cymor | ignore #devuan JOINS PARTS QUITS | 16:48 |
---|---|---|
cymor | oops | 16:48 |
Ankokukishi | hello all, thank you for the help last time but the same issue came back so I got the readout from whats happening | 22:36 |
Ankokukishi | https://dpaste.org/XZ71m | 22:36 |
Ankokukishi | heres a second one that has more of the details that i didnt notice | 22:38 |
Ankokukishi | https://dpaste.org/FA7ux | 22:38 |
fsmithred | Ankokukishi, is live-boot installed? Did you install the system from a live-iso? | 23:03 |
fsmithred | I got the same error about initramfs-tools postinstall script today in daedalus. | 23:03 |
Ankokukishi | i installed from a live iso, but the iso i used was refracta 10 | 23:05 |
Ankokukishi | since im using ceres repos | 23:05 |
fsmithred | if you plan on making your own live iso and need to keep live-boot and refractasnapshot, there's a config that will fix it. | 23:06 |
fsmithred | but removing those packages will also fix it. | 23:07 |
fsmithred | in /etc/live/boot.conf (you probably need to create this file) | 23:07 |
fsmithred | DISABLE_DM_VERITY=true | 23:07 |
fsmithred | someone else fixed the same problem by installing usrmerge. I didn't want to do that. | 23:08 |
Ankokukishi | wil lthat get updates to work again? | 23:09 |
fsmithred | yes | 23:09 |
fsmithred | just went through this a few hours ago | 23:09 |
Ankokukishi | ouch | 23:09 |
fsmithred | other fix is to revert to older live-boot* packages. I tried that first. | 23:10 |
Ankokukishi | so create the boot.conf file in the /etc/live directory, not the /etc/live/boot directory? | 23:10 |
fsmithred | correct | 23:10 |
fsmithred | that's right out of live-boot man page | 23:11 |
Ankokukishi | okay created the file and added that line | 23:12 |
Ankokukishi | running update now | 23:12 |
fsmithred | I guess another fix is to figure out how to use dm-verity | 23:12 |
fsmithred | but I think that would require making a new iso | 23:13 |
Ankokukishi | okay it worked this time | 23:13 |
Ankokukishi | ouch | 23:13 |
fsmithred | yeah, more new shit for me to figure out | 23:13 |
Ankokukishi | lol | 23:13 |
Ankokukishi | any idea why initramfs is being a dick right now? | 23:15 |
Ankokukishi | it worked fine before | 23:15 |
fsmithred | did it fail again? | 23:15 |
Ankokukishi | nah its fine now | 23:15 |
Ankokukishi | just wondering if you know what the cause might be | 23:15 |
fsmithred | something to do with the changes in live-boot | 23:16 |
Ankokukishi | something upstream at debian? | 23:16 |
fsmithred | with support for dm-verity (a kernel feature) | 23:16 |
Ankokukishi | oh | 23:16 |
Ankokukishi | a kernel issue | 23:16 |
fsmithred | yeah, we don't touch live-boot | 23:16 |
fsmithred | we do fork live-config to add support for runit. | 23:16 |
Ankokukishi | so thats why at 5.17 is giving people problems and not 5.16 | 23:17 |
fsmithred | I don't think the kernel feature is new | 23:17 |
fsmithred | just live-boot's use of it | 23:17 |
Ankokukishi | ah | 23:17 |
fsmithred | and as I mentioned, someone else fixed it by installing usrmerge | 23:17 |
Ankokukishi | seems easier just to create a new conf file the way you told me right now | 23:18 |
fsmithred | The purpose of dm-verity is to implement a device mapper target capable of validating the data blocks contained in a filesystem against a list of cryptographic hash values. | 23:20 |
fsmithred | so it's a way to check that your live system (filesystem.squashf) hasn't been tampered with. | 23:21 |
Ankokukishi | ah | 23:21 |
Ankokukishi | so by creating the boot.conf file, it makes it so it goes through the proper checks | 23:22 |
fsmithred | no, it disables the checking | 23:22 |
Ankokukishi | oh | 23:22 |
Ankokukishi | opposite | 23:22 |
fsmithred | it's what you put in that conf file. There are some other options you can use. | 23:23 |
fsmithred | options to leave certain filesystem modules out of initramfs | 23:24 |
Ankokukishi | ah | 23:24 |
Ankokukishi | so you can really edit initramfs to fit your needs | 23:24 |
fsmithred | yeah, including MINIMAL=true which leaves out "some udev scripts" and rsync | 23:25 |
Ankokukishi | but by leaving those scripts out, wont it break the machine? Kinda like disabling dm-verity, doesn that leave your system open to vunerabilities? | 23:27 |
fsmithred | someone would have to replace filesystem.squashfs on your live media. | 23:28 |
Ankokukishi | oh | 23:29 |
fsmithred | if that's optical media, they can't do it. | 23:29 |
fsmithred | if it's usb, they can do it if they can borrow your usb stick. | 23:29 |
Ankokukishi | ah | 23:29 |
fsmithred | but that file is in a read-only mount when it's running. | 23:29 |
Ankokukishi | so disabling dm-verity has zero effect basically | 23:30 |
Ankokukishi | zero negative effect | 23:30 |
fsmithred | I think so. I'm not an expert. | 23:30 |
Ankokukishi | ah okay | 23:30 |
golinux | fsmithred is a magician | 23:30 |
Ankokukishi | well compared to my limited 2 or so years of linux use, you are lol | 23:30 |
fsmithred | man 8 veritysetup | 23:33 |
fsmithred | I guess with optical media it'll let you know if the CD/DVD is going bad. | 23:37 |
Ankokukishi | ah | 23:41 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!