msw/CISS.debian.installer
SHA256
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 42s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-07-27 21:53:41 +02:00
parent 9b03340d7f
commit b9ac2988c2
6 changed files with 70 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
.preseed/partitioning.yaml
View File

@@ -29,6 +29,9 @@ recipe:
description: "CISS 2025 - GPT - BTRFS - Ephemeral - non RAID - 256GiB - rescue"
firmware: "UEFI" # MUST be "UEFI" for "gpt" || "BIOS":
id: "guben0afx256r" # MUST be equal to the second part of the recipe-variables string.
kdf:
threads: 1 # Set the parallel cost for PBKDF (number of threads, up to 4).
time: 2048 # The number of milliseconds to spend with PBKDF passphrase processing.
name: "ciss.2025.gpt.btrfs.ephemeral.non-raid.256GiB.rescue"
nuke: true # Activates Nuke-Mechanism in '/etc/crypttab' keyscript and via dropbear SSH forced command.
raid: # mdadm RAID settings only (not yet supported).
@@ -41,7 +44,7 @@ recipe:
table: "gpt" # MUST be "gpt" for "UEFI" || "msdos":
syntax: true # This is set to "false" by default, otherwise if the recipe is tested by the authors to "true".
### Version of the specific recipe.
version: "1.1.9"
version: "1.2.0"
dev:
sda:
1:
@@ -54,12 +57,10 @@ recipe:
integrity: false # MUST be "false" for "/boot/efi"
cipher: ""
hash: ""
itertime: ""
key: ""
keyslotssize: ""
metadatasize: ""
pbkdf: ""
pbkdfparallel: ""
rng: ""
filesystem:
btrfs:
@@ -73,7 +74,7 @@ recipe:
version: "fat32"
mount:
enable: true # MUST be "true" for "/boot/efi"
options: "umask=0077,uid=0,gid=0"
options: "defaults,noatime,nodev,nosuid,noexec,umask=0077"
optsnap: ""
path: "/boot/efi"
primary: primary
@@ -87,12 +88,10 @@ recipe:
integrity: false # MUST be "false" for "/boot"
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "pbkdf2" # MUST be "pbkdf2" for "/boot"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -120,12 +119,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -154,12 +151,10 @@ recipe:
integrity: false # MUST be "false" for ephemeral "SWAP"
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -188,12 +183,10 @@ recipe:
integrity: false # MUST be "false" for ephemeral "/tmp"
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -207,7 +200,7 @@ recipe:
version: "ext4" # MUST be "ext4" for ephemeral "/tmp"
mount:
enable: true
options: "defaults,rw,nodev,nosuid,noatime,discard,mode=1777"
options: "defaults,rw,nodev,noexec,nosuid,noatime,discard,mode=1777"
optsnap: ""
path: "/tmp"
primary: primary
@@ -221,12 +214,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -240,7 +231,9 @@ recipe:
version: "btrfs"
mount:
enable: true
options: "defaults,errors=remount-ro,noatime,discard=async,autodefrag"
# btrfs: errors=continue
# ext4 : errors=remount-ro
options: "defaults,errors=continue,noatime,discard=async,autodefrag"
optsnap: "nodev,nosuid,noexec"
path: "/"
primary: primary
@@ -254,12 +247,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -287,12 +278,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -320,12 +309,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -353,12 +340,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -386,12 +371,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -419,12 +402,10 @@ recipe:
integrity: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs:
@@ -449,15 +430,13 @@ recipe:
encryption:
enable: true
ephemeral: false
integrity: false
integrity: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
keyslotssize: "32M"
metadatasize: "4096k"
pbkdf: "argon2id"
pbkdfparallel: 1
rng: "use-random"
filesystem:
btrfs: