1. Forum
  2. Usenet
  3. LINUX.DEBIAN.USER

  • Re: Debian ISOs on USB stick

    From David Christensen@21:1/5 to Thomas Schmitt on Sat Apr 6 09:51:21 2024
    On 4/3/24 05:56, Thomas Schmitt wrote:
    Hi,

    i read from bytes 2085412 to 2085479:
    "Info rrmation Syste rm VolumeSYSTEM~"
    which is similar to the alterations of one of the USB sticks shown in
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056998#35

    The web knows about a Microsoft folder named "System Volume Information".
    https://answers.microsoft.com/en-us/windows/forum/all/system-volume-information-what-is-it-and-what-is/3bc81844-0baa-46bd-9949-4efb4678b677
    "whenever I put my flash-drive or my micro sd adapter and sd card into
    my windows 8.1 something called "System Volume Information" is always
    getting added on."

    So did you perhaps show this USB stick to a running MS-Windows system ?


    Have a nice day :)

    Thomas


    It is possible the drive was inserted into a Windows computer.


    If and when I need a newer d-i, perhaps I will put the ISO onto a USB
    flash drive, conduct more experiments, and post the results.


    I apologize for blaming d-i for what might be Dell, Intel, BIOS/UEFI, Microsoft, and/or other bugs.


    David

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Thomas Schmitt@21:1/5 to David Christensen on Sat Apr 6 09:52:07 2024
    Hi,

    David Christensen wrote:
    # cmp --verbose debian-11.3.0-amd64-netinst.iso /dev/sdb

    I got my copy from
    https://get.debian.org/images/archive/11.3.0/amd64/iso-cd/debian-11.3.0-amd64-netinst.iso
    SHA256 matches:
    7892981e1da216e79fb3a1536ce5ebab157afdd20048fe458f2ae34fbc26c19b

    In a further mail:
    https://cdimage.debian.org/cdimage/archive/11.3.0/amd64/iso-cd/

    Same SHA256 there.


    2083201 0 377

    Byte counting of cmp is decimal and starts at 1. xorriso can search for
    files which have their data in a block range. 2083201 / 2048 = block 1017. Range size in this case is just 1 block:

    $ xorriso -indev debian-11.3.0-amd64-netinst.iso -find / -lba_range 1017 1 -exec report_lba --
    ...
    Report layout: xt , Startlba , Blocks , Filesize , ISO image path
    File data lba: 0 , 1016 , 1296 , 2654208 , '/boot/grub/efi.img'

    So it's indeed occupied by the FAT filesystem image which contains the EFI-specific boot equipment.

    4719105 0 56

    Byte 4719105 is in block 2304, i.e. still in /boot/grub/efi.img, which
    has bytes up to the end of block 2311.

    I guess the bytes with the 2xxxxxx numbers are the directory change and
    the 4xxxxxx numbers are content of new files.


    You could mount both ISOs (e.g. at /mnt/iso1 and /mnt/iso2) and then the
    two FAT image files (e.g. /mnt/iso1/boot/grub/efi.img and /mnt/iso2/boot/grub/efi.img) in order to learn which files have emerged
    or changed in the USB stick's mounted FAT filesystem.

    Maybe we find a new ESP groper additionaly to Lenovo and Microsoft.
    Usually they leave traces for which one can search in the web.


    Have a nice day :)

    Thomas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Thomas Schmitt@21:1/5 to All on Sat Apr 6 09:52:33 2024
    Hi,

    i read from bytes 2085412 to 2085479:
    "Info rrmation Syste rm VolumeSYSTEM~"
    which is similar to the alterations of one of the USB sticks shown in
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056998#35

    The web knows about a Microsoft folder named "System Volume Information".
    https://answers.microsoft.com/en-us/windows/forum/all/system-volume-information-what-is-it-and-what-is/3bc81844-0baa-46bd-9949-4efb4678b677
    "whenever I put my flash-drive or my micro sd adapter and sd card into
    my windows 8.1 something called "System Volume Information" is always
    getting added on."

    So did you perhaps show this USB stick to a running MS-Windows system ?


    Have a nice day :)

    Thomas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)