AvANa-BBS / freepto-lb

Encrypted GNU/Linux OS (based on Debian Wheezy) which can be installed on USB flash drive. Freepto is designed for encrypt your communications, carry your documents in secure way and save your anonymity.
http://www.freepto.mx/
43 stars 14 forks source link

Prevent kernel update #141

Closed paskao closed 9 years ago

paskao commented 9 years ago

At now we are holding the linux kernel, but in arancina it can be updated. You should find the bug downloading the stable image and making an update/upgrade.

boyska commented 9 years ago

seems that

dpkg -l 'linux-image-*' | awk '{ print $2 }' | grep linux-image- | xargs apt-mark hold

will solve. The current "kernel-lock" is broken because it only locks the current kernel, not the alternative (different arch) one.

ghost commented 9 years ago

fixed: https://github.com/vinc3nt/freepto-lb/commit/bffe70e32637a40d4d155cee6ed34dad5ab272a3

tested with the following steps:

  1. revert to original status, without any hold
sed -i 's/hold/unhold/g' /lib/live/config-hooks/kernel-lock 

root@freepto:/home/paranoid# sh /lib/live/config-hooks/kernel-lock 
Blocco su linux-image-3.2.0-4-486 annullato.
Blocco su linux-image-486 annullato.
Blocco su linux-image-amd64 annullato.
  1. run new script
root@freepto:/home/paranoid# cat <<EOF > /lib/live/config-hooks/kernel-lock 
#!/bin/sh
dpkg -l 'linux-image-*' | awk '{ print $2 }' | grep linux-image- | xargs apt-mark hold
EOF
root@freepto:/home/paranoid# sh /lib/live/config-hooks/kernel-lock 
linux-image-2.6-486 impostato come bloccato.
linux-image-2.6-686 impostato come bloccato.
linux-image-2.6-686-bigmem impostato come bloccato.
linux-image-2.6-amd64 impostato come bloccato.
linux-image-2.6-k7 impostato come bloccato.
linux-image-2.6-openvz-686 impostato come bloccato.
linux-image-2.6-vserver-686 impostato come bloccato.
linux-image-2.6-vserver-686-bigmem impostato come bloccato.
linux-image-2.6-xen-686 impostato come bloccato.
linux-image-3.2.0-4-486 impostato come bloccato.
linux-image-3.2.0-4-amd64 impostato come bloccato.
linux-image-486 impostato come bloccato.
linux-image-amd64 impostato come bloccato.
boyska commented 9 years ago

I'll test it asap and will merge it (if confirmed). @vinc3nt can you link me a build of that commit?

ghost commented 9 years ago

http://dev.freepto.mx/dev/vinc3nt/140920_18.45_v0.1.2-STABLE-103-gf88cf0b-it/

boyska commented 9 years ago

ok, tested and merged. closing