Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Testing IIAB on the new Debian 11 "Bullseye" Release Candidate(s) [and Haiti content discussion] #2749

Closed
holta opened this issue Apr 23, 2021 · 51 comments

Comments

@holta
Copy link
Member

holta commented Apr 23, 2021

Debian 11 Release Candidate 1 was released today!

https://www.debian.org/devel/debian-installer/

Two years later, this Debian 11 ("Bullseye") should be the basis for the new Raspberry Pi OS 11 (formerly known as Raspbian) in coming weeks/months...

We're likely already in extremely good shape here, thanks to hard work from @deldesir and @jvonau starting back in October 2020.

But of course final testing in coming weeks will be critical as this converges~

Refs:

@holta holta added this to the 7.2 milestone Apr 23, 2021
@holta holta changed the title Testing IIAB on the new Debian 11 Bullseye Release Candidate(s) Testing IIAB on the new Debian 11 "Bullseye" Release Candidate(s) Apr 23, 2021
@jvonau
Copy link
Contributor

jvonau commented Apr 23, 2021

Known issue on desktop with 2 or more internet devices #2658
Proposed fix #2693

@holta holta mentioned this issue Apr 23, 2021
@holta
Copy link
Member Author

holta commented Apr 23, 2021

Just FYI "Errata for Bullseye RC 1"
https://www.debian.org/devel/debian-installer/errata

@holta
Copy link
Member Author

holta commented May 21, 2021

FWIW a colorful graph of Debian "release-critical" bugs over the past 4 years:

https://bugs.debian.org/release-critical/

And over the past 30 days:

https://bugs.debian.org/release-critical/graph-month.png

(Neither makes clear when Debian 11 "Bullseye" will be released — but they will give some clues in coming weeks!)

@holta
Copy link
Member Author

holta commented Jun 14, 2021

Debian 11 "Bullseye" is converging more slowly than prior versions. It will enter "Full Freeze" on Saturday 2021-07-17. Possibly this means an August release?

https://lists.debian.org/debian-devel-announce/2021/06/msg00000.html

I assume Raspberry Pi OS 11 (announced for Q2 2021) will likewise be somewhat delayed, as a result.

@holta
Copy link
Member Author

holta commented Jun 14, 2021

Debian 11 Release Candidate 2 is now official:

https://lists.debian.org/debian-devel-announce/2021/06/msg00001.html

@kmw
Copy link

kmw commented Jun 19, 2021

I tried installing iiab on https://raspi.debian.net/verified/20210413_raspi_4_bullseye.img.xz and it didn't work. Has anyone else done anything with this image? I see the Debian 11 Release Candidate 2 is now official but where can I download it.
I'm headed to Haiti late tomorrow and I'm scrambling to get a French based iiab on 64g and 128g cards. Maybe I should stick to debian 10 for now.

@holta
Copy link
Member Author

holta commented Jun 19, 2021

@kmw stick with 32-bit Raspberry Pi OS (based on Debian 10 Buster) if you can?

That is by far the most heavily tested!

Also: see http://iiab.me/haiti for example content you might want to download?

Keep in Touch!

@kmw
Copy link

kmw commented Jun 19, 2021 via email

@holta
Copy link
Member Author

holta commented Jun 19, 2021

how do I install the http://iiab.me/haiti ? Do I need to locate and select each package from a list or is there a script or way to grab all of them at once?

They will not all fit within 64G or 128G.

But one subset is available (approx 100G) if you do Admin Console (http://box.lan/admin) -> Install Content -> Quick Pick -> School with Instruction in French.

PS Debian 11 Bullseye is tentatively scheduled for release on 2021-07-31: https://release.debian.org

@kmw
Copy link

kmw commented Jun 19, 2021 via email

@holta
Copy link
Member Author

holta commented Jun 19, 2021

But one subset is available (approx 100G) if you use Admin Console -> Install Content -> Quick Pick -> School with Instruction in French.

Also beware the above is very new! Picking your own Content Packs (within Admin Console -> Install Content) is the safest way especially if you're targeting an exact total size in GB (e.g. 50 of a 64GB microSD card? Or 100 of a 128GB microSD card?)

@holta holta changed the title Testing IIAB on the new Debian 11 "Bullseye" Release Candidate(s) Testing IIAB on the new Debian 11 "Bullseye" Release Candidate(s) [and Haiti content discussion] Jun 19, 2021
@kmw
Copy link

kmw commented Jun 19, 2021 via email

@holta
Copy link
Member Author

holta commented Jun 19, 2021

I do not see Quick Pick.

Possibly you should install a fresh copy of Internet-in-a-Box on a fresh OS:

curl d.iiab.io/install.txt | sudo bash

(This and other changes were mainlined about 4 days ago.)

@kmw
Copy link

kmw commented Jun 19, 2021 via email

@holta
Copy link
Member Author

holta commented Jun 19, 2021

ok I'll do debian 10 https://raspi.debian.net/daily/raspi_4_buster.img.xz

I don't know anything about the above image.

FYI these are the 3 OS images (32-bit Raspberry Pi OS, based on Debian 10) that are regularly tested:

https://www.raspberrypi.org/software/operating-systems/

@holta
Copy link
Member Author

holta commented Jul 9, 2021

@kmw @deldesir @jvonau and others: while IIAB does not support Debian 11 ("Bullseye") on Raspberry Pi hardware as of today (it has glitches apparently?) but here are links for those that might want to get involved in making this work:

https://wiki.debian.org/RaspberryPi4

Whether or not Raspberry Pi OS 11 is released in the coming days, e.g. if the Raspberry Pi Foundation might possibly be solving these issues in own way?!

@kmw
Copy link

kmw commented Jul 9, 2021 via email

@deltacloud9
Copy link

deltacloud9 commented Jul 21, 2021

Current install of Debian 11 seems to be running smoothly.

Current diagnostics: http://sprunge.us/uA1dn5?en

When rebuilding this VM I set the network to bridged network. (I think it was having issues when trying to change it later after the VM was created).

@jvonau
Copy link
Contributor

jvonau commented Jul 21, 2021

This strongly suggests that the iiab install script should probably be saved to /usr/bin — instead of the current /usr/sbin

The basic old school linux convention is for 'root level access' to go into /sbin as a reminder to use sudo with the command... but systemd and friends are in /usr/bin.. ick, progress?

@jvonau
Copy link
Contributor

jvonau commented Jul 21, 2021

Once zzz_iiab.sh takes effect in /etc/profile.d the PATH should include /usr/sbin and should find iiab

Good point, but unfortunately that will only happen after a reboot, making our "keep trying sudo iiab" command-line instructions too frustrating and confounding.

The only reason for the install to stop is to reboot for an apt update.. That is the only time one has to type sudo iiab to continue.

/usr/sbin/iiab really needs to move to /usr/bin/iiab — so Debian newcomers aren't driven crazy.

Don't switch now, two potential copies floating around the path is troublesome, stick with the correct way.

@jvonau
Copy link
Contributor

jvonau commented Jul 21, 2021

Or teach new users the correct layout https://www.geeksforgeeks.org/linux-file-hierarchy-structure/ and why /usr/sbin is not normally on the path as a security feature and alter the docs to use 'sudo /usr/sbin/iiab'

@holta
Copy link
Member Author

holta commented Jul 21, 2021

The only reason for the install to stop is to reboot for an apt update.. That is the only time one has to type sudo iiab to continue.

Hmmm

IIAB installs fail due to networking and mirroring glitches all the time.

That's the core reason that install instructions are so loudly emphatic that sudo iiab needs to be tried repeatedly.

@holta
Copy link
Member Author

holta commented Jul 21, 2021

Or teach new users the correct layout https://www.geeksforgeeks.org/linux-file-hierarchy-structure/ and why /usr/sbin is not normally on the path as a security feature and alter the docs to use 'sudo /usr/sbin/iiab'

I disagree.

With respect, it really is important that things be very hassle-free for newcomers.

@jvonau
Copy link
Contributor

jvonau commented Jul 21, 2021

/usr/local/sbin or /usr/local/bin should be also be on the default path provided by the OS. The reset of the iiab-* utilities that need sudo live in /usr/bin anyways so when in rome... If iiab moves to /usr/bin then the ugly zzz_iiab.sh hack can be, in the interests of security, removed also?

@holta
Copy link
Member Author

holta commented Jul 21, 2021

  1. I'm now thinking that PR /usr/sbin/iiab -> /usr/bin/iiab for Debian iiab-factory#174 is possibly not necessary, as sudo iiab currently works even when /usr/sbin is not in a regular user's $PATH — the reason is that root itself should always have /use/sbin in its own PATH.

    FYI I've tested this on Debian 10.10 (headless).

    Though /usr/local/sbin (NOT reliably in path) and /usr/local/bin (YES reliably in path) are also viable options if necessary — as mentioned below.

/usr/local/sbin or /usr/local/bin should be also be on the default path provided by the OS. The reset of the iiab-* utilities that need sudo live in /usr/bin anyways so when in rome... If iiab moves to /usr/bin then the ugly zzz_iiab.sh hack can be, in the interests of security, removed also?

  1. Excellent Points All Around.

    I'm in favor of deprecating zzz_iiab.sh if we can modernize, to pave the way for a 1st pass security audit in the coming year.

@holta
Copy link
Member Author

holta commented Jul 21, 2021

Now I'm confused:

Running sudo iiab from a non-root account (lacking /usr/sbin in its path, on Debian 10) also works to invoke a /usr/sbin script containing useradd !

@deltacloud9 is there any chance you accidentally ran...

curl d.iiab.io/install.txt | bash

...instead of...?

curl d.iiab.io/install.txt | sudo bash

Or is Debian 11 somehow profoundly different?!

@jvonau
Copy link
Contributor

jvonau commented Jul 21, 2021

Could of sworn I saw an issue in my email about iiab-admin's password... @deltacloud9 all good?

@holta
Copy link
Member Author

holta commented Jul 21, 2021

Running sudo iiab from a non-root account (lacking /usr/sbin in its path, on Debian 10) also works to invoke a /usr/sbin script containing useradd !

I've reconfirmed this with the very latest pre-release version of Debian 11 (without any graphical desktop) on a x86_64 / amd64 VM.

@holta
Copy link
Member Author

holta commented Jul 21, 2021

FYI my installation of BIG-sized IIAB onto Debian 11 Server VM went flawlessly overnight — its iiab-diagnostics output is here:

http://sprunge.us/Phf3oi?en

I'll need to catch up with @deltacloud9, as my own non-root account iiab-admin2 (that installed iiab-admin and then IIAB) faced no problems at all when running curl d.iiab.io/install.txt | sudo bash == sudo iiab — even despite the fact that this non-root user (itself) does not have /usr/sbin in its $PATH !

Conclusion? /usr/sbin/useradd (including full path) as implemented by iiab/iiab-factory@f1cea58 and likewise PR iiab/iiab-factory#174 both appear (to me) as 100% useless for those who install Debian 10/11 in the conventional manner. So my suspicion (I might be entirely wrong!) is that @deltacloud9 is installing Debian in a different way from most everyone else — e.g. possibly in a way that causes root to have /usr/sbin removed from its $PATH ??

@jvonau
Copy link
Contributor

jvonau commented Aug 30, 2021

Any reason to keep this issue open given Bullseye was released 2 weeks ago?

@holta
Copy link
Member Author

holta commented Aug 30, 2021

Any reason to keep this issue open given Bullseye was released 2 weeks ago?

We should close it soon, good idea.

@deltacloud9 are you able to do an IIAB install onto Debian 11 "Bullseye" on bare metal, e.g. if you have an old laptop or similar, with a working internal AP ideally?

@deltacloud9
Copy link

deltacloud9 commented Aug 30, 2021 via email

@holta
Copy link
Member Author

holta commented Aug 30, 2021

Yes, I will run an install of this this week and let you know my findings.

Many thanks @deltacloud9 !

Please post output from sudo iiab-diagnostics if poss, whether or not you get the internal AP [Access Point, i.e. hotspot] working!

@holta
Copy link
Member Author

holta commented Oct 25, 2021

Just a clarification that we should do 1 final round of IIAB testing on Debian 11 Bullseye on PC/VM's in coming days/weeks — when Raspberry Pi OS 11 Bullseye is released — likely very soon now:

@holta
Copy link
Member Author

holta commented Nov 10, 2021

Good enough!

Thanks to @icebox827 and many others who've helped testing IIAB quite rigorously on VM's and other Debian "Bullseye" machines!

@holta holta closed this as completed Nov 10, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants