I would never claim to recreate the WeeChat setup that r3m has built over the years.
This little Python script simply lets you borrow a tiny part of that look.
Thank you for your support throughout all these years, r3m.
See your running kernel, the latest stable release on kernel.org and its release date.
When you are ready, build Debian .deb packages from your current kernel configuration.
Cumulative requests from available AWStats monthly files. Partial requests are separate;
these are not unique users. Repeat downloads and bots may be included.
Updated · Paris time.
01 / Install the tool
Download. Check. Install.
On Debian, start in the directory where you downloaded the ZIP.
The default command only reports status. The dry run shows the plan.
Dependency installation is an explicit step.
Build packages, choose an LTS branch or resume a build
By default, kcheck uses /boot/config-$(uname -r) and stores builds under
/home/src/kcheck. Choose a writable directory with --workdir for an unprivileged build.
# Build packages only, using four jobs
sudo kcheck --build-latest --jobs 4
# Build the latest maintained release of a chosen branch
sudo kcheck --build-latest --series 6.18
# Resume an existing build (use the path printed by kcheck)
sudo kcheck --resume /home/src/kcheck/linux-X.Y.Z
# Explicitly build and install the image and headers
sudo kcheck --build-latest --jobs 4 --install
New configuration options receive their defaults through olddefconfig.
The default profile disables debug information and automatic module signing, and clears
distribution certificate paths. Archive integrity is checked against the upstream SHA256 manifest over HTTPS.
Installation of the kernel image and headers requires --install.
linux-libc-dev is excluded. Reboot when you choose; kcheck never reboots the machine.
The ZIP includes the README, tests and qualification report.
The default unsigned-module profile is not suitable for a setup that requires signed modules.
OpenSSH & OpenSSL release checker and package builder
sshupdate 1.1.1
Check stable OpenSSH and OpenSSL releases, build local Debian packages and test SSH/SFTP
before installing. Keep a backup and a rollback command for each deployment.
Cumulative requests from available AWStats monthly files. Partial requests are separate;
these are not unique users. Repeat downloads and bots may be included.
Updated · Paris time.
01 / Install the updater
Choose a build account. Start with a check.
From your regular non-root account, with sudo, in the download directory:
The installer sets up the updater; the default command checks releases.
Root users should specify an existing non-root build account and its build directory.
A dedicated account is also documented in the ZIP.
English is the default; use --lang fr for French.
Builds use the configured non-root account. Keep your SSH session open and verify a new
connection from your workstation after installation.
One-command updates, resumable builds and how the packages are managed
# Check, build, test and install only when a release is newer
sudo sshupdate update
# Force a rebuild and installation, using four jobs
sudo sshupdate --rebuild --jobs 4
# Force a build without installing
sudo sshupdate build --rebuild
# Resume using the run ID printed by the tool
sudo sshupdate build --run YYYYMMDDTHHMMSSZ-PID
# Install packages from an already completed build
sudo sshupdate install --run YYYYMMDDTHHMMSSZ-PID
OpenSSH retains Debian’s PAM and systemd adaptations. OpenSSL 4 has its own library directory
under /usr; Debian’s OpenSSL 3 libraries remain available to existing applications.
The six local packages are held in APT and must be maintained through the updater.
Source signatures and checksums, build-time tests, a loopback SSH/SFTP probe and an APT simulation
run before deployment. A matching Debian OpenSSH source package is required; a future OpenSSL ABI
change needs an updater adaptation.
The ZIP includes English and French READMEs, tests, the MIT license and validation notes.
Version 1.1.1 fixes SSH listener detection and checks it before compilation. A complete deployment on a fresh Debian host is still to be validated.
