Trouble with preseeding keyboard layout

2021-01-03 Thread Laurențiu Păncescu

Hello,

I'm trying to install Debian with a en_US locale and a German keyboard 
layout:


d-i debian-installer/language string en
d-i debian-installer/country string DE
d-i debian-installer/locale string en_US.UTF-8
# Keyboard selection.
d-i keyboard-configuration/xkb-keymap select de

This works as expected when I use the "zcat boot.img.gz > /dev/sdb" 
method and copy the debian installer ISO and the preseed file to the DOS 
partition, loading it via "file=/hd-media/preseed.cfg".


If I generate my own installer ISO, with the same preseed.cfg, included 
in initrd.gz as described by [1], the keyboard layout remains the 
default US, I can see this when trying to type the LUKS passphrase in 
the installer. Is something missing from [1]? I attached the full 
preseed.cfg, in case someone wants to take a look.


Thanks,
Laurențiu

[1] https://wiki.debian.org/DebianInstaller/Preseed/EditIso
#_preseed_V1

 Contents of the preconfiguration file (for buster)
### Localization
# Preseeding only locale sets language, country and locale.
#d-i debian-installer/locale string en_US

# The values can also be preseeded individually for greater flexibility.
d-i debian-installer/language string en
d-i debian-installer/country string DE
d-i debian-installer/locale string en_US.UTF-8
# Optionally specify additional locales to be generated.
#d-i localechooser/supported-locales multiselect en_US.UTF-8, nl_NL.UTF-8

# Keyboard selection.
d-i keyboard-configuration/xkb-keymap select de
# d-i keyboard-configuration/toggle select No toggling

### Network configuration
# Disable network configuration entirely. This is useful for cdrom
# installations on non-networked devices where the network questions,
# warning and long timeouts are a nuisance.
#d-i netcfg/enable boolean false

# netcfg will choose an interface that has link if possible. This makes it
# skip displaying a list if there is more than one interface.
d-i netcfg/choose_interface select auto

# To pick a particular interface instead:
#d-i netcfg/choose_interface select eth1

# To set a different link detection timeout (default is 3 seconds).
# Values are interpreted as seconds.
#d-i netcfg/link_wait_timeout string 10

# If you have a slow dhcp server and the installer times out waiting for
# it, this might be useful.
#d-i netcfg/dhcp_timeout string 60
#d-i netcfg/dhcpv6_timeout string 60

# If you prefer to configure the network manually, uncomment this line and
# the static network configuration below.
#d-i netcfg/disable_autoconfig boolean true

# If you want the preconfiguration file to work on systems both with and
# without a dhcp server, uncomment these lines and the static network
# configuration below.
#d-i netcfg/dhcp_failed note
#d-i netcfg/dhcp_options select Configure network manually

# Static network configuration.
#
# IPv4 example
#d-i netcfg/get_ipaddress string 192.168.1.42
#d-i netcfg/get_netmask string 255.255.255.0
#d-i netcfg/get_gateway string 192.168.1.1
#d-i netcfg/get_nameservers string 192.168.1.1
#d-i netcfg/confirm_static boolean true
#
# IPv6 example
#d-i netcfg/get_ipaddress string fc00::2
#d-i netcfg/get_netmask string :::::
#d-i netcfg/get_gateway string fc00::1
#d-i netcfg/get_nameservers string fc00::1
#d-i netcfg/confirm_static boolean true

# Any hostname and domain names assigned from dhcp take precedence over
# values set here. However, setting the values still prevents the questions
# from being shown, even if values come from dhcp.
d-i netcfg/get_hostname string bacchus
d-i netcfg/get_domain string olympus

# If you want to force a hostname, regardless of what either the DHCP
# server returns or what the reverse DNS entry for the IP is, uncomment
# and adjust the following line.
d-i netcfg/hostname string bacchus

# Disable that annoying WEP key dialog.
#d-i netcfg/wireless_wep string

# The wacky dhcp hostname that some ISPs use as a password of sorts.
#d-i netcfg/dhcp_hostname string snowbell

# If non-free firmware is needed for the network or other hardware, you can
# configure the installer to always try to load it, without prompting. Or
# change to false to disable asking.
d-i hw-detect/load_firmware boolean false

### Network console
# Use the following settings if you wish to make use of the network-console
# component for remote installation over SSH. This only makes sense if you
# intend to perform the remainder of the installation manually.
#d-i anna/choose_modules string network-console
#d-i network-console/authorized_keys_url string http://10.0.0.1/openssh-key
#d-i network-console/password password r00tme
#d-i network-console/password-again password r00tme

### Mirror settings
# If you select ftp, the mirror/country string does not need to be set.
#d-i mirror/protocol string ftp
d-i mirror/country string manual
d-i mirror/http/hostname string deb.debian.org
d-i mirror/http/directory string /debian
d-i mirror/http/proxy string

# Suite to install.
#d-i mirror/suite string testing
# Suite to use for 

Re: Missing GnuPG signatures for checksums

2020-04-20 Thread Laurențiu Păncescu

Hi Steve and Julien,


On 4/20/20 6:45 PM, Steve McIntyre wrote:

There are checksums for these in the archive
(dists/buster/main/installer-amd64/current/images/SHA256SUMS etc.) and
those files are themselves checksummed in the top-level buster Release
file, and that's signed by Release.gpg (or via InRelease if you prefer
that route). Yes, it's not very obvious...


Many thanks, I got it now! Steve, also many thanks for the automatically 
generated reference for all preseed options, I found 
apt-setup/disable-cdrom-entries there, very nice to have everything in 
one place, most of them aren't documented anywhere else.[1]



Best regards,
Laurentiu


[1] https://jack.einval.com/debian-preseed/



Missing GnuPG signatures for checksums

2020-04-20 Thread Laurențiu Păncescu

Hello,

I'm trying to put a preseed file on the same USB stick as the 
installation, using hd-media/boot.img.gz is easier than remastering the 
iso. It works, but there seems not to be any signed checksum file for 
these images and they are served only over http:


http://http.us.debian.org/debian/dists/buster/main/installer-amd64/current/images/

How can I check if these images are authentic? I guess I could mount a 
signed CD iso like netinst, copy vmlinuz and initrd from there and 
create my own USB stick with syslinux - is there a better way?


Thanks in advance,
Laurențiu