diff options
author | Alyssa Rosenzweig <alyssa@rosenzweig.io> | 2017-03-17 23:29:23 -0700 |
---|---|---|
committer | Alyssa Rosenzweig <alyssa@rosenzweig.io> | 2017-03-17 23:29:23 -0700 |
commit | 62f6c9d95fa1546bf5b3d65d8aa7da92e14c82ab (patch) | |
tree | c1e770329be2715a674c8bbfc026a17050bcf86a /docs/gnulinux | |
parent | 1eb5130a1c70a7238548d977e9c6f371c007eed7 (diff) | |
download | librebootfr-62f6c9d95fa1546bf5b3d65d8aa7da92e14c82ab.tar.gz librebootfr-62f6c9d95fa1546bf5b3d65d8aa7da92e14c82ab.zip |
Squeeze blank
Diffstat (limited to 'docs/gnulinux')
-rw-r--r-- | docs/gnulinux/configuring_parabola.md | 56 | ||||
-rw-r--r-- | docs/gnulinux/encrypted_debian.md | 27 | ||||
-rw-r--r-- | docs/gnulinux/encrypted_parabola.md | 44 | ||||
-rw-r--r-- | docs/gnulinux/grub_boot_installer.md | 23 | ||||
-rw-r--r-- | docs/gnulinux/grub_cbfs.md | 23 | ||||
-rw-r--r-- | docs/gnulinux/grub_hardening.md | 8 | ||||
-rw-r--r-- | docs/gnulinux/index.md | 2 |
7 files changed, 0 insertions, 183 deletions
diff --git a/docs/gnulinux/configuring_parabola.md b/docs/gnulinux/configuring_parabola.md index 23ed015f..98511883 100644 --- a/docs/gnulinux/configuring_parabola.md +++ b/docs/gnulinux/configuring_parabola.md @@ -9,8 +9,6 @@ uses LXDE because it's lightweight, but we recommend the *MATE* desktop [Back to previous index](./) - - Table of Contents ================= @@ -42,8 +40,6 @@ Table of Contents - [LXDE - battery monitor](#lxde_battery) - [LXDE - network manager](#lxde_network) - - While not strictly related to the libreboot project, this guide is intended to be useful for those interested in installing Parabola on their libreboot system. @@ -59,8 +55,6 @@ will be made to maintain it. to be made at the present date, please get in touch with the libreboot project!** - - You do not necessarily have to follow this guide word-for-word; *parabola* is extremely flexible. The aim here is to provide a common setup that most users will be happy with. While Parabola can seem @@ -73,8 +67,6 @@ Paradoxically, as you get more advanced Parabola can actually become compared to what most distributions provide. You will find over time that other distributions tend to *get in your way*. - - **This guide assumes that you already have Parabola installed. If you have not yet installed Parabola, then [this guide](encrypted_parabola.html) is highly recommended!** @@ -93,8 +85,6 @@ system Linux, using the term open-source (or closed-source), and it will sometimes recommend the use of proprietary software. You need to be careful about this when reading anything on the Arch wiki. - - Some of these steps require internet access. I'll go into networking later but for now, I just connected my system to a switch and did: @@ -107,8 +97,6 @@ your network then you should setup your network connection first: [Setup network connection in Parabola](#network) - - Configure pacman {#pacman_configure} ---------------- @@ -125,8 +113,6 @@ sure to read and understand this, it's very important) and [Back to top of page.](#pagetop) - - Updating Parabola {#pacman_update} ----------------- @@ -180,8 +166,6 @@ event that they do occur. [Back to top of page.](#pagetop) - - Maintaining Parabola {#pacman_maintain} -------------------- @@ -233,8 +217,6 @@ their equivalent in pacman: [Back to top of page.](#pagetop) - - your-freedom {#yourfreedom} ------------ @@ -249,8 +231,6 @@ continue installing *your-freedom*. [Back to top of page.](#pagetop) - - Add a user {#useradd} ---------- @@ -273,9 +253,6 @@ Set a password: Use of the *diceware method* is recommended, for generating secure passphrases (instead of passwords). - - - systemd ------- @@ -351,9 +328,6 @@ Read that manpage, and then continue studying all the files. The systemd developers tell me that it isn't usually necessary to touch the systemd-tmpfiles utility manually at all. - - - Interesting repositories {#interesting_repos} ------------------------ @@ -383,8 +357,6 @@ repository enabled regardless. [Back to top of page.](#pagetop) - - Setup a network connection in Parabola {#network} -------------------------------------- @@ -485,8 +457,6 @@ systemd. NetworkManager will be setup later, after installing LXDE. [Back to top of page.](#pagetop) - - System Maintenance {#system_maintain} ------------------ @@ -505,8 +475,6 @@ use it. [Back to top of page.](#pagetop) - - Configuring the desktop {#desktop} ----------------------- @@ -518,7 +486,6 @@ provide LXDE by default. [Back to top of page.](#pagetop) - ### Installing Xorg {#desktop_xorg} Based on <https://wiki.archlinux.org/index.php/Xorg>. @@ -570,8 +537,6 @@ xorg-xclock xterm** [Back to top of page.](#pagetop) - - ### Xorg keyboard layout {#desktop_kblayout} Refer to @@ -629,8 +594,6 @@ you use a US Qwerty keyboard, then you don't even need to do anything [Back to top of page.](#pagetop) - - ### Install LXDE {#desktop_lxde} Desktop choice isn't that important to me, so for simplicity I decided @@ -689,8 +652,6 @@ export LANGUAGE=en\_GB.UTF-8 export LANG=en\_GB.UTF-8 - - # Start lxde desktop exec startlxde @@ -701,8 +662,6 @@ $ **chmod +x .xinitrc** [Back to top of page.](#pagetop) - - ### LXDE - clock {#lxde_clock} In **Digital Clock Settings** (right click the clock) I set the Clock @@ -710,16 +669,12 @@ Format to *%Y/%m/%d %H:%M:%S* [Back to top of page.](#pagetop) - - ### LXDE - font {#lxde_font} NOTE TO SELF: come back to this later. [Back to top of page.](#pagetop) - - ### LXDE - screenlock {#lxde_screenlock} Arch wiki recommends to use *xscreensaver*: @@ -735,8 +690,6 @@ menu. [Back to top of page.](#pagetop) - - ### LXDE - automounting {#lxde_automount} Refer to @@ -746,8 +699,6 @@ I chose to ignore this for now. NOTE TO SELF: come back to this later. [Back to top of page.](#pagetop) - - ### LXDE - disable suspend {#lxde_suspend} When closing the laptop lid, the system suspends. This is annoying at @@ -755,8 +706,6 @@ least to me. NOTE TO SELF: disable it, then document the steps here. [Back to top of page.](#pagetop) - - ### LXDE - battery monitor {#lxde_battery} Right click lxde panel and *Add/Remove Panel Items*. Click *Add* and @@ -767,8 +716,6 @@ cursor over it, it'll show information about the battery. [Back to top of page.](#pagetop) - - ### LXDE - Network Manager {#lxde_network} Refer to <https://wiki.archlinux.org/index.php/LXDE#Network_Management>. @@ -816,9 +763,6 @@ theme, in *lxappearance*. [Back to top of page.](#pagetop) - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org> Permission is granted to copy, distribute and/or modify this document diff --git a/docs/gnulinux/encrypted_debian.md b/docs/gnulinux/encrypted_debian.md index 1cc6c095..297badd5 100644 --- a/docs/gnulinux/encrypted_debian.md +++ b/docs/gnulinux/encrypted_debian.md @@ -54,8 +54,6 @@ drive. [Back to previous index](./) - - Set a strong user password (lots of lowercase/uppercase, numbers and symbols). @@ -72,8 +70,6 @@ therefore optional, and not recommended. Choose 'no'.** you will set later on. Your LUKS password should, like the user password, be secure.** - - Partitioning ============ @@ -113,8 +109,6 @@ Choose 'Manual' partitioning: - name: **swap** (user this exact name) - size: press enter - - Further partitioning ==================== @@ -130,16 +124,12 @@ mountpoints and filesystems to use. - done setting up partition - Now you select 'Finished partitioning and write changes to disk'. - - Kernel ====== Installation will ask what kernel you want to use. linux-generic is fine. - - Tasksel ======= @@ -160,16 +150,12 @@ instead, which contains the most up to date versions of the Linux kernel. These kernels are also deblobbed, like Debian's kernels, so you can be sure that no binary blobs are present. - - Postfix configuration ===================== If asked, choose *"No Configuration"* here (or maybe you want to select something else. It's up to you.) - - Install the GRUB boot loader to the master boot record ====================================================== @@ -180,15 +166,11 @@ Choice is irrelevant here. *You do not need to install GRUB at all, since in libreboot you are using the GRUB payload (for libreboot) to boot your system directly.* - - Clock UTC ========= Just say 'Yes'. - - Booting your system =================== @@ -205,8 +187,6 @@ cryptdevice=/dev/mapper/matrix-rootvol:root** grub> initrd /initrd.img grub> **boot** - - ecryptfs ======== @@ -222,8 +202,6 @@ directory from another system, so write it down and keep the note somewhere secret. Ideally, you should memorize it and then burn the note (or not even write it down, and memorize it still)> - - Modify grub.cfg (CBFS) ====================== @@ -249,8 +227,6 @@ hardening your GRUB configuration, for security purposes. Flash the modified ROM using [this tutorial](../install/#flashrom). - - Troubleshooting =============== @@ -262,7 +238,6 @@ station. Further investigation revealed that it was the DVD drive causing problems. Removing that worked around the issue. - "sudo wodim -prcap" shows information about the drive: Device was not specified. Trying to find an appropriate drive... Detected CD-R drive: /dev/sr0 @@ -339,8 +314,6 @@ problems. Removing that worked around the issue. Does write ultra high speed CD-RW media Does not write ultra high speed+ CD-RW media - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org> Permission is granted to copy, distribute and/or modify this document diff --git a/docs/gnulinux/encrypted_parabola.md b/docs/gnulinux/encrypted_parabola.md index 51ba0b5f..e23ca3d6 100644 --- a/docs/gnulinux/encrypted_parabola.md +++ b/docs/gnulinux/encrypted_parabola.md @@ -34,8 +34,6 @@ drive. [Back to previous index](./) - - Boot Parabola's install environment. [How to boot a GNU+Linux installer](grub_boot_installer.html). @@ -51,8 +49,6 @@ to the Parabola wiki at a later date. For up to date Parabola install guide, go to the Parabola wiki. This guide essentially cherry picks the useful information (valid at the time of writing: 2015-08-25). - - This section deals with wiping the storage device on which you plan to install Parabola GNU+Linux. Follow these steps, but if you use an SSD, also: @@ -92,8 +88,6 @@ this: (Wiping the LUKS header is important, since it has hashed passphrases and so on. It's 'secure', but 'potentially' a risk). - - Change keyboard layout ---------------------- @@ -104,8 +98,6 @@ list the available keymaps and use yours: # loadkeys LAYOUT For me, LAYOUT would have been dvorak-uk. - - Establish an internet connection -------------------------------- @@ -113,8 +105,6 @@ Refer to [this guide](https://wiki.parabola.nu/Beginners%27_guide#Establish_an_internet_connection). Wired is recommended, but wireless is also explained there. - - Getting started --------------- @@ -122,8 +112,6 @@ The beginning is based on <https://wiki.parabolagnulinux.org/Installation_Guide>. Then I referred to <https://wiki.archlinux.org/index.php/Partitioning> at first. - - dm-mod ------ @@ -191,8 +179,6 @@ without writing it down or storing it anywhere. Use of the *diceware method* is recommended, for generating secure passphrases (instead of passwords). - - Create LVM ---------- @@ -243,8 +229,6 @@ command: # **lvdisplay** - - Create / and swap partitions, and mount --------------------------------------- @@ -263,8 +247,6 @@ Mount the root (/) partition: # **mount /dev/matrix/root /mnt** - - Continue with Parabola installation ----------------------------------- @@ -342,7 +324,6 @@ following would have also made it work: # pacman -Sf licenses </troubleshooting> - I also like to install other packages (base-devel, compilers and so on) and wpa\_supplicant/dialog/iw/wpa\_actiond are needed for wireless after the install: @@ -350,8 +331,6 @@ the install: # **pacstrap /mnt base base-devel wpa\_supplicant dialog iw wpa\_actiond** - - Configure the system -------------------- @@ -484,8 +463,6 @@ your LUKS password. Use of the *diceware method* is recommended, for generating secure passphrases (instead of passwords). - - Extra security tweaks --------------------- @@ -517,8 +494,6 @@ Configure sudo - not covered here. Will be covered post-installation in another tutorial, at a later date. If this is a single-user system, you don't really need sudo. - - Unmount, reboot! ---------------- @@ -543,8 +518,6 @@ Lock the encrypted partition (close it): # shutdown -h now Remove the installation media, then boot up again. - - Booting from GRUB ----------------- @@ -563,8 +536,6 @@ grub> boot You could also make it load /boot/vmlinuz-linux-libre-grsec and /boot/initramfs-linux-libre-grsec.img - - Follow-up tutorial: configuring Parabola ---------------------------------------- @@ -580,8 +551,6 @@ means that you are in control. For more information, read [The Arch Way](https://wiki.archlinux.org/index.php/The_Arch_Way) (Parabola also follows it). - - Modify grub.cfg inside the ROM ------------------------------ @@ -647,7 +616,6 @@ and insert the modified grubtest.cfg: $ **./cbfstool libreboot.rom add -n grubtest.cfg -f grubtest.cfg -t raw** - Now refer to <http://libreboot.org/docs/install/#flashrom>. Cd (up) to the libreboot\_util directory and update the flash chip contents: @@ -709,14 +677,10 @@ flashed alongside it as a *payload*): # **pacman -R grub** - - If you followed all that correctly, you should now have a fully encrypted Parabola installation. Refer to the wiki for how to do the rest. - - Bonus: Using a key file to unlock /boot/ ---------------------------------------- @@ -751,12 +715,9 @@ above! -, or add it in the kernel command line for GRUB: # cryptkey=rootfs:/etc/mykeyfile - You can also place this inside the grub.cfg that exists in CBFS: [grub\_cbfs.html](grub_cbfs.html). - - Further security tips --------------------- @@ -764,8 +725,6 @@ Further security tips <https://wiki.parabolagnulinux.org/User:GNUtoo/laptop> - - Troubleshooting =============== @@ -777,7 +736,6 @@ station. Further investigation revealed that it was the DVD drive causing problems. Removing that worked around the issue. - "sudo wodim -prcap" shows information about the drive: Device was not specified. Trying to find an appropriate drive... Detected CD-R drive: /dev/sr0 @@ -854,8 +812,6 @@ problems. Removing that worked around the issue. Does write ultra high speed CD-RW media Does not write ultra high speed+ CD-RW media - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org> Copyright © 2015 Jeroen Quint <jezza@diplomail.ch> diff --git a/docs/gnulinux/grub_boot_installer.md b/docs/gnulinux/grub_boot_installer.md index 2669aad3..4d70167e 100644 --- a/docs/gnulinux/grub_boot_installer.md +++ b/docs/gnulinux/grub_boot_installer.md @@ -16,14 +16,10 @@ flash drive (and *dd*). [Back to previous index](./) - - **This section is only for the GRUB payload. For depthcharge (used on CrOS devices in libreboot), instructions have yet to be written in the libreboot documentation.** - - Prepare the USB drive (in GNU+Linux) ------------------------------------ @@ -52,7 +48,6 @@ distro ISO to it with dd. For example: You should now be able to boot the installer from your USB drive. Continue reading, for information about how to do that. - Prepare the USB drive (in NetBSD) --------------------------------- @@ -96,9 +91,6 @@ OpenBSD installer to it with dd. For example: You should now be able to boot the installer from your USB drive. Continue reading, for information about how to do that. - - - Installing GNU+Linux with full disk encryption ---------------------------------------------- @@ -107,9 +99,6 @@ Installing GNU+Linux with full disk encryption - [Installing Parabola GNU+Linux with full disk encryption (including /boot)](encrypted_parabola.html) - - - Debian or Devuan net install? ----------------------------- @@ -138,9 +127,6 @@ boot** We recommend using the *MATE* desktop. - - - Booting ISOLINUX images (automatic method) ------------------------------------------ @@ -149,9 +135,6 @@ menu should appear in GRUB, showing the boot options for that distro; this is a GRUB menu, converted from the usual ISOLINUX menu provided by that distro. - - - Booting ISOLINUX images (manual method) --------------------------------------- @@ -205,9 +188,6 @@ GRUB, to see a list of USB devices/partitions. Of course this will vary from distro to distro. If you did all of that correctly, then it should now be booting your USB drive in the way that you specified. - - - Troubleshooting =============== @@ -249,9 +229,6 @@ This workaround was found on the page: also work for Debian, Devuan and any other apt-get distro that provides debian-installer (text mode) net install method. - - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org> Copyright © 2016 Scott Bonds <scott@ggr.com> diff --git a/docs/gnulinux/grub_cbfs.md b/docs/gnulinux/grub_cbfs.md index 58e9cc04..979acf10 100644 --- a/docs/gnulinux/grub_cbfs.md +++ b/docs/gnulinux/grub_cbfs.md @@ -29,8 +29,6 @@ depthcharge payload, ignore this section entirely.** [Back to previous index](./) - - Table of Contents ================= @@ -45,8 +43,6 @@ Table of Contents - [Testing](#testing) - [Final steps](#final_steps) - - Introduction ------------ @@ -67,8 +63,6 @@ If you aren't up to that then don't worry; it is possible to use a custom GRUB menu without flashing a new image, by loading a GRUB configuration from a partition on the main storage instead. - - 1st option: don't re-flash {#option1_dont_reflash} --------------------------- @@ -107,8 +101,6 @@ for libreboot\_grub.cfg otherwise it will loop.**. [Back to top of page.](#pagetop) - - 2nd option: re-flash {#option2_reflash} -------------------- @@ -117,8 +109,6 @@ on to find out how. [Back to top of page.](#pagetop) - - Acquire the necessary utilities {#tools} ------------------------------- @@ -131,8 +121,6 @@ available from the repositories: [Back to top of page.](#pagetop) - - Acquiring the correct ROM image {#rom} ------------------------------- @@ -153,8 +141,6 @@ to the command, for example: [Back to top of page.](#pagetop) - - Extract grubtest.cfg from the ROM image {#extract_testconfig} --------------------------------------- @@ -176,8 +162,6 @@ Modify the grubtest.cfg accordingly. [Back to top of page.](#pagetop) - - Re-insert the modified grubtest.cfg into the ROM image {#reinsert_modified_testconfig} ------------------------------------------------------ @@ -193,8 +177,6 @@ raw** [Back to top of page.](#pagetop) - - Testing ------- @@ -222,8 +204,6 @@ new configuration is safe (or desirable) to use.** [Back to top of page.](#pagetop) - - Final steps {#final_steps} ----------- @@ -240,7 +220,6 @@ $ **sed -e 's:(cbfsdisk)/grub.cfg:(cbfsdisk)/grubtest.cfg:g' -e 's:Switch to grub.cfg:Switch to grubtest.cfg:g' < grubtest.cfg > grub.cfg** - Delete the grub.cfg that remained inside the ROM: $ ./cbfstool libreboot.rom remove -n grub.cfg @@ -256,8 +235,6 @@ boot up with your new configuration.** [Back to top of page.](#pagetop) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org> Copyright © 2015 Jeroen Quint <jezza@diplomail.ch> diff --git a/docs/gnulinux/grub_hardening.md b/docs/gnulinux/grub_hardening.md index 53749d56..141cf0ab 100644 --- a/docs/gnulinux/grub_hardening.md +++ b/docs/gnulinux/grub_hardening.md @@ -8,8 +8,6 @@ highly recommended by the Libreboot project. [Back to previous index](./) - - GRUB secure boot with GPG ========================= @@ -44,8 +42,6 @@ Helpful links: - [Coreboot GRUB security howto](https://www.coreboot.org/GRUB2#Security) - - GRUB Password ============= @@ -137,8 +133,6 @@ an attacker wants is then just a few GRUB commands away. As far as basic password setup is concerned we are done and we can now move on to signing. - - GPG keys ======== @@ -186,8 +180,6 @@ What remains now is to include the modifications into the image (rom): ... and flashing it. - - Copyright © 2017 Fedja Beader <fedja@protonmail.ch> Permission is granted to copy, distribute and/or modify this document diff --git a/docs/gnulinux/index.md b/docs/gnulinux/index.md index adf032b7..ae5d9147 100644 --- a/docs/gnulinux/index.md +++ b/docs/gnulinux/index.md @@ -23,8 +23,6 @@ instructions have yet to be written.** - [How to harden your GRUB configuration, for security](grub_hardening.html) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org> Permission is granted to copy, distribute and/or modify this document |