View source for Kicksecure

[http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/ Kicksecure] ([https://www.kicksecure.com/ clearnet link]) can be installed on POWER.  These instructions were tested with Kicksecure 17.

First, install Debian Bookworm or Sid for ppc64el or ppc64.  If installing in a VM, set the Video Model to Virtio and the Display Type to Spice ([https://github.com/Kicksecure/libvirt-dist/blob/master/usr/share/libvirt-dist/xml/Kicksecure.xml source]).  When installing Debian, do not create a separate root password, name the user <code>user</code>, and for desktop environment either pick XFCE or do not install one.  Launch a shell.

Import the Kicksecure signing key ([http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/wiki/Debian#Add_the_Kicksecure_%E2%84%A2_Signing_Key source]) ([https://www.kicksecure.com/wiki/Debian#Add_the_Kicksecure_%E2%84%A2_Signing_Key clearnet]):

 sudo apt-get update
 sudo apt-get dist-upgrade
 sudo apt-get install --no-install-recommends curl gpg gpg-agent
 <nowiki>curl  --tlsv1.3 --output ~/derivative.asc --url https://www.kicksecure.com/keys/derivative.asc</nowiki>
 sudo cp ~/derivative.asc /usr/share/keyrings/derivative.asc

Initialize the <code>console</code> group ([http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/wiki/Debian#Prerequisites source]) ([https://www.kicksecure.com/wiki/Debian#Prerequisites clearnet]):

 sudo addgroup --system console
 sudo adduser user console

Add the Whonix/Kicksecure package repository ([http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/wiki/Debian#Add_the_Kicksecure_%E2%84%A2_Repository source]) ([https://www.kicksecure.com/wiki/Debian#Add_the_Kicksecure_%E2%84%A2_Repository clearnet]):

 sudo apt-get install apt-transport-tor
 <nowiki>echo "deb [signed-by=/usr/share/keyrings/derivative.asc] tor+http://deb.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion bookworm main" | sudo tee /etc/apt/sources.list.d/derivative.list</nowiki>
 sudo apt-get update

Then, run one of the following, depending on whether you want Kicksecure to use XFCE or CLI-only, and whether you are installing Kicksecure in a VM or on the host:

 sudo apt-get install --no-install-recommends kicksecure-xfce-host

 sudo apt-get install --no-install-recommends kicksecure-xfce-vm

 sudo apt-get install --no-install-recommends kicksecure-cli-host

 sudo apt-get install --no-install-recommends kicksecure-cli-vm

If you get a package conflict error that mentions <code>console-common</code>, run the following and then try again:

 sudo apt-get install --no-install-recommends console-common

If you get prompted about choosing the default display manager during package installation, choose <code>gdm3</code> ([http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Stable_Release#Whonix_™_16.0.2.7 source]) ([https://www.whonix.org/wiki/Stable_Release#Whonix_™_16.0.2.7 clearnet]).

If you get prompted with other questions during package installation, you can choose the defaults.

The Kicksecure packages will install their own <code>sources.list</code> data in <code>/etc/apt/sources.list.d/debian.list</code>.  If you're using Bullseye, that means you should clear the <code>sources.list</code> that Debian came with (in order to avoid warnings from <code>apt-get</code> about duplicated repos):

 sudo rm /etc/apt/sources.list
 sudo touch /etc/apt/sources.list
 sudo rm /etc/apt/sources.list.d/backports.list

On Bookworm or higher, the Kicksecure <code>sources.list</code> is nonfunctional, so you should clear it instead:

 sudo rm /etc/apt/sources.list.d/debian.list
 sudo touch /etc/apt/sources.list.d/debian.list

Run the following to work around a bug that breaks subsequent package updates ([http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/dist-base-files-postinst-aborted-on-ppc64el/13381/2 source]) ([https://forums.whonix.org/t/dist-base-files-postinst-aborted-on-ppc64el/13381/2 clearnet]):

 sudo mkdir -p /etc/dist-base-files.d/
 echo "set +e" | sudo tee /etc/dist-base-files.d/50_user.conf

Reboot the machine; Kicksecure installation is complete.

== Known Issues ==

None.