V8.00.000.2025.06.17
All checks were successful
🔁 Render Graphviz Diagrams. / 🔁 Render Graphviz Diagrams. (push) Successful in 39s
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m45s

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
2025-07-20 19:43:09 +02:00
parent 55a0cb6884
commit e1f09ca170
27 changed files with 1100 additions and 909 deletions

View File

@@ -24,6 +24,7 @@ recipe:
firmware: "UEFI" # MUST be "UEFI" for "gpt" || "BIOS":
id: "guben0afx256r" # MUST be equal to the second part of the recipe-variables string.
name: "ciss.2025.gpt.btrfs.ephemeral.non-raid.256GiB.rescue"
nuke: true # Activates Nuke-Mechanism in '/etc/crypttab' keyscript and via dropbear SSH forced command.
raid: # mdadm RAID settings only (not yet supported).
enable: false
disks:
@@ -44,7 +45,6 @@ recipe:
enable: false # MUST be "false" for "/boot/efi"
ephemeral: false # MUST be "false" for "/boot/efi"
integrity: false # MUST be "false" for "/boot/efi"
nuke: false # MUST be "false" for "/boot/efi"
cipher: ""
hash: ""
itertime: ""
@@ -79,7 +79,6 @@ recipe:
enable: true
ephemeral: false # MUST be "false" for "/boot"
integrity: false # MUST be "false" for "/boot"
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -114,7 +113,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: false
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -149,7 +147,6 @@ recipe:
enable: true # MUST be "true" for ephemeral "SWAP"
ephemeral: true # MUST be "true" for ephemeral "SWAP"
integrity: false # MUST be "false" for ephemeral "SWAP"
nuke: false # MUST be "false" for ephemeral "SWAP"
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -184,7 +181,6 @@ recipe:
enable: true # MUST be "true" for ephemeral "/tmp"
ephemeral: true # MUST be "true" for ephemeral "/tmp"
integrity: false # MUST be "false" for ephemeral "/tmp"
nuke: false # MUST be "false" for ephemeral "/tmp"
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -219,7 +215,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -254,7 +249,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -289,7 +283,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -324,7 +317,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -359,7 +351,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -394,7 +385,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -429,7 +419,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"
@@ -464,7 +453,6 @@ recipe:
enable: true
ephemeral: false
integrity: false
nuke: true
cipher: "aes-xts-plain64"
hash: "sha512"
itertime: "3000"