V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

ciss_debian_installer.sh

@@ -197,176 +197,264 @@ arg_priority_check
 info_echo "0105_arg_nuke_converter.sh"
 nuke_passphrase
 
-### CDI_1200
 
 ### CDI_1250
 info_echo "1250_yaml_parser.sh"
 yaml_parser
+
 info_echo "1251_yaml_reader.sh"
 yaml_reader
+
 info_echo "1252_yaml_validator.sh"
 yaml_validator
 
+
 ### CDI_3200
 info_echo "3200_partitioning.sh"
 partitioning
+
 info_echo "3210_benchmarking_encryption.sh"
 benchmarking_encryption
+
 info_echo "3220_partition_encryption.sh"
 partition_encryption
+
 info_echo "3240_partition_formatting.sh"
 partition_formatting
+
 info_echo "3280_mount_partition.sh"
 mount_partition
+
 info_echo "3290_uuid_logger.sh"
 uuid_logger
 
+
 ### CDI_4000
 info_echo "4000_debootstrap.sh"
 func_debootstrap
+
 info_echo "4005_debootstrap_checks.sh"
 check_debootstrap
+
 info_echo "4010_prepare_mounts.sh"
 prepare_mounts
+
 info_echo "4015_check_usr_merge.sh"
 check_usr_merge
+
 info_echo "4020_remove_x509.sh"
 remove_x509
+
 info_echo "4030_setup_hostname.sh"
 setup_hostname
+
 info_echo "4035_setup_resolv.sh"
 setup_resolv
+
 info_echo "4040_setup_timezone.sh"
 setup_timezone
+
 info_echo "4050_setup_locales.sh"
 setup_locales
 
+
 ### CDI_4100
 if [[ "${VAR_DEB822}" == "true" ]]; then
+
   info_echo "4105_generate_sources822.sh"
   generate_sources822
+
 else
+
   info_echo "4100_generate_sources.sh"
   generate_sources
+
 fi
+
 info_echo "4110_update_sources.sh"
 update_sources
+
 info_echo "4120_installation_kernel.sh"
 installation_kernel
+
 info_echo "4121_installation_initramfs.sh"
 installation_initramfs
+
 info_echo "4130_installation_toolset.sh"
 installation_toolset
+
 info_echo "4131_installation_systemd.sh"
 installation_systemd
+
 info_echo "4132_installation_machineid.sh"
 installation_machineid
+
 info_echo "4133_installation_masking.sh"
 installation_masking
+
 info_echo "4140_installation_microcode.sh"
 installation_microcode
+
 info_echo "4145_installation_firmware.sh"
 installation_firmware
+
 info_echo "4150_installation_chrony.sh"
 installation_chrony
+
 info_echo "4160_installation_eza.sh"
 installation_eza
+
 info_echo "4170_installation_lynis.sh"
 installation_lynis
 
+
 ### CDI_4200
 info_echo "4200_generate_fstab.sh"
 generate_fstab
+
 info_echo "4205_check_fstab.sh"
 check_fstab
+
 info_echo "4210_generate_crypttab.sh"
 generate_crypttab
-info_echo "4215_check_crypttab.sh"
-check_crypttab
+
 info_echo "4220_installation_cryptsetup.sh"
 installation_cryptsetup
+
 info_echo "4230_installation_grub.sh"
 installation_grub
+
 if [[ "${VAR_GRUB_PASSWORD}" == "true" ]]; then
+
   info_echo "4240_update_grub_password.sh"
   update_grub_password
+
 fi
+
 info_echo "4250_update_grub_bootparameter.sh"
 update_grub_bootparameter
 
+
 ### CDI_4300
 info_echo "4300_installation_network.sh"
 installation_network
+
 info_echo "4305_installation_netsec.sh"
 installation_netsec
+
 if [[ "${VAR_DROPBEAR}" == "true" ]]; then
+
   info_echo "4310_dropbear_build.sh"
   dropbear_build
+
   info_echo "4311_dropbear_initramfs.sh"
   dropbear_initramfs
+
   info_echo "4312_dropbear_setup.sh"
   dropbear_setup
+
 fi
+
 info_echo "4320_update_initramfs.sh"
 update_initramfs
+
 info_echo "4330_installation_ssh.sh"
 installation_ssh
 
+
 ### CDI_4400
 info_echo "4400_kernel_modules.sh"
 kernel_modules && kernel_modprobe
+
 info_echo "4410_kernel_sysctl.sh"
 kernel_sysctl
+
 info_echo "4420_hardening_fail2ban.sh"
 hardening_fail2ban
+
 info_echo "4430_hardening_files.sh"
 hardening_files
+
 info_echo "4440_hardening_haveged.sh"
 hardening_haveged
+
 info_echo "4450_hardening_memory.sh"
 hardening_memory
+
 info_echo "4460_hardening_openssl.sh"
 hardening_openssl
+
 info_echo "4470_hardening_ufw.sh"
 hardening_ufw
+
 info_echo "4480_hardening_usb.sh"
 hardening_usb
+
 info_echo "4490_hardening_virus.sh"
 hardening_virus
+
 info_echo "4445_hardening_logrotate.sh"
 hardening_logrotate
 
+
 ### CDI_4500
 info_echo "4500_accounts_preparation.sh"
 accounts_preparation
+
 info_echo "4510_accounts_hardening.sh"
 accounts_hardening
+
 info_echo "4520_accounts_setup.sh"
 accounts_setup
 
+
 ### CDI_4600
 info_echo "4600_installation_packages.sh"
 installation_packages
+
 info_echo "4610_installation_security.sh"
 installation_security
+
 info_echo "4620_installation_verification.sh"
 install_verification
 
-#info_echo "4610_finalize_system.sh"
+info_echo "4630_auditing_packages.sh"
+auditing_packages
 
-#info_echo "4670_verify_system.sh"
-
-#info_echo "4680_check_sshd_config_integrity.sh"
-
-#info_echo "4690_check_grub_cmdline.sh"
-
-### CDI_4700
-info_echo "4799_exiting_chroot_system.sh"
+### CDI_4900
+info_echo "4999_exiting_chroot_system.sh"
 exiting_chroot_system
 
 ### CDI_5000
 if [[ "${VAR_RECOVERY}" == "true" ]]; then
-  wrapper_recovery
+
+  info_echo "5000_debootstrap.sh"
+  func_debootstrap_reco
+
+  info_echo "5005_debootstrap_checks.sh"
+  check_debootstrap_reco
+
+  info_echo "5010_prepare_mounts.sh"
+  prepare_mounts_reco
+
+  info_echo "5015_check_usr_merge.sh"
+  check_usr_merge_reco
+
+  info_echo "5020_remove_x509.sh"
+  remove_x509_reco
+
+  info_echo "5030_setup_hostname.sh"
+  setup_hostname_reco
+
+  info_echo "5035_setup_resolv.sh"
+  setup_resolv_reco
+
+  info_echo "5040_setup_timezone.sh"
+  setup_timezone_reco
+
+  info_echo "5999_exiting_chroot_recovery.sh"
+  exiting_chroot_recovery
+
 fi
 
 ### Dialog Output for Initialization END