Editing Grub-live

{{Header}}
{{Title|
title=grub-live: Boot existing Host Operating System or VM into Live Mode
}}
{{#seo:
|description=Add a Live Mode entry to the grub boot menu on your existing Debian host platform. Stop Persistent Malware. Read-only mode. Make all writes go to non-persistent storage (RAM) instead of the hard disk.
|image=https://www.{{project_clearnet}}/w/images/a/a6/Grublive123123.jpg
}}
[[image:Grub-live_mode_indicator_in_debian.cleaned.png|thumb|Debian Live Mode Boot ([[Host Live Mode]])]]

[[image:Grub-live mode indicator in kicksecure.cleaned.png|thumb|[[Kicksecure|{{kicksecure}}]] Live Mode Boot ([[Host Live Mode]])]]

[[image:live_boot.png|Live Mode Boot|thumb|[[Whonix|{{Whonix}}]] Live Mode Boot ([[VM Live Mode]])]]

{{live}}

'''{{free}}''' Host operating system <u>or</u>  VM can be booted into Live Mode, either by using:
 
* [[VM Live Mode]], <u>or</u> 
* [[Host Live Mode]].

This is accomplished by use of the [https://gitlab.com/whonix/grub-live <code>grub-live</code> package].

= grub-default-live =
'''[[Untested]].'''

{{box|text=
'''1.''' Package installation check.

The  <code>grub-live</code> package is installed by default in {{project_name_long}}. If a live boot menu entry is already avaialble, then <code>grub-live</code> is already installed.

Make sure package [https://gitlab.com/whonix/grub-live <code>grub-live</code> package] is installed. The following command can be used to check on the command line if the package is already installed by default.

{{CodeSelect|code=
dpkg -l {{!}} grep grub-live
}}

'''2.''' Choose an option.

'''Option A)''': symlink method

* Advantage: This is easier because updates to [[grub-live]] will be automatically applied.
* Disadvantage: Duplicate live boot menu entry.

{{CodeSelect|code=
sudo ln -s /etc/grub.d/11_linux_live /etc/grub.d/09_linux_live
}}

'''Option B)''': moving method

* Advantage: No duplicate live boot menu entry.
* Disadvantage: Updates to [[grub-live]] will be automatically applied.

{{CodeSelect|code=
sudo mv /etc/grub.d/11_linux_live /etc/grub.d/09_linux_live
}}

'''3.''' Re-generate grub boot menu.

{{CodeSelect|code=
sudo update-grub
}}

'''4.''' Done.

The process of changing from live mode opt-in through boot grub menu to live boot by default has been completed.

'''5.''' Updates.

When using "Option B)" this process might need to be repeated from time to time.
}}

= Troubleshooting =
== Live Check Systray Issues ==
If the Live Check Systray has an issues do not panic.

* Impact: Live Check Systray broken.
* <u>Non</u>-issue: <u>not</u> an [[Malware and Firmware Trojans#Indicators_of_Compromise|indicator of compromise]].

If [https://gitlab.com/whonix/whonix-xfce-desktop-config/blob/master/usr/share/livecheck/livecheck.sh livecheck] is showing an error it might be the following issue. Live check runs command <code>sudo --non-interactive /bin/lsblk --noheadings --all --raw --output RO</code> as the current unprivileged user. Test this for yourself.

{{CodeSelect|code=
sudo --non-interactive /bin/lsblk --noheadings --all --raw --output RO
}}

[https://forums.whonix.org/t/whonix-xfce-development/6213/102 This will not work by default for users other than user <code>user</code>.] The linux user account (such as <code>user<u>2</u></code>) either,

* '''A)''' needs an exception in <code>/etc/sudoers.d</code>.
** For comparison see file [https://gitlab.com/whonix/whonix-xfce-desktop-config/blob/master/etc/sudoers.d/whonix-xfce-desktop-config <code>/etc/sudoers.d/whonix-xfce-desktop-config</code>].
* '''B)''' be a member of any of the following linux user groups.
** <code>users</code>
** <code>staff</code>
** <code>adm</code>
** <code>sudo</code>
** <code>root</code>
** <code>wheel</code>
** <code>console</code>
** <code>console-unrestricted</code>

Try also this:

{{CodeSelect|code=
sudo /bin/lsblk --all
}}

If you are still having issues you can [[Reporting_Bugs|report a bug]] with the output from above two <code>lsblk</code> commands included from above.

= Alternative =
* [[VM_Live_Mode/ro-mode-init|VM Live Mode - Alternative ro-mode-init Configuration]]

{{reflist|close=1}}
[[Category:Documentation]]
{{Footer}}