53 Commits

Author SHA256 Message Date
3e5681cb90 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@c21a25f at 2025-06-17T17:03:36Z on 31b30f152ad6

Generated at : 2025-06-17T17:03:36Z
Runner Host  : 31b30f152ad6
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : c21a25f HEAD -> master
2025-06-17 17:03:36 +00:00
c21a25f938 V8.03.768.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m27s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-17 19:02:03 +02:00
a5552f7079 Merge remote-tracking branch 'origin/master' 2025-06-17 18:56:24 +02:00
999fa7e11e V8.03.768.2025.06.17
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-17 18:56:15 +02:00
7d8bab47ff DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@6e33d74 at 2025-06-17T16:33:13Z on a84f597e933a

Generated at : 2025-06-17T16:33:13Z
Runner Host  : a84f597e933a
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : 6e33d74 HEAD -> master
2025-06-17 16:33:13 +00:00
6e33d74922 V8.03.768.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m22s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-17 18:31:45 +02:00
b718b1e8c8 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@c7d5407 at 2025-06-17T16:28:14Z on 863110c5e7c7

Generated at : 2025-06-17T16:28:14Z
Runner Host  : 863110c5e7c7
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : c7d5407 HEAD -> master
2025-06-17 16:28:14 +00:00
c7d5407119 V8.03.768.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m27s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-17 18:26:21 +02:00
2f25ad8e31 DEPLOY BOT : 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
X-CI-Metadata: master@ec5f343 at 2025-06-17T14:54:37Z on 880f9b9d21a3

Generated at : 2025-06-17T14:54:37Z
Runner Host  : 880f9b9d21a3
Workflow ID  : 💙 Generating a PUBLIC Live ISO.
Git Commit   : ec5f343 HEAD -> master
2025-06-17 14:54:37 +00:00
ec5f343bfa DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
X-CI-Metadata: master@22220bb at 2025-06-17T14:03:37Z on bafbb2900f16

Generated at : 2025-06-17T14:03:37Z
Runner Host  : bafbb2900f16
Workflow ID  : 🔐 Generating a Private Live ISO FLV 1.
Git Commit   : 22220bb HEAD -> master
2025-06-17 14:03:37 +00:00
22220bb3e0 DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
X-CI-Metadata: master@ad7a12e at 2025-06-17T13:12:06Z on 6e730393370b

Generated at : 2025-06-17T13:12:06Z
Runner Host  : 6e730393370b
Workflow ID  : 🔐 Generating a Private Live ISO FLV 0.
Git Commit   : ad7a12e HEAD -> master
2025-06-17 13:12:06 +00:00
ad7a12ea92 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@03f0b4d at 2025-06-17T12:22:00Z on 07d789f6cde4

Generated at : 2025-06-17T12:22:00Z
Runner Host  : 07d789f6cde4
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : 03f0b4d HEAD -> master
2025-06-17 12:22:00 +00:00
03f0b4df09 DEPLOY BOT : 🛡️ Auto-Generate DNSSEC Status [skip ci]
X-CI-Metadata: master@0ef7fcb at 2025-06-17T12:21:11Z on 675c666aacea

Generated at : 2025-06-17T12:21:11Z
Runner Host  : 675c666aacea
Workflow ID  : 🛡️ Retrieve DNSSEC status of coresecret.dev.
Git Commit   : 0ef7fcb HEAD -> master
2025-06-17 12:21:11 +00:00
0ef7fcb146 V8.03.768.2025.06.17
All checks were successful
🛡️ Retrieve DNSSEC status of coresecret.dev. / 🛡️ Retrieve DNSSEC status of coresecret.dev. (push) Successful in 35s
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m25s
🔐 Generating a Private Live ISO FLV 0. / 🔐 Generating a Private Live ISO FLV 0. (push) Successful in 51m40s
🔐 Generating a Private Live ISO FLV 1. / 🔐 Generating a Private Live ISO FLV 1. (push) Successful in 51m26s
💙 Generating a PUBLIC Live ISO. / 💙 Generating a PUBLIC Live ISO. (push) Successful in 50m59s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-17 14:19:05 +02:00
ea2a7627e2 DEPLOY BOT : 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
X-CI-Metadata: master@b38e0c8 at 2025-06-11T19:46:50Z on 5be55a0d2464

Generated at : 2025-06-11T19:46:50Z
Runner Host  : 5be55a0d2464
Workflow ID  : 💙 Generating a PUBLIC Live ISO.
Git Commit   : b38e0c8 HEAD -> master
2025-06-11 19:46:50 +00:00
b38e0c8476 DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
X-CI-Metadata: master@8409a8e at 2025-06-11T18:57:26Z on 409faf9f44c1

Generated at : 2025-06-11T18:57:26Z
Runner Host  : 409faf9f44c1
Workflow ID  : 🔐 Generating a Private Live ISO FLV 1.
Git Commit   : 8409a8e HEAD -> master
2025-06-11 18:57:26 +00:00
8409a8eb8a DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
X-CI-Metadata: master@2b73132 at 2025-06-11T18:08:02Z on 610c91c1207c

Generated at : 2025-06-11T18:08:02Z
Runner Host  : 610c91c1207c
Workflow ID  : 🔐 Generating a Private Live ISO FLV 0.
Git Commit   : 2b73132 HEAD -> master
2025-06-11 18:08:02 +00:00
2b73132851 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@1769e13 at 2025-06-11T17:20:40Z on 1ce7b9e07f3b

Generated at : 2025-06-11T17:20:40Z
Runner Host  : 1ce7b9e07f3b
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : 1769e13 HEAD -> master
2025-06-11 17:20:40 +00:00
1769e13708 DEPLOY BOT : 🛡️ Auto-Generate DNSSEC Status [skip ci]
X-CI-Metadata: master@7eb8fb8 at 2025-06-11T17:19:38Z on df49d93beb71

Generated at : 2025-06-11T17:19:38Z
Runner Host  : df49d93beb71
Workflow ID  : 🛡️ Retrieve DNSSEC status of coresecret.dev.
Git Commit   : 7eb8fb8 HEAD -> master
2025-06-11 17:19:38 +00:00
7eb8fb8754 V8.03.768.2025.06.11
All checks were successful
🛡️ Retrieve DNSSEC status of coresecret.dev. / 🛡️ Retrieve DNSSEC status of coresecret.dev. (push) Successful in 35s
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m39s
🔐 Generating a Private Live ISO FLV 0. / 🔐 Generating a Private Live ISO FLV 0. (push) Successful in 49m7s
🔐 Generating a Private Live ISO FLV 1. / 🔐 Generating a Private Live ISO FLV 1. (push) Successful in 49m24s
💙 Generating a PUBLIC Live ISO. / 💙 Generating a PUBLIC Live ISO. (push) Successful in 49m23s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-11 19:17:47 +02:00
1fda52e948 V8.03.768.2025.06.11
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-11 19:16:51 +02:00
6d12da9566 DEPLOY BOT : 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
X-CI-Metadata: master@2b8deaf at 2025-06-09T23:03:26Z on 541caa50b8e9

Generated at : 2025-06-09T23:03:26Z
Runner Host  : 541caa50b8e9
Workflow ID  : 💙 Generating a PUBLIC Live ISO.
Git Commit   : 2b8deaf HEAD -> master
2025-06-09 23:03:26 +00:00
2b8deafabc DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
X-CI-Metadata: master@3a8e624 at 2025-06-09T22:16:21Z on 3c94b0ce9f9b

Generated at : 2025-06-09T22:16:21Z
Runner Host  : 3c94b0ce9f9b
Workflow ID  : 🔐 Generating a Private Live ISO FLV 1.
Git Commit   : 3a8e624 HEAD -> master
2025-06-09 22:16:21 +00:00
3a8e624f57 DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
X-CI-Metadata: master@eac8f62 at 2025-06-09T21:29:12Z on 5faff8dc6e26

Generated at : 2025-06-09T21:29:12Z
Runner Host  : 5faff8dc6e26
Workflow ID  : 🔐 Generating a Private Live ISO FLV 0.
Git Commit   : eac8f62 HEAD -> master
2025-06-09 21:29:12 +00:00
eac8f62459 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@fadece6 at 2025-06-09T20:42:11Z on be4dd281175d

Generated at : 2025-06-09T20:42:11Z
Runner Host  : be4dd281175d
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : fadece6 HEAD -> master
2025-06-09 20:42:11 +00:00
fadece63ca DEPLOY BOT : 🛡️ Auto-Generate DNSSEC Status [skip ci]
X-CI-Metadata: master@68eb879 at 2025-06-09T20:41:27Z on 55df2b5118e1

Generated at : 2025-06-09T20:41:27Z
Runner Host  : 55df2b5118e1
Workflow ID  : 🛡️ Retrieve DNSSEC status of coresecret.dev.
Git Commit   : 68eb879 HEAD -> master
2025-06-09 20:41:27 +00:00
68eb879c8a V8.03.768.2025.06.09
All checks were successful
🛡️ Retrieve DNSSEC status of coresecret.dev. / 🛡️ Retrieve DNSSEC status of coresecret.dev. (push) Successful in 34s
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m19s
🔐 Generating a Private Live ISO FLV 0. / 🔐 Generating a Private Live ISO FLV 0. (push) Successful in 48m28s
🔐 Generating a Private Live ISO FLV 1. / 🔐 Generating a Private Live ISO FLV 1. (push) Successful in 47m5s
💙 Generating a PUBLIC Live ISO. / 💙 Generating a PUBLIC Live ISO. (push) Successful in 47m5s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-09 22:38:15 +02:00
64689d00b2 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@7172b4f at 2025-06-07T17:57:16Z on b04492b21523

Generated at : 2025-06-07T17:57:16Z
Runner Host  : b04492b21523
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : 7172b4f HEAD -> master
2025-06-07 17:57:16 +00:00
7172b4fee9 V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m7s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 19:55:41 +02:00
ec6066f620 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@e164a03 at 2025-06-07T15:27:29Z on ea435a870a0e

Generated at : 2025-06-07T15:27:29Z
Runner Host  : ea435a870a0e
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : e164a03 HEAD -> master
2025-06-07 15:27:29 +00:00
e164a039fa V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m3s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 17:26:01 +02:00
87b23a87a0 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@4be9861 at 2025-06-07T13:59:46Z on beeac5128259

Generated at : 2025-06-07T13:59:46Z
Runner Host  : beeac5128259
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : 4be9861 HEAD -> master
2025-06-07 13:59:46 +00:00
4be9861403 V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m10s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 15:58:23 +02:00
3913af49e3 Merge remote-tracking branch 'origin/master' 2025-06-07 15:55:04 +02:00
7aa82e060b DEPLOY BOT : 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
X-CI-Metadata: master@9d40681 at 2025-06-07T13:28:15Z on 44fbbe95eb4c

Generated at : 2025-06-07T13:28:15Z
Runner Host  : 44fbbe95eb4c
Workflow ID  : 💙 Generating a PUBLIC Live ISO.
Git Commit   : 9d40681 HEAD -> master
2025-06-07 13:28:15 +00:00
9d40681c01 DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
X-CI-Metadata: master@77b73f8 at 2025-06-07T12:39:31Z on ba61aa7d3bf8

Generated at : 2025-06-07T12:39:31Z
Runner Host  : ba61aa7d3bf8
Workflow ID  : 🔐 Generating a Private Live ISO FLV 1.
Git Commit   : 77b73f8 HEAD -> master
2025-06-07 12:39:31 +00:00
c5ddadc93e V8.03.644.2025.06.07
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 14:00:13 +02:00
77b73f8c5f DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
X-CI-Metadata: master@da8cf02 at 2025-06-07T11:52:30Z on 6b8c44a6e580

Generated at : 2025-06-07T11:52:30Z
Runner Host  : 6b8c44a6e580
Workflow ID  : 🔐 Generating a Private Live ISO FLV 0.
Git Commit   : da8cf02 HEAD -> master
2025-06-07 11:52:30 +00:00
da8cf0287d DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@301513c at 2025-06-07T11:05:19Z on b0bc13efe50b

Generated at : 2025-06-07T11:05:19Z
Runner Host  : b0bc13efe50b
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : 301513c HEAD -> master
2025-06-07 11:05:19 +00:00
301513c07e V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m5s
🔐 Generating a Private Live ISO FLV 0. / 🔐 Generating a Private Live ISO FLV 0. (push) Successful in 48m21s
🔐 Generating a Private Live ISO FLV 1. / 🔐 Generating a Private Live ISO FLV 1. (push) Successful in 47m0s
💙 Generating a PUBLIC Live ISO. / 💙 Generating a PUBLIC Live ISO. (push) Successful in 48m44s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 13:03:28 +02:00
31ece936c9 DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@a34dbb4 at 2025-06-07T11:00:43Z on 18b4c36b2ecd

Generated at : 2025-06-07T11:00:43Z
Runner Host  : 18b4c36b2ecd
Workflow ID  : 🛡️ Shell Script Linting
Git Commit   : a34dbb4 HEAD -> master
2025-06-07 11:00:43 +00:00
a34dbb41da V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m11s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 12:59:05 +02:00
bc58199d11 DEPLOY BOT: 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
X-CI-Metadata: master@7d6a048 at 2025-06-07T08:36:05Z on 0ba6fa05b246

Generated at: 2025-06-07T08:36:05Z
Runner Host : 0ba6fa05b246
Workflow ID : 🔐 Generating a Private Live ISO FLV 1.
Git Commit  : 7d6a048 HEAD -> master
2025-06-07 08:36:05 +00:00
7d6a048f17 DEPLOY BOT: 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@c0ea15d at 2025-06-07T08:11:13Z on e1db26fd8aee

Generated at: 2025-06-07T08:11:13Z
Runner Host : e1db26fd8aee
Workflow ID : 🛡️ Shell Script Linting
Git Commit  : c0ea15d HEAD -> master
2025-06-07 08:11:13 +00:00
c0ea15d1b5 Merge remote-tracking branch 'origin/master'
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m8s
2025-06-07 10:07:17 +02:00
5345c44493 V8.03.644.2025.06.07
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 10:07:08 +02:00
3ce250c1f1 DEPLOY BOT: 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@52fecb8 at 2025-06-07T08:03:52Z on 8dc9df4c7580

Generated at: 2025-06-07T08:03:52Z
Runner Host : 8dc9df4c7580
Workflow ID : 🛡️ Shell Script Linting
Git Commit  : 52fecb8 HEAD -> master
2025-06-07 08:03:52 +00:00
52fecb8b6f V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m7s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 10:02:37 +02:00
5175c8245a DEPLOY BOT: 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@680ce14 at 2025-06-07T07:51:58Z on 4c6959341a64

Generated at: 2025-06-07T07:51:58Z
Runner Host : 4c6959341a64
Workflow ID : 🛡️ Shell Script Linting
Git Commit  : 680ce14 HEAD -> master
2025-06-07 07:51:58 +00:00
680ce149d7 V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m8s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 09:50:43 +02:00
a37ef3e143 DEPLOY BOT: 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@77fd128 at 2025-06-07T07:47:37Z on 7fd54de01000

Generated at: 2025-06-07T07:47:37Z
Runner Host : 7fd54de01000
Workflow ID : 🛡️ Shell Script Linting
Git Commit  : 77fd128 HEAD -> master
2025-06-07 07:47:37 +00:00
77fd128dbc V8.03.644.2025.06.07
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m4s
🔐 Generating a Private Live ISO FLV 1. / 🔐 Generating a Private Live ISO FLV 1. (push) Successful in 49m40s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
2025-06-07 09:46:26 +02:00
70a97b02fa DEPLOY BOT: 🛡️ Shell Script Linting [skip ci]
X-CI-Metadata: master@e42acb0 at 2025-06-07T07:44:56Z on 5375c083d2a1

Generated at: 2025-06-07T07:44:56Z
Runner Host : 5375c083d2a1
Workflow ID : 🛡️ Shell Script Linting
Git Commit  : e42acb0 HEAD -> master
2025-06-07 07:44:57 +00:00
53 changed files with 309 additions and 153 deletions

View File

@@ -9,39 +9,41 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
🔧
⚠️
🚫
🔐
🔒
🔑
✍️
🖥️
🔄
🔁
🌌
🔵
💙
🔍
💡
🔧
🛠️
🏗
⚙️
📐
🧪
📩
📥
📦
📑
📂
🔒
🔐
⚙️
🌌
📀
🎉
🖥️
📂
📩
🔵
😺
🧪
📉
📊
🧾
📀
📉
📋
🕑
🧠
📅
💙
🚫
🔄
🔁
📋
🎯
🔍
💡
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

View File

@@ -25,7 +25,7 @@ body:
attributes:
label: "Version"
description: "Which version are you running? Use `./ciss_live_builder.sh -v`."
placeholder: "e.g., Master V8.03.644.2025.06.07"
placeholder: "e.g., Master V8.03.768.2025.06.17"
validations:
required: true

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
FROM debian:bookworm

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
name: 🔁 Render README.md to README.html.
@@ -215,11 +215,11 @@ jobs:
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
COMMIT_MSG="DEPLOY BOT: 🔁 Auto-Generate *.html from *.md [skip ci]
COMMIT_MSG="DEPLOY BOT : 🔁 Auto-Generate *.html from *.md [skip ci]
${CI_HEADER}
Generated at: ${TIMESTAMP_UTC}
Generated at : ${TIMESTAMP_UTC}
Runner Host : ${HOSTNAME}
Workflow ID : ${WORKFLOW_ID}
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}

View File

@@ -11,5 +11,5 @@
build:
counter: 1023
version: V8.03.512.2025.06.06
version: V8.03.768.2025.06.17
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml

View File

@@ -11,5 +11,5 @@
build:
counter: 1023
version: V8.03.644.2025.06.07
version: V8.03.768.2025.06.17
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml

View File

@@ -11,5 +11,5 @@
build:
counter: 1023
version: V8.03.512.2025.06.06
version: V8.03.768.2025.06.17
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml

View File

@@ -11,5 +11,5 @@
build:
counter: 1023
version: V8.03.644.2025.06.07
version: V8.03.768.2025.06.17
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
name: 🔐 Generating a Private Live ISO FLV 0.
@@ -26,7 +26,7 @@ on:
jobs:
generate-private-ciss-debian-live-iso:
name: 🔐 Generating a Private Live ISO FLV 0.
runs-on: ciss.debian.live.builder
runs-on: ciss.debian.live.builder.iso.generator
### Run all steps inside Debian Bookworm
container:
@@ -270,7 +270,7 @@ jobs:
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
./ciss_live_builder.sh \
--autobuild=6.12.22+bpo-amd64 \
--autobuild=6.12.30+bpo-amd64 \
--architecture amd64 \
--build-directory /opt/livebuild \
--control "${timestamp}" \
@@ -459,11 +459,11 @@ jobs:
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
COMMIT_MSG="DEPLOY BOT: 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
COMMIT_MSG="DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 0 [skip ci]
${CI_HEADER}
Generated at: ${TIMESTAMP_UTC}
Generated at : ${TIMESTAMP_UTC}
Runner Host : ${HOSTNAME}
Workflow ID : ${WORKFLOW_ID}
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.512.2025.06.06
### Version Master V8.03.768.2025.06.17
name: 🔐 Generating a Private Live ISO FLV 1.
@@ -270,7 +270,7 @@ jobs:
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
./ciss_live_builder.sh \
--autobuild=6.12.22+bpo-amd64 \
--autobuild=6.12.30+bpo-amd64 \
--architecture amd64 \
--build-directory /opt/livebuild \
--control "${timestamp}" \
@@ -456,11 +456,11 @@ jobs:
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
COMMIT_MSG="DEPLOY BOT: 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
COMMIT_MSG="DEPLOY BOT : 🔐 Auto-Generate PRIVATE LIVE ISO FLV 1 [skip ci]
${CI_HEADER}
Generated at: ${TIMESTAMP_UTC}
Generated at : ${TIMESTAMP_UTC}
Runner Host : ${HOSTNAME}
Workflow ID : ${WORKFLOW_ID}
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
name: 💙 Generating a PUBLIC Live ISO.
@@ -26,7 +26,7 @@ on:
jobs:
generate-private-ciss-debian-live-iso:
name: 💙 Generating a PUBLIC Live ISO.
runs-on: ciss.debian.live.builder
runs-on: ciss.debian.live.builder.iso.generator
### Run all steps inside Debian Bookworm
container:
@@ -271,7 +271,7 @@ jobs:
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
./ciss_live_builder.sh \
--autobuild=6.12.22+bpo-amd64 \
--autobuild=6.12.30+bpo-amd64 \
--architecture amd64 \
--build-directory /opt/livebuild \
--control "${timestamp}" \
@@ -456,11 +456,11 @@ jobs:
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
COMMIT_MSG="DEPLOY BOT: 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
COMMIT_MSG="DEPLOY BOT : 💙 Auto-Generate PUBLIC LIVE ISO [skip ci]
${CI_HEADER}
Generated at: ${TIMESTAMP_UTC}
Generated at : ${TIMESTAMP_UTC}
Runner Host : ${HOSTNAME}
Workflow ID : ${WORKFLOW_ID}
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
# Gitea Workflow: Shell-Script Linting
#
@@ -313,11 +313,11 @@ jobs:
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
COMMIT_MSG="DEPLOY BOT: 🛡️ Shell Script Linting [skip ci]
COMMIT_MSG="DEPLOY BOT : 🛡️ Shell Script Linting [skip ci]
${CI_HEADER}
Generated at: ${TIMESTAMP_UTC}
Generated at : ${TIMESTAMP_UTC}
Runner Host : ${HOSTNAME}
Workflow ID : ${WORKFLOW_ID}
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
name: 🛡️ Retrieve DNSSEC status of coresecret.dev.
@@ -192,11 +192,11 @@ jobs:
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
COMMIT_MSG="DEPLOY BOT: 🛡️ Auto-Generate DNSSEC Status [skip ci]
COMMIT_MSG="DEPLOY BOT : 🛡️ Auto-Generate DNSSEC Status [skip ci]
${CI_HEADER}
Generated at: ${TIMESTAMP_UTC}
Generated at : ${TIMESTAMP_UTC}
Runner Host : ${HOSTNAME}
Workflow ID : ${WORKFLOW_ID}
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
name: 🔁 Render Graphviz Diagrams.
@@ -185,11 +185,11 @@ jobs:
WORKFLOW_ID="${GITHUB_WORKFLOW:-render-md-to-html.yaml}"
CI_HEADER="X-CI-Metadata: ${GIT_REF}@${GIT_SHA} at ${TIMESTAMP_UTC} on ${HOSTNAME}"
COMMIT_MSG="DEPLOY BOT: 🔁 Auto-Generate PNG from *.dot. [skip ci]
COMMIT_MSG="DEPLOY BOT : 🔁 Auto-Generate PNG from *.dot. [skip ci]
${CI_HEADER}
Generated at: ${TIMESTAMP_UTC}
Generated at : ${TIMESTAMP_UTC}
Runner Host : ${HOSTNAME}
Workflow ID : ${WORKFLOW_ID}
Git Commit : ${GIT_SHA} HEAD -> ${GIT_REF}

View File

@@ -15,5 +15,5 @@ properties_SPDX-License-Identifier="EUPL-1.2 OR LicenseRef-CCLA-1.0"
properties_SPDX-LicenseComment="This file is part of the CISS.debian.installer.secure framework."
properties_SPDX-PackageName="CISS.debian.live.builder"
properties_SPDX-Security-Contact="security@coresecret.eu"
properties_version="V8.03.644.2025.06.07"
properties_version="V8.03.768.2025.06.17"
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=conf

View File

@@ -6,7 +6,7 @@ Creator: Person: Marc S. Weidner (Centurion Intelligence Consulting Agency)
Created: 2025-05-07T12:00:00Z
Package: CISS.debian.live.builder
PackageName: CISS.debian.live.builder
PackageVersion: Master V8.03.644.2025.06.07
PackageVersion: Master V8.03.768.2025.06.17
PackageSupplier: Organization: Centurion Intelligence Consulting Agency
PackageDownloadLocation: https://git.coresecret.dev/msw/CISS.debian.live.builder
PackageHomePage: https://git.coresecret.dev/msw/CISS.debian.live.builder

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "2025-06-07T07:40:35Z".
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T17:03:33Z".
✅ The last linter check was successful. ✅

View File

@@ -9,19 +9,19 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "2025-06-06T07:24:28Z".
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T14:54:34Z".
CISS.debian.live.builder ISO :
"ciss-debian-live-2025_06_06T06_47_26Z-amd64.hybrid.iso"
"ciss-debian-live-2025_06_17T14_12_22Z-amd64.hybrid.iso"
CISS.debian.live.builder ISO sha512 :
"ciss-debian-live-2025_06_06T06_47_26Z-amd64.hybrid.iso.sha512"
"ciss-debian-live-2025_06_17T14_12_22Z-amd64.hybrid.iso.sha512"
CISS.debian.live.builder ISO sha512 sign :
-----BEGIN PGP SIGNATURE-----
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaEKXrAAKCRA85KY4hzOw
IRH2AQDbnU6pP/MRQ3ixd4ir62Ocyr3lr1b2+2HRrpJeZceXYAEA1T/DlrVzQ/wK
V2018OQFllEu7iWdZuJpof4v8XIjRAo=
=0Ter
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaFGBqgAKCRA85KY4hzOw
IYthAQDYHWvmctdnn39QGj0cdLgPkqMd3JTtC+goiM2BO6UAoQD/SM4ObHSBQ9ZO
tQ5Wj5SzmMyMqFB9UIFizaEH0RcBEgk=
=zTxU
-----END PGP SIGNATURE-----
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text

View File

@@ -9,19 +9,19 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "2025-06-06T08:21:24Z".
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T13:12:03Z".
CISS.debian.live.builder ISO :
"ciss-debian-live-2025_06_06T07_44_50Z-amd64.hybrid.iso"
"ciss-debian-live-2025_06_17T12_29_48Z-amd64.hybrid.iso"
CISS.debian.live.builder ISO sha512 :
"ciss-debian-live-2025_06_06T07_44_50Z-amd64.hybrid.iso.sha512"
"ciss-debian-live-2025_06_17T12_29_48Z-amd64.hybrid.iso.sha512"
CISS.debian.live.builder ISO sha512 sign :
-----BEGIN PGP SIGNATURE-----
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaEKlBAAKCRA85KY4hzOw
IY6hAQD6+u+xiH3tiW0LGl9ylO5UayaIuVaXsaP1WDrwmz+QjQD/d1DnDgiLO3xr
01NhQnKrFrn1qbxdc1OyS7N7ZXlZ8gU=
=6WCt
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaFFpowAKCRA85KY4hzOw
IQmsAQC7nsyQvaiBPjFjze0arnTSyJ0X45OElMH6vwWeOPCYwgEAgoPURpD9KBWX
TDSR3bhZqdaFTJYAQfguXxDI0wff8Aw=
=BqaA
-----END PGP SIGNATURE-----
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text

View File

@@ -9,19 +9,19 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "2025-06-06T06:38:56Z".
This file was automatically generated by the DEPLOY BOT on: "2025-06-17T14:03:33Z".
CISS.debian.live.builder ISO :
"ciss-debian-live-2025_06_06T06_02_20Z-amd64.hybrid.iso"
"ciss-debian-live-2025_06_17T13_20_50Z-amd64.hybrid.iso"
CISS.debian.live.builder ISO sha512 :
"ciss-debian-live-2025_06_06T06_02_20Z-amd64.hybrid.iso.sha512"
"ciss-debian-live-2025_06_17T13_20_50Z-amd64.hybrid.iso.sha512"
CISS.debian.live.builder ISO sha512 sign :
-----BEGIN PGP SIGNATURE-----
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaEKNAAAKCRA85KY4hzOw
IR/YAQDJPuDeJaKUBk5zmBD+4k0iX6UAYgSR2URMoq2H8Cyw9AD8CYYEd4jZa/rm
/ol6GBfPohN5PxbslbOAlzw1e/hn7gk=
=+iwt
iHUEABYKAB0WIQSqYnPMNKGz69afyHA85KY4hzOwIQUCaFF1tQAKCRA85KY4hzOw
IbsWAP9Zk6J3kFfRVASMGnT4h2Joak31pmX5p3Ron4mRDserMgEArhu1axOkGlyI
MPD3Zw/YEZeRSRtGLPFPfEEq8zAmIQo=
=b16D
-----END PGP SIGNATURE-----
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=text

View File

@@ -2,7 +2,7 @@
gitea: none
include_toc: true
---
[![Static Badge](https://badges.coresecret.dev/badge/Release-V8.03.644.2025.06.07-white?style=plastic&logo=linux&logoColor=white&logoSize=auto&label=Release&color=%23FCC624)](https://git.coresecret.dev/msw/CISS.debian.live.builder)
[![Static Badge](https://badges.coresecret.dev/badge/Release-V8.03.768.2025.06.17-white?style=plastic&logo=linux&logoColor=white&logoSize=auto&label=Release&color=%23FCC624)](https://git.coresecret.dev/msw/CISS.debian.live.builder)
&nbsp;
[![Static Badge](https://badges.coresecret.dev/badge/Licence-EUPL1.2-white?style=plastic&logo=europeanunion&logoColor=white&logoSize=auto&label=Licence&color=%23003399)](https://eupl.eu/1.2/en/) &nbsp;
[![Static Badge](https://badges.coresecret.dev/badge/opensourceinitiative-Compliant-white?style=plastic&logo=opensourceinitiative&logoColor=white&logoSize=auto&label=OSI&color=%233DA639)](https://opensource.org/license/eupl-1-2) &nbsp;
@@ -26,7 +26,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
This shell wrapper automates the creation of a Debian Bookworm live ISO hardened according to the latest best practices in server
and service security. It integrates into your build pipeline to deliver an isolated, robust environment suitable for
@@ -37,7 +37,7 @@ changes and made publicly available for download. The latest generic ISO is avai
Check out more:
* [CenturionNet Services](https://coresecret.eu/cnet/)
* [CenturionDNS Resolver](https://dns.eddns.eu/)
* [CenturionDNS Resolver](https://eddns.eu/)
* [CenturionDNS Blocklist](https://dns.eddns.eu/blocklists/centurion_titanium_ultimate.txt)
* [CenturionNet Status](https://uptime.coresecret.eu/)
* [CenturionMeet](https://talk.e2ee.li/)

View File

@@ -40,7 +40,8 @@
declare -g VAR_HANDLER_AUTOBUILD="false"
declare -gr VAR_CONTACT="security@coresecret.eu"
declare -gr VAR_VERSION="Master V8.03.644.2025.06.07"
declare -gr VAR_VERSION="Master V8.03.768.2025.06.17"
for dir in /usr/local/sbin /usr/sbin; do case ":${PATH}:" in *":${dir}:"*) ;; *) PATH="${PATH}:${dir}" ;; esac; done; export PATH; unset dir
### VERY EARLY CHECK FOR AUTO-BUILD, CONTACT, USAGE, AND VERSION STRING
declare arg

View File

@@ -25,8 +25,6 @@ DEBIAN_FRONTEND=noninteractive \
curl \
debootstrap \
iproute2 \
linux-doc-6.12 \
linux-source \
ncat \
nmap \
ssh \

View File

@@ -32,8 +32,8 @@ ReadOnlyPaths=/
ReadWritePaths=/var/lib/clamav /var/log/clamav /var/run/clamav /run/clamav
MemoryDenyWriteExecute=yes
MemoryLimit=512M
CPUShares=512
#MemoryLimit=4096M
#CPUShares=512
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=yes
@@ -58,8 +58,8 @@ ReadOnlyPaths=/
ReadWritePaths=/var/lib/clamav /var/log/clamav /var/run/clamav
MemoryDenyWriteExecute=yes
MemoryLimit=512M
CPUShares=512
#MemoryLimit=4096M
#CPUShares=512
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=yes

View File

@@ -16,13 +16,13 @@ printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 '%s' starting ... \e[0m\n" "
apt-get update -y
apt-get purge -y exim4 exim4-daemon-light exim4-base exim4-config \
qemu-guest-agent rmail sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
apt-get purge -y exim4 exim4-daemon-light exim4-base exim4-config qemu-guest-agent rmail
#sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
apt-mark hold exim4 exim4-daemon-light exim4-base exim4-config \
qemu-guest-agent rmail sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
apt-mark hold exim4 exim4-daemon-light exim4-base exim4-config qemu-guest-agent rmail
#sendmail-base sendmail-bin sendmail-cf sensible-mda sendmail-doc
dpkg --get-selections | grep deinstall >> /tmp/deinstall.log || true
dpkg --get-selections | grep deinstall >| /tmp/deinstall.log || true
if [[ -s /tmp/deinstall.log ]]; then
printf "\n"

View File

@@ -39,6 +39,7 @@ EOF
cp -a /etc/login.defs /root/.ciss/dlb/backup/login.defs.bak
sed -ri 's/^(#?LOGIN_TIMEOUT)[[:space:]]+[0-9]+/\1 180/' /etc/login.defs
sed -i 's/UMASK 022/UMASK 077/' /etc/login.defs
sed -i 's/PASS_MAX_DAYS 99999/PASS_MAX_DAYS 16384/' /etc/login.defs
sed -i 's/PASS_MIN_DAYS 0/PASS_MIN_DAYS 1/' /etc/login.defs

View File

@@ -51,7 +51,7 @@ difok = 4
### Minimum acceptable size for the new password (plus one if
### credits are not disabled, which is the default). (See pam_cracklib manual.)
### Cannot be set to a lower value than 6.
minlen = 20
minlen = 40
### dcredit = 0, ucredit = 0, lcredit = 0, ocredit = 0, minclass = 0
### NIST SP 800-63B advises against rigid complexity rules (numbers, symbols, uppercase)

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
### https://www.ssh-audit.com/
### ssh -Q cipher | cipher-auth | compression | kex | kex-gss | key | key-cert | key-plain | key-sig | mac | protocol-version | sig
@@ -51,7 +51,7 @@ MaxSessions 2
MaxStartups 08:64:16
### Restrict each individual source IP to only 4 unauthenticated connection slot
### in the concurrent MaxStartups pool, preventing one IP from monopolizing slots.
PerSourceMaxStartups 4
PerSourceMaxStartups 8
ClientAliveInterval 300
ClientAliveCountMax 2

View File

@@ -9,7 +9,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
### Version Master V8.03.644.2025.06.07
### Version Master V8.03.768.2025.06.17
### https://docs.kernel.org/
### https://github.com/a13xp0p0v/kernel-hardening-checker/

View File

@@ -10,7 +10,7 @@
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
declare -gr VERSION="Master V8.03.644.2025.06.07"
declare -gr VERSION="Master V8.03.768.2025.06.17"
### VERY EARLY CHECK FOR DEBUGGING
if [[ $* == *" --debug "* ]]; then

View File

@@ -112,4 +112,4 @@ d-i preseed/late_command string sh /preseed/.ash/3_di_preseed_late_command.sh
# Please consider donating to my work at: https://coresecret.eu/spenden/
###########################################################################################
# Written by: ./preseed_hash_generator.sh Version: Master V8.03.644.2025.06.07 at: 10:18:37.9542
# Written by: ./preseed_hash_generator.sh Version: Master V8.03.768.2025.06.17 at: 10:18:37.9542

View File

@@ -33,6 +33,7 @@
trap ' "${SHELL}" /root/.ciss/clean_logout.sh ' 0
source /root/.ciss/alias
source /root/.ciss/f2bchk.sh
source /root/.ciss/shortcuts
source /root/.ciss/scan_libwrap

View File

@@ -158,14 +158,22 @@ genpasswdhash() {
# shellcheck disable=SC2317
scurl() {
if [[ $# -ne 2 ]]; then
printf "\e[91m❌ Error: Usage: scurl <URL> <path/to/file>. \e[0m\n" >&2
printf "\e[91m❌ Error: Usage: scurl <URL> <path/to/file>.\e[0m\n" >&2
return 1
fi
if ! curl --proto '=https' --tlsv1.3 -sSf -o "${2}" "${1}"; then
printf "\e[91m❌ Error: Download failed for URL: '%s'. \e[0m\n" "${1}" >&2
declare url="$1"
declare output_path="$2"
if ! curl --doh-url "https://dns01.eddns.eu/dns-query" \
--doh-cert-status \
--tlsv1.3 \
-sSf \
-o "${output_path}" \
"${url}"
then
printf "\e[91m❌ Error: Download failed for URL: '%s'.\e[0m\n" "${url}" >&2
return 2
fi
return 0
}
###########################################################################################
@@ -177,14 +185,23 @@ scurl() {
# shellcheck disable=SC2317
swget() {
if [[ $# -ne 2 ]]; then
printf "\e[91m❌ Error: Usage: swget <URL> <path/to/file>. \e[0m\n" >&2
printf "\e[91m❌ Error: Usage: swget <URL> <path/to/file>.\e[0m\n" >&2
return 1
fi
if ! wget --no-clobber --https-only --secure-protocol=TLSv1_3 -qO "${2}" "${1}"; then
printf "\e[91m❌ Error: Download failed for URL: '%s'. \e[0m\n" "${1}" >&2
declare url="$1"
declare output_path="$2"
mkdir -p "$(dirname "${output_path}")"
if ! wget --show-progress \
--no-clobber \
--https-only \
--secure-protocol=TLSv1_3 \
-qO "${output_path}" \
"${url}"
then
printf "\e[91m❌ Error: Download failed for URL: '%s'.\e[0m\n" "$url" >&2
return 2
fi
return 0
}
###########################################################################################

View File

@@ -0,0 +1,87 @@
#!/bin/bash
# SPDX-Version: 3.0
# SPDX-CreationInfo: 2025-05-05; WEIDNER, Marc S.; <msw@coresecret.dev>
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
# SPDX-FileType: SOURCE
# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
# SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu
#######################################
# Wrapper for fail2ban filter checks against logs.
# Usage: f2bchk --mode=ignored || --mode=matched || --mode=missed \
# --filter=/etc/fail2ban/filter.d/ufw.aggressive.conf \
# --log=/var/log/ufw.log \
# --output=/tmp/f2bchk.log
# Globals:
# DEFAULT_FILTER
# DEFAULT_LOG
# DEFAULT_MODE
# Arguments:
# None
# Returns:
# 1 In case of any errors
#######################################
f2bchk(){
# Declare default values (readonly)
declare -r DEFAULT_MODE="matched"
declare -r DEFAULT_FILTER="/etc/fail2ban/filter.d/ufw.aggressive.conf"
declare -r DEFAULT_LOG="/var/log/ufw.log"
declare mode="${DEFAULT_MODE}"
declare filter="${DEFAULT_FILTER}"
declare log="${DEFAULT_LOG}"
declare output=""
declare arg=""
for arg in "$@"; do
case "${arg}" in
--mode=*) mode="${arg#--mode=}";;
--filter=*) filter="${arg#--filter=}";;
--log=*) log="${arg#--log=}";;
--output=*) output="${arg#--output=}";;
*)
printf "\e[31m[ERROR]\e[0m Unknown argument: %s\n" "${arg}"
return 1
;;
esac
done
declare flag suffix
case "${mode}" in
ignored) flag="--print-all-ignored"; suffix="all.ignored";;
matched) flag="--print-all-matched"; suffix="all.matched";;
missed) flag="--print-all-missed"; suffix="all.missed";;
*)
printf "\e[31m[ERROR]\e[0m Invalid mode: %s\n" "${mode}"
return 1
;;
esac
if [[ -z "${output}" ]]; then
declare filter_name="${filter##*/}"
filter_name="${filter_name%.conf}"
output="/tmp/${filter_name}.${suffix}.log"
fi
if [[ ! -r "${log}" ]]; then
printf "\e[31m[ERROR]\e[0m Log file '%s' not found or not readable.\n" "${log}"
return 1
fi
if [[ ! -r "${filter}" ]]; then
printf "\e[31m[ERROR]\e[0m Filter file '%s' not found or not readable.\n" "${filter}"
return 1
fi
printf "\e[33m[INFO]\e[0m Running: fail2ban-regex %s %s %s\n" "${log}" "${filter}" "${flag}"
if fail2ban-regex "${log}" "${filter}" "${flag}" >| "${output}"; then
printf "\e[32m[SUCCESS]\e[0m Saved log to %s\n" "$output"
printf "You can view it with: cat %s\n" "$output"
else
printf "\e[31m[ERROR]\e[0m fail2ban-regex execution failed.\n"
return 1
fi
}
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. DNSSEC Status

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Haveged Audit on Netcup RS 2000 G11

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Lynis Audit:

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. SSH Audit by ssh-audit.com

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. TLS Audit:

View File

@@ -8,13 +8,45 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Changelog
## V8.03.768.2025.06.17
* Updated LIVE ISO workflows to use Kernel: ``linux-image-6.12.30+bpo-amd64``
## V8.03.768.2025.06.11
* Updated LIVE ISO workflows to use Kernel: ``linux-image-6.12.27+bpo-amd64``
## V8.03.768.2025.06.09
* Added: [f2bchk.sh](../config/includes.chroot/root/.ciss/f2bchk.sh)
* Updated: [alias](../config/includes.chroot/root/.ciss/alias)
* ``scurl()``
* ``swget()``
## V8.03.644.2025.06.07
* Updated workflows ISO Generators: ``--entrypoint /sbin/init``
* Updated workflows ISO Generators Runners.
* Installing ``bookworm-backports`` Versions of:
* ``btrfs-progs``
* ``curl``
* ``debootstrap``
* ``iproute2``
* ``ncat``
* ``nmap``
* ``ssh``
* ``systemd``
* ``systemd-sysv``
* ``whois``
* Changed default: ``/etc/login.defs`` ``LOGIN_TIMEOUT 60`` to: ``LOGIN_TIMEOUT 180``
* LIVE ISO generated by workflow tested against:
* Netcup Root Server
* Proxmox
* LIVE ISO generated by script tested against:
* Netcup Root Server
## V8.03.512.2025.06.06

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Centurion Net - Developer Branch Overview

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Coding Style

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Contributing / participating

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Credits

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Download the latest PUBLIC CISS.debian.live.ISO

View File

@@ -8,12 +8,12 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Usage
````text
CISS.debian.live.builder
Master V8.03.644.2025.06.07
Master V8.03.768.2025.06.17
(c) Marc S. Weidner, 2018 - 2025
(p) Centurion Press, 2024 - 2025

View File

@@ -8,7 +8,7 @@ include_toc: true
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
**Master Version**: 8.03<br>
**Build**: V8.03.644.2025.06.07<br>
**Build**: V8.03.768.2025.06.17<br>
# 2. Resources

Binary file not shown.

Before

Width:  |  Height:  |  Size: 179 KiB

After

Width:  |  Height:  |  Size: 189 KiB

View File

@@ -16,16 +16,33 @@
# None
#######################################
check_pkgs() {
if [[ ! -f /usr/share/live/build/VERSION ]]; then
apt-get update -y
if [[ -z "$(command -v lsb_release || true)" ]]; then
apt-get install --no-install-recommends lsb-release -y
fi
if [[ -z "$(command -v debootstrap || true)" ]]; then
if grep -RqsE '^[[:space:]]*deb .*backports' /etc/apt/sources.list /etc/apt/sources.list.d; then
# shellcheck disable=SC2155
declare codename=$(lsb_release -sc)
apt-get -t "${codename}-backports" install debootstrap -y
else
apt-get install debootstrap -y
fi
fi
if [[ ! -f /usr/share/live/build/VERSION ]]; then
apt-get install live-build -y
fi
if [[ -z "$(command -v dialog || true)" ]]; then
if ! $VAR_HANDLER_AUTOBUILD; then apt-get install --no-install-recommends dialog -y; fi
if ! $VAR_HANDLER_AUTOBUILD; then
apt-get install --no-install-recommends dialog -y;
fi
fi
if [[ -z "$(command -v mkpasswd || true)" ]]; then
apt-get update -y
apt-get install --no-install-recommends whois -y
fi
}

View File

@@ -18,7 +18,7 @@
check_provider() {
clear
cat << 'EOF' >| "${VAR_NOTES}"
Build: Master V8.03.644.2025.06.07
Build: Master V8.03.768.2025.06.17
Press 'EXIT' to continue with CISS.debian.live.builder.

View File

@@ -22,7 +22,7 @@ usage() {
cat << EOF
$(echo -e "\e[92mCISS.debian.live.builder\e[0m")
$(echo -e "\e[92mMaster V8.03.644.2025.06.07\e[0m")
$(echo -e "\e[92mMaster V8.03.768.2025.06.17\e[0m")
$(echo -e "\e[97m(c) Marc S. Weidner, 2018 - 2025\e[0m")
$(echo -e "\e[97m(p) Centurion Press, 2024 - 2025\e[0m")

View File

@@ -15,7 +15,7 @@ printf "\e[95m++++ ++++ ++++ ++++ ++++ ++++ ++ 🧪 '%s' starting ... \e[0m\n" "
# sleep 1
[[ ! -d /root/.cdi/log ]] && mkdir -p /root/.cdi/log
printf "CISS.debian.installer Master V8.03.644.2025.06.07 is up!" >| /root/.cdi/log/boot_finished_"$(date +"%Y-%m-%d_%H-%M-%S")".log
printf "CISS.debian.installer Master V8.03.768.2025.06.17 is up!" >| /root/.cdi/log/boot_finished_"$(date +"%Y-%m-%d_%H-%M-%S")".log
if [[ -f /root/git/CISS.debian.installer/ciss_debian_installer.sh ]]; then
chmod 0700 /root/git/CISS.debian.installer/ciss_debian_installer.sh

View File

@@ -33,16 +33,16 @@ touch "${LOG_ERROR}" && chmod 0600 "${LOG_ERROR}"
declare -g VAR_ARCHITECTURE=""
declare -g VAR_HANDLER_BUILD_DIR=""
declare -g VAR_HANDLER_CDI=""
declare -g VAR_HANDLER_DHCP=""
declare -g VAR_HANDLER_CDI="false"
declare -gi VAR_HANDLER_DHCP=0
declare -g VAR_HANDLER_SPLASH=""
declare -g VAR_SSHPORT=""
declare -g VAR_SSHPUBKEY=""
declare -g VAR_SCRIPT_SUCCESS=""
declare -g VAR_SCRIPT_SUCCESS="false"
declare -g VAR_HANDLER_PRIORITY=""
declare -g VAR_HANDLER_NETCUP_IPV6=""
declare -g VAR_HANDLER_NETCUP_IPV6="false"
declare -g VAR_HASHED_PWD=""
declare -g VAR_HANDLER_STA=""
declare -gi VAR_HANDLER_STA=0
declare -g VAR_REIONICE_CLASS=""
declare -g VAR_REIONICE_PRIORITY=""
declare -gr VAR_CHROOT_DIR="chroot"