V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4200_boot/4200_generate_fstab.sh

@@ -44,7 +44,7 @@ write_fstab() {
 }
 
 #######################################
-# Generate target '/etc/fstab' entries.
+# Generate the '/etc/fstab' target entries.
 # Globals:
 #   ARY_PATHS_SORTED
 #   HMP_EPHEMERAL_ENCLABEL
@@ -52,7 +52,6 @@ write_fstab() {
 #   HMP_FSTAB_MOUNT_OPTS
 #   HMP_PATH_FSUUID
 #   TARGET
-#   VAR_VERSION
 # Arguments:
 #   None
 # Returns:

func/cdi_4200_boot/4210_generate_crypttab.sh

@@ -34,7 +34,7 @@ write_crypttab() {
 }
 
 #######################################
-# Generate target '/etc/crypttab' entries.
+# Generate the '/etc/crypttab' target entries.
 # Globals:
 #   HMP_EPHEMERAL_ENCLABEL
 #   HMP_PATH_ENCLABEL
@@ -42,8 +42,6 @@ write_crypttab() {
 #   HMP_PATH_LUKSUUID
 #   TARGET
 #   VAR_DROPBEAR
-#   VAR_NUKE
-#   VAR_VERSION
 # Arguments:
 #  None
 # Returns:
@@ -88,16 +86,6 @@ EOF
       case  "${var_key,,}" in
 
         "/")
-          mkdir -p "${TARGET}/etc/initramfs-tools/files"
-          mkdir -p "${TARGET}/usr/lib/cryptsetup/scripts"
-
-          ### Install the script to be called inside initramfs environment for unlocking LUKS and NUKE Devices.
-          #install -m 0755 -o root -g root "${VAR_SETUP_PATH}/includes/target/etc/initramfs-tools/files/unlock_wrapper.sh" \
-          #  "${TARGET}/etc/initramfs-tools/files/"
-          #install -m 0755 -o root -g root "${VAR_SETUP_PATH}/includes/target/etc/initramfs-tools/files/unlock_wrapper.sh" \
-          #  "${TARGET}/lib/cryptsetup/scripts/"
-
-          #write_crypttab "${var_encryption_label}" "UUID=${var_luks_uuid}" "none" "luks,discard,initramfs,keyscript=/lib/cryptsetup/scripts/unlock_wrapper.sh"
           write_crypttab "${var_encryption_label}" "UUID=${var_luks_uuid}" "none" "luks,discard,initramfs,keyscript=decrypt_keyctl,tries=1"
           ;;
 

func/cdi_4200_boot/4250_update_grub_bootparameter.sh

@@ -16,14 +16,17 @@
 guard_sourcing
 
 #######################################
-# Hardening Grub boot parameter.
+# Hardening: update the Grub boot parameter and the Dropbear and Nuke parameters if opted in.
 # Globals:
 #   ARY_BOOTPARAM
+#   HMP_PATH_ENCLABEL
 #   TARGET
-#   VAR_GRUB_CMDLINE_LINUX
-#   VAR_GRUB_CMDLINE_LINUX_DEFAULT
+#   VAR_CRYPT_ROOT
+#   VAR_DROPBEAR
 #   VAR_NUKE
 #   VAR_NUKE_HASH
+#   VV_GRUB_CMDLINE_LINUX
+#   VV_GRUB_CMDLINE_LINUX_DEFAULT
 # Arguments:
 #   None
 # Returns:

func/cdi_4300_network/4320_update_initramfs.sh

@@ -13,7 +13,7 @@
 guard_sourcing
 
 #######################################
-# Finally, deploy all changes done via 'update-grub' and 'update-initramfs'.
+# Deploy all changes made using the 'update-grub' and 'update-initramfs' commands.
 # Globals:
 #   TARGET
 # Arguments: