msw/CISS.debian.installer
SHA256
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 54s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-08-08 11:36:32 +02:00
parent cbb0383dfb
commit b38ca5a7ca
18 changed files with 191 additions and 91 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
includes/target/etc/initramfs-tools/hooks/custom-initramfs.sh
View File

@@ -11,8 +11,6 @@
# SPDX-Security-Contact: security@coresecret.eu
# SPDX-Comment: Hook script (initramfs) for setting up the CISS.debian.installer hardened dropbear environment, incl. Luks Nuke.
# TODO: Update preseed.yaml for pgp signing key AND / OR implementation of presigned unlock_wrapper.sh
set -e
PREREQ=""
@@ -76,6 +74,7 @@ install -m 0444 /etc/dropbear/initramfs/dropbear.conf "${DESTDIR}/etc/dropbear/d
### Install Dropbear Cryptroot Unlock Wrapper
install -m 0555 /etc/initramfs-tools/files/unlock_wrapper.sh "${DESTDIR}/usr/local/bin/unlock_wrapper.sh"
# TODO: Update preseed.yaml for pgp signing key AND / OR implementation of presigned unlock_wrapper.sh
#install -m 0444 /etc/initramfs-tools/files/unlock_wrapper.sh.sha384 "${DESTDIR}/usr/local/bin/unlock_wrapper.sh.sha384"
#install -m 0444 /etc/initramfs-tools/files/unlock_wrapper.sh.sha512 "${DESTDIR}/usr/local/bin/unlock_wrapper.sh.sha512"
#install -m 0444 /etc/initramfs-tools/files/unlock_wrapper.sh.sha384.sig "${DESTDIR}/usr/local/bin/unlock_wrapper.sh.sha384.sig"
@@ -87,4 +86,6 @@ install -m 0555 /etc/initramfs-tools/files/unlock_wrapper.sh "${DESTDIR}/usr/loc
### Install Dropbear Banner
#install -m 0444 /etc/dropbear/initramfs/banner "${DESTDIR}/etc/dropbear/banner"
echo "Successfully executed: [/etc/initramfs-tools/hooks/custom-initramfs.sh]."
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

5
includes/target/etc/initramfs-tools/hooks/custom-prompt.sh
View File

@@ -9,11 +9,12 @@
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
# SPDX-PackageName: CISS.debian.installer
# SPDX-Security-Contact: security@coresecret.eu
# SPDX-Comment: Hook script (initramfs) for setting up the CISS.debian.installer initramfs prompt.
set -e
PREREQ=""
prereqs() { echo "$PREREQ"; }
prereqs() { echo "${PREREQ}"; }
case $1 in
prereqs) prereqs; exit 0 ;;
esac
@@ -31,4 +32,6 @@ export PS1='$( STATUS=$?; \
fi; ) '
EOF
echo "Successfully executed: [/etc/initramfs-tools/hooks/custom-prompt.sh]."
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh