msw/CISS.debian.installer
SHA256
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

V8.00.000.2025.06.17

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-06-29 14:48:43 +02:00
parent 4b014e2e65
commit d9cb2402a0
8 changed files with 436 additions and 353 deletions
Download Patch File Download Diff File Expand all files Collapse all files

236
.preseed/partitioning.yaml
View File

@@ -12,35 +12,35 @@ recipe:
guben0afx256r:
active: true
control:
# g=GPT || m=MBR
# u=UEFI || b=BIOS
# b=btrfs || 4=ext4 only
# e=ephemeral "/tmp" and "SWAP" || n=non-ephemeral "/tmp" and "SWAP" (yet not supported)
# n0=non RAID || m6=mdadm RAID6 || m5=mdadm RAID5 || b1=btrfs RAID1
# a="/dev/sda" only setup || b="/dev/sdb" || c="/dev/sdc" and so forth
# f=fixed size || a=automatic size
# x256=size of device in GiB
# r=rescue partition || n=no rescue partition
### g=GPT || m=MBR
### u=UEFI || b=BIOS
### b=btrfs || 4=ext4 only
### e=ephemeral "/tmp" and "SWAP" || n=non-ephemeral "/tmp" and "SWAP" (yet not supported)
### n0=non RAID || m6=mdadm RAID6 || m5=mdadm RAID5 || b1=btrfs RAID1
### a="/dev/sda" only setup || b="/dev/sdb" || c="/dev/sdc" and so forth
### f=fixed size || a=automatic size
### x256=size of device in GiB
### r=rescue partition || n=no rescue partition
description: "Default: CISS 2025 - GPT - BTRFS - Ephemeral - non RAID - 256GiB - rescue"
# MUST be "UEFI" for "gpt" || "BIOS":
### MUST be "UEFI" for "gpt" || "BIOS":
firmware: "UEFI"
# MUST be equal to the second part of the recipe-variables string.
### MUST be equal to the second part of the recipe-variables string.
id: "guben0afx256r"
name: "ciss.2025.gpt.btrfs.ephemeral.non-raid.256GiB.rescue"
# mdadm RAID settings only (not yet supported)
### mdadm RAID settings only (not yet supported)
raid:
enable: false
disks:
member: 4
spare: 1
# Only Level "1", "5", "6" and "10" are supported
### Only Level "1", "5", "6" and "10" are supported
level: 6
# MUST be "gpt" for "UEFI" || "msdos":
### MUST be "gpt" for "UEFI" || "msdos":
table: "gpt"
# Only set to "true" if the recipe is tested by the authors. Otherwise, this is set to "false" by default.
### Only set to "true" if the recipe is tested by the authors. Otherwise, this is set to "false" by default.
syntax: true
# Version of the specific recipe.
version: "1.0.0"
### Version of the specific recipe.
version: "1.1.1"
dev:
sda:
1:
@@ -48,13 +48,13 @@ recipe:
end: "512MiB"
bootable: true
encryption:
# MUST be "false" for "/boot/efi":
### MUST be "false" for "/boot/efi":
enable: false
# MUST be "false" for "/boot/efi":
### MUST be "false" for "/boot/efi":
ephemeral: false
# MUST be "false" for "/boot/efi":
### MUST be "false" for "/boot/efi":
integrity: false
# MUST be "false" for "/boot/efi":
### MUST be "false" for "/boot/efi":
nuke: false
cipher: ""
hash: ""
@@ -65,24 +65,22 @@ recipe:
pbkdf: ""
rng: ""
filesystem:
# btrfs only
btrfs:
checksum: ""
# TODO Level 0 is valid for zstd not for lzo
compress: ""
level: ""
dedup: true
subvolume: ""
snapshot: ""
format: true
label: "ESP"
options: ""
version: "fat32"
mount:
# MUST be "true" for "/boot/efi":
enable: true
options: ""
options: "defaults,nodev,nosuid,noexec,umask=0077"
options_snap: ""
path: "/boot/efi"
# Only valid for filesystem version "btrfs":
subvolume: ""
primary: primary
2:
begin: "512MiB"
@@ -90,39 +88,38 @@ recipe:
bootable: false
encryption:
enable: true
# MUST be "false" for "/boot":
### MUST be "false" for "/boot":
ephemeral: false
# MUST be "false" for "/boot":
### MUST be "false" for "/boot":
integrity: false
# MUST be "false" for "/boot":
nuke: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_boot"
metadatasize: "32MiB"
# MUST be "pbkdf" for "/boot":
### MUST be "pbkdf" for "/boot":
pbkdf: "pbkdf"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: ""
compress: ""
level: ""
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@boot"
snapshot: ""
format: true
version: "ext4"
label: "ext4_boot"
version: "btrfs"
label: "btrfs_boot"
options: ""
mount:
# MUST be "true" for "/boot":
### MUST be "true" for "/boot":
enable: true
options: "defaults,nodev,noexec,nosuid,noatime"
options: "defaults,nodev,nosuid,noexec,noatime,compress=no,discard=async,subvol=@boot"
options_snap: ""
path: "/boot"
# Only valid for filesystem version "btrfs":
subvolume: ""
primary: primary
3:
begin: "2GiB"
@@ -142,12 +139,13 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: ""
compress: ""
level: ""
dedup: true
subvolume: ""
snapshot: ""
format: true
label: "ext4_rescue"
options: ""
@@ -155,22 +153,21 @@ recipe:
mount:
enable: true
options: "defaults,nodev"
options_snap: ""
path: "/recovery"
# Only valid for filesystem version "btrfs":
subvolume: ""
primary: primary
4:
begin: "6GiB"
end: "8GiB"
bootable: false
encryption:
# MUST be "true" for ephemeral "SWAP":
### MUST be "true" for ephemeral "SWAP":
enable: true
# MUST be "true" for ephemeral "SWAP":
### MUST be "true" for ephemeral "SWAP":
ephemeral: true
# MUST be "false" for ephemeral "SWAP":
### MUST be "false" for ephemeral "SWAP":
integrity: false
# MUST be "false" for ephemeral "SWAP":
### MUST be "false" for ephemeral "SWAP":
nuke: false
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -181,37 +178,37 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: ""
compress: ""
level: ""
dedup: true
subvolume: ""
snapshot: ""
format: true
# MUST be "crypt_swap_ephem" for "SWAP":
### MUST be "crypt_swap_ephem" for "SWAP":
label: "crypt_swap_ephem"
options: ""
# MUST be "ext4" for ephemeral "SWAP":
### MUST be "ext4" for ephemeral "SWAP":
version: "ext4"
mount:
enable: true
options: ""
options: "defaults,discard"
options_snap: ""
path: "SWAP"
# Only valid for filesystem version "btrfs":
subvolume: ""
primary: primary
5:
begin: "8GiB"
end: "10GiB"
bootable: false
encryption:
# MUST be "true" for ephemeral "/tmp":
### MUST be "true" for ephemeral "/tmp":
enable: true
# MUST be "true" for ephemeral "/tmp":
### MUST be "true" for ephemeral "/tmp":
ephemeral: true
# MUST be "false" for ephemeral "/tmp":
### MUST be "false" for ephemeral "/tmp":
integrity: false
# MUST be "false" for ephemeral "/tmp":
### MUST be "false" for ephemeral "/tmp":
nuke: false
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -222,24 +219,24 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: ""
compress: ""
level: ""
dedup: true
subvolume: ""
snapshot: ""
format: true
# MUST be "crypt_tmp_ephem" for ephemeral "/tmp"
### MUST be "crypt_tmp_ephem" for ephemeral "/tmp"
label: "crypt_tmp_ephem"
options: ""
# MUST be "ext4" for ephemeral "/tmp"
### MUST be "ext4" for ephemeral "/tmp"
version: "ext4"
mount:
enable: true
options: "defaults,rw,nodev,noexec,nosuid,noatime,mode=1777"
options: "defaults,rw,nodev,nosuid,noatime,discard,mode=1777"
options_snap: ""
path: "/tmp"
# Only valid for filesystem version "btrfs":
subvolume: ""
primary: primary
6:
begin: "10GiB"
@@ -248,7 +245,7 @@ recipe:
encryption:
enable: true
ephemeral: false
integrity: true
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -259,23 +256,22 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@"
snapshot: "@root_snap"
format: true
label: "btrfs_root"
options: ""
version: "btrfs"
mount:
# MUST be "true" for "/":
enable: true
options: "defaults,errors=remount-ro,noatime"
options: "defaults,errors=remount-ro,noatime,compress=zstd:7,discard=async,autodefrag,subvol=@"
options_snap: "ro,nodev,nosuid,noexec,nodatacow,subvol=@root_snap"
path: "/"
# Only valid for filesystem version "btrfs":
subvolume: "@"
primary: primary
7:
begin: "42GiB"
@@ -284,7 +280,7 @@ recipe:
encryption:
enable: true
ephemeral: false
integrity: true
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -295,22 +291,22 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@home"
snapshot: "@home_snap"
format: true
label: "btrfs_home"
options: ""
version: "btrfs"
mount:
enable: true
options: "defaults,rw,nodev,nosuid,noatime"
options: "defaults,nodev,nosuid,relatime,compress=zstd:7,discard=async,autodefrag,subvol=@home"
options_snap: "ro,nodev,nosuid,noexec,nodatacow,subvol=@home_snap"
path: "/home"
# Only valid for filesystem version "btrfs":
subvolume: "@home"
primary: primary
8:
begin: "42GiB"
@@ -319,7 +315,7 @@ recipe:
encryption:
enable: true
ephemeral: false
integrity: true
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -330,22 +326,22 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@usr"
snapshot: ""
format: true
label: "btrfs_usr"
options: ""
version: "btrfs"
mount:
enable: true
options: "defaults,rw,nodev,noatime"
options: "defaults,nodev,relatime,compress=zstd:7,discard=async,subvol=@usr"
options_snap: ""
path: "/usr"
# Only valid for filesystem version "btrfs":
subvolume: "@usr"
primary: primary
9:
begin: "126GiB"
@@ -354,7 +350,7 @@ recipe:
encryption:
enable: true
ephemeral: false
integrity: true
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -365,22 +361,22 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@var"
snapshot: "@var_snap"
format: true
label: "btrfs_var"
options: ""
version: "btrfs"
mount:
enable: true
options: "defaults,rw,nodev,nosuid,noatime"
options: "defaults,nodev,nosuid,relatime,compress=zstd:7,discard=async,subvol=@var"
options_snap: "ro,nodev,nosuid,noexec,nodatacow,subvol=@var_snap"
path: "/var"
# Only valid for filesystem version "btrfs":
subvolume: "@var"
primary: primary
10:
begin: "190GiB"
@@ -389,7 +385,7 @@ recipe:
encryption:
enable: true
ephemeral: false
integrity: true
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -400,22 +396,22 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@var_log"
snapshot: ""
format: true
label: "btrfs_var_log"
options: ""
version: "btrfs"
mount:
enable: true
options: "defaults,rw,nodev,noexec,nosuid,noatime"
options: "defaults,nodev,nosuid,noexec,noatime,nodatacow,compress=zstd:7,discard=async,subvol=@var_log"
options_snap: ""
path: "/var/log"
# Only valid for filesystem version "btrfs":
subvolume: "@var_log"
primary: primary
11:
begin: "206GiB"
@@ -424,7 +420,7 @@ recipe:
encryption:
enable: true
ephemeral: false
integrity: true
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
@@ -435,22 +431,22 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@var_log_audit"
snapshot: ""
format: true
label: "btrfs_var_log_audit"
options: ""
version: "btrfs"
mount:
enable: true
options: "defaults,rw,nodev,noexec,nosuid,noatime"
options: "defaults,nodev,nosuid,noexec,noatime,nodatacow,compress=zstd:7,discard=async,subvol=@var_log_audit"
options_snap: ""
path: "/var/log/audit"
# Only valid for filesystem version "btrfs":
subvolume: "@var_log_audit"
primary: primary
12:
begin: "222GiB"
@@ -470,22 +466,22 @@ recipe:
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
subvolume: "@var_tmp"
snapshot: ""
format: true
label: "btrfs_var_tmp"
options: ""
version: "btrfs"
mount:
enable: true
options: "defaults,rw,nodev,noexec,nosuid,noatime"
options: "defaults,nodev,nosuid,noatime,compress=zstd:7,nodatacow,discard=async,subvol=@var_tmp"
options_snap: ""
path: "/var/tmp"
# Only valid for filesystem version "btrfs":
subvolume: "@var_tmp"
primary: primary
13:
begin: "238GiB"
@@ -496,31 +492,31 @@ recipe:
ephemeral: false
integrity: false
nuke: true
cipher: ""
hash: ""
itertime: ""
key: ""
label: ""
metadatasize: ""
pbkdf: ""
rng: ""
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
key: "512"
label: "crypt_opt"
metadatasize: "32MiB"
pbkdf: "argon2id"
rng: "use-random"
filesystem:
# btrfs only
btrfs:
checksum: ""
compress: ""
level: ""
checksum: "sha256"
compress: "zstd"
level: "7"
dedup: true
format: false
label: ""
subvolume: "@opt"
snapshot: ""
format: true
label: "btrfs_opt"
options: ""
version: ""
version: "btrfs"
mount:
enable: false
options: ""
path: ""
# Only valid for filesystem version "btrfs":
subvolume: ""
enable: true
options: "defaults,nodev,nosuid,relatime,compress=zstd:7,discard=async,subvol=@opt"
options_snap: ""
path: "/opt"
primary: primary
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml: