there is a kind of controversial policy in place since aprox 2025 that (auto)removes a package.deb from debian’s official repository, if there were no changes to the package in 30 days #wtf actually X-D

  • according to AI this is the reasoning behind it:
    • If package has release-critical bug that stays unfixed too long (30 days) it can be auto-removed so it doesn’t block migration and block the release;
    • leaf packages are typically scheduled after about 15 days, and packages with reverse dependencies after about 30 days, with the timer reset by bug activity
    • package can usually go back in once the issue is fixed and migration blockers are gone

the pro:

  • this should insure that whatever a user installs via debian repo, is a secure package, with all known at that time vulnerabilities fixed

the cons:

  • this is very annoying X-D
  • for example there is currently no gui tool available for mounting veracrypt containers (after veracrypt was not developed further, zulucrypt now is autoremoved)

how this user would do it:

  • still allow users to install unsecure packages with known errors BUT PLACE A MASSIVE RED WARNING ON THE TERMINAL DURING apt install, PLEASE MIGRATE TO A DIFFERENT SOFTWARE, THIS SOFTWARE HAS KNOWN SECURITY PROBLEMS (LINK TO THE PROBLEMS) PROCEED AT USER’S OWN RISK!

how to mount veracrypt without zulucrypt or veracrypt

vim /scripts/mount_encrypted_veracrypt.sh


#!/bin/bash
echo 'with file /path/filename.veracrypt the user can find out what type of encryption is used veracrypt then use tcplay or LUKS then use cryptsetup'
echo 'then pass the /path/filename.veracrypt to script and it will ask for password and mount under /media/user/$FILENAME'
PATH_FILENAME_ENDING=$1
FILENAME_ENDING=$(basename "$PATH_FILENAME_ENDING")
FILENAME="${FILENAME_ENDING%.*}"

MOUNTPOINT="/media/user/$FILENAME"
mkdir -p $MOUNTPOINT

LOOPDEV=$(losetup -f)
losetup "$LOOPDEV" "$PATH_FILENAME_ENDING"

cryptsetup open --type tcrypt --veracrypt $LOOPDEV $FILENAME

mount /dev/mapper/$FILENAME $MOUNTPOINT

echo "when done hit enter to close encrypted volume..."
read -r

sync;
umount $MOUNTPOINT
cryptsetup close $FILENAME
losetup -d "$LOOPDEV"

how to mount luks encrypted storage?

vim /scripts/mount_encrypted_luks.sh 
#!/bin/bash
echo 'with file /path/filename.veracrypt the user can find out what type of encryption is used veracrypt then use tcplay or LUKS then use cryptsetup'
echo 'then pass the /path/filename.veracrypt to script and it will ask for password and mount under /media/user/$FILENAME'
PATH_FILENAME_ENDING=$1
FILENAME_ENDING=$(basename "$PATH_FILENAME_ENDING")
FILENAME="${FILENAME_ENDING%.*}"

MOUNTPOINT="/media/user/$FILENAME"
mkdir -p $MOUNTPOINT

cryptsetup open $PATH_FILENAME_ENDING $FILENAME

mount /dev/mapper/$FILENAME $MOUNTPOINT

read -r

umount /media/user/$FILENAME
cryptsetup close $FILENAME

how to add packports?

# according to google, but it's not working for me :(
cp -rv /etc/apt/sources.list /etc/apt/sources.list.backup
vim /etc/apt/sources.list.d/debian-backports.sources
Types: deb deb-src
URIs: http://deb.debian.org/debian
Suites: trixie-backports
Components: main
Enabled: yes
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
:wq
apt update
apt search zulucrypt; # returns nothin

https://ftp.debian.org/debian/zzz-dists/ https://ftp.debian.org/debian/pool/main/z/zulucrypt/

 

btw. something is very wrong with the wiki https://wiki.debian.org/Autoremoval

Forbidden

<p>You are not allowed to access this!</p>

maybe it was autoremoved

liked this article?

  • only together we can create a truly free world
  • plz support dwaves to keep it up & running!
  • (yes the info on the internet is (mostly) free but beer is still not free (still have to work on that))
  • really really hate advertisement
  • contribute: whenever a solution was found, blog about it for others to find!
  • talk about, recommend & link to this blog and articles
  • thanks to all who contribute!
admin