Matthias is looking upstream to see if the fix has been already made in effort to de-duplicate work.

Yes, it has. The PoC is basically replacing the nitrokey pro device and vendor ID with the Librem Key device and vendor ID

Has the PoC been tested with the app?

No, that repo is a poc.

So, if I understand correctly, this repo holds the patched libnitrokey: https://source.puri.sm/joao.azevedo/libnitrokey/

Thanks @selea.

This does not break an install, that is correct.

I'm happy to work on this TODAY but this is not "Unbreak Now!" because it is not breaking anything for our users and, we have a perfectly viable alternative that is a tiny bit better, namely the Librem Key.

I confirm that it is working properly in debian-live with Gnome 3.

I forgot to say that the version of debian 10 I tested was using XFCE. I will try with Gnome so maybe the error is related to that,

So, what can I do?

@hansolo Yes, thank you! What I hope to do is to determine that any action we take affects only the Librems with a US keyboard. We're going to have to determine the best fix for the US keyboard and then deploy.

This issue is caused because g-i-s follows RHEL/Fedora useradd rules which are different from debian. Fedora/RHEL allows usernames with upper case letters.
And g-i-s provides no error message when a PureOS user tries to create a username that does not comply with the useradd rules followed in PureOS.

I have a German keyboard layout, can I help?

It's unfortunately one with a US keyboard :-/

@mak Do you have a German keyboard now? Or is your L13 v4 US keyboard?

I'm going turn this task into a milestone so we can track the release period.

The OEM installer converts a user Full Name into a Username in lower case letters, but it is possible for a user to manually edit the username and add a upper case latter again. Like in the picture bellow.

Both those mentions in the logs at boot time are "normal".

Apparently an upstream bug: https://github.com/systemd/systemd/issues/12401

Thanks for reporting!

After several days and upgrades, it seems, that unattended-upgrades got removed automatically, so I don't bother anymore :)

The versions in Amber and Byzantium are not far apart; https://software.pureos.net/search_pkg?term=libccid
In Debian's Salsa it appears they're about 88 commits apart: https://salsa.debian.org/rousseau/CCID/-/compare/ccid-1.4.30...ccid-1.4.32

unless it's a pure bugfix release

On PureOS Amber, running lsusb I get:

On my L13 v3 I get;

Running the command usb-devices the Librem Key is listed:

To confirm, I'm going to update to this commit: https://review.coreboot.org/cgit/flashrom.git/commit/?id=05c629be2964bcee368c03d805747da15281856d

Now one can just call docker and the version of the PureOS distro image you want, like this;

I guess the best approach in resolving of the issue would be a collaboration between many parties interested in FSDG-compatible fork of Firefox.

I had face connectivity issues and quite regularly. I can not blame free vpn services as you wont pay to them, though mentioning some of them who create less issues(https://www.reviewsed.com/best-free-vpn-services/). But even i saw such issues in premium packages so i would also recommend to go with Expressvpn or surfshark as they have great advanced features that provide you smoothless service with out any disruption.

Do we need a new version of the library in amber, or is there a patch that we can apply to the amber version? Uploading a new upstream version always comes with some risk of breaking other stuff (unless it's a pure bugfix release).

I think this is worth looking into - let me see if I can upload a new version of the library packaged for Amber.

@mak @jeremiah.foster this new version of libccid just landed in Byzantium.

a an issue that remains is that we don't have debug packages for regular pureos-amber. This can often be helped by using the ones from Debian but not always when e.g. pureos lacks a bit behind. This makes it unsafe to enable by default.

dbgsym packages for amber-phone-staging do work now via

@mladen ^^

This issue still persists in PureOS.

Perhaps this will also fix T803 ?

Contact NitroKey app developers and ask what is needed to accept the patch

Perhaps this will also fix T803 ?

@jeremiah.foster @mak can we consider the above?

New version of libccid ((1.4.32-1) ) has been released and it includes our upstream packages to include Support for the Librem Key USA (
https://salsa.debian.org/rousseau/CCID/-/tags/ccid-1.4.32)

wondering whether chromium (not the ungoogled variant) complies with FSF endorsement. Discussion ongoing in the forum...

Still there in 1.8.4
It's any custom action. Leaving the command blank, it kicks back "command not configured", but put anything in there and it crashes.

In T818#16690, @SagarPrakash wrote:

In T818#16052, @CarloDz wrote:

Online privacy is some how tricky to handle as things are becoming complicated but nevertheless online privacy tools like tor, vpn, password manager etc. As per the BuyBestVPN, most effected and widely use tool is VPN due to level of encryption and anonymity.

Thank you for sharing the valuable site which actually talks about privacy, security and online privacy tools.

In T818#16052, @CarloDz wrote:

Online privacy is some how tricky to handle as things are becoming complicated but nevertheless online privacy tools like tor, vpn, password manager etc. As per the thevpnexperts, most effected and widely use tool is VPN due to level of encryption and anonymity.

The OEM downloads link is broken. Should probably be replaced with either
https://downloads.puri.sm/9/oem/gnome/
or
https://downloads.puri.sm/amber/oem/gnome/

@mak main issue here is that i can't tell if the correct match string (so i did not use any wildcards) or if there are other devices with the same match that might break.

Like this?
https://github.com/systemd/systemd/pull/11516 or this https://github.com/systemd/systemd/issues/15360

Hmm, I don't have a Librem with a German keyboard so I can't test this and would have to apply this change blindly.
This looks like something that should also go into upstream systemd, right?

Oh btw, this has to be applied to v3 Librems as well, because the fix for the US keyboard breaks the | key on them as well.

Can we retry this with the later Byzantium images? This bug was filed before there was an updated image.

Looks like a lot of the dependencies use old versions.

---------------------------------------------------------------------------------

That is https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765936 and documented here documented in /usr/share/doc/libvirt-daemon/README.Debian.gz . It would be best to just set the correct capability in pureos (setcap cap_net_admin+ep /usr/lib/qemu/qemu-bridge-helper)