Hey everyone, due to a brief chat with elav on Twitter, and because he doesn't have access to a specific Ubuntu forum , we're going to implement a paranoid configuration for this distro. This means we're going to be suspicious of all updates.
After installing Ubuntu and verifying that it works perfectly, we will insist that it remains so for a long time. Security updates will continue as planned.
This setting is not for people who like constant updates,
We start
kdesu kwrite /etc/apt/sources.list
You have to delete / comment from this list that I put below, example:
deb http://mx.archive.ubuntu.com/ubuntu/ precise-updates main restricted
deb-src http://mx.archive.ubuntu.com/ubuntu/ precise-updates main restricted
deb http://mx.archive.ubuntu.com/ubuntu/ precise-backports main restricted universe multiverse
deb-src http://mx.archive.ubuntu.com/ubuntu/ precise-backports main restricted universe multiverse
You get it, press ctrl + f and write "updates" so that when pressing enter comment all lines that do not contain security.
Save and close gedit and then run:
sudo aptitude update
New repositories should never be added to sources.list. There is a special directory for that called: "/etc/apt/sources.list.d ".
This is where we will save all the new repos.
kdesu kwrite /etc/apt/sources.list.d/my_new_repository.list
For example, for the medibuntu repo we can do the following:
kdesu kwrite /etc/apt/sources.list.d/medibuntu.list
And copy and paste the corresponding line. For example:
deb http://packages.medibuntu.org/ precise free non-free
deb-src http://packages.medibuntu.org/ precise free non-free
What is the use of this complicated information that you are giving me and absolutely unnecessary in my opinion?
Well, when it comes to getting rid of a repo, it helps you avoid having to edit the main sources.list file all the time.
- I recommend always updating with the command:
sudo aptitude safe-upgrade
Then we will no longer need update-notifier or update-notifier-gnome, and if you wish you can delete them:
sudo aptitude remove update-notifier update-notifier-gnome
- Follow this step, only if all the components of the computer work with the kernel they have. Better to forget this step if they are not clarified with the information they read.
Open Synaptic :
Then run in a terminal:
uname -r
The terminal output should look something like this:
3.2.0-36-generic
They copy and paste in Synpatic's search bar only the part: 3.2.first_number (3.2.0)
They notice that they will appear listed: several kernels of which there are some that the architecture does not appear at the end of the name.
For example selecting the "linux-image-3.2.0" in its description will appear:
This package provides kernel header files for version 3.2.0, for sites
that want the latest kernel headers. Please read
/usr/share/doc/linux-headers-3.2.0-24/debian.README.gz for details
In other words, it is a lure that attracts new kernels, and it can be uninstalled; a package that does not contain this description means that it is an important file whose uninstallation would cause a serious and irreparable system failure.
This step does not affect the kernel security updates, in fact they will not change the kernel version but the same version will be updated periodically.
With this configuration, I only receive updates for each version, without moving to the next one, something like Debian.
regards
Source: lednar from the Hispanic Ubuntu forum