These packages were added at a time when debian-cd didn't resolve
Recommends to the end, so we needed to list it explicitly there. But
it's been fixed now, in debian-cd 3.1.36 (cf. #601203), so we can drop
those lines.
usr-is-merged is included in simple-cdd offline.downloads's since
version 0.6.9. Not sure why I needed to list it in installer-netinst as
well at the time, but after testing, I can confirm it's not needed
anymore.
The package exploitdb-papers was removed from kali-tools-identify in
src:kali-meta 2023.1.11, so there's no need to exclude it here anymore.
As a consequence, no need for the network during installation anymore.
Even though it's currently empty, we want users to have this component
enabled so that they don't miss on updates when we start to move
packages from non-free to non-free-firmware.
Other things that I tried, but that didn't work, below:
I tried adding the preseed to simple-cdd/profiles/kali-purple.preseed,
however that didn't work, I guess that this preseed file is loaded only
later during installation, and that at this point the GUI was already
loaded and it's too late to set the theme.
I also tried to do this in simple-cdd.conf:
# Theming
if echo " $profiles " | grep -q " kali-purple "; then
export KERNEL_PARAMS="${KERNEL_PARAMS} debian-installer/theme=Clearlooks-Purple "
fi
But it doesn't work, seemingly 'profiles' is not set when simple-cdd
loads the conf, and even though we build with the command:
build-simple-cdd [...] --profiles "$profiles" [...]
Given the fact that uppercase variables are exported, and what we
actually want to change is KERNEL_PARAMS, it seems that the most
straightforward is just to preset it from build.sh.
This profile does the following:
- it enables the elastic apt repo
- it also enables the network during installation
- finally, it makes sure to exclude the very big package
exploitdb-papers, otherwise the iso is too big (~ 6 GB)
I'm a bit surprised that we need to enable the network via a preseed
file. I thought that it would be enough to just make sure that the
installer-purple variant does NOT include the offline profile, but in
practice no, it's not enough.
With this change, we do NOT set profiles based on DISKTYPE anymore.
Instead, we set profiles (and auto_profiles) in build.sh, depending on
the variant.
This change is in preparation for next commit, where we'll introduce a
new installer variant.
Otherwise we get plenty of error messages:
DEBUG build/debian-cd stderr: Use of uninitialized value
$ENV{"NONFREE_COMPONENTS"} in split at
<<DIR>>/simple-cdd/debian-cd/tools/which_deb line 23.
Installation from the weekly installer image fails (2022-W40 and
2022-W41). From syslog:
in-target: The following packages have unmet dependencies:
in-target: king-phisher : Depends: python3-matplotlib (>= 1.4.3) but it is not installable
in-target: Recommends: python3-mpltoolkits.basemap (>= 1.0.7) but it is not installable
From a manual install, using the iso packages set in sources.list:
# apt install king-phisher
[...]
The following packages have unmet dependencies:
python3-fonttools : Depends: python3-unicodedata2 (>= 14.0.0) but it is not installable or
python3-all (>= 3.11.0) but 3.10.6-1 is to be installed
E: Unable to correct problems, you have held broken packages.
Dependency chain is as follow:
king-phisher
+-- python3-matplotlib
+-- python3-fonttools
+-- python3-unicodedata2 (>= 14.0.0) | python3-all (>= 3.11.0)
In the set of packages that are available in the iso, we don't have
python3-unicodedata2 , however we have python3-all , BUT it's at version
3.10.6-1 ... So nothing can satisfy the dependency.
For now, let's manually force python3-unicodedata2 in the iso, as a
workaround.
In a real situation, those packages are installed by the chain of
depends/recommends orca -> speech-dispatcher ->
(speech-dispatcher-espeak-ng, sound-icons).
However that chain is broken, in all likelyhood by debian-cd dependency
handling, cf. #601203.
This mention should ensure these packages are present in the generated
ISO.
Fixes: #46
In a real situation, the package is installed by a chain of recommends
pipewire-bin -> wireplumber -> pipewire-pulse and that chain is broken
either by debian-cd's dependency handling or by simple-cdd's logic to
build its local mirror. But this mention should ensure its presence in
the generated ISO.
This reverts commit d1ad9e1ea2.
The empty directory `local_packages` was there for a reason.
`simple-cdd` gives a warning when this directory doesn't exist:
WARNING local package source /home/kali/live-build-config/simple-cdd/local_packages is neither a file nor a directory
So re-instate this empty dir to keep the logs clean.
I assume that `variant-minimal` was also there for a good reason.
We recently switched from DVD to BD (Bluray Disc) because the image
didn't fit in a single layer DVD anymore and that changed broke
a further check enabling the offline logic.
We want debian-installer to see "ethX" device names and not the
other names that we have disabled via kali-defaults anyway. That
discrepancy even breaks networking for minimal installations
where /etc/network/interfaces gets the wrong name.
This ensures that they can be installed by finish-install.d/08hw-detect
when virtualization is detected. Otherwise the lack of network breaks
this step.
We move the default preseed to the kali profile so that the default
preseed can actually again enable simple-cdd-profiles that we need
because we want the other profiles to have their preseed and postinst
working (and they work through the script run when simple-cdd-profiles
is installed).
We add an offline profile that disables the network mirror (but not
the networking!) and we add a "postinst" script that is run in the
finish-install step to actually configure /etc/apt/sources.list that
is empty due to the preseed.
Arnaud Rebillout
Ben Wilson
Raphaël Hertzog
Daniel Ruiz de Alegría
Ben
Steev Klimaszewski