1. CISS.debian.live.builder

Centurion Intelligence Consulting Agency Information Security Standard
Debian Live Build Generator for hardened live environment and CISS Debian Installer
Master Version: 8.02
Build: V8.03.127.2025.06.02

2. Resources

2.1. Debian Live related

• Debian live-boot
• Debian Live Manual
• Debian Live Boot Doc
• Debian Live Build
• Debian Live Config
• Debian Live Tools

2.2. Disk Encryption related

• https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system
• https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Encrypted_boot_partition_(GRUB)
• https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode
• https://wiki.archlinux.org/title/GRUB#Encrypted_/boot
• https://wiki.archlinux.org/title/GRUB#LUKS2
• https://wiki.archlinux.org/title/Advanced_Format
• https://packages.debian.org/bookworm-backports/grub-common
• https://www.kernel.org/doc/html/v5.5/admin-guide/device-mapper/dm-integrity.html
• https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption
• https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#2-setup

2.3. Kernel related

• https://wiki.archlinux.org/title/Kernel
• https://wiki.archlinux.org/title/Kernel_parameters
• https://www.kernel.org/
• https://github.com/anthraxx/linux-hardened

2.4. Policy related

• https://www.debian.org/doc/manuals/securing-debian-manual/
• https://www.tenable.com/audits/CIS_Debian_Linux_12_v1.0.1_L1_Server
• https://www.cisecurity.org/cis-benchmarks
• https://github.com/CISOfy/lynis
• https://github.com/lateralblast/lunar
• https://complianceascode.github.io/content-pages/guides/ssg-debian12-guide-standard.html

2.5. Security related

• https://wiki.archlinux.org/title/General_recommendations
• https://wiki.archlinux.org/title/Security
• https://wiki.archlinux.org/title/Identity_management
• https://wiki.archlinux.org/title/Capabilities
• https://privsec.dev/posts/linux/desktop-linux-hardening/
• https://wiki.archlinux.org/title/fail2ban#Service_hardenin
• https://theprivacyguide1.github.io/linux_hardening_guide
• https://github.com/zabbly/linux

2.6. Bash related

• https://www.gnu.org/software/bash/manual/
• https://www.shellcheck.net/
• https://explainshell.com/
• https://google.github.io/styleguide/shellguide.html
• https://github.com/mvdan/sh
• https://gist.github.com/Potherca/4f4ce1c8d4bcf4cd4aab

2.6.1. Error handling

• Use set -e - Writing Robust Bash Shell Scripts - David Pashley
• Why doesn't set -e (or set -o errexit, or trap ERR) do what I expected? - BashFAQ/105 - Greg's Wiki

no tracking | no logging | no advertising | no profiling | no bullshit