V8.13.294.2025.10.28

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/0000_basic_chroot_setup.chroot

@@ -49,6 +49,9 @@ EOF
 
   return 0
 }
+### Prevents accidental 'unset -f'.
+# shellcheck disable=SC2034
+readonly -f generate_ciss_xdg_profile
 
 #######################################
 # Generates '/etc/profile.d/ciss-xdg.sh'
@@ -124,6 +127,9 @@ EOF
 
   return 0
 }
+### Prevents accidental 'unset -f'.
+# shellcheck disable=SC2034
+readonly -f generate_ciss_xdg_sh
 
 #######################################
 # Generates '/root/ciss_xdg_tmp.sh'
@@ -181,6 +187,9 @@ EOF
 
   return 0
 }
+### Prevents accidental 'unset -f'.
+# shellcheck disable=SC2034
+readonly -f generate_ciss_xdg_tmp_sh
 
 generate_ciss_xdg_profile
 generate_ciss_xdg_sh

config/package-lists/live.list.amd64.chroot

@@ -9,6 +9,8 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
+amd64-microcode
 grub-efi-amd64-signed
+intel-microcode
 
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh