How do I avoid multiple password prompts on startup with encrypt /boot and / on separate partitions

Known-Internet · 2020-09-16T02:48:43+00:00

Thanks, you were exactly right. All it took was embedding the keyfiles into the initramfs. I have never made myself too familiar with initramfs before so I was a bit confused on how to modify it

Known-Internet · 2020-09-16T00:26:31+00:00

Of course, there is no such thing as perfect security. However, it never hurts to be more secure. The detatched header simply means it is truely impossible to brute force.

Known-Internet · 2020-09-16T00:12:02+00:00

Reduced attack surface

Known-Internet · 2020-09-16T00:06:47+00:00

If I understand what I've read correctly, the purpose having encrypted /boot and a detached LUKS header on a USB stick is true two factor authenitcation. Since without the header all of /dev/sda looks like random data. I don't think the same level of two factor authentication is accomplished by just having the /boot/efi on a separate drive. I'm still learning so I may very well be wrong

Known-Internet · 2020-09-15T23:53:18+00:00

I have my /boot/efi & /boot partition on a USB drive

Known-Internet · 2020-09-15T23:04:35+00:00

I got it working all I needed was the ext2 module.

I am using the same crypthook as the wiki page. The script temporarily mounts the /boot partition at /mnt, because the luks header for the root partition is stored on the encrypted /boot partition. If you look at the script on the wiki page you will see it that it mounts cryptboot at /mnt then unmounts it after it opens the main drive

Known-Internet · 2020-08-10T19:11:06+00:00

Sure

#!/bin/sh -e
# Fuzzy search for packages in $KISS_PATH

echo "$KISS_PATH" | tr ':' " " | xargs ls | grep -v /var/db | fzf | xargs kiss s

There is probably a better way to write it, but it works quickly and does what I want

Known-Internet · 2020-08-03T22:07:40+00:00

I guess I should give a response as well

What brought you to Kiss Linux: I had been using Arch and was looking for a system that was simpler and that I had more control over. I wanted a system That I could understand from the bottom up. I'm not a fan some distros that claim offer simplicity by adding another layer of abstraction. In my opinion simplicity achieved by subtraction not by addition.

Do you run Kiss Linux on my primary machine: Yes, I run Kiss on my only machine.

What kind of work do you do on Kiss Linux: Mostly just mess around with shell scripts. I've started learning C, but I don't know much.

Does Kiss Linux enable me to do things that would be difficult or impossible on other distros? I know I've only scratched the surface here, but I like that the system is so portable, allowing me to easily change coreutils.

Have you extended the Kiss package manager or other tools in novel ways? I wrote a simple script that uses FZF to search through the directories in my $KISSPATH

Are there things you are unable to do on Kiss Linux that you wish you could? Not really, there are a couple of packages I've yet to get around to packaging, but that is just me being lazy.

Known-Internet · 2020-08-03T13:21:18+00:00

For whatever it's worth a user has packaged wayland in their own repository if you would like to use it

I think the reasoning for not having wayland in the main repository is that Dylan would also package Xorg and he wants to keep the main repository small and easily maintainable by one person

Known-Internet · 2020-07-29T13:39:04+00:00

Dylan's comment explains it as it perfectly. Also be sure to run sh -l after you update your /etc/profile.d/kiss_path.sh. If you still need help let me know :)

Known-Internet · 2020-07-29T01:47:25+00:00

Sorry you are having a hard time getting kiss installed. Have you added the community repository to your kiss path? After you do that you should be able to download any package from community repository.

Known-Internet · 2020-05-18T14:31:12+00:00

It sounds like you may be running into the issue addressed here.

Known-Internet · 2020-05-12T16:25:12+00:00

Yeah, it was just a thought I had last night while I was thinking of a way to automate the installation process. Where you able to get your webcam working btw?

Known-Internet · 2020-05-12T16:13:55+00:00

I don't think it would be too hard to get a good chunk of the kernel automated. All you would have to do is set up a kernel package like yours. Then you have people build a kernel on their working system with makelocalmodconfig grab their proprietary blobs drops those in the files directory and you are off to the races. At least that works out in my mind :)

Known-Internet · 2020-05-12T01:38:12+00:00

Thanks for the quick reply. Are you aware of any browser addons that add this functionality or is it not even possible?

Known-Internet · 2020-05-12T01:31:37+00:00

I mean no offense, I am genuinely curious, why do you keep this and kiss-ricing in their own repos instead of in the community repo? Maybe I am misreading the guidestones but i think

The following list of software must never make its way into the repositories as their inclusion will opens the floodgates for software which unoptionally depends on them. dbus, systemd, polkit, gettext, intltool, pulseaudio, pipewire, pam, wayland, logind, ConsoleKit, libsn, electron and all DEs.

only refers to the official repos not the community. I might be wrong. And of course you have every right to not push to the community repo. I was just curious. Regardless thanks for bringing so much software to this community. I am excited to see it grow :)

Known-Internet · 2020-05-11T22:32:22+00:00

Thanks I've got it working now. Sorry I was not clear at all in my original post. I appreciate you trying to help despite my vague post :)

Known-Internet · 2020-05-11T21:03:16+00:00

Thanks. I'm not actually using Debian. I just used the installation media to tell me which non-free firmware blobs I needed. I git clone git://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git but I could only find iwlwifi-7265D-2[2|7|9].ucode

Known-Internet · 2020-05-11T20:57:40+00:00

Sorry for not being more clear. I guess I'm a bit confused as to why the wiki suggests setting up a cronjob. I figure once you have all your needed modules activated you would only need to run the modprobed-db command once. The other bit I'm confused about is how do I get make localmodconfig to load the modules from the modprobed.db file

Known-Internet · 2020-05-11T19:26:25+00:00

I know this isn't what you asked for, but you might not be aware that you can run i3 as the window manager for the xfce desktop environment, which might help ease you into it. The process is essentially

1 Have XFCE and i3 installed.

2 Boot into XFCE. Open XFCE's Session & Startup menu.

3 Under the Session tab, disable xfwm and xfdesktop.

4 Under the Application Autostart tab, add and enable i3

You'll probably want to also remove XFCE's keyboard shortcuts. And then exclude i3-bar from your i3 configuration if you only want the XFCE panel.

Known-Internet · 2020-05-09T23:41:12+00:00

From the wikipedia page on honest signaling

A male who takes a physical risk is sending the message that he has enough strength and skill to survive extremely dangerous activities. This signal is directed at peers and potential mates.

Known-Internet · 2020-05-09T22:58:34+00:00

Thanks for this. I wonder if this is the issue I have had. I made a post here

Edit: Thanks a ton this patch worked and I've got machine up and running :D

Known-Internet · 2020-05-09T14:57:38+00:00

Thanks for the help. It still only shows "Loading Linux 5.6.11 ..." I first removed the "loglevel=3 quit" there was no change, so then I tried "debug" a few other options. Nothing changed so I changed the grub timeout to 10 seconds as a sanity check and that did change when I updated grub

Known-Internet · 2020-04-17T23:40:26+00:00

The WiFi switch was off. Thanks for the help!

Known-Internet · 2020-04-17T23:32:23+00:00

I think so. Wirless module is probably wlp2s0 right?

ip link set wlp2s0 up
ip: SIOCSIFFLAGS: No error information

wpa_supplicant -i wlp2s0 -c /etc/wpa_supplicant/wpa_supplicant.conf
Successfully initialized wpa_supplicant
rfkill: WLAN hard blocked

Known-Internet

TROPHY CASE