Marc S. Weidner
68eb879c8a
All checks were successful
🛡️ Retrieve DNSSEC status of coresecret.dev. / 🛡️ Retrieve DNSSEC status of coresecret.dev. (push) Successful in 34s
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m19s
🔐 Generating a Private Live ISO FLV 0. / 🔐 Generating a Private Live ISO FLV 0. (push) Successful in 48m28s
🔐 Generating a Private Live ISO FLV 1. / 🔐 Generating a Private Live ISO FLV 1. (push) Successful in 47m5s
💙 Generating a PUBLIC Live ISO. / 💙 Generating a PUBLIC Live ISO. (push) Successful in 47m5s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
75 lines
2.3 KiB
Markdown
75 lines
2.3 KiB
Markdown
---
|
|
gitea: none
|
|
include_toc: true
|
|
---
|
|
|
|
# 1. CISS.debian.live.builder
|
|
|
|
**Centurion Intelligence Consulting Agency Information Security Standard**<br>
|
|
*Debian Live Build Generator for hardened live environment and CISS Debian Installer*<br>
|
|
**Master Version**: 8.03<br>
|
|
**Build**: V8.03.768.2025.06.09<br>
|
|
|
|
# 2. Changelog
|
|
|
|
## V8.03.768.2025.06.09
|
|
|
|
* Added: [f2bchk.sh](../config/includes.chroot/root/.ciss/f2bchk.sh)
|
|
* Updated: [alias](../config/includes.chroot/root/.ciss/alias)
|
|
* ``scurl()``
|
|
* ``swget()``
|
|
|
|
## V8.03.644.2025.06.07
|
|
|
|
* Updated workflows ISO Generators Runners.
|
|
* Installing ``bookworm-backports`` Versions of:
|
|
* ``btrfs-progs``
|
|
* ``curl``
|
|
* ``debootstrap``
|
|
* ``iproute2``
|
|
* ``ncat``
|
|
* ``nmap``
|
|
* ``ssh``
|
|
* ``systemd``
|
|
* ``systemd-sysv``
|
|
* ``whois``
|
|
* Changed default: ``/etc/login.defs`` ``LOGIN_TIMEOUT 60`` to: ``LOGIN_TIMEOUT 180``
|
|
* LIVE ISO generated by workflow tested against:
|
|
* Netcup Root Server
|
|
* Proxmox
|
|
* LIVE ISO generated by script tested against:
|
|
* Netcup Root Server
|
|
|
|
## V8.03.512.2025.06.06
|
|
|
|
* Updated workflows:
|
|
1. ``git stash push``
|
|
2. ``git fetch origin master``
|
|
3. ``git merge --no-edit origin/master``
|
|
4. ``git stash pop``
|
|
|
|
* Changed workflows ISO Generators routines ``🛠️ Build GnuPG from the sources, as the Bookworm GPG does not understand key format 5.``
|
|
* added ``wget --https-only`` flag
|
|
* added verification step
|
|
|
|
## V8.03.400.2025.06.05
|
|
|
|
* The workflow ISO Generators image was changed to ``debian:bookworm``.
|
|
* Added a LIVE ISO workflow routine to build GnuPG from sources, since Bookworm GPG does not recognize key format 5.
|
|
* Changed verbosity of:
|
|
* [9993_aide.chroot](../config/hooks/live/9993_aide.chroot)
|
|
* [9997_debsums.chroot](../config/hooks/live/9997_debsums.chroot)
|
|
* Added basic linter checks for:
|
|
* **``*.sh``**,
|
|
* **``*.zsh``**,
|
|
* **``*.chroot``**,
|
|
* all files with Shebang **``#``**! for:
|
|
* Windows CRLF line endings
|
|
* unauthorized control characters (C0 control characters except \t, \n)
|
|
* non-ASCII (ambiguous UTF) characters
|
|
* [linter_char_scripts.yaml](../.gitea/workflows/linter_char_scripts.yaml)
|
|
|
|
---
|
|
**[no tracking | no logging | no advertising | no profiling | no bullshit](https://coresecret.eu/)**
|
|
<!-- vim: set number et ts=2 sw=2 sts=2 ai tw=128 ft=markdown -->
|