daily autocommit

committing changes in /etc made by "apt install libreoffice"
Packages with configuration changes: +ca-certificates-java 20190909 all +firebird3.0-common 3.0.7.33374.ds4-2 all +fonts-crosextra-carlito 20130920-1.1 all +fonts-linuxlibertine 5.3.0-6 all +fonts-noto-core 20201225-1 all +libbcprov-java 1.68-2 all +libxml-commons-resolver1.1-java 1.2-11 all +mariadb-common 1:10.5.15-0+deb11u1 all +mysql-common 5.8+1.0.7 all +openjdk-11-jre-headless 11.0.16+8-1~deb11u1 amd64 Package changes: +ant 1.10.9-4 all +ant-optional 1.10.9-4 all +ca-certificates-java 20190909 all +default-jre 2:1.11-72 amd64 +default-jre-headless 2:1.11-72 amd64 +firebird3.0-common 3.0.7.33374.ds4-2 all +firebird3.0-common-doc 3.0.7.33374.ds4-2 all +firebird3.0-server-core 3.0.7.33374.ds4-2 amd64 +firebird3.0-utils 3.0.7.33374.ds4-2 amd64 +fonts-crosextra-caladea 20130214-2.1 all +fonts-crosextra-carlito 20130920-1.1 all +fonts-linuxlibertine 5.3.0-6 all +fonts-noto-core 20201225-1 all +fonts-noto-extra 20201225-1 all +fonts-noto-ui-core 20201225-1 all +fonts-sil-gentium 20081126:1.03-4 all +fonts-sil-gentium-basic 1.102-1.1 all +java-common 0.72 all +libactivation-java 1.2.0-2 all +libaopalliance-java 20070526-6 all +libapache-poi-java 4.0.1-1 all +libapache-pom-java 18-1 all +libargs4j-java 2.33-1.1 all +libatinject-jsr330-api-java 1.0+ds1-5 all +libatk-wrapper-java 0.38.0-2+deb11u1 all +libatk-wrapper-java-jni 0.38.0-2+deb11u1 amd64 +libbase-java 1.1.6-2.1 all +libbcmail-java 1.68-2 all +libbcpkix-java 1.68-2 all +libbcprov-java 1.68-2 all +libbsh-java 2.0b4-20 all +libcdi-api-java 1.2-3 all +libcodemodel-java 2.6+jaxb2.3.0.1-10 all +libcommons-cli-java 1.4-2 all +libcommons-codec-java 1.15-1 all +libcommons-collections3-java 3.2.2-2 all +libcommons-collections4-java 4.2-1 all +libcommons-compress-java 1.20-1 all +libcommons-io-java 2.8.0-1 all +libcommons-lang3-java 3.11-1 all +libcommons-logging-java 1.2-2 all +libcommons-math3-java 3.6.1-3 all +libcommons-parent-java 43-1 all +libcurvesapi-java 1.06-1 all +libdom4j-java 2.1.3-1 all +libdtd-parser-java 1.2-1 all +libehcache-java 2.6.11-5 all +libel-api-java 3.0.0-3 all +libfastinfoset-java 1.2.12-3 all +libfbclient2 3.0.7.33374.ds4-2 amd64 +libflute-java 1:1.1.6-4 all +libfonts-java 1.1.6.dfsg-3.1 all +libformula-java 1.1.7.dfsg-2.1 all +libgeronimo-annotation-1.3-spec-java 1.3-1 all +libgeronimo-interceptor-3.0-spec-java 1.0.1-4 all +libgif7 5.1.9-2 amd64 +libguava-java 29.0-6 all +libguice-java 4.2.3-2 all +libhawtjni-runtime-java 1.17-1 all +libhsqldb1.8.0-java 1.8.0.10+dfsg-10 all +libhttpclient-java 4.5.13-2 all +libhttpcore-java 4.4.14-1 all +libib-util 3.0.7.33374.ds4-2 amd64 +libicu4j-java 68.2-2 all +libintellij-annotations-java 20.1.0-1 all +libistack-commons-java 3.0.6-5 all +libitext-java 2.1.7-12 all +libjansi-java 1.18-1 all +libjansi-native-java 1.8-1 all +libjaxb-api-java 2.3.1-1 all +libjaxb-java 2.3.0.1-10 all +libjaxen-java 1.1.6-4 all +libjcommon-java 1.0.23-2 all +libjdom1-java 1.1.3-2.1 all +libjetbrains-annotations-java 20.1.0-1 all +libjsoup-java 1.10.2-2 all +libjsp-api-java 2.3.4-3 all +libjsr305-java 0.1~+svn49-11 all +liblayout-java 0.2.10-3.1 all +libloader-java 1.1.6.dfsg-4.1 all +liblog4j1.2-java 1.2.17-10+deb11u1 all +libmail-java 1.6.5-1 all +libmariadb3 1:10.5.15-0+deb11u1 amd64 +libmaven-file-management-java 3.0.0-1 all +libmaven-parent-java 31-2 all +libmaven-resolver-java 1.4.2-3 all +libmaven-shared-io-java 3.0.0-3 all +libmaven-shared-utils-java 3.3.0-1+deb11u1 all +libmaven3-core-java 3.6.3-5 all +libpentaho-reporting-flow-engine-java 0.9.4-5.1 all +libpixie-java 1:1.1.6-3.1 all +libplexus-archiver-java 3.6.0-2 all +libplexus-cipher-java 1.8-2 all +libplexus-classworlds-java 2.6.0-1 all +libplexus-component-annotations-java 2.1.0-1 all +libplexus-interpolation-java 1.26-1 all +libplexus-io-java 3.2.0-1.1 all +libplexus-sec-dispatcher-java 1.4-4 all +libplexus-utils2-java 3.3.0-1 all +librelaxng-datatype-java 1.0+ds1-3.1 all +libreoffice 1:7.0.4-4+deb11u4 amd64 +libreoffice-base 1:7.0.4-4+deb11u4 amd64 +libreoffice-base-drivers 1:7.0.4-4+deb11u4 amd64 +libreoffice-java-common 1:7.0.4-4+deb11u4 all +libreoffice-nlpsolver 0.9+LibO7.0.4-4+deb11u4 all +libreoffice-report-builder 1:7.0.4-4+deb11u4 all +libreoffice-report-builder-bin 1:7.0.4-4+deb11u4 amd64 +libreoffice-script-provider-bsh 1:7.0.4-4+deb11u4 all +libreoffice-script-provider-js 1:7.0.4-4+deb11u4 all +libreoffice-script-provider-python 1:7.0.4-4+deb11u4 all +libreoffice-sdbc-firebird 1:7.0.4-4+deb11u4 amd64 +libreoffice-sdbc-hsqldb 1:7.0.4-4+deb11u4 amd64 +libreoffice-sdbc-mysql 1:7.0.4-4+deb11u4 amd64 +libreoffice-sdbc-postgresql 1:7.0.4-4+deb11u4 amd64 +libreoffice-wiki-publisher 1.2.0+LibO7.0.4-4+deb11u4 all +librepository-java 1.1.6-4 all +librngom-java 2.3.0.1-10 all +libsac-java 1.3+dfsg-5.1 all +libsaxonhe-java 9.9.1.5+dfsg-1 all +libserializer-java 1.1.6-6 all +libservlet-api-java 4.0.1-2 all +libservlet3.1-java 1:4.0.1-2 all +libsisu-inject-java 0.3.4-2 all +libsisu-plexus-java 0.3.4-3 all +libslf4j-java 1.7.30-1 all +libsnappy-java 1.1.8.3-1 all +libsnappy-jni 1.1.8.3-1 amd64 +libstax-ex-java 1.7.8-3 all +libstreambuffer-java 1.5.4-1.1 all +libtommath1 1.2.0-6 amd64 +libtxw2-java 2.3.0.1-10 all +libunoil-java 1:7.0.4-4+deb11u4 all +libwagon-http-java 3.3.4-1 all +libwagon-provider-api-java 3.3.4-1 all +libwebsocket-api-java 1.1-2 all +libxerces2-java 2.12.1-1 all +libxml-commons-external-java 1.4.01-5 all +libxml-commons-resolver1.1-java 1.2-11 all +libxml-java 1.1.6.dfsg-3.1 all +libxmlbeans-java 3.0.2-1 all +libxom-java 1.2.10-1.1 all +libxsom-java 2.3.0.1-10 all +libxz-java 1.8-2 all +mariadb-common 1:10.5.15-0+deb11u1 all +mysql-common 5.8+1.0.7 all +openjdk-11-jre 11.0.16+8-1~deb11u1 amd64 +openjdk-11-jre-headless 11.0.16+8-1~deb11u1 amd64
2022-12-03 17:47:27 +01:00 · 2022-12-02 17:20:32 +01:00 · 2022-12-02 17:17:50 +01:00 · 2022-11-30 16:26:53 +01:00 · 2022-11-30 16:09:35 +01:00 · 2022-11-30 09:58:45 +01:00
269 changed files with 13515 additions and 397 deletions
@@ -11,14 +11,14 @@ mkdir -p './X11/xorg.conf.d'
 mkdir -p './apparmor.d/force-complain'
 mkdir -p './apt/auth.conf.d'
 mkdir -p './apt/listchanges.conf.d'
-mkdir -p './apt/preferences.d'
 mkdir -p './avahi/services'
 mkdir -p './binfmt.d'
-mkdir -p './ca-certificates/update.d'
 mkdir -p './cups/interfaces'
 mkdir -p './cups/ssl'
 mkdir -p './dbus-1/session.d'
 mkdir -p './dconf/db'
+mkdir -p './gconf/gconf.xml.defaults'
+mkdir -p './gconf/gconf.xml.mandatory'
 mkdir -p './glvnd/egl_vendor.d'
 mkdir -p './gss/mech.d'
 mkdir -p './initramfs-tools/hooks'
@@ -34,9 +34,11 @@ mkdir -p './initramfs-tools/scripts/nfs-top'
 mkdir -p './initramfs-tools/scripts/panic'
 mkdir -p './kernel/install.d'
 mkdir -p './libpaper.d'
-mkdir -p './mate-settings-daemon/xrandr'
 mkdir -p './modprobe.d'
+mkdir -p './mysql/mariadb.conf.d'
 mkdir -p './network/interfaces.d'
+mkdir -p './openvpn/client'
+mkdir -p './openvpn/server'
 mkdir -p './polkit-1/localauthority/10-vendor.d'
 mkdir -p './polkit-1/localauthority/20-org.d'
 mkdir -p './polkit-1/localauthority/30-site.d'
@@ -63,6 +65,10 @@ mkdir -p './vulkan/implicit_layer.d'
 maybe chmod 0755 '.'
 maybe chmod 0700 '.etckeeper'
 maybe chmod 0644 '.gitignore'
+maybe chmod 0755 '.java'
+maybe chmod 0755 '.java/.systemPrefs'
+maybe chmod 0644 '.java/.systemPrefs/.system.lock'
+maybe chmod 0644 '.java/.systemPrefs/.systemRootModFile'
 maybe chmod 0755 'ImageMagick-6'
 maybe chmod 0644 'ImageMagick-6/coder.xml'
 maybe chmod 0644 'ImageMagick-6/colors.xml'
@@ -92,7 +98,10 @@ maybe chmod 0755 'NetworkManager/dnsmasq-shared.d'
 maybe chmod 0755 'NetworkManager/dnsmasq.d'
 maybe chmod 0755 'NetworkManager/system-connections'
 maybe chmod 0600 'NetworkManager/system-connections/Funknetzwerkverbindung 1.nmconnection'
+maybe chmod 0600 'NetworkManager/system-connections/Kabelgebundene Verbindung 1.nmconnection'
 maybe chmod 0600 'NetworkManager/system-connections/Wired connection 1'
+maybe chmod 0600 'NetworkManager/system-connections/vmpfsense-UDP4-1194-mende-2.5.0.nmconnection'
+maybe chmod 0600 'NetworkManager/system-connections/vmpfsense-UDP4-1195-mende-adm-config (1).nmconnection'
 maybe chmod 0755 'PackageKit'
 maybe chmod 0644 'PackageKit/PackageKit.conf'
 maybe chmod 0644 'PackageKit/Vendor.conf'
@@ -140,6 +149,7 @@ maybe chmod 0644 'X11/app-defaults/UXTerm'
 maybe chmod 0644 'X11/app-defaults/UXTerm-color'
 maybe chmod 0644 'X11/app-defaults/Viewres'
 maybe chmod 0644 'X11/app-defaults/Viewres-color'
+maybe chmod 0644 'X11/app-defaults/Vncviewer'
 maybe chmod 0644 'X11/app-defaults/XCalc'
 maybe chmod 0644 'X11/app-defaults/XCalc-color'
 maybe chmod 0644 'X11/app-defaults/XClipboard'
@@ -443,6 +453,7 @@ maybe chmod 0644 'apparmor.d/abstractions/smbpass'
 maybe chmod 0644 'apparmor.d/abstractions/ssl_certs'
 maybe chmod 0644 'apparmor.d/abstractions/ssl_keys'
 maybe chmod 0644 'apparmor.d/abstractions/svn-repositories'
+maybe chmod 0644 'apparmor.d/abstractions/tor'
 maybe chmod 0644 'apparmor.d/abstractions/ubuntu-bittorrent-clients'
 maybe chmod 0644 'apparmor.d/abstractions/ubuntu-browsers'
 maybe chmod 0755 'apparmor.d/abstractions/ubuntu-browsers.d'
@@ -489,6 +500,9 @@ maybe chmod 0755 'apparmor.d/local'
 maybe chmod 0644 'apparmor.d/local/README'
 maybe chmod 0644 'apparmor.d/local/lsb_release'
 maybe chmod 0644 'apparmor.d/local/nvidia_modprobe'
+maybe chmod 0644 'apparmor.d/local/system_tor'
+maybe chmod 0644 'apparmor.d/local/torbrowser.Browser.firefox'
+maybe chmod 0644 'apparmor.d/local/torbrowser.Tor.tor'
 maybe chmod 0644 'apparmor.d/local/usr.bin.man'
 maybe chmod 0644 'apparmor.d/local/usr.bin.thunderbird'
 maybe chmod 0644 'apparmor.d/local/usr.lib.libreoffice.program.oosplash'
@@ -500,6 +514,9 @@ maybe chmod 0644 'apparmor.d/local/usr.sbin.cupsd'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.ntpd'
 maybe chmod 0644 'apparmor.d/lsb_release'
 maybe chmod 0644 'apparmor.d/nvidia_modprobe'
+maybe chmod 0644 'apparmor.d/system_tor'
+maybe chmod 0644 'apparmor.d/torbrowser.Browser.firefox'
+maybe chmod 0644 'apparmor.d/torbrowser.Tor.tor'
 maybe chmod 0755 'apparmor.d/tunables'
 maybe chmod 0644 'apparmor.d/tunables/alias'
 maybe chmod 0644 'apparmor.d/tunables/apparmorfs'
@@ -519,6 +536,7 @@ maybe chmod 0644 'apparmor.d/tunables/run'
 maybe chmod 0644 'apparmor.d/tunables/securityfs'
 maybe chmod 0644 'apparmor.d/tunables/share'
 maybe chmod 0644 'apparmor.d/tunables/sys'
+maybe chmod 0644 'apparmor.d/tunables/torbrowser'
 maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs'
 maybe chmod 0755 'apparmor.d/tunables/xdg-user-dirs.d'
 maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs.d/site.local'
@@ -552,12 +570,15 @@ maybe chmod 0755 'apt/auth.conf.d'
 maybe chmod 0644 'apt/listchanges.conf'
 maybe chmod 0755 'apt/listchanges.conf.d'
 maybe chmod 0755 'apt/preferences.d'
+maybe chmod 0644 'apt/preferences.d/tor'
 maybe chmod 0644 'apt/sources.list'
 maybe chmod 0755 'apt/sources.list.d'
 maybe chmod 0644 'apt/sources.list.d/docker.list'
+maybe chmod 0644 'apt/sources.list.d/google-chrome.list'
 maybe chmod 0644 'apt/sources.list.d/lutris.list'
 maybe chmod 0644 'apt/sources.list.d/spotify.list'
 maybe chmod 0644 'apt/sources.list.d/steam.list'
+maybe chmod 0644 'apt/sources.list.d/unstable.list'
 maybe chmod 0644 'apt/sources.list.d/winehq-bullseye.sources'
 maybe chmod 0644 'apt/trusted.gpg'
 maybe chmod 0755 'apt/trusted.gpg.d'
@@ -570,8 +591,10 @@ maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-buster-stable.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-stable.gpg'
+maybe chmod 0644 'apt/trusted.gpg.d/google-chrome.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/lutris.asc'
 maybe chmod 0644 'apt/trusted.gpg.d/spotify-2021-10-27-5E3C45D7B312C643.gpg'
+maybe chmod 0644 'apt/trusted.gpg.d/spotify-2022-11-14-7A3A762FAFD4A51F.gpg'
 maybe chmod 0644 'apt/trusted.gpg.d/steam.gpg'
 maybe chmod 0755 'avahi'
 maybe chmod 0755 'avahi/avahi-autoipd.action'
@@ -591,6 +614,7 @@ maybe chmod 0644 'bluetooth/network.conf'
 maybe chmod 0755 'ca-certificates'
 maybe chmod 0644 'ca-certificates.conf'
 maybe chmod 0755 'ca-certificates/update.d'
+maybe chmod 0755 'ca-certificates/update.d/jks-keystore'
 maybe chgrp 'dip' 'chatscripts'
 maybe chmod 2750 'chatscripts'
 maybe chmod 0644 'chatscripts/gprs'
@@ -601,6 +625,8 @@ maybe chmod 0775 'check_mk'
 maybe chmod 0640 'check_mk/cmk-update-agent.cfg'
 maybe chmod 0640 'check_mk/docker.cfg'
 maybe chmod 0640 'check_mk/mk_inventory.cfg'
+maybe chmod 0644 'check_mk/super-server.cfg'
+maybe chmod 0644 'check_mk/xinetd-service-template.cfg'
 maybe chmod 0600 'cmk-update-agent.state'
 maybe chmod 0755 'console-setup'
 maybe chmod 0644 'console-setup/cached_Lat15-Fixed16.psf.gz'
@@ -662,6 +688,7 @@ maybe chmod 0755 'cron.weekly'
 maybe chmod 0644 'cron.weekly/.placeholder'
 maybe chmod 0755 'cron.weekly/0anacron'
 maybe chmod 0755 'cron.weekly/man-db'
+maybe chmod 0755 'cron.weekly/tor'
 maybe chmod 0644 'crontab'
 maybe chmod 0755 'cruft'
 maybe chmod 0755 'cruft/filters-unex'
@@ -709,11 +736,12 @@ maybe chmod 0644 'default/anacron'
 maybe chmod 0644 'default/apache-htcacheclean'
 maybe chmod 0644 'default/avahi-daemon'
 maybe chmod 0644 'default/bluetooth'
+maybe chmod 0600 'default/cacerts'
 maybe chmod 0644 'default/console-setup'
 maybe chmod 0644 'default/cron'
 maybe chmod 0644 'default/cryptdisks'
 maybe chmod 0644 'default/dbus'
-maybe chmod 0644 'default/docker'
+maybe chmod 0644 'default/google-chrome'
 maybe chmod 0644 'default/grub'
 maybe chmod 0755 'default/grub.d'
 maybe chmod 0644 'default/grub.d/init-select.cfg'
@@ -725,10 +753,12 @@ maybe chmod 0644 'default/nfs-common'
 maybe chmod 0644 'default/nss'
 maybe chmod 0644 'default/ntp'
 maybe chmod 0644 'default/omd'
+maybe chmod 0644 'default/openvpn'
 maybe chmod 0644 'default/rpcbind'
 maybe chmod 0644 'default/rsync'
 maybe chmod 0644 'default/saned'
 maybe chmod 0644 'default/ssh'
+maybe chmod 0644 'default/tor'
 maybe chmod 0644 'default/useradd'
 maybe chmod 0644 'default/xinetd'
 maybe chmod 0644 'deluser.conf'
@@ -773,6 +803,7 @@ maybe chmod 0755 'etckeeper/commit.d/30darcs-add'
 maybe chmod 0755 'etckeeper/commit.d/30git-add'
 maybe chmod 0755 'etckeeper/commit.d/30hg-addremove'
 maybe chmod 0755 'etckeeper/commit.d/50vcs-commit'
+maybe chmod 0755 'etckeeper/commit.d/60-push'
 maybe chmod 0755 'etckeeper/commit.d/99push'
 maybe chmod 0644 'etckeeper/commit.d/README'
 maybe chmod 0755 'etckeeper/daily'
@@ -814,6 +845,11 @@ maybe chmod 0644 'etckeeper/update-ignore.d/README'
 maybe chmod 0755 'etckeeper/vcs.d'
 maybe chmod 0755 'etckeeper/vcs.d/50vcs-cmd'
 maybe chmod 0644 'ethertypes'
+maybe chmod 0755 'firebird'
+maybe chmod 0755 'firebird/3.0'
+maybe chmod 0644 'firebird/3.0/fbintl.conf'
+maybe chmod 0644 'firebird/3.0/firebird.conf'
+maybe chmod 0644 'firebird/3.0/plugins.conf'
 maybe chmod 0755 'firefox-esr'
 maybe chmod 0644 'firefox-esr/firefox-esr.js'
 maybe chmod 0755 'fonts'
@@ -824,17 +860,23 @@ maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf'
 maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf'
 maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-sans.conf'
 maybe chmod 0644 'fonts/conf.avail/20-unhint-small-dejavu-serif.conf'
+maybe chmod 0644 'fonts/conf.avail/30-0-google-crosextra-carlito-fontconfig.conf'
 maybe chmod 0644 'fonts/conf.avail/30-droid-noto-mono.conf'
+maybe chmod 0644 'fonts/conf.avail/30-droid-noto.conf'
 maybe chmod 0644 'fonts/conf.avail/57-dejavu-sans-mono.conf'
 maybe chmod 0644 'fonts/conf.avail/57-dejavu-sans.conf'
 maybe chmod 0644 'fonts/conf.avail/57-dejavu-serif.conf'
 maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans-mono.conf'
 maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-sans.conf'
 maybe chmod 0644 'fonts/conf.avail/58-dejavu-lgc-serif.conf'
+maybe chmod 0644 'fonts/conf.avail/62-google-crosextra-carlito-fontconfig.conf'
 maybe chmod 0644 'fonts/conf.avail/65-droid-sans-fallback.conf'
 maybe chmod 0755 'fonts/conf.d'
 maybe chmod 0644 'fonts/conf.d/README'
 maybe chmod 0644 'fonts/fonts.conf'
+maybe chmod 0755 'forticlient'
+maybe chmod 0600 'forticlient/config.db'
+maybe chmod 0644 'forticlient/custom_machine_id.conf'
 maybe chmod 0644 'fstab'
 maybe chmod 0644 'fuse.conf'
 maybe chmod 0755 'fwupd'
@@ -854,6 +896,8 @@ maybe chmod 0755 'gconf'
 maybe chmod 0755 'gconf/2'
 maybe chmod 0644 'gconf/2/evoldap.conf'
 maybe chmod 0644 'gconf/2/path'
+maybe chmod 0755 'gconf/gconf.xml.defaults'
+maybe chmod 0755 'gconf/gconf.xml.mandatory'
 maybe chmod 0755 'ghostscript'
 maybe chmod 0755 'ghostscript/cidfmap.d'
 maybe chmod 0644 'ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf'
@@ -908,7 +952,6 @@ maybe chmod 0644 'hosts.deny'
 maybe chmod 0644 'idmapd.conf'
 maybe chmod 0755 'ifplugd'
 maybe chmod 0755 'ifplugd/action.d'
-maybe chmod 0755 'init'
 maybe chmod 0755 'init.d'
 maybe chmod 0755 'init.d/alsa-utils'
 maybe chmod 0755 'init.d/anacron'
@@ -917,7 +960,10 @@ maybe chmod 0755 'init.d/apache2'
 maybe chmod 0755 'init.d/apparmor'
 maybe chmod 0755 'init.d/avahi-daemon'
 maybe chmod 0755 'init.d/bluetooth'
-maybe chmod 0755 'init.d/check-mk-free-2.0.0p24'
+maybe chmod 0755 'init.d/check-mk-free-2.1.0p15'
+maybe chmod 0755 'init.d/check-mk-free-2.1.0p6'
+maybe chmod 0755 'init.d/check-mk-free-2.1.0p8'
+maybe chmod 0755 'init.d/check-mk-free-2.1.0p9'
 maybe chmod 0755 'init.d/console-setup.sh'
 maybe chmod 0755 'init.d/cron'
 maybe chmod 0755 'init.d/cryptdisks'
@@ -925,7 +971,6 @@ maybe chmod 0755 'init.d/cryptdisks-early'
 maybe chmod 0755 'init.d/cups'
 maybe chmod 0755 'init.d/cups-browsed'
 maybe chmod 0755 'init.d/dbus'
-maybe chmod 0755 'init.d/docker'
 maybe chmod 0755 'init.d/ftscanhv'
 maybe chmod 0755 'init.d/ftsprhv'
 maybe chmod 0755 'init.d/hwclock.sh'
@@ -937,6 +982,8 @@ maybe chmod 0755 'init.d/lvm2-lvmpolld'
 maybe chmod 0755 'init.d/networking'
 maybe chmod 0755 'init.d/nfs-common'
 maybe chmod 0755 'init.d/ntp'
+maybe chmod 0755 'init.d/openvpn'
+maybe chmod 0755 'init.d/pcscd'
 maybe chmod 0755 'init.d/plymouth'
 maybe chmod 0755 'init.d/plymouth-log'
 maybe chmod 0755 'init.d/postfix'
@@ -951,13 +998,13 @@ maybe chmod 0755 'init.d/speech-dispatcher'
 maybe chmod 0755 'init.d/ssh'
 maybe chmod 0755 'init.d/sudo'
 maybe chmod 0755 'init.d/systune'
+maybe chmod 0755 'init.d/tor'
 maybe chmod 0755 'init.d/udev'
 maybe chmod 0755 'init.d/unattended-upgrades'
 maybe chmod 0755 'init.d/uuidd'
 maybe chmod 0755 'init.d/vmware-USBArbitrator'
 maybe chmod 0755 'init.d/x11-common'
 maybe chmod 0755 'init.d/xinetd'
-maybe chmod 0644 'init/docker.conf'
 maybe chmod 0755 'initramfs-tools'
 maybe chmod 0755 'initramfs-tools/conf.d'
 maybe chmod 0644 'initramfs-tools/conf.d/resume'
@@ -998,6 +1045,41 @@ maybe chmod 0755 'iproute2/rt_tables.d'
 maybe chmod 0644 'iproute2/rt_tables.d/README'
 maybe chmod 0644 'issue'
 maybe chmod 0644 'issue.net'
+maybe chmod 0755 'java'
+maybe chmod 0755 'java-11-openjdk'
+maybe chmod 0644 'java-11-openjdk/accessibility.properties'
+maybe chmod 0755 'java-11-openjdk/jfr'
+maybe chmod 0644 'java-11-openjdk/jfr/default.jfc'
+maybe chmod 0644 'java-11-openjdk/jfr/profile.jfc'
+maybe chmod 0644 'java-11-openjdk/jvm-amd64.cfg'
+maybe chmod 0644 'java-11-openjdk/logging.properties'
+maybe chmod 0755 'java-11-openjdk/management'
+maybe chmod 0644 'java-11-openjdk/management/jmxremote.access'
+maybe chmod 0644 'java-11-openjdk/management/management.properties'
+maybe chmod 0644 'java-11-openjdk/net.properties'
+maybe chmod 0644 'java-11-openjdk/psfont.properties.ja'
+maybe chmod 0644 'java-11-openjdk/psfontj2d.properties'
+maybe chmod 0755 'java-11-openjdk/security'
+maybe chmod 0644 'java-11-openjdk/security/blocked.certs'
+maybe chmod 0644 'java-11-openjdk/security/default.policy'
+maybe chmod 0644 'java-11-openjdk/security/java.policy'
+maybe chmod 0644 'java-11-openjdk/security/java.security'
+maybe chmod 0644 'java-11-openjdk/security/nss.cfg'
+maybe chmod 0755 'java-11-openjdk/security/policy'
+maybe chmod 0644 'java-11-openjdk/security/policy/README.txt'
+maybe chmod 0755 'java-11-openjdk/security/policy/limited'
+maybe chmod 0644 'java-11-openjdk/security/policy/limited/default_US_export.policy'
+maybe chmod 0644 'java-11-openjdk/security/policy/limited/default_local.policy'
+maybe chmod 0644 'java-11-openjdk/security/policy/limited/exempt_local.policy'
+maybe chmod 0755 'java-11-openjdk/security/policy/unlimited'
+maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_US_export.policy'
+maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_local.policy'
+maybe chmod 0644 'java-11-openjdk/security/public_suffix_list.dat'
+maybe chmod 0644 'java-11-openjdk/sound.properties'
+maybe chmod 0644 'java-11-openjdk/swing.properties'
+maybe chmod 0755 'java/security'
+maybe chmod 0755 'java/security/security.d'
+maybe chmod 0644 'java/security/security.d/2000-org.bouncycastle.jce.provider.BouncyCastleProvider'
 maybe chmod 0755 'kernel'
 maybe chmod 0644 'kernel-img.conf'
 maybe chmod 0755 'kernel/install.d'
@@ -1022,6 +1104,7 @@ maybe chmod 0644 'libaudit.conf'
 maybe chmod 0755 'libblockdev'
 maybe chmod 0755 'libblockdev/conf.d'
 maybe chmod 0644 'libblockdev/conf.d/00-default.cfg'
+maybe chmod 0644 'libccid_Info.plist'
 maybe chmod 0755 'libnl-3'
 maybe chmod 0644 'libnl-3/classid'
 maybe chmod 0644 'libnl-3/pktloc'
@@ -1031,6 +1114,7 @@ maybe chmod 0644 'libreoffice/psprint.conf'
 maybe chmod 0755 'libreoffice/registry'
 maybe chmod 0644 'libreoffice/registry/Langpack-de.xcd'
 maybe chmod 0644 'libreoffice/registry/Langpack-en-US.xcd'
+maybe chmod 0644 'libreoffice/registry/base.xcd'
 maybe chmod 0644 'libreoffice/registry/calc.xcd'
 maybe chmod 0644 'libreoffice/registry/draw.xcd'
 maybe chmod 0644 'libreoffice/registry/graphicfilter.xcd'
@@ -1040,7 +1124,9 @@ maybe chmod 0644 'libreoffice/registry/main.xcd'
 maybe chmod 0644 'libreoffice/registry/math.xcd'
 maybe chmod 0644 'libreoffice/registry/ogltrans.xcd'
 maybe chmod 0644 'libreoffice/registry/pdfimport.xcd'
+maybe chmod 0644 'libreoffice/registry/postgresql.xcd'
 maybe chmod 0644 'libreoffice/registry/pyuno.xcd'
+maybe chmod 0644 'libreoffice/registry/reportbuilder.xcd'
 maybe chmod 0755 'libreoffice/registry/res'
 maybe chmod 0644 'libreoffice/registry/res/fcfg_langpack_de.xcd'
 maybe chmod 0644 'libreoffice/registry/res/fcfg_langpack_en-US.xcd'
@@ -1079,6 +1165,7 @@ maybe chmod 0644 'logrotate.d/ppp'
 maybe chmod 0644 'logrotate.d/rsyslog'
 maybe chmod 0644 'logrotate.d/sane-utils'
 maybe chmod 0644 'logrotate.d/speech-dispatcher'
+maybe chmod 0644 'logrotate.d/tor'
 maybe chmod 0644 'logrotate.d/unattended-upgrades'
 maybe chmod 0644 'logrotate.d/wtmp'
 maybe chmod 0755 'lvm'
@@ -1105,6 +1192,7 @@ maybe chmod 0644 'manpath.config'
 maybe chmod 0755 'mate'
 maybe chmod 0755 'mate-settings-daemon'
 maybe chmod 0755 'mate-settings-daemon/xrandr'
+maybe chmod 0644 'mate-settings-daemon/xrandr/monitors.xml'
 maybe chmod 0644 'mate/defaults.list'
 maybe chmod 0755 'menu'
 maybe chmod 0755 'menu-methods'
@@ -1125,6 +1213,13 @@ maybe chmod 0644 'modules'
 maybe chmod 0755 'modules-load.d'
 maybe chmod 0644 'modules-load.d/cups-filters.conf'
 maybe chmod 0644 'motd'
+maybe chmod 0755 'mysql'
+maybe chmod 0755 'mysql/conf.d'
+maybe chmod 0644 'mysql/conf.d/mysql.cnf'
+maybe chmod 0644 'mysql/conf.d/mysqldump.cnf'
+maybe chmod 0644 'mysql/mariadb.cnf'
+maybe chmod 0755 'mysql/mariadb.conf.d'
+maybe chmod 0644 'mysql/my.cnf.fallback'
 maybe chmod 0644 'nanorc'
 maybe chmod 0644 'neofetch'
 maybe chmod 0644 'neofetch/neofetch.config'
@@ -1134,6 +1229,7 @@ maybe chmod 0644 'netplan/01-netcfg.yaml'
 maybe chmod 0755 'network'
 maybe chmod 0755 'network/if-down.d'
 maybe chmod 0755 'network/if-down.d/avahi-autoipd'
+maybe chmod 0755 'network/if-down.d/openvpn'
 maybe chmod 0755 'network/if-down.d/postfix'
 maybe chmod 0755 'network/if-post-down.d'
 maybe chmod 0755 'network/if-post-down.d/wireless-tools'
@@ -1141,6 +1237,7 @@ maybe chmod 0755 'network/if-pre-up.d'
 maybe chmod 0755 'network/if-pre-up.d/wireless-tools'
 maybe chmod 0755 'network/if-up.d'
 maybe chmod 0755 'network/if-up.d/avahi-autoipd'
+maybe chmod 0755 'network/if-up.d/openvpn'
 maybe chmod 0755 'network/if-up.d/postfix'
 maybe chmod 0644 'network/interfaces'
 maybe chmod 0755 'network/interfaces.d'
@@ -1152,6 +1249,12 @@ maybe chmod 0755 'openal'
 maybe chmod 0644 'openal/alsoft.conf'
 maybe chmod 0755 'openni2'
 maybe chmod 0644 'openni2/OpenNI.ini'
+maybe chmod 0755 'opensc'
+maybe chmod 0644 'opensc/opensc.conf'
+maybe chmod 0755 'openvpn'
+maybe chmod 0755 'openvpn/client'
+maybe chmod 0755 'openvpn/server'
+maybe chmod 0755 'openvpn/update-resolv-conf'
 maybe chmod 0755 'opt'
 maybe chmod 0755 'opt/chrome'
 maybe chmod 0755 'opt/chrome/policies'
@@ -1326,6 +1429,8 @@ maybe chmod 0755 'rc4.d'
 maybe chmod 0755 'rc5.d'
 maybe chmod 0755 'rc6.d'
 maybe chmod 0755 'rcS.d'
+maybe chmod 0755 'reader.conf.d'
+maybe chmod 0644 'reader.conf.d/libccidtwin'
 maybe chmod 0644 'reportbug.conf'
 maybe chmod 0644 'request-key.conf'
 maybe chmod 0755 'request-key.d'
@@ -1474,6 +1579,7 @@ maybe chmod 0755 'skel'
 maybe chmod 0644 'skel/.bash_logout'
 maybe chmod 0644 'skel/.bashrc'
 maybe chmod 0644 'skel/.profile'
+maybe chmod 0644 'smi.conf'
 maybe chmod 0755 'snmp'
 maybe chmod 0644 'snmp/snmp.conf'
 maybe chmod 0755 'sound'
@@ -1512,6 +1618,8 @@ maybe chmod 0755 'ssh/sshd_config.d'
 maybe chmod 0755 'ssl'
 maybe chmod 0755 'ssl/certs'
 maybe chmod 0644 'ssl/certs/ca-certificates.crt'
+maybe chmod 0755 'ssl/certs/java'
+maybe chmod 0644 'ssl/certs/java/cacerts'
 maybe chmod 0644 'ssl/certs/ssl-cert-snakeoil.pem'
 maybe chmod 0644 'ssl/openssl.cnf'
 maybe chgrp 'ssl-cert' 'ssl/private'
@@ -1535,8 +1643,20 @@ maybe chmod 0755 'sv/ssh/finish'
 maybe chmod 0755 'sv/ssh/log'
 maybe chmod 0755 'sv/ssh/log/run'
 maybe chmod 0755 'sv/ssh/run'
+maybe chmod 0755 'sv/tor'
+maybe chmod 0755 'sv/tor/.meta'
+maybe chmod 0644 'sv/tor/.meta/installed'
+maybe chmod 0755 'sv/tor/log'
+maybe chmod 0755 'sv/tor/log/run'
+maybe chmod 0755 'sv/tor/run'
 maybe chmod 0755 'synth-shell'
 maybe chmod 0755 'synth-shell/examples'
+maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.cyan.config'
+maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.gray.config'
+maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.green.config'
+maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.mapir.orange.config'
+maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.org.uma.scbi.config'
+maybe chmod 0644 'synth-shell/examples/synth-shell-greeter.uma.ea7rct.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.blue.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.gray.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.green.config'
@@ -1544,8 +1664,22 @@ maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.magenta.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.orange.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.red.config'
 maybe chmod 0644 'synth-shell/examples/synth-shell-prompt.yellow.config'
+maybe chmod 0755 'synth-shell/os'
+maybe chmod 0644 'synth-shell/os/synth-shell-greeter.archlinux.config'
+maybe chmod 0644 'synth-shell/os/synth-shell-greeter.debian.config'
+maybe chmod 0644 'synth-shell/os/synth-shell-greeter.manjaro.config'
+maybe chmod 0644 'synth-shell/os/synth-shell-greeter.popos.config'
+maybe chmod 0644 'synth-shell/os/synth-shell-greeter.raspbian.config'
+maybe chmod 0644 'synth-shell/os/synth-shell-greeter.root.config'
+maybe chmod 0644 'synth-shell/os/synth-shell-greeter.ubuntu.config'
+maybe chmod 0755 'synth-shell/personal'
+maybe chmod 0644 'synth-shell/personal/README.md'
+maybe chmod 0644 'synth-shell/personal/synth-shell-greeter.andresgongora.config'
+maybe chmod 0644 'synth-shell/synth-shell-greeter.config'
+maybe chmod 0644 'synth-shell/synth-shell-greeter.config.default'
 maybe chmod 0644 'synth-shell/synth-shell-prompt.config'
 maybe chmod 0644 'synth-shell/synth-shell-prompt.config.default'
+maybe chmod 0644 'synth-shell/synth-shell-prompt.config.new'
 maybe chmod 0644 'synth-shell/synth-shell-prompt.root.config'
 maybe chmod 0644 'sysctl.conf'
 maybe chmod 0755 'sysctl.d'
@@ -1561,9 +1695,6 @@ maybe chmod 0644 'systemd/sleep.conf'
 maybe chmod 0755 'systemd/system'
 maybe chmod 0644 'systemd/system.conf'
 maybe chmod 0755 'systemd/system/bluetooth.target.wants'
-maybe chmod 0644 'systemd/system/check-mk-agent-async.service'
-maybe chmod 0644 'systemd/system/check-mk-agent.socket'
-maybe chmod 0644 'systemd/system/check-mk-agent@.service'
 maybe chmod 0755 'systemd/system/default.target.wants'
 maybe chmod 0755 'systemd/system/getty.target.wants'
 maybe chmod 0755 'systemd/system/graphical.target.wants'
@@ -1592,6 +1723,9 @@ maybe chmod 0644 'timidity/fluidr3_gs.cfg'
 maybe chmod 0644 'timidity/timgm6mb.cfg'
 maybe chmod 0755 'tmpfiles.d'
 maybe chmod 0644 'tmpfiles.d/screen-cleanup.conf'
+maybe chmod 0755 'tor'
+maybe chmod 0644 'tor/torrc'
+maybe chmod 0644 'tor/torsocks.conf'
 maybe chmod 0644 'ucf.conf'
 maybe chmod 0755 'udev'
 maybe chmod 0755 'udev/hwdb.d'
@@ -1755,6 +1889,8 @@ maybe chmod 0755 'vulkan/explicit_layer.d'
 maybe chmod 0755 'vulkan/icd.d'
 maybe chmod 0755 'vulkan/implicit_layer.d'
 maybe chmod 0644 'wgetrc'
+maybe chmod 0755 'wireshark'
+maybe chmod 0644 'wireshark/init.lua'
 maybe chmod 0755 'wpa_supplicant'
 maybe chmod 0755 'wpa_supplicant/action_wpa.sh'
 maybe chmod 0644 'wpa_supplicant/functions.sh'
@@ -1802,6 +1938,8 @@ maybe chmod 0644 'xinetd.d/time-udp'
 maybe chmod 0755 'xml'
 maybe chmod 0644 'xml/catalog'
 maybe chmod 0644 'xml/docbook-xml.xml'
+maybe chmod 0755 'xml/resolver'
+maybe chmod 0644 'xml/resolver/CatalogManager.properties'
 maybe chmod 0644 'xml/sgml-data.xml'
 maybe chmod 0644 'xml/xml-core.xml'
 maybe chmod 0755 'xrdb'
@@ -1,5 +1,7 @@
 [main]
 plugins=ifupdown,keyfile
+dns=none
+rc-manager=unmanaged

 [ifupdown]
 managed=false
@@ -0,0 +1,22 @@
+[connection]
+id=Kabelgebundene Verbindung 1
+uuid=e217bf4d-234f-380e-b84f-ec7fea6008b2
+type=ethernet
+autoconnect-priority=-999
+interface-name=enxea449e54a83e
+permissions=
+
+[ethernet]
+mac-address-blacklist=
+
+[ipv4]
+address1=10.0.0.1/24
+dns-search=
+method=manual
+
+[ipv6]
+addr-gen-mode=stable-privacy
+dns-search=
+method=auto
+
+[proxy]
@@ -2,15 +2,18 @@
 id=Heimnetz
 uuid=8bc1eb63-658e-4add-89bc-b66e7847e972
 type=ethernet
+autoconnect-priority=1
+interface-name=enp0s25
 permissions=
-timestamp=1651575581
+timestamp=1659709537

 [ethernet]
+mac-address=68:F7:28:E5:AA:AB
 mac-address-blacklist=

 [ipv4]
 address1=192.168.0.99/24,192.168.0.1
-dns=192.168.0.28;192.168.0.1;
+dns=192.168.0.5;192.168.0.1;
 dns-search=realm.local;
 method=manual

@@ -0,0 +1,34 @@
+[connection]
+id=vmpfsense-UDP4-1194-mende-2.5.0
+uuid=03022d65-0b3f-4953-954b-dc543731bb47
+type=vpn
+autoconnect=false
+permissions=
+
+[vpn]
+auth=SHA512
+ca=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-ca.pem
+cert=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-cert.pem
+cert-pass-flags=0
+connection-type=password-tls
+dev=tun
+key=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-key.pem
+password-flags=1
+remote=192.124.237.11:1194:udp4
+remote-cert-tls=server
+ta=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1194-mende-2.5.0-tls-auth.pem
+ta-dir=1
+username=mende
+verify-x509-name=name:vmpfsense.his.de
+service-type=org.freedesktop.NetworkManager.openvpn
+
+[ipv4]
+dns-search=
+method=auto
+
+[ipv6]
+addr-gen-mode=stable-privacy
+dns-search=
+method=auto
+
+[proxy]
@@ -0,0 +1,35 @@
+[connection]
+id=vmpfsense-UDP4-1195-mende-adm-config (1)
+uuid=5d7d58ea-1d74-4e55-a0d9-23fef463765a
+type=vpn
+autoconnect=false
+permissions=
+
+[vpn]
+auth=SHA512
+ca=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-ca.pem
+cert=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-cert.pem
+cert-pass-flags=0
+connection-type=password-tls
+dev=tun
+key=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-key.pem
+password-flags=1
+remote=192.124.237.136:1195:udp4
+remote-cert-tls=server
+reneg-seconds=0
+ta=/home/gorden/.cert/nm-openvpn/vmpfsense-UDP4-1195-mende-adm-config (1)-tls-auth.pem
+ta-dir=1
+username=mende-adm
+verify-x509-name=name:vmpfsense.his.de
+service-type=org.freedesktop.NetworkManager.openvpn
+
+[ipv4]
+dns-search=
+method=auto
+
+[ipv6]
+addr-gen-mode=stable-privacy
+dns-search=
+method=auto
+
+[proxy]
@@ -0,0 +1,138 @@
+!
+! Application defaults file for vncviewer.
+!
+
+
+!
+! The title of the main window.  "%s" will be replaced by the desktop name.
+! 
+
+Vncviewer.title: TightVNC: %s
+
+
+!
+! Translations on the main window.
+!
+
+Vncviewer.translations:\
+  <Enter>: SelectionToVNC()\n\
+  <Leave>: SelectionFromVNC()
+
+
+!
+! Uncomment to grab the keyboard in full-screen mode.
+!
+
+! Vncviewer.grabKeyboard: True
+
+
+!
+! Background around a small desktop in full-screen mode.
+!
+
+*form.background: black
+
+
+!
+! Use scrollbars on right and bottom for window smaller than desktop.
+!
+
+*viewport.allowHoriz: True
+*viewport.allowVert: True
+*viewport.useBottom: True
+*viewport.useRight: True
+*viewport*Scrollbar*thumb: None
+
+
+!
+! Default translations on desktop window.
+!
+
+*desktop.baseTranslations:\
+  <Key>F8: ShowPopup()\n\
+  <ButtonPress>: SendRFBEvent()\n\
+  <ButtonRelease>: SendRFBEvent()\n\
+  <Motion>: SendRFBEvent()\n\
+  <KeyPress>: SendRFBEvent()\n\
+  <KeyRelease>: SendRFBEvent()
+
+
+!
+! Dialog boxes
+!
+
+*serverDialog.dialog.label: VNC server:
+*serverDialog.dialog.value:
+*serverDialog.dialog.value.translations: #override\n\
+  <Key>Return: ServerDialogDone()
+
+*passwordDialog.dialog.label: Password:
+*passwordDialog.dialog.value:
+*passwordDialog.dialog.value.AsciiSink.echo: False
+*passwordDialog.dialog.value.translations: #override\n\
+  <Key>Return: PasswordDialogDone()
+
+
+!
+! Popup window appearance
+!
+
+*popup.title: TightVNC popup
+*popup*background: grey
+*popup*font: -*-helvetica-bold-r-*-*-16-*-*-*-*-*-*-*
+*popup.buttonForm.Command.borderWidth: 0
+*popup.buttonForm.Toggle.borderWidth: 0
+
+!
+! Translations on popup window - send key presses through
+!
+
+*popup.translations: #override <Message>WM_PROTOCOLS: HidePopup()
+*popup.buttonForm.translations: #override\n\
+  <KeyPress>: SendRFBEvent() HidePopup()
+
+
+!
+! Popup buttons
+!
+
+*popupButtonCount: 8
+
+*popup*button1.label: Dismiss popup
+*popup*button1.translations: #override\n\
+  <Btn1Down>,<Btn1Up>: HidePopup()
+
+*popup*button2.label: Quit viewer
+*popup*button2.translations: #override\n\
+  <Btn1Down>,<Btn1Up>: Quit()
+
+*popup*button3.label: Full screen
+*popup*button3.type: toggle
+*popup*button3.translations: #override\n\
+  <Visible>: SetFullScreenState()\n\
+  <Btn1Down>,<Btn1Up>: toggle() HidePopup() ToggleFullScreen()
+
+*popup*button4.label: Clipboard: local -> remote
+*popup*button4.translations: #override\n\
+  <Btn1Down>,<Btn1Up>: SelectionToVNC(always) HidePopup()
+
+*popup*button5.label: Clipboard: local <- remote
+*popup*button5.translations: #override\n\
+  <Btn1Down>,<Btn1Up>: SelectionFromVNC(always) HidePopup()
+
+*popup*button6.label: Request refresh
+*popup*button6.translations: #override\n\
+  <Btn1Down>,<Btn1Up>: SendRFBEvent(fbupdate) HidePopup()
+
+*popup*button7.label: Send ctrl-alt-del
+*popup*button7.translations: #override\n\
+  <Btn1Down>,<Btn1Up>: SendRFBEvent(keydown,Control_L)\
+                       SendRFBEvent(keydown,Alt_L)\
+                       SendRFBEvent(key,Delete)\
+                       SendRFBEvent(keyup,Alt_L)\
+                       SendRFBEvent(keyup,Control_L)\
+                       HidePopup()
+
+*popup*button8.label: Send F8
+*popup*button8.translations: #override\n\
+  <Btn1Down>,<Btn1Up>: SendRFBEvent(key,F8) HidePopup()
@@ -1 +1 @@
-/usr/bin/firefox-esr
+/usr/bin/google-chrome-stable
@@ -1 +0,0 @@
-/usr/share/man/man1/firefox-esr.1.gz
@@ -0,0 +1 @@
+/usr/bin/google-chrome-stable
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/java
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/lib/jexec
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/lib/jar.binfmt
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/jjs
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/man/man1/jjs.1.gz
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/keytool
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/man/man1/keytool.1.gz
@@ -0,0 +1 @@
+/etc/mysql/mariadb.cnf
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe
+/omd/versions/2.1.0p15.cfe
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe/lib/omd/bash_completion
+/omd/versions/2.1.0p15.cfe/lib/omd/bash_completion
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe/bin/omd
+/omd/versions/2.1.0p15.cfe/bin/omd
@@ -1 +1 @@
-/omd/versions/2.0.0p24.cfe/share/man/man8/omd.8.gz
+/omd/versions/2.1.0p15.cfe/share/man/man8/omd.8.gz
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/pack200
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/man/man1/pack200.1.gz
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/rmid
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmid.1.gz
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/rmiregistry
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/man/man1/rmiregistry.1.gz
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/unpack200
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/man/man1/unpack200.1.gz
@@ -0,0 +1 @@
+/usr/bin/xtightvncviewer
@@ -0,0 +1 @@
+/usr/share/man/man1/xtightvncviewer.1.gz
@@ -1 +1 @@
-/usr/bin/firefox-esr
+/usr/bin/google-chrome-stable
@@ -1 +0,0 @@
-/usr/share/man/man1/firefox-esr.1.gz
@@ -0,0 +1 @@
+/usr/bin/xtightvncviewer
@@ -0,0 +1 @@
+/usr/share/man/man1/xtightvncviewer.1.gz
@@ -0,0 +1,31 @@
+# vim:syntax=apparmor
+
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+  #include <abstractions/openssl>
+
+  network tcp,
+  network udp,
+
+  capability chown,
+  capability dac_read_search,
+  capability fowner,
+  capability fsetid,
+  capability setgid,
+  capability setuid,
+
+  /usr/bin/tor r,
+  /usr/sbin/tor r,
+
+  # Needed by obfs4proxy
+  /proc/sys/net/core/somaxconn r,
+
+  /proc/sys/kernel/random/uuid r,
+  /sys/devices/system/cpu/ r,
+  /sys/devices/system/cpu/** r,
+
+  /etc/tor/* r,
+  /usr/share/tor/** r,
+
+  /usr/bin/obfsproxy PUx,
+  /usr/bin/obfs4proxy Pix,
@@ -0,0 +1,25 @@
+# vim:syntax=apparmor
+#include <tunables/global>
+
+profile system_tor flags=(attach_disconnected) {
+  #include <abstractions/tor>
+
+  owner /var/lib/tor/** rwk,
+  owner /var/lib/tor/ r,
+  owner /var/log/tor/* w,
+
+  # During startup, tor (as root) tries to open various things such as
+  # directories via check_private_dir().  Let it.
+  /var/lib/tor/** r,
+
+  /{,var/}run/tor/ r,
+  /{,var/}run/tor/control w,
+  /{,var/}run/tor/socks w,
+  /{,var/}run/tor/tor.pid w,
+  /{,var/}run/tor/control.authcookie w,
+  /{,var/}run/tor/control.authcookie.tmp rw,
+  /{,var/}run/systemd/notify w,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/system_tor>
+}
@@ -0,0 +1,173 @@
+#include <tunables/global>
+#include <tunables/torbrowser>
+
+@{torbrowser_firefox_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox.real
+
+profile torbrowser_firefox @{torbrowser_firefox_executable} {
+  #include <abstractions/audio>
+  #include <abstractions/dri-enumerate>
+  #include <abstractions/gnome>
+  #include <abstractions/ibus>
+  #include <abstractions/mesa>
+  #include <abstractions/opencl>
+  #include if exists <abstractions/vulkan>
+  #include if exists <abstractions/dbus-session>
+  #include if exists <abstractions/X>
+
+  # Uncomment the following lines if you want to give the Tor Browser read-write
+  # access to most of your personal files.
+  # #include <abstractions/user-download>
+  # @{HOME}/ r,
+
+  # Audio support
+  /{,usr/}bin/pulseaudio Pixr,
+
+  #dbus,
+  network netlink raw,
+  network tcp,
+
+  ptrace (trace) peer=@{profile_name},
+  signal (receive, send) set=("term") peer=@{profile_name},
+
+  deny /etc/host.conf r,
+  deny /etc/hosts r,
+  deny /etc/nsswitch.conf r,
+  deny /etc/os-release r,
+  deny /etc/resolv.conf r,
+  deny /etc/passwd r,
+  deny /etc/group r,
+  deny /etc/mailcap r,
+
+  /etc/machine-id r,
+  /var/lib/dbus/machine-id r,
+
+  /dev/ r,
+  /dev/shm/ r,
+
+  owner @{PROC}/@{pid}/cgroup r,
+  owner @{PROC}/@{pid}/environ r,
+  owner @{PROC}/@{pid}/fd/ r,
+  owner @{PROC}/@{pid}/mountinfo r,
+  owner @{PROC}/@{pid}/stat r,
+  owner @{PROC}/@{pid}/status r,
+  owner @{PROC}/@{pid}/task/*/stat r,
+  @{PROC}/sys/kernel/random/uuid r,
+
+  owner @{torbrowser_installation_dir}/ r,
+  owner @{torbrowser_installation_dir}/* r,
+  owner @{torbrowser_installation_dir}/.** rwk,
+  owner @{torbrowser_installation_dir}/update.test/ rwk,
+  owner @{torbrowser_home_dir}/.** rwk,
+  owner @{torbrowser_home_dir}/ rw,
+  owner @{torbrowser_home_dir}/** rwk,
+  owner @{torbrowser_home_dir}.bak/ rwk,
+  owner @{torbrowser_home_dir}.bak/** rwk,
+  owner @{torbrowser_home_dir}/*.so mr,
+  owner @{torbrowser_home_dir}/.cache/fontconfig/ rwk,
+  owner @{torbrowser_home_dir}/.cache/fontconfig/** rwkl,
+  owner @{torbrowser_home_dir}/browser/** r,
+  owner @{torbrowser_home_dir}/{,browser/}components/*.so mr,
+  owner @{torbrowser_home_dir}/Downloads/ rwk,
+  owner @{torbrowser_home_dir}/Downloads/** rwk,
+  owner @{torbrowser_home_dir}/firefox rix,
+  owner @{torbrowser_home_dir}/{,TorBrowser/UpdateInfo/}updates/[0-9]*/* rw,
+  owner @{torbrowser_home_dir}/{,TorBrowser/UpdateInfo/}updates/[0-9]*/{,MozUpdater/bgupdate/}updater ix,
+  owner @{torbrowser_home_dir}/updater ix,
+  owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/.parentwritetest rw,
+  owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/profiles.ini r,
+  owner @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/{,**} rwk,
+  owner @{torbrowser_home_dir}/TorBrowser/Data/fontconfig/fonts.conf r,
+  owner @{torbrowser_home_dir}/fonts/* l,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/tor px,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/ r,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so mr,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so.* mr,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/libstdc++/*.so mr,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/libstdc++/*.so.* mr,
+
+  # parent Firefox process when restarting after upgrade, Web Content processes
+  owner @{torbrowser_firefox_executable} pxmr -> torbrowser_firefox,
+
+  /etc/mailcap r,
+  /etc/mime.types r,
+
+  /usr/share/ r,
+  /usr/share/glib-2.0/schemas/gschemas.compiled r,
+  /usr/share/mime/ r,
+  /usr/share/themes/ r,
+  /usr/share/applications/** rk,
+  /usr/share/gnome/applications/ r,
+  /usr/share/gnome/applications/kde4/ r,
+  /usr/share/poppler/cMap/ r,
+  /etc/xdg/mimeapps.list r,
+
+  # Distribution homepage
+  /usr/share/homepage/ r,
+  /usr/share/homepage/** r,
+
+  /sys/bus/pci/devices/ r,
+  @{sys}/devices/pci[0-9]*/**/irq r,
+  /sys/devices/system/cpu/ r,
+  /sys/devices/system/cpu/present r,
+  /sys/devices/system/node/ r,
+  /sys/devices/system/node/node[0-9]*/meminfo r,
+  /sys/fs/cgroup/cpu,cpuacct/{,user.slice/}cpu.cfs_quota_us r,
+  deny /sys/devices/virtual/block/*/uevent r,
+
+  # Should use abstractions/gstreamer instead once merged upstream
+  /etc/udev/udev.conf r,
+  /run/udev/data/+pci:* r,
+  /sys/devices/pci[0-9]*/**/uevent r,
+  owner /{dev,run}/shm/shmfd-* rw,
+
+  # Required for multiprocess Firefox (aka Electrolysis, i.e. e10s)
+  owner /{dev,run}/shm/org.chromium.* rw,
+  owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* rw, # for Chromium IPC
+
+  # Required for Wayland display protocol support
+  owner /dev/shm/wayland.mozilla.ipc.[0-9]* rw,
+
+  # Silence denial logs about permissions we don't need
+  deny @{HOME}/.cache/fontconfig/ rw,
+  deny @{HOME}/.cache/fontconfig/** rw,
+  deny @{HOME}/.config/gtk-2.0/ rw,
+  deny @{HOME}/.config/gtk-2.0/** rw,
+  deny @{PROC}/@{pid}/net/route r,
+  deny /sys/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,
+  deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,
+  deny /run/user/[0-9]*/dconf/user rw,
+  deny /usr/bin/lsb_release x,
+
+  # Silence denial logs about PulseAudio
+  deny /etc/pulse/client.conf r,
+  deny /usr/bin/pulseaudio x,
+
+  # KDE 4
+  owner @{HOME}/.kde/share/config/* r,
+
+  # Xfce4
+  /etc/xfce4/defaults.list r,
+  /usr/share/xfce4/applications/ r,
+
+  # u2f (tested with Yubikey 4)
+  /sys/class/ r,
+  /sys/bus/ r,
+  /sys/class/hidraw/ r,
+  /run/udev/data/c24{5,7,9}:* r,
+  /dev/hidraw* rw,
+  # Yubikey NEO also needs this:
+  /sys/devices/**/hidraw/hidraw*/uevent r,
+
+  # Needed for Firefox sandboxing via unprivileged user namespaces
+  capability sys_admin,
+  capability sys_chroot,
+  owner @{PROC}/@{pid}/{gid,uid}_map w,
+  owner @{PROC}/@{pid}/setgroups w,
+
+  # Remove these rules once we can assume abstractions/vulkan is recent enough
+  # to include them
+  /etc/glvnd/egl_vendor.d/{*,.json} r,
+  /usr/share/glvnd/egl_vendor.d/{,*.json} r,
+
+  #include <local/torbrowser.Browser.firefox>
+}
@@ -0,0 +1,47 @@
+#include <tunables/global>
+#include <tunables/torbrowser>
+
+@{torbrowser_tor_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/TorBrowser/Tor/tor
+
+profile torbrowser_tor @{torbrowser_tor_executable} {
+  #include <abstractions/base>
+
+  network netlink raw,
+  network tcp,
+  network udp,
+
+  /etc/host.conf r,
+  /etc/nsswitch.conf r,
+  /etc/passwd r,
+  /etc/resolv.conf r,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/tor mr,
+  owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/ rw,
+  owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/** rw,
+  owner @{torbrowser_home_dir}/TorBrowser/Data/Tor/lock rwk,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so mr,
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/*.so.* mr,
+
+  # Support some of the included pluggable transports
+  owner @{torbrowser_home_dir}/TorBrowser/Tor/PluggableTransports/** rix,
+  @{PROC}/sys/net/core/somaxconn r,
+  #include <abstractions/ssl_certs>
+
+  # Silence file_inherit logs
+  deny @{torbrowser_home_dir}/{browser/,}omni.ja r,
+  deny @{torbrowser_home_dir}/{browser/,}features/*.xpi r,
+  deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/.parentlock rw,
+  deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/extensions/*.xpi r,
+  deny @{torbrowser_home_dir}/TorBrowser/Data/Browser/profile.default/startupCache/* r,
+  # Silence logs from included pluggable transports
+  deny /etc/hosts r,
+  deny /etc/services r,
+
+  @{PROC}/sys/kernel/random/uuid r,
+  /sys/devices/system/cpu/ r,
+  /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
+
+  # OnionShare compatibility
+  /tmp/onionshare/** rw,
+
+  #include <local/torbrowser.Tor.tor>
+}
@@ -0,0 +1,2 @@
+@{torbrowser_installation_dir}=@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*
+@{torbrowser_home_dir}=@{torbrowser_installation_dir}/Browser
@@ -17,8 +17,10 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
  #include <abstractions/dbus-accessibility>
  #include <abstractions/dbus-session>
  #include <abstractions/dconf>
+  #include <abstractions/dri-enumerate>
  #include <abstractions/gnome>
  #include <abstractions/ibus>
+  #include <abstractions/mesa>
  #include <abstractions/nameservice>
  #include <abstractions/nvidia>
  #include <abstractions/p11-kit>
@@ -43,6 +45,10 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
  # Backported from the dri-enumerate abstraction, available in AppArmor 2.13
  /sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r,

+  # Imported from the opencl abstraction, which we cannot include
+  # due to conflicting "x"
+  @{sys}/devices/pci[0-9]*/**/{class,config,resource,revision} r,
+
  # Allow opening attachments
  # TODO: create and use abstractions for opening various file formats
  /{usr/local/,usr/,}bin/* Cx -> sanitized_helper,
@@ -334,6 +340,9 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
  # TB tries to create this file but has no business doing so
  deny @{HOME}/.gnupg/gpg-agent.conf w,

+  # Required for Wayland display protocol support
+  owner /dev/shm/wayland.mozilla.ipc.[0-9]* rw,
+
  profile gpg {
    #include <abstractions/base>

@@ -425,6 +434,8 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
    owner /tmp/gpg-[a-zA-Z0-9]*/S.gpg-agent rw,

    /usr/share/sounds/** r,
+
+    deny /dev/shm/org.chromium.* rw, # file_inherit only
  }

  # Site-specific additions and overrides. See local/README for details.
@@ -1,2 +1,2 @@
 // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal
-APT::LastInstalledKernel "5.10.0-14-amd64";
+APT::LastInstalledKernel "5.10.0-19-amd64";
@@ -0,0 +1,11 @@
+Package: *
+Pin: release a=bullseye
+Pin-Priority: 500
+
+Package: torbrowser-launcher
+Pin: release a=unstable
+Pin-Priority: 1000
+
+Package: *
+Pin: release a=unstable
+Pin-Priority: 100
@@ -2,16 +2,16 @@

 #deb cdrom:[Debian GNU/Linux 11.3.0 _Bullseye_ - Official amd64 NETINST 20220326-11:22]/ bullseye main

-deb http://deb.debian.org/debian/ bullseye main
-deb-src http://deb.debian.org/debian/ bullseye main
+deb http://deb.debian.org/debian/ bullseye main contrib non-free
+deb-src http://deb.debian.org/debian/ bullseye main contrib non-free

-deb http://security.debian.org/debian-security bullseye-security main
-deb-src http://security.debian.org/debian-security bullseye-security main
+deb http://security.debian.org/debian-security bullseye-security main contrib non-free
+deb-src http://security.debian.org/debian-security bullseye-security main contrib non-free

 # bullseye-updates, to get updates before a point release is made;
 # see https://www.debian.org/doc/manuals/debian-reference/ch02.en.html#_updates_and_backports
-deb http://deb.debian.org/debian/ bullseye-updates main
-deb-src http://deb.debian.org/debian/ bullseye-updates main
+deb http://deb.debian.org/debian/ bullseye-updates main contrib non-free
+deb-src http://deb.debian.org/debian/ bullseye-updates main contrib non-free

 # This system was installed using small removable media
 # (e.g. netinst, live or single CD). The matching "deb cdrom"
@@ -0,0 +1,3 @@
+### THIS FILE IS AUTOMATICALLY CONFIGURED ###
+# You may comment out this entry, but any other modifications may be lost.
+deb [arch=amd64] https://dl.google.com/linux/chrome/deb/ stable main
@@ -1 +1 @@
-deb http://download.opensuse.org/repositories/home:/strycore/Debian_11/ ./
+deb https://download.opensuse.org/repositories/home:/strycore/Debian_11/ ./
@@ -1 +1 @@
-#deb http://repository.spotify.com stable non-free
+deb http://repository.spotify.com stable non-free
@@ -0,0 +1,2 @@
+deb http://deb.debian.org/debian unstable main contrib non-free
+deb-src http://deb.debian.org/debian unstable main contrib non-free
@@ -1,4 +1,5 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.5 (GNU/Linux)

 mQENBFRZVvQBCAC6o95XEzZiupu57b6iGh8dR3Zt0itwKxOWlBDwGoibcvsQgC0N
 ZqVaHf/9MSC9E7JxJFEDE6Qa2w8+OWFlUsjJsTSFQ7IVyawueP4r4JZ9RMT0O5iG
@@ -0,0 +1,89 @@
+#!/bin/sh
+
+set -e
+
+# use the locale C.UTF-8
+unset LC_ALL
+LC_CTYPE=C.UTF-8
+export LC_CTYPE
+
+storepass='changeit'
+if [ -f /etc/default/cacerts ]; then
+    . /etc/default/cacerts
+fi
+
+arch=`dpkg --print-architecture`
+JAR=/usr/share/ca-certificates-java/ca-certificates-java.jar
+
+nsslib_name()
+{
+    if dpkg --assert-multi-arch 2>/dev/null; then
+        echo "libnss3:${arch}"
+    else
+        echo "libnss3"
+    fi
+}
+
+echo ""
+if [ "$cacerts_updates" != yes ] || [ "$CACERT_UPDATES" = disabled ] || [ ! -e $JAR ]; then
+    echo "updates of cacerts keystore disabled."
+    exit 0
+fi
+
+if ! mountpoint -q /proc; then
+    echo >&2 "the keytool command requires a mounted proc fs (/proc)."
+    exit 1
+fi
+
+for jvm in java-7-openjdk-$arch java-7-openjdk \
+           oracle-java7-jre-$arch oracle-java7-server-jre-$arch oracle-java7-jdk-$arch \
+           java-8-openjdk-$arch java-8-openjdk \
+           oracle-java8-jre-$arch oracle-java8-server-jre-$arch oracle-java8-jdk-$arch \
+           java-9-openjdk-$arch java-9-openjdk \
+           oracle-java9-jre-$arch oracle-java9-server-jre-$arch oracle-java9-jdk-$arch \
+           java-10-openjdk-$arch java-10-openjdk \
+           oracle-java10-jre-$arch oracle-java10-server-jre-$arch oracle-java10-jdk-$arch \
+           java-11-openjdk-$arch java-11-openjdk \
+           oracle-java11-jre-$arch oracle-java11-server-jre-$arch oracle-java11-jdk-$arch; do
+    if [ -x /usr/lib/jvm/$jvm/bin/java ]; then
+        export JAVA_HOME=/usr/lib/jvm/$jvm
+        PATH=$JAVA_HOME/bin:$PATH
+    	break
+    fi
+done
+
+if dpkg-query --version >/dev/null; then
+    nsspkg=$(dpkg-query -L "$(nsslib_name)" | sed -n 's,\(.*\)/libnss3\.so$,\1,p'|head -n 1)
+    nsscfg=/etc/${jvm%-$arch}/security/nss.cfg
+    nssjdk=$(test ! -f $nsscfg || sed -n '/nssLibraryDirectory/s/.*= *\(.*\)/\1/p' $nsscfg)
+    if [ -n "$nsspkg" ] && [ -n "$nssjdk" ] && [ "$nsspkg" != "$nssjdk" ]; then
+        ln -sf $nsspkg/libnss3.so $nssjdk/libnss3.so
+    fi
+    softokn3pkg=$(dpkg-query -L "$(nsslib_name)" | sed -n 's,\(.*\)/libsoftokn3\.so$,\1,p'|head -n 1)
+    if [ -n "$softokn3pkg" ] && [ -n "$nssjdk" ] && [ "$softokn3pkg" != "$nssjdk" ]; then
+        ln -sf $softokn3pkg/libsoftokn3.so $nssjdk/libsoftokn3.so
+    fi
+fi
+
+do_cleanup()
+{
+    [ -z "$temp_jvm_cfg" ] || rm -f $temp_jvm_cfg
+    if [ -n "$nsspkg" ] && [ -n "$nssjdk" ] && [ "$nsspkg" != "$nssjdk" ]
+    then
+        rm -f $nssjdk/libnss3.so
+    fi
+    if [ -n "$softokn3pkg" ] && [ -n "$nssjdk" ] \
+       && [ "$softokn3pkg" != "$nssjdk" ]
+    then
+        rm -f $nssjdk/libsoftokn3.so
+    fi
+}
+
+if java -Xmx64m -jar $JAR -storepass "$storepass"; then
+    do_cleanup
+else
+    do_cleanup
+    exit 1
+fi
+
+echo "done."
@@ -0,0 +1,5 @@
+# Created by Check_MK Agent Bakery.
+# This file is managed via WATO, do not edit manually or you
+# lose your changes next time when you update the agent.
+
+auto
@@ -0,0 +1,44 @@
+# Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
+# This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
+# conditions defined in the file COPYING, which is part of this source code package.
+
+# NOTE:
+# For users of the Checkmk Agent Bakery, this file is manageged by the corresponding
+# monitoring server. In that case, manual changes to this file will be lost upon
+# an update of the check-mk-agent package.
+
+service check-mk-agent
+{
+    type           = UNLISTED
+    port           = 6556
+    socket_type    = stream
+    protocol       = tcp
+    wait           = no
+    user           = root
+
+    # If you use fully redundant monitoring and poll the client
+    # from more then one monitoring servers in parallel you might
+    # want to use the agent cache wrapper:
+    #server         = /usr/bin/check_mk_caching_agent
+    server         = /usr/bin/check_mk_agent
+
+    # To avoid intentional or unintentional overload due to too many parallel
+    # queries from one source we set this parameter. It limits the number of
+    # concurrent connections per source address. If you need more requests
+    # per source system, you can of course increase or remove this value
+    # (https://github.com/tribe29/checkmk/pull/157)
+    per_source     = 3
+
+    # listen on IPv4 AND IPv6 when available on this host
+    #flags          = IPv6
+
+    # configure the IP address(es) of your Nagios server here:
+    #only_from      = 127.0.0.1 10.0.20.1 10.0.20.2
+
+    # Don't be too verbose. Don't log every check. This might be
+    # commented out for debugging. If this option is commented out
+    # the default options will be used for this service.
+    log_on_success =
+
+    disable        = no
+}
@@ -1 +1 @@
-{'last_error': None, 'host_secret': 'qdyvxajdsobwykwzrfwipeytqnwawzuxbrwsowgahpdxwwkpazfbsnugwnefnrlv', 'server': '192.168.0.99', 'site': 'realm', 'host_name': 'localhost', 'protocol': 'http', 'user': 'caelebfi', 'last_check': 1652428027.8453374, 'installed_aghash': 'f9c569861357b5c2', 'last_update': 1652341486.1470811, 'pending_hash': None}
+{'last_error': "HTTPConnectionPool(host='192.168.0.99', port=80): Max retries exceeded with url: /realm/check_mk (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fe13931c590>: Failed to establish a new connection: [Errno 101] Network is unreachable'))", 'host_secret': 'xwzcvzyndcggrfyywolofmarwejiprrcbatykpinzbhkmjzjvisyjyhxbismzxcc', 'server': '192.168.0.99', 'site': 'realm', 'host_name': 'localhost', 'protocol': 'http', 'user': 'caelebfi', 'last_check': 1666964320.9634454, 'installed_aghash': 'be8a4595e68177a8', 'last_update': 1666964324.5679643, 'pending_hash': None}
@@ -0,0 +1 @@
+/opt/google/chrome/cron/google-chrome
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+set -e
+set -u
+
+DEFAULTSFILE=/etc/default/tor
+
+if [ -f $DEFAULTSFILE ] ; then
+	. $DEFAULTSFILE
+fi
+
+if [ "${CLEANUP_OLD_COREFILES:-}" = "y" ] ; then
+	if [ -d /var/lib/tor ] ; then
+		find /var/lib/tor -mindepth 1 -maxdepth 1 -type f -mtime +21 -user debian-tor -regex '.*/core\(\.[0-9]+\)?' -exec rm '{}' +
+	fi
+fi
@@ -20,3 +20,7 @@ PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
 52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
 #
+
+# restic backup
+0 1 * * * root /usr/local/bin/restic -r /backup/restic-repositories/admcenter backup /opt/omd/ --password-file /root/.resticpwd
+10 1 * * * root /usr/local/bin/restic -r /backup/restic-repositories/admcenter forget --keep-daily 7 --keep-weekly 2 --prune --password-file /root/.resticpwd
@@ -1,17 +1,17 @@
 # Printer configuration file for CUPS v2.3.3op2
 # Written by cupsd
 # DO NOT EDIT THIS FILE WHEN CUPSD IS RUNNING
-NextPrinterId 16
+NextPrinterId 152
 <Printer EPSON_XP_8600_Series>
-PrinterId 15
-UUID urn:uuid:a58126b4-f74d-3288-7158-5b3373db52be
+PrinterId 151
+UUID urn:uuid:2952f250-5c2c-3622-6d59-8341fe66e6b5
 Info EPSON_XP_8600_Series
 Location 
 MakeModel EPSON XP-8600 Series, driverless, cups-filters 1.28.7
 DeviceURI implicitclass://EPSON_XP_8600_Series/
 State Idle
-StateTime 1652392808
-ConfigTime 1652392808
+StateTime 1670085841
+ConfigTime 1670085841
 Type 36892
 Accepting Yes
 Shared No
@@ -1,4 +1,4 @@
 # Printer configuration file for CUPS v2.3.3op2
 # Written by cupsd
 # DO NOT EDIT THIS FILE WHEN CUPSD IS RUNNING
-NextPrinterId 15
+NextPrinterId 151
@@ -1 +1 @@
-11.3
+11.5
@@ -0,0 +1,10 @@
+# defaults for ca-certificates-java
+
+# The password which is used to protect the integrity of the keystore.
+# storepass must be at least 6 characters long. It must be provided to
+# all commands that access the keystore contents.
+# Only change this if adding private certificates.
+#storepass=''
+
+# enable/disable updates of the keystore /etc/ssl/certs/java/cacerts
+cacerts_updates=yes
@@ -1,20 +0,0 @@
-# Docker Upstart and SysVinit configuration file
-
-#
-# THIS FILE DOES NOT APPLY TO SYSTEMD
-#
-#   Please see the documentation for "systemd drop-ins":
-#   https://docs.docker.com/engine/admin/systemd/
-#
-
-# Customize location of Docker binary (especially for development testing).
-#DOCKERD="/usr/local/bin/dockerd"
-
-# Use DOCKER_OPTS to modify the daemon startup options.
-#DOCKER_OPTS="--dns 8.8.8.8 --dns 8.8.4.4"
-
-# If you need Docker to use an HTTP proxy, it can also be specified here.
-#export http_proxy="http://127.0.0.1:3128/"
-
-# This is also a handy place to tweak where Docker's temporary files go.
-#export DOCKER_TMPDIR="/mnt/bigdrive/docker-tmp"
@@ -0,0 +1,2 @@
+repo_add_once="false"
+repo_reenable_on_distupgrade="true"
@@ -0,0 +1,36 @@
+# This is the configuration file for /etc/init.d/openvpn
+
+#
+# Start only these VPNs automatically via init script.
+# Allowed values are "all", "none" or space separated list of
+# names of the VPNs. If empty, "all" is assumed.
+# The VPN name refers to the VPN configutation file name.
+# i.e. "home" would be /etc/openvpn/home.conf
+#
+# If you're running systemd, changing this variable will
+# require running "systemctl daemon-reload" followed by
+# a restart of the openvpn service (if you removed entries
+# you may have to stop those manually)
+#
+#AUTOSTART="all"
+#AUTOSTART="none"
+#AUTOSTART="home office"
+#
+# WARNING: If you're running systemd the rest of the
+# options in this file are ignored.
+#
+# Refresh interval (in seconds) of default status files
+# located in /var/run/openvpn.$NAME.status
+# Defaults to 10, 0 disables status file generation
+#
+#STATUSREFRESH=10
+#STATUSREFRESH=0
+# Optional arguments to openvpn's command line
+OPTARGS=""
+#
+# If you need openvpn running after sendsigs, i.e.
+# to let umountnfs work over the vpn, set OMIT_SENDSIGS
+# to 1 and include umountnfs as Required-Stop: in openvpn's
+# init.d script (remember to run insserv after that)
+#
+OMIT_SENDSIGS=0
@@ -0,0 +1,75 @@
+# Defaults for tor initscript
+# sourced by /etc/init.d/tor
+# installed at /etc/default/tor by the maintainer scripts
+#
+# Note that this file is not being used for controlling Tor-startup
+# when Tor is launched by systemd.
+#
+
+#
+# This is a bash shell fragment
+#
+RUN_DAEMON="yes"
+
+#
+# Servers sometimes may need more than the default 1024 file descriptors
+# if they are very busy and have many clients connected to them.  The top
+# servers as of early 2008 regularly have more than 10000 connected
+# clients.
+#  (ulimit -n)
+#
+# (the default varies as it depends on the number of available system-wide file
+#  descriptors.  See the init script in /etc/init.d/tor for details.)
+#
+# MAX_FILEDESCRIPTORS=
+
+#
+# If tor is seriously hogging your CPU, taking away too much cycles from
+# other system resources, then you can renice tor.  See nice(1) for a
+# bit more information.  Another way to limit the CPU usage of an Onion
+# Router is to set a lower BandwidthRate, as CPU usage is mostly a function
+# of the amount of traffic flowing through your node.  Consult the torrc(5)
+# manual page for more information on setting BandwidthRate.
+#
+# NICE="--nicelevel 5"
+
+# Additional arguments to pass on tor's command line.
+#
+# ARGS="$ARGS "
+
+#
+# Uncomment the ulimit call below, and set "DisableDebuggerAttachment 0"
+# in /etc/tor/torrc, if you want tor to produce coredumps on segfaults
+# and assert errors.
+#
+# Keeping coredumps around is some sort of security issue since they
+# may leak session keys, sensitive client data and more, should such
+# files fall into the wrong hands.  Therefore coredumps are not enabled
+# by default.
+#
+# ulimit -c unlimited
+
+#
+# Config option for the weekly cron file: Whether or not to remove old
+# coredumps in /var/lib/tor.  Coredumps can hold sensitive data, as such
+# they probably should not be kept lying around if nobody will ever look
+# at them.  This option makes /etc/cron.weekly/tor clean out files older
+# then three weeks.
+#
+CLEANUP_OLD_COREFILES=y
+
+#
+# By default the tor init script will launch Tor using apparmor iff
+# /usr/sbin/aa-status exists and is executable and calling it with --enabled
+# returns true, /usr/sbin/aa-exec is executable, there is a
+# /etc/apparmor.d/system_tor policy, and USE_AA_EXEC is set to 'yes'.
+#
+# USE_AA_EXEC="yes"  # default
+# USE_AA_EXEC="no"
+
+# Let the vidalia package override some of our settings.
+# People who have vidalia installed might not want to run Tor as a system
+# service. The vidalia .deb can ask them that and then set run-daemon to no.
+if [ -e /etc/default/tor.vidalia ] && [ -x /usr/bin/vidalia ]; then
+	. /etc/default/tor.vidalia
+fi
@@ -0,0 +1,2 @@
+#!/bin/sh
+git push --set-upstream origin $HOSTNAME
@@ -0,0 +1,377 @@
+intl_module = builtin {
+    icu_versions = default
+}
+
+intl_module = fbintl {
+    filename = $(root)/intl/fbintl
+    icu_versions = default
+}
+
+charset = SJIS_0208 {
+    intl_module = fbintl
+    collation = SJIS_0208
+    collation = SJIS_0208_UNICODE
+}
+
+charset = EUCJ_0208 {
+    intl_module = fbintl
+    collation = EUCJ_0208
+    collation = EUCJ_0208_UNICODE
+}
+
+charset = DOS437 {
+    intl_module = fbintl
+    collation = DOS437
+    collation = DOS437_UNICODE
+    collation = DB_DEU437
+    collation = DB_ESP437
+    collation = DB_FIN437
+    collation = DB_FRA437
+    collation = DB_ITA437
+    collation = DB_NLD437
+    collation = DB_SVE437
+    collation = DB_UK437
+    collation = DB_US437
+    collation = PDOX_ASCII
+    collation = PDOX_INTL
+    collation = PDOX_SWEDFIN
+}
+
+charset = DOS850 {
+    intl_module = fbintl
+    collation = DOS850
+    collation = DOS850_UNICODE
+    collation = DB_DEU850
+    collation = DB_ESP850
+    collation = DB_FRA850
+    collation = DB_FRC850
+    collation = DB_ITA850
+    collation = DB_NLD850
+    collation = DB_PTB850
+    collation = DB_SVE850
+    collation = DB_UK850
+    collation = DB_US850
+}
+
+charset = DOS865 {
+    intl_module = fbintl
+    collation = DOS865
+    collation = DOS865_UNICODE
+    collation = DB_DAN865
+    collation = DB_NOR865
+    collation = PDOX_NORDAN4
+}
+
+charset = ISO8859_1 {
+    intl_module = fbintl
+    collation = ISO8859_1
+    collation = ISO8859_1_UNICODE
+    collation = DA_DA
+    collation = DE_DE
+    collation = DU_NL
+    collation = EN_UK
+    collation = EN_US
+    collation = ES_ES
+    collation = ES_ES_CI_AI
+    collation = FI_FI
+    collation = FR_CA
+    collation = FR_FR
+    collation = IS_IS
+    collation = IT_IT
+    collation = NO_NO
+    collation = SV_SV
+    collation = PT_BR
+    collation = PT_PT
+}
+
+charset = ISO8859_2 {
+    intl_module = fbintl
+    collation = ISO8859_2
+    collation = ISO8859_2_UNICODE
+    collation = CS_CZ
+    collation = ISO_HUN
+    collation = ISO_PLK
+}
+
+charset = ISO8859_3 {
+    intl_module = fbintl
+    collation = ISO8859_3
+    collation = ISO8859_3_UNICODE
+}
+
+charset = ISO8859_4 {
+    intl_module = fbintl
+    collation = ISO8859_4
+    collation = ISO8859_4_UNICODE
+}
+
+charset = ISO8859_5 {
+    intl_module = fbintl
+    collation = ISO8859_5
+    collation = ISO8859_5_UNICODE
+}
+
+charset = ISO8859_6 {
+    intl_module = fbintl
+    collation = ISO8859_6
+    collation = ISO8859_6_UNICODE
+}
+
+charset = ISO8859_7 {
+    intl_module = fbintl
+    collation = ISO8859_7
+    collation = ISO8859_7_UNICODE
+}
+
+charset = ISO8859_8 {
+    intl_module = fbintl
+    collation = ISO8859_8
+    collation = ISO8859_8_UNICODE
+}
+
+charset = ISO8859_9 {
+    intl_module = fbintl
+    collation = ISO8859_9
+    collation = ISO8859_9_UNICODE
+}
+
+charset = ISO8859_13 {
+    intl_module = fbintl
+    collation = ISO8859_13
+    collation = ISO8859_13_UNICODE
+    collation = LT_LT
+}
+
+charset = DOS852 {
+    intl_module = fbintl
+    collation = DOS852
+    collation = DOS852_UNICODE
+    collation = DB_CSY
+    collation = DB_PLK
+    collation = DB_SLO
+    collation = PDOX_CSY
+    collation = PDOX_HUN
+    collation = PDOX_PLK
+    collation = PDOX_SLO
+}
+
+charset = DOS857 {
+    intl_module = fbintl
+    collation = DOS857
+    collation = DOS857_UNICODE
+    collation = DB_TRK
+}
+
+charset = DOS860 {
+    intl_module = fbintl
+    collation = DOS860
+    collation = DOS860_UNICODE
+    collation = DB_PTG860
+}
+
+charset = DOS861 {
+    intl_module = fbintl
+    collation = DOS861
+    collation = DOS861_UNICODE
+    collation = PDOX_ISL
+}
+
+charset = DOS863 {
+    intl_module = fbintl
+    collation = DOS863
+    collation = DOS863_UNICODE
+    collation = DB_FRC863
+}
+
+charset = CYRL {
+    intl_module = fbintl
+    collation = CYRL
+    collation = CYRL_UNICODE
+    collation = DB_RUS
+    collation = PDOX_CYRL
+}
+
+charset = DOS737 {
+    intl_module = fbintl
+    collation = DOS737
+    collation = DOS737_UNICODE
+}
+
+charset = DOS775 {
+    intl_module = fbintl
+    collation = DOS775
+    collation = DOS775_UNICODE
+}
+
+charset = DOS858 {
+    intl_module = fbintl
+    collation = DOS858
+    collation = DOS858_UNICODE
+}
+
+charset = DOS862 {
+    intl_module = fbintl
+    collation = DOS862
+    collation = DOS862_UNICODE
+}
+
+charset = DOS864 {
+    intl_module = fbintl
+    collation = DOS864
+    collation = DOS864_UNICODE
+}
+
+charset = DOS866 {
+    intl_module = fbintl
+    collation = DOS866
+    collation = DOS866_UNICODE
+}
+
+charset = DOS869 {
+    intl_module = fbintl
+    collation = DOS869
+    collation = DOS869_UNICODE
+}
+
+charset = WIN1250 {
+    intl_module = fbintl
+    collation = WIN1250
+    collation = WIN1250_UNICODE
+    collation = PXW_CSY
+    collation = PXW_HUN
+    collation = PXW_HUNDC
+    collation = PXW_PLK
+    collation = PXW_SLOV
+    collation = BS_BA
+    collation = WIN_CZ
+    collation = WIN_CZ_CI_AI
+}
+
+charset = WIN1251 {
+    intl_module = fbintl
+    collation = WIN1251
+    collation = WIN1251_UNICODE
+    collation = PXW_CYRL
+    collation = WIN1251_UA
+}
+
+charset = WIN1252 {
+    intl_module = fbintl
+    collation = WIN1252
+    collation = WIN1252_UNICODE
+    collation = PXW_INTL
+    collation = PXW_INTL850
+    collation = PXW_NORDAN4
+    collation = WIN_PTBR
+    collation = PXW_SPAN
+    collation = PXW_SWEDFIN
+}
+
+charset = WIN1253 {
+    intl_module = fbintl
+    collation = WIN1253
+    collation = WIN1253_UNICODE
+    collation = PXW_GREEK
+}
+
+charset = WIN1254 {
+    intl_module = fbintl
+    collation = WIN1254
+    collation = WIN1254_UNICODE
+    collation = PXW_TURK
+}
+
+charset = NEXT {
+    intl_module = fbintl
+    collation = NEXT
+    collation = NEXT_UNICODE
+    collation = NXT_DEU
+    collation = NXT_ESP
+    collation = NXT_FRA
+    collation = NXT_ITA
+    collation = NXT_US
+}
+
+charset = WIN1255 {
+    intl_module = fbintl
+    collation = WIN1255
+    collation = WIN1255_UNICODE
+}
+
+charset = WIN1256 {
+    intl_module = fbintl
+    collation = WIN1256
+    collation = WIN1256_UNICODE
+}
+
+charset = WIN1257 {
+    intl_module = fbintl
+    collation = WIN1257
+    collation = WIN1257_UNICODE
+    collation = WIN1257_EE
+    collation = WIN1257_LT
+    collation = WIN1257_LV
+}
+
+charset = KSC_5601 {
+    intl_module = fbintl
+    collation = KSC_5601
+    collation = KSC_5601_UNICODE
+    collation = KSC_DICTIONARY
+}
+
+charset = BIG_5 {
+    intl_module = fbintl
+    collation = BIG_5
+    collation = BIG_5_UNICODE
+}
+
+charset = GB_2312 {
+    intl_module = fbintl
+    collation = GB_2312
+    collation = GB_2312_UNICODE
+}
+
+charset = KOI8R {
+    intl_module = fbintl
+    collation = KOI8R
+    collation = KOI8R_UNICODE
+    collation = KOI8R_RU
+}
+
+charset = KOI8U {
+    intl_module = fbintl
+    collation = KOI8U
+    collation = KOI8U_UNICODE
+    collation = KOI8U_UA
+}
+
+charset = WIN1258 {
+    intl_module = fbintl
+    collation = WIN1258
+    collation = WIN1258_UNICODE
+}
+
+charset = TIS620 {
+    intl_module = fbintl
+    collation = TIS620
+    collation = TIS620_UNICODE
+}
+
+charset = GBK {
+    intl_module = fbintl
+    collation = GBK
+    collation = GBK_UNICODE
+}
+
+charset = CP943C {
+    intl_module = fbintl
+    collation = CP943C        ibm-943_P15A-2003
+    collation = CP943C_UNICODE
+}
+
+charset = GB18030 {
+    intl_module = fbintl
+    collation = GB18030
+    collation = GB18030_UNICODE
+}
@@ -0,0 +1,8 @@
+Plugin = UDR {
+	Module = $(dir_plugins)/udr_engine
+	Config = UDR_config
+}
+
+Config = UDR_config {
+	path = $(dir_plugins)/udr
+}
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE fontconfig SYSTEM "../fonts.dtd">
+<fontconfig>
+         <!-- Microsoft -->
+        <alias binding="same">
+          <family>Calibri</family>
+            <accept>
+              <family>Carlito</family>
+            </accept>
+        </alias>
+        <alias binding="same">
+          <family>Carlito</family>
+            <default>
+              <family>Calibri</family>
+            </default>
+        </alias>
+</fontconfig>
@@ -0,0 +1,16 @@
+<?xml version="1.0"?>
+<!DOCTYPE fontconfig SYSTEM "fonts.dtd">
+<fontconfig>
+  <alias binding="same">
+    <family>Droid Sans</family>
+    <accept>
+      <family>Noto Sans</family>
+    </accept>
+  </alias>
+  <alias binding="same">
+    <family>Droid Serif</family>
+    <accept>
+      <family>Noto Serif</family>
+    </accept>
+  </alias>
+</fontconfig>
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE fontconfig SYSTEM "../fonts.dtd">
+<fontconfig>
+        <alias>
+          <family>sans-serif</family>
+            <prefer>
+              <family>Carlito</family>
+            </prefer>
+        </alias>
+        <alias>
+          <family>Carlito</family>
+            <default>
+              <family>sans-serif</family>
+            </default>
+        </alias>
+</fontconfig>
+
@@ -0,0 +1 @@
+../conf.avail/30-0-google-crosextra-carlito-fontconfig.conf
@@ -0,0 +1 @@
+/usr/share/fontconfig/conf.avail/90-fonts-linux-libertine.conf
@@ -0,0 +1 @@
+4BAAFB98-5BFD-41EC-9E2E-E652D8D16A73
@@ -73,3 +73,7 @@ wheel:x:1003:pi
 _flatpak:x:129:
 tss:x:130:
 docker:x:998:
+debian-tor:x:131:
+cmk-agent:x:997:
+nm-openvpn:x:132:
+wireshark:x:133:
@@ -72,3 +72,7 @@ pi:x:1002:
 wheel:x:1003:pi
 _flatpak:x:129:
 tss:x:130:
+docker:x:998:
+debian-tor:x:131:
+cmk-agent:x:997:
+nm-openvpn:x:132:
@@ -368,7 +368,15 @@ while [ "x$list" != "x" ] ; do
    fi
  fi

-  if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then
+  # The GRUB_DISABLE_SUBMENU option used to be different than others since it was
+  # mentioned in the documentation that has to be set to 'y' instead of 'true' to
+  # enable it. This caused a lot of confusion to users that set the option to 'y',
+  # 'yes' or 'true'. This was fixed but all of these values must be supported now.
+  if [ "x${GRUB_DISABLE_SUBMENU}" = xyes ] || [ "x${GRUB_DISABLE_SUBMENU}" = xy ]; then
+    GRUB_DISABLE_SUBMENU="true"
+  fi
+
+  if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xtrue ]; then
    linux_entry "${OS}" "${version}" simple \
    "${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}"

@@ -324,7 +324,15 @@ while [ "x${xen_list}" != "x" ] ; do
 	    fi
 	fi

-	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then
+	# The GRUB_DISABLE_SUBMENU option used to be different than others since it was
+	# mentioned in the documentation that has to be set to 'y' instead of 'true' to
+	# enable it. This caused a lot of confusion to users that set the option to 'y',
+	# 'yes' or 'true'. This was fixed but all of these values must be supported now.
+	if [ "x${GRUB_DISABLE_SUBMENU}" = xyes ] || [ "x${GRUB_DISABLE_SUBMENU}" = xy ]; then
+	    GRUB_DISABLE_SUBMENU="true"
+	fi
+
+	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xtrue ]; then
 	    linux_entry "${OS}" "${version}" "${xen_version}" simple \
 		"${GRUB_CMDLINE_LINUX} ${GRUB_CMDLINE_LINUX_DEFAULT}" "${GRUB_CMDLINE_XEN} ${GRUB_CMDLINE_XEN_DEFAULT}"

@@ -41,14 +41,17 @@ EOF
 }

 if [ "x${GRUB_DISABLE_OS_PROBER}" = "xtrue" ]; then
+  grub_warn "$(gettext_printf "os-prober will not be executed to detect other bootable partitions.\nSystems on them will not be added to the GRUB boot configuration.\nCheck GRUB_DISABLE_OS_PROBER documentation entry.")"
  exit 0
 fi

-if [ -z "`which os-prober 2> /dev/null`" ] || [ -z "`which linux-boot-prober 2> /dev/null`" ] ; then
+if ! command -v os-prober > /dev/null || ! command -v linux-boot-prober > /dev/null ; then
  # missing os-prober and/or linux-boot-prober
  exit 0
 fi

+grub_warn "$(gettext_printf "os-prober will be executed to detect other bootable partitions.\nIts output will be used to detect bootable binaries on them and create new boot entries.")"
+
 OSPROBED="`os-prober | tr ' ' '^' | paste -s -d ' '`"
 if [ -z "${OSPROBED}" ] ; then
  # empty os-prober output, nothing doing
@@ -272,7 +275,15 @@ EOF
 	fi
 	used_osprober_linux_ids="$used_osprober_linux_ids 'osprober-gnulinux-$LKERNEL-${recovery_params}-$counter-$boot_device_id'"

-	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xy ]; then
+	# The GRUB_DISABLE_SUBMENU option used to be different than others since it was
+	# mentioned in the documentation that has to be set to 'y' instead of 'true' to
+	# enable it. This caused a lot of confusion to users that set the option to 'y',
+	# 'yes' or 'true'. This was fixed but all of these values must be supported now.
+	if [ "x${GRUB_DISABLE_SUBMENU}" = xyes ] || [ "x${GRUB_DISABLE_SUBMENU}" = xy ]; then
+	    GRUB_DISABLE_SUBMENU="true"
+	fi
+
+	if [ "x$is_top_level" = xtrue ] && [ "x${GRUB_DISABLE_SUBMENU}" != xtrue ]; then
            cat << EOF
 menuentry '$(echo "$OS $onstr" | grub_quote)' $CLASS --class gnu-linux --class gnu --class os \$menuentry_id_option 'osprober-gnulinux-simple-$boot_device_id' {
 EOF
@@ -2,7 +2,7 @@
 set -e

 # grub-mkconfig helper script.
-# Copyright (C) 2012  Free Software Foundation, Inc.
+# Copyright (C) 2020  Free Software Foundation, Inc.
 #
 # GRUB is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -24,19 +24,17 @@ datarootdir="/usr/share"
 export TEXTDOMAIN=grub
 export TEXTDOMAINDIR="${datarootdir}/locale"

-. "${datarootdir}/grub/grub-mkconfig_lib"
+. "$pkgdatadir/grub-mkconfig_lib"

-efi_vars_dir=/sys/firmware/efi/efivars
+EFI_VARS_DIR=/sys/firmware/efi/efivars
 EFI_GLOBAL_VARIABLE=8be4df61-93ca-11d2-aa0d-00e098032b8c
-OsIndications="$efi_vars_dir/OsIndicationsSupported-$EFI_GLOBAL_VARIABLE"
+OS_INDICATIONS="$EFI_VARS_DIR/OsIndicationsSupported-$EFI_GLOBAL_VARIABLE"

-if [ -e "$OsIndications" ] && \
-   [ "$(( $(printf 0x%x \'"$(cat $OsIndications | cut -b5)") & 1 ))" = 1 ]; then
-  LABEL="System setup"
+if [ -e "$OS_INDICATIONS" ] && \
+   [ "$(( $(printf 0x%x \'"$(cat $OS_INDICATIONS | cut -b5)"\') & 1 ))" = 1 ]; then
+  LABEL="UEFI Firmware Settings"

-  gettext_printf "Adding boot menu entry for EFI firmware configuration\n" >&2
-
-  onstr="$(gettext_printf "(on %s)" "${DEVICE}")"
+  gettext_printf "Adding boot menu entry for UEFI Firmware Settings ...\n" >&2

  cat << EOF
 menuentry '$LABEL' \$menuentry_id_option 'uefi-firmware' {
@@ -3,7 +3,7 @@ cat <<EOF
 if [ -f  \${config_directory}/custom.cfg ]; then
  source \${config_directory}/custom.cfg
 elif [ -z "\${config_directory}" -a -f  \$prefix/custom.cfg ]; then
-  source \$prefix/custom.cfg;
+  source \$prefix/custom.cfg
 fi
 EOF

@@ -73,3 +73,7 @@ wheel:!::pi
 _flatpak:!::
 tss:!::
 docker:!::
+debian-tor:!::
+cmk-agent:!::
+nm-openvpn:!::
+wireshark:!::
@@ -72,3 +72,7 @@ pi:!::
 wheel:!::pi
 _flatpak:!::
 tss:!::
+docker:!::
+debian-tor:!::
+cmk-agent:!::
+nm-openvpn:!::
@@ -6,7 +6,7 @@
 # Startskript for OMD sites

 ### BEGIN INIT INFO
-# Provides:          omd-2.0.0p24.cfe
+# Provides:          omd-2.1.0p15.cfe
 # Required-Start:    $syslog
 # Required-Stop:     $syslog
 # Default-Start:     2 3 4 5
@@ -20,7 +20,7 @@
 AUTOSTART=1
 [ -r /etc/default/omd ] && . /etc/default/omd

-VERSION=2.0.0p24.cfe
+VERSION=2.1.0p15.cfe
 VER="-V $VERSION"
 MSG="using omd version $VERSION"
 OMD="/omd/versions/$VERSION/bin/omd"
@@ -0,0 +1,63 @@
+#!/bin/sh
+# Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
+# This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
+# conditions defined in the file COPYING, which is part of this source code package.
+
+# Startskript for OMD sites
+
+### BEGIN INIT INFO
+# Provides:          omd-2.1.0p6.cfe
+# Required-Start:    $syslog
+# Required-Stop:     $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: OMD sites
+# Description:       Start and stop the sites of the OpenSource Monitoring 
+#                    Distribution (OMD)
+### END INIT INFO
+
+# -- start omd, if not disabled in /etc/default/omd
+AUTOSTART=1
+[ -r /etc/default/omd ] && . /etc/default/omd
+
+VERSION=2.1.0p6.cfe
+VER="-V $VERSION"
+MSG="using omd version $VERSION"
+OMD="/omd/versions/$VERSION/bin/omd"
+
+case "$1" in
+    start)
+	if [ "$AUTOSTART" = "1" ]; then
+          echo "Starting all OMD monitoring sites $MSG:"
+          $OMD "$1" $VER
+	else
+	  echo "OMD autostart disabled, skipping ..."
+	fi
+    ;;
+    stop)
+        echo "Stopping all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    restart)
+        echo "Restarting all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    reload)
+        echo "Reloading all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    status)
+        echo "Checking state of all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    '')
+	echo "usage: $PROGNAME start|stop|restart|reload|status"
+	exit 1
+    ;;
+    *)
+        echo "Doing $1 on all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+esac
+
+
@@ -0,0 +1,63 @@
+#!/bin/sh
+# Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
+# This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
+# conditions defined in the file COPYING, which is part of this source code package.
+
+# Startskript for OMD sites
+
+### BEGIN INIT INFO
+# Provides:          omd-2.1.0p8.cfe
+# Required-Start:    $syslog
+# Required-Stop:     $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: OMD sites
+# Description:       Start and stop the sites of the OpenSource Monitoring 
+#                    Distribution (OMD)
+### END INIT INFO
+
+# -- start omd, if not disabled in /etc/default/omd
+AUTOSTART=1
+[ -r /etc/default/omd ] && . /etc/default/omd
+
+VERSION=2.1.0p8.cfe
+VER="-V $VERSION"
+MSG="using omd version $VERSION"
+OMD="/omd/versions/$VERSION/bin/omd"
+
+case "$1" in
+    start)
+	if [ "$AUTOSTART" = "1" ]; then
+          echo "Starting all OMD monitoring sites $MSG:"
+          $OMD "$1" $VER
+	else
+	  echo "OMD autostart disabled, skipping ..."
+	fi
+    ;;
+    stop)
+        echo "Stopping all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    restart)
+        echo "Restarting all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    reload)
+        echo "Reloading all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    status)
+        echo "Checking state of all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    '')
+	echo "usage: $PROGNAME start|stop|restart|reload|status"
+	exit 1
+    ;;
+    *)
+        echo "Doing $1 on all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+esac
+
+
@@ -0,0 +1,63 @@
+#!/bin/sh
+# Copyright (C) 2019 tribe29 GmbH - License: GNU General Public License v2
+# This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
+# conditions defined in the file COPYING, which is part of this source code package.
+
+# Startskript for OMD sites
+
+### BEGIN INIT INFO
+# Provides:          omd-2.1.0p9.cfe
+# Required-Start:    $syslog
+# Required-Stop:     $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: OMD sites
+# Description:       Start and stop the sites of the OpenSource Monitoring 
+#                    Distribution (OMD)
+### END INIT INFO
+
+# -- start omd, if not disabled in /etc/default/omd
+AUTOSTART=1
+[ -r /etc/default/omd ] && . /etc/default/omd
+
+VERSION=2.1.0p9.cfe
+VER="-V $VERSION"
+MSG="using omd version $VERSION"
+OMD="/omd/versions/$VERSION/bin/omd"
+
+case "$1" in
+    start)
+	if [ "$AUTOSTART" = "1" ]; then
+          echo "Starting all OMD monitoring sites $MSG:"
+          $OMD "$1" $VER
+	else
+	  echo "OMD autostart disabled, skipping ..."
+	fi
+    ;;
+    stop)
+        echo "Stopping all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    restart)
+        echo "Restarting all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    reload)
+        echo "Reloading all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    status)
+        echo "Checking state of all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+    '')
+	echo "usage: $PROGNAME start|stop|restart|reload|status"
+	exit 1
+    ;;
+    *)
+        echo "Doing $1 on all OMD monitoring sites $MSG:"
+        $OMD "$1" $VER
+    ;;
+esac
+
+
@@ -1,156 +0,0 @@
-#!/bin/sh
-set -e
-
-### BEGIN INIT INFO
-# Provides:           docker
-# Required-Start:     $syslog $remote_fs
-# Required-Stop:      $syslog $remote_fs
-# Should-Start:       cgroupfs-mount cgroup-lite
-# Should-Stop:        cgroupfs-mount cgroup-lite
-# Default-Start:      2 3 4 5
-# Default-Stop:       0 1 6
-# Short-Description:  Create lightweight, portable, self-sufficient containers.
-# Description:
-#  Docker is an open-source project to easily create lightweight, portable,
-#  self-sufficient containers from any application. The same container that a
-#  developer builds and tests on a laptop can run at scale, in production, on
-#  VMs, bare metal, OpenStack clusters, public clouds and more.
-### END INIT INFO
-
-export PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin
-
-BASE=docker
-
-# modify these in /etc/default/$BASE (/etc/default/docker)
-DOCKERD=/usr/bin/dockerd
-# This is the pid file managed by docker itself
-DOCKER_PIDFILE=/var/run/$BASE.pid
-# This is the pid file created/managed by start-stop-daemon
-DOCKER_SSD_PIDFILE=/var/run/$BASE-ssd.pid
-DOCKER_LOGFILE=/var/log/$BASE.log
-DOCKER_OPTS=
-DOCKER_DESC="Docker"
-
-# Get lsb functions
-. /lib/lsb/init-functions
-
-if [ -f /etc/default/$BASE ]; then
-	. /etc/default/$BASE
-fi
-
-# Check docker is present
-if [ ! -x $DOCKERD ]; then
-	log_failure_msg "$DOCKERD not present or not executable"
-	exit 1
-fi
-
-check_init() {
-	# see also init_is_upstart in /lib/lsb/init-functions (which isn't available in Ubuntu 12.04, or we'd use it directly)
-	if [ -x /sbin/initctl ] && /sbin/initctl version 2>/dev/null | grep -q upstart; then
-		log_failure_msg "$DOCKER_DESC is managed via upstart, try using service $BASE $1"
-		exit 1
-	fi
-}
-
-fail_unless_root() {
-	if [ "$(id -u)" != '0' ]; then
-		log_failure_msg "$DOCKER_DESC must be run as root"
-		exit 1
-	fi
-}
-
-cgroupfs_mount() {
-	# see also https://github.com/tianon/cgroupfs-mount/blob/master/cgroupfs-mount
-	if grep -v '^#' /etc/fstab | grep -q cgroup \
-		|| [ ! -e /proc/cgroups ] \
-		|| [ ! -d /sys/fs/cgroup ]; then
-		return
-	fi
-	if ! mountpoint -q /sys/fs/cgroup; then
-		mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroup /sys/fs/cgroup
-	fi
-	(
-		cd /sys/fs/cgroup
-		for sys in $(awk '!/^#/ { if ($4 == 1) print $1 }' /proc/cgroups); do
-			mkdir -p $sys
-			if ! mountpoint -q $sys; then
-				if ! mount -n -t cgroup -o $sys cgroup $sys; then
-					rmdir $sys || true
-				fi
-			fi
-		done
-	)
-}
-
-case "$1" in
-	start)
-		check_init
-		
-		fail_unless_root
-
-		cgroupfs_mount
-
-		touch "$DOCKER_LOGFILE"
-		chgrp docker "$DOCKER_LOGFILE"
-
-		ulimit -n 1048576
-
-		# Having non-zero limits causes performance problems due to accounting overhead
-		# in the kernel. We recommend using cgroups to do container-local accounting.
-		if [ "$BASH" ]; then
-			ulimit -u unlimited
-		else
-			ulimit -p unlimited
-		fi
-
-		log_begin_msg "Starting $DOCKER_DESC: $BASE"
-		start-stop-daemon --start --background \
-			--no-close \
-			--exec "$DOCKERD" \
-			--pidfile "$DOCKER_SSD_PIDFILE" \
-			--make-pidfile \
-			-- \
-				-p "$DOCKER_PIDFILE" \
-				$DOCKER_OPTS \
-					>> "$DOCKER_LOGFILE" 2>&1
-		log_end_msg $?
-		;;
-
-	stop)
-		check_init
-		fail_unless_root
-		if [ -f "$DOCKER_SSD_PIDFILE" ]; then
-			log_begin_msg "Stopping $DOCKER_DESC: $BASE"
-			start-stop-daemon --stop --pidfile "$DOCKER_SSD_PIDFILE" --retry 10
-			log_end_msg $?
-		else
-			log_warning_msg "Docker already stopped - file $DOCKER_SSD_PIDFILE not found."
-		fi
-		;;
-
-	restart)
-		check_init
-		fail_unless_root
-		docker_pid=`cat "$DOCKER_SSD_PIDFILE" 2>/dev/null`
-		[ -n "$docker_pid" ] \
-			&& ps -p $docker_pid > /dev/null 2>&1 \
-			&& $0 stop
-		$0 start
-		;;
-
-	force-reload)
-		check_init
-		fail_unless_root
-		$0 restart
-		;;
-
-	status)
-		check_init
-		status_of_proc -p "$DOCKER_SSD_PIDFILE" "$DOCKERD" "$DOCKER_DESC"
-		;;
-
-	*)
-		echo "Usage: service docker {start|stop|restart|status}"
-		exit 1
-		;;
-esac
@@ -0,0 +1,298 @@
+#!/bin/sh -e
+
+### BEGIN INIT INFO
+# Provides:          openvpn
+# Required-Start:    $network $remote_fs $syslog
+# Required-Stop:     $network $remote_fs $syslog
+# Should-Start:      network-manager
+# Should-Stop:       network-manager
+# X-Start-Before:    $x-display-manager gdm kdm xdm wdm ldm sdm nodm
+# X-Interactive:     true
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Openvpn VPN service
+# Description: This script will start OpenVPN tunnels as specified
+#              in /etc/default/openvpn and /etc/openvpn/*.conf
+### END INIT INFO
+
+# Original version by Robert Leslie
+# <rob@mars.org>, edited by iwj and cs
+# Modified for openvpn by Alberto Gonzalez Iniesta <agi@inittab.org>
+# Modified for restarting / starting / stopping single tunnels by Richard Mueller <mueller@teamix.net>
+
+. /lib/lsb/init-functions
+
+test $DEBIAN_SCRIPT_DEBUG && set -v -x
+
+DAEMON=/usr/sbin/openvpn
+DESC="virtual private network daemon"
+CONFIG_DIR=/etc/openvpn
+test -x $DAEMON || exit 0
+test -d $CONFIG_DIR || exit 0
+
+# Source defaults file; edit that file to configure this script.
+AUTOSTART="all"
+STATUSREFRESH=10
+OMIT_SENDSIGS=0
+if test -e /etc/default/openvpn ; then
+  . /etc/default/openvpn
+fi
+
+start_vpn () {
+    if grep -q '^[	 ]*daemon' $CONFIG_DIR/$NAME.conf ; then
+      # daemon already given in config file
+      DAEMONARG=
+    else
+      # need to daemonize
+      DAEMONARG="--daemon ovpn-$NAME"
+    fi
+
+    if grep -q '^[	 ]*status ' $CONFIG_DIR/$NAME.conf ; then
+      # status file already given in config file
+      STATUSARG=""
+    elif test $STATUSREFRESH -eq 0 ; then
+      # default status file disabled in /etc/default/openvpn
+      STATUSARG=""
+    else
+      # prepare default status file
+      STATUSARG="--status /run/openvpn/$NAME.status $STATUSREFRESH"
+    fi
+
+    # tun using the "subnet" topology confuses the routing code that wrongly
+    # emits ICMP redirects for client to client communications
+    SAVED_DEFAULT_SEND_REDIRECTS=0
+    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
+       grep -q '^[[:space:]]*topology[[:space:]]*subnet' $CONFIG_DIR/$NAME.conf ; then
+        # When using "client-to-client", OpenVPN routes the traffic itself without
+        # involving the TUN/TAP interface so no ICMP redirects are sent
+        if ! grep -q '^[[:space:]]*client-to-client' $CONFIG_DIR/$NAME.conf ; then
+            sysctl -w net.ipv4.conf.all.send_redirects=0 > /dev/null
+
+            # Save the default value for send_redirects before disabling it
+            # to make sure the tun device is created with send_redirects disabled
+            SAVED_DEFAULT_SEND_REDIRECTS=$(sysctl -n net.ipv4.conf.default.send_redirects)
+
+            if [ "$SAVED_DEFAULT_SEND_REDIRECTS" -ne 0 ]; then
+              sysctl -w net.ipv4.conf.default.send_redirects=0 > /dev/null
+            fi
+        fi
+    fi
+
+    log_progress_msg "$NAME"
+    STATUS=0
+
+    start-stop-daemon --start --quiet --oknodo \
+        --pidfile /run/openvpn/$NAME.pid \
+        --exec $DAEMON -- $OPTARGS --writepid /run/openvpn/$NAME.pid \
+        $DAEMONARG $STATUSARG --cd $CONFIG_DIR \
+        --config $CONFIG_DIR/$NAME.conf || STATUS=1
+
+    [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /run/openvpn/$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid
+
+    # Set the back the original default value of send_redirects if it was changed
+    if [ "$SAVED_DEFAULT_SEND_REDIRECTS" -ne 0 ]; then
+      sysctl -w net.ipv4.conf.default.send_redirects=$SAVED_DEFAULT_SEND_REDIRECTS > /dev/null
+    fi
+}
+stop_vpn () {
+  start-stop-daemon --stop --quiet --oknodo \
+      --pidfile $PIDFILE --exec $DAEMON --retry 10
+  if [ "$?" -eq 0 ]; then
+    rm -f $PIDFILE
+    [ "$OMIT_SENDSIGS" -ne 1 ] || rm -f /run/sendsigs.omit.d/openvpn.$NAME.pid
+    rm -f /run/openvpn/$NAME.status 2> /dev/null
+  fi
+}
+
+case "$1" in
+start)
+  log_daemon_msg "Starting $DESC"
+
+  # first create /run directory so it's present even
+  # when no VPN are autostarted by this script, but later
+  # by systemd openvpn@.service
+  mkdir -p /run/openvpn
+
+  # autostart VPNs
+  if test -z "$2" ; then
+    # check if automatic startup is disabled by AUTOSTART=none
+    if test "x$AUTOSTART" = "xnone" -o -z "$AUTOSTART" ; then
+      log_warning_msg " Autostart disabled."
+      exit 0
+    fi
+    if test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then
+      # all VPNs shall be started automatically
+      for CONFIG in `cd $CONFIG_DIR; ls *.conf 2> /dev/null`; do
+        NAME=${CONFIG%%.conf}
+        start_vpn
+      done
+    else
+      # start only specified VPNs
+      for NAME in $AUTOSTART ; do
+        if test -e $CONFIG_DIR/$NAME.conf ; then
+          start_vpn
+        else
+          log_failure_msg "No such VPN: $NAME"
+          STATUS=1
+        fi
+      done
+    fi
+  #start VPNs from command line
+  else
+    while shift ; do
+      [ -z "$1" ] && break
+      if test -e $CONFIG_DIR/$1.conf ; then
+        NAME=$1
+        start_vpn
+      else
+       log_failure_msg " No such VPN: $1"
+       STATUS=1
+      fi
+    done
+  fi
+  log_end_msg ${STATUS:-0}
+
+  ;;
+stop)
+  log_daemon_msg "Stopping $DESC"
+
+  if test -z "$2" ; then
+    for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
+      NAME=`echo $PIDFILE | cut -c14-`
+      NAME=${NAME%%.pid}
+      stop_vpn
+      log_progress_msg "$NAME"
+    done
+  else
+    while shift ; do
+      [ -z "$1" ] && break
+      if test -e /run/openvpn/$1.pid ; then
+        PIDFILE=`ls /run/openvpn/$1.pid 2> /dev/null`
+        NAME=`echo $PIDFILE | cut -c14-`
+        NAME=${NAME%%.pid}
+        stop_vpn
+        log_progress_msg "$NAME"
+      else
+        log_failure_msg " (failure: No such VPN is running: $1)"
+      fi
+    done
+  fi
+  log_end_msg 0
+  ;;
+# Only 'reload' running VPNs. New ones will only start with 'start' or 'restart'.
+reload|force-reload)
+ log_daemon_msg "Reloading $DESC"
+  for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
+    NAME=`echo $PIDFILE | cut -c14-`
+    NAME=${NAME%%.pid}
+# If openvpn if running under a different user than root we'll need to restart
+    if egrep '^[[:blank:]]*user[[:blank:]]' $CONFIG_DIR/$NAME.conf > /dev/null 2>&1 ; then
+      stop_vpn
+      start_vpn
+      log_progress_msg "(restarted)"
+    else
+      kill -HUP `cat $PIDFILE` || true
+    log_progress_msg "$NAME"
+    fi
+  done
+  log_end_msg 0
+  ;;
+
+# Only 'soft-restart' running VPNs. New ones will only start with 'start' or 'restart'.
+soft-restart)
+ log_daemon_msg "$DESC sending SIGUSR1"
+  for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
+    NAME=`echo $PIDFILE | cut -c14-`
+    NAME=${NAME%%.pid}
+    kill -USR1 `cat $PIDFILE` || true
+    log_progress_msg "$NAME"
+  done
+  log_end_msg 0
+ ;;
+
+restart)
+  shift
+  $0 stop ${@}
+  $0 start ${@}
+  ;;
+cond-restart)
+  log_daemon_msg "Restarting $DESC."
+  for PIDFILE in `ls /run/openvpn/*.pid 2> /dev/null`; do
+    NAME=`echo $PIDFILE | cut -c14-`
+    NAME=${NAME%%.pid}
+    stop_vpn
+    start_vpn
+  done
+  log_end_msg 0
+  ;;
+status)
+  GLOBAL_STATUS=0
+  if test -z "$2" ; then
+    # We want status for all defined VPNs.
+    # Returns success if all autostarted VPNs are defined and running
+    if test "x$AUTOSTART" = "xnone" ; then
+      # Consider it a failure if AUTOSTART=none
+      log_warning_msg "No VPN autostarted"
+      GLOBAL_STATUS=1
+    else
+      if ! test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then
+        # Consider it a failure if one of the autostarted VPN is not defined
+        for VPN in $AUTOSTART ; do
+          if ! test -f $CONFIG_DIR/$VPN.conf ; then
+            log_warning_msg "VPN '$VPN' is in AUTOSTART but is not defined"
+            GLOBAL_STATUS=1
+          fi
+        done
+      fi
+    fi
+    for CONFIG in `cd $CONFIG_DIR; ls *.conf 2> /dev/null`; do
+      NAME=${CONFIG%%.conf}
+      # Is it an autostarted VPN ?
+      if test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then
+        AUTOVPN=1
+      else
+        if test "x$AUTOSTART" = "xnone" ; then
+          AUTOVPN=0
+        else
+          AUTOVPN=0
+          for VPN in $AUTOSTART; do
+            if test "x$VPN" = "x$NAME" ; then
+              AUTOVPN=1
+            fi
+          done
+        fi
+      fi
+      if test "x$AUTOVPN" = "x1" ; then
+        # If it is autostarted, then it contributes to global status
+        status_of_proc -p /run/openvpn/${NAME}.pid openvpn "VPN '${NAME}'" || GLOBAL_STATUS=1
+      else
+        status_of_proc -p /run/openvpn/${NAME}.pid openvpn "VPN '${NAME}' (non autostarted)" || true
+      fi
+    done
+  else
+    # We just want status for specified VPNs.
+    # Returns success if all specified VPNs are defined and running
+    while shift ; do
+      [ -z "$1" ] && break
+      NAME=$1
+      if test -e $CONFIG_DIR/$NAME.conf ; then
+        # Config exists
+        status_of_proc -p /run/openvpn/${NAME}.pid openvpn "VPN '${NAME}'" || GLOBAL_STATUS=1
+      else
+        # Config does not exist
+        log_warning_msg "VPN '$NAME': missing $CONFIG_DIR/$NAME.conf file !"
+        GLOBAL_STATUS=1
+      fi
+    done
+  fi
+  exit $GLOBAL_STATUS
+  ;;
+*)
+  echo "Usage: $0 {start|stop|reload|restart|force-reload|cond-restart|soft-restart|status}" >&2
+  exit 1
+  ;;
+esac
+
+exit 0
+
+# vim:set ai sts=2 sw=2 tw=0:
@@ -0,0 +1,146 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides: pcscd
+# Required-Start:    $local_fs $remote_fs $syslog
+# Required-Stop:     $local_fs $remote_fs $syslog
+# Should-Start:      udev
+# Should-Stop:       udev
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Daemon to access a smart card using PC/SC
+# Description:       The PC/SC daemon is used to dynamically
+#                    allocate/deallocate reader drivers at runtime and manage
+#                    connections to the readers.
+### END INIT INFO
+
+# Authors: 
+#   Carlos Prados Bocos <cprados@debian.org>
+#   Ludovic Rousseau <rousseau@debian.org>
+
+# Do NOT "set -e"
+
+# PATH should only include /usr/* if it runs after the mountnfs.sh script
+PATH=/sbin:/usr/sbin:/bin:/usr/bin
+DESC="PCSC Lite resource manager"
+NAME=pcscd
+DAEMON=/usr/sbin/$NAME
+IPCDIR=/var/run/pcscd
+PIDFILE=$IPCDIR/$NAME.pid
+SCRIPTNAME=/etc/init.d/$NAME
+
+# if you need to pass arguments to pcscd you should edit the file
+# /etc/default/pcscd and add a line 
+# DAEMON_ARGS="--your-option"
+
+# Exit if the package is not installed
+[ -x "$DAEMON" ] || exit 0
+
+# Read configuration variable file if it is present
+[ -r /etc/default/$NAME ] && . /etc/default/$NAME
+
+# Load the VERBOSE setting and other rcS variables
+. /lib/init/vars.sh
+
+# Define LSB log_* functions.
+# Depend on lsb-base (>= 3.0-6) to ensure that this file is present.
+. /lib/lsb/init-functions
+
+# get LANG variable (code from /etc/init.d/keymap.sh)
+ENV_FILE="none"
+[ -r /etc/environment ] && ENV_FILE="/etc/environment"
+[ -r /etc/default/locale ] && ENV_FILE="/etc/default/locale"
+
+value=$(egrep "^[^#]*LANG=" $ENV_FILE | tail -n1 | cut -d= -f2)
+eval LANG=$value
+
+#
+# Function that starts the daemon/service
+#
+do_start()
+{
+	# create $IPCDIR with correct access rights
+	if [ ! -d $IPCDIR ]
+	then
+		rm -rf $IPCDIR
+		mkdir $IPCDIR
+	fi
+	chmod 0755 $IPCDIR
+
+	# Return
+	#   0 if daemon has been started
+	#   1 if daemon was already running
+	#   2 if daemon could not be started
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
+		|| return 1
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
+		$DAEMON_ARGS \
+		|| return 2
+	# Add code here, if necessary, that waits for the process to be ready
+	# to handle requests from services started subsequently which depend
+	# on this one.  As a last resort, sleep for some time.
+}
+
+#
+# Function that stops the daemon/service
+#
+do_stop()
+{
+	# Return
+	#   0 if daemon has been stopped
+	#   1 if daemon was already stopped
+	#   2 if daemon could not be stopped
+	#   other if a failure occurred
+	start-stop-daemon --stop --quiet --retry=3 --pidfile $PIDFILE --name $NAME
+	RETVAL="$?"
+	[ "$RETVAL" = 2 ] && return 2
+}
+
+case "$1" in
+  start)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
+	do_start
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  stop)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+	do_stop
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  status)
+	  status_of_proc -p "$PIDFILE" "$DAEMON" "$NAME" && exit 0 || exit $?
+	  ;;
+  restart|force-reload)
+	#
+	# If the "reload" option is implemented then remove the
+	# 'force-reload' alias
+	#
+	log_daemon_msg "Restarting $DESC" "$NAME"
+	do_stop
+	case "$?" in
+	  0|1)
+		do_start
+		case "$?" in
+			0) log_end_msg 0 ;;
+			1) log_end_msg 1 ;; # Old process is still running
+			*) log_end_msg 1 ;; # Failed to start
+		esac
+		;;
+	  *)
+	  	# Failed to stop
+		log_end_msg 1
+		;;
+	esac
+	;;
+  *)
+	echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2
+	exit 3
+	;;
+esac
+
+:
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				`/usr/lib/jvm/java-11-openjdk-amd64/bin/java`
				`@@ -0,0 +1 @@`
				`/usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz`
				`@@ -0,0 +1 @@`
				`/usr/lib/jvm/java-11-openjdk-amd64/lib/jexec`
@@ -1 +1 @@
 .3
 .5
				`@@ -0,0 +1 @@`
				`../conf.avail/30-0-google-crosextra-carlito-fontconfig.conf`
				`@@ -0,0 +1 @@`
				`/usr/share/fontconfig/conf.avail/90-fonts-linux-libertine.conf`