msw/CISS.debian.live.builder
SHA256
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity

V8.13.294.2025.10.28
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m42s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-10-28 13:39:37 +01:00
parent f00c8fd690
commit 1540036410
5 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ciss_live_builder.sh
View File

@@ -219,7 +219,7 @@ fi
check_hooks check_hooks
hardening_ssh hardening_ssh
#ciss_upgrades ciss_upgrades
lb_config_start lb_config_start
if [[ "${VAR_SUITE}" == "bookworm" ]]; then if [[ "${VAR_SUITE}" == "bookworm" ]]; then

9
config/hooks/live/0000_basic_chroot_setup.chroot
View File

@@ -49,6 +49,9 @@ EOF
return 0 return 0
} }
### Prevents accidental 'unset -f'.
# shellcheck disable=SC2034
readonly -f generate_ciss_xdg_profile
####################################### #######################################
# Generates '/etc/profile.d/ciss-xdg.sh' # Generates '/etc/profile.d/ciss-xdg.sh'
@@ -124,6 +127,9 @@ EOF
return 0 return 0
} }
### Prevents accidental 'unset -f'.
# shellcheck disable=SC2034
readonly -f generate_ciss_xdg_sh
####################################### #######################################
# Generates '/root/ciss_xdg_tmp.sh' # Generates '/root/ciss_xdg_tmp.sh'
@@ -181,6 +187,9 @@ EOF
return 0 return 0
} }
### Prevents accidental 'unset -f'.
# shellcheck disable=SC2034
readonly -f generate_ciss_xdg_tmp_sh
generate_ciss_xdg_profile generate_ciss_xdg_profile
generate_ciss_xdg_sh generate_ciss_xdg_sh

2
config/package-lists/live.list.amd64.chroot
View File

@@ -9,6 +9,8 @@
# SPDX-PackageName: CISS.debian.live.builder # SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu # SPDX-Security-Contact: security@coresecret.eu
amd64-microcode
grub-efi-amd64-signed grub-efi-amd64-signed
intel-microcode
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

10
lib/lib_lb_config_write_trixie.sh
View File

@@ -115,10 +115,12 @@ lb_config_write_trixie() {
### https://wiki.debian.org/ReproducibleInstalls/LiveImages ### https://wiki.debian.org/ReproducibleInstalls/LiveImages
### https://reproducible-builds.org/docs/system-images/ ### https://reproducible-builds.org/docs/system-images/
### https://gitlab.tails.boum.org/tails/tails/-/blob/stable/config/chroot_local-includes/usr/share/tails/build/mksquashfs-excludes ### https://gitlab.tails.boum.org/tails/tails/-/blob/stable/config/chroot_local-includes/usr/share/tails/build/mksquashfs-excludes
#mkdir -p "${VAR_HANDLER_BUILD_DIR}/config/rootfs" mkdir -p "${VAR_HANDLER_BUILD_DIR}/config/rootfs"
#cat << 'EOF' >| "${VAR_HANDLER_BUILD_DIR}/config/rootfs/excludes" cat << 'EOF' >| "${VAR_HANDLER_BUILD_DIR}/config/rootfs/excludes"
#EOF root/.wget-hsts
#chmod 0644 "${VAR_HANDLER_BUILD_DIR}/config/rootfs/excludes" tmp/*
EOF
chmod 0644 "${VAR_HANDLER_BUILD_DIR}/config/rootfs/excludes"
printf "\e[92m++++ ++++ ++++ ++++ ++++ ++++ ++ ✅ Writing new config done.\e[0m\n" printf "\e[92m++++ ++++ ++++ ++++ ++++ ++++ ++ ✅ Writing new config done.\e[0m\n"

3
scripts/9999-cdi-starter
View File

@@ -119,9 +119,12 @@ main() {
declare var_log="" var_mode="" declare var_log="" var_mode=""
var_log="/root/.ciss/cdi/log/9999-cdi-starter_$(date +"%Y-%m-%d_%H-%M-%S").log" var_log="/root/.ciss/cdi/log/9999-cdi-starter_$(date +"%Y-%m-%d_%H-%M-%S").log"
touch "${var_log}"
### Prepare logging. ### Prepare logging.
install -d -m 0700 /root/.ciss/cdi
install -d -m 0700 /root/.ciss/cdi/log install -d -m 0700 /root/.ciss/cdi/log
# shellcheck disable=SC2312 # shellcheck disable=SC2312
exec > >(tee -a "${var_log}") 2>&1 exec > >(tee -a "${var_log}") 2>&1