V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

ciss_debian_installer.sh

@@ -270,6 +270,8 @@ info_echo "4133_installation_masking.sh"
 installation_masking
 info_echo "4140_installation_microcode.sh"
 installation_microcode
+info_echo "4145_installation_firmware.sh"
+installation_firmware
 info_echo "4150_installation_chrony.sh"
 installation_chrony
 

func/cdi_4400_hardening/4460_hardening_memory.sh

@@ -17,8 +17,8 @@ guard_sourcing
 #   According to the manual pages of limits.conf(5) and pam_limits(8),
 #   entries in '/etc/security/limits.conf' or drop-ins under
 #   '/etc/security/limits.d/' are NOT applied automatically by the system.
-#   The actual enforcement of these ulimit(2) constraints — including
-#   '* soft core 0' and '* hard core 0' to disable kernel core dumps —
+#   The actual enforcement of these ulimit(2) constraints, including
+#   '* soft core 0' and '* hard core 0' to disable kernel core dumps,
 #   requires that the PAM module 'pam_limits.so' is invoked in the
 #   'session' stack of the respective service (e.g., via
 #   '/etc/pam.d/common-session' and

meta_loader_func.sh

@@ -58,6 +58,7 @@ source_guard "./func/cdi_4100_base/4131_installation_systemd.sh"
 source_guard "./func/cdi_4100_base/4132_installation_machineid.sh"
 source_guard "./func/cdi_4100_base/4133_installation_masking.sh"
 source_guard "./func/cdi_4100_base/4140_installation_microcode.sh"
+source_guard "./func/cdi_4100_base/4145_installation_firmware.sh"
 source_guard "./func/cdi_4100_base/4150_installation_chrony.sh"
 
 ### cdi_4200_boot