V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-10-11 22:14:22 +01:00
parent be0a6c7c6a
commit 353568eb69
60 changed files with 2267 additions and 1163 deletions
--- a/ciss_debian_installer.sh
+++ b/ciss_debian_installer.sh
@@ -104,8 +104,11 @@ declare -grx  VAR_SETUP_FULL="$(cd "$(dirname "${0}")" && pwd)/${0##*/}" # '/opt
 }

 ### CHECK FOR CONTACT, HELP, AND VERSION STRING.
+# shellcheck disable=SC2249
 for arg in "$@"; do case "${arg,,}" in -c|--contact) . ./meta_loader_cuv.sh; contact; exit 0;; esac; done
+# shellcheck disable=SC2249
 for arg in "$@"; do case "${arg,,}" in -h|--help)    . ./meta_loader_cuv.sh; usage  ; exit 0;; esac; done
+# shellcheck disable=SC2249
 for arg in "$@"; do case "${arg,,}" in -v|--version) . ./meta_loader_cuv.sh; version; exit 0;; esac; done

 ### SOURCING MUST SET EARLY VARIABLES. SOURCING COLOR_ECHO(), GUARD_SOURCING(), AND SOURCE_GUARD().
@@ -163,6 +166,7 @@ pre_scan_debug "$@"

 ### CHECK FOR AUTO INSTALL MODE.
 color_echo "${GRE}" "CISS.DEBIAN.INSTALLER PREPARATION: CHECK FOR AUTO INSTALL MODE"
+# shellcheck disable=SC2249
 for arg in "$@"; do case "${arg,,}" in -a|--autoinstall) declare -gx VAR_AUTO_INSTALL="true";; esac; done; unset arg

 ### ACTIVATING TRAPS.
@@ -230,236 +234,238 @@ uuid_logger


 ### CDI_4000
-info_echo "4000_debootstrap.sh"
+info_echo "4000_debootstrap.sh [${TARGET}]"
 func_debootstrap

-info_echo "4005_debootstrap_checks.sh"
+info_echo "4005_debootstrap_checks.sh [${TARGET}]"
 check_debootstrap

-info_echo "4010_prepare_mounts.sh"
+info_echo "4010_prepare_mounts.sh [${TARGET}]"
 prepare_mounts

-info_echo "4015_check_usr_merge.sh"
+info_echo "4015_check_usr_merge.sh [${TARGET}]"
 check_usr_merge

-info_echo "4020_remove_x509.sh"
+info_echo "4020_remove_x509.sh [${TARGET}]"
 remove_x509

-info_echo "4030_setup_hostname.sh"
+info_echo "4030_setup_hostname.sh [${TARGET}]"
 setup_hostname

-info_echo "4035_setup_resolv.sh"
+info_echo "4035_setup_resolv.sh [${TARGET}]"
 setup_resolv

-info_echo "4040_setup_timezone.sh"
+info_echo "4040_setup_timezone.sh [${TARGET}]"
 setup_timezone

-info_echo "4050_setup_locales.sh"
+info_echo "4050_setup_locales.sh [${TARGET}]"
 setup_locales


 ### CDI_4100
 if [[ "${VAR_DEB822}" == "true" ]]; then

-  info_echo "4105_generate_sources822.sh"
+  info_echo "4105_generate_sources822.sh [${TARGET}]"
  generate_sources822

 else

-  info_echo "4100_generate_sources.sh"
+  info_echo "4100_generate_sources.sh [${TARGET}]"
  generate_sources

 fi

-info_echo "4110_update_sources.sh"
+info_echo "4110_update_sources.sh [${TARGET}]"
 update_sources

-info_echo "4120_installation_kernel.sh"
+info_echo "4120_installation_kernel.sh [${TARGET}]"
 installation_kernel

-info_echo "4121_installation_initramfs.sh"
+info_echo "4121_installation_initramfs.sh [${TARGET}]"
 installation_initramfs

-info_echo "4130_installation_toolset.sh"
+info_echo "4130_installation_toolset.sh [${TARGET}]"
 installation_toolset

-info_echo "4131_installation_systemd.sh"
+info_echo "4131_installation_systemd.sh [${TARGET}]"
 installation_systemd

-info_echo "4132_installation_machineid.sh"
+info_echo "4132_installation_machineid.sh [${TARGET}]"
 installation_machineid

-info_echo "4133_installation_masking.sh"
+info_echo "4133_installation_masking.sh [${TARGET}]"
 installation_masking

-info_echo "4140_installation_microcode.sh"
+info_echo "4140_installation_microcode.sh [${TARGET}]"
 installation_microcode

-info_echo "4145_installation_firmware.sh"
+info_echo "4145_installation_firmware.sh [${TARGET}]"
 installation_firmware

-info_echo "4150_installation_chrony.sh"
+info_echo "4150_installation_chrony.sh [${TARGET}]"
 installation_chrony

-info_echo "4160_installation_eza.sh"
+info_echo "4160_installation_eza.sh [${TARGET}]"
 installation_eza

-info_echo "4170_installation_lynis.sh"
+info_echo "4170_installation_lynis.sh [${TARGET}]"
 installation_lynis


 ### CDI_4200
-info_echo "4200_generate_fstab.sh"
+info_echo "4200_generate_fstab.sh [${TARGET}]"
 generate_fstab

-info_echo "4205_check_fstab.sh"
+info_echo "4205_check_fstab.sh [${TARGET}]"
 check_fstab

-info_echo "4210_generate_crypttab.sh"
+info_echo "4210_generate_crypttab.sh [${TARGET}]"
 generate_crypttab

-info_echo "4220_installation_cryptsetup.sh"
+info_echo "4220_installation_cryptsetup.sh [${TARGET}]"
 installation_cryptsetup

-info_echo "4230_installation_grub.sh"
+info_echo "4230_installation_grub.sh [${TARGET}]"
 installation_grub

 if [[ "${VAR_GRUB_PASSWORD}" == "true" ]]; then

-  info_echo "4240_update_grub_password.sh"
+  info_echo "4240_update_grub_password.sh [${TARGET}]"
  update_grub_password

 fi

-info_echo "4250_update_grub_bootparameter.sh"
+info_echo "4250_update_grub_bootparameter.sh [${TARGET}]"
 update_grub_bootparameter


 ### CDI_4300
-info_echo "4300_installation_network.sh"
+info_echo "4300_installation_network.sh [${TARGET}]"
 installation_network

-info_echo "4305_installation_netsec.sh"
+info_echo "4305_installation_netsec.sh [${TARGET}]"
 installation_netsec

 if [[ "${VAR_DROPBEAR}" == "true" ]]; then

-  info_echo "4310_dropbear_build.sh"
+  info_echo "4310_dropbear_build.sh [${TARGET}]"
  dropbear_build

-  info_echo "4311_dropbear_initramfs.sh"
+  info_echo "4311_dropbear_initramfs.sh [${TARGET}]"
  dropbear_initramfs

-  info_echo "4312_dropbear_setup.sh"
+  info_echo "4312_dropbear_setup.sh [${TARGET}]"
  dropbear_setup

 fi

-info_echo "4320_update_initramfs.sh"
+info_echo "4320_update_initramfs.sh [${TARGET}]"
 update_initramfs

-info_echo "4330_installation_ssh.sh"
+info_echo "4330_installation_ssh.sh [${TARGET}]"
 installation_ssh


 ### CDI_4400
-info_echo "4400_kernel_modules.sh"
+info_echo "4400_kernel_modules.sh [${TARGET}]"
 kernel_modules && kernel_modprobe

-info_echo "4410_kernel_sysctl.sh"
+info_echo "4410_kernel_sysctl.sh [${TARGET}]"
 kernel_sysctl

-info_echo "4420_hardening_fail2ban.sh"
+info_echo "4420_hardening_fail2ban.sh [${TARGET}]"
 hardening_fail2ban

-info_echo "4430_hardening_files.sh"
+info_echo "4430_hardening_files.sh [${TARGET}]"
 hardening_files

-info_echo "4440_hardening_haveged.sh"
+info_echo "4440_hardening_haveged.sh [${TARGET}]"
 hardening_haveged

-info_echo "4450_hardening_memory.sh"
+info_echo "4450_hardening_memory.sh [${TARGET}]"
 hardening_memory

-info_echo "4460_hardening_openssl.sh"
+info_echo "4460_hardening_openssl.sh [${TARGET}]"
 hardening_openssl

-info_echo "4470_hardening_ufw.sh"
+info_echo "4470_hardening_ufw.sh [${TARGET}]"
 hardening_ufw

-info_echo "4480_hardening_usb.sh"
+info_echo "4480_hardening_usb.sh [${TARGET}]"
 hardening_usb

-info_echo "4490_hardening_virus.sh"
+info_echo "4490_hardening_virus.sh [${TARGET}]"
 hardening_virus

-info_echo "4445_hardening_logrotate.sh"
+info_echo "4445_hardening_logrotate.sh [${TARGET}]"
 hardening_logrotate


 ### CDI_4500
-info_echo "4500_accounts_preparation.sh"
+info_echo "4500_accounts_preparation.sh [${TARGET}]"
 accounts_preparation

-info_echo "4510_accounts_hardening.sh"
+info_echo "4510_accounts_hardening.sh [${TARGET}]"
 accounts_hardening

-info_echo "4520_accounts_setup.sh"
+info_echo "4520_accounts_setup.sh [${TARGET}]"
 accounts_setup


 ### CDI_4600
-info_echo "4600_installation_packages.sh"
+info_echo "4600_installation_packages.sh [${TARGET}]"
 installation_packages

-#info_echo "4610_installation_security.sh"
-#installation_security
+info_echo "4610_installation_security.sh [${TARGET}]"
+installation_security

-info_echo "4620_installation_verification.sh"
+info_echo "4620_installation_verification.sh [${TARGET}]"
 install_verification

-info_echo "4630_auditing_packages.sh"
+info_echo "4630_auditing_packages.sh [${TARGET}]"
 auditing_packages

 ### CDI_4900
-info_echo "4999_exiting_chroot_system.sh"
+info_echo "4999_exiting_chroot_system.sh [${TARGET}]"
 exiting_chroot_system

 ### CDI_5000
 if [[ "${VAR_RECOVERY}" == "true" ]]; then

-  info_echo "5000_debootstrap.sh"
-  func_debootstrap_reco
+  declare -gx VAR_RUN_RECOVERY="true"

-  info_echo "5005_debootstrap_checks.sh"
-  check_debootstrap_reco
+  info_echo "4000_debootstrap.sh [${RECOVERY}]"
+  func_debootstrap

-  info_echo "5010_prepare_mounts.sh"
-  prepare_mounts_reco
+  info_echo "4005_debootstrap_checks.sh [${RECOVERY}]"
+  check_debootstrap

-  info_echo "5015_check_usr_merge.sh"
-  check_usr_merge_reco
+  info_echo "4010_prepare_mounts.sh [${RECOVERY}]"
+  prepare_mounts

-  info_echo "5020_remove_x509.sh"
-  remove_x509_reco
+  info_echo "4015_check_usr_merge.sh [${RECOVERY}]"
+  check_usr_merge

-  info_echo "5030_setup_hostname.sh"
-  setup_hostname_reco
+  info_echo "4020_remove_x509.sh [${RECOVERY}]"
+  remove_x509

-  info_echo "5035_setup_resolv.sh"
-  setup_resolv_reco
+  info_echo "4030_setup_hostname.sh [${RECOVERY}]"
+  setup_hostname

-  info_echo "5040_setup_timezone.sh"
-  setup_timezone_reco
+  info_echo "4035_setup_resolv.sh [${RECOVERY}]"
+  setup_resolv

-  info_echo "5050_setup_locales.sh"
-  setup_locales_reco
+  info_echo "4040_setup_timezone.sh [${RECOVERY}]"
+  setup_timezone

-  info_echo "5105_generate_sources_822.sh"
-  generate_sources822_reco
+  info_echo "4050_setup_locales.sh [${RECOVERY}]"
+  setup_locales

-  info_echo "5110_update_sources.sh"
-  update_sources_reco
+  info_echo "4105_generate_sources_822.sh [${RECOVERY}]"
+  generate_sources822
+
+  info_echo "4110_update_sources.sh [${RECOVERY}]"
+  update_sources

  info_echo "5120_installation_kernel.sh"
  installation_kernel_reco
@@ -482,6 +488,7 @@ if [[ "${VAR_RECOVERY}" == "true" ]]; then
  info_echo "5999_exiting_chroot_recovery.sh"
  exiting_chroot_recovery

+  declare -gx VAR_RUN_RECOVERY="false"
 fi

 ### Dialog Output for Initialization END