LMDE
Revision as of 15:48, 3 April 2014 by <bdi>PhilippeTeuwen</bdi> (talk | contribs) (→Install software)
Intro
Notes while replacing my Debian by LMDE.
This included recovery of some settings so those are not notes for an install from scratch.
LMDE 201403
Installation
See http://www.linuxmint.com/download_lmde.php
Linux Mint has a nice graphical tool for manual repartitioning but not yet LMDE...
Install LMDE with manual partitioning
- it tells us we should mount target partition ourselves under /target
- crypsetup luksOpen /dev/sda1 sda1_crypt # has to be the same ref as in the crypttab later
- mount /dev/sda1_crypt /target
- continue installation
- inject proper config in /etc/crypttab and /etc/fstab
First I mount /home in /home.old (mkdir /home.old) so I can access both fresh user homedir and old one, then move content of /home into /home.old and change fstab to mount on /home next time
Add Debian repositories
LMDE is based on Debian testing but with some delay and I had quickly the issue that my chromium profile was saved by a chroimum version newer than the one in LMDE repos.
/etc/apt/sources.list.d/debian.list :
deb http://ftp.be.debian.org/debian/ jessie main contrib non-free
We need some pinning to avoid jessie taking over the LMDE repositories. The problem is that they have both the exact same keywords:
$ apt-cache policy [...] 500 http://debian.linuxmint.com/latest// testing/main amd64 Packages release o=Debian,a=testing,n=jessie,l=Debian,c=main 500 http://ftp.be.debian.org/debian/ jessie/main amd64 Packages release o=Debian,a=testing,n=jessie,l=Debian,c=main
So we can only differentiate by origin:
/etc/apt/preferences.d/debian-package-repositories.pref:
+Package: * Pin: origin ftp.be.debian.org Pin-Priority: 400
apt-get update
And to use Jessie repo e.g.:
apt-get install chromium/jessie
Add Kali repositories
Install their key:
gpg --keyserver pgpkeys.mit.edu --recv-key ED444FF07D8D0BF6 gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -
/etc/apt/sources.list.d/kali.list:
deb http://http.kali.org/kali kali main non-free contrib deb http://security.kali.org/kali-security kali/updates main contrib non-free deb http://repo.kali.org/kali kali-bleeding-edge main
$ apt-cache policy [...] 500 http://repo.kali.org/kali/ kali-bleeding-edge/main amd64 Packages release o=Kali,n=kali-bleeding-edge,c=main 500 http://security.kali.org/kali-security/ kali/updates/main amd64 Packages release o=Kali,n=kali,c=main 500 http://http.kali.org/kali/ kali/main amd64 Packages release o=Kali,a=stable,n=kali,c=main
/etc/apt/preferences.d/kali-package-repositories.pref :
Package: * Pin: release n=kali Pin-Priority: 350 Package: * Pin: release n=kali-bleeding-edge Pin-Priority: 300
apt-get update And to use Kali repo e.g.:
apt-get install apktool apt-get install libfreefare-bin/kali
Tuning
To be able to use encfs & sshfs:
adduser <myuser> fuse
Cinnamon tuning:
- pin progs to panel: drag & drop from menu
- change user picture: Settings / Account details
- Hide Icons on the Desktop: Settings / Desktop
- Add a Program Shortcut to the Mint Menu: Right-click the Mint Menu, select "Configure" then "Open the menu editor", Click a software category / "New Item".
applet Multicode System Monitor: see http://cinnamon-spices.linuxmint.com/applets/view/79
apt-get install gir1.2-gtop-2.0
Settings / Applets / Get more / search network -> NMulticode System Monitor
Right click on bar / add applets
Install software
First ones
First ones are:
etckeeper - store /etc in git, mercurial, bzr or darcs
to save /etc with git
intel-microcode - Processor microcode firmware for Intel CPUs
to fix some warnings at boot time about some missing ucode:
platform microcode: firmware: agent aborted loading intel-ucode/06-2a-07 (not found?)
debian
apt-listchanges - package change history notification tool apt-rdepends - Recursively lists package dependencies dlocate - fast alternative to dpkg -L and dpkg -S equivs - Circumvent Debian package dependencies
system tools
bridge-utils - Utilities for configuring the Linux Ethernet bridge extlinux - collection of boot loaders (ext2/3/4 and btrfs bootloader) memtest86+ - thorough real-mode memory tester openssh-server - secure shell (SSH) server, for secure access from remote machines openvpn - virtual private network daemon pcscd - Middleware to access a smart card using PC/SC (daemon side) pcsc-tools - Some tools to use with smart cards and PC/SC smartmontools - control and monitor storage systems using S.M.A.R.T. usbview - USB device viewer uuid - the Universally Unique Identifier Command-Line Tool wfrench - French dictionary words for /usr/share/dict wine - Windows API implementation - standard suite
utils
an - very fast anagram generator baobab - GNOME disk usage analyzer bleachbit - delete unnecessary files from the system calibre - e-book converter and library management comix - GTK Comic Book Viewer gnumeric - spreadsheet application for GNOME - main program gt5 - shell program to display visual disk usage with navigation htop - interactive processes viewer impressive - PDF presentation tool with eye candies iotop - simple top-like I/O monitor link-grammar - Carnegie Mellon University's link grammar parser mc - Midnight Commander - a powerful file manager mosh - Mobile shell that supports roaming and intelligent local echo polygen - generator of random sentences from grammar definitions powertop - diagnose issues with power consumption and management psutils - PostScript document handling utilities pv - Shell pipeline element to meter data passing through pyp - sed/awk-like tool with Python language screen - terminal multiplexer with VT100/ANSI terminal emulation signing-party - Various OpenPGP related tools synergy - Share mouse, keyboard and clipboard over the network transgui - Front-end to remotely control Transmission unetbootin - installer of Linux/BSD distributions to a partition or USB drive unison - file-synchronization tool for Unix and Windows wodim - command line CD/DVD writing tool
devel
ddd - The Data Display Debugger, a graphical debugger frontend dissy - graphical frontend for objdump git-annex - manage files with git, without checking their contents into git gitk - fast, scalable, distributed revision control system (revision tree visualizer) git-svn - fast, scalable, distributed revision control system (svn interoperability) gperf - Perfect hash function generator hexedit - view and edit files in hexadecimal or in ASCII indent - C language source code formatting program lua5.1 - Simple, extensible, embeddable programming language meld - graphical tool to diff and merge files nasm - General-purpose x86 assembler uncrustify - C, C++, C#, D, Java and Pawn source code beautifier wdiff - Compares two files word by word
ipython - enhanced interactive Python shell python-tk - Tkinter - Writing Tk applications with Python python-setuptools - Python Distutils Enhancements (setuptools compatibility) libpython2.7-dev - Header files and a static library for Python (v2.7)
autoconf - automatic configure script builder automake - Tool for generating GNU Standards-compliant Makefiles colormake - simple wrapper around make to colorize output libpcsclite-dev - Middleware to access a smart card using PC/SC (development files) libssl-dev - Secure Sockets Layer toolkit - development files libtool - Generic library support script libusb-1.0-0-dev - userspace USB programming library development files libusb-dev - userspace USB programming library development files
elec/embedded
android-tools-adb - Android Debug Bridge CLI tool android-tools-fastboot - Android Fastboot protocol CLI tool arduino - AVR development board IDE and built-in libraries gerbv - Gerber file viewer for PCB design multimon - Linux Radio Transmission Decoder opensc - Smart card utilities with support for PKCS#15 compatible cards rtl-sdr - Software defined radio receiver for Realtek RTL2832U (tools)
security
network
arping - sends IP and/or ARP pings (to the MAC address) dsniff - Various tools to sniff network traffic for cleartext insecurities etherwake - tool to send magic Wake-on-LAN packets iodine - tool for tunneling IPv4 data through a DNS server kismet - wireless sniffer and monitor - core kismet-plugins - wireless sniffer and monitor - plugins ndisc6 - IPv6 diagnostic tools netcat - TCP/IP swiss army knife -- transitional package netsniff-ng - packet sniffing beast nmap - The Network Mapper socat - multipurpose relay for bidirectional data transfer sshfs - filesystem client based on SSH File Transfer Protocol themole - automatic SQL injection exploitation tool
forensics
autopsy - graphical interface to SleuthKit chkrootkit - rootkit detector cruft - program that finds any cruft built up on your system dc3dd - patched version of GNU dd with forensic features dcfldd - enhanced version of dd for forensics and security ext4magic - recover deleted files from ext3 or ext4 partitions foremost - forensic program to recover lost files gpart - Guess PC disk partition table, find lost partitions logkeys - keylogger for GNU/Linux systems mac-robber - collects data about allocated files in mounted filesystems memdump - utility to dump memory contents to standard output pdfresurrect - tool for extracting/scrubbing versioning data from PDF documents recover - Undelete files on ext2 partitions recoverdm - recover files/disks with damaged sectors recoverjpeg - tool to recover JPEG images from a filesystem image rkhunter - rootkit, backdoor, sniffer and exploit scanner tiger - Report system security vulnerabilities unhide.rb - Forensic tool to find processes hidden by rootkits vinetto - A forensics tool to examine Thumbs.db files wipe - Secure file deletion vbindiff - visual binary diff, visually compare binary files
stegano
outguess - Universal Steganographic tool steghide - A steganography hiding tool
crypto
fcrackzip - password cracker for zip archives john - active password cracking tool password-gorilla - cross-platform password manager pdfcrack - PDF files password cracker ssss - Shamir's secret sharing scheme implementation rotix - A program to generate rotational obfuscations
reverse-engineering
flasm - assembler and disassembler for Flash (SWF) bytecode
coding
ckport - portability analysis and security checking tool cppcheck - tool for static C/C++ code analysis flawfinder - examines source code and looks for security weaknesses pychecker - tool to find common bugs in Python source code pylint - python code static checker and UML diagram generator
data
antiword - Converts MS Word files to text, PS and PDF cabextract - Microsoft Cabinet file unpacker catdoc - MS-Word to TeX or plain text converter dos2unix - convert text file line endings between CRLF and LF furiusisomount - ISO, IMG, BIN, MDF and NRG image management utility gpsprune - visualize, edit, convert and prune GPS data lsdvd - read the content info of a DVD mtd-utils - Memory Technology Device Utilities mtp-tools - Media Transfer Protocol (MTP) library tools page-crunch - PDF and PS manipulation for printing needs pdfchain - graphical user interface for the PDF Tool Kit pdftk - tool for manipulating PDF documents pgpdump - PGP packet visualizer pst-utils - tools for reading Microsoft Outlook PST files qprint - encoder and decoder for quoted-printable encoding recode - Character set conversion utility
audio
id3v2 - A command line id3v2 tag editor mp3blaster - Full-screen console mp3 and Ogg Vorbis player musescore - Full featured WYSIWYG score editor sox - Swiss army knife of sound processing
picture
darktable - virtual lighttable and darkroom for photographers exif - command-line utility to show EXIF information in JPEG files gifsicle - Tool for manipulating GIF images gimp-data-extras - An extra set of brushes, palettes, and gradients for The GIMP gimp-lensfun - Gimp plugin to correct lens distortion using the lensfun library gimp-texturize - generates large textures from a small sample gnuplot - Command-line driven interactive plotting program graphviz - rich set of graph drawing tools inkscape - vector-based drawing program jhead - manipulate the non-image part of Exif compliant JPEG files jpeginfo - Prints information and tests integrity of JPEG/JFIF files jpegpixi - Remove hot spots from JPEG images with minimal quality loss netpbm - Graphics conversion tools between image formats plotutils - GNU plotutils command line tools based on libplot pngtools - series of tools for PNG (Portable Network Graphics) images rawtherapee - raw image converter and digital photo processor
hugin - panorama photo stitcher - GUI tools autopano-sift-c - Automatically create control points for panorama image
video
cheese - tool to take pictures and videos from your webcam gaupol - subtitle editor for text-based subtitle files mencoder - MPlayer's Movie Encoder metacam - extract EXIF information from digital camera files mkvtoolnix - Set of command-line tools to work with Matroska files mkvtoolnix-gui - Set of tools to work with Matroska files - GUI frontend mp4tools - Suite of scripts to encode Audio and Video in many formats mpegdemux - MPEG1/2 system stream demultiplexer mplayer2 - next generation movie player for Unix-like systems
cclive - lightweight command line video extraction tool mimms - mms (e.g. mms://) stream downloader quvi - command line program to extract video download links youtube-dl - downloader of videos from YouTube and other sites
net
chromium-inspector - page inspector for the Chromium browser chromium - Chromium web browser esniper - simple, lightweight tool for sniping ebay auctions iftop - displays bandwidth usage information on an network interface ipcalc - parameter calculator for IPv4 addresses ipmitool - utility for IPMI control with kernel driver or LAN interface iptraf - Interactive Colorful IP LAN Monitor ipv6calc - small utility for manipulating IPv6 addresses mozplugger - Plugin allowing external viewers to be launched inside Mozilla subnetcalc - IPv4/IPv6 Subnet Calculator upnp-inspector - Python UPnP framework analyser upnp-router-control - UPnP compliant router manager
icedove - mail/news client with RSS and integrated spam filter support enigmail - GPG support for Thunderbird and Debian Icedove
Install special software
pwsafe
Have to backport from squeeze: get and install those
http://ftp.de.debian.org/debian/pool/main/o/openssl/libssl0.9.8_0.9.8o-4squeeze14_amd64.deb http://ftp.de.debian.org/debian/pool/main/p/pwsafe/pwsafe_0.2.0-3_amd64.deb
virtualbox
wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add - echo "deb http://download.virtualbox.org/virtualbox/debian wheezy contrib" > /etc/apt/sources.list.d/virtualbox.list apt-get update apt-get install virtualbox-4.3 /etc/init.d/vboxdrv setup
And extension pack at https://www.virtualbox.org/wiki/Downloads
google-musicmanager
https://dl.google.com/linux/direct/google-musicmanager-beta_current_amd64.deb
bp-tools
From http://www.eftlab.co.uk/index.php/downloads/bp-tools
Needs libpthread-stubs0:
http://ftp.de.debian.org/debian/pool/main/libp/libpthread-stubs/libpthread-stubs0_0.3-3_amd64.deb
apt-get install libsqlite3-dev sqlite3 dpkg --purge bp-tools dpkg -i bp-tools_14.04_amd64_free.deb
dropbox
apt-get install nemo-dropbox
To avoid autostart:
- Settings / Startup Apps Prefs / disable Dropbox
Belgian eID
cf http://eid.belgium.be/fr/utiliser_votre_eid/installer_le_logiciel_eid/linux/
-> debian 64
See also https://code.google.com/p/eid-mw/wiki/ChromeLinux :
libnss3-tools - Network Security Service tools
Close Chrome
cd modutil -dbdir sql:.pki/nssdb/ -add "Belgium eID" -libfile /usr/lib/libbeidpkcs11.so modutil -dbdir sql:.pki/nssdb/ -list
EMV-CAP
python setup.py install
And install:
python-pyscard - Python wrapper above PC/SC API
IDA Pro
See http://blog.stalkr.net/2014/01/ida-on-debian-amd64-with-python.html
Run installation file
It requires libglib2.0-0 but because of chromium/jessie we need the jessie one:
apt-get install -t jessie libglib2.0-0:i386 libselinux1:i386
apt-get install libstdc++6:i386 libc6-i686:i386 libexpat1:i386 libffi6:i386 libfontconfig1:i386 libfreetype6:i386 libgcc1:i386 libglib2.0-0:i386 \
libice6:i386 libpcre3:i386 libpng12-0:i386 libsm6:i386 libstdc++6:i386 libuuid1:i386 libx11-6:i386 libxau6:i386 libxcb1:i386 \
libxdmcp6:i386 libxext6:i386 libxrender1:i386 zlib1g:i386
apt-get install libpython2.7:i386
Skype
Take Debian 7 multiarch version: http://www.skype.com/en/download-skype/skype-for-linux/downloading/?type=debian32
dpkg -i skype-debian_4.2.0.13-1_i386.deb apt-get -f install dpkg -i skype-debian_4.2.0.13-1_i386.deb
Problem of sound? see http://forums.linuxmint.com/viewtopic.php?f=48&t=143634
Edit /etc/pulse/default.pa:
-load-module module-udev-detect +load-module module-udev-detect tsched=0
Googleearth
apt-get install googleearth-package make-googleearth-package dpkg -i googleearth_6.0.3.2197+1.1.0-1_amd64.deb apt-get -f install (dpkg -i googleearth_6.0.3.2197+1.1.0-1_amd64.deb)
Psi-plus
psi-plus - Qt-based XMPP/Jabber client (basic version) psi-plus-plugins - plugins for Psi+ libqca2-plugin-ossl - SSL/TLS support for the Qt Cryptographic Architecture
Recover backuped config:
~/.cache/psi+ ~/.config/psi+ ~/.local/share/psi+
Gogoc
gogoc - Client to connect to IPv6 tunnel brokers
Recover backuped config:
/etc/gogoc/
Avoid it to start automatically:
update-rc.d gogoc disable
logkeys
apt-get install logkeys
Find keyboard device to see which eventX to use:
grep "^[NH]" /proc/bus/input/devices
Edit /etc/default/logkeys:
ENABLED=1 LOGFILE=/var/log/logkeys DEVICE=/dev/input/event0
Avoid it to start automatically:
update-rc.d logkeys disable
Allow starting it without password prompt:
Create /etc/sudoers.d/logkeys:
<myuser> ALL = NOPASSWD: /etc/init.d/logkeys
Provide stealth hooks, under your choice name, e.g. "sl" (for mispelled "ls") etc:
#!/bin/bash sudo /etc/init.d/logkeys start >/dev/null echo "bash: $(basename $0): command not found" exit 127
#!/bin/bash sudo /etc/init.d/logkeys stop >/dev/null echo "bash: $(basename $0): command not found" exit 127
Wireshark
tshark - network traffic analyzer - console version wireshark - network traffic analyzer - GTK+ version
apt-get install wireshark tshark dpkg-reconfigure wireshark-common adduser <myuser> wireshark
GUFW
Firewall:
apt-get install gufw
Add entry in menu manually... see /usr/share/applications/gufw.desktop
Right-click the Mint Menu, select "Configure" then "Open the menu editor", Click a software category / "New Item".
libnfc
apt-get install libnfc5 libnfc-bin libnfc-examples libnfc-dev libnfc-pn53x-examples apt-get install libfreefare0 libfreefare-bin libfreefare-dev libfreefare-doc modprobe -r pn533 adduser <myuser> plugdev
Exim4
apt-get install exim4-daemon-light bsd-mailx
Check /etc/mailname for your machine FQDN
Add to /etc/aliases:
root: <myuser>
Add to /etc/email-addresses:
<myuser>: <myemail>
Add to /etc/exim4/passwd.client:
<mysmtpserver>:<myuser>:<mypwd>
Edit /etc/exim4/update-exim4.conf.conf:
+dc_eximconfig_configtype='satellite' +dc_other_hostnames= +dc_readhost='<mydomain>' +dc_smarthost='<mysmtpserver>::<mysmtpserverport>' +dc_hide_mailname='true'
mitmproxy
mitmproxy - SSL-capable man-in-the-middle HTTP proxy
apt-get install mitmproxy/jessie python-netlib/jessie
After first run of mitmproxy, certs are created.
Install ~/.mitmproxy/mitmproxy-ca-cert.cer as authority or:
Run mitmproxy, visit http://mitm.it and install certificate
PyCryptoPlus
$ git clone https://github.com/doegox/python-cryptoplus $ cd python-cryptoplus/ # python setup.py install
Install Kali software
See Kali for a full list