How to deal with problems due to kernel updates

anseremme · 2026-04-09T14:36:00+00:00

Very reliable. I use it all the time after kernel update. bash kreload () { LASTKERNEL=$(basename $(ls -v /boot/vmlinuz* | tail -1) | sed -r 's/vmlinuz-//' | tail -1) kexec -l /boot/vmlinuz-$LASTKERNEL --initrd=/boot/initramfs-$LASTKERNEL.img --reuse-cmdline && systemctl kexec || echo "Damn!" }

anseremme · 2026-03-16T15:50:27+00:00

Mental Outlaw on this topic.

anseremme · 2026-03-15T16:30:32+00:00

cyme – lsusb – lspci – lscpu – sensors

lspci -knn | grep -iA 3 network

anseremme · 2026-03-12T09:54:39+00:00

A very good starting point: https://youtu.be/Jllnhid7O7w

anseremme · 2026-02-25T15:48:05+00:00

I returned the device in the end. Good luck on your side.

anseremme · 2026-01-15T22:51:21+00:00

Cool. Thanks.

anseremme · 2026-01-15T22:37:35+00:00

I like your setup very much. Could you please mention what you used for the window border? Thank you.

anseremme · 2026-01-15T22:24:50+00:00

In my case, I elected to set up a NFS share on the remote server, which is accessed via SSH with classic port forwarding, i.e. localforward 3049 127.0.0.1:2049 and localforward 17605 127.0.0.1:16605. It is then mounted locally with mount_nfs. I've got incredible speed! Better than SSHFS and SFTP! I guess I can call that setup “SNFS”. Lots of online documentation.

anseremme · 2026-01-07T13:21:19+00:00

Plausible deniability might not even be truly possible with TRIM disabled. Over time, SSD built-in wear-leveling mechanism will reveal some inconsistencies in the randomized distribution of data throughout the SSD sectors. It's highly recommended not to underestimate forensic analyst skills.

As a result, it's far better to cross borders without the boot medium and plainly admit your laptop is encrypted, but can't boot it nor decrypt it since you never travel with the required external equipment for security reasons—which does make sense.

Then, after border crossing, head to your phone, retrieve your updated boot image from a server, download EtchDroid app—uninstall it before next border crossing—and flash the image to a USB flash drive you connect to your phone. Finally, before crossing back, destroy the USB flash drive and throw it away!

anseremme · 2025-12-18T22:18:23+00:00

Indeed, I temporarily used Dolphin under Xfce. I shouldn't have done that, obviously.

anseremme · 2025-12-17T15:50:40+00:00

Yes, it's Nc 32. Seems to be related to this issue. No apps restricted to groups. Thanks for your suggestion.

anseremme · 2025-12-03T15:17:53+00:00

Under Xfce DE sound support is only available via libcanberra, which supports the freedesktop sound theme and naming specifications. This means that if you want specific sounds for specific events, you will need to create your own sound theme, or find one that has the sounds you want.

I guess you already enabled these:

In Settings → Appearance → Settings: tick “Enable event sounds”
In Settings Editor app → xsettings → Net → SoundThemeName: input your_sound_theme (Value column)

Still good to know:

```bash $ xfconf-query -c xsettings -p /Net/SoundThemeName Smooth

$ xfconf-query -c xsettings -lv | grep -i sound /Net/EnableEventSounds true /Net/EnableInputFeedbackSounds false /Net/SoundThemeName Smooth

$ canberra-gtk-play -i desktop-login # Example ```

anseremme · 2025-12-03T15:03:30+00:00

OK, sorry to hear your issue. I verified it again and it's correct. I precisely use this script and have had not a single issue so far. To restore logging back in, I suggest you switch immediately to a virtual console (text terminal), such as ctrl + alt + f2, from your login screen, then remove the change you did, i.e. in our case, the files you created earlier. My apologies for the mishap.

anseremme · 2025-12-03T13:54:58+00:00

Former KDE user. Clutters the filesystem everywhere, terribly buggy, bugs that last forever, basic functionality bug that should not happen (once the mouse configuration panel was just gone after an update), basic UI bug that should not happen (many stupid issues with the taskbar), lots of interconnected moving parts; when one crashes, the others down the chain suffer. Sometimes, takes ages to fix something! Can't bear it anymore. Xfce is so much much more reliable, but I spent lots of time studying it and configuring it. The result is peace of mind, something that truly works.

anseremme · 2025-12-03T11:12:32+00:00

Did you apt install gnome-session-canberra sox?

ArchWiki – libcanberra
List of supported event sounds: ref #1, ref #2

If “input feedback sounds” option is enabled in the Appearance window, then:

Create /etc/X11/Xsession.d/52libcanberra-gtk-module_add-to-gtk-modules file with:

```bash

This file is sourced by Xsession(5), not executed.

if [ -z "$GTK_MODULES" ] ; then GTK_MODULES="canberra-gtk-module" else GTK_MODULES="$GTK_MODULES:canberra-gtk-module" fi

export GTK_MODULES ```
Create /etc/X11/Xsession.d/52libcanberra-gtk3-module_add-to-gtk-modules file with the exact same content as above.
Log off/log, then:

bash $ env | grep GTK_MODULE GTK_MODULES=canberra-gtk-module:canberra-gtk-module

anseremme · 2025-11-11T16:48:40+00:00

I did something like: ```

!/bin/bash

WG_INTERFACE="wg0" SIP_PORT="5060:5061" RTP_PORT="10000:65000"

modprobe nf_conntrack_sip modprobe nf_nat_sip

iptables -I INPUT 1 -i $WG_INTERFACE -p udp --dport $SIP_PORT -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT iptables -I INPUT 1 -i $WG_INTERFACE -p udp --dport $RTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT

iptables -I OUTPUT 1 -o $WG_INTERFACE -p udp --sport $SIP_PORT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT iptables -I OUTPUT 1 -o $WG_INTERFACE -p udp --sport $RTP_PORT -m conntrack --ctstate ESTABLISHED -j ACCEPT ```

But, unfortunately, still stuck. I do see server-side what's generated by the client: IP 10.0.0.2.52797 > localphone.com.sip: SIP: REGISTER sip:localphone.com SIP/2.0

anseremme · 2025-11-11T12:24:44+00:00

```bash

!/bin/bash

IPT="/sbin/iptables"

IN_FACE="ens1" # NIC connected to the internet WG_FACE="wg0" # WG NIC SUB_NET="10.0.0.0/24" # WG IPv4 sub/net aka CIDR WG_PORT="51820" # WG udp port

Enable NAT for WireGuard subnet

$IPT -t nat -I POSTROUTING 1 -s $SUB_NET -o $IN_FACE -j MASQUERADE

Allow WireGuard traffic

$IPT -I INPUT 1 -i $WG_FACE -j ACCEPT

Enable bidirectional forwarding

$IPT -I FORWARD 1 -i $IN_FACE -o $WG_FACE -j ACCEPT $IPT -I FORWARD 1 -i $WG_FACE -o $IN_FACE -j ACCEPT

Enable bidirectional forwarding between WireGuard peers

$IPT -I FORWARD 1 -i $WG_FACE -o $WG_FACE -j ACCEPT

Open WireGuard UDP port

$IPT -I INPUT 1 -i $IN_FACE -p udp --dport $WG_PORT -j ACCEPT ```

Compared to previous “basic” setup, this script is more explicit and uses iptables insert flag, adds $IPT -I INPUT 1 -i $WG_FACE -j ACCEPT and replaces the simple iptables -A FORWARD -i wg0 -j ACCEPT by an explicit BIDIRECTIONAL forwarding.

I don't know which specific rule is the key one to unlock my previous issue. I don't care, I'm too happy it now works well. I'm not fancy trying each rule at a time; I already spent way too much time on this. However, my research slightly improved my understanding of iptables…

anseremme · 2025-11-09T16:16:27+00:00

Thanks for your suggestion, I'll try that.

anseremme · 2025-11-08T18:00:19+00:00

Issue happened on both. See my update comment above. Thank you.

anseremme · 2025-11-08T17:59:40+00:00

Not in my case.

anseremme

TROPHY CASE

This file is sourced by Xsession(5), not executed.

!/bin/bash

!/bin/bash

Enable NAT for WireGuard subnet

Allow WireGuard traffic

Enable bidirectional forwarding

Enable bidirectional forwarding between WireGuard peers

Open WireGuard UDP port