V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

.preseed/mfa_master.txt

@@ -0,0 +1 @@
+7cad63da408c27b5121c89cdd0cf878b8f8df1f34bcc0a944152261ee1481fda

.preseed/partitioning.yaml

@@ -34,6 +34,7 @@ recipe:
         time: 256              # The number of milliseconds to spend with PBKDF passphrase processing.
       name: "ciss.2025.gpt.btrfs.ephemeral.non-raid.256GiB.rescue"
       nuke: true               # Activates Nuke-Mechanism in '/etc/crypttab' keyscript and via dropbear SSH forced command.
+      nuke_rounds: 8192        # SHA512 KDF Rounds for Nuke Passphrase. If omitted, the default value is '8,388,608'.
       raid:                    # mdadm RAID settings only (not yet supported).
         enable: false
         disks:

.preseed/preseed.yaml

@@ -26,6 +26,7 @@ apt:
   contrib: true                # Optionally, install contrib software.
   deb_sources: true            # Optionally includes deb-src entries for source repositories.
   default_list: true           # By default, source repositories are listed in '/etc/apt/sources.list'. This MUST be "true".
+  default_deb822: false        # Since Trixie, source repositories are listed in '/etc/apt/sources.list.d/' in deb.822 format.
   full_upgrade: true           # Whether to upgrade packages after debootstrap.
   install_recommends: true     # Configure APT to not install recommended packages by default.
   non_free: true               # Optionally, install non-free software.
@@ -748,6 +749,9 @@ ssh:
 # User settings
 ################################################################################################################################
 user:
+  mfa:
+    info: "totp:v1"
+    salt: "CISS:CDI:OTP"          # + (Server_FQDN/Username)
   ##############################################################################################################################
   # root – Superuser account (normally disabled for direct login)
   ##############################################################################################################################