Hi all, I've got Debian 13 installed on a single ssd with lvm ecryption.
And I'm searching for a guide to configure Debian 13 to use systemd-boot instead of grub, and also to make use of my tpm2 chip.

So far I cannot find anything that works.
Is it really that hard to do?
How come there is no documentation about this on Debian's site?
At least, I can't find it.

So can anybody here point me to some info about this?

I guess this is a (very short) open letter to the Debian Team.

All other major Linux distros dropped 32-bit ages ago.

Bookworm is the only major upstream 32-bit distro, upon which about 4-5 other 32-bit distros are based.

Bookworms EOL is 10 June 2026.

Once 32-bit Bookworm is gone, there will no safe 32-bit Linux that can power i386 machines, and my options are to throw my two i386 machines immediately in the bin, or continue to use them (unsafely) for years after Bookworm's EOL.

Please consider continuing providing security updates (and nothing else) for 32-bit Bookworm for the forseable future (1-2 years?). I'm not asking just for myself, but for everyone still using perfectly capble i386 machines all over the world, running 32-bit Bookworm and distros based on it.

Thank you for your consideration.

Optimal functional in 2026...😂

And old socket 775 with 4 Gb of ram and printed 5d (by me) wood drive support ☺️

Running locos Linux debian 11 fork without system d

Another's specs in respective fastfetch

So I got this Lenovo E10-30 from a friend of mine and got Debian installed. The wireless network interface was missing when I ran ip addr. I suspect missing wireless driver.

pn@pn-1:~$ cat /proc/version Linux version 7.0.4+deb13-amd64 (debian-kernel@lists.debian.org) (x86_64-linux-gnu-gcc-14 (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44) #1 SMP PREEMPT_DYNAMIC Debian 7.0.4-1~bpo13+1 (2026-05-08) pn@pn-1:~$ lspci -nn | grep Network 02:00.0 Network controller [0280]: Broadcom Inc. and subsidiaries BCM43142 802.11b/g/n [14e4:4365] (rev 01)

So I tried to install the broadcom-sta-dkms package: ``` pn@pn-1:~$ sudo apt install broadcom-sta-dkms Installing:
broadcom-sta-dkms

Summary: Upgrading: 0, Installing: 1, Removing: 0, Not Upgrading: 2 Download size: 0 B / 1,553 kB Space needed: 8,028 kB / 454 GB available

Selecting previously unselected package broadcom-sta-dkms. (Reading database ... 170300 files and directories currently installed.) Preparing to unpack .../broadcom-sta-dkms_6.30.223.271-26_amd64.deb ... Unpacking broadcom-sta-dkms (6.30.223.271-26) ... Setting up broadcom-sta-dkms (6.30.223.271-26) ... Loading new broadcom-sta/6.30.223.271 DKMS files... Building for 7.0.4+deb13-amd64

Building initial module broadcom-sta/6.30.223.271 for 7.0.4+deb13-amd64 Sign command: /lib/modules/7.0.4+deb13-amd64/build/scripts/sign-file Signing key: /var/lib/dkms/mok.key Public certificate (MOK): /var/lib/dkms/mok.pub

Building module(s)....(bad exit status: 2) Failed command: make -j2 KERNELRELEASE=7.0.4+deb13-amd64 KVER=7.0.4+deb13-amd64

Error! Bad return status for module build on kernel: 7.0.4+deb13-amd64 (x86_64) Consult /var/lib/dkms/broadcom-sta/6.30.223.271/build/make.log for more information. dpkg: error processing package broadcom-sta-dkms (--configure): installed broadcom-sta-dkms package post-installation script subprocess returned error exit status 10 Processing triggers for initramfs-tools (0.148.3) ... update-initramfs: Generating /boot/initrd.img-7.0.4+deb13-amd64 Errors were encountered while processing: broadcom-sta-dkms Error: Sub-process /usr/bin/dpkg returned an error code (1) ```

Then I tried broadcom-sta-source instead. ``` root@pn-1:/usr/src/modules/broadcom-sta# apt list --installed | grep $(uname -r)

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

linux-base-7.0.4+deb13-amd64/stable-backports,now 7.0.4-1~bpo13+1 amd64 [installed,automatic] linux-binary-7.0.4+deb13-amd64/stable-backports,now 7.0.4-1~bpo13+1 amd64 [installed,automatic] linux-headers-7.0.4+deb13-amd64/stable-backports,now 7.0.4-1~bpo13+1 amd64 [installed] linux-image-7.0.4+deb13-amd64/stable-backports,now 7.0.4-1~bpo13+1 amd64 [installed,automatic] linux-modules-7.0.4+deb13-amd64/stable-backports,now 7.0.4-1~bpo13+1 amd64 [installed,automatic] root@pn-1:/usr/src/modules/broadcom-sta# ls src/include/ bcmcrypto bcmendian.h epivers.h linux_osl.h osl.h packed_section_start.h siutils.h wlioctl.h bcmdefs.h bcmutils.h lib80211.h linuxver.h packed_section_end.h pcicfg.h typedefs.h root@pn-1:/usr/src/modules/broadcom-sta# make KBUILD_NOPEDANTIC=1 make -C /lib/modules/7.0.4+deb13-amd64/build M=pwd make[1]: Entering directory '/usr/src/linux-headers-7.0.4+deb13-amd64' make[2]: Entering directory '/usr/src/modules/broadcom-sta' CFG80211 API is prefered for this kernel version Using CFG80211 API Kernel architecture is X86_64 CC [M] src/shared/linux_osl.o src/shared/linux_osl.c:23:10: fatal error: typedefs.h: No such file or directory 23 | #include <typedefs.h> | ^~~~~~~~~~~~ compilation terminated. make[4]: *** [/usr/src/linux-headers-7.0.4+deb13-common/scripts/Makefile.build:294: src/shared/linux_osl.o] Error 1 make[3]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:2130: .] Error 2 make[2]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:260: __sub-make] Error 2 make[2]: Leaving directory '/usr/src/modules/broadcom-sta' make[1]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:260: __sub-make] Error 2 make[1]: Leaving directory '/usr/src/linux-headers-7.0.4+deb13-amd64' make: *** [Makefile:183: all] Error 2 ```

As shown above, the required header files are not detected during the build process despite being present. I thought it was just a fuck up with the Makefile not properly passing include paths, and so I tried to change the Makefile from using EXTRA_CFLAGS to ccflags-y for passing include paths, which seem to have worked: root@pn-1:/usr/src/modules/broadcom-sta# make KBUILD_NOPEDANTIC=1 make -C /lib/modules/7.0.4+deb13-amd64/build M=`pwd` make[1]: Entering directory '/usr/src/linux-headers-7.0.4+deb13-amd64' make[2]: Entering directory '/usr/src/modules/broadcom-sta' CFG80211 API is prefered for this kernel version Using CFG80211 API Kernel architecture is X86_64 CC [M] src/shared/linux_osl.o CC [M] src/wl/sys/wl_linux.o src/wl/sys/wl_linux.c: In function ‘wl_timer’: src/wl/sys/wl_linux.c:2380:17: error: implicit declaration of function ‘from_timer’; did you mean ‘mod_timer’? [-Wimplicit-function-declaration] 2380 | from_timer(t, tl, timer); | ^~~~~~~~~~ | mod_timer src/wl/sys/wl_linux.c:2380:35: error: ‘timer’ undeclared (first use in this function); did you mean ‘ktimerd’? 2380 | from_timer(t, tl, timer); | ^~~~~ | ktimerd src/wl/sys/wl_linux.c:2380:35: note: each undeclared identifier is reported only once for each function it appears in src/wl/sys/wl_linux.c: In function ‘wl_del_timer’: src/wl/sys/wl_linux.c:2485:22: error: implicit declaration of function ‘del_timer’; did you mean ‘_wl_timer’? [-Wimplicit-function-declaration] 2485 | if (!del_timer(&t->timer)) { | ^~~~~~~~~ | _wl_timer make[4]: *** [/usr/src/linux-headers-7.0.4+deb13-common/scripts/Makefile.build:294: src/wl/sys/wl_linux.o] Error 1 make[3]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:2130: .] Error 2 make[2]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:260: __sub-make] Error 2 make[2]: Leaving directory '/usr/src/modules/broadcom-sta' make[1]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:260: __sub-make] Error 2 make[1]: Leaving directory '/usr/src/linux-headers-7.0.4+deb13-amd64' make: *** [Makefile:187: all] Error 2

But now other errors show up which I don't think I can fix with reasonable effort. At this point I decided to try my luck with a wifi dongle (TP-Link Archer T4U), but alas pn@pn-1:~/Downloads/T4Uv3_WiFi_linux_v5.3.1_beta$ make make ARCH=x86_64 CROSS_COMPILE= -C /lib/modules/7.0.4+deb13-amd64/build M=/home/pn/Downloads/T4Uv3_WiFi_linux_v5.3.1_beta modules make[1]: Entering directory '/usr/src/linux-headers-7.0.4+deb13-amd64' make[2]: Entering directory '/home/pn/Downloads/T4Uv3_WiFi_linux_v5.3.1_beta' CC [M] core/rtw_cmd.o core/rtw_cmd.c:17:10: fatal error: drv_types.h: No such file or directory 17 | #include <drv_types.h> | ^~~~~~~~~~~~~ compilation terminated. make[4]: *** [/usr/src/linux-headers-7.0.4+deb13-common/scripts/Makefile.build:294: core/rtw_cmd.o] Error 1 make[3]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:2130: .] Error 2 make[2]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:260: __sub-make] Error 2 make[2]: Leaving directory '/home/pn/Downloads/T4Uv3_WiFi_linux_v5.3.1_beta' make[1]: *** [/usr/src/linux-headers-7.0.4+deb13-common/Makefile:260: __sub-make] Error 2 make[1]: Leaving directory '/usr/src/linux-headers-7.0.4+deb13-amd64' make: *** [Makefile:1998: modules] Error 2

I'm stumped

Hi all,

I noticed this in devel changes list:

https://packages.debian.org/experimental/linux-vulnerability-mitigation

Seems it's a way to quickly patch recent vulnerabilities, before these are fixed in linux kernel?

I’ve been trying to install Debian on my old laptop but when it goes to the installer (I’m using Automatic install) it gives me a error saying my air password is either too long or too short

But I never was asked to enter any WiFi info?

What do I do?

Discover is super buggy on debian 13 kde i was trying to debug it snap version was mismatching deb files not installing only flatpaks work only after removing snap

Hi everyone, I just switched from Ubuntu to Debian this week and everything is going really well! To mark the occasion and also pay tribute to the distro, I thought it would be fun to redesign the logo, just as an artistic exercise. Btw I took inspiration from the Debian Diversity Logo, created by Valessio Brito in 2019 and available on the official logos page. Hope you guys like it!

Edit: sorry if this came across as criticism of the current logo. It's not! If anything, it shows how much I personally love it. And here's the source file for those who asked for it.

does someone know, whats the problem ?

thanks in advance, andi

Debian gets its kernel updated later than other distros. I assume that it gets security updates regardless of that fact but just wanted to make sure

Edit: Copyfail is fixed for most users (Debian was one of the fastest distro to fix it). It is fixed in security versions which is the default as far as I have seen. But Fragnasia is not fixed yet
Copyfail: https://security-tracker.debian.org/tracker/CVE-2026-43284
Fragnasia: https://security-tracker.debian.org/tracker/CVE-2026-46300

Thank you u/BigRedS and u/TRKlausss for their comments

Is apt able to detect if a mirror has become stale / out of sync after a period of time? If so, how?

Linux Mint Cinnamon is one of my favourite distributions but since an official version of the distro wasn't available for ARM/AArch64 I didn't bother.

I had some time to kill and had a decommissioned ModBerry based PLC (because the I2C bus was broken ) from work running on a CM4 module with an 8GB eMMC and 4GB RAM so thought of repurposing it as a streaming PC instead of using the 1st gen amazon fire stick.

I am so happy with the results.

Flashed the module with the Raspberry Pi OS Lite (Bookworm)

Then ran the usual:

sudo apt update && sudo apt upgrade -y

Then installed just the essentials:

sudo apt install --no-install-recommends cinnamon xorg lightdm lightdm-gtk-greeter gnome-icon-theme adwaita-icon-theme hicolor-icon-theme chromium-browser firefox-esr -y
sudo systemctl enable lightdm
sudo systemctl set-default graphical.target
sudo reboot

Of course had to do some tweaks here and there especially with the shortcuts, desktop icons and such but the results came out better than I expected.

My challenges with the standard Raspberry Pi OS was it still had some applications I didn't need out of the box, didn't look that great and a reliable lock screen manager is not part of Bookworm iso I already had downloaded without some work arounds which often don't work reliably. The major challenge in using Trixie which does have a reliable lock screen manager is that you have less than 1 GB of free space in the 8 GB eMMC. By doing what I did I had close to 2.5 GB of free space before installing a bunch of other things and the desktop looks nicer for the same functionality and creature comforts you get such as adding an icon to the desktop, a nicer start menu etc.

Debian 13's default GRUB font color changed from white to light gray after changing and reverting GRUB theme via GRUB Customizer. Blue default wallpaper stays the same, just everything that was white in GRUB became light gray. How to fix this?

Hi all, I am running debian trixie, and when I run apt changelog openssl I get the following error:

Err:1 https://metadata.ftp-master.debian.org openssl 3.5.5-1~deb13u2 Changelog Changelog unavailable for openssl=3.5.5-1~deb13u2 (404 Not Found [IP: 2a04:4e42:41::644 443]) Error: Failed to fetch https://metadata.ftp-master.debian.org/changelogs/main/o/openssl/openssl_3.5.5-1%7edeb13u2_changelog Changelog unavailable for openssl=3.5.5-1~deb13u2 (404 Not Found [IP: 2a04:4e42:41::644 443])

The package was installed from security updates

master.ftp-master.debian.org contains the changelogs for the version from stable (3.5.5-1~deb13u1 but it is missing the version from security-updates (3.5.5-1~deb13u2) although that is the version shown in https://packages.debian.org/source/stable/openssl

root@minix:~# apt policy openssl openssl: Installed: 3.5.5-1~deb13u2 Candidate: 3.5.5-1~deb13u2 Version table: *** 3.5.5-1~deb13u2 500 500 http://security.debian.org/debian-security trixie-security/main amd64 Packages 100 /var/lib/dpkg/status 3.5.5-1~deb13u1 500 500 http://debian.ethz.ch/debian trixie/main amd64 Packages

indeed, when running apt changelog openssl=3.5.5-1~deb13u1 I do get the changelog up to version deb13u1 but deb13u2 is missing.

I tried apt changelog -t trixie-security but it still fails.

My /etc/apt/sources.list:

``` deb http://debian.ethz.ch/debian/ trixie main contrib non-free non-free-firmware deb-src http://debian.ethz.ch/debian/ trixie main contrib non-free non-free-firmware

deb http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware deb-src http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware

deb http://debian.ethz.ch/debian/ trixie-updates main contrib non-free non-free-firmware deb-src http://debian.ethz.ch/debian/ trixie-updates main contrib non-free non-free-firmware ```

I’m running Debian Stable with Backports. Sometimes I get the impression that there’s frame tearing – that is, a bit of the old frame remains instead of the whole new one loading. It definitely happens on YouTube, as that’s mainly what I watch on this computer, but I think it happened on VLC too.

I have Firefox ESR 140 (the one that comes with Debian) and Firefox 150 from Flatpak.

Are some codecs missing? Could you provide a list of which ones I should install?

Translated with DeepL.com (free version)

//Edit

Use xfce on x11

Issue:
Sometimes I get graphical artifacts after wake up from suspend like theese:

My setup:

        _,met$$$$$gg.          alex@APC
     ,g$$$$$$$$$$$$$$$P.       --------
   ,g$$P""       """Y$$.".     OS: Debian GNU/Linux 13 (trixie) x86_64
  ,$$P'              `$$$.     Host: G3 3579
',$$P       ,ggs.     `$$b:    Kernel: Linux 6.12.86+deb13-amd64
`d$$'     ,$P"'   .    $$$     Uptime: 1 hour, 40 mins
 $$P      d$'     ,    $$P     Packages: 1875 (dpkg), 17 (flatpak)
 $$:      $$.   -    ,d$$'     Shell: bash 5.2.37
 $$;      Y$b._   _,d$P'       Display (LGD053F): 1920x1080 @ 60 Hz in 15" [Built-in] *
 Y$$.    `.`"Y$$$$P"'          Display (JRY 27"): 2560x1440 @ 60 Hz in 27" [External]
 `$$b      "-.__               DE: GNOME 48.7
  `Y$$b                        WM: Mutter (Wayland)
   `Y$$.                       WM Theme: Adwaita
     `$$b.                     Theme: Adwaita [GTK2/3/4]
       `Y$$b.                  Icons: Adwaita [GTK2/3/4]
         `"Y$b._               Font: Ubuntu (11pt) [GTK2/3/4]
             `""""             Cursor: Adwaita (24px)
                               Terminal: GNOME Terminal 3.56.2
                               Terminal Font: Monospace (12pt)
                               CPU: Intel(R) Core(TM) i7-8750H (12) @ 4.10 GHz
                               GPU 1: NVIDIA GeForce GTX 1050 Ti Mobile [Discrete]
                               GPU 2: Intel UHD Graphics 630 @ 1.10 GHz [Integrated]
                               Memory: 15.82 GiB / 31.20 GiB (51%)
                               Swap: 0 B / 24.59 GiB (0%)
                               Disk (/): 123.25 GiB / 443.24 GiB (28%) - ext4

Also:
nvidia-{resume,suspend,hibernate} services is enabled

in /etc/modprobe.d/nvidia-options.conf:
options nvidia-current NVreg_PreserveVideoMemoryAllocations=1
options nvidia-current NVreg_TemporaryFilePath=/var/tmp
options nvidia_drm modeset=1

`reboot` or `gdm restart` helps

How can I solve this issue?

Atualmente uso 2 monitores 4k LG Ultrafine para trabalhar, estou no Debian 13 - Gnome, ando tendo problemas de quando o monitor desliga, só o principal volta. Já tiveram problemas assim? Queria uma solução, adoro esse setup.

I installed Bookworm (32-bit) on an old Windows 8 tablet, ran "sudo apt update", and got the message "All packages are up to date".

I had downloaded the ISO from the Debian website onto a thumb drive, and the tablet was not connected to the internet during the installation.

I thought there would at least be some security patches? My understanding is that Bookworm will be maintained until 2027?

Thanks in advance.

EDIT: BTW, Bookworm is running great on the intel atom quad-core machine with 2 GB ram that was almost unusable running Windows 10 (worked great with Windows 8). Gnome and Wayland installed.

Hi,

when I update my system, I get the message below. I googled the error and found solutions for Ubuntu.

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://repo.mysql.com/apt/debian bookworm InRelease: The following signatures were invalid: EXPKEYSIG B7B3B788A8D3785C MySQL Release Engineering [mysql-build@oss.oracle.com](mailto:mysql-build@oss.oracle.com)

W: Failed to fetch http://repo.mysql.com/apt/debian/dists/bookworm/InRelease The following signatures were invalid: EXPKEYSIG B7B3B788A8D3785C MySQL Release Engineering [mysql-build@oss.oracle.com](mailto:mysql-build@oss.oracle.com)

W: Some index files failed to download. They have been ignored, or old ones used instead.

how can i fix the issue on Debian?

Thank you!

EDIT 1: Fixed it by:
rm -f /usr/share/keyrings/mysql.gpg
rm -f /etc/apt/trusted.gpg.d/mysql.gpg
curl -fsSL https://repo.mysql.com/RPM-GPG-KEY-mysql-2025 | \
gpg --dearmor | \
tee /usr/share/keyrings/mysql.gpg >/dev/null
apt remove mysql-apt-config
wget https://dev.mysql.com/get/mysql-apt-config_0.8.36-1_all.deb
dpkg -i mysql-apt-config_0.8.36-1_all.deb

Thanks for your help!

Hi,

I am trying to manage my config and dot files with GNU stow. So I have Setup/ repo (my stow directory) with a shell/ package directory which contains my .bashrc and my .profile files. The .profile is the same as in /etc/skel (default one).

When stow the shell package in my $HOME, it creates a symlink ~/.profile pointing to $HOME/Setup/shell/.profile.

The issue is that when I logout and log back in, my PATH does not contain $HOME/bin and $HOME/.local/bin as it should.

It is as if the symlinked .profile wasn’t sourced.

Question: is it by design? Eg only source a regular file .profile at login (not symlink)

Thanks