default:
	#apt-get upgrade -y --force-yes  # Note: DumbIdea(tm)
	apt-get install -y openvpn
	touch /etc/openvpn/credentials
	apt-get install -y ssh-askpass-gnome
	#apt-get install -y network-manager-openvpn-gnome  # XXX testing new approach
	git clone https://github.com/apenwarr/sshuttle.git /opt/sshuttle

	# XXX: for testing
	apt-get install -y midori

	# start ferm on 2 3 4 5 instead of S (allows for unfermify)
	sed -i '/Default-Start/s/\<S\>/2 3 4 5/' /etc/init.d/ferm
	insserv -r ferm
	insserv ferm
	# disable polipo on 3 4 5
	sed -i '/Default-Start/s/2 3 4 5/2/' /etc/init.d/polipo
	insserv -r polipo
	insserv polipo
	#insserv  # update rc* after copying /etc/init.d/unfermify

	insserv unfermify
	insserv untorify

	# fix the .ICEauthority bug
	sed -i 's/^exit 0/chown -R Debian-gdm:Debian-gdm \/var\/lib\/gdm3\nexit 0/' /etc/rc.local