aboutsummaryrefslogtreecommitdiff
path: root/docs/gnulinux
diff options
context:
space:
mode:
authorAlyssa Rosenzweig <alyssa@rosenzweig.io>2017-03-17 23:29:23 -0700
committerAlyssa Rosenzweig <alyssa@rosenzweig.io>2017-03-17 23:29:23 -0700
commit62f6c9d95fa1546bf5b3d65d8aa7da92e14c82ab (patch)
treec1e770329be2715a674c8bbfc026a17050bcf86a /docs/gnulinux
parent1eb5130a1c70a7238548d977e9c6f371c007eed7 (diff)
downloadlibrebootfr-62f6c9d95fa1546bf5b3d65d8aa7da92e14c82ab.tar.gz
librebootfr-62f6c9d95fa1546bf5b3d65d8aa7da92e14c82ab.zip
Squeeze blank
Diffstat (limited to 'docs/gnulinux')
-rw-r--r--docs/gnulinux/configuring_parabola.md56
-rw-r--r--docs/gnulinux/encrypted_debian.md27
-rw-r--r--docs/gnulinux/encrypted_parabola.md44
-rw-r--r--docs/gnulinux/grub_boot_installer.md23
-rw-r--r--docs/gnulinux/grub_cbfs.md23
-rw-r--r--docs/gnulinux/grub_hardening.md8
-rw-r--r--docs/gnulinux/index.md2
7 files changed, 0 insertions, 183 deletions
diff --git a/docs/gnulinux/configuring_parabola.md b/docs/gnulinux/configuring_parabola.md
index 23ed015f..98511883 100644
--- a/docs/gnulinux/configuring_parabola.md
+++ b/docs/gnulinux/configuring_parabola.md
@@ -9,8 +9,6 @@ uses LXDE because it's lightweight, but we recommend the *MATE* desktop
[Back to previous index](./)
-
-
Table of Contents
=================
@@ -42,8 +40,6 @@ Table of Contents
- [LXDE - battery monitor](#lxde_battery)
- [LXDE - network manager](#lxde_network)
-
-
While not strictly related to the libreboot project, this guide is
intended to be useful for those interested in installing Parabola on
their libreboot system.
@@ -59,8 +55,6 @@ will be made to maintain it.
to be made at the present date, please get in touch with the libreboot
project!**
-
-
You do not necessarily have to follow this guide word-for-word;
*parabola* is extremely flexible. The aim here is to provide a common
setup that most users will be happy with. While Parabola can seem
@@ -73,8 +67,6 @@ Paradoxically, as you get more advanced Parabola can actually become
compared to what most distributions provide. You will find over time
that other distributions tend to *get in your way*.
-
-
**This guide assumes that you already have Parabola installed. If you
have not yet installed Parabola, then [this
guide](encrypted_parabola.html) is highly recommended!**
@@ -93,8 +85,6 @@ system Linux, using the term open-source (or closed-source), and it will
sometimes recommend the use of proprietary software. You need to be
careful about this when reading anything on the Arch wiki.
-
-
Some of these steps require internet access. I'll go into networking
later but for now, I just connected my system to a switch and did:
@@ -107,8 +97,6 @@ your network then you should setup your network connection first:
[Setup network connection in Parabola](#network)
-
-
Configure pacman {#pacman_configure}
----------------
@@ -125,8 +113,6 @@ sure to read and understand this, it's very important) and
[Back to top of page.](#pagetop)
-
-
Updating Parabola {#pacman_update}
-----------------
@@ -180,8 +166,6 @@ event that they do occur.
[Back to top of page.](#pagetop)
-
-
Maintaining Parabola {#pacman_maintain}
--------------------
@@ -233,8 +217,6 @@ their equivalent in pacman:
[Back to top of page.](#pagetop)
-
-
your-freedom {#yourfreedom}
------------
@@ -249,8 +231,6 @@ continue installing *your-freedom*.
[Back to top of page.](#pagetop)
-
-
Add a user {#useradd}
----------
@@ -273,9 +253,6 @@ Set a password:
Use of the *diceware method* is recommended, for generating secure
passphrases (instead of passwords).
-
-
-
systemd
-------
@@ -351,9 +328,6 @@ Read that manpage, and then continue studying all the files.
The systemd developers tell me that it isn't usually necessary to touch
the systemd-tmpfiles utility manually at all.
-
-
-
Interesting repositories {#interesting_repos}
------------------------
@@ -383,8 +357,6 @@ repository enabled regardless.
[Back to top of page.](#pagetop)
-
-
Setup a network connection in Parabola {#network}
--------------------------------------
@@ -485,8 +457,6 @@ systemd. NetworkManager will be setup later, after installing LXDE.
[Back to top of page.](#pagetop)
-
-
System Maintenance {#system_maintain}
------------------
@@ -505,8 +475,6 @@ use it.
[Back to top of page.](#pagetop)
-
-
Configuring the desktop {#desktop}
-----------------------
@@ -518,7 +486,6 @@ provide LXDE by default.
[Back to top of page.](#pagetop)
-
### Installing Xorg {#desktop_xorg}
Based on <https://wiki.archlinux.org/index.php/Xorg>.
@@ -570,8 +537,6 @@ xorg-xclock xterm**
[Back to top of page.](#pagetop)
-
-
### Xorg keyboard layout {#desktop_kblayout}
Refer to
@@ -629,8 +594,6 @@ you use a US Qwerty keyboard, then you don't even need to do anything
[Back to top of page.](#pagetop)
-
-
### Install LXDE {#desktop_lxde}
Desktop choice isn't that important to me, so for simplicity I decided
@@ -689,8 +652,6 @@ export LANGUAGE=en\_GB.UTF-8
export LANG=en\_GB.UTF-8
-
-
# Start lxde desktop
exec startlxde
@@ -701,8 +662,6 @@ $ **chmod +x .xinitrc**
[Back to top of page.](#pagetop)
-
-
### LXDE - clock {#lxde_clock}
In **Digital Clock Settings** (right click the clock) I set the Clock
@@ -710,16 +669,12 @@ Format to *%Y/%m/%d %H:%M:%S*
[Back to top of page.](#pagetop)
-
-
### LXDE - font {#lxde_font}
NOTE TO SELF: come back to this later.
[Back to top of page.](#pagetop)
-
-
### LXDE - screenlock {#lxde_screenlock}
Arch wiki recommends to use *xscreensaver*:
@@ -735,8 +690,6 @@ menu.
[Back to top of page.](#pagetop)
-
-
### LXDE - automounting {#lxde_automount}
Refer to
@@ -746,8 +699,6 @@ I chose to ignore this for now. NOTE TO SELF: come back to this later.
[Back to top of page.](#pagetop)
-
-
### LXDE - disable suspend {#lxde_suspend}
When closing the laptop lid, the system suspends. This is annoying at
@@ -755,8 +706,6 @@ least to me. NOTE TO SELF: disable it, then document the steps here.
[Back to top of page.](#pagetop)
-
-
### LXDE - battery monitor {#lxde_battery}
Right click lxde panel and *Add/Remove Panel Items*. Click *Add* and
@@ -767,8 +716,6 @@ cursor over it, it'll show information about the battery.
[Back to top of page.](#pagetop)
-
-
### LXDE - Network Manager {#lxde_network}
Refer to <https://wiki.archlinux.org/index.php/LXDE#Network_Management>.
@@ -816,9 +763,6 @@ theme, in *lxappearance*.
[Back to top of page.](#pagetop)
-
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>
Permission is granted to copy, distribute and/or modify this document
diff --git a/docs/gnulinux/encrypted_debian.md b/docs/gnulinux/encrypted_debian.md
index 1cc6c095..297badd5 100644
--- a/docs/gnulinux/encrypted_debian.md
+++ b/docs/gnulinux/encrypted_debian.md
@@ -54,8 +54,6 @@ drive.
[Back to previous index](./)
-
-
Set a strong user password (lots of lowercase/uppercase, numbers and
symbols).
@@ -72,8 +70,6 @@ therefore optional, and not recommended. Choose 'no'.**
you will set later on. Your LUKS password should, like the user
password, be secure.**
-
-
Partitioning
============
@@ -113,8 +109,6 @@ Choose 'Manual' partitioning:
- name: **swap** (user this exact name)
- size: press enter
-
-
Further partitioning
====================
@@ -130,16 +124,12 @@ mountpoints and filesystems to use.
- done setting up partition
- Now you select 'Finished partitioning and write changes to disk'.
-
-
Kernel
======
Installation will ask what kernel you want to use. linux-generic is
fine.
-
-
Tasksel
=======
@@ -160,16 +150,12 @@ instead, which contains the most up to date versions of the Linux
kernel. These kernels are also deblobbed, like Debian's kernels, so you
can be sure that no binary blobs are present.
-
-
Postfix configuration
=====================
If asked, choose *"No Configuration"* here (or maybe you want to
select something else. It's up to you.)
-
-
Install the GRUB boot loader to the master boot record
======================================================
@@ -180,15 +166,11 @@ Choice is irrelevant here.
*You do not need to install GRUB at all, since in libreboot you are
using the GRUB payload (for libreboot) to boot your system directly.*
-
-
Clock UTC
=========
Just say 'Yes'.
-
-
Booting your system
===================
@@ -205,8 +187,6 @@ cryptdevice=/dev/mapper/matrix-rootvol:root**
grub> initrd /initrd.img
grub> **boot**
-
-
ecryptfs
========
@@ -222,8 +202,6 @@ directory from another system, so write it down and keep the note
somewhere secret. Ideally, you should memorize it and then burn the note
(or not even write it down, and memorize it still)>
-
-
Modify grub.cfg (CBFS)
======================
@@ -249,8 +227,6 @@ hardening your GRUB configuration, for security purposes.
Flash the modified ROM using [this tutorial](../install/#flashrom).
-
-
Troubleshooting
===============
@@ -262,7 +238,6 @@ station.
Further investigation revealed that it was the DVD drive causing
problems. Removing that worked around the issue.
-
"sudo wodim -prcap" shows information about the drive:
Device was not specified. Trying to find an appropriate drive...
Detected CD-R drive: /dev/sr0
@@ -339,8 +314,6 @@ problems. Removing that worked around the issue.
Does write ultra high speed CD-RW media
Does not write ultra high speed+ CD-RW media
-
-
Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>
Permission is granted to copy, distribute and/or modify this document
diff --git a/docs/gnulinux/encrypted_parabola.md b/docs/gnulinux/encrypted_parabola.md
index 51ba0b5f..e23ca3d6 100644
--- a/docs/gnulinux/encrypted_parabola.md
+++ b/docs/gnulinux/encrypted_parabola.md
@@ -34,8 +34,6 @@ drive.
[Back to previous index](./)
-
-
Boot Parabola's install environment. [How to boot a GNU+Linux
installer](grub_boot_installer.html).
@@ -51,8 +49,6 @@ to the Parabola wiki at a later date. For up to date Parabola install
guide, go to the Parabola wiki. This guide essentially cherry picks the
useful information (valid at the time of writing: 2015-08-25).
-
-
This section deals with wiping the storage device on which you plan to
install Parabola GNU+Linux. Follow these steps, but if you use an SSD,
also:
@@ -92,8 +88,6 @@ this:
(Wiping the LUKS header is important, since it has hashed passphrases
and so on. It's 'secure', but 'potentially' a risk).
-
-
Change keyboard layout
----------------------
@@ -104,8 +98,6 @@ list the available keymaps and use yours:
# loadkeys LAYOUT
For me, LAYOUT would have been dvorak-uk.
-
-
Establish an internet connection
--------------------------------
@@ -113,8 +105,6 @@ Refer to [this
guide](https://wiki.parabola.nu/Beginners%27_guide#Establish_an_internet_connection).
Wired is recommended, but wireless is also explained there.
-
-
Getting started
---------------
@@ -122,8 +112,6 @@ The beginning is based on
<https://wiki.parabolagnulinux.org/Installation_Guide>. Then I referred
to <https://wiki.archlinux.org/index.php/Partitioning> at first.
-
-
dm-mod
------
@@ -191,8 +179,6 @@ without writing it down or storing it anywhere.
Use of the *diceware method* is recommended, for generating secure
passphrases (instead of passwords).
-
-
Create LVM
----------
@@ -243,8 +229,6 @@ command:
# **lvdisplay**
-
-
Create / and swap partitions, and mount
---------------------------------------
@@ -263,8 +247,6 @@ Mount the root (/) partition:
# **mount /dev/matrix/root /mnt**
-
-
Continue with Parabola installation
-----------------------------------
@@ -342,7 +324,6 @@ following would have also made it work:
    # pacman -Sf licenses
</troubleshooting>
-
I also like to install other packages (base-devel, compilers and so on)
and wpa\_supplicant/dialog/iw/wpa\_actiond are needed for wireless after
the install:
@@ -350,8 +331,6 @@ the install:
# **pacstrap /mnt base base-devel wpa\_supplicant dialog iw
wpa\_actiond**
-
-
Configure the system
--------------------
@@ -484,8 +463,6 @@ your LUKS password.
Use of the *diceware method* is recommended, for generating secure
passphrases (instead of passwords).
-
-
Extra security tweaks
---------------------
@@ -517,8 +494,6 @@ Configure sudo - not covered here. Will be covered post-installation in
another tutorial, at a later date. If this is a single-user system, you
don't really need sudo.
-
-
Unmount, reboot!
----------------
@@ -543,8 +518,6 @@ Lock the encrypted partition (close it):
# shutdown -h now
Remove the installation media, then boot up again.
-
-
Booting from GRUB
-----------------
@@ -563,8 +536,6 @@ grub> boot
You could also make it load /boot/vmlinuz-linux-libre-grsec and
/boot/initramfs-linux-libre-grsec.img
-
-
Follow-up tutorial: configuring Parabola
----------------------------------------
@@ -580,8 +551,6 @@ means that you are in control. For more information, read [The Arch
Way](https://wiki.archlinux.org/index.php/The_Arch_Way) (Parabola also
follows it).
-
-
Modify grub.cfg inside the ROM
------------------------------
@@ -647,7 +616,6 @@ and insert the modified grubtest.cfg:
$ **./cbfstool libreboot.rom add -n grubtest.cfg -f grubtest.cfg -t
raw**
-
Now refer to <http://libreboot.org/docs/install/#flashrom>. Cd (up) to
the libreboot\_util directory and update the flash chip contents:
@@ -709,14 +677,10 @@ flashed alongside it as a *payload*):
# **pacman -R grub**
-
-
If you followed all that correctly, you should now have a fully
encrypted Parabola installation. Refer to the wiki for how to do the
rest.
-
-
Bonus: Using a key file to unlock /boot/
----------------------------------------
@@ -751,12 +715,9 @@ above! -, or add it in the kernel command line for GRUB:
# cryptkey=rootfs:/etc/mykeyfile
-
You can also place this inside the grub.cfg that exists in CBFS:
[grub\_cbfs.html](grub_cbfs.html).
-
-
Further security tips
---------------------
@@ -764,8 +725,6 @@ Further security tips
<https://wiki.parabolagnulinux.org/User:GNUtoo/laptop>
-
-
Troubleshooting
===============
@@ -777,7 +736,6 @@ station.
Further investigation revealed that it was the DVD drive causing
problems. Removing that worked around the issue.
-
"sudo wodim -prcap" shows information about the drive:
Device was not specified. Trying to find an appropriate drive...
Detected CD-R drive: /dev/sr0
@@ -854,8 +812,6 @@ problems. Removing that worked around the issue.
Does write ultra high speed CD-RW media
Does not write ultra high speed+ CD-RW media
-
-
Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>
Copyright © 2015 Jeroen Quint <jezza@diplomail.ch>
diff --git a/docs/gnulinux/grub_boot_installer.md b/docs/gnulinux/grub_boot_installer.md
index 2669aad3..4d70167e 100644
--- a/docs/gnulinux/grub_boot_installer.md
+++ b/docs/gnulinux/grub_boot_installer.md
@@ -16,14 +16,10 @@ flash drive (and *dd*).
[Back to previous index](./)
-
-
**This section is only for the GRUB payload. For depthcharge (used on
CrOS devices in libreboot), instructions have yet to be written in the
libreboot documentation.**
-
-
Prepare the USB drive (in GNU+Linux)
------------------------------------
@@ -52,7 +48,6 @@ distro ISO to it with dd. For example:
You should now be able to boot the installer from your USB drive.
Continue reading, for information about how to do that.
-
Prepare the USB drive (in NetBSD)
---------------------------------
@@ -96,9 +91,6 @@ OpenBSD installer to it with dd. For example:
You should now be able to boot the installer from your USB drive.
Continue reading, for information about how to do that.
-
-
-
Installing GNU+Linux with full disk encryption
----------------------------------------------
@@ -107,9 +99,6 @@ Installing GNU+Linux with full disk encryption
- [Installing Parabola GNU+Linux with full disk encryption (including
/boot)](encrypted_parabola.html)
-
-
-
Debian or Devuan net install?
-----------------------------
@@ -138,9 +127,6 @@ boot**
We recommend using the *MATE* desktop.
-
-
-
Booting ISOLINUX images (automatic method)
------------------------------------------
@@ -149,9 +135,6 @@ menu should appear in GRUB, showing the boot options for that distro;
this is a GRUB menu, converted from the usual ISOLINUX menu provided by
that distro.
-
-
-
Booting ISOLINUX images (manual method)
---------------------------------------
@@ -205,9 +188,6 @@ GRUB, to see a list of USB devices/partitions. Of course this will vary
from distro to distro. If you did all of that correctly, then it should
now be booting your USB drive in the way that you specified.
-
-
-
Troubleshooting
===============
@@ -249,9 +229,6 @@ This workaround was found on the page:
also work for Debian, Devuan and any other apt-get distro that provides
debian-installer (text mode) net install method.
-
-
-
Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>
Copyright © 2016 Scott Bonds <scott@ggr.com>
diff --git a/docs/gnulinux/grub_cbfs.md b/docs/gnulinux/grub_cbfs.md
index 58e9cc04..979acf10 100644
--- a/docs/gnulinux/grub_cbfs.md
+++ b/docs/gnulinux/grub_cbfs.md
@@ -29,8 +29,6 @@ depthcharge payload, ignore this section entirely.**
[Back to previous index](./)
-
-
Table of Contents
=================
@@ -45,8 +43,6 @@ Table of Contents
- [Testing](#testing)
- [Final steps](#final_steps)
-
-
Introduction
------------
@@ -67,8 +63,6 @@ If you aren't up to that then don't worry; it is possible to use a
custom GRUB menu without flashing a new image, by loading a GRUB
configuration from a partition on the main storage instead.
-
-
1st option: don't re-flash {#option1_dont_reflash}
---------------------------
@@ -107,8 +101,6 @@ for libreboot\_grub.cfg otherwise it will loop.**.
[Back to top of page.](#pagetop)
-
-
2nd option: re-flash {#option2_reflash}
--------------------
@@ -117,8 +109,6 @@ on to find out how.
[Back to top of page.](#pagetop)
-
-
Acquire the necessary utilities {#tools}
-------------------------------
@@ -131,8 +121,6 @@ available from the repositories:
[Back to top of page.](#pagetop)
-
-
Acquiring the correct ROM image {#rom}
-------------------------------
@@ -153,8 +141,6 @@ to the command, for example:
[Back to top of page.](#pagetop)
-
-
Extract grubtest.cfg from the ROM image {#extract_testconfig}
---------------------------------------
@@ -176,8 +162,6 @@ Modify the grubtest.cfg accordingly.
[Back to top of page.](#pagetop)
-
-
Re-insert the modified grubtest.cfg into the ROM image {#reinsert_modified_testconfig}
------------------------------------------------------
@@ -193,8 +177,6 @@ raw**
[Back to top of page.](#pagetop)
-
-
Testing
-------
@@ -222,8 +204,6 @@ new configuration is safe (or desirable) to use.**
[Back to top of page.](#pagetop)
-
-
Final steps {#final_steps}
-----------
@@ -240,7 +220,6 @@ $ **sed -e 's:(cbfsdisk)/grub.cfg:(cbfsdisk)/grubtest.cfg:g' -e
's:Switch to grub.cfg:Switch to grubtest.cfg:g' < grubtest.cfg >
grub.cfg**
-
Delete the grub.cfg that remained inside the ROM:
$ ./cbfstool libreboot.rom remove -n grub.cfg
@@ -256,8 +235,6 @@ boot up with your new configuration.**
[Back to top of page.](#pagetop)
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>
Copyright © 2015 Jeroen Quint <jezza@diplomail.ch>
diff --git a/docs/gnulinux/grub_hardening.md b/docs/gnulinux/grub_hardening.md
index 53749d56..141cf0ab 100644
--- a/docs/gnulinux/grub_hardening.md
+++ b/docs/gnulinux/grub_hardening.md
@@ -8,8 +8,6 @@ highly recommended by the Libreboot project.
[Back to previous index](./)
-
-
GRUB secure boot with GPG
=========================
@@ -44,8 +42,6 @@ Helpful links:
- [Coreboot GRUB security
howto](https://www.coreboot.org/GRUB2#Security)
-
-
GRUB Password
=============
@@ -137,8 +133,6 @@ an attacker wants is then just a few GRUB commands away.
As far as basic password setup is concerned we are done and we can now
move on to signing.
-
-
GPG keys
========
@@ -186,8 +180,6 @@ What remains now is to include the modifications into the image (rom):
... and flashing it.
-
-
Copyright © 2017 Fedja Beader <fedja@protonmail.ch>
Permission is granted to copy, distribute and/or modify this document
diff --git a/docs/gnulinux/index.md b/docs/gnulinux/index.md
index adf032b7..ae5d9147 100644
--- a/docs/gnulinux/index.md
+++ b/docs/gnulinux/index.md
@@ -23,8 +23,6 @@ instructions have yet to be written.**
- [How to harden your GRUB configuration, for
security](grub_hardening.html)
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>
Permission is granted to copy, distribute and/or modify this document