Marc S. Weidner
60374476ab
Some checks failed
💙 Generating a PUBLIC Live ISO. / 💙 Generating a PUBLIC Live ISO. (push) Has been cancelled
🔐 Generating a Private Live ISO TRIXIE. / 🔐 Generating a Private Live ISO TRIXIE. (push) Has been cancelled
🛡️ Retrieve DNSSEC status of coresecret.dev. / 🛡️ Retrieve DNSSEC status of coresecret.dev. (push) Successful in 1m6s
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m47s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
100 lines
3.2 KiB
Bash
100 lines
3.2 KiB
Bash
# bashsupport disable=BP5007
|
|
|
|
# SPDX-Version: 3.0
|
|
# SPDX-CreationInfo: 2025-05-05; WEIDNER, Marc S.; <msw@coresecret.dev>
|
|
# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.live.builder.git
|
|
# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
|
|
# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
|
|
# SPDX-FileType: SOURCE
|
|
# SPDX-License-Identifier: LicenseRef-CNCL-1.1 OR LicenseRef-CCLA-1.1
|
|
# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
|
|
# SPDX-PackageName: CISS.debian.live.builder
|
|
# SPDX-Security-Contact: security@coresecret.eu
|
|
|
|
[[ $- != *i* ]] && return
|
|
|
|
### Never use 'errexit' | 'nounset' | 'pipefail' in interactive shells.
|
|
set +o errexit +o nounset +o pipefail
|
|
|
|
# shellcheck disable=SC2312
|
|
if [[ "$(id -u)" -eq 0 ]]; then
|
|
umask 0022
|
|
PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
|
else
|
|
umask 0077
|
|
PATH="/usr/local/bin:/usr/bin:/bin"
|
|
fi
|
|
export PATH
|
|
|
|
trap ' "${SHELL}" /root/.ciss/clean_logout.sh ' EXIT
|
|
source /root/.ciss/alias
|
|
source /root/.ciss/f2bchk.sh
|
|
source /root/.ciss/shortcuts
|
|
source /root/.ciss/scan_libwrap
|
|
|
|
### Preferred editor for local and remote sessions.
|
|
export EDITOR="nano"
|
|
|
|
### History-Settings
|
|
# The name of the file in which command history is saved. The default value is ~/.bash_history. If unset, the command history
|
|
# is not saved when a shell exits.
|
|
export HISTFILE="${XDG_STATE_HOME}/bash/history"
|
|
|
|
touch "${HISTFILE}"
|
|
chmod 0660 "${HISTFILE}"
|
|
chown root:root "${HISTFILE}"
|
|
|
|
export HISTSIZE=2048
|
|
export HISTFILESIZE=2048
|
|
shopt -s histappend
|
|
|
|
# Optional, cautious filters (avoids trivial leaks, but not foolproof). Caution: HISTIGNORE is coarse-grained, don't overdo it.
|
|
export HISTIGNORE='*PASS*:*pass*:*secret*:*token*:*API_KEY*'
|
|
|
|
# -'ignoreboth' Do not put duplicate lines or lines starting with space in the history.
|
|
# -'erasedups' Causes all previous lines matching the current line to be removed from the history before that line is saved.
|
|
export HISTCONTROL='ignoreboth:erasedups'
|
|
|
|
### Define colors for bash prompt
|
|
export CRED='\033[1;91m'
|
|
export CGRE='\033[1;92m'
|
|
export CYEL='\033[1;93m'
|
|
export CBLU='\033[1;94m'
|
|
export CMAG='\033[1;95m'
|
|
export CCYA='\033[1;96m'
|
|
export CWHI='\033[1;97m'
|
|
export CRES='\033[0m'
|
|
export NL='\n'
|
|
|
|
### Define bash colorful prompt
|
|
export PS1="\
|
|
\[\033[1;91m\]\d\[\033[0m\]|\
|
|
\[\033[1;91m\]\u\[\033[0m\]@\
|
|
\[\033[1;95m\]\h\[\033[0m\]:\
|
|
\[\033[1;96m\]\w\[\033[0m\]/>>\
|
|
\$(if [[ \$? -eq 0 ]]; then \
|
|
echo -e \"\[\033[1;92m\]\$?\[\033[0m\]\"; \
|
|
else \
|
|
echo -e \"\[\033[1;91m\]\$?\[\033[0m\]\"; \
|
|
fi)\
|
|
\$(if [[ \$(id -u) -eq 0 ]]; then echo -e \" \[\033[1;91m\]#\[\033[0m\] \"; else echo -e \" \[\033[1;92m\]\\\$\[\033[0m\] \"; fi)"
|
|
|
|
### Overwrite Protection
|
|
set -o noclobber
|
|
alias cp="cp -iv"
|
|
alias mv='mv -iv'
|
|
alias rm='rm -iv'
|
|
|
|
### Welcome message after login.
|
|
printf "%b" "${NL}"
|
|
printf "%b🔐 Coresecret Channel Established. %b%b" "${CRED}" "${CRES}" "${NL}"
|
|
printf "%b✅ Welcome back %b " "${CGRE}" "${CRES}"
|
|
printf "%b'%s'%b" "${CMAG}" "${USER}" "${CRES}"
|
|
printf "%b! Type%b" "${CGRE}" "${CRES}"
|
|
printf "%b 'celp'%b" "${CMAG}" "${CRES}"
|
|
printf "%b for shortcuts. %b%b" "${CGRE}" "${CRES}" "${NL}"
|
|
printf "%b" "${NL}"
|
|
printf "%b" "${NL}"
|
|
|
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
|