From ea8845c95b550eb305bff3f48d7f755961e89f291d051f56017a3735027f0d1f Mon Sep 17 00:00:00 2001 From: "Marc S. Weidner" Date: Fri, 24 Oct 2025 22:12:52 +0100 Subject: [PATCH] V8.13.288.2025.10.24 Signed-off-by: Marc S. Weidner --- .../trigger/t_generate_PRIVATE_trixie_1.yaml | 2 +- config/hooks/live/0865_yq.chroot | 26 +++++++++++++++++++ config/package-lists/live.list.common.chroot | 1 - docs/CHANGELOG.md | 2 ++ 4 files changed, 29 insertions(+), 2 deletions(-) create mode 100644 config/hooks/live/0865_yq.chroot diff --git a/.gitea/trigger/t_generate_PRIVATE_trixie_1.yaml b/.gitea/trigger/t_generate_PRIVATE_trixie_1.yaml index eacc55c..00bece4 100644 --- a/.gitea/trigger/t_generate_PRIVATE_trixie_1.yaml +++ b/.gitea/trigger/t_generate_PRIVATE_trixie_1.yaml @@ -10,6 +10,6 @@ # SPDX-Security-Contact: security@coresecret.eu build: - counter: 1024 + counter: 1023 version: V8.13.288.2025.10.24 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml diff --git a/config/hooks/live/0865_yq.chroot b/config/hooks/live/0865_yq.chroot new file mode 100644 index 0000000..6325c79 --- /dev/null +++ b/config/hooks/live/0865_yq.chroot @@ -0,0 +1,26 @@ +#!/bin/bash +# SPDX-Version: 3.0 +# SPDX-CreationInfo: 2025-10-11; WEIDNER, Marc S.; +# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git +# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency +# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; +# SPDX-FileType: SOURCE +# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0 +# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework. +# SPDX-PackageName: CISS.debian.live.builder +# SPDX-Security-Contact: security@coresecret.eu +set -Ceuo pipefail + +printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 '%s' starting ... \e[0m\n" "${0}" + +[[ -r /root/ciss_xdg_tmp.sh ]] && . /root/ciss_xdg_tmp.sh +export DEBIAN_FRONTEND="noninteractive" + +wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 -O /usr/local/bin/yq && chmod +x /usr/local/bin/yq + +yq --version + +printf "\e[92m++++ ++++ ++++ ++++ ++++ ++++ ++ ✅ '%s' applied successfully. \e[0m\n" "${0}" + +exit 0 +# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh diff --git a/config/package-lists/live.list.common.chroot b/config/package-lists/live.list.common.chroot index b0b79ed..75542ec 100644 --- a/config/package-lists/live.list.common.chroot +++ b/config/package-lists/live.list.common.chroot @@ -146,7 +146,6 @@ whois wngerman xfsprogs xz-utils -yq zip zsh diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index f81b81f..674f40b 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -14,12 +14,14 @@ include_toc: true ## V8.13.288.2025.10.24 * **Added**: Preparations for CISS and PhysNet primordial-workflow™. +* **Added**: [0865_yq.chroot](../config/hooks/live/0865_yq.chroot)Preparations for CISS and PhysNet primordial-workflow™. * **Updated**: [0001_initramfs_modules.chroot](../config/hooks/live/0001_initramfs_modules.chroot) + nftables mods * **Updated**: [9950_hardening_fail2ban.chroot](../config/hooks/live/9950_hardening_fail2ban.chroot) + banaction = nftables-* * **Updated**: [0900_ufw_setup.chroot](../config/hooks/live/0900_ufw_setup.chroot) changed var injection * **Updated**: [9950_hardening_fail2ban.chroot](../config/hooks/live/9950_hardening_fail2ban.chroot) changed var injection * **Updated**: [sshd_config](../config/includes.chroot/etc/ssh/sshd_config) changed var injection * **Updated**: [lib_hardening_ultra.sh](../lib/lib_hardening_ultra.sh) changed var injection +* **Removed**: [live.list.common.chroot](../config/package-lists/live.list.common.chroot) - yq ## V8.13.280.2025.10.23 * **Updated**: [9996_auditd.chroot](../config/hooks/live/9996_auditd.chroot) + 10-ciss-noise-floor.rules