msw/CISS.debian.installer
SHA256
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 2m11s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-09-03 11:53:29 +02:00
parent 5b978207a1
commit e74d6a5b69
5 changed files with 46 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
func/cdi_4200_boot/4200_generate_fstab.sh
View File

@@ -44,7 +44,7 @@ write_fstab() {
}
#######################################
# Generate target '/etc/fstab' entries.
# Generate the '/etc/fstab' target entries.
# Globals:
# ARY_PATHS_SORTED
# HMP_EPHEMERAL_ENCLABEL
@@ -52,7 +52,6 @@ write_fstab() {
# HMP_FSTAB_MOUNT_OPTS
# HMP_PATH_FSUUID
# TARGET
# VAR_VERSION
# Arguments:
# None
# Returns:

14
func/cdi_4200_boot/4210_generate_crypttab.sh
View File

@@ -34,7 +34,7 @@ write_crypttab() {
}
#######################################
# Generate target '/etc/crypttab' entries.
# Generate the '/etc/crypttab' target entries.
# Globals:
# HMP_EPHEMERAL_ENCLABEL
# HMP_PATH_ENCLABEL
@@ -42,8 +42,6 @@ write_crypttab() {
# HMP_PATH_LUKSUUID
# TARGET
# VAR_DROPBEAR
# VAR_NUKE
# VAR_VERSION
# Arguments:
# None
# Returns:
@@ -88,16 +86,6 @@ EOF
case "${var_key,,}" in
"/")
mkdir -p "${TARGET}/etc/initramfs-tools/files"
mkdir -p "${TARGET}/usr/lib/cryptsetup/scripts"
### Install the script to be called inside initramfs environment for unlocking LUKS and NUKE Devices.
#install -m 0755 -o root -g root "${VAR_SETUP_PATH}/includes/target/etc/initramfs-tools/files/unlock_wrapper.sh" \
# "${TARGET}/etc/initramfs-tools/files/"
#install -m 0755 -o root -g root "${VAR_SETUP_PATH}/includes/target/etc/initramfs-tools/files/unlock_wrapper.sh" \
# "${TARGET}/lib/cryptsetup/scripts/"
#write_crypttab "${var_encryption_label}" "UUID=${var_luks_uuid}" "none" "luks,discard,initramfs,keyscript=/lib/cryptsetup/scripts/unlock_wrapper.sh"
write_crypttab "${var_encryption_label}" "UUID=${var_luks_uuid}" "none" "luks,discard,initramfs,keyscript=decrypt_keyctl,tries=1"
;;

9
func/cdi_4200_boot/4250_update_grub_bootparameter.sh
View File

@@ -16,14 +16,17 @@
guard_sourcing
#######################################
# Hardening Grub boot parameter.
# Hardening: update the Grub boot parameter and the Dropbear and Nuke parameters if opted in.
# Globals:
# ARY_BOOTPARAM
# HMP_PATH_ENCLABEL
# TARGET
# VAR_GRUB_CMDLINE_LINUX
# VAR_GRUB_CMDLINE_LINUX_DEFAULT
# VAR_CRYPT_ROOT
# VAR_DROPBEAR
# VAR_NUKE
# VAR_NUKE_HASH
# VV_GRUB_CMDLINE_LINUX
# VV_GRUB_CMDLINE_LINUX_DEFAULT
# Arguments:
# None
# Returns: