LMDE

From YobiWiki
Jump to navigation Jump to search

Intro

Notes while replacing my Debian by LMDE.
This included recovery of some settings so those are not notes for an install from scratch.

LMDE 201403

Installation

See http://www.linuxmint.com/download_lmde.php

Linux Mint has a nice graphical tool for manual repartitioning but not yet LMDE...
Install LMDE with manual partitioning

  • it tells us we should mount target partition ourselves under /target
  • crypsetup luksOpen /dev/sda1 sda1_crypt # has to be the same ref as in the crypttab later
  • mount /dev/sda1_crypt /target
  • continue installation
  • inject proper config in /etc/crypttab and /etc/fstab
    First I mount /home in /home.old (mkdir /home.old) so I can access both fresh user homedir and old one, then move content of /home into /home.old and change fstab to mount on /home next time

Add Debian repositories

LMDE is based on Debian testing but with some delay and I had quickly the issue that my chromium profile was saved by a chroimum version newer than the one in LMDE repos.

/etc/apt/sources.list.d/debian.list :

deb http://ftp.be.debian.org/debian/ jessie main contrib non-free
deb-src http://ftp.be.debian.org/debian/ jessie main contrib non-free

We need some pinning to avoid jessie taking over the LMDE repositories. The problem is that they have both the exact same keywords:

$ apt-cache policy
[...]
500 http://debian.linuxmint.com/latest// testing/main amd64 Packages
    release o=Debian,a=testing,n=jessie,l=Debian,c=main
500 http://ftp.be.debian.org/debian/ jessie/main amd64 Packages
    release o=Debian,a=testing,n=jessie,l=Debian,c=main

So we can only differentiate by origin:
/etc/apt/preferences.d/debian-package-repositories.pref:

+Package: *
Pin: origin ftp.be.debian.org
Pin-Priority: 400
apt-get update

And to use Jessie repo e.g.:

apt-get install chromium/jessie

Tuning

To be able to use encfs & sshfs:

adduser <myuser> fuse

Cinnamon tuning:

  • pin progs to panel: drag & drop from menu
  • change user picture: Settings / Account details
  • Hide Icons on the Desktop: Settings / Desktop
  • Add a Program Shortcut to the Mint Menu: Right-click the Mint Menu, select "Configure" then "Open the menu editor", Click a software category / "New Item".

applet Multicode System Monitor: see http://cinnamon-spices.linuxmint.com/applets/view/79

apt-get install gir1.2-gtop-2.0

Settings / Applets / Get more / search network -> NMulticode System Monitor
Right click on bar / add applets

Install software

First ones

First ones are:

etckeeper                      - store /etc in git, mercurial, bzr or darcs

to save /etc with git

intel-microcode                - Processor microcode firmware for Intel CPUs

to fix some warnings at boot time about some missing ucode:
platform microcode: firmware: agent aborted loading intel-ucode/06-2a-07 (not found?)

debian

apt-listchanges                - package change history notification tool
apt-rdepends                   - Recursively lists package dependencies
dlocate                        - fast alternative to dpkg -L and dpkg -S
equivs                         - Circumvent Debian package dependencies

system tools

bridge-utils                   - Utilities for configuring the Linux Ethernet bridge
extlinux                       - collection of boot loaders (ext2/3/4 and btrfs bootloader)
memtest86+                     - thorough real-mode memory tester
openssh-server                 - secure shell (SSH) server, for secure access from remote machines
openvpn                        - virtual private network daemon
pcscd                          - Middleware to access a smart card using PC/SC (daemon side)
pcsc-tools                     - Some tools to use with smart cards and PC/SC
smartmontools                  - control and monitor storage systems using S.M.A.R.T.
usbview                        - USB device viewer
uuid                           - the Universally Unique Identifier Command-Line Tool
wfrench                        - French dictionary words for /usr/share/dict
wine                           - Windows API implementation - standard suite

utils

an                             - very fast anagram generator
baobab                         - GNOME disk usage analyzer
bleachbit                      - delete unnecessary files from the system
calibre                        - e-book converter and library management
comix                          - GTK Comic Book Viewer
gnumeric                       - spreadsheet application for GNOME - main program
gt5                            - shell program to display visual disk usage with navigation
htop                           - interactive processes viewer
impressive                     - PDF presentation tool with eye candies
iotop                          - simple top-like I/O monitor
link-grammar                   - Carnegie Mellon University's link grammar parser
mc                             - Midnight Commander - a powerful file manager
mosh                           - Mobile shell that supports roaming and intelligent local echo
polygen                        - generator of random sentences from grammar definitions
powertop                       - diagnose issues with power consumption and management
psutils                        - PostScript document handling utilities
pv                             - Shell pipeline element to meter data passing through
pyp                            - sed/awk-like tool with Python language
screen                         - terminal multiplexer with VT100/ANSI terminal emulation
signing-party                  - Various OpenPGP related tools
synergy                        - Share mouse, keyboard and clipboard over the network
transgui                       - Front-end to remotely control Transmission
unetbootin                     - installer of Linux/BSD distributions to a partition or USB drive
unison                         - file-synchronization tool for Unix and Windows
wodim                          - command line CD/DVD writing tool

devel

ddd                            - The Data Display Debugger, a graphical debugger frontend
dissy                          - graphical frontend for objdump
git-annex                      - manage files with git, without checking their contents into git
gitk                           - fast, scalable, distributed revision control system (revision tree visualizer)
git-svn                        - fast, scalable, distributed revision control system (svn interoperability)
gperf                          - Perfect hash function generator
hexedit                        - view and edit files in hexadecimal or in ASCII
indent                         - C language source code formatting program
lua5.1                         - Simple, extensible, embeddable programming language
meld                           - graphical tool to diff and merge files
nasm                           - General-purpose x86 assembler
uncrustify                     - C, C++, C#, D, Java and Pawn source code beautifier
wdiff                          - Compares two files word by word
ipython                        - enhanced interactive Python shell
python-tk                      - Tkinter - Writing Tk applications with Python
python-setuptools              - Python Distutils Enhancements (setuptools compatibility)
libpython2.7-dev               - Header files and a static library for Python (v2.7)
autoconf                       - automatic configure script builder
automake                       - Tool for generating GNU Standards-compliant Makefiles
colormake                      - simple wrapper around make to colorize output
libpcsclite-dev                - Middleware to access a smart card using PC/SC (development files)
libssl-dev                     - Secure Sockets Layer toolkit - development files
libtool                        - Generic library support script
libusb-1.0-0-dev               - userspace USB programming library development files
libusb-dev                     - userspace USB programming library development files

elec/embedded

android-tools-adb              - Android Debug Bridge CLI tool
android-tools-fastboot         - Android Fastboot protocol CLI tool
arduino                        - AVR development board IDE and built-in libraries
gerbv                          - Gerber file viewer for PCB design
multimon                       - Linux Radio Transmission Decoder
opensc                         - Smart card utilities with support for PKCS#15 compatible cards
rtl-sdr                        - Software defined radio receiver for Realtek RTL2832U (tools)

security

network

arping                         - sends IP and/or ARP pings (to the MAC address)
dsniff                         - Various tools to sniff network traffic for cleartext insecurities
etherwake                      - tool to send magic Wake-on-LAN packets
iodine                         - tool for tunneling IPv4 data through a DNS server
kismet                         - wireless sniffer and monitor - core
kismet-plugins                 - wireless sniffer and monitor - plugins
ndisc6                         - IPv6 diagnostic tools
netcat                         - TCP/IP swiss army knife -- transitional package
netsniff-ng                    - packet sniffing beast
nmap                           - The Network Mapper
socat                          - multipurpose relay for bidirectional data transfer
sshfs                          - filesystem client based on SSH File Transfer Protocol
themole                        - automatic SQL injection exploitation tool

forensics

autopsy                        - graphical interface to SleuthKit
chkrootkit                     - rootkit detector
cruft                          - program that finds any cruft built up on your system
dc3dd                          - patched version of GNU dd with forensic features
dcfldd                         - enhanced version of dd for forensics and security
ext4magic                      - recover deleted files from ext3 or ext4 partitions
foremost                       - forensic program to recover lost files
gpart                          - Guess PC disk partition table, find lost partitions
logkeys                        - keylogger for GNU/Linux systems
mac-robber                     - collects data about allocated files in mounted filesystems
memdump                        - utility to dump memory contents to standard output
pdfresurrect                   - tool for extracting/scrubbing versioning data from PDF documents
recover                        - Undelete files on ext2 partitions
recoverdm                      - recover files/disks with damaged sectors
recoverjpeg                    - tool to recover JPEG images from a filesystem image
rkhunter                       - rootkit, backdoor, sniffer and exploit scanner
tiger                          - Report system security vulnerabilities
unhide.rb                      - Forensic tool to find processes hidden by rootkits
vinetto                        - A forensics tool to examine Thumbs.db files
wipe                           - Secure file deletion
vbindiff                       - visual binary diff, visually compare binary files

stegano

outguess                       - Universal Steganographic tool
steghide                       - A steganography hiding tool

crypto

fcrackzip                      - password cracker for zip archives
john                           - active password cracking tool
password-gorilla               - cross-platform password manager
pdfcrack                       - PDF files password cracker
ssss                           - Shamir's secret sharing scheme implementation
rotix                          - A program to generate rotational obfuscations

reverse-engineering

flasm                          - assembler and disassembler for Flash (SWF) bytecode

coding

ckport                         - portability analysis and security checking tool
cppcheck                       - tool for static C/C++ code analysis
flawfinder                     - examines source code and looks for security weaknesses
pychecker                      - tool to find common bugs in Python source code
pylint                         - python code static checker and UML diagram generator

data

antiword                       - Converts MS Word files to text, PS and PDF
cabextract                     - Microsoft Cabinet file unpacker
catdoc                         - MS-Word to TeX or plain text converter
dos2unix                       - convert text file line endings between CRLF and LF
furiusisomount                 - ISO, IMG, BIN, MDF and NRG image management utility
gpsprune                       - visualize, edit, convert and prune GPS data
lsdvd                          - read the content info of a DVD
mtd-utils                      - Memory Technology Device Utilities
mtp-tools                      - Media Transfer Protocol (MTP) library tools
page-crunch                    - PDF and PS manipulation for printing needs
pdfchain                       - graphical user interface for the PDF Tool Kit
pdftk                          - tool for manipulating PDF documents
pgpdump                        - PGP packet visualizer
pst-utils                      - tools for reading Microsoft Outlook PST files
qprint                         - encoder and decoder for quoted-printable encoding
recode                         - Character set conversion utility

audio

id3v2                          - A command line id3v2 tag editor
mp3blaster                     - Full-screen console mp3 and Ogg Vorbis player
musescore                      - Full featured WYSIWYG score editor
sox                            - Swiss army knife of sound processing

picture

darktable                      - virtual lighttable and darkroom for photographers
exif                           - command-line utility to show EXIF information in JPEG files
gifsicle                       - Tool for manipulating GIF images
gimp-data-extras               - An extra set of brushes, palettes, and gradients for The GIMP
gimp-lensfun                   - Gimp plugin to correct lens distortion using the lensfun library
gimp-texturize                 - generates large textures from a small sample
gnuplot                        - Command-line driven interactive plotting program
graphviz                       - rich set of graph drawing tools
inkscape                       - vector-based drawing program
jhead                          - manipulate the non-image part of Exif compliant JPEG files
jpeginfo                       - Prints information and tests integrity of JPEG/JFIF files
jpegpixi                       - Remove hot spots from JPEG images with minimal quality loss
netpbm                         - Graphics conversion tools between image formats
plotutils                      - GNU plotutils command line tools based on libplot
pngtools                       - series of tools for PNG (Portable Network Graphics) images
rawtherapee                    - raw image converter and digital photo processor
hugin                          - panorama photo stitcher - GUI tools
autopano-sift-c                - Automatically create control points for panorama image

video

cheese                         - tool to take pictures and videos from your webcam
gaupol                         - subtitle editor for text-based subtitle files
mencoder                       - MPlayer's Movie Encoder
metacam                        - extract EXIF information from digital camera files
mkvtoolnix                     - Set of command-line tools to work with Matroska files
mkvtoolnix-gui                 - Set of tools to work with Matroska files - GUI frontend
mp4tools                       - Suite of scripts to encode Audio and Video in many formats
mpegdemux                      - MPEG1/2 system stream demultiplexer
mplayer2                       - next generation movie player for Unix-like systems
cclive                         - lightweight command line video extraction tool
mimms                          - mms (e.g. mms://) stream downloader
quvi                           - command line program to extract video download links
youtube-dl                     - downloader of videos from YouTube and other sites

net

chromium-inspector             - page inspector for the Chromium browser
chromium                       - Chromium web browser
esniper                        - simple, lightweight tool for sniping ebay auctions
iftop                          - displays bandwidth usage information on an network interface
ipcalc                         - parameter calculator for IPv4 addresses
ipmitool                       - utility for IPMI control with kernel driver or LAN interface
iptraf                         - Interactive Colorful IP LAN Monitor
ipv6calc                       - small utility for manipulating IPv6 addresses
mozplugger                     - Plugin allowing external viewers to be launched inside Mozilla
subnetcalc                     - IPv4/IPv6 Subnet Calculator
upnp-inspector                 - Python UPnP framework analyser
upnp-router-control            - UPnP compliant router manager
icedove                        - mail/news client with RSS and integrated spam filter support
enigmail                       - GPG support for Thunderbird and Debian Icedove

Install special software

pwsafe

Have to backport from squeeze: get and install those

http://ftp.de.debian.org/debian/pool/main/o/openssl/libssl0.9.8_0.9.8o-4squeeze14_amd64.deb
http://ftp.de.debian.org/debian/pool/main/p/pwsafe/pwsafe_0.2.0-3_amd64.deb

virtualbox

wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -
echo "deb http://download.virtualbox.org/virtualbox/debian wheezy contrib" > /etc/apt/sources.list.d/virtualbox.list
apt-get update
apt-get install virtualbox-4.3
/etc/init.d/vboxdrv setup

And extension pack at https://www.virtualbox.org/wiki/Downloads

google-musicmanager

https://dl.google.com/linux/direct/google-musicmanager-beta_current_amd64.deb

bp-tools

From http://www.eftlab.co.uk/index.php/downloads/bp-tools
Needs libpthread-stubs0:

http://ftp.de.debian.org/debian/pool/main/libp/libpthread-stubs/libpthread-stubs0_0.3-3_amd64.deb
apt-get install libsqlite3-dev sqlite3
dpkg --purge bp-tools
dpkg -i bp-tools_14.04_amd64_free.deb

dropbox

apt-get install nemo-dropbox                  

To avoid autostart:

  • Settings / Startup Apps Prefs / disable Dropbox

Belgian eID

cf http://eid.belgium.be/fr/utiliser_votre_eid/installer_le_logiciel_eid/linux/
-> debian 64
See also https://code.google.com/p/eid-mw/wiki/ChromeLinux :

libnss3-tools                  - Network Security Service tools

Close Chrome

cd
modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/libbeidpkcs11.so
modutil -dbdir sql:.pki/nssdb/ -list

EMV-CAP

python setup.py install

And install:

python-pyscard                 - Python wrapper above PC/SC API

IDA Pro

See http://blog.stalkr.net/2014/01/ida-on-debian-amd64-with-python.html
Run installation file
It requires libglib2.0-0 but because of chromium/jessie we need the jessie one:

apt-get install -t jessie libglib2.0-0:i386 libselinux1:i386
apt-get install libstdc++6:i386 libc6-i686:i386 libexpat1:i386 libffi6:i386 libfontconfig1:i386 libfreetype6:i386 libgcc1:i386 libglib2.0-0:i386 \
    libice6:i386 libpcre3:i386 libpng12-0:i386 libsm6:i386 libstdc++6:i386 libuuid1:i386 libx11-6:i386 libxau6:i386 libxcb1:i386 \
    libxdmcp6:i386 libxext6:i386 libxrender1:i386 zlib1g:i386
apt-get install libpython2.7:i386

Skype

Take Debian 7 multiarch version: http://www.skype.com/en/download-skype/skype-for-linux/downloading/?type=debian32

dpkg -i skype-debian_4.2.0.13-1_i386.deb
apt-get -f install
dpkg -i skype-debian_4.2.0.13-1_i386.deb

Problem of sound? see http://forums.linuxmint.com/viewtopic.php?f=48&t=143634
Edit /etc/pulse/default.pa:

-load-module module-udev-detect
+load-module module-udev-detect tsched=0

Googleearth

apt-get install googleearth-package
make-googleearth-package
dpkg -i googleearth_6.0.3.2197+1.1.0-1_amd64.deb
apt-get -f install
(dpkg -i googleearth_6.0.3.2197+1.1.0-1_amd64.deb)

Psi-plus

psi-plus                       - Qt-based XMPP/Jabber client (basic version)
psi-plus-plugins               - plugins for Psi+
libqca2-plugin-ossl            - SSL/TLS support for the Qt Cryptographic Architecture

Recover backuped config:

~/.cache/psi+
~/.config/psi+
~/.local/share/psi+

Gogoc

gogoc                          - Client to connect to IPv6 tunnel brokers

Recover backuped config:

/etc/gogoc/

Avoid it to start automatically:

update-rc.d gogoc disable

logkeys

apt-get install logkeys

Find keyboard device to see which eventX to use:

grep "^[NH]" /proc/bus/input/devices

Edit /etc/default/logkeys:

ENABLED=1
LOGFILE=/var/log/logkeys
DEVICE=/dev/input/event0

Avoid it to start automatically:

update-rc.d logkeys disable

Allow starting it without password prompt:
Create /etc/sudoers.d/logkeys:

<myuser>     ALL = NOPASSWD: /etc/init.d/logkeys

Provide stealth hooks, under your choice name, e.g. "sl" (for mispelled "ls") etc:

#!/bin/bash
sudo /etc/init.d/logkeys start >/dev/null
echo "bash: $(basename $0): command not found"
exit 127
#!/bin/bash
sudo /etc/init.d/logkeys stop >/dev/null
echo "bash: $(basename $0): command not found"
exit 127

Wireshark

tshark                         - network traffic analyzer - console version
wireshark                      - network traffic analyzer - GTK+ version
apt-get install wireshark tshark
dpkg-reconfigure wireshark-common
adduser <myuser> wireshark

GUFW

Firewall:

apt-get install gufw

Add entry in menu manually... see /usr/share/applications/gufw.desktop
Right-click the Mint Menu, select "Configure" then "Open the menu editor", Click a software category / "New Item".

libnfc

apt-get install libnfc5 libnfc-bin libnfc-examples libnfc-dev libnfc-pn53x-examples
apt-get install libfreefare0 libfreefare-bin libfreefare-dev libfreefare-doc
modprobe -r pn533
adduser <myuser> plugdev

Exim4

apt-get install exim4-daemon-light bsd-mailx

Check /etc/mailname for your machine FQDN
Add to /etc/aliases:

root: <myuser>

Add to /etc/email-addresses:

<myuser>: <myemail>

Add to /etc/exim4/passwd.client:

<mysmtpserver>:<myuser>:<mypwd>

Edit /etc/exim4/update-exim4.conf.conf:

+dc_eximconfig_configtype='satellite'
+dc_other_hostnames=
+dc_readhost='<mydomain>'
+dc_smarthost='<mysmtpserver>::<mysmtpserverport>'
+dc_hide_mailname='true'

mitmproxy

mitmproxy                      - SSL-capable man-in-the-middle HTTP proxy

See http://mitmproxy.org/

apt-get install mitmproxy/jessie python-netlib/jessie

After first run of mitmproxy, certs are created.
Install ~/.mitmproxy/mitmproxy-ca-cert.cer as authority or:
Run mitmproxy, visit http://mitm.it and install certificate

PyCryptoPlus

$ git clone https://github.com/doegox/python-cryptoplus
$ cd python-cryptoplus/
# python setup.py install

Install Debian software

Better to pin what we always want from Debian directly:
Add to /etc/apt/preferences.d/debian-package-repositories.pref

Package: libnfc*
Pin: origin ftp.be.debian.org
Pin-Priority: 990

Package: libfreefare*
Pin: origin ftp.be.debian.org
Pin-Priority: 990

Then

apt-get install libnfc-bin libnfc-dev libnfc-examples libnfc-pn53x-examples
apt-get install libfreefare-bin libfreefare-dev libfreefare-doc

Install Kali software

See Kali for a full list and how to add this repository