Has anybody come up with a way to install squeeze / wheezy?

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Has anybody come up with a way to install squeeze / wheezy?

Post by cpgeek » Thu Aug 09, 2012 3:19 am

I've been reading through the wiki and through many related posts here but for whatever reason I can't seem to find evidence of a single person here that has gotten squeeze (or wheezy) installed onto their iomega home media network drive due to a dysfunctional udev issue and /or the inability to upgrade the kernel beyond stock (for reasons I'm not particularly clear on).

I own a pogoplug v2 that I was able to install both squeeze and wheezy on (different times) and from what I understand, the HMND is very similar hardware so i'm not understanding exactly why that is.

anyhow, does ANYBODY have working build instructions for getting squeeze (or preferably wheezy) working on the HMND?

Thanks!

geyperman
Posts: 65
Joined: Sun Jun 06, 2010 9:52 pm

Re: Has anybody come up with a way to install squeeze / whee

Post by geyperman » Thu Aug 09, 2012 9:48 am

Hi cpgeek! And welcome to the forum.

I was working in a rootfs bootable from a pendrive and I found a workaround to install squeeze without upgrading the kernel. I didn't write any post because I didn't finish the whole project.

Basically, the procedure consist in build a squeeze rootfs (instead of lenny), uninstall udev and install udev from lenny sources. Something like that (it's not a full procedure):

Code: Select all

mkdir /rootfs
cdebootstrap squeeze /rootfs
mount proc /rootfs/proc -t proc
chroot /rootfs
apt-get purge udev
apt-get autoremove
mv /etc/apt/sources.list /etc/apt/sources.list.squeeze
echo "deb http://archive.debian.org/debian/ lenny main" > /etc/apt/sources.list
apt-get update
apt-get install udev
echo udev hold | dpkg --set-selections
mv /etc/apt/sources.list.squeeze /etc/apt/sources.list
apt-get update
Then, you can continue with Mijzelf's procedure, set passwd, copy config files, modules...

Take care, specially if you don't know what are you doing, you can break your installation.

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Re: Has anybody come up with a way to install squeeze / whee

Post by cpgeek » Thu Aug 09, 2012 3:12 pm

thank you for your response! this does look like a promising method, however, I'd really like to keep everything self-contained without booting from a stick.

given your method, wouldn't it be more prudent to simply select the udev package to be held back in lenny and perform a dist-upgrade to squeeze (or wheezy) per https://help.ubuntu.com/community/PinningHowto ?

I don't really mind screwing up my install as from what I understand I can always just toss my disk in my workstation and do this: http://iomega.nas-central.org/wiki/Inst ... ome_Media) right?

I'm not new to getting my hands dirty in linux, but I AM relatively new to doing so on more or less embedded hardware like the HMND and pogoplug v2 (that i've been experimenting with for the past month or so).

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Re: Has anybody come up with a way to install squeeze / whee

Post by cpgeek » Fri Aug 10, 2012 4:53 am

so it worked! (sort of)
I followed the instructions in the wiki to get apt-get working properly, then because the default repos were broken (due to lenny having been completely deprecated) I changed the repos to archive.org:

Code: Select all

mv /etc/apt/sources.list /etc/apt/sources.list.original
vi /etc/apt/sources.list
which contains:

Code: Select all

deb http://archive.debian.org/debian/ lenny main contrib non-free
deb-src http://archive.debian.org/debian/ lenny main contrib non-free
#deb http://security.debian.org/ lenny/updates main 
#deb-src http://security.debian.org/ lenny/updates main
and then did an

Code: Select all

apt-get update && apt-get upgrade
to download the package list and make sure the packages were all up to date and consistant

once everything was all up to date, I then made absolutely sure that the package udev was held back when i did my upgrade to squeeze by doing:

Code: Select all

echo udev hold | dpkg --set-selections
and then I went about my squeeze update by doing this:

Code: Select all

mv /etc/apt/sources.list /etc/apt/sources.list.lenny
vi /etc/apt/sources.list
which contains

Code: Select all

deb http://http.us.debian.org/debian/ squeeze main contrib non-free
deb-src http://http.us.debian.org/debian/ squeeze main contrib non-free
deb http://security.debian.org/ squeeze/updates main 
deb-src http://security.debian.org/ squeeze/updates main
and then did an:

Code: Select all

apt-get update && apt-get install debian-archive-keyring && apt-get update
in order to update the package list, and because of trouble with gpg keys, grabbed the update keyring and then updated again (just to make certain that the package list was up to date).
and then finally:

Code: Select all

apt-get dist-upgrade
answering "install the package maintainers version" for all scripts / configs and waited for a long while for the upgrade to finish.
just to test that everything booted and the network came up and such I then rebooted the device:

Code: Select all

shutdown -r now
and it came back online just as i expected. - I didn't stop to experiment with it much at this point, but from what I understand it was a perfectly consistant install at this point and everything worked peachy.

where it STOPPED working whenever is when I became overconfident and tried to upgrade to wheezy.

I decided that at this point, I was going to upgrade to wheezy by doing:

Code: Select all

mv /etc/apt/sources.list sources.list.squeeze
vi /etc/apt/sources.list
which contains:

Code: Select all

eb http://http.us.debian.org/debian/ wheezy main contrib non-free
deb-src http://http.us.debian.org/debian/ wheezy main contrib non-free
deb http://security.debian.org/ wheezy/updates main 
deb-src http://security.debian.org/ wheezy/updates main
and then doing an

Code: Select all

apt-get update && apt-get dist-upgrade
to which I was fairly quickly told that the distribution requires a newer kernel than I had and that this wasn't going to work. very unfortunately, it seems that this happend AFTER it upgraded my libc6 which made everything break - i had major problems here. I tried to revert to my previous sources and update but the system wasn't having any of it and it's basically borked and I'll have to try again from stock when i have time to look at it next week - at least I can get as far as squeeze acceptably (i think).

good luck to anyone who chooses to follow in my footsteps! - please note that this is in no way a working build order or instructions on how to get anything working, but rather a simple copy of my lab notes to show what I did and the pitfalls of my experiences. it may not be best practices, it *will* cause your nmhd to not work if you follow it all the way through. - if someone wants to experiment using this as a guide, please do, and I would be particularly interested in how everything tests after squeeze seems to be successfully installed (I didn't have it long enough to fully test all of it's functionality like the iomega webapp or anything so i'm rather curious now). let me know what you find.

thanks again!

geyperman
Posts: 65
Joined: Sun Jun 06, 2010 9:52 pm

Re: Has anybody come up with a way to install squeeze / whee

Post by geyperman » Fri Aug 10, 2012 7:07 am

Good to know that is possible to upgrade iomega's firmware to squeeze.
Thanks for share your experiments :)

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Re: Has anybody come up with a way to install squeeze / whee

Post by cpgeek » Sun Aug 12, 2012 9:05 pm

no problem at all - I figure that the more information that's in the community, the better... and like i said i'll update when i have time to restock and try again. this time with the goal of stopping at squeeze and testing the functionality of the iomega web interface and the functionality of the tools that i'd like to install along side to increase functionality - which for me is nfs, transmission-daemon, and POSSIBLY webmin depending on how well i can get everything working. and I also plan on going through the inittab and disabling all of the services that don't absolutely need to be in operation all the time.

ALSO: for what it's worth - there are TONS of known exploits in lenny, the server apps, and i believe the kernels as well - I *do not* recommend a stock HMNHD be put on the internet.

“I have not failed. I've just found 10,000 ways that won't work.”
― Thomas A. Edison

Mijzelf
Posts: 6226
Joined: Mon Jun 16, 2008 10:45 am

Re: Has anybody come up with a way to install squeeze / whee

Post by Mijzelf » Mon Aug 13, 2012 10:21 am

cpgeek wrote:ALSO: for what it's worth - there are TONS of known exploits in lenny, the server apps, and i believe the kernels as well - I *do not* recommend a stock HMNHD be put on the internet.
About the kernel I can ease you. It's not a Lenny kernel. (Which doesn't mean it doesn't have vulnerabilities, of course)

Are you aware of any actual exposed vulnerabilities? I've sifted the list on http://www.debian.org/security/, but couldn't find anything worse than 'denial of service', which is inconvenient, but IMHO not a big deal.

Anyway, you're invited to put your procedure in the wiki.

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Re: Has anybody come up with a way to install squeeze / whee

Post by cpgeek » Tue Aug 14, 2012 3:12 pm

I am scientifically embarrassed to say that no, I have not gone on an exploit hunt for the stock HNMHD, but I assumed that there was a reason that debian deprecated lenny so quickly and that it would probably be security related.

If I had the time, i'd really like to go through and do a penetration test on the stock updated HMND distro, but alas, i doubt that will happen for quite a while due to me going through the busiest time of the year for my business.

but still, in the end, I think that having regular security updates and patches is far better than using a stagnant distribution. (and i know that there are some debian purists that might disagree with me as debian has been widely known (at least in it's "stable" implementation) to be one of the least updated distros available. don't get me wrong, the security team does a great job, but most of the distro is typically several package versions older than the mainstream mint / ubuntu / modern distro x.

under the circumstances, i'd probably concentrate my penetration test in the server apps and the "gatekeeper" apps (the auth subsystems) as they are always the most vulnerable... even a quick search comparing the default package versions with versions that are immediately exploitable with the metasploit framework would probably be helpful.

meanwhile, i'd be happy with squeeze for now.

as far as the kernel, they aren't typically particularly vulnerable on their own, however, due to the age of the kernel involved (many modern distros are already on 4.0 branch) there's probably some way to exploit the memory manager or something to escalate privileges from a user account or something in there.

it was more of a general warning than anything else. any security mechanism can be overridden somehow. it's a matter of technological escalation.

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Re: Has anybody come up with a way to install squeeze / whee

Post by cpgeek » Wed Aug 15, 2012 5:09 am

I finally had time to restock my HMNHD using the instructions on the wiki (backing up and restoring my /etc/modules file due to the way that mac addresses work on these units). once again, I got telnet access and I got the apt package management system working via the wiki as well.

from here, I modified /etc/apt/sources.list, commented all of the original sources, and added the lenny archive sources as before and did a full apt-get upgrade and apt-get dist-upgrade as many times as it took to fix all of the package dependency issues and make everything work right.

after I got everything working properly and got an up-to-date lenny system I followed my previous steps documented in my first experiments to first and foremost hold udev:

Code: Select all

echo udev hold | dpkg --set-selections
and then make my modifications to /etc/apt/sources.list which looks like this:

Code: Select all

#original repositories
#deb http://mirrors.kernel.org/debian lenny main contrib non-free
#deb-src http://mirrors.kernel.org/debian lenny main contrib non-free
#deb http://security.debian.org/ lenny/updates main contrib
#deb-src http://security.debian.org/ lenny/updates main contrib

#lenny repositories
#deb http://archive.debian.org/debian/ lenny main contrib non-free
#deb-src http://archive.debian.org/debian/ lenny main contrib non-free

#squeeze repositories
deb http://http.us.debian.org/debian/ squeeze main contrib non-free
deb-src http://http.us.debian.org/debian/ squeeze main contrib non-free
deb http://security.debian.org/ squeeze/updates main
deb-src http://security.debian.org/ squeeze/updates main
and then as before, grab the update, the keyring, and then update again (not that it's really unnecessary, but it's an old habit that's treated me well in the past)

Code: Select all

apt-get update && apt-get install debian-archive-keyring && apt-get update
and finally perform the dist-upgrade:

Code: Select all

apt-get dist-upgrade
after testing for a good hour or so, it appears that everything works as it should! squeeze works great, and with all of the stock nas software working as well.

for my next trick, I get to move all of my data back onto it and set up transmission-daemon and perhaps webmin. I'll keep you posted.

emiralles
Posts: 19
Joined: Fri Jan 06, 2012 9:36 pm

Re: Has anybody come up with a way to install squeeze / whee

Post by emiralles » Sat Sep 08, 2012 8:27 am

GREAT !!!! :D

I install squeeze version and everything is ok.
I try to explain my experience
1.- download sda1-2064.tgz (software for install a new HDD in our iomega)
2.- download firmware upload to 2.104 from iomega web
3.- install new hdd with sda1-2064.tgz
4.- switch on the iomega
5.- update firmware to 2.104
6.- follow your instructions, stop in squeeze version I don't try wheezy version
7.- Install everything with apt-get, transmission, transmission-daemon, ssh (dropbear), backuppc, swat, webmin, reinstall samba, vsftp and lighttpd with apt-get
8.- Reconfigure all, included twonky vision (great)

I don't have any problem, before I need reboot my system all weeks, now no.

Thanks

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Re: Has anybody come up with a way to install squeeze / whee

Post by cpgeek » Thu Sep 27, 2012 4:36 am

I'm really glad that you (emiralles) was able to get everything working well with what you're trying to do.

While there's absolutely nothing wrong with this configuration (i've been using it this way since i posted about it), I'm particularly disappointed in the fact that I can't get any more recent builds of transmission-daemon working on squeeze (not even with backports). All of the newer versions of transmission-daemon require updated versions of libssl1.0.0, and libnatpmp1 which are not found in the backports (recent enough versions of the other dependencies ARE found in the backports).

the version of transmission-daemon that is found in squeeze (2.0.3-2) is ANCIENT, unoptimized (takes up a ton of unnessasary resources) and is buggy as all get out as compared with the "stable" version from wheezy (2.52-3). the latest version in the transmissionbt PPA is 2.61 which is even newer, but I'd be happy with the version from wheezy.

yet again, I pose the question: has anybody been successful in getting wheezy installed on the hmnhd? or perhaps has another method of solving my problem that I haven't thought of yet?

Thanks!

Mijzelf
Posts: 6226
Joined: Mon Jun 16, 2008 10:45 am

Re: Has anybody come up with a way to install squeeze / whee

Post by Mijzelf » Thu Sep 27, 2012 8:38 am

How about compiling transmission yourself? It's a trivial task.

cpgeek
Posts: 12
Joined: Thu Aug 09, 2012 2:32 am

Re: Has anybody come up with a way to install squeeze / whee

Post by cpgeek » Thu Sep 27, 2012 8:43 am

Mijzelf wrote:How about compiling transmission yourself? It's a trivial task.
the compilation of transmission IS a trival task, however, even if i got a compiler toolchain together and waited the reasonably long time for the tools to work their magic on the code, it would still have the same dependency requirements as the prebuilt package which I can't meet with my current running system. obtaining and/or compiling the appropriate transmission packages is easy, meeting the dependancies for higher-versions-than-available-from-repos of files that are pretty low level (ssh for example) has proven more difficult.

Mijzelf
Posts: 6226
Joined: Mon Jun 16, 2008 10:45 am

Re: Has anybody come up with a way to install squeeze / whee

Post by Mijzelf » Thu Sep 27, 2012 9:28 am

cpgeek wrote:it would still have the same dependency requirements as the prebuilt package
Are you sure about that? Normally when I compile a program using the ssl1.0 headers and linking against the ssl1.0 libs, it will need the ssl1.0.so. (Or something like that). When I compile and link the same program using ssl2.0 headers and libs, it will need ssl2.0.so. So the availability of headers and libs at compiletime will dictate the dependency requirements on runtime.
Only when functionality is needed which is specific for ssl2.0, you'll indeed need ssl2.0, but in many cases the configure script does a marvelous job to just disable the extra features in the builded binary.

/Edit: By the way, you could install FFP on your box, and install transmission on that, as I explained here.

emiralles
Posts: 19
Joined: Fri Jan 06, 2012 9:36 pm

Re: Has anybody come up with a way to install squeeze / whee

Post by emiralles » Thu Sep 27, 2012 8:45 pm

Hi;

It's Impossible compile the transmission 1.52.

root@DANKO-NAS:~# apt-get install dpkg-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
build-essential fakeroot g++ g++-4.4 libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl
libdpkg-perl libstdc++6-4.4-dev libtimedate-perl make patch
Suggested packages:
debian-keyring gcc-4.4-doc libstdc++6-4.4-dbg libstdc++6-4.4-doc make-doc ed diffutils-doc
The following NEW packages will be installed:
build-essential dpkg-dev fakeroot g++ g++-4.4 libalgorithm-diff-perl libalgorithm-diff-xs-perl
libalgorithm-merge-perl libdpkg-perl libstdc++6-4.4-dev libtimedate-perl make patch
0 upgraded, 13 newly installed, 0 to remove and 5 not upgraded.
Need to get 8058 kB of archives.
After this operation, 26.0 MB of additional disk space will be used.
Do you want to continue [Y/n]?
Get:1 http://http.us.debian.org/debian/ squeeze/main patch armel 2.6-2 [128 kB]
Get:2 http://http.us.debian.org/debian/ squeeze/main libstdc++6-4.4-dev armel 4.4.5-8 [1634 kB]
Get:3 http://http.us.debian.org/debian/ squeeze/main g++-4.4 armel 4.4.5-8 [4167 kB]
Get:4 http://http.us.debian.org/debian/ squeeze/main g++ armel 4:4.4.5-1 [1368 B]
Get:5 http://http.us.debian.org/debian/ squeeze/main make armel 3.81-8 [393 kB]
Get:6 http://http.us.debian.org/debian/ squeeze/main libtimedate-perl all 1.2000-1 [41.2 kB]
Get:7 http://http.us.debian.org/debian/ squeeze/main libdpkg-perl all 1.15.8.12 [694 kB]
Get:8 http://http.us.debian.org/debian/ squeeze/main dpkg-dev all 1.15.8.12 [812 kB]
Get:9 http://http.us.debian.org/debian/ squeeze/main build-essential armel 11.5 [7192 B]
Get:10 http://http.us.debian.org/debian/ squeeze/main fakeroot armel 1.14.4-1 [102 kB]
Get:11 http://http.us.debian.org/debian/ squeeze/main libalgorithm-diff-perl all 1.19.02-2 [51.5 kB]
Get:12 http://http.us.debian.org/debian/ squeeze/main libalgorithm-diff-xs-perl armel 0.04-1 [12.7 kB]
Get:13 http://http.us.debian.org/debian/ squeeze/main libalgorithm-merge-perl all 0.08-2 [13.5 kB]
Fetched 8058 kB in 56s (143 kB/s)
Selecting previously deselected package patch.
(Reading database ... 45066 files and directories currently installed.)
Unpacking patch (from .../archives/patch_2.6-2_armel.deb) ...
Selecting previously deselected package libstdc++6-4.4-dev.
Unpacking libstdc++6-4.4-dev (from .../libstdc++6-4.4-dev_4.4.5-8_armel.deb) ...
Selecting previously deselected package g++-4.4.
Unpacking g++-4.4 (from .../g++-4.4_4.4.5-8_armel.deb) ...
Selecting previously deselected package g++.
Unpacking g++ (from .../g++_4%3a4.4.5-1_armel.deb) ...
Selecting previously deselected package make.
Unpacking make (from .../archives/make_3.81-8_armel.deb) ...
Selecting previously deselected package libtimedate-perl.
Unpacking libtimedate-perl (from .../libtimedate-perl_1.2000-1_all.deb) ...
Selecting previously deselected package libdpkg-perl.
Unpacking libdpkg-perl (from .../libdpkg-perl_1.15.8.12_all.deb) ...
Selecting previously deselected package dpkg-dev.
Unpacking dpkg-dev (from .../dpkg-dev_1.15.8.12_all.deb) ...
Selecting previously deselected package build-essential.
Unpacking build-essential (from .../build-essential_11.5_armel.deb) ...
Selecting previously deselected package fakeroot.
Unpacking fakeroot (from .../fakeroot_1.14.4-1_armel.deb) ...
Selecting previously deselected package libalgorithm-diff-perl.
Unpacking libalgorithm-diff-perl (from .../libalgorithm-diff-perl_1.19.02-2_all.deb) ...
Selecting previously deselected package libalgorithm-diff-xs-perl.
Unpacking libalgorithm-diff-xs-perl (from .../libalgorithm-diff-xs-perl_0.04-1_armel.deb) ...
Selecting previously deselected package libalgorithm-merge-perl.
Unpacking libalgorithm-merge-perl (from .../libalgorithm-merge-perl_0.08-2_all.deb) ...
Setting up patch (2.6-2) ...
Setting up make (3.81-8) ...
Setting up libtimedate-perl (1.2000-1) ...
Setting up libdpkg-perl (1.15.8.12) ...
Setting up dpkg-dev (1.15.8.12) ...
Setting up fakeroot (1.14.4-1) ...
update-alternatives: using /usr/bin/fakeroot-sysv to provide /usr/bin/fakeroot (fakeroot) in auto mode.
Setting up libalgorithm-diff-perl (1.19.02-2) ...
Setting up libalgorithm-diff-xs-perl (0.04-1) ...
Setting up libalgorithm-merge-perl (0.08-2) ...
Setting up libstdc++6-4.4-dev (4.4.5-8) ...
Setting up g++-4.4 (4.4.5-8) ...
Setting up g++ (4:4.4.5-1) ...
update-alternatives: using /usr/bin/g++ to provide /usr/bin/c++ (c++) in auto mode.
Setting up build-essential (11.5) ...
root@DANKO-NAS:~# cd transmission
transmission-2.52/ transmission_2.52-3.dsc
transmission_2.52-3.debian.tar.bz2 transmission_2.52.orig.tar.bz2
root@DANKO-NAS:~# cd transmission-2.52/
root@DANKO-NAS:~/transmission-2.52# dpkg-
dpkg-architecture dpkg-genchanges dpkg-preconfigure dpkg-split
dpkg-buildflags dpkg-gencontrol dpkg-query dpkg-statoverride
dpkg-buildpackage dpkg-gensymbols dpkg-reconfigure dpkg-trigger
dpkg-checkbuilddeps dpkg-maintscript-helper dpkg-scanpackages dpkg-vendor
dpkg-deb dpkg-mergechangelogs dpkg-scansources
dpkg-distaddfile dpkg-name dpkg-shlibdeps
dpkg-divert dpkg-parsechangelog dpkg-source
root@DANKO-NAS:~/transmission-2.52# dpkg-buildpackage -us -uc
dpkg-buildpackage: export CFLAGS from dpkg-buildflags (origin: vendor): -g -O2
dpkg-buildpackage: export CPPFLAGS from dpkg-buildflags (origin: vendor):
dpkg-buildpackage: export CXXFLAGS from dpkg-buildflags (origin: vendor): -g -O2
dpkg-buildpackage: export FFLAGS from dpkg-buildflags (origin: vendor): -g -O2
dpkg-buildpackage: export LDFLAGS from dpkg-buildflags (origin: vendor):
dpkg-buildpackage: source package transmission
dpkg-buildpackage: source version 2.52-3
dpkg-buildpackage: source changed by Leo Costela <costela@debian.org>
dpkg-buildpackage: host architecture armel
dpkg-source --before-build transmission-2.52
dpkg-source: info: using options from transmission-2.52/debian/source/options: --compression=bzip2 --extend-diff-ignore=^\.pc$
dpkg-checkbuilddeps: Unmet build dependencies: debhelper (>= 8) autotools-dev libgtk-3-dev libevent-dev (>= 2.0) libglib2.0-dev libnotify-dev (>= 0.7) libssl-dev libcurl4-gnutls-dev | libcurl4-dev | libcurl-dev intltool (>= 0.40) qt4-qmake libqt4-dev qt4-linguist-tools libminiupnpc-dev libnatpmp-dev (>= 20110808) dpkg-dev (>= 1.16.1~)
dpkg-buildpackage: warning: Build dependencies/conflicts unsatisfied; aborting.
dpkg-buildpackage: warning: (Use -d flag to override.)

Post Reply