ Â Â - terminal-based package manager pÂ aptitude:i386 - terminal-based package manager cÂ aptitude-gtkÂ - terminal-based package manager (GUI and terminal interfaces) pÂ dpkg-wwwÂ Â Â - Web based Debian package browser pÂ synapticÂ Â Â - Graphical package manager pÂ synaptic:i386 - Graphical package manager If grml pulls in Suggests by default, it's likely aptitude. I've found no other explanation so far. > > The following transitional packages can be safely removed: > > > * libblas3gf > > Seems to be pulled in via a package IIRC libblas3gf and libblas3 are often used in alternative dependencies. Â Â Â Â Â Â Kind regards, Axel -- /~\Â Plain Text Ribbon CampaignÂ Â Â Â Â Â Â Â Â | Axel Beckert \ /Â Say No to HTML in E-Mail and NewsÂ Â Â Â Â Â | abe(a)deuxchevaux.xn--org-kla (Mail) XÂ See http://www.nonhtmlmail.org/campaign.html | abe(a)noone.org (Mail+Jabber) / \Â I love long mails: http://email.is-not-s.ms/ | http://noone.org/abe/ (Web) ------------------------------ Message: 2 Date: Wed, 26 Mar 2014 00:15:21 +0100 From: Axel Beckert <abe(a)deuxchevaux.org> To: grml-devel(a)ml.grml.org Subject: Re: [Grml-devel] First Release Candidate of Grml version Â Â Â 2014.03 released Message-ID: <20140325231521.GP27889(a)sym.noone.org> Content-Type: text/plain; charset=us-ascii Hi, Just a summary of what we just discussed on IRC in #grml: On Tue, Mar 25, 2014 at 12:48:56PM +0100, Axel Beckert wrote: > > > gcc-4.7-base and libprocps0 can be removed without harm, they're no > > > more needed. (procps depends on libprocps3 nowadays and there's no > > > gcc-4.7 left on the system.) > > > > They seem to be brought in via depends/suggests/... since there's no > > explicit dependency on it in grml-live, needs investigation. We now suspect it comes from the base tar ball which is used to bootstrap the build. gcc-*-base packages are of priority required and hence never get removed automatically even if they is marked as automatically installed via a dependency. > > > debconf-i18n (> 1 MB) can probably removed, too. > > > > Same here > > If you install recommends by default, this looks obvious to me: > debconf recommends debconf-i18n. But grml doesn't do that. Until a few years ago, debconf had a hard dependency on debconf-i18n which later got downgraded to Recommends (IIRC when the previous alternative dependency debconf-english got merged back into debconf). So this likely also comes from the base tar-ball. mika plans rebuild the base tar ball later today, so we should get rid of these packages soon. > > > Does grml really need tasksel and tasksel-data? (> 1,2 MB together) > > > > Nope, wondering which packages brings that in... thanks I suspect the base tar ball for that one, too. There's some tight relationship with d-i and aptitude, but I forgot the details. (At some time in the past tasksel needed aptitude, at least for some features used by d-i.) > > > The following transitional packages can be safely removed: > > > > > * libblas3gf > > > > Seems to be pulled in via a package > > IIRC libblas3gf and libblas3 are often used in alternative > dependencies. If in the past there was one dependency which only depended on libblas3gf and it made it's way in the base tar ball that way, the issue should be probably also solved by rebuilding the base tar ball. Since mika asked how I found that stuff: I used the same aptitude search patterns I used for finding disk space eating cruft on my EeePC 701 with only 4 GB of disk space. You get quite good in doing so after a while. ;-) Here are a few of these recipes, mostly from https://github.com/xtaran/zshrc/blob/master/zsh.d/50-alias#L201 and http://noone.org/blog/English/Computer/Debian/CoolTools/Finding%20packages%… Show packages which are not marked as automatically installed and don't have any reverse dependencies: aptitude -o "Aptitude::Pkg-Display-Limit=~i !~M !?reverse-depends(~i)" Find installed packages with "dummy" or "transition" in their description: aptitude -o "Aptitude::Pkg-Display-Limit=~i ( ~d transition | ~d dummy )" The used search terms also can be used with "aptitude search" on the commandline if someone prefers the CLI interface over the TUI interface (which I use primarily). Plus remembering which packages I removed on quite some of my boxes. :-) Â Â Â Â Â Â Kind regards, Axel -- /~\Â Plain Text Ribbon CampaignÂ Â Â Â Â Â Â Â Â | Axel Beckert \ /Â Say No to HTML in E-Mail and NewsÂ Â Â Â Â Â | abe(a)deuxchevaux.xn--org-kla (Mail) XÂ See http://www.nonhtmlmail.org/campaign.html | abe(a)noone.org (Mail+Jabber) / \Â I love long mails: http://email.is-not-s.ms/ | http://noone.org/abe/ (Web) ------------------------------ Message: 3 Date: Tue, 25 Mar 2014 16:58:04 -0700 (PDT) From: Arne de Boer <arnedeboer22(a)yahoo.com> To: "Grml-devel(a)ml.grml.org" <Grml-devel(a)ml.grml.org> Subject: [Grml-devel] HDD's not recognised on the latest grml-full 64 Â Â Â bits Message-ID: Â Â Â <1395791884.96218.YahooMailNeo(a)web121805.mail.ne1.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" 1. partitions on /dev/sda and /dev/sdb are recognised, but on /dev/sdc and /dv/sdd not grml-hwinfo also lacks sdc and sdd (The partitions on these disks are 2 x? 2 TB) 2. Network works out of the box on ethernet! (first time with grml!) No configuration needed, I am happy! Thanks, Arne

1 0

HDD's not recognised on the latest grml-full 64 bits
by Arne de Boer 26 Mär '14

26 Mär '14

1. partitions on /dev/sda and /dev/sdb are recognised, but on /dev/sdc and /dv/sdd not grml-hwinfo also lacks sdc and sdd (The partitions on these disks are 2 xÂ 2 TB) 2. Network works out of the box on ethernet! (first time with grml!) No configuration needed, I am happy! Thanks, Arne

2 1

Planning for new Grml release?
by Michael Prokop 10 Feb '14

10 Feb '14

Hi! Would be nice to have a new stable Grml release in March. I just started a titanpad site to collect notes + todos. I invite everyone who wants to contribute to join: https://grml.titanpad.com/release-2014-03 If you have any special things you think we should take care or you want to take care yourself feel invited to add them. regards, -mika-

1 0