Package: anon-apt-sources-list Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 77 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.5-1_all.deb Size: 30652 SHA256: 220a6d8646abc6594bacdefdb06ed05eb0522af1a415df304ba3905728e8be85 SHA1: b6e14f0086e49a37795e91d9f5cff1a8b86931cc MD5sum: c4d94aa23c594a872c1bfcd5855c939a Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:10.7-1 Architecture: all Maintainer: iry Installed-Size: 269 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_10.7-1_all.deb Size: 94972 SHA256: 77e5d8371c7461e2467c698da8856bc0d6c1db5b7ecd2877e02c07987af8ee70 SHA1: 2d0f1d6a9cbe27a5dec756c5d8ef8401e017fc5a MD5sum: cef5bdcae9600ed24498878cc74a44ca Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.9-1_all.deb Size: 64780 SHA256: c53e83849293fa9f4153a14d4fd57ff31900a95aab26258d547d75bb205ee684 SHA1: 3d81aa028c66c4e3885da4bbf7345eea6d117f10 MD5sum: d27f9ca255720d1e2930e2227513462e Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 96 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.9-1_all.deb Size: 36024 SHA256: d5d3a6c89a89a7c1f182467b09b11cf4df65656a1a65489e6aeea5a13dbfba47 SHA1: 18d04b6bd9f198cbb225b928b850d64db9778fe9 MD5sum: 17cedace179beb1fbc96cbff415a005b Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.5-1_all.deb Size: 23912 SHA256: cde89ba8fb7e6965feeb7d72c9dedc6f6c602268122981343fb2c906b9702f0e SHA1: c3e19c274b3dea735cd3b598e11db50fc597cb59 MD5sum: b0b3af0563aa9d6afbf41fabb2ecaf69 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.1-1_all.deb Size: 27056 SHA256: 6b3734055d7123cdc291377d0beecbef74a84085af5b9dc0e9b13b8886d6df79 SHA1: 543793f64ec43200ae051cf2b292f772411deec1 MD5sum: e7b01d88386fbffff39511f7db4ee9cc Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.7-1_all.deb Size: 34852 SHA256: 8d34f303bcf7018e35bdeb17cb7c2e2e993b6eae8b683a914fc990f198c61b4f SHA1: 034631d4720819dcab967050af72446f72ded803 MD5sum: 0c8650b06d1805c0470f1666c84888a8 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_34.0-1_all.deb Size: 81732 SHA256: 453caca73e35db57195a4408bd179c8c0ec9a2bb755afcdbdf594300cdffc644 SHA1: ad4ca181314084bcf9c21c70dc98ab6186a07339 MD5sum: c2791d89f0202cf750af171bddf2310d Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.3-1_all.deb Size: 11256 SHA256: 4f15f98eeded72e6f3fb11e8ac35ff178daf199e9d1e40c2e345d743d2cdffb8 SHA1: 44fd15e99f54a64915e3077725e22d2211d6518d MD5sum: 1bfff5aa44643bc8e79203beedadfce8 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 30 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.1-1_all.deb Size: 14244 SHA256: 14afc74e4259a2b59e34b992e816a98e080f9de8afe8db7803f441a04e5da203 SHA1: 16d5ebdc4c33f28680df567f6f60df6bd571a376 MD5sum: 088b414d2d48ec11110c43dc82a87866 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_7.3-1_all.deb Size: 31132 SHA256: d0f929a80822ca4232827a1e8ff9da67fd4c946f8c6968bfa08b643760a39f57 SHA1: 28e4957b0d56e49a1a6b7eaac393cb9d8c5d399f MD5sum: 4e2af0eae617c3cddc2bb7b7f749c2c6 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:1.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 258 Depends: python3, tb-updater, tb-starter Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_1.3-1_all.deb Size: 57268 SHA256: 15b2abb4db736e9fd79ee4e910b9a1d2ea046798eb8cd39a887b2351f8d30071 SHA1: 91fcfc1b76723d94c8f611e1ecf443015702a907 MD5sum: 0e5c5e5bdb8c57f5583d5d4148fe06e0 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.6-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.6-1_all.deb Size: 129340 SHA256: 3ff040056e9c9189e270aa23a1c8fc55d6d56939e57220b843cf74118798d1e8 SHA1: 199393af56404a62a88d7b4b0204f28dfac29021 MD5sum: 0ac6f698ddac7310c32d16c632df537b Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.6-1_all.deb Size: 13764 SHA256: 31400793c253f5e9996cd178b590add24be1ae5c698528e4e5182de7be73f89b SHA1: 9c177aa560c5f40f9bef976a2b703938f45c1e5b MD5sum: e15f39c72d57c76a51423ffce112643e Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: debug-misc Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.2-1_all.deb Size: 27508 SHA256: fffa13a3d9d6d08a95d574ba27e375299007eff677ff020afd628641706c8768 SHA1: d125ff6f53d2e01a3410a94107b3d55b9288a571 MD5sum: 3d9b5ca0f2e0be64432fc8c4168a0c7d Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:13.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 254 Depends: python3, dconf-gsettings-backend | gsettings-backend Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_13.9-1_all.deb Size: 65420 SHA256: 8b4f900e3e0985c1c1f8fe42f9f38f366cac84124b6399c398079eae975009e5 SHA1: 2b5df54d64e1d11cad9d6af9d4d8acc8e7a188ec MD5sum: d767a231227c5df1e09e06882922c58e Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:13.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 69 Depends: gnome-colors-common, adwaita-icon-theme Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_13.9-1_all.deb Size: 40572 SHA256: 7232ae58ccdf8092ccd8bebb8d9f3045014ce207fa92a7707b490df821b7b21e SHA1: ea082f67009f7a1f19ed7f851f20c8b1b1a8145d MD5sum: 4b82a61cce64c1e21b5a20d0275e2079 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:46.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 393 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_46.5-1_all.deb Size: 145368 SHA256: e6bc609545850c7e9cc8f676284a0d0e38e90b100b8dd26fdd73c9b6a9eb0511 SHA1: e47889f4b0e294a601d1d1982230a43d08327783 MD5sum: 887fc519081a658072c43d7bde97f64c Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: nvme-cli, tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_34.0-1_all.deb Size: 81668 SHA256: aa2fde386068bf085df1d73697ffd444b66327ea63440b2752a3759a288b9461 SHA1: 6cdbc3e3444e78302df481fdd8bdf9f9b0f2daf0 MD5sum: 8aa6df8b129a9ea010ed01571a6bce7b Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: psensor Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_34.0-1_all.deb Size: 81668 SHA256: 30880231d00962949705ca803d71012863ec2df3ab0c0a57bd0c82f739f028ee SHA1: b1461b719a026a806129b6ccb59c60a1be497889 MD5sum: 154bec38f9f83aa5ef03f7f256cf2095 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 686 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.0-1_all.deb Size: 193668 SHA256: 83bbbf1a2c91b0782a31ca816710f39620ef18ab54264108c22f8fec8cf368a1 SHA1: 671753999bb9395fa0b460baf39c2ac8687050c4 MD5sum: 74b1316de92fc98477e6b8ecd7ff2dd3 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usbguard, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, fuse, gpg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_34.0-1_all.deb Size: 82240 SHA256: e30560cd2c55e9b96fd7d202beadbe39cc091b8f20648077413f076113cec605 SHA1: 769e33990a9242ce811087fba545e37e320ac9b8 MD5sum: 494a0eea119573887f57ff9f11dae4fb Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, upower, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64, usbguard-notifier Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_34.0-1_all.deb Size: 81880 SHA256: 58323a01f81ea485b8af9e6da558e3bae06dc9d236c93a9fa33734baf3fdad08 SHA1: c064e9eb9d642c39c9e42e5c787f440cefc172e5 MD5sum: 9c8b0f6f953a7c7a495d2539be523a76 Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-admin, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-notificationd, lxqt-globalkeys, lxqt-qtplugin, pcmanfm-qt, qterminal, qtxdg-tools, lxqt-openssh-askpass, lxqt-sudo, papirus-icon-theme, qps, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, smart-notifier, lxqt-archiver Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_34.0-1_all.deb Size: 82004 SHA256: dfb495f9aaaf846b329e855e4b20ef534a3a9f616fe2b5bb709e1c4b2e0bf104 SHA1: b59dfea0163e93c865cda35e7fc4e96289a59b0f MD5sum: 064be7335f516a1195162138f0bc1aac Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_34.0-1_all.deb Size: 81648 SHA256: 1936e55fca9a07c8b2d1f95dd80e28a7c87ac54de978068264c3407cb4834c6b SHA1: d0886cd2542c5a354fe14f54f6526c145cffd0b8 MD5sum: f470d4e327a0616a1eb0a46aec5d31eb Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, tirdad, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_34.0-1_all.deb Size: 81804 SHA256: cfe376f05e316a7eb79b8c04854e878cd68e6a194df2f244178d66def4488873 SHA1: 5309c305408fcec69d685a1f36c8fcff7389dbb8 MD5sum: 8052fd41647e946d764ad17de84b71a8 Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, gsmartcontrol Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_34.0-1_all.deb Size: 81760 SHA256: 421d934b4593ca924f79c03b6ebe2abb924ca7d738dddc44c80138289bb73c43 SHA1: 7b2027bb218b84df14f00b714a1f76e3c516b17b MD5sum: 4ec056f39374d9b7907ee2fd59094319 Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-panel, lxqt-runner, lxqt-session, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_34.0-1_all.deb Size: 81792 SHA256: b5743fdc5698f6a57f2d7b4944473078e57f71798fdffdb087f866e769fdbb65 SHA1: 8262add7670ead6f13c43508537e2dbc56cdb948 MD5sum: fe72813f774742e73114978d308ba672 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_34.0-1_all.deb Size: 81724 SHA256: e611885a2af5d6ac0faefecb3120131e0134143e3614710a9ed4493b6ec15b0f SHA1: a2afbcc2580b401017ee93cac899b55f0cad206e MD5sum: 18beb86935b29ee6c6804b833ae57ea7 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: qubes-core-agent-thunar, qubes-core-agent-nautilus Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_34.0-1_all.deb Size: 81720 SHA256: a94b8c77fbd6febd454c2ebf4a771b0d702d0592c5f51e7e1b763996e736b687 SHA1: b30300b8536c368c302b6a1daa1adbe8f56efb9b MD5sum: 0f7db32f43a5420f8e608588426f179c Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_34.0-1_all.deb Size: 81664 SHA256: 1012ce8119b2547b69aae11c2c0d6abf9f007cfcab38c037b6545f0f52980fb5 SHA1: 60148910e6028f9abf2567ac1edeecfeca1a8964 MD5sum: 59d40f166257d937ef21a2e1bf83725d Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_34.0-1_all.deb Size: 81652 SHA256: 074aeda0d4071d909d15646455871b952763eaa705fc6023ca5cac78138c4941 SHA1: 022efd0862e9b4ebb5bc490c13c5fa093d6de99d MD5sum: 238415d8279e414b92959bbe8a00fbe8 Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_34.0-1_all.deb Size: 81700 SHA256: efcbaa227c38e58f05a3169ebe43045f5a5f4caa0ddc65bde3363252b9f96833 SHA1: 68d7fdb03c8e94dcd7004ec4ba3e69b627b8d95f MD5sum: d48893bb7bfa6da90a951114392278c2 Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_34.0-1_all.deb Size: 81684 SHA256: 0c1d1fa6e44a0b7c39b5b8fabf4fa394aedaa2dbda559e0c01b4b798cf2c9651 SHA1: dccf3ad0c5cb64a59c802a92968438300fbf05b5 MD5sum: 7dad067850887d2a1fb50f733fbd73f0 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_34.0-1_all.deb Size: 81704 SHA256: 3e4688fa85498f47899aea5110876cf07c07769e7f55495685a9c7eeb603dc34 SHA1: c879c381db3d56f6c8d5f2a4fa688496bc5167cd MD5sum: 49e0fb716e7633353fa1592aacc8f2ed Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_34.0-1_all.deb Size: 81704 SHA256: d85a050b7e55108f2a75458ed2760cb212b8d832cec066476d3335f119e41ca9 SHA1: a9d1dd44bc30a2d5c1e30277cfec5258b2470a04 MD5sum: 7d2d704a26495b420c4ee34fdcec0f64 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_34.0-1_all.deb Size: 81700 SHA256: 12fadf699ccd39c40aaea0113410d4c4530e9bd17918049f089e05256df39547 SHA1: bc6c550e9265b3ded4d45243a2cc692b822f3892 MD5sum: b50a43bf194b4bf9b725cca2247d1af2 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_34.0-1_all.deb Size: 81700 SHA256: e12f8f06df77b090aa33934025cf09fed2108f20bacdfe4790b04b66aaf56e3b SHA1: 26e79ce4f4f35bea97a40c81c59f5224aa24bb37 MD5sum: 56d3cf2867d8d4357bf27c735810a01f Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_34.0-1_all.deb Size: 81680 SHA256: 95b81a4f3d393144aadf5575c9de727e9019e66ee3d2fa1a2d4c78fab90dd010 SHA1: 7887ed844fbb4127d3430e336b5cef110b39369c MD5sum: 7673b2abf00812fd25f1aa146ecdda6c Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_34.0-1_all.deb Size: 81732 SHA256: 3ee7de58de234ef7388cdd2fa5ed148e630a1a30cdd9c3d42944aa2c8e429bb0 SHA1: 00ee06968be118a11767c2be5275ff4ef0d28ce8 MD5sum: edb057efc2ec09854bd76a90064faf77 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_34.0-1_all.deb Size: 81748 SHA256: 0799c584a34e81a99fed8161fe51e9c76de7e8eb42fa65e9c12486e6b67ecb5d SHA1: 33ec064471f2cd0902b95fc6733536c959c2c246 MD5sum: b0dd2a079c57c3af80b141f1c4fc26a4 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_34.0-1_all.deb Size: 81740 SHA256: d80598d25f06fabb07176289487d110e85fa99148769280eea821794a1532390 SHA1: fa82990455b440b40e87565b94807737ab361964 MD5sum: b989de2338efc9a3af7c5d74332a6718 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_34.0-1_all.deb Size: 81688 SHA256: a73f6406274fe004fdfbeed49c06a3a2cdc783354728d8e97f35df3f0294064e SHA1: 1adfdcef2a5eb39659207999cac5e979b09a3de9 MD5sum: d24f65e6ce16dbb9f1fe42bf0c139163 Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_34.0-1_all.deb Size: 81704 SHA256: 91f42cc743b5d29c72e53c30bd3f77a3e93a78b71e058de0d8db0468d9f6406d SHA1: 89c028a79937ebafc4cc895efc3b858db9a4f31a MD5sum: 019849b0fd117d0a10e6ed936a66c769 Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_34.0-1_all.deb Size: 81704 SHA256: 1217e45e3b1ef60e5c97e2a521c3af62b8cb609c730ac0f1fa814c711391d4aa SHA1: 97a89e0656b4f92ba80df0009cb9516d30520935 MD5sum: bb2d0afe96a844401afc683fa7924b82 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_34.0-1_all.deb Size: 81688 SHA256: 6ea8925bfafffbb686006a611dae538a0824f98a7b7e08cadab6ecd6a08a2753 SHA1: 8596007c04a51926219df45972b1640d29f8b4d5 MD5sum: 653e1cd32633ed1dba7ca1322e1b5303 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_34.0-1_all.deb Size: 81684 SHA256: e7dd09010bce825ac1222e7c24de82066a1a110416573500591c938d61becb95 SHA1: 6fcbaab8d816fa07cf4e03e1543f94502951ef17 MD5sum: 44f3bacaaadd48786120cbf7709d557b Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: genmkfile Version: 3:16.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 163 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_16.9-1_all.deb Size: 61080 SHA256: bdbb955743e1d0ba0c0f90447137a7c712c1e487ac0b6fac2e79925ca649f2cb SHA1: 76818f2560c974ab8aab06906fa22ef41366a726 MD5sum: 0d3077226682ba597a12bd992b088aa7 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.2-1_all.deb Size: 490856 SHA256: b8c359ed77e422cf704cbb6edcbe6bf33577db2b954854e23a9743fcc39075fe SHA1: 1103c362c6e71b82fdd6d50273334cd7cc46fd4f MD5sum: 5a704c467d7a0c217cfbd3dde21ca370 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_9.9-1_all.deb Size: 35860 SHA256: 84120091466fee117b03b8cd8ae6b8fdf5433fe65df966a3cfd1e39eca91219c SHA1: 49b3bc8bb54e9d22939389f87684d12c8eb5232d MD5sum: 4e54eec08b91ba57b6f5d33660cbc7b6 Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_9.9-1_all.deb Size: 30212 SHA256: 6332543ead50b828d603d3f8a73c9706c4d5a8b265ad6523916c7f0297c6cd41 SHA1: c467ea8883c9f3db365023819bb2dced1ec40ad5 MD5sum: 6b8f6e6c8803a9df2a68e05a6919c696 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.2-1_all.deb Size: 158220 SHA256: fde543735888fbf54002055ace8171e4bb0a58e7cb103c9a909b2de8d7d374a9 SHA1: d86d6c5d078bf869d7016783ac2f76939c383799 MD5sum: bb77f496c08afd14bc7ca350ba184292 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 631 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Breaks: usability-misc (<< 3:29.9-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:29.9-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_36.8-1_all.deb Size: 191536 SHA256: 8961611c292d09d2fb3fca60ad5e5d87ed85ab5991cd3f0b0e2010e9197fc871 SHA1: 0c720bf6e62a64b7ba6dcdb36b492266229a0d47 MD5sum: eb03057e827e8841fcebaab578ce6b69 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 128 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_36.8-1_all.deb Size: 95184 SHA256: a0d9b2062c32f86eb1856cd4b8e785ec128c75635aeb69c4dd0b8589c534607e SHA1: 23d7ca15ac4b985e7dd020e5e373e664557f6c16 MD5sum: df2ef6f33305da1d56211b965b9b19ea Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2526 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.1-1_all.deb Size: 1439208 SHA256: 0468385f8a518322d4094640bdebf03d1bbb4ef025c11f46df290ba6d029c551 SHA1: 185542624547799c0bb9c49f4c990e9c06103f5f MD5sum: aa34940583b482db481faad77a7958f3 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.2-1_all.deb Size: 34088 SHA256: ea8950cb02b5596a9aaa293165a6a3abfb5652eb8491452c2f9c6cb1a126c16b SHA1: e8f1b2db12690af9d7d74cd1978c743eb2575c39 MD5sum: 4a8dad09a8dded81285bdcf43e61f04a Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_34.0-1_all.deb Size: 81704 SHA256: 39e0adf512785550bdc878dd6804aaa01a0b29a5864bd1909a4fe8b429807e88 SHA1: 3f30f600d1dd8724259d3634e3e365cf6dfc3251 MD5sum: 2c16773a9835eda7c3bef4a10fe2f30a Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_34.0-1_all.deb Size: 81748 SHA256: f62b0b2c49a02767975deb7fd939998a4cb0ef03c5aa3d1976e4b3fd02aeaee5 SHA1: 01a3bce89c6772708bd43c48b614c878155f487b MD5sum: 10ca7ced732fbc777fa3bc8d23bab004 Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_34.0-1_all.deb Size: 81680 SHA256: e1021471e3563275da7d8570503a13b5da9d8203b24f50fe233d496e1af2666a SHA1: 1f2fe96f49af2c4370f3e286ee79222cfd79680f MD5sum: 536fc9fa00c33e8c2c900c0dd2349eb5 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:9.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2652 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd Provides: diverts-etc++issue, diverts-etc++motd Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_9.5-1_all.deb Size: 2567852 SHA256: 751f4e4019aca71b6866ba303c6f9483295233c3fffaed21415024e3e0424776 SHA1: 8289f65319b381ef5c66a106bf1822fbb1e911bf MD5sum: 9df5f66cdc48401fd86c0428af4e844f Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_34.0-1_all.deb Size: 81712 SHA256: ff499d7e3c1ca004a1a44825a4788f1ebc52c5070598b6bd16e49cffe068db45 SHA1: 790b63e5f96d2c24fbe1814d9a8ad7c030288424 MD5sum: 41d25b650f25fe4c64923799173544c7 Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_34.0-1_all.deb Size: 81744 SHA256: 9d5e104d34405f925702c0403502ee22e800de4f1d2aae5fbd08baa667c9d0bd SHA1: d973e43c9f4ca9ecf4b71755a3ddc9c931529620 MD5sum: 3fd19b3c5a2131384fdde9d132ae619c Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_34.0-1_all.deb Size: 81724 SHA256: a65d7531312d5f703add8c592db6d010ddb521e6fd4911576afb80c541104b5d SHA1: 23e9b149f19a94954f9c7a4b2cd162b722c11a90 MD5sum: 8c22eda4c48ce9210374be0811e05d71 Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.9-1_all.deb Size: 22864 SHA256: 655af1aaae912f74335aee678a10f8b122945b75a6d6fb33dc4785a8024a60f8 SHA1: 51384d44e39eb647f6d4e4d7c37c833fbd65abb6 MD5sum: 859df84ecaccfd70f9e928054a131392 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.9-1_all.deb Size: 19488 SHA256: 2ed67ecfc4e6d8d74360d83e3e0c30f970a33a8a62c103143af034ed76223402 SHA1: 26149acd768ae533e766b34a5a9fe6d2d73b9f80 MD5sum: 608af953ef551749d55fa14c8b21b762 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_34.0-1_all.deb Size: 81680 SHA256: 127871ef99aa6878e5ffd71a7c9b9085ee7f5d2a6ca6d8d0f4af96cfc520d66e SHA1: d7f058d8296e8bcad6a385df95d8356bb55a82d1 MD5sum: e785314c431565f76f4b7a6cf1e1a7ae Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-network-conf-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_34.0-1_all.deb Size: 81700 SHA256: dc8402f613cd1274c6bb907231ae958632ad6dae8a2dc9cc953f552bc93d1502 SHA1: 90d9cc3193b424c124bf71d821964d88139d5828 MD5sum: b92bd10217b21e3ec1d29b494fd3905f Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: pavucontrol-qt Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_34.0-1_all.deb Size: 81692 SHA256: 1b1202805d1db3e45d74692a1ca84611aa54e5f00017d8bfbbc22ce7365bb13c SHA1: e3e0de76a545aaefdd9fcad5d9bdffa0af1a2680 MD5sum: 0fc762bd1e689be8ea5ac6dfbe7719a5 Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_34.0-1_all.deb Size: 81704 SHA256: 4cfc75dc508ba2e6734498d7ae6c7c0a5cb086993cd6d534743737e41aa30009 SHA1: f7cdeb2edc44ad3e14b6fcbd7cb3380f826fc244 MD5sum: 3bfff01564813276446305de48b78746 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: qubes-gpg-split, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_34.0-1_all.deb Size: 81712 SHA256: 82f9c5f7ca51a9983d9a8b81996f63e2b5601577f6b279242039b367d34c9e31 SHA1: 79c8285fbb40a999b397c103545ce24e8904dc31 MD5sum: e295014304d8eb5933ec401449ca986b Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_34.0-1_all.deb Size: 81668 SHA256: 3341b49fa804b2a4845dde1e57c721aff8a2ebb17b2ad3baa950ebca49c21ebe SHA1: efe3d11a5a34f293244b1c7833cde0ced397a049 MD5sum: b2877da2a2dc02576e335f2178b54269 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_34.0-1_all.deb Size: 81724 SHA256: c117b5f073e0732de737828019dd10398583bae96746f968b174e884f7510f77 SHA1: f4eb71edc89521779195467dfadfd50534da216b MD5sum: 0725231c16778ed841450359cff78f76 Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_34.0-1_all.deb Size: 81660 SHA256: a41f2760ad0cd898ad5f66ad1d91dcef73d94e65fcedc8f9bad5494838801d76 SHA1: 35dac8d1e34986dbab9be08d661497c16bba3b2c MD5sum: fe3331992e1c963fa9940f7d0f185894 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_34.0-1_all.deb Size: 81664 SHA256: 5a78534e36c34a2d40bca5cac453057acdd381c992f1e95e0ae25d060fd74ede SHA1: 31c8b635b89934ff0909f9b8dd6f4e18c245055b MD5sum: b10116365627d7736d790de4e1b72e79 Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_34.0-1_all.deb Size: 81748 SHA256: 54328e08edb2c4ac9f5f7b0ae62861d94e3849b38cb613d65a9c9ec629bbfdc6 SHA1: aacb5bc8219195946da86890133627a6aa2a970a MD5sum: c2e18100245bc21d3ab1ee9bff54a1e1 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:34.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_34.0-1_all.deb Size: 81684 SHA256: 9842835b131584c731b117a2022ad230ef70a620d49d3614a3d51e1d36a156a8 SHA1: 43762ede00640e7273dfc497d02405c1b298e111 MD5sum: d70b4181f94bff541bb97cdd78e48748 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1012 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.6-1_all.deb Size: 922344 SHA256: d06e8df0b67f007a8de96790f53c1903a6257206fcbfb2fe3ceac5eff1bef933 SHA1: 43d82028512ca9095872a620c6dbbb2438b663eb MD5sum: 5e13fe17d5fd1fd458b09409bc2faf14 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:17.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 139 Depends: helper-scripts, apt-forktracer Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_17.7-1_all.deb Size: 54884 SHA256: 1f5c69c374de77f7a1a5f7b252e75e62b667101229d99ad9db6710ec8bcf8334 SHA1: 743a82702adaa653df50d4101f908b92fccc151f MD5sum: 47926a382b2371787d9afa9c8921707b Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.7-1_all.deb Size: 55752 SHA256: 75744dd17cf0fff54f98e56c2a7d773076ce1d992e884428d056a7717c62e237 SHA1: 89e3b2600b9077f1e07ea9155bdc29770e9fe9c5 MD5sum: c6080e2401700182e1c34f87504b7956 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:8.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 300 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_8.9-1_all.deb Size: 146288 SHA256: 6444cb648894426e30fb6536937052b7c9792e717706e1589a16affc96c957b2 SHA1: 4f1b4f35c1563dcd131ac806f13c6beca60ad4bf MD5sum: b6a27472f32bf428e13190edd63b3975 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.2-1_all.deb Size: 341988 SHA256: 2f00ea6343dfa5d03236f44abd55949163f90b8d3654d3b8d0ed388957112f3c SHA1: 6e19cf6647b28cfa95faa39a254d6cf6611bfa45 MD5sum: bafbd304f2964168d7073ad4f3b07fd4 Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:4.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_4.5-1_all.deb Size: 42704 SHA256: 2239c96db4ab7becb3f46d1155e114dc19718498625ad0b7d45d6a95420732f3 SHA1: 528cc5ef1239cf7f887e9ee4abe1d15db3739d19 MD5sum: 3fd6bb04f6bcf28dfbf22bb4410f31fa Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:14.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 213 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_14.9-1_all.deb Size: 67904 SHA256: bbb7b5d6ea5aab38924fa9265b9d314a6ac6da050721fe598cee7cad12193dbb SHA1: 252dddfeaf6e1d235f431b85571213ab0386aa30 MD5sum: d5eaf2afdba4f64784d284b06e8a459f Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:14.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_14.9-1_all.deb Size: 47376 SHA256: 0f56c1a47e7699ab14f2225f8de7ccbee49f583e8e9f31b73fd09a16e9079778 SHA1: 403cf7880e468928d2a897d4da648f41117d4a1c MD5sum: 14ccfa695c089619ebc4b0317c53f5a7 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 103 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_7.7-1_all.deb Size: 33592 SHA256: 7403f1154899476af2634d5f916e662bfa582d9326b7ea075c0c9f871bc012e0 SHA1: a7ef3ee5c4ea4e449d2e594d8f27039eb1bd81d7 MD5sum: 486b68e3d6f246e3fca4c301c3186a4f Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 212 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_4.2-1_all.deb Size: 52844 SHA256: eb85abd143e1f4f972a8473ec9c0e6e56579cee8e6af395a8e4b958c2cab38af SHA1: 3f36aa5d9c0eb1be3b05c7ca8f7f8bf1919a6036 MD5sum: cb2882f19cbc4e2831c6d5c52003a0fc Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.0-1_all.deb Size: 36000 SHA256: de26fd249d34b4574392c887f750f432af349b00555b880aec3f6a9db67b34f0 SHA1: 2a8565840f8fc297c07d7ee72cdcab246c4e070a MD5sum: 7461791f557306206a5379b7f777f839 Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 98 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.0-1_all.deb Size: 25960 SHA256: ece2ea1f4b654d2f95ed12b00c148cfee33e85aa8e629bef31d24067e11bfb4c SHA1: 541546a6625b8f7d9c274829891a3c3616e90358 MD5sum: 073105f7d501633416ebf2d1bd635186 Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs-tools. Package: repository-dist Version: 3:12.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 218 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_12.9-1_all.deb Size: 112504 SHA256: bddc7650196fbc86da61aa21b2aa2a5f36058131905e4412d81dd13b01b1c3ac SHA1: 190f93390a407be360fe5b31c1398e385334ce0f MD5sum: ef44379cc4008d4fe4f4cd366926d786 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:12.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_12.9-1_all.deb Size: 40824 SHA256: 0b2f1ff1f97d8b5ae336eaf03eec805309644e75b7b30f774dce8fa7e237fb60 SHA1: 48f9c540213d1adcce9282b545b41c5e2b684ea8 MD5sum: 2c659733eecde4166be6e4b990e79bf6 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.4-1_all.deb Size: 19648 SHA256: f02f010e5c16e48f19d196a4cb98e331c5c8c738a13ba4def5da44f411d3ad13 SHA1: 9df20e2b5c06eba1bbcaafb0b06bbb4d9c34015f MD5sum: ee48fcae2f3ebd17dc0881c95a3b7640 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.2-1_all.deb Size: 48980 SHA256: c34533f0863e23178dcd3cc12f8211662e9f50e6c94454dbd51721df4e854151 SHA1: 2518e310f635aa367ea0b0c1ae705c51b7a177d5 MD5sum: 2a48696f8866a525ae042c271f2fb7f9 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:26.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 347 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_26.5-1_all.deb Size: 152036 SHA256: b104fbd6bd301c42adfe114454ba2248a894e5b5a43765bfe6dc367649df5576 SHA1: ace83244a16ee2cb298c8e2a372132eaf8daa4f3 MD5sum: a08ee08011a6040efc90b416f4bd0a2b Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:12.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 268 Depends: sudo, privleap, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_12.0-1_all.deb Size: 99052 SHA256: 2d2dbd34f98b0052b27dbcbfb2eecebabf4323b29a08f84953d0be4411b9609c SHA1: bf0a0db3edd30ef5ecb69930adbabaf9d5d21936 MD5sum: d828eb7d953cab2cdd675c5afa6a703f Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:48.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 203 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_48.2-1_all.deb Size: 165352 SHA256: 033b5afb3ccaf2e6acac99742889398d6b44269c7db9e42e0d5a562d4ed1a49e SHA1: f84ac91231c5fe6459cfd686d7f02787518c9543 MD5sum: 94c1627a90985e8d834f5e091d61b21c Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:48.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 193 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_48.2-1_all.deb Size: 164348 SHA256: be40b9c9471cb657d9d4b7895f63443b95f4ab0625601eac22c4a3b2b8563427 SHA1: 6b100ecab68db7401a2412a0ba0988d6af198a7b MD5sum: 45ffb96725f59f431f605904f64c9af5 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:48.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 695 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_48.2-1_all.deb Size: 243104 SHA256: 11980ac389939c444b5447d5ea0f5da1735466f71ffb03db45c8f7d978070ce2 SHA1: 624f68f535144b4c018f6a8865c456136fca2ff8 MD5sum: a20124d6ff6f2c1c620b1b29537d61fb Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.6-1_all.deb Size: 18192 SHA256: c64f93f694fc6f279ae685e7c77d7dba5e8af86ff9bacc28e4eae545d30344bc SHA1: c40043a27cd2ea3f3bb19f49f4484f2db07a028f MD5sum: 26f597d3bda7dc2e56d186817799f0d1 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 137 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_11.9-1_all.deb Size: 47488 SHA256: 10ee987125b653fcc56425e41db78dfa1b8ab76959daeecbca77c361c406198d SHA1: f121b837e3719a7c0d0650296b5a675fa4fde5ce MD5sum: 1ec02fa1e08dff1b7a5c52a6e595c3bf Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 139 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.0-1_all.deb Size: 60196 SHA256: 28e6b69392c849f71daf025cef3b2e2edffcf876a0e2716b8eea9e92150960a6 SHA1: 05f721d3567d5b0b12d8db97f6ca4a11634e451c MD5sum: 648f1ce9065c0ea9d40ec938f585592a Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: helper-scripts, cryptsetup-bin, bc, systemd-cryptsetup Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_8.6-1_all.deb Size: 33076 SHA256: f6d85fb030cf13a2d35ccd3bfa7969ea5e1b2bd585c8578b5ed8fd48eb3a01b3 SHA1: b89d4c6affd0c7278d1527577080462c6b0682ea MD5sum: c078883a8d9d650405f7cff8537aa8b6 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:3.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 124 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_3.4-1_all.deb Size: 28720 SHA256: aa5ee32dd2caf29dadcbf35828a6ad18ab7200d4ad21627e7471b648f24e2272 SHA1: 6a4d1555199f63a324cc973b7385cb765e6b201e MD5sum: e40bd90945de9cc2d50eba447a16c897 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:42.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 559 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, privleap, systemd, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_42.5-1_all.deb Size: 179080 SHA256: 5ee8b9719adf29f4548056da01133c166f2a3f1a65181f49bb11d1d64111cc2c SHA1: 369372e1a8c0a33bffa82607c905756e39012bbe MD5sum: 0e4da2a2ce6048dbf0d4334921b15a60 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_7.7-1_all.deb Size: 28204 SHA256: 13a48b500423d6106e1643de0c08e028851af2ab179002afb3d0b7230d5f17d9 SHA1: b8ac131a164bd4c697333853bafe145acf3672d1 MD5sum: 677d1b20a5460df3a25c67a55940a95c Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 171 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.2-1_all.deb Size: 67860 SHA256: fdb35e9dfac6ad9a5e4646ec073b7f15c8d9e7b2ad2fc6d1293e26269c09f4dc SHA1: 3a400fd3777da516c2a64cc99f646fa040621841 MD5sum: 54d04073f365f081f7c35eb78f7eed96 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:40.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 523 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_40.0-1_all.deb Size: 243436 SHA256: 7ac0d4869c44f79ba450286361f4a3bc8541dcaf1193ef388a21f81475b8a12e SHA1: 62d011e170ea8bbd4cfc9465ae6808e326d728ec MD5sum: 83dc611b4d408e560386faa0431badd4 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_7.3-1_all.deb Size: 27204 SHA256: 9ab98ce940685425a1133b46f5396a02e5d2e5e0a0128ace35c40df221ebb3b2 SHA1: 434c71660ba2a2423a4c73ede2debcb6311d47a7 MD5sum: 60d5e51285f15010983d2b1d3d83759b Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:7.8-1 Architecture: all Maintainer: troubadour Installed-Size: 182 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.8-1_all.deb Size: 71092 SHA256: 84d2204ba7da9dc0309fe3044ad860c555f63529d077fc43cf01c8bba1d8cb9a SHA1: 49f18e7cd0735b5d3752b3dac7c1da9c29bcddd5 MD5sum: ea0b2a038b98217f0ea3b1d94690e3ba Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.2-1_all.deb Size: 29624 SHA256: a7592f05b1f8fb6bbe363620498d3d592f1efdf8c4ce4a2e32c2589d73fde480 SHA1: f50805742b18dbd242dfdf88a9713de042a83cae MD5sum: bd05ad37b7b6d0b87d2d7f82bd425ac8 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: usability-misc Version: 3:30.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 736 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_30.6-1_all.deb Size: 232964 SHA256: 4452039be7a9f2cb8d4b44b7e5a4b864d68b99e5686704f2db2d7eb81a882a32 SHA1: d282df7296d738a98aef5521fe0f8af35a605379 MD5sum: da0eea95d61ed79e0885a858cd0269da Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: user-sysmaint-split Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 178 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_8.6-1_all.deb Size: 46484 SHA256: 28e889946f049cc2ba66e8e4c86486c33c73de9706d0e409cb04f78c476ab181 SHA1: 92da1084876dd4faabd81d430298f8cba2c200d6 MD5sum: a18e055784def81e631bf590e9936c7e Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:13.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 175 Depends: sudo, adduser, 7zip, helper-scripts Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_13.0-1_all.deb Size: 51700 SHA256: 8ae6a6daf6efeafbaaa48601cfcd48581cb90f1d90a9f3a3814bacf4abedbc91 SHA1: 7f7da3d760fd5034a76db8da8327a30ca961710d MD5sum: 7e06e6c803b6feb8f31e8a8fc46f8763 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Optional: Disables screen locker when running in VMs because that is not useful either. This feature can be enabled in file: `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` TODO: This may no longer be the case with Wayland. . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`