fripost-preseed - Fripost preseeding scripts

	Commit message (Collapse)	Author	Age	Files
*	Consolidate sshd_configHEAD master	Guilhem Moulin	2020-05-17	2
\|
*	Add READMEs.	Guilhem Moulin	2019-06-28	2
\|
*	fix bug in fripost_mdadm_create.	Guilhem Moulin	2017-05-30	1
\|
*	sshd_config: set UsePrivilegeSeparation sandbox.	Guilhem Moulin	2017-05-30	1
\|
*	virtualenv: don't let SPICE listen on a socket.	Guilhem Moulin	2017-05-30	1
\|
*	/proc/sys/kernel/random/poolsize is in bits not bytes.	Guilhem Moulin	2017-05-30	1
\|
*	udeb: only copy generated .udeb files to the iso image.	Guilhem Moulin	2017-05-29	2
\|
*	Automatically launch the install.	Guilhem Moulin	2017-05-29	1
\|
*	Update preseed.cfg	Guilhem Moulin	2017-05-29	1
\|
*	Bump iso version.	Guilhem Moulin	2017-05-29	1
\|
*	Bump iso version.	Guilhem Moulin	2016-01-01	1
\|
*	.gitignore	Guilhem Moulin	2015-06-07	1
\|
*	Use better defaults for VMs.	Guilhem Moulin	2015-06-07	1
\|
*	Make the encrypted installation work with Jessie.	Guilhem Moulin	2015-06-07	3
\|
*	Remove the SELinux configuration option.	Guilhem Moulin	2015-06-07	3
\| \| \| \|	Since the default policy is no longer available in Jessie.
*	Prefer BTRFS over LVM2.	Guilhem Moulin	2015-06-07	2
\|
*	Unsure that existing swaps are unused.	Guilhem Moulin	2015-06-07	1
\|
*	Select the first available block device by default.	Guilhem Moulin	2015-06-07	2
\|
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Jessie fixups.	Guilhem Moulin	2015-06-07	4
\|
*	Upgrade the preseed script to make it work with Debian Jessie.	Guilhem Moulin	2015-06-07	4
\|
*	Upgrade preseeding to Debian 7.7.	Guilhem Moulin	2015-06-07	4
\|
*	Remove the 'gamin' package.	Guilhem Moulin	2015-06-07	1
\|
*	Support non-free firmwares. (Can be required :-()	Guilhem Moulin	2015-06-07	1
\| \| \| \|	Also, always install contrib's intel-microcode on Intel CPUs.
*	Bump debian_version to 7.5.0	Guilhem Moulin	2015-06-07	2
\|
*	wibble	Guilhem Moulin	2015-06-07	3
\|
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Restrict SSH login to members of the 'ssh-login' group.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \|	Don't use the group 'ssh', as it's automatically created by openssh-client's postinstall hook, and is used for ssh-agent's setgid.
*	Force grub to be installed on devices other than /dev/sda if asked to.	Guilhem Moulin	2015-06-07	2
\| \| \| \|	This is a dirty fix for #666974 (which is fixed in Jessie's installer).
*	Dirty fix for bug #666974.	Guilhem Moulin	2015-06-07	1
\|
*	Bugfix for #666974.	Guilhem Moulin	2015-06-07	1
\|
*	Bump the installer to the last Debian point-release.	Guilhem Moulin	2015-06-07	1
\|
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Improve the description of preseeding options.	Guilhem Moulin	2015-06-07	3
\|
*	Show a progress bar when creating RAID arrays.	Guilhem Moulin	2015-06-07	3
\|
*	Enable generation of HDD images.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \|	This is only useful for older BIOSes, that don't support hybrid ISO which can otherwise be burnt onto USB key as well.
*	Preseed locales.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	See #684134, though: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684134
*	Enable RAID root system.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Quoting /usr/share/doc/cryptsetup/README.keyctl : The current state for dm-crypt in Linux is that it is single threaded, thus every dm-crypt mapping only uses a single core for crypto operations. To use the full power of your many-core processor it is thus necessary to split the dm-crypt device. For Linux software raid arrays the easiest segmentation is to just put the dm-crypt layer below the software raid layer. However, this seems no longer true since 2.6.38, cf. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714806 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c029772125594e31eb1a5ad9e0913724ed9891f2 http://kernelnewbies.org/Linux_2_6_38#head-49f5f735853f8cc7c4d89e5c266fe07316b49f4c Therefore encrypting the array (instead of assembling an array of encrypted disks) shouldn't cause a performance cost. Also, it makes the ramdisk much easier to configure :-)
*	Ensure urandom entropy is of cryptographic quality.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \| \| \| \| \| \| \| \|	The non-blocking PRNG /dev/urandom doesn't block if it has been seeded enough, sadly (e.g., if the entropy pool is empty). Reading a few bytes from the blocking should ensure that "the kernel RNG has [...] reach full entropy at least once, which guarantees cryptographic quality of the rest of the /dev/urandom stream." -- Tor bug #10676 https://trac.torproject.org/projects/tor/ticket/10676 See also urandom(4).
*	wibble	Guilhem Moulin	2015-06-07	1
\|
*	Use dpkg-architecture(1).	Guilhem Moulin	2015-06-07	3
\| \| \| \| \| \| \| \| \| \| \| \|	When compiling for x86_86 on a i386 machine or vice versa, the following warning appears: dpkg-architecture: warning: specified GNU system type x86_64-linux-gnu does not match gcc system type i486-linux-gnu, try setting a correct CC environment variable However this is harmless, even if the multilib approach is a bit hacky and does not replace a proper cross-compiler. Cf. bug #712000 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712000
*	wibble	Guilhem Moulin	2015-06-07	2
\|
*	Multiarch support.	Guilhem Moulin	2015-06-07	5
\| \| \| \|	Run 'ARCH=amd64 make' to preseed an AMD64 ISO image, etc.
*	Fix warning when building packages.	Guilhem Moulin	2015-06-07	4
\| \| \| \|	(I.e., make lintian happy.)
*	UEFI support.	Guilhem Moulin	2015-06-07	3
\| \| \| \| \|	Tested with the Intel® Desktop Board DH87RL, BIOS [RLH8710H.86A] version 0323.
*	bugfix	Guilhem Moulin	2015-06-07	3
\|
*	Update the debian version.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	To the latest point release, 7.3.0.
*	wibble	Guilhem Moulin	2015-06-07	4
\|
*	Reformulate the headers showing the license.	Guilhem Moulin	2015-06-07	5
\| \| \| \| \|	To be clearer, and to follow the recommendation of the FSF, we include a full header rather than a single sentence.
*	Refactored 'virt' shell script.	Guilhem Moulin	2015-06-07	1
\|