V8.13.294.2025.10.28

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

lib/lib_lb_build_start.sh

@@ -15,11 +15,14 @@ guard_sourcing
 #######################################
 # Wrapper to write a new 'lb config' environment.
 # Globals:
-#   ERR_UNCRITICAL
+#   SCRIPT_BASEPATH
 #   VAR_BUILD_LOG
 #   VAR_HANDLER_BUILD_DIR
 # Arguments:
 #   None
+# Returns:
+#   0: on success
+#   ERR_UNCRITICAL: on failure
 #######################################
 lb_build_start() {
   printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🔨 Start Build... Log file: %s \e[0m\n" "${VAR_BUILD_LOG}"
@@ -51,5 +54,10 @@ lb_build_start() {
     exit "${ERR_UNCRITICAL}"
 
   fi
+
+  return 0
 }
+### Prevents accidental 'unset -f'.
+# shellcheck disable=SC2034
+readonly -f lb_build_start
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

lib/lib_lb_ciss_upgrades.sh

@@ -0,0 +1,44 @@
+#!/bin/bash
+# SPDX-Version: 3.0
+# SPDX-CreationInfo: 2025-05-05; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
+# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
+# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-FileType: SOURCE
+# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
+# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
+# SPDX-PackageName: CISS.debian.live.builder
+# SPDX-Security-Contact: security@coresecret.eu
+
+guard_sourcing
+
+#######################################
+# Wrapper to update '/usr/lib/live/build/...' scripts.
+# Globals:
+#   SCRIPT_BASEPATH
+#   VAR_BUILD_LOG
+#   VAR_HANDLER_BUILD_DIR
+# Arguments:
+#   None
+# Returns:
+#   0: on success
+#######################################
+lb_ciss_upgrade() {
+  printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 %s starting ... \e[0m\n" "${BASH_SOURCE[0]}"
+
+  if [[ ! -e /usr/lib/live/build/binary_rootfs.original ]]; then
+    cp /usr/lib/live/build/binary_rootfs /usr/lib/live/build/binary_rootfs.original
+    chmod 0444 /usr/lib/live/build/binary_rootfs.original
+  fi
+
+  rm -f /usr/lib/live/build/binary_rootfs
+  install -m 0755 -o root -g root "${VAR_WORKDIR}/usr/lib/live/build/binary_rootfs.sh" /usr/lib/live/build/binary_rootfs
+
+  printf "\e[92m++++ ++++ ++++ ++++ ++++ ++++ ++ ✅ %s successfully applied. \e[0m\n" "${BASH_SOURCE[0]}"
+
+  return 0
+}
+### Prevents accidental 'unset -f'.
+# shellcheck disable=SC2034
+readonly -f lb_ciss_upgrade
+# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

lib/lib_lb_config_write_trixie.sh

@@ -124,9 +124,7 @@ debootstrap
 debootstrap/*
 root/.wget-hsts
 tmp/*
-usr/lib/firmware/amd/*
 usr/lib/firmware/amd-ucode/*
-usr/lib/firmware/amdtee/*
 usr/lib/firmware/intel-ucode/*
 var/cache/apt/pkgcache.bin
 var/cache/apt/srcpkgcache.bin