Experimental archeology, how to install a debian 1.3

Spoiler: In the footsteps of the giants: To follow in the footsteps of Aleph One, we install a system of the time, a debian 1.3, in a VirtualBox machine. You are considered to know how to create VMs and install regular systems. We will therefore focus on the subtleties.

The other day, I wondered how to configure a machine for my students so that they can follow step by step the article Smashing the Stack for Fun and Profit, without taking the lead. The goal being to understand the basis of buffer overflows, all the protections existing today on our modern OS only add noise.

One of the solutions I considered was to install an old OS in a virtual machine. Like then, in 1996 … I could have installed a Debian 1.1 Buzz or a Slackware 3.1. I preferred to take Debian 1.3 Bo, released shortly after (June 1997), but for which you can find an iso on the internet.

debian 1997

Hard disk management

Since debian 1.3 does not have drivers for SATA hard drives (they were invented in 2003), you have to start by creating an IDE hard drive specifically to receive the installation.

In the configuration of your VM, menu Storage. Right click on Controller: IDE. Click on hard disk.

Storage

Then click on Create.

Create

The following does not change compared to the creation of a classic hard disk in VirtualBox … Choose file type VDI (default), press Next.

Filetype

We choose to make a dynamically allocated disk, so that the space only fills up as the disk is used. Press Next.

Storate

Now you have to choose the size of the hard drive. debian, in version 1.3, requires 40MB of hard disk! 😅 You can have fun reducing the size, or leave the default one, and hit Create.

Size

Finally, click on Choose.

Disk Selector

You now have your IDE hard drive. If your VM already has a SATA hard drive, right click on that drive, and click remove device.

Create a floppy disk

Because the boot manager at the time, lilo, was finicky about the size of the hard drive cylinders and VirtualBox didn’t seem to handle it, we will use, as at the time, a boot floppy. Technically, we are going to create the drive and its floppy here, the boot side will be done during installation.

In the settings of your machine, menu Storage. Right click in the white area, under Controller: SATA, and click l8278 Floppy. A new controller appears in the interface, named Controller: Floppy.

Floppy Disk

Tap the little + next to the Controller: Floppy.

You will arrive in a disk management interface. Create a new diskette by clicking on Create.

Floppy disk creation

To create a blank floppy disk, leave everything as it is and click Create.

Now that it’s created, we’ll insert it into the player. Select it and click choose.

Floppy Selection

Close the configuration by clicking on OK.

Installation

An iso of debian 1.3 is available at archive.org. Download it and boot from it.

Current logo (2019)

At startup, debian welcomes you. Press the Enter key.

Startup

In 1997, not everyone had a color screen. This one was also cathodic … And it was taken into account by the installer! It therefore offers you to choose between color and black and white before continuing. Press C because you probably have a color screen, then press Enter.

Color choice

And you come to the (pre) twenty-first century … Make sure you are on Next and press Enter.

In color

Press Enter.

Release Notes

You arrive in the installer. Press Enter to configure your keyboard.

Configuration

We are in France, we use a French keyboard. You have to go down with the arrows to the line fr-latin1 and press Enter.

Keyboard

Return to the installer screen. The next step is to partition the drive. Press Enter.

Configuration

The hard drive you previously created is selected, since it is the only hard drive in the system. It is /dev/hda. Press Enter.

Select Hard Drive

The minimum system requirements are to use 4MB of RAM, with 40MB of hard drive, 300MB if you plan to install all available packages. I guess this is largely good for you 😜.

We will therefore follow these recommendations, by creating a 500MB Linux partition, and an 8MB SWAP.

The cfdisk partitioning software is very recent. Version 0.8 is only 5 years old. 22 years later, it is still in use.

This allows you to partition the hard drive. Use the directional arrows to move the cursor to [New] and press Enter.

cfdisk

We start by creating a primary partition [Primary]. To do this, just press Enter.

Primary

Enter 500 (back then, that was obviously MB) and press Enter.

Size

Put the partition at the beginning of the available space, for this the cursor must be on [Beginning], and press Enter.

Where ?

To create the SWAP, we will proceed in the same way as before. We go to the free space using the arrows, then we select [New], and we press Enter.

Swap

Always Primary partition, by selecting [Primary] and pressing Enter.

Primary

We put the size: 8 (still MB 😉), and we press Enter.

Swap size

And we ask that the score be placed after the other, at the start of the free part, by selecting [Beginning]. Press Enter.

FreeSpace

This partition is different from the previous partition, it is a SWAP. You must therefore move the cursor to Type and press Enter to define its type.

List of partitions

To set Linux Swap, type 82, and press Enter.

SWAP type

Now that the two partitions are done, move the cursor to [Write], and press Enter to validate the creation of the partition.

Partition Creation

You are informed that you are about to overwrite the partition table and this may erase data on the hard drive. As our disc is blank, no worries. Type yes and press Enter.

Warning

Your partition table is now written, you can quit cfdisk, to do this move the cursor to Quit and press Enter.

Quit

Now that your partitions are done, it’s time to define the filesystem and mount points. Press Enter.

Initialize Linux Partition

The filesystem at the time is ext2 (ext3 will arrive in 2001). Select your partition /dev/hda1, and press Enter.

ext2

The installer offers to scan the disk for bad sectors (the badblocks). We will let him do it, given the size of the partition, it won’t be long. Select Yes and press Enter.

Bacblock scan

The system then warns you that formatting the partition in ext2 will erase the data on it. Leave on Yes and press Enter.

Confirm

We will have to wait a little while … Next you will configure the root mount point. Since you only have one partition, you have nothing to choose from. Press Enter.

root Filesystem

We will then initialize the SWAP.

Swap Initialization

It happens in the same way as before; select /dev/hda2, search for badblocks, delete data warning.

Now that you have your filesystem in place, the kernel installation can begin. Press Enter.

Install Operating System

You need to select the device containing the files. Select cdrom and press Enter.

CRDOM

You must then choose the device corresponding to the cdrom. Unlike what VirtualBox shows you; second disk of the first controller, we are in fact on the first disk of the second controller. We choose /dev/hdc we press Enter.

CD

You are then asked to insert the cdrom, which is already done, press Enter.

Insert CROM

Then, choose the directory containing the files to install the kernel and its modules. We keep what is selected by default, default and we press Enter.

Base Archive file

The installation of the kernel and modules is done, you must then select the drivers. Press Enter.

drivers

We won’t install anything, after all we just want to buffer overflow. Select Exit and press Enter.

Categories

We will now install the base system. Select Install the Base System and press Enter.

Base system installation

Select CDROM and press Enter.

Media

Select the device corresponding to your cd-rom, /dev/hdc and press Enter.

Media

The installer prompts you to insert the disc, which it has already done. Press Enter.

Insert CDROM

It then asks you where the base1_3.tgz file is located. It is located in the default directory. Press Enter.

Default

We will then configure the location. Select Configure the Base System and press Enter.

System Configuration

You have to define the time zone. We are in France, so type Europe and press Enter.

Timezone

Then type Paris and press Enter.

Timezone

The system will ask you if the internal clock is GMT or local, and therefore if it needs to apply a delta to know the time. Type n and press Enter.

GMT ?

Finally, the last step is to make everything bootable.

As we told you, Lilo, the boot manager at the time is very capricious … So we are not going to install it on the hard drive, but create a boot floppy that will allow us to boot, and which will be much simpler.

Select from Make a Boot Floppy and press Enter.

Boot on a Floppy Disk

You will be asked to insert the floppy disk, which you have already done. Press Enter.

Floppy disk insertion

Wait for the floppy disk to be made.

Floppy Disk creation

Finally, you must reboot the system, selecting Reboot The System and pressing Enter.

Reboot

A message tells you that you must have bootable media to be able to boot the system. Press Enter.

Reboot

First boot

In order to boot from the floppy, during boot, press f12 to configure the boot.

Boot

Press f to select the floppy disk.

Booting on floppy disk

After a few seconds of booting, the system will ask you for a new root password.

root password

Then the name of the new user.

User

As well as his password.

password

Finally, all the information relating to this user.

User info

The system will then ask you if you need to secure the passwords using shadow.

Back then, there was still a strong tradition of storing everything in /etc/passwd. However, this file can be read by a lot of programs, including the web server, hence the directory traversal attacks to read this file (still today, listeners try to display it).

To protect passwords, the revolutionary idea is to store them in another file, /etc/shadow, which is not readable by everyone. This is still the case today.

Press Enter.

Shadow Password

Then the system will warn you that it will install dselect, a software that allows you to choosedebian packages to install on the system (apt will not arrive until 1998). Press Enter.

dsselect

I’ll let you go through the packages to determine which ones you need. In my case, I just selected [Q] uit and hit enter.

Quit

And, after so much effort, you can (finally) log into your beautiful and (almost) brand new system!

First login

And after ?

Well, it’s true that it’s not very useful to have an old OS. Nor very practical for that matter.

As you can see, your linux is almost empty. Feel free to use dselect to add what you need (emacs and vim already exist). On the other hand, it will have to be reminded each time to use the cdrom as the source of the package (unless you have a period ‘FTP’ repository …).