V8.13.294.2025.10.28

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/0000_basic_chroot_setup.chroot

@@ -201,10 +201,11 @@ apt-get update -qq
 apt-get install -y --no-install-suggests libpam-systemd
 
 if [[ -f /root/.architecture ]]; then
-  apt-get install -y --no-install-suggests amd64-microcode intel-microcode
-fi
 
-[[ -f /root/.architecture ]] && rm -f /root/.architecture
+  apt-get install -y --no-install-suggests amd64-microcode intel-microcode
+  rm -f /root/.architecture
+
+fi
 
 mkdir -p /root/.ciss/dlb/{backup,log}
 chmod 0700 /root/.ciss/dlb/{backup,log}

config/hooks/live/0001_initramfs_modules.chroot

@@ -300,10 +300,10 @@ COMPRESS=zstd
 # Defaults vary by compressor.
 #
 # Valid values are:
-# 1-9 for gzip|bzip2|lzma|lzop
-# 0-9 for  lz4|xz
-# 0-19 for zstd
-COMPRESSLEVEL=10
+# 1...9 for gzip|bzip2|lzma|lzop
+# 0...9 for  lz4|xz
+# 0...19 for zstd
+COMPRESSLEVEL=16
 
 #
 # DEVICE: ...

config/hooks/live/0002_verify_checksums.chroot

@@ -111,12 +111,12 @@ Verify_checksums() {
       if [ -e "${_CHECKSUM}" ]; then
 
         #echo "Found ${_CHECKSUM}..." > "${_TTY}"
-        log_begin_msg "Found ${_CHECKSUM}..."
+        printf "Found %s...\n" "${_CHECKSUM}"
 
         if [ -e "/bin/${_DIGEST}sum" ]; then
 
           #echo "Checking ${_CHECKSUM}..." > "${_TTY}"
-          log_begin_msg "Checking ${_CHECKSUM}..."
+          printf "Checking %s...\n" "${_CHECKSUM}"
 
           # Verify checksums
           # shellcheck disable=SC2312
@@ -129,7 +129,7 @@ Verify_checksums() {
         else
 
           #echo "Not found /bin/${_DIGEST}sum..." > "${_TTY}"
-          log_begin_msg "Not found /bin/${_DIGEST}sum...."
+          printf "Not found /bin/%ssum....\n" "${_DIGEST}"
 
         fi
 
@@ -144,7 +144,7 @@ Verify_checksums() {
   case "${_RETURN}" in
 
     0)
-      log_success_msg "Verification of ${_CHECKSUMS[*]} successful; continuing booting in 8 seconds."
+      log_success_msg "Verification of checksums successful; continuing booting in 8 seconds."
       sleep 8
       return 0
       ;;

config/hooks/live/0003_cdi_autostart.chroot

@@ -0,0 +1,52 @@
+#!/bin/bash
+# SPDX-Version: 3.0
+# SPDX-CreationInfo: 2025-10-11; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
+# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
+# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-FileType: SOURCE
+# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
+# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
+# SPDX-PackageName: CISS.debian.live.builder
+# SPDX-Security-Contact: security@coresecret.eu
+set -Ceuo pipefail
+
+printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 '%s' starting ... \e[0m\n" "${0}"
+
+if [[ -f /root/.cdi ]]; then
+
+  cat << EOF >| /etc/systemd/system/cdi-starter.service
+[Unit]
+Description=CISS CDI post-boot starter
+Documentation=https://git.coresecret.dev/msw/CISS.debian.live.builder.git
+ConditionPathExists=/usr/local/sbin/9999-cdi-starter.sh
+After=live-config.service systemd-user-sessions.service getty.target
+Wants=network-online.target
+After=network-online.target NetworkManager-wait-online.service systemd-networkd-wait-online.service
+
+[Service]
+Type=idle
+ExecStart=/usr/local/sbin/9999-cdi-starter.sh
+TimeoutStartSec=1min
+Nice=5
+IOSchedulingClass=best-effort
+Environment=LANG=C.UTF-8
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+  chmod 0644 /etc/systemd/system/cdi-starter.service
+
+  systemctl enable cdi-starter.service
+
+  rm -f /root/.cdi
+
+fi
+
+printf "\e[92m++++ ++++ ++++ ++++ ++++ ++++ ++ ✅ '%s' applied successfully. \e[0m\n" "${0}"
+
+exit 0
+# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh