After the release upgrade to kicksecure 18, I noticed several packages weren’t installed. I’m beeing using KDE with kicksecure correctly since the release, no problems after months. But I noticed the following packages aren’t installed, I would like to know the severity to don’t have each of these packages installed and if I should try to install them.
> sudo apt list --installed | grep -i kicksecure
WARNING: apt does not have a stable CLI interface. Use with caution in scripts.
apparmor-profiles-kicksecure/unknown,now 3:36.0-1 all [installed]
kicksecure-baremetal-cli/unknown,now 3:36.0-1 all [installed]
kicksecure-base-files/unknown,now 3:10.3-1 all [installed]
kicksecure-cli/now 3:32.3-1 all [installed,local]
kicksecure-default-applications-cli/now 3:32.3-1 all [installed,local]
kicksecure-dependencies-cli/now 3:32.3-1 all [installed,local]
kicksecure-dependencies-system/now 3:32.3-1 all [installed,local]
kicksecure-network-conf/unknown,now 3:6.9-1 all [installed]
kicksecure-packages-dependencies-pre/unknown,now 3:36.0-1 all [installed]
kicksecure-recommended-cli/now 3:32.3-1 all [installed,local]
kicksecure-welcome-page/unknown,now 3:7.7-1 all [installed]
❯ sudo apt install kicksecure-baremetal-server
The following packages were automatically installed and are no longer required:
dracut-config-generic exim4-config libluajit-5.1-common libnsl2 libunibilium4 lua-lpeg python3-greenlet
exim4-base libluajit-5.1-2 libmsgpack-c2 libtree-sitter0.22 libvterm0 lua-luv python3-pynvim
Use 'sudo apt autoremove' to remove them.
Installing:
kicksecure-baremetal-server
Installing dependencies:
dist-baremetal-cli dist-general-server dummy-dependency-mta kicksecure-general-cli liblinear4 nmap-common security-misc-server vm-config-dist
dist-general-cli dist-nonqubes-cli extrepo-offline-data kicksecure-nonqubes-cli nmap python3-pyudev tor-ctrl
Suggested packages:
liblinear-tools liblinear-dev ncat ndiff zenmap python3-wxgtk4.0
REMOVING:
exim4-daemon-light kicksecure-default-applications-cli kicksecure-dependencies-system non-qubes-enhancements-cli
kicksecure-cli kicksecure-dependencies-cli kicksecure-recommended-cli non-qubes-enhancements-gui
Summary:
Upgrading: 0, Installing: 16, Removing: 8, Not Upgrading: 0
You should install the suggested packages. This is necessary to ensure software updates work as intended going forward. See:
The only danger I can see looking at the upgrade is that exim4-daemon-light will be removed. If this server is a mail server and you’re actually using exim4-daemon-light, that may not be what you want. You can run the upgrade, remove dummy-dependency-mta, and then reinstall the mail server using these instructions:
If the machine is not a mail server however, this is expected and you should allow that package to be removed without reinstalling it.
As always, make sure you have backups, and be prepared for the server to be hard to access after an update. Make sure you can gain access to the server without SSH, just in case something goes awry.
At the moment, yes. We will likely make kicksecure-baremetal-cli (and some of the other -cli metapackages) suitable for direct installation in the near future.
Okey, it will be great.
And would be good too to document a little better the differences between the cli and the server version, but not just say that one is for server and the other is for client, that we are seeing the good one is the kicksecure-baremetal-server in both cases. Explain too which functionalities or packages has one and not the others.
18: kicksecure-baremetal-cli for physical hardware
18: kicksecure-baremetal-server for physical hardware
There is a ISO for server without lxqt available, without interface? I couldn’t find it.
There isn’t an ISO, no. We don’t have any CLI-mode installer, so an ISO
would make little sense. We do have CLI VM images for VirtualBox and KVM,
but both of those are using the ‘kicksecure-vm-server’ metapackage I
believe.
Yea, I’m testing the KDE installation in a machine with the KVM Client version. But I can’t reproduce it in a baremetal because de default ISO come with lxqt. I’m testing purging lxqt and replacing with other environment but it’s more job and time