How to safely add the Kali repository to Mobian

[User 18618]

Exercise caution when employing this change; adding the Kali repository to Debian is not endorsed by Offensive Security, the Debian Project, or the Mobian project

Code:

echo 'deb http://http.kali.org/kali kali-rolling main non-free contrib' | sudo tee /etc/apt/sources.list.d/kali.list

wget -O - https://archive.kali.org/archive-key.asc | sudo apt-key add

echo -e '# Never prefer packages from the Kali repository\nPackage: *\nPin: release o=Kali\nPin-Priority: 1' | sudo tee /etc/apt/preferences.d/99kali

Kali packages are now accessible, and do not conflict with packages provided by Debian (or Mobian)

If a Kali package is preferable to its Debian equivalent, the package should be pinned

[User 18618]

Inspired by this post about hijacking Mobian to run Bedrock Linux, here's how to add a Kali Linux stratum to Bedrock Linux.

While I hope apt pinning does not create a FrankenDebian, this method ensures distinction between Debian and Kali Linux.

Code:

wget https://github.com/bedrocklinux/bedrocklinux-userland/releases/download/0.7.17/bedrock-linux-0.7.17-aarch64.sh

sudo sh ./bedrock-linux-0.7.17-aarch64.sh --hijack

sudo reboot

A new Debian stratum has been bootstrapped and named Kali; the repositories will be changed to transform this stratum to Kali Linux.

Code:

sudo brl fetch -n kali debian

sudo strat kali apt install --no-install-recommends wget gnupg

strat kali wget -O - https://archive.kali.org/archive-key.asc | sudo strat kali apt-key add

printf '%s' 'deb http://http.kali.org/kali kali-rolling main non-free contrib' | sudo strat kali tee /etc/apt/sources.list

sudo strat kali apt update && sudo strat kali apt full-upgrade && sudo strat kali apt autoremove

Now Kali packages can be installed. To prefer (pin) stratum binaries, see /bedrock/etc/bedrock.conf.

[Brother]

wget: missing URL
Warning apt-key is deprecated. Manage keyring files in trusted.gpg.d instead.

Running the Mobian project

[User 18618]

wget: missing URL
Warning apt-key is deprecated. Manage keyring files in trusted.gpg.d instead.

Running the Mobian project

Check Kali upstream. I'm not using the PinePhone regularly anymore, and this post was just for fun. Cheers!

[User 18618]

An addendum, apt-key should not be used as seen in the original post:

The key MUST be downloaded over a secure mechanism like HTTPS to a location only writable by root, which SHOULD be /usr/share/keyrings.

The key MUST NOT be placed in /etc/apt/trusted.gpg.d or loaded by apt-key add.

[swiley]

IME: your usually better off building these packages from the upstream source. I went through an entire "cyber security class" in college doing that on Alpine.

[User 18618]

IME: your usually better off building these packages from the upstream source. I went through an entire "cyber security class" in college doing that on Alpine.

With cross-compilation, maybe... I don't like the idea of compiling on bare metal in this case

To re-iterate, this post is outdated and was just for fun. I don't recommend using it as anything other than a novelty.

[swiley]

I don't like the idea of compiling on bare metal in this case

Why not? Half the reason I bought the phone was so I could compile stuff on it without hassle. I haven't had issues doing this.