V8.13.512.2025.11.28

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/9999_zzzz.chroot

@@ -20,7 +20,7 @@ rm -f  /root/ciss_xdg_tmp.sh
 rm -fr /root/build
 find /etc /home /root /usr /var -type f -name '.keep' -print -delete
 
-### Securing '/root/.ciss' ----------------------------------------------------------------------------------------------------------
+### Securing '/root/.ciss' -----------------------------------------------------------------------------------------------------
 find /root/.ciss -type d -exec chmod 0700 {} +
 find /root/.ciss -type f -exec chmod 0440 {} +
 
@@ -30,6 +30,10 @@ find /etc/ciss/keys -type f -exec chmod 0440 {} +
 ### Regenerate the initramfs for the live system kernel ------------------------------------------------------------------------
 update-initramfs -u -k all -v
 
+### Prepare '/etc/resolv.conf' for systemd-networkd ----------------------------------------------------------------------------
+rm -f /etc/resolv.conf
+ln -s /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
+
 ### Determine the canonical systemd unit dir inside chroot ---------------------------------------------------------------------
 if [[ -d /lib/systemd/system ]]; then
 

config/includes.chroot/etc/resolv.conf

@@ -1,16 +0,0 @@
-# bashsupport disable=BP5007
-
-# SPDX-Version: 3.0
-# SPDX-CreationInfo: 2025-11-26; WEIDNER, Marc S.; <msw@coresecret.dev>
-# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
-# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
-# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
-# SPDX-FileType: SOURCE
-# SPDX-License-Identifier: LicenseRef-CNCL-1.1 OR LicenseRef-CCLA-1.1
-# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
-# SPDX-PackageName: CISS.debian.live.builder
-# SPDX-Security-Contact: security@coresecret.eu
-
-ln -s /run/systemd/resolve/stub-resolv.conf /run/systemd/resolve/stub-resolv.conf
-
-# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=conf

docs/CHANGELOG.md

@@ -17,7 +17,6 @@ include_toc: true
 * **Global**: Transition of license agreements to: 
   * [CCLA-1.1.txt](LICENSES/CCLA-1.1.txt)
   * [CNCL-1.1.txt](LICENSES/CNCL-1.1.txt)
-* **Added**: [resolv.conf](../config/includes.chroot/etc/resolv.conf)
 * **Added**: [90-ciss-ethernet.network](../config/includes.chroot/etc/systemd/network/90-ciss-ethernet.network)
 * **Added**: [90-ciss-networkd.preset](../config/includes.chroot/usr/lib/systemd/system-preset/90-ciss-networkd.preset)
 * **Changed**: [unlock_wrapper.sh](../config/includes.chroot/etc/initramfs-tools/files/unlock_wrapper.sh)