V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4300_network/4310_dropbear_build.sh

@@ -29,9 +29,12 @@ guard_sourcing
 #######################################
 dropbear_build() {
   ### Declare Arrays, HashMaps, and Variables.
-  declare var_dropbear_version="2025.88"
-  declare var_tar="${VAR_SETUP_PATH}/upgrades/dropbear/dropbear-${var_dropbear_version}.tar.bz2"
-  declare var_build_dir="${DIR_TMP}/build/dropbear-${var_dropbear_version}"
+  declare     var_dropbear_version="2025.88"
+  declare     var_tar="${VAR_SETUP_PATH}/upgrades/dropbear/dropbear-${var_dropbear_version}.tar.bz2"
+  declare     var_build_dir="${DIR_TMP}/build/dropbear-${var_dropbear_version}"
+  declare -r  var_logfile="/root/.ciss/cdi/log/4310_dropbear_build.log"
+
+  touch "${TARGET}${var_logfile}" && chmod 0600 "${TARGET}${var_logfile}"
 
   apt-get install -y autoconf automake build-essential libtool libtomcrypt-dev libtommath-dev musl-tools
 
@@ -49,12 +52,13 @@ dropbear_build() {
   #  -Wl,-z,relro,-z,now: Enables full RELRO (symbol resolution at program startup)
 
   [[ "${VAR_DEBUG_TRACE,,}" == "true" ]] && set +x
-  (
+  # shellcheck disable=SC2016,SC2312
+  setsid bash -c '
     ### Sterile environment for the build-process.
     export -n SHELLOPTS
     set +u
     unset PATH_SEPARATOR
-    PATH_SEPARATOR=':'
+    PATH_SEPARATOR=":"
     PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
     CC=musl-gcc \
       CFLAGS="-Os -fPIE -Wno-undef -fstack-protector-strong -D_FORTIFY_SOURCE=2" \
@@ -67,7 +71,7 @@ dropbear_build() {
 
     # shellcheck disable=2312
     make -j"$(nproc)"
-  )
+  ' 2>&1 | tee -a "${TARGET}${var_logfile}"
   [[ "${VAR_DEBUG_TRACE,,}" == "true" ]] && set -x
 
   do_log "info" "file_only" "4310() Ultra Hardened [dropbear-${var_dropbear_version}] build successfully from sources."

func/cdi_4300_network/4311_dropbear_initramfs.sh

@@ -37,7 +37,7 @@ dropbear_initramfs() {
 
   do_in_target_script "${TARGET}" '
     export INITRD=No
-    apt-mark hold -y dropbear dropbear-initramfs 2>&1 | tee -a '"${var_logfile}"'
+    apt-mark hold dropbear dropbear-initramfs 2>&1 | tee -a '"${var_logfile}"'
     echo ExitCode: $? >> '"${var_logfile}"'
   '
 

func/cdi_4300_network/4312_dropbear_setup.sh

@@ -15,26 +15,20 @@ guard_sourcing
 #######################################
 # Set up Dropbear Initramfs Environment.
 # Globals:
-#   HMP_PATH_ENCLABEL
 #   TARGET
-#   VAR_CRYPT_ROOT
 #   VAR_FINAL_FQDN
 #   VAR_FINAL_IPV4
 #   VAR_FINAL_IPV4_GW
 #   VAR_FINAL_IPV4_SUBNET
 #   VAR_FINAL_NIC
-#   VAR_GRUB_CMDLINE_LINUX
 #   VAR_SETUP_PATH
-#   dropbear_dhcp
 #   dropbear_firewall
 #   dropbear_port
+#   network_autoconfig_enable
 #   network_static_ipv4nameserver_0
 #   network_static_ipv4nameserver_1
 #   ssh_allow_ipv4_0
-#   user_root_ssh_pubkeys_0
-#   user_root_ssh_pubkeys_1
-#   user_root_ssh_pubkeys_2
-#   user_root_ssh_pubkeys_3
+#   user_root_sshpubkey
 # Arguments:
 #   None
 # Returns:

func/cdi_4300_network/4320_update_initramfs.sh

@@ -34,7 +34,7 @@ update_initramfs() {
 
 
   do_in_target_script "${TARGET}" "
-    update-initramfs -u -v -k all 2>&1 | tee -a ${var_logfile}
+    update-initramfs -c -v -k all 2>&1 | tee -a ${var_logfile}
     echo ExitCode: \$? >> ${var_logfile}
   "