CISS.debian.live.builder/docs/REFERENCES.html

<h1 id="1-cissdebianlivebuilder">1. CISS.debian.live.builder</h1>
<p><strong>Centurion Intelligence Consulting Agency Information Security Standard</strong><br> <em>Debian Live Build Generator for hardened live environment and CISS Debian Installer</em><br> <strong>Master Version</strong>: 8.02<br> <strong>Build</strong>: V8.03.127.2025.06.02<br></p>
<h1 id="2-resources">2. Resources</h1>
<h2 id="21-debian-live-related">2.1. Debian Live related</h2>
<ul>
<li><a href="https://salsa.debian.org/live-team/live-boot">Debian live-boot</a></li>
<li><a href="https://live-team.pages.debian.net/live-manual/html/live-manual/index.en.html">Debian Live Manual</a></li>
<li><a href="https://manpages.debian.org/bookworm/live-boot-doc/live-boot.7.en.html">Debian Live Boot Doc</a></li>
<li><a href="https://manpages.debian.org/bookworm/live-build/index.html">Debian Live Build</a></li>
<li><a href="https://manpages.debian.org/bookworm/live-config-doc/index.html">Debian Live Config</a></li>
<li><a href="https://manpages.debian.org/bookworm/live-tools/index.html">Debian Live Tools</a></li>
</ul>
<h2 id="22-disk-encryption-related">2.2. Disk Encryption related</h2>
<ul>
<li><a href="https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system"><span>https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Encrypted_boot_partition_(GRUB)"><span>https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Encrypted_boot_partition_(GRUB)</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode"><span>https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode</span></a></li>
<li><a href="https://wiki.archlinux.org/title/GRUB#Encrypted_/boot"><span>https://wiki.archlinux.org/title/GRUB#Encrypted_/boot</span></a></li>
<li><a href="https://wiki.archlinux.org/title/GRUB#LUKS2"><span>https://wiki.archlinux.org/title/GRUB#LUKS2</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Advanced_Format"><span>https://wiki.archlinux.org/title/Advanced_Format</span></a></li>
<li><a href="https://packages.debian.org/bookworm-backports/grub-common"><span>https://packages.debian.org/bookworm-backports/grub-common</span></a></li>
<li><a href="https://www.kernel.org/doc/html/v5.5/admin-guide/device-mapper/dm-integrity.html"><span>https://www.kernel.org/doc/html/v5.5/admin-guide/device-mapper/dm-integrity.html</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption"><span>https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption</span></a></li>
<li><a href="https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#2-setup"><span>https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#2-setup</span></a></li>
</ul>
<h2 id="23-kernel-related">2.3. Kernel related</h2>
<ul>
<li><a href="https://wiki.archlinux.org/title/Kernel"><span>https://wiki.archlinux.org/title/Kernel</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Kernel_parameters"><span>https://wiki.archlinux.org/title/Kernel_parameters</span></a></li>
<li><a href="https://www.kernel.org/"><span>https://www.kernel.org/</span></a></li>
<li><a href="https://github.com/anthraxx/linux-hardened"><span>https://github.com/anthraxx/linux-hardened</span></a></li>
</ul>
<h2 id="24-policy-related">2.4. Policy related</h2>
<ul>
<li><a href="https://www.debian.org/doc/manuals/securing-debian-manual/"><span>https://www.debian.org/doc/manuals/securing-debian-manual/</span></a></li>
<li><a href="https://www.tenable.com/audits/CIS_Debian_Linux_12_v1.0.1_L1_Server"><span>https://www.tenable.com/audits/CIS_Debian_Linux_12_v1.0.1_L1_Server</span></a></li>
<li><a href="https://www.cisecurity.org/cis-benchmarks"><span>https://www.cisecurity.org/cis-benchmarks</span></a></li>
<li><a href="https://github.com/CISOfy/lynis"><span>https://github.com/CISOfy/lynis</span></a></li>
<li><a href="https://github.com/lateralblast/lunar"><span>https://github.com/lateralblast/lunar</span></a></li>
<li><a href="https://complianceascode.github.io/content-pages/guides/ssg-debian12-guide-standard.html"><span>https://complianceascode.github.io/content-pages/guides/ssg-debian12-guide-standard.html</span></a></li>
</ul>
<h2 id="25-security-related">2.5. Security related</h2>
<ul>
<li><a href="https://wiki.archlinux.org/title/General_recommendations"><span>https://wiki.archlinux.org/title/General_recommendations</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Security"><span>https://wiki.archlinux.org/title/Security</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Identity_management"><span>https://wiki.archlinux.org/title/Identity_management</span></a></li>
<li><a href="https://wiki.archlinux.org/title/Capabilities"><span>https://wiki.archlinux.org/title/Capabilities</span></a></li>
<li><a href="https://privsec.dev/posts/linux/desktop-linux-hardening/"><span>https://privsec.dev/posts/linux/desktop-linux-hardening/</span></a></li>
<li><a href="https://wiki.archlinux.org/title/fail2ban#Service_hardenin"><span>https://wiki.archlinux.org/title/fail2ban#Service_hardenin</span></a></li>
<li><a href="https://theprivacyguide1.github.io/linux_hardening_guide"><span>https://theprivacyguide1.github.io/linux_hardening_guide</span></a></li>
<li><a href="https://github.com/zabbly/linux"><span>https://github.com/zabbly/linux</span></a></li>
</ul>
<h2 id="26-bash-related">2.6. Bash related</h2>
<ul>
<li><a href="https://www.gnu.org/software/bash/manual/"><span>https://www.gnu.org/software/bash/manual/</span></a></li>
<li><a href="https://www.shellcheck.net/"><span>https://www.shellcheck.net/</span></a></li>
<li><a href="https://explainshell.com/"><span>https://explainshell.com/</span></a></li>
<li><a href="https://google.github.io/styleguide/shellguide.html"><span>https://google.github.io/styleguide/shellguide.html</span></a></li>
<li><a href="https://github.com/mvdan/sh"><span>https://github.com/mvdan/sh</span></a></li>
<li><a href="https://gist.github.com/Potherca/4f4ce1c8d4bcf4cd4aab"><span>https://gist.github.com/Potherca/4f4ce1c8d4bcf4cd4aab</span></a></li>
</ul>
<h3 id="261-error-handling">2.6.1. Error handling</h3>
<ul>
<li><a href="https://www.davidpashley.com/articles/writing-robust-shell-scripts/#id2596016">Use set -e - Writing Robust Bash Shell Scripts - David Pashley</a></li>
<li><a href="https://mywiki.wooledge.org/BashFAQ/105">Why doesn't set -e (or set -o errexit, or trap ERR) do what I expected? - BashFAQ/105 - Greg's Wiki</a></li>
</ul>
<hr />
<p><strong><a href="https://coresecret.eu/">no tracking | no logging | no advertising | no profiling | no bullshit</a></strong></p>