V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 41s

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
2025-07-27 17:07:27 +02:00
parent 6caacb541b
commit 9be2bc1083
13 changed files with 774 additions and 124 deletions

View File

@@ -41,11 +41,11 @@ recipe:
table: "gpt" # MUST be "gpt" for "UEFI" || "msdos":
syntax: true # This is set to "false" by default, otherwise if the recipe is tested by the authors to "true".
### Version of the specific recipe.
version: "1.1.7"
version: "1.1.8b"
dev:
sda:
1:
begin: "2MiB"
begin: "min"
end: "1024MiB"
bootable: false
encryption:
@@ -56,9 +56,10 @@ recipe:
hash: ""
itertime: ""
key: ""
label: ""
keyslotssize: ""
metadatasize: ""
pbkdf: ""
pbkdfparallel: ""
rng: ""
filesystem:
btrfs:
@@ -66,13 +67,10 @@ recipe:
compress: ""
level: ""
mdup: ""
subvolume: ""
snapshot: ""
snapshot: false
format: true
label: "ESP"
options: ""
version: "fat32"
label: ""
mount:
enable: true # MUST be "true" for "/boot/efi"
options: "umask=0077,uid=0,gid=0"
@@ -91,9 +89,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_boot"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "pbkdf2" # MUST be "pbkdf2" for "/boot"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -101,16 +100,13 @@ recipe:
compress: "zstd"
level: "0"
mdup: true
subvolume: "@boot"
snapshot: ""
snapshot: false
format: true
version: "btrfs"
label: "btrfs_boot"
options: ""
label: "part_boot"
mount:
enable: true # MUST be "true" for "/boot"
options: "defaults,nodev,nosuid,noexec,noatime,compress=no,discard=async,subvol=@boot"
options: "defaults,nodev,nosuid,noexec,noatime,compress=no,discard=async"
optsnap: ""
path: "/boot"
primary: primary
@@ -126,9 +122,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_rescue"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -136,13 +133,11 @@ recipe:
compress: ""
level: ""
mdup: ""
subvolume: ""
snapshot: ""
snapshot: false
format: true
label: "ext4_rescue"
options: ""
version: "ext4"
label: "part_recovery"
mount:
enable: true
options: "defaults,nodev"
@@ -161,9 +156,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_ephemeral_swap"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -171,13 +167,11 @@ recipe:
compress: ""
level: ""
mdup: ""
subvolume: ""
snapshot: ""
snapshot: false
format: true
label: "host_swap" # MUST be "host_swap" for ephemeral "SWAP"
options: ""
version: "ext4" # MUST be "ext4" for ephemeral "SWAP"
label: "part_ephem_swap"
mount:
enable: true
options: "defaults,discard"
@@ -196,9 +190,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_ephemeral_tmp"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -206,13 +201,10 @@ recipe:
compress: ""
level: ""
mdup: ""
subvolume: ""
snapshot: ""
snapshot: false
format: true
label: "host_tmp" # MUST be "host_tmp" for ephemeral "/tmp"
options: ""
version: "ext4" # MUST be "ext4" for ephemeral "/tmp"
label: "part_ephem_tmp"
mount:
enable: true
options: "defaults,rw,nodev,nosuid,noatime,discard,mode=1777"
@@ -231,9 +223,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_root"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -241,17 +234,14 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@root"
snapshot: "@root_snap"
snapshot: true
format: true
label: "btrfs_root"
options: ""
version: "btrfs"
label: "part_root"
mount:
enable: true
options: "defaults,errors=remount-ro,noatime,discard=async,autodefrag,subvol=@root"
optsnap: "ro,nodev,nosuid,noexec,nodatacow,subvol=@root_snap"
options: "defaults,errors=remount-ro,noatime,discard=async,autodefrag"
optsnap: "nodev,nosuid,noexec,nodatacow"
path: "/"
primary: primary
7:
@@ -266,9 +256,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_home"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -276,17 +267,14 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@home"
snapshot: "@home_snap"
snapshot: true
format: true
label: "btrfs_home"
options: ""
version: "btrfs"
label: "part_home"
mount:
enable: true
options: "defaults,nodev,nosuid,relatime,discard=async,autodefrag,subvol=@home"
optsnap: "ro,nodev,nosuid,noexec,nodatacow,subvol=@home_snap"
options: "defaults,nodev,nosuid,relatime,discard=async,autodefrag"
optsnap: "nodev,nosuid,noexec,nodatacow"
path: "/home"
primary: primary
8:
@@ -301,9 +289,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_usr"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -311,16 +300,13 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@usr"
snapshot: ""
snapshot: false
format: true
label: "btrfs_usr"
options: ""
version: "btrfs"
label: "part_usr"
mount:
enable: true
options: "defaults,nodev,relatime,discard=async,subvol=@usr"
options: "defaults,nodev,relatime,discard=async"
optsnap: ""
path: "/usr"
primary: primary
@@ -336,9 +322,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_var"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -346,17 +333,14 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@var"
snapshot: "@var_snap"
snapshot: true
format: true
label: "btrfs_var"
options: ""
version: "btrfs"
label: "part_var"
mount:
enable: true
options: "defaults,nodev,nosuid,relatime,discard=async,subvol=@var"
optsnap: "ro,nodev,nosuid,noexec,nodatacow,subvol=@var_snap"
options: "defaults,nodev,nosuid,relatime,discard=async"
optsnap: "nodev,nosuid,noexec,nodatacow"
path: "/var"
primary: primary
10:
@@ -371,9 +355,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_var_log"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -381,16 +366,13 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@var_log"
snapshot: ""
snapshot: false
format: true
label: "btrfs_var_log"
options: ""
version: "btrfs"
label: "part_var_log"
mount:
enable: true
options: "defaults,nodev,nosuid,noexec,noatime,nodatacow,discard=async,subvol=@var_log"
options: "defaults,nodev,nosuid,noexec,noatime,nodatacow,discard=async"
optsnap: ""
path: "/var/log"
primary: primary
@@ -406,9 +388,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_var_log_audit"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -416,16 +399,13 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@var_log_audit"
snapshot: ""
snapshot: false
format: true
label: "btrfs_var_log_audit"
options: ""
version: "btrfs"
label: "part_var_log_audit"
mount:
enable: true
options: "defaults,nodev,nosuid,noexec,noatime,nodatacow,discard=async,subvol=@var_log_audit"
options: "defaults,nodev,nosuid,noexec,noatime,nodatacow,discard=async"
optsnap: ""
path: "/var/log/audit"
primary: primary
@@ -441,9 +421,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_var_tmp"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -451,16 +432,13 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@var_tmp"
snapshot: ""
snapshot: false
format: true
label: "btrfs_var_tmp"
options: ""
version: "btrfs"
label: "part_var_tmp"
mount:
enable: true
options: "defaults,nodev,nosuid,noatime,nodatacow,discard=async,subvol=@var_tmp"
options: "defaults,nodev,nosuid,noatime,nodatacow,discard=async"
optsnap: ""
path: "/var/tmp"
primary: primary
@@ -476,9 +454,10 @@ recipe:
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_opt"
keyslotssize: "32MB"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -486,16 +465,13 @@ recipe:
compress: "zstd"
level: "7"
mdup: true
subvolume: "@opt"
snapshot: ""
snapshot: false
format: true
label: "btrfs_opt"
options: ""
version: "btrfs"
label: "part_opt"
mount:
enable: true
options: "defaults,nodev,nosuid,relatime,discard=async,subvol=@opt"
options: "defaults,nodev,nosuid,relatime,discard=async"
optsnap: ""
path: "/opt"
primary: primary