Compare commits
53 Commits
e42acb0bff
...
v8.03.768-
| Author | SHA256 | Date | |
|---|---|---|---|
|
3e5681cb90
|
|||
|
c21a25f938
|
|||
|
a5552f7079
|
|||
|
999fa7e11e
|
|||
|
7d8bab47ff
|
|||
|
6e33d74922
|
|||
|
b718b1e8c8
|
|||
|
c7d5407119
|
|||
|
2f25ad8e31
|
|||
|
ec5f343bfa
|
|||
|
22220bb3e0
|
|||
|
ad7a12ea92
|
|||
|
03f0b4df09
|
|||
|
0ef7fcb146
|
|||
|
ea2a7627e2
|
|||
|
b38e0c8476
|
|||
|
8409a8eb8a
|
|||
|
2b73132851
|
|||
|
1769e13708
|
|||
|
7eb8fb8754
|
|||
|
1fda52e948
|
|||
|
6d12da9566
|
|||
|
2b8deafabc
|
|||
|
3a8e624f57
|
|||
|
eac8f62459
|
|||
|
fadece63ca
|
|||
|
68eb879c8a
|
|||
|
64689d00b2
|
|||
|
7172b4fee9
|
|||
|
ec6066f620
|
|||
|
e164a039fa
|
|||
|
87b23a87a0
|
|||
|
4be9861403
|
|||
|
3913af49e3
|
|||
|
7aa82e060b
|
|||
|
9d40681c01
|
|||
|
c5ddadc93e
|
|||
|
77b73f8c5f
|
|||
|
da8cf0287d
|
|||
|
301513c07e
|
|||
|
31ece936c9
|
|||
|
a34dbb41da
|
|||
|
bc58199d11
|
|||
|
7d6a048f17
|
|||
|
c0ea15d1b5
|
|||
|
5345c44493
|
|||
|
3ce250c1f1
|
|||
|
52fecb8b6f
|
|||
|
5175c8245a
|
|||
|
680ce149d7
|
|||
|
a37ef3e143
|
|||
|
77fd128dbc
|
|||
|
70a97b02fa
|
@@ -9,39 +9,41 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
✅
|
✅
|
||||||
🔧
|
❌
|
||||||
|
⚠️
|
||||||
|
🚫
|
||||||
|
🔐
|
||||||
|
🔒
|
||||||
🔑
|
🔑
|
||||||
|
✍️
|
||||||
🖥️
|
🖥️
|
||||||
|
🔄
|
||||||
|
🔁
|
||||||
|
🌌
|
||||||
|
🔵
|
||||||
|
💙
|
||||||
|
🔍
|
||||||
|
💡
|
||||||
|
🔧
|
||||||
🛠️
|
🛠️
|
||||||
|
🏗
|
||||||
|
⚙️
|
||||||
|
📐
|
||||||
|
🧪
|
||||||
|
📩
|
||||||
📥
|
📥
|
||||||
📦
|
📦
|
||||||
📑
|
📑
|
||||||
📂
|
📂
|
||||||
🔒
|
📀
|
||||||
🔐
|
|
||||||
⚙️
|
|
||||||
❌
|
|
||||||
🌌
|
|
||||||
🎉
|
🎉
|
||||||
🖥️
|
|
||||||
📂
|
|
||||||
📩
|
|
||||||
🔵
|
|
||||||
😺
|
😺
|
||||||
🧪
|
📉
|
||||||
📊
|
📊
|
||||||
🧾
|
🧾
|
||||||
📀
|
📋
|
||||||
📉
|
|
||||||
🕑
|
🕑
|
||||||
🧠
|
🧠
|
||||||
📅
|
📅
|
||||||
💙
|
|
||||||
🚫
|
|
||||||
🔄
|
|
||||||
🔁
|
|
||||||
📋
|
|
||||||
🎯
|
🎯
|
||||||
🔍
|
|
||||||
💡
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
@@ -25,7 +25,7 @@ body:
|
|||||||
attributes:
|
attributes:
|
||||||
label: "Version"
|
label: "Version"
|
||||||
description: "Which version are you running? Use `./ciss_live_builder.sh -v`."
|
description: "Which version are you running? Use `./ciss_live_builder.sh -v`."
|
||||||
placeholder: "e.g., Master V8.03.644.2025.06.07"
|
placeholder: "e.g., Master V8.03.768.2025.06.17"
|
||||||
validations:
|
validations:
|
||||||
required: true
|
required: true
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
FROM debian:bookworm
|
FROM debian:bookworm
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
name: 🔁 Render README.md to README.html.
|
name: 🔁 Render README.md to README.html.
|
||||||
|
|
||||||
@@ -215,15 +215,15 @@ jobs:
|
|||||||
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
||||||
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
||||||
|
|
||||||
COMMIT_MSG="DEPLOY BOT: 🔁 Auto-Generate *.html from *.md [skip ci]
|
COMMIT_MSG="DEPLOY BOT : 🔁 Auto-Generate *.html from *.md [skip ci]
|
||||||
|
|
||||||
${CI_HEADER}
|
${CI_HEADER}
|
||||||
|
|
||||||
Generated at: ${TIMESTAMP_UTC}
|
Generated at : ${TIMESTAMP_UTC}
|
||||||
Runner Host : ${HOSTNAME}
|
Runner Host : ${HOSTNAME}
|
||||||
Workflow ID : ${WORKFLOW_ID}
|
Workflow ID : ${WORKFLOW_ID}
|
||||||
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
||||||
"
|
"
|
||||||
|
|
||||||
echo "🔏 Commit message :"
|
echo "🔏 Commit message :"
|
||||||
echo "${COMMIT_MSG}"
|
echo "${COMMIT_MSG}"
|
||||||
|
|||||||
@@ -11,5 +11,5 @@
|
|||||||
|
|
||||||
build:
|
build:
|
||||||
counter: 1023
|
counter: 1023
|
||||||
version: V8.03.512.2025.06.06
|
version: V8.03.768.2025.06.17
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
||||||
|
|||||||
@@ -11,5 +11,5 @@
|
|||||||
|
|
||||||
build:
|
build:
|
||||||
counter: 1023
|
counter: 1023
|
||||||
version: V8.03.644.2025.06.07
|
version: V8.03.768.2025.06.17
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
||||||
|
|||||||
@@ -11,5 +11,5 @@
|
|||||||
|
|
||||||
build:
|
build:
|
||||||
counter: 1023
|
counter: 1023
|
||||||
version: V8.03.512.2025.06.06
|
version: V8.03.768.2025.06.17
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
||||||
|
|||||||
@@ -11,5 +11,5 @@
|
|||||||
|
|
||||||
build:
|
build:
|
||||||
counter: 1023
|
counter: 1023
|
||||||
version: V8.03.644.2025.06.07
|
version: V8.03.768.2025.06.17
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
name: 🔐 Generating a Private Live ISO FLV 0.
|
name: 🔐 Generating a Private Live ISO FLV 0.
|
||||||
|
|
||||||
@@ -26,7 +26,7 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
generate-private-ciss-debian-live-iso:
|
generate-private-ciss-debian-live-iso:
|
||||||
name: 🔐 Generating a Private Live ISO FLV 0.
|
name: 🔐 Generating a Private Live ISO FLV 0.
|
||||||
runs-on: ciss.debian.live.builder
|
runs-on: ciss.debian.live.builder.iso.generator
|
||||||
|
|
||||||
### Run all steps inside Debian Bookworm
|
### Run all steps inside Debian Bookworm
|
||||||
container:
|
container:
|
||||||
@@ -270,7 +270,7 @@ jobs:
|
|||||||
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
||||||
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
|
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
|
||||||
./ciss_live_builder.sh \
|
./ciss_live_builder.sh \
|
||||||
--autobuild=6.12.22+bpo-amd64 \
|
--autobuild=6.12.30+bpo-amd64 \
|
||||||
--architecture amd64 \
|
--architecture amd64 \
|
||||||
--build-directory /opt/livebuild \
|
--build-directory /opt/livebuild \
|
||||||
--control "${timestamp}" \
|
--control "${timestamp}" \
|
||||||
@@ -459,14 +459,14 @@ jobs:
|
|||||||
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
||||||
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
||||||
|
|
||||||
COMMIT_MSG="DEPLOY BOT: 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
|
COMMIT_MSG="DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
|
||||||
|
|
||||||
${CI_HEADER}
|
${CI_HEADER}
|
||||||
|
|
||||||
Generated at: ${TIMESTAMP_UTC}
|
Generated at : ${TIMESTAMP_UTC}
|
||||||
Runner Host : ${HOSTNAME}
|
Runner Host : ${HOSTNAME}
|
||||||
Workflow ID : ${WORKFLOW_ID}
|
Workflow ID : ${WORKFLOW_ID}
|
||||||
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
||||||
"
|
"
|
||||||
|
|
||||||
echo "🔏 Commit message :"
|
echo "🔏 Commit message :"
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.512.2025.06.06
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
name: 🔐 Generating a Private Live ISO FLV 1.
|
name: 🔐 Generating a Private Live ISO FLV 1.
|
||||||
|
|
||||||
@@ -270,7 +270,7 @@ jobs:
|
|||||||
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
||||||
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
|
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
|
||||||
./ciss_live_builder.sh \
|
./ciss_live_builder.sh \
|
||||||
--autobuild=6.12.22+bpo-amd64 \
|
--autobuild=6.12.30+bpo-amd64 \
|
||||||
--architecture amd64 \
|
--architecture amd64 \
|
||||||
--build-directory /opt/livebuild \
|
--build-directory /opt/livebuild \
|
||||||
--control "${timestamp}" \
|
--control "${timestamp}" \
|
||||||
@@ -456,14 +456,14 @@ jobs:
|
|||||||
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
||||||
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
||||||
|
|
||||||
COMMIT_MSG="DEPLOY BOT: 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
|
COMMIT_MSG="DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
|
||||||
|
|
||||||
${CI_HEADER}
|
${CI_HEADER}
|
||||||
|
|
||||||
Generated at: ${TIMESTAMP_UTC}
|
Generated at : ${TIMESTAMP_UTC}
|
||||||
Runner Host : ${HOSTNAME}
|
Runner Host : ${HOSTNAME}
|
||||||
Workflow ID : ${WORKFLOW_ID}
|
Workflow ID : ${WORKFLOW_ID}
|
||||||
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
||||||
"
|
"
|
||||||
|
|
||||||
echo "🔏 Commit message :"
|
echo "🔏 Commit message :"
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
name: 💙 Generating a PUBLIC Live ISO.
|
name: 💙 Generating a PUBLIC Live ISO.
|
||||||
|
|
||||||
@@ -26,7 +26,7 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
generate-private-ciss-debian-live-iso:
|
generate-private-ciss-debian-live-iso:
|
||||||
name: 💙 Generating a PUBLIC Live ISO.
|
name: 💙 Generating a PUBLIC Live ISO.
|
||||||
runs-on: ciss.debian.live.builder
|
runs-on: ciss.debian.live.builder.iso.generator
|
||||||
|
|
||||||
### Run all steps inside Debian Bookworm
|
### Run all steps inside Debian Bookworm
|
||||||
container:
|
container:
|
||||||
@@ -271,7 +271,7 @@ jobs:
|
|||||||
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
||||||
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
|
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
|
||||||
./ciss_live_builder.sh \
|
./ciss_live_builder.sh \
|
||||||
--autobuild=6.12.22+bpo-amd64 \
|
--autobuild=6.12.30+bpo-amd64 \
|
||||||
--architecture amd64 \
|
--architecture amd64 \
|
||||||
--build-directory /opt/livebuild \
|
--build-directory /opt/livebuild \
|
||||||
--control "${timestamp}" \
|
--control "${timestamp}" \
|
||||||
@@ -456,14 +456,14 @@ jobs:
|
|||||||
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
||||||
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
||||||
|
|
||||||
COMMIT_MSG="DEPLOY BOT: 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
|
COMMIT_MSG="DEPLOY BOT : 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
|
||||||
|
|
||||||
${CI_HEADER}
|
${CI_HEADER}
|
||||||
|
|
||||||
Generated at: ${TIMESTAMP_UTC}
|
Generated at : ${TIMESTAMP_UTC}
|
||||||
Runner Host : ${HOSTNAME}
|
Runner Host : ${HOSTNAME}
|
||||||
Workflow ID : ${WORKFLOW_ID}
|
Workflow ID : ${WORKFLOW_ID}
|
||||||
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
||||||
"
|
"
|
||||||
|
|
||||||
echo "🔏 Commit message :"
|
echo "🔏 Commit message :"
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
# Gitea Workflow: Shell-Script Linting
|
# Gitea Workflow: Shell-Script Linting
|
||||||
#
|
#
|
||||||
@@ -313,14 +313,14 @@ jobs:
|
|||||||
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
||||||
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
||||||
|
|
||||||
COMMIT_MSG="DEPLOY BOT: 🛡️ Shell Script Linting [skip ci]
|
COMMIT_MSG="DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
|
||||||
|
|
||||||
${CI_HEADER}
|
${CI_HEADER}
|
||||||
|
|
||||||
Generated at: ${TIMESTAMP_UTC}
|
Generated at : ${TIMESTAMP_UTC}
|
||||||
Runner Host : ${HOSTNAME}
|
Runner Host : ${HOSTNAME}
|
||||||
Workflow ID : ${WORKFLOW_ID}
|
Workflow ID : ${WORKFLOW_ID}
|
||||||
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
||||||
"
|
"
|
||||||
|
|
||||||
echo "🔏 Commit message :"
|
echo "🔏 Commit message :"
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
name: 🛡️ Retrieve DNSSEC status of coresecret.dev.
|
name: 🛡️ Retrieve DNSSEC status of coresecret.dev.
|
||||||
|
|
||||||
@@ -192,14 +192,14 @@ jobs:
|
|||||||
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
||||||
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
||||||
|
|
||||||
COMMIT_MSG="DEPLOY BOT: 🛡️ Auto-Generate DNSSEC Status [skip ci]
|
COMMIT_MSG="DEPLOY BOT : 🛡️ Auto-Generate DNSSEC Status [skip ci]
|
||||||
|
|
||||||
${CI_HEADER}
|
${CI_HEADER}
|
||||||
|
|
||||||
Generated at: ${TIMESTAMP_UTC}
|
Generated at : ${TIMESTAMP_UTC}
|
||||||
Runner Host : ${HOSTNAME}
|
Runner Host : ${HOSTNAME}
|
||||||
Workflow ID : ${WORKFLOW_ID}
|
Workflow ID : ${WORKFLOW_ID}
|
||||||
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
||||||
"
|
"
|
||||||
|
|
||||||
echo "🔏 Commit message :"
|
echo "🔏 Commit message :"
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
name: 🔁 Render Graphviz Diagrams.
|
name: 🔁 Render Graphviz Diagrams.
|
||||||
|
|
||||||
@@ -185,14 +185,14 @@ jobs:
|
|||||||
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
|
||||||
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
|
||||||
|
|
||||||
COMMIT_MSG="DEPLOY BOT: 🔁 Auto-Generate PNG from *.dot. [skip ci]
|
COMMIT_MSG="DEPLOY BOT : 🔁 Auto-Generate PNG from *.dot. [skip ci]
|
||||||
|
|
||||||
${CI_HEADER}
|
${CI_HEADER}
|
||||||
|
|
||||||
Generated at: ${TIMESTAMP_UTC}
|
Generated at : ${TIMESTAMP_UTC}
|
||||||
Runner Host : ${HOSTNAME}
|
Runner Host : ${HOSTNAME}
|
||||||
Workflow ID : ${WORKFLOW_ID}
|
Workflow ID : ${WORKFLOW_ID}
|
||||||
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}
|
||||||
"
|
"
|
||||||
|
|
||||||
echo "🔏 Commit message :"
|
echo "🔏 Commit message :"
|
||||||
|
|||||||
@@ -15,5 +15,5 @@ properties_SPDX-License-Identifier="EUPL-1.2 OR LicenseRef-CCLA-1.0"
|
|||||||
properties_SPDX-LicenseComment="This file is part of the CISS.debian.installer.secure framework."
|
properties_SPDX-LicenseComment="This file is part of the CISS.debian.installer.secure framework."
|
||||||
properties_SPDX-PackageName="CISS.debian.live.builder"
|
properties_SPDX-PackageName="CISS.debian.live.builder"
|
||||||
properties_SPDX-Security-Contact="security@coresecret.eu"
|
properties_SPDX-Security-Contact="security@coresecret.eu"
|
||||||
properties_version="V8.03.644.2025.06.07"
|
properties_version="V8.03.768.2025.06.17"
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=conf
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=conf
|
||||||
@@ -6,7 +6,7 @@ Creator: Person: Marc S. Weidner (Centurion Intelligence Consulting Agency)
|
|||||||
Created: 2025-05-07T12:00:00Z
|
Created: 2025-05-07T12:00:00Z
|
||||||
Package: CISS.debian.live.builder
|
Package: CISS.debian.live.builder
|
||||||
PackageName: CISS.debian.live.builder
|
PackageName: CISS.debian.live.builder
|
||||||
PackageVersion: Master V8.03.644.2025.06.07
|
PackageVersion: Master V8.03.768.2025.06.17
|
||||||
PackageSupplier: Organization: Centurion Intelligence Consulting Agency
|
PackageSupplier: Organization: Centurion Intelligence Consulting Agency
|
||||||
PackageDownloadLocation: https://git.coresecret.dev/msw/CISS.debian.live.builder
|
PackageDownloadLocation: https://git.coresecret.dev/msw/CISS.debian.live.builder
|
||||||
PackageHomePage: https://git.coresecret.dev/msw/CISS.debian.live.builder
|
PackageHomePage: https://git.coresecret.dev/msw/CISS.debian.live.builder
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
This file was automatically generated by the DEPLOY BOT on: "2025-06-07T07:40:35Z".
|
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T17:03:33Z".
|
||||||
|
|
||||||
✅ The last linter check was successful. ✅
|
✅ The last linter check was successful. ✅
|
||||||
|
|
||||||
|
|||||||
@@ -9,19 +9,19 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
This file was automatically generated by the DEPLOY BOT on: "2025-06-06T07:24:28Z".
|
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T14:54:34Z".
|
||||||
|
|
||||||
CISS.debian.live.builder ISO :
|
CISS.debian.live.builder ISO :
|
||||||
"ciss-debian-live-2025_06_06T06_47_26Z-amd64.hybrid.iso"
|
"ciss-debian-live-2025_06_17T14_12_22Z-amd64.hybrid.iso"
|
||||||
CISS.debian.live.builder ISO sha512 :
|
CISS.debian.live.builder ISO sha512 :
|
||||||
"ciss-debian-live-2025_06_06T06_47_26Z-amd64.hybrid.iso.sha512"
|
"ciss-debian-live-2025_06_17T14_12_22Z-amd64.hybrid.iso.sha512"
|
||||||
CISS.debian.live.builder ISO sha512 sign :
|
CISS.debian.live.builder ISO sha512 sign :
|
||||||
-----BEGIN PGP SIGNATURE-----
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
|
||||||
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaEKXrAAKCRA85KY4hzOw
|
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaFGBqgAKCRA85KY4hzOw
|
||||||
IRH2AQDbnU6pP/MRQ3ixd4ir62Ocyr3lr1b2+2HRrpJeZceXYAEA1T/DlrVzQ/wK
|
IYthAQDYHWvmctdnn39QGj0cdLgPkqMd3JTtC+goiM2BO6UAoQD/SM4ObHSBQ9ZO
|
||||||
V2018OQFllEu7iWdZuJpof4v8XIjRAo=
|
tQ5Wj5SzmMyMqFB9UIFizaEH0RcBEgk=
|
||||||
=0Ter
|
=zTxU
|
||||||
-----END PGP SIGNATURE-----
|
-----END PGP SIGNATURE-----
|
||||||
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
|
||||||
|
|||||||
@@ -9,19 +9,19 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
This file was automatically generated by the DEPLOY BOT on: "2025-06-06T08:21:24Z".
|
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T13:12:03Z".
|
||||||
|
|
||||||
CISS.debian.live.builder ISO :
|
CISS.debian.live.builder ISO :
|
||||||
"ciss-debian-live-2025_06_06T07_44_50Z-amd64.hybrid.iso"
|
"ciss-debian-live-2025_06_17T12_29_48Z-amd64.hybrid.iso"
|
||||||
CISS.debian.live.builder ISO sha512 :
|
CISS.debian.live.builder ISO sha512 :
|
||||||
"ciss-debian-live-2025_06_06T07_44_50Z-amd64.hybrid.iso.sha512"
|
"ciss-debian-live-2025_06_17T12_29_48Z-amd64.hybrid.iso.sha512"
|
||||||
CISS.debian.live.builder ISO sha512 sign :
|
CISS.debian.live.builder ISO sha512 sign :
|
||||||
-----BEGIN PGP SIGNATURE-----
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
|
||||||
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaEKlBAAKCRA85KY4hzOw
|
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaFFpowAKCRA85KY4hzOw
|
||||||
IY6hAQD6+u+xiH3tiW0LGl9ylO5UayaIuVaXsaP1WDrwmz+QjQD/d1DnDgiLO3xr
|
IQmsAQC7nsyQvaiBPjFjze0arnTSyJ0X45OElMH6vwWeOPCYwgEAgoPURpD9KBWX
|
||||||
01NhQnKrFrn1qbxdc1OyS7N7ZXlZ8gU=
|
TDSR3bhZqdaFTJYAQfguXxDI0wff8Aw=
|
||||||
=6WCt
|
=BqaA
|
||||||
-----END PGP SIGNATURE-----
|
-----END PGP SIGNATURE-----
|
||||||
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
|
||||||
|
|||||||
@@ -9,19 +9,19 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
This file was automatically generated by the DEPLOY BOT on: "2025-06-06T06:38:56Z".
|
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T14:03:33Z".
|
||||||
|
|
||||||
CISS.debian.live.builder ISO :
|
CISS.debian.live.builder ISO :
|
||||||
"ciss-debian-live-2025_06_06T06_02_20Z-amd64.hybrid.iso"
|
"ciss-debian-live-2025_06_17T13_20_50Z-amd64.hybrid.iso"
|
||||||
CISS.debian.live.builder ISO sha512 :
|
CISS.debian.live.builder ISO sha512 :
|
||||||
"ciss-debian-live-2025_06_06T06_02_20Z-amd64.hybrid.iso.sha512"
|
"ciss-debian-live-2025_06_17T13_20_50Z-amd64.hybrid.iso.sha512"
|
||||||
CISS.debian.live.builder ISO sha512 sign :
|
CISS.debian.live.builder ISO sha512 sign :
|
||||||
-----BEGIN PGP SIGNATURE-----
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
|
||||||
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaEKNAAAKCRA85KY4hzOw
|
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaFF1tQAKCRA85KY4hzOw
|
||||||
IR/YAQDJPuDeJaKUBk5zmBD+4k0iX6UAYgSR2URMoq2H8Cyw9AD8CYYEd4jZa/rm
|
IbsWAP9Zk6J3kFfRVASMGnT4h2Joak31pmX5p3Ron4mRDserMgEArhu1axOkGlyI
|
||||||
/ol6GBfPohN5PxbslbOAlzw1e/hn7gk=
|
MPD3Zw/YEZeRSRtGLPFPfEEq8zAmIQo=
|
||||||
=+iwt
|
=b16D
|
||||||
-----END PGP SIGNATURE-----
|
-----END PGP SIGNATURE-----
|
||||||
|
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
gitea: none
|
gitea: none
|
||||||
include_toc: true
|
include_toc: true
|
||||||
---
|
---
|
||||||
[](https://git.coresecret.dev/msw/CISS.debian.live.builder)
|
[](https://git.coresecret.dev/msw/CISS.debian.live.builder)
|
||||||
|
|
||||||
[](https://eupl.eu/1.2/en/)
|
[](https://eupl.eu/1.2/en/)
|
||||||
[](https://opensource.org/license/eupl-1-2)
|
[](https://opensource.org/license/eupl-1-2)
|
||||||
@@ -26,7 +26,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
This shell wrapper automates the creation of a Debian Bookworm live ISO hardened according to the latest best practices in server
|
This shell wrapper automates the creation of a Debian Bookworm live ISO hardened according to the latest best practices in server
|
||||||
and service security. It integrates into your build pipeline to deliver an isolated, robust environment suitable for
|
and service security. It integrates into your build pipeline to deliver an isolated, robust environment suitable for
|
||||||
@@ -37,7 +37,7 @@ changes and made publicly available for download. The latest generic ISO is avai
|
|||||||
|
|
||||||
Check out more:
|
Check out more:
|
||||||
* [CenturionNet Services](https://coresecret.eu/cnet/)
|
* [CenturionNet Services](https://coresecret.eu/cnet/)
|
||||||
* [CenturionDNS Resolver](https://dns.eddns.eu/)
|
* [CenturionDNS Resolver](https://eddns.eu/)
|
||||||
* [CenturionDNS Blocklist](https://dns.eddns.eu/blocklists/centurion_titanium_ultimate.txt)
|
* [CenturionDNS Blocklist](https://dns.eddns.eu/blocklists/centurion_titanium_ultimate.txt)
|
||||||
* [CenturionNet Status](https://uptime.coresecret.eu/)
|
* [CenturionNet Status](https://uptime.coresecret.eu/)
|
||||||
* [CenturionMeet](https://talk.e2ee.li/)
|
* [CenturionMeet](https://talk.e2ee.li/)
|
||||||
|
|||||||
@@ -40,7 +40,8 @@
|
|||||||
|
|
||||||
declare -g VAR_HANDLER_AUTOBUILD="false"
|
declare -g VAR_HANDLER_AUTOBUILD="false"
|
||||||
declare -gr VAR_CONTACT="security@coresecret.eu"
|
declare -gr VAR_CONTACT="security@coresecret.eu"
|
||||||
declare -gr VAR_VERSION="Master V8.03.644.2025.06.07"
|
declare -gr VAR_VERSION="Master V8.03.768.2025.06.17"
|
||||||
|
for dir in /usr/local/sbin /usr/sbin; do case ":${PATH}:" in *":${dir}:"*) ;; *) PATH="${PATH}:${dir}" ;; esac; done; export PATH; unset dir
|
||||||
|
|
||||||
### VERY EARLY CHECK FOR AUTO-BUILD, CONTACT, USAGE, AND VERSION STRING
|
### VERY EARLY CHECK FOR AUTO-BUILD, CONTACT, USAGE, AND VERSION STRING
|
||||||
declare arg
|
declare arg
|
||||||
|
|||||||
@@ -25,8 +25,6 @@ DEBIAN_FRONTEND=noninteractive \
|
|||||||
curl \
|
curl \
|
||||||
debootstrap \
|
debootstrap \
|
||||||
iproute2 \
|
iproute2 \
|
||||||
linux-doc-6.12 \
|
|
||||||
linux-source \
|
|
||||||
ncat \
|
ncat \
|
||||||
nmap \
|
nmap \
|
||||||
ssh \
|
ssh \
|
||||||
|
|||||||
@@ -32,8 +32,8 @@ ReadOnlyPaths=/
|
|||||||
ReadWritePaths=/var/lib/clamav /var/log/clamav /var/run/clamav /run/clamav
|
ReadWritePaths=/var/lib/clamav /var/log/clamav /var/run/clamav /run/clamav
|
||||||
|
|
||||||
MemoryDenyWriteExecute=yes
|
MemoryDenyWriteExecute=yes
|
||||||
MemoryLimit=512M
|
#MemoryLimit=4096M
|
||||||
CPUShares=512
|
#CPUShares=512
|
||||||
|
|
||||||
RestrictAddressFamilies=AF_INET AF_INET6
|
RestrictAddressFamilies=AF_INET AF_INET6
|
||||||
RestrictNamespaces=yes
|
RestrictNamespaces=yes
|
||||||
@@ -58,8 +58,8 @@ ReadOnlyPaths=/
|
|||||||
ReadWritePaths=/var/lib/clamav /var/log/clamav /var/run/clamav
|
ReadWritePaths=/var/lib/clamav /var/log/clamav /var/run/clamav
|
||||||
|
|
||||||
MemoryDenyWriteExecute=yes
|
MemoryDenyWriteExecute=yes
|
||||||
MemoryLimit=512M
|
#MemoryLimit=4096M
|
||||||
CPUShares=512
|
#CPUShares=512
|
||||||
|
|
||||||
RestrictAddressFamilies=AF_INET AF_INET6
|
RestrictAddressFamilies=AF_INET AF_INET6
|
||||||
RestrictNamespaces=yes
|
RestrictNamespaces=yes
|
||||||
|
|||||||
@@ -16,13 +16,13 @@ printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 '%s' starting ... \e[0m\n" "
|
|||||||
|
|
||||||
apt-get update -y
|
apt-get update -y
|
||||||
|
|
||||||
apt-get purge -y exim4 exim4-daemon-light exim4-base exim4-config \
|
apt-get purge -y exim4 exim4-daemon-light exim4-base exim4-config qemu-guest-agent rmail
|
||||||
qemu-guest-agent rmail sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
|
#sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
|
||||||
|
|
||||||
apt-mark hold exim4 exim4-daemon-light exim4-base exim4-config \
|
apt-mark hold exim4 exim4-daemon-light exim4-base exim4-config qemu-guest-agent rmail
|
||||||
qemu-guest-agent rmail sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
|
#sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
|
||||||
|
|
||||||
dpkg --get-selections | grep deinstall >> /tmp/deinstall.log || true
|
dpkg --get-selections | grep deinstall >| /tmp/deinstall.log || true
|
||||||
|
|
||||||
if [[ -s /tmp/deinstall.log ]]; then
|
if [[ -s /tmp/deinstall.log ]]; then
|
||||||
printf "\n"
|
printf "\n"
|
||||||
|
|||||||
@@ -39,6 +39,7 @@ EOF
|
|||||||
|
|
||||||
cp -a /etc/login.defs /root/.ciss/dlb/backup/login.defs.bak
|
cp -a /etc/login.defs /root/.ciss/dlb/backup/login.defs.bak
|
||||||
|
|
||||||
|
sed -ri 's/^(#?LOGIN_TIMEOUT)[[:space:]]+[0-9]+/\1 180/' /etc/login.defs
|
||||||
sed -i 's/UMASK 022/UMASK 077/' /etc/login.defs
|
sed -i 's/UMASK 022/UMASK 077/' /etc/login.defs
|
||||||
sed -i 's/PASS_MAX_DAYS 99999/PASS_MAX_DAYS 16384/' /etc/login.defs
|
sed -i 's/PASS_MAX_DAYS 99999/PASS_MAX_DAYS 16384/' /etc/login.defs
|
||||||
sed -i 's/PASS_MIN_DAYS 0/PASS_MIN_DAYS 1/' /etc/login.defs
|
sed -i 's/PASS_MIN_DAYS 0/PASS_MIN_DAYS 1/' /etc/login.defs
|
||||||
|
|||||||
@@ -51,7 +51,7 @@ difok = 4
|
|||||||
### Minimum acceptable size for the new password (plus one if
|
### Minimum acceptable size for the new password (plus one if
|
||||||
### credits are not disabled, which is the default). (See pam_cracklib manual.)
|
### credits are not disabled, which is the default). (See pam_cracklib manual.)
|
||||||
### Cannot be set to a lower value than 6.
|
### Cannot be set to a lower value than 6.
|
||||||
minlen = 20
|
minlen = 40
|
||||||
|
|
||||||
### dcredit = 0, ucredit = 0, lcredit = 0, ocredit = 0, minclass = 0
|
### dcredit = 0, ucredit = 0, lcredit = 0, ocredit = 0, minclass = 0
|
||||||
### NIST SP 800-63B advises against rigid complexity rules (numbers, symbols, uppercase)
|
### NIST SP 800-63B advises against rigid complexity rules (numbers, symbols, uppercase)
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
### https://www.ssh-audit.com/
|
### https://www.ssh-audit.com/
|
||||||
### ssh -Q cipher | cipher-auth | compression | kex | kex-gss | key | key-cert | key-plain | key-sig | mac | protocol-version | sig
|
### ssh -Q cipher | cipher-auth | compression | kex | kex-gss | key | key-cert | key-plain | key-sig | mac | protocol-version | sig
|
||||||
@@ -51,7 +51,7 @@ MaxSessions 2
|
|||||||
MaxStartups 08:64:16
|
MaxStartups 08:64:16
|
||||||
### Restrict each individual source IP to only 4 unauthenticated connection slot
|
### Restrict each individual source IP to only 4 unauthenticated connection slot
|
||||||
### in the concurrent MaxStartups pool, preventing one IP from monopolizing slots.
|
### in the concurrent MaxStartups pool, preventing one IP from monopolizing slots.
|
||||||
PerSourceMaxStartups 4
|
PerSourceMaxStartups 8
|
||||||
ClientAliveInterval 300
|
ClientAliveInterval 300
|
||||||
ClientAliveCountMax 2
|
ClientAliveCountMax 2
|
||||||
|
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
### Version Master V8.03.644.2025.06.07
|
### Version Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
### https://docs.kernel.org/
|
### https://docs.kernel.org/
|
||||||
### https://github.com/a13xp0p0v/kernel-hardening-checker/
|
### https://github.com/a13xp0p0v/kernel-hardening-checker/
|
||||||
|
|||||||
@@ -10,7 +10,7 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
declare -gr VERSION="Master V8.03.644.2025.06.07"
|
declare -gr VERSION="Master V8.03.768.2025.06.17"
|
||||||
|
|
||||||
### VERY EARLY CHECK FOR DEBUGGING
|
### VERY EARLY CHECK FOR DEBUGGING
|
||||||
if [[ $* == *" --debug "* ]]; then
|
if [[ $* == *" --debug "* ]]; then
|
||||||
|
|||||||
@@ -112,4 +112,4 @@ d-i preseed/late_command string sh /preseed/.ash/3_di_preseed_late_command.sh
|
|||||||
|
|
||||||
# Please consider donating to my work at: https://coresecret.eu/spenden/
|
# Please consider donating to my work at: https://coresecret.eu/spenden/
|
||||||
###########################################################################################
|
###########################################################################################
|
||||||
# Written by: ./preseed_hash_generator.sh Version: Master V8.03.644.2025.06.07 at: 10:18:37.9542
|
# Written by: ./preseed_hash_generator.sh Version: Master V8.03.768.2025.06.17 at: 10:18:37.9542
|
||||||
|
|||||||
@@ -33,6 +33,7 @@
|
|||||||
|
|
||||||
trap ' "${SHELL}" /root/.ciss/clean_logout.sh ' 0
|
trap ' "${SHELL}" /root/.ciss/clean_logout.sh ' 0
|
||||||
source /root/.ciss/alias
|
source /root/.ciss/alias
|
||||||
|
source /root/.ciss/f2bchk.sh
|
||||||
source /root/.ciss/shortcuts
|
source /root/.ciss/shortcuts
|
||||||
source /root/.ciss/scan_libwrap
|
source /root/.ciss/scan_libwrap
|
||||||
|
|
||||||
|
|||||||
@@ -158,14 +158,22 @@ genpasswdhash() {
|
|||||||
# shellcheck disable=SC2317
|
# shellcheck disable=SC2317
|
||||||
scurl() {
|
scurl() {
|
||||||
if [[ $# -ne 2 ]]; then
|
if [[ $# -ne 2 ]]; then
|
||||||
printf "\e[91m❌ Error: Usage: scurl <URL> <path/to/file>. \e[0m\n" >&2
|
printf "\e[91m❌ Error: Usage: scurl <URL> <path/to/file>.\e[0m\n" >&2
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
declare url="$1"
|
||||||
if ! curl --proto '=https' --tlsv1.3 -sSf -o "${2}" "${1}"; then
|
declare output_path="$2"
|
||||||
printf "\e[91m❌ Error: Download failed for URL: '%s'. \e[0m\n" "${1}" >&2
|
if ! curl --doh-url "https://dns01.eddns.eu/dns-query" \
|
||||||
|
--doh-cert-status \
|
||||||
|
--tlsv1.3 \
|
||||||
|
-sSf \
|
||||||
|
-o "${output_path}" \
|
||||||
|
"${url}"
|
||||||
|
then
|
||||||
|
printf "\e[91m❌ Error: Download failed for URL: '%s'.\e[0m\n" "${url}" >&2
|
||||||
return 2
|
return 2
|
||||||
fi
|
fi
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
|
|
||||||
###########################################################################################
|
###########################################################################################
|
||||||
@@ -177,14 +185,23 @@ scurl() {
|
|||||||
# shellcheck disable=SC2317
|
# shellcheck disable=SC2317
|
||||||
swget() {
|
swget() {
|
||||||
if [[ $# -ne 2 ]]; then
|
if [[ $# -ne 2 ]]; then
|
||||||
printf "\e[91m❌ Error: Usage: swget <URL> <path/to/file>. \e[0m\n" >&2
|
printf "\e[91m❌ Error: Usage: swget <URL> <path/to/file>.\e[0m\n" >&2
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
declare url="$1"
|
||||||
if ! wget --no-clobber --https-only --secure-protocol=TLSv1_3 -qO "${2}" "${1}"; then
|
declare output_path="$2"
|
||||||
printf "\e[91m❌ Error: Download failed for URL: '%s'. \e[0m\n" "${1}" >&2
|
mkdir -p "$(dirname "${output_path}")"
|
||||||
|
if ! wget --show-progress \
|
||||||
|
--no-clobber \
|
||||||
|
--https-only \
|
||||||
|
--secure-protocol=TLSv1_3 \
|
||||||
|
-qO "${output_path}" \
|
||||||
|
"${url}"
|
||||||
|
then
|
||||||
|
printf "\e[91m❌ Error: Download failed for URL: '%s'.\e[0m\n" "$url" >&2
|
||||||
return 2
|
return 2
|
||||||
fi
|
fi
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
|
|
||||||
###########################################################################################
|
###########################################################################################
|
||||||
|
|||||||
87
config/includes.chroot/root/.ciss/f2bchk.sh
Normal file
87
config/includes.chroot/root/.ciss/f2bchk.sh
Normal file
@@ -0,0 +1,87 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# SPDX-Version: 3.0
|
||||||
|
# SPDX-CreationInfo: 2025-05-05; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
|
||||||
|
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
||||||
|
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
|
||||||
|
# SPDX-FileType: SOURCE
|
||||||
|
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
|
||||||
|
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
|
||||||
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
|
#######################################
|
||||||
|
# Wrapper for fail2ban filter checks against logs.
|
||||||
|
# Usage: f2bchk --mode=ignored || --mode=matched || --mode=missed \
|
||||||
|
# --filter=/etc/fail2ban/filter.d/ufw.aggressive.conf \
|
||||||
|
# --log=/var/log/ufw.log \
|
||||||
|
# --output=/tmp/f2bchk.log
|
||||||
|
# Globals:
|
||||||
|
# DEFAULT_FILTER
|
||||||
|
# DEFAULT_LOG
|
||||||
|
# DEFAULT_MODE
|
||||||
|
# Arguments:
|
||||||
|
# None
|
||||||
|
# Returns:
|
||||||
|
# 1 In case of any errors
|
||||||
|
#######################################
|
||||||
|
f2bchk(){
|
||||||
|
# Declare default values (readonly)
|
||||||
|
declare -r DEFAULT_MODE="matched"
|
||||||
|
declare -r DEFAULT_FILTER="/etc/fail2ban/filter.d/ufw.aggressive.conf"
|
||||||
|
declare -r DEFAULT_LOG="/var/log/ufw.log"
|
||||||
|
|
||||||
|
declare mode="${DEFAULT_MODE}"
|
||||||
|
declare filter="${DEFAULT_FILTER}"
|
||||||
|
declare log="${DEFAULT_LOG}"
|
||||||
|
declare output=""
|
||||||
|
declare arg=""
|
||||||
|
|
||||||
|
for arg in "$@"; do
|
||||||
|
case "${arg}" in
|
||||||
|
--mode=*) mode="${arg#--mode=}";;
|
||||||
|
--filter=*) filter="${arg#--filter=}";;
|
||||||
|
--log=*) log="${arg#--log=}";;
|
||||||
|
--output=*) output="${arg#--output=}";;
|
||||||
|
*)
|
||||||
|
printf "\e[31m[ERROR]\e[0m Unknown argument: %s\n" "${arg}"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
declare flag suffix
|
||||||
|
case "${mode}" in
|
||||||
|
ignored) flag="--print-all-ignored"; suffix="all.ignored";;
|
||||||
|
matched) flag="--print-all-matched"; suffix="all.matched";;
|
||||||
|
missed) flag="--print-all-missed"; suffix="all.missed";;
|
||||||
|
*)
|
||||||
|
printf "\e[31m[ERROR]\e[0m Invalid mode: %s\n" "${mode}"
|
||||||
|
return 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
if [[ -z "${output}" ]]; then
|
||||||
|
declare filter_name="${filter##*/}"
|
||||||
|
filter_name="${filter_name%.conf}"
|
||||||
|
output="/tmp/${filter_name}.${suffix}.log"
|
||||||
|
fi
|
||||||
|
if [[ ! -r "${log}" ]]; then
|
||||||
|
printf "\e[31m[ERROR]\e[0m Log file '%s' not found or not readable.\n" "${log}"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
if [[ ! -r "${filter}" ]]; then
|
||||||
|
printf "\e[31m[ERROR]\e[0m Filter file '%s' not found or not readable.\n" "${filter}"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
printf "\e[33m[INFO]\e[0m Running: fail2ban-regex %s %s %s\n" "${log}" "${filter}" "${flag}"
|
||||||
|
if fail2ban-regex "${log}" "${filter}" "${flag}" >| "${output}"; then
|
||||||
|
printf "\e[32m[SUCCESS]\e[0m Saved log to %s\n" "$output"
|
||||||
|
printf "You can view it with: cat %s\n" "$output"
|
||||||
|
else
|
||||||
|
printf "\e[31m[ERROR]\e[0m fail2ban-regex execution failed.\n"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|
||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. DNSSEC Status
|
# 2. DNSSEC Status
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Haveged Audit on Netcup RS 2000 G11
|
# 2. Haveged Audit on Netcup RS 2000 G11
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Lynis Audit:
|
# 2. Lynis Audit:
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. SSH Audit by ssh-audit.com
|
# 2. SSH Audit by ssh-audit.com
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. TLS Audit:
|
# 2. TLS Audit:
|
||||||
|
|
||||||
|
|||||||
@@ -8,13 +8,45 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Changelog
|
# 2. Changelog
|
||||||
|
|
||||||
|
## V8.03.768.2025.06.17
|
||||||
|
|
||||||
|
* Updated LIVE ISO workflows to use Kernel: ``linux-image-6.12.30+bpo-amd64``
|
||||||
|
|
||||||
|
## V8.03.768.2025.06.11
|
||||||
|
|
||||||
|
* Updated LIVE ISO workflows to use Kernel: ``linux-image-6.12.27+bpo-amd64``
|
||||||
|
|
||||||
|
## V8.03.768.2025.06.09
|
||||||
|
|
||||||
|
* Added: [f2bchk.sh](../config/includes.chroot/root/.ciss/f2bchk.sh)
|
||||||
|
* Updated: [alias](../config/includes.chroot/root/.ciss/alias)
|
||||||
|
* ``scurl()``
|
||||||
|
* ``swget()``
|
||||||
|
|
||||||
## V8.03.644.2025.06.07
|
## V8.03.644.2025.06.07
|
||||||
|
|
||||||
* Updated workflows ISO Generators: ``--entrypoint /sbin/init``
|
* Updated workflows ISO Generators Runners.
|
||||||
|
* Installing ``bookworm-backports`` Versions of:
|
||||||
|
* ``btrfs-progs``
|
||||||
|
* ``curl``
|
||||||
|
* ``debootstrap``
|
||||||
|
* ``iproute2``
|
||||||
|
* ``ncat``
|
||||||
|
* ``nmap``
|
||||||
|
* ``ssh``
|
||||||
|
* ``systemd``
|
||||||
|
* ``systemd-sysv``
|
||||||
|
* ``whois``
|
||||||
|
* Changed default: ``/etc/login.defs`` ``LOGIN_TIMEOUT 60`` to: ``LOGIN_TIMEOUT 180``
|
||||||
|
* LIVE ISO generated by workflow tested against:
|
||||||
|
* Netcup Root Server
|
||||||
|
* Proxmox
|
||||||
|
* LIVE ISO generated by script tested against:
|
||||||
|
* Netcup Root Server
|
||||||
|
|
||||||
## V8.03.512.2025.06.06
|
## V8.03.512.2025.06.06
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Centurion Net - Developer Branch Overview
|
# 2. Centurion Net - Developer Branch Overview
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Coding Style
|
# 2. Coding Style
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Contributing / participating
|
# 2. Contributing / participating
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Credits
|
# 2. Credits
|
||||||
|
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Download the latest PUBLIC CISS.debian.live.ISO
|
# 2. Download the latest PUBLIC CISS.debian.live.ISO
|
||||||
|
|
||||||
|
|||||||
@@ -8,12 +8,12 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Usage
|
# 2. Usage
|
||||||
````text
|
````text
|
||||||
CISS.debian.live.builder
|
CISS.debian.live.builder
|
||||||
Master V8.03.644.2025.06.07
|
Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
(c) Marc S. Weidner, 2018 - 2025
|
(c) Marc S. Weidner, 2018 - 2025
|
||||||
(p) Centurion Press, 2024 - 2025
|
(p) Centurion Press, 2024 - 2025
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ include_toc: true
|
|||||||
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
||||||
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
||||||
**Master Version**: 8.03<br>
|
**Master Version**: 8.03<br>
|
||||||
**Build**: V8.03.644.2025.06.07<br>
|
**Build**: V8.03.768.2025.06.17<br>
|
||||||
|
|
||||||
# 2. Resources
|
# 2. Resources
|
||||||
|
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 179 KiB After Width: | Height: | Size: 189 KiB |
@@ -16,16 +16,33 @@
|
|||||||
# None
|
# None
|
||||||
#######################################
|
#######################################
|
||||||
check_pkgs() {
|
check_pkgs() {
|
||||||
|
apt-get update -y
|
||||||
|
if [[ -z "$(command -v lsb_release || true)" ]]; then
|
||||||
|
apt-get install --no-install-recommends lsb-release -y
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -z "$(command -v debootstrap || true)" ]]; then
|
||||||
|
if grep -RqsE '^[[:space:]]*deb .*backports' /etc/apt/sources.list /etc/apt/sources.list.d; then
|
||||||
|
# shellcheck disable=SC2155
|
||||||
|
declare codename=$(lsb_release -sc)
|
||||||
|
apt-get -t "${codename}-backports" install debootstrap -y
|
||||||
|
else
|
||||||
|
apt-get install debootstrap -y
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
if [[ ! -f /usr/share/live/build/VERSION ]]; then
|
if [[ ! -f /usr/share/live/build/VERSION ]]; then
|
||||||
apt-get update -y
|
|
||||||
apt-get install live-build -y
|
apt-get install live-build -y
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [[ -z "$(command -v dialog || true)" ]]; then
|
if [[ -z "$(command -v dialog || true)" ]]; then
|
||||||
if ! $VAR_HANDLER_AUTOBUILD; then apt-get install --no-install-recommends dialog -y; fi
|
if ! $VAR_HANDLER_AUTOBUILD; then
|
||||||
|
apt-get install --no-install-recommends dialog -y;
|
||||||
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [[ -z "$(command -v mkpasswd || true)" ]]; then
|
if [[ -z "$(command -v mkpasswd || true)" ]]; then
|
||||||
|
apt-get update -y
|
||||||
apt-get install --no-install-recommends whois -y
|
apt-get install --no-install-recommends whois -y
|
||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -18,7 +18,7 @@
|
|||||||
check_provider() {
|
check_provider() {
|
||||||
clear
|
clear
|
||||||
cat << 'EOF' >| "${VAR_NOTES}"
|
cat << 'EOF' >| "${VAR_NOTES}"
|
||||||
Build: Master V8.03.644.2025.06.07
|
Build: Master V8.03.768.2025.06.17
|
||||||
|
|
||||||
Press 'EXIT' to continue with CISS.debian.live.builder.
|
Press 'EXIT' to continue with CISS.debian.live.builder.
|
||||||
|
|
||||||
|
|||||||
@@ -22,7 +22,7 @@ usage() {
|
|||||||
cat << EOF
|
cat << EOF
|
||||||
|
|
||||||
$(echo -e "\e[92mCISS.debian.live.builder\e[0m")
|
$(echo -e "\e[92mCISS.debian.live.builder\e[0m")
|
||||||
$(echo -e "\e[92mMaster V8.03.644.2025.06.07\e[0m")
|
$(echo -e "\e[92mMaster V8.03.768.2025.06.17\e[0m")
|
||||||
|
|
||||||
$(echo -e "\e[97m(c) Marc S. Weidner, 2018 - 2025\e[0m")
|
$(echo -e "\e[97m(c) Marc S. Weidner, 2018 - 2025\e[0m")
|
||||||
$(echo -e "\e[97m(p) Centurion Press, 2024 - 2025\e[0m")
|
$(echo -e "\e[97m(p) Centurion Press, 2024 - 2025\e[0m")
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 '%s' starting ... \e[0m\n" "
|
|||||||
# sleep 1
|
# sleep 1
|
||||||
|
|
||||||
[[ ! -d /root/.cdi/log ]] && mkdir -p /root/.cdi/log
|
[[ ! -d /root/.cdi/log ]] && mkdir -p /root/.cdi/log
|
||||||
printf "CISS.debian.installer Master V8.03.644.2025.06.07 is up!" >| /root/.cdi/log/boot_finished_"$(date +"%Y-%m-%d_%H-%M-%S")".log
|
printf "CISS.debian.installer Master V8.03.768.2025.06.17 is up!" >| /root/.cdi/log/boot_finished_"$(date +"%Y-%m-%d_%H-%M-%S")".log
|
||||||
|
|
||||||
if [[ -f /root/git/CISS.debian.installer/ciss_debian_installer.sh ]]; then
|
if [[ -f /root/git/CISS.debian.installer/ciss_debian_installer.sh ]]; then
|
||||||
chmod 0700 /root/git/CISS.debian.installer/ciss_debian_installer.sh
|
chmod 0700 /root/git/CISS.debian.installer/ciss_debian_installer.sh
|
||||||
|
|||||||
@@ -33,16 +33,16 @@ touch "${LOG_ERROR}" && chmod 0600 "${LOG_ERROR}"
|
|||||||
|
|
||||||
declare -g VAR_ARCHITECTURE=""
|
declare -g VAR_ARCHITECTURE=""
|
||||||
declare -g VAR_HANDLER_BUILD_DIR=""
|
declare -g VAR_HANDLER_BUILD_DIR=""
|
||||||
declare -g VAR_HANDLER_CDI=""
|
declare -g VAR_HANDLER_CDI="false"
|
||||||
declare -g VAR_HANDLER_DHCP=""
|
declare -gi VAR_HANDLER_DHCP=0
|
||||||
declare -g VAR_HANDLER_SPLASH=""
|
declare -g VAR_HANDLER_SPLASH=""
|
||||||
declare -g VAR_SSHPORT=""
|
declare -g VAR_SSHPORT=""
|
||||||
declare -g VAR_SSHPUBKEY=""
|
declare -g VAR_SSHPUBKEY=""
|
||||||
declare -g VAR_SCRIPT_SUCCESS=""
|
declare -g VAR_SCRIPT_SUCCESS="false"
|
||||||
declare -g VAR_HANDLER_PRIORITY=""
|
declare -g VAR_HANDLER_PRIORITY=""
|
||||||
declare -g VAR_HANDLER_NETCUP_IPV6=""
|
declare -g VAR_HANDLER_NETCUP_IPV6="false"
|
||||||
declare -g VAR_HASHED_PWD=""
|
declare -g VAR_HASHED_PWD=""
|
||||||
declare -g VAR_HANDLER_STA=""
|
declare -gi VAR_HANDLER_STA=0
|
||||||
declare -g VAR_REIONICE_CLASS=""
|
declare -g VAR_REIONICE_CLASS=""
|
||||||
declare -g VAR_REIONICE_PRIORITY=""
|
declare -g VAR_REIONICE_PRIORITY=""
|
||||||
declare -gr VAR_CHROOT_DIR="chroot"
|
declare -gr VAR_CHROOT_DIR="chroot"
|
||||||
|
|||||||
Reference in New Issue
Block a user