fix dm-verity installation for non merged /bin and /usr/bin

See merge request !43

set redirect=on for overlayfs unions

See merge request !42

The util-linux package actually installs mount into /bin not /usr/bin.

Closes: #1010951

If redirect=on is not set a renaming a directory might return EXDEV:
https://www.kernel.org/doc/html/latest/filesystems/overlayfs.html#renaming-directories

Not all applications (e.g. Flatpak) handle this error because they do not
expect that to happen. Setting this flag moves the handling for that in the
kernel.

Adding support for dm-verity rootfs

See merge request !40

This patch adds support for dm-verity backed squashfs rootfs. It allows the user
to check for corruption of their filesystem.

The order of adding the flags to mount seems to be important.
verity.roothashsig must be specifed last on current mount versions.

Fix blacklisting for devices that contain the live rootfs for persistence.

See merge request !38

Remove encryption support for live-media via losetup

See merge request !37

what_is_mounted_on was called with "d" and not the variable ${d}.
This causes that no devices are actually added to the blacklist.

We also add "/run/live/medium" as possible directory where a rootfs can be mounted.
This prohibits that "/run/live/medium" is moved to "/run/live/persistence/$something"
when persistence is used.

Closes: #934701

Support for encryption in the util-linux losetup was removed in 2012 and busybox the implementation doesn't support it.
https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=5cf05c71472bf7230075cbdcd5cd6eb12b1d3654

Revert ef866fdb

See merge request !35

The work I do in the live team is part of my Kali work.

Changes-By: lintian-brush
Fixes: lintian: out-of-date-standards-version
See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

9990-select-eth-device.sh: check carrier, pick NIC

See merge request !33

Closes: #970288

This reverts merge request !34

Fix leading space in DEVICE setting

See merge request !34

live-boot will set the `DEVICE` parameter in `/conf/param.conf`. This
parameter specifies the default network interface to use, like eth0. So
only one Ethernet device is allowed here, but live-boot generates a list
with a leading space. For example it will set `DEVICE=' eth0'`. This
causes initramfs script relying on `DEVICE` fail.

Therefore just set the `DEVICE` parameter to the last connected
interface found.

Signed-off-by: Benjamin Drung <benjamin.drung@profitbricks.com>

Improve the mechanism to check the carrier to pick from
multiple network interfaces. This is based on the patch from
Michal Zatloukal.
Ref: https://sourceforge.net/p/clonezilla/bugs/298/

Set sticky bit on /var/tmp as well (matching perms in base-files)

See merge request !30

(Fixes f.e. CUPS PDF driver not producing output files)

amend copyright

See merge request !29

Fix some issues reported by lintian

See merge request !27

Fix flipped logic for handling memdiskfind

See merge request !28

shellcheck complains about SC2236: Use -n instead of ! -z.

Signed-off-by: Benjamin Drung <benjamin.drung@profitbricks.com>

Commit 07d13d4a

 accidentally flipped
the logic for handling memdiskfind, causing erroneous messages and a
four second boot delay.

Flip the logic again to correct it.

Thanks to Marcel Partap for reporting it.

Signed-off-by: Benjamin Drung <benjamin.drung@profitbricks.com>

Fixes lintian: uses-debhelper-compat-file
See https://lintian.debian.org/tags/uses-debhelper-compat-file.html for more details.

+ debian/rules: Move --fail-missing argument to dh_missing.

Fixes lintian: package-uses-old-debhelper-compat-version
See https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html for more details.

Fixes lintian: out-of-date-standards-version
See https://lintian.debian.org/tags/out-of-date-standards-version.html for more details.

Document the fact that persistence-label now accepts a list

See merge request !24

Accept multiple overlay names from persistence-label parameter

See merge request !23

Fix spurious error msgs from live-boot about failed mounts…

See merge request !22