Hello Jörg! On Fri, Sep 26, 2025 at 2:24 PM Jörg-Volker Peetz <[email protected]> wrote:
> Hi, probably, it was created by an installer script. By going through the > log > (files) of dpkg, it may be possible to narrow down the list of candidate > packages using the creation time of /.cache. > Of course, no installation (postinst) script (which are stored in > /var/log/dpkg/info/) should leave a /.cache directory. Thanks for the pointer to dpkg logs! I can see numerous dpkg log entries for the timestamp same as that of the birth time of `/.cache` (2025-09-15 07:08:47.942883541) which also coincides with the time I was installing Debian GNU/Linux 13 (trixie) on ASUS EXPERTBOOK P1403CVA. Here's the relevant log from /var/log/dpkg.log: https://pastebin.com/raw/V187ve4b The downloaded iso from debian.org is debian-13.0.0-amd64-DVD-1.iso with the torrent info hash v1 451c8b35b30c54b815dc6797b23d7a16ca8f0706. No other custom action was taken besides following the standard Debian installer. Regards, Avinash Sonawane https://www.rootkea.me
