Package: anon-apt-sources-list Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 77 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.5-1_all.deb Size: 30652 SHA256: 220a6d8646abc6594bacdefdb06ed05eb0522af1a415df304ba3905728e8be85 SHA1: b6e14f0086e49a37795e91d9f5cff1a8b86931cc MD5sum: c4d94aa23c594a872c1bfcd5855c939a Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:10.8-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_10.8-1_all.deb Size: 94596 SHA256: ff73964ff4d7f54f39cf17902e94d527e46c8a8c8e62fac0af2d965d4618c173 SHA1: f30d39d57c2e4ee9ef33986817054472f00ba19a MD5sum: 115cae0f31f8cac5379fdcc4897d075e Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.9-1_all.deb Size: 64780 SHA256: c53e83849293fa9f4153a14d4fd57ff31900a95aab26258d547d75bb205ee684 SHA1: 3d81aa028c66c4e3885da4bbf7345eea6d117f10 MD5sum: d27f9ca255720d1e2930e2227513462e Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 96 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.9-1_all.deb Size: 36024 SHA256: d5d3a6c89a89a7c1f182467b09b11cf4df65656a1a65489e6aeea5a13dbfba47 SHA1: 18d04b6bd9f198cbb225b928b850d64db9778fe9 MD5sum: 17cedace179beb1fbc96cbff415a005b Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.5-1_all.deb Size: 23912 SHA256: cde89ba8fb7e6965feeb7d72c9dedc6f6c602268122981343fb2c906b9702f0e SHA1: c3e19c274b3dea735cd3b598e11db50fc597cb59 MD5sum: b0b3af0563aa9d6afbf41fabb2ecaf69 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.1-1_all.deb Size: 27056 SHA256: 6b3734055d7123cdc291377d0beecbef74a84085af5b9dc0e9b13b8886d6df79 SHA1: 543793f64ec43200ae051cf2b292f772411deec1 MD5sum: e7b01d88386fbffff39511f7db4ee9cc Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.7-1_all.deb Size: 34852 SHA256: 8d34f303bcf7018e35bdeb17cb7c2e2e993b6eae8b683a914fc990f198c61b4f SHA1: 034631d4720819dcab967050af72446f72ded803 MD5sum: 0c8650b06d1805c0470f1666c84888a8 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_34.9-1_all.deb Size: 82952 SHA256: 007d79ce778227fa87a9e4634cf2409879ae68f169e56efcd52f3b82bd45157b SHA1: ac832e6d69144eae807d5652ae93d3bbf1d4b7e7 MD5sum: 1510200d7898c3fc82117b19917c7eb0 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.3-1_all.deb Size: 11256 SHA256: 4f15f98eeded72e6f3fb11e8ac35ff178daf199e9d1e40c2e345d743d2cdffb8 SHA1: 44fd15e99f54a64915e3077725e22d2211d6518d MD5sum: 1bfff5aa44643bc8e79203beedadfce8 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.3-1_all.deb Size: 15256 SHA256: 29017256777db267e4ddcc7b5d06989c4fc5aa1c0bf596c8ada64d6107b8e9c8 SHA1: 6c8341159ffb29d5522d3fd113ed191f447fab88 MD5sum: 25442681c23e3851fc6221f2722b09ac Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_7.3-1_all.deb Size: 31132 SHA256: d0f929a80822ca4232827a1e8ff9da67fd4c946f8c6968bfa08b643760a39f57 SHA1: 28e4957b0d56e49a1a6b7eaac393cb9d8c5d399f MD5sum: 4e2af0eae617c3cddc2bb7b7f749c2c6 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:1.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 265 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_1.9-1_all.deb Size: 59292 SHA256: 46b31b9e36a2c0d049e3374bdf881448aa786ec3bcd5540b98f1a03e0ae661f7 SHA1: 2e35e5df671cfd6d1757ed9dfe49619199a67a4e MD5sum: e54c98e5ac9e1388ffbcd418feb0b924 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.6-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.6-1_all.deb Size: 129340 SHA256: 3ff040056e9c9189e270aa23a1c8fc55d6d56939e57220b843cf74118798d1e8 SHA1: 199393af56404a62a88d7b4b0204f28dfac29021 MD5sum: 0ac6f698ddac7310c32d16c632df537b Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.6-1_all.deb Size: 13764 SHA256: 31400793c253f5e9996cd178b590add24be1ae5c698528e4e5182de7be73f89b SHA1: 9c177aa560c5f40f9bef976a2b703938f45c1e5b MD5sum: e15f39c72d57c76a51423ffce112643e Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.3-1_all.deb Size: 27668 SHA256: 3ec6c2ad13edcabb16c8a01c16cdaca97b75d99a13bb4205052f373abf95a5d3 SHA1: 5d4c70d0fa1b4f807ac33b21c45089506d5c4bfc MD5sum: 23957cd91da30aa10a5d4d43189089bf Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:14.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 277 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_14.6-1_all.deb Size: 68716 SHA256: c9c210245e2b055eb14fe3826383585bde5937d36dfc1cb9d9570102b6ae4290 SHA1: af4e08720fee850e50e3c836efc705c64450cece MD5sum: 0881d69979f67c3c902825e5c9be2b56 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:14.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 70 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_14.6-1_all.deb Size: 41712 SHA256: a831ca8b8af2a17b4eb4695294bb7af353668f02e2a98af7c21f99210b3eb4ce SHA1: b2e2ff5093d86dddc66200b4a066a80161372d6b MD5sum: 0946782e2db765653df656e746c11911 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:48.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 411 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_48.1-1_all.deb Size: 150452 SHA256: 1c9ef0396387987f8339814a9701daeefcae637ce195a5322948c9bf37a5499e SHA1: 8513a5a135a9ad8b2ce2f85cc2806125a9c26633 MD5sum: 73f717b138af35e57cfc714e65c5bdf8 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: nvme-cli, tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_34.9-1_all.deb Size: 82884 SHA256: 3732848209c2196b33908adc1fd326a119f9750ff97ac9e69d762f164422cef3 SHA1: e4e55e046e71b7b61ee660f768f295ef97caeebd MD5sum: ddcad672dd1aef58ecca091ecc30f00d Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_34.9-1_all.deb Size: 82896 SHA256: fa38acdb41bd2690fb88736454c5b62f27087e76a866f5b305a563963a18c456 SHA1: 93256b7a744cb89c98ceb3c91e985c297473f862 MD5sum: 680b947acbe9143f2de9996e30be5931 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 686 Pre-Depends: zsh Depends: sudo, dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.0-1_all.deb Size: 193668 SHA256: 83bbbf1a2c91b0782a31ca816710f39620ef18ab54264108c22f8fec8cf368a1 SHA1: 671753999bb9395fa0b460baf39c2ac8687050c4 MD5sum: 74b1316de92fc98477e6b8ecd7ff2dd3 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usbguard, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, gpg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_34.9-1_all.deb Size: 83464 SHA256: bc48dce3f6891527062bad2c851a87d9a793c6d34711e252b97bf4bb4c73e850 SHA1: e2cba39aee7741aad3303a30b0aa9923fab7ef6a MD5sum: 970feaadcd53923cda54b559855d5457 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, upower, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64, usbguard-notifier Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_34.9-1_all.deb Size: 83088 SHA256: 87b1327fafed480940cae4ea4df489972bc9e3ca54b2afd75f8ae5bcd2a2da21 SHA1: a1d3fe29a0b11a0169b676f48f5875fb23dd0848 MD5sum: 1e85cc3a65927e6dc47eaf0cd90259ab Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-admin, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-notificationd, lxqt-globalkeys, lxqt-qtplugin, pcmanfm-qt, qterminal, qtxdg-tools, lxqt-openssh-askpass, lxqt-sudo, papirus-icon-theme, qps, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, smart-notifier, lxqt-archiver Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_34.9-1_all.deb Size: 83216 SHA256: e3401aaf20f1aa985ad9164fc40b71d2437333c4cc393ad7928339cb357c1df6 SHA1: 3a0ecd9fb6ac95fb9cfed3d1974d03712fde1855 MD5sum: 45fec877bd4ffe5a06aa16e7d4b8b839 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_34.9-1_all.deb Size: 82860 SHA256: c135d4b9046d23d4bc88fc2cbc043e32027ef3de0b42c7414030eb7539014396 SHA1: d31898bdd905f28659f38fcce811feb600c1d0f7 MD5sum: 25c2749ee1ecc51a38a4dd786749d1f9 Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, tirdad, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_34.9-1_all.deb Size: 83008 SHA256: ba482a340715941da4e413ecb6133878c5bd614fd0961705f49be65e1f822d74 SHA1: dc76a1b564cb823d65359048597dfe99bcce2d43 MD5sum: 34d29b649167f52fe336d890dc725e5f Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_34.9-1_all.deb Size: 82976 SHA256: 1a4e0bc0d22b3acdb57e6e4c2087a541350a8520d37315572e4b6c9b447a39ae SHA1: a6d95340d2e7103b86e68d114640a369ab54834d MD5sum: e26d9005d3609e8246d97e2610193f19 Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-panel, lxqt-runner, lxqt-session, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_34.9-1_all.deb Size: 82996 SHA256: 6f28bea73fdcff8eaf9992baa746adc2d60835524ce2ac390a8d5d5ae4bd6148 SHA1: 34d3d2ad7d3c4724ed46b553843b50ef33556828 MD5sum: 1e8da4b0bc884e9d117c387e1cd0ddd7 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_34.9-1_all.deb Size: 82944 SHA256: f8798f88f431640d553ca172f0b37dbd27ecd96f04ecfd7d4347ca28482e54ed SHA1: 664a9061e4701e7b1318884851d864b8a37bbcaa MD5sum: 23c98dcdeaf9f6c909a5ad8c484e935b Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_34.9-1_all.deb Size: 82952 SHA256: 7ca9abd244a9488477e760650faad980011c0cffe12a1584b8eb29998ef76efa SHA1: 90f8a5265b8a27989438cc617e4e3288a9400982 MD5sum: be0fc3d3a965a56a645a55d71ae6cdf4 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_34.9-1_all.deb Size: 82872 SHA256: f0bab9faadb5970770432e918f908e94ff264b6554fcf4712d34a4f895e2ac45 SHA1: 37c661ce0e988fb8be7f47962399c7b8a4613579 MD5sum: 3ae28e6a44feefd1729ff51710a16f3d Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_34.9-1_all.deb Size: 82868 SHA256: 206a038113fc1115c18dc1a24bb80fb293a95a1d0a2eda475d4a099727cc28ea SHA1: 79912439217bd59b42e119232cab4c1f395784af MD5sum: 0516299e7d7fa7c883a0eb6627c3134d Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_34.9-1_all.deb Size: 82916 SHA256: 5c535e2953f8fe042a3950e61715600d421acd6a79d7935da6228233e54ac2ae SHA1: 8b344ea755467adc6cb3df447e0f4bbcdb003de9 MD5sum: 89cbbadf1d5a0790ba2f92897f4fd3cd Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_34.9-1_all.deb Size: 82900 SHA256: 9ac853fae423803065a38a2d9011cdbe5ca07c3e5dbb527f42fead4ef5fb1bf5 SHA1: fffa185c69f8ce02c6879fe663051125197c9023 MD5sum: a012dd7fac73685908558b216f49cbbe Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_34.9-1_all.deb Size: 82912 SHA256: 04ea70389a4518736639ce98063f7771e5570e47b1eb486710e05e2e97336ee9 SHA1: 98647f18a748512b7c7e1e766393fccd5d32b3a7 MD5sum: c4c1bdc3525c204c7e7a7d742bb34d65 Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_34.9-1_all.deb Size: 82924 SHA256: f3a9dac77f60b14a298af7deaf97687713c760ac194598c77544637e3c28187e SHA1: e279d3cf562c0258ee10abd5cc4f27ac38743a07 MD5sum: 1da23d5be39751d57f420082b7c60b75 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_34.9-1_all.deb Size: 82920 SHA256: 67aa05f8018267fa5c3c826ebae6b5d8d44fe5228ed23f9d4fb48c87343a9cab SHA1: e76fc7985839d2b07757300e2e03e740fcb5ce7d MD5sum: 0ad604aee40db3359c243c6eab6f3e16 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_34.9-1_all.deb Size: 82920 SHA256: d65aac5bee02eb5632bd7b5483b02be2a8039ba68abe64952cc489d127321427 SHA1: 0aa8c96bd43b8157f84515dc054bce05d1ac2cee MD5sum: 91a9f379d827fea3d081b1c00aba2d3d Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_34.9-1_all.deb Size: 82896 SHA256: c0d780aa2b1aecc75a5d14abc22521bc9285e138d9c1a36b768553ab0c4afd8b SHA1: 1eb3ec7ed4c56de8d87126e9afd6a99874cdfd36 MD5sum: 0f34991ead2d568f099508818513e65f Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_34.9-1_all.deb Size: 82948 SHA256: 7541e8b5a6ad1a4b00e0dc849cbb91a15c280a146103761bb3c893f28b9829ad SHA1: 4854f03354ef4543666ddb2c5ef84dd61f82ef7e MD5sum: 986491ad48b68ac5b9e8a8428cf4e466 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_34.9-1_all.deb Size: 82960 SHA256: 33bdf9053a35958e34d4a936be298115b1cdd24e647d78c82584f30a02bf5293 SHA1: 93d4a2719593e98cd4019e99e5f3cd7a1d119bca MD5sum: cc2767ac953291ee02063623c97b9836 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_34.9-1_all.deb Size: 82948 SHA256: 4a8ba6232b859712da8c78271218268629b44ac917a210ace417c514f00a1c10 SHA1: a92b112f410e0a9986d1b55250dc45c8c208364f MD5sum: 1f780c3ae81f8472a8f9fe459a3d1393 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_34.9-1_all.deb Size: 82896 SHA256: 7ca40d61447a64291e584cbe7f732ea85ff5743be6ecbfcbcea1bd1cffac6d72 SHA1: 615db39a30fb48f8ef6cc1a6205509991ae575cb MD5sum: 74a688887763bbe443c9b5fa18ee2a17 Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_34.9-1_all.deb Size: 82920 SHA256: de64b3a4ff30bdb2c8f10238826d2a1977cb573ba626a591d186a8e2f8725b07 SHA1: afdae6d0be0b5ac3ae24faa7106caad69527201b MD5sum: 17c56a264fcb653956da494a76b112fb Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_34.9-1_all.deb Size: 82912 SHA256: 35f8041e44cf175a6875d0bc515e987ca8bd7770d4a80dd0172b7e42c77fc59c SHA1: a5a93901071e91913d723e861fc502705e462671 MD5sum: e32b2430b3923c0c2b868a01bb4d726c Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_34.9-1_all.deb Size: 82908 SHA256: 1f76555467deb351f0f9063c755cb259722c12446bb076cd2f1379485a807358 SHA1: 514adbd8aaf97daa0140b25db5a615a80a43bfd6 MD5sum: 1dfc61709568bfefed2c3b2681945041 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_34.9-1_all.deb Size: 82908 SHA256: a79bb2ad34a08078e90032e7a56d3f679f42624793f6c3067dda5758c7898e65 SHA1: d6274ab6276cacba4790077ce6534824611794a3 MD5sum: f88bde8cb76f11fe70152ee0b9225626 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: genmkfile Version: 3:16.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 163 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, sudo, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_16.9-1_all.deb Size: 61080 SHA256: bdbb955743e1d0ba0c0f90447137a7c712c1e487ac0b6fac2e79925ca649f2cb SHA1: 76818f2560c974ab8aab06906fa22ef41366a726 MD5sum: 0d3077226682ba597a12bd992b088aa7 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.2-1_all.deb Size: 490856 SHA256: b8c359ed77e422cf704cbb6edcbe6bf33577db2b954854e23a9743fcc39075fe SHA1: 1103c362c6e71b82fdd6d50273334cd7cc46fd4f MD5sum: 5a704c467d7a0c217cfbd3dde21ca370 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_9.9-1_all.deb Size: 35860 SHA256: 84120091466fee117b03b8cd8ae6b8fdf5433fe65df966a3cfd1e39eca91219c SHA1: 49b3bc8bb54e9d22939389f87684d12c8eb5232d MD5sum: 4e54eec08b91ba57b6f5d33660cbc7b6 Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_9.9-1_all.deb Size: 30212 SHA256: 6332543ead50b828d603d3f8a73c9706c4d5a8b265ad6523916c7f0297c6cd41 SHA1: c467ea8883c9f3db365023819bb2dced1ec40ad5 MD5sum: 6b8f6e6c8803a9df2a68e05a6919c696 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.2-1_all.deb Size: 158220 SHA256: fde543735888fbf54002055ace8171e4bb0a58e7cb103c9a909b2de8d7d374a9 SHA1: d86d6c5d078bf869d7016783ac2f76939c383799 MD5sum: bb77f496c08afd14bc7ca350ba184292 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:38.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 674 Depends: sudo, python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_38.4-1_all.deb Size: 203108 SHA256: 1f2c83a794d91d3def95eca854de15858e117de6ce1636d69417f531a088513b SHA1: d9016b783cd95fb06d80edd124770a59bcdf71ae MD5sum: 65866182efd290505f08fa70649d44a2 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:38.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 132 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_38.4-1_all.deb Size: 99776 SHA256: 23662ff86d08df55a770f52c3750a7af82bacc12c6a96277d088e768fa5ccf4f SHA1: 4fae67e208e16541494f810a46e75ec5ab70d0fe MD5sum: 2562cf98667fe0ebbbc7fe6df4b3b9ce Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2526 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.1-1_all.deb Size: 1439208 SHA256: 0468385f8a518322d4094640bdebf03d1bbb4ef025c11f46df290ba6d029c551 SHA1: 185542624547799c0bb9c49f4c990e9c06103f5f MD5sum: aa34940583b482db481faad77a7958f3 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.2-1_all.deb Size: 34088 SHA256: ea8950cb02b5596a9aaa293165a6a3abfb5652eb8491452c2f9c6cb1a126c16b SHA1: e8f1b2db12690af9d7d74cd1978c743eb2575c39 MD5sum: 4a8dad09a8dded81285bdcf43e61f04a Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_34.9-1_all.deb Size: 82920 SHA256: 00c94eab5270c3c066dc23613d3a82c85d9ca48ba653544b4fb7ff6f0535ebef SHA1: 7964c22461364534d8481c9a1806125d7277fd73 MD5sum: f26329c6b5fb46c954a418a7aec10b05 Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_34.9-1_all.deb Size: 82960 SHA256: 7ca48c77c001be76826bf6b445e7fba741ba96caaf24aaa2cb805d54344d9db3 SHA1: 502553bee7151e989aed61baf304acf328b61088 MD5sum: d30a1f265cb759bad31fd9e241ba2efa Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_34.9-1_all.deb Size: 82896 SHA256: 8e58052ff895a55e960c1977fae9aa928493a1933837b44e37c062c23f175050 SHA1: 0830d73f2f4b7f18b035552d4a0b02163d0fb256 MD5sum: 6d54a44e87bcec661c85948c68f3b59d Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2662 Depends: less, sudo Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_9.6-1_all.deb Size: 2570624 SHA256: c679313f405d2b84850459d66c9c714e7361e90999ea40a6605e0c601e86d005 SHA1: de6c090b59103534d68506894b71a7a3bd118311 MD5sum: 5942792b791048f163535cd065fd5d59 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_34.9-1_all.deb Size: 82928 SHA256: 911f6e4702f4c8c3ee76bd493be6defb0e9168adccca7a12ead572d0519bf95a SHA1: 00da7aeabffb9da1bea8bc48b2e25067763e0478 MD5sum: 45ce4612aa523a35029acf8f6b5c6fac Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_34.9-1_all.deb Size: 82964 SHA256: c8ac28995598e8609554d3db2e9dd45259c2087fcc4499bcf2500c567d343ed2 SHA1: 585111ba356aae5312950625fcab397f0025a992 MD5sum: 65e70b5a4ff3186211793c6b323e31c9 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_34.9-1_all.deb Size: 82928 SHA256: 129dcf2357dfdc80117024ddb9f454e7ae890813605738e7813effc3d9066de2 SHA1: 858f3d6a84da3e338094aacae56e40bfd5c2b6e8 MD5sum: c33a280eabc0d1868d5bda5326f9a16f Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.9-1_all.deb Size: 22864 SHA256: 655af1aaae912f74335aee678a10f8b122945b75a6d6fb33dc4785a8024a60f8 SHA1: 51384d44e39eb647f6d4e4d7c37c833fbd65abb6 MD5sum: 859df84ecaccfd70f9e928054a131392 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.9-1_all.deb Size: 19488 SHA256: 2ed67ecfc4e6d8d74360d83e3e0c30f970a33a8a62c103143af034ed76223402 SHA1: 26149acd768ae533e766b34a5a9fe6d2d73b9f80 MD5sum: 608af953ef551749d55fa14c8b21b762 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_34.9-1_all.deb Size: 82892 SHA256: c035abaf7ddddd8bd10289801ac0c081b65f4f00ce33534454ae7bd60812e87d SHA1: 918bfa73e854eff008962a0558f3c570cbe84f9f MD5sum: 34d81b8bc1de2c4745879e8fc4bd8033 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-network-conf-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_34.9-1_all.deb Size: 82896 SHA256: c47e90cd381708ace952c9fb18f9055648e8ad7c2e92a42f532e18385e855574 SHA1: ccb348d91fe907a8fcb429ad32784669bac2cf46 MD5sum: 12ce73400afeaf268d20274aa087de08 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: pavucontrol-qt Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_34.9-1_all.deb Size: 82900 SHA256: c3b421ade41366df0ca6708d56d43d5b9b3e2f9ab502a7a10e8e7c59e78033ec SHA1: 9f6cb5cbee1bddd8d22c1d7d37ba66fe93036013 MD5sum: 457b845c428e8c6c754bcc40ef910f4e Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_34.9-1_all.deb Size: 82908 SHA256: d7ed054d682ae5bd46be936e167dc719385b3c4f1ee32250b23a00386e7032aa SHA1: b95ba830f9665d98195d62524d2803e6a6059c7d MD5sum: cc961c604a1ef342a83d4727999b7d1a Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: qubes-gpg-split, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant, firmware-nonfreedom-network Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_34.9-1_all.deb Size: 82936 SHA256: afe9f4df873293124b0cf2af4067044e2866ad8f00ce2ad29124d1fa31ff1d1b SHA1: c335526769b516f29595280033d2846654247259 MD5sum: 56d19242edd0c58a6b704d47ec1a8dba Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_34.9-1_all.deb Size: 82872 SHA256: e98f8aa47f291a5e2e4cdcc2aa84104f99776a6c4313069d44e2ceb629598d39 SHA1: 3cf6df40d09cd54bdbb34ca76d0447e572a26126 MD5sum: 413bab7cb75e701b7e11a3c9daddc021 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_34.9-1_all.deb Size: 82944 SHA256: d9b31cd7a12922cbd85b6f3eb32e9983e338aed60cbadb7e7c04f523cabfc0d8 SHA1: 48fe55b2d65f9b49383f43b23e35ebf7cbe111ed MD5sum: 4bf8517c963ac996e012ad43e2349f74 Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_34.9-1_all.deb Size: 82884 SHA256: a010f82a06572b66c0b58c8285a8acedf5a4bcc44d8aca50f8a80449fc50f7aa SHA1: fb3dcce4036416138303d43d0ca68fb1539d242a MD5sum: 4973b8e572b6d3a6e65242af053dd6b2 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_34.9-1_all.deb Size: 82884 SHA256: fb12e1db2df81371d8503016e640d52357720d5aafc79087020505795630bfa1 SHA1: 6fb53b6bab6f14d22aaf9b475a8e83eca6fcc939 MD5sum: 950c7b0542e9b45f35d8178240432bb3 Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_34.9-1_all.deb Size: 82960 SHA256: 260b8b45e701dbc8789bacbea3688e97413fbd6958f98ccdac2fbc7752335d0a SHA1: 80cf280b0e298e842378272c407cde824ba1f8c0 MD5sum: 559f8d83195f4061f04f56f2c118c665 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:34.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_34.9-1_all.deb Size: 82896 SHA256: ee1c2896d48f2eeb6f629ac7d42608dca37693c193395b3cb02300e5f7087630 SHA1: 594c464eeac4f3594760f7ffffba64f18ed8df3b MD5sum: 0e8e3ffaf9d09f08fb4ec802a6b4ee5b Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1012 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.6-1_all.deb Size: 922344 SHA256: d06e8df0b67f007a8de96790f53c1903a6257206fcbfb2fe3ceac5eff1bef933 SHA1: 43d82028512ca9095872a620c6dbbb2438b663eb MD5sum: 5e13fe17d5fd1fd458b09409bc2faf14 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:18.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 141 Depends: helper-scripts, apt-forktracer Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_18.1-1_all.deb Size: 56156 SHA256: a7ce2c7b974956ec16d3fe45c91cbb9d068cb5a6843122e2d136a9728570ade2 SHA1: 67de1b5d64e32827197b874cf2d4b67acab21095 MD5sum: 95e27c3d8f3977166648a538a0fc6be9 Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.7-1_all.deb Size: 55752 SHA256: 75744dd17cf0fff54f98e56c2a7d773076ce1d992e884428d056a7717c62e237 SHA1: 89e3b2600b9077f1e07ea9155bdc29770e9fe9c5 MD5sum: c6080e2401700182e1c34f87504b7956 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:9.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 303 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_9.0-1_all.deb Size: 147096 SHA256: 20b6ecf843a58749126dc50a99b85c28b5a2d32fcd59e5031b72bcadc1a20c2b SHA1: 7aae5330f75e643c03f9dc46e873fccad143c3ea MD5sum: f04aa05f537a3189358f4f09207ce891 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.3-1_all.deb Size: 342016 SHA256: c57eddf8013fc893eff15117c8383869ff54b605fafcff7a249ba5076a24eb5d SHA1: 36480192b369ffcb6d394a99de98a419e87caf02 MD5sum: 6eebf1a1fae5eda00daff5c2cc24293e Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:4.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_4.5-1_all.deb Size: 42704 SHA256: 2239c96db4ab7becb3f46d1155e114dc19718498625ad0b7d45d6a95420732f3 SHA1: 528cc5ef1239cf7f887e9ee4abe1d15db3739d19 MD5sum: 3fd6bb04f6bcf28dfbf22bb4410f31fa Description: bash shell scripts for usage of MediaWiki API Description here. . TODO Package: msgcollector Version: 3:14.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 213 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_14.9-1_all.deb Size: 67904 SHA256: bbb7b5d6ea5aab38924fa9265b9d314a6ac6da050721fe598cee7cad12193dbb SHA1: 252dddfeaf6e1d235f431b85571213ab0386aa30 MD5sum: d5eaf2afdba4f64784d284b06e8a459f Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:14.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_14.9-1_all.deb Size: 47376 SHA256: 0f56c1a47e7699ab14f2225f8de7ccbee49f583e8e9f31b73fd09a16e9079778 SHA1: 403cf7880e468928d2a897d4da648f41117d4a1c MD5sum: 14ccfa695c089619ebc4b0317c53f5a7 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 103 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_7.7-1_all.deb Size: 33592 SHA256: 7403f1154899476af2634d5f916e662bfa582d9326b7ea075c0c9f871bc012e0 SHA1: a7ef3ee5c4ea4e449d2e594d8f27039eb1bd81d7 MD5sum: 486b68e3d6f246e3fca4c301c3186a4f Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 212 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_4.2-1_all.deb Size: 52844 SHA256: eb85abd143e1f4f972a8473ec9c0e6e56579cee8e6af395a8e4b958c2cab38af SHA1: 3f36aa5d9c0eb1be3b05c7ca8f7f8bf1919a6036 MD5sum: cb2882f19cbc4e2831c6d5c52003a0fc Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Depends: systemd Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.0-1_all.deb Size: 36000 SHA256: de26fd249d34b4574392c887f750f432af349b00555b880aec3f6a9db67b34f0 SHA1: 2a8565840f8fc297c07d7ee72cdcab246c4e070a MD5sum: 7461791f557306206a5379b7f777f839 Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 98 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.0-1_all.deb Size: 25960 SHA256: ece2ea1f4b654d2f95ed12b00c148cfee33e85aa8e629bef31d24067e11bfb4c SHA1: 541546a6625b8f7d9c274829891a3c3616e90358 MD5sum: 073105f7d501633416ebf2d1bd635186 Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs-tools. Package: repository-dist Version: 3:13.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 218 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.0-1_all.deb Size: 112732 SHA256: 8dfc4bc9d5f19079a5dc4767c4aa99cfd79bbac93b3c2ceb156d1b5b4166aedc SHA1: ad323db2fa2b70499f13d24d8bfdefed704965d5 MD5sum: e12933895fe7605b9e5f88164359d80d Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.0-1_all.deb Size: 41024 SHA256: 8ac82cb8bd486c1c2d693ed00a1b9464384c8b5a2beba4746e793e29500a49d2 SHA1: b5422cf81843653ee460a19faee8e18979521370 MD5sum: d27b0f0b80b07ef86fe143f005d5589a Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.4-1_all.deb Size: 19648 SHA256: f02f010e5c16e48f19d196a4cb98e331c5c8c738a13ba4def5da44f411d3ad13 SHA1: 9df20e2b5c06eba1bbcaafb0b06bbb4d9c34015f MD5sum: ee48fcae2f3ebd17dc0881c95a3b7640 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.2-1_all.deb Size: 48980 SHA256: c34533f0863e23178dcd3cc12f8211662e9f50e6c94454dbd51721df4e854151 SHA1: 2518e310f635aa367ea0b0c1ae705c51b7a177d5 MD5sum: 2a48696f8866a525ae042c271f2fb7f9 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:26.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 347 Depends: sudo, bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_26.6-1_all.deb Size: 152172 SHA256: b1905149ba23a1f659d8ad3264b3cb5c345ce7d50faa69927d7a32e2fb46e5c2 SHA1: 63c793cc58caab078411e80a23418d1aaed70ec5 MD5sum: 065b08917ef04d56ad138848b4588d3a Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 269 Depends: sudo, privleap, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_12.2-1_all.deb Size: 99496 SHA256: a33f82f4dc9eab512bdbcff3b238dc1530301000b531457f69dc3fc26c54924d SHA1: 478bdb2f579d5cf0e943570798e3f2fc4e3c4c63 MD5sum: 316145c7c54564bf1a8f886b50cf1042 Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:48.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 204 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_48.7-1_all.deb Size: 167200 SHA256: fbab28ed36cdb3307c459b54e1eedf57d436ad1a416496580100ecc0f2005894 SHA1: d4397a98c5d61f700f0013fc34378058984b8c85 MD5sum: 35f3d4e3a25c126e1106985a371d9ab1 Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:48.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 194 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_48.7-1_all.deb Size: 166204 SHA256: ded457bd7a80cf920a0b7a3c3ac38a6fc28cc930280e0eecf57ef6aab6a2765f SHA1: b9cae800e874c0f3db0b1956dfa2821f82c93f0d MD5sum: 7ef3b1e35fa12a50874435e9bed463d5 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:48.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 703 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, sudo, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_48.7-1_all.deb Size: 245448 SHA256: 8f8d0dd256e44a8c8d50a4d56951c253c4b3953e8d62e319e04978b13d517a88 SHA1: d72643bfd2133730299524530fbcb5e3c81fecd8 MD5sum: f8ff646ac69f9a72b11b518049065acd Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.6-1_all.deb Size: 18192 SHA256: c64f93f694fc6f279ae685e7c77d7dba5e8af86ff9bacc28e4eae545d30344bc SHA1: c40043a27cd2ea3f3bb19f49f4484f2db07a028f MD5sum: 26f597d3bda7dc2e56d186817799f0d1 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 137 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_11.9-1_all.deb Size: 47488 SHA256: 10ee987125b653fcc56425e41db78dfa1b8ab76959daeecbca77c361c406198d SHA1: f121b837e3719a7c0d0650296b5a675fa4fde5ce MD5sum: 1ec02fa1e08dff1b7a5c52a6e595c3bf Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 139 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.0-1_all.deb Size: 60196 SHA256: 28e6b69392c849f71daf025cef3b2e2edffcf876a0e2716b8eea9e92150960a6 SHA1: 05f721d3567d5b0b12d8db97f6ca4a11634e451c MD5sum: 648f1ce9065c0ea9d40ec938f585592a Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: helper-scripts, cryptsetup-bin, bc, systemd-cryptsetup Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_8.6-1_all.deb Size: 33076 SHA256: f6d85fb030cf13a2d35ccd3bfa7969ea5e1b2bd585c8578b5ed8fd48eb3a01b3 SHA1: b89d4c6affd0c7278d1527577080462c6b0682ea MD5sum: c078883a8d9d650405f7cff8537aa8b6 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:3.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_3.6-1_all.deb Size: 29308 SHA256: db8cf090c79343fc317d133737baf306ea286f68ffe9efd75a75545f6da598ac SHA1: 75a8b1aef27de9be7d770c56b40d351f0a7285bc MD5sum: 8138ef796f5f83320f2111c28231d682 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:43.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 566 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, sudo, vrms, libarchive-tools, helper-scripts, net-tools, privleap, systemd, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_43.3-1_all.deb Size: 181676 SHA256: 7a5d6f3316fb1d8fa4a0bea7a849ab3d634315479859c060e449235c514fd4fa SHA1: 30f54c6f472549caa8d85ee8869b7a95030c3eaf MD5sum: 01d68579605732e23bfc87948f66bf4f Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_7.7-1_all.deb Size: 28204 SHA256: 13a48b500423d6106e1643de0c08e028851af2ab179002afb3d0b7230d5f17d9 SHA1: b8ac131a164bd4c697333853bafe145acf3672d1 MD5sum: 677d1b20a5460df3a25c67a55940a95c Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 171 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.2-1_all.deb Size: 67860 SHA256: fdb35e9dfac6ad9a5e4646ec073b7f15c8d9e7b2ad2fc6d1293e26269c09f4dc SHA1: 3a400fd3777da516c2a64cc99f646fa040621841 MD5sum: 54d04073f365f081f7c35eb78f7eed96 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:40.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 524 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, sudo, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_40.5-1_all.deb Size: 244052 SHA256: 723451f958604a744c4d45bcf4d499a5094b460646258788fffbe8960303d551 SHA1: ff23f951627565f5f806a3676b4c69c57ac7edde MD5sum: f36d6f1f1e7ba7cdfe4a226ead38a187 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_7.3-1_all.deb Size: 27204 SHA256: 9ab98ce940685425a1133b46f5396a02e5d2e5e0a0128ace35c40df221ebb3b2 SHA1: 434c71660ba2a2423a4c73ede2debcb6311d47a7 MD5sum: 60d5e51285f15010983d2b1d3d83759b Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:7.9-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.9-1_all.deb Size: 71456 SHA256: 129e6078a05613404c3d657530daeca424cc3bee6b82590c5ee9c39430d397ae SHA1: cc6346f86f5ef92c47695e5e9e8f4b4f5521865f MD5sum: 770f5db67c256ad29a2ea73a1c830ba5 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.2-1_all.deb Size: 29624 SHA256: a7592f05b1f8fb6bbe363620498d3d592f1efdf8c4ce4a2e32c2589d73fde480 SHA1: f50805742b18dbd242dfdf88a9713de042a83cae MD5sum: bd05ad37b7b6d0b87d2d7f82bd425ac8 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.18-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 21151 Depends: tor (>= 0.4.8.18-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.18-1~d13.trixie+1_all.deb Size: 2480972 SHA256: 631da58912d92d7cfb07426646eb309310039437e1394f9a9dcb2897d6a25495 SHA1: 6d5edca3164679dab6270c2d496658f010259b90 MD5sum: b3f68a95b363eb504510f6730252b9ad Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:31.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 745 Depends: sudo, policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_31.8-1_all.deb Size: 236528 SHA256: 82492092885d61767e8d94c4592e628255f5ba9db80bd76618c41951a146d8d6 SHA1: f213ffee2d06027ad166b9b9c416268cd2e122bb MD5sum: 501e8fabb42ae5435eadbbb1eb942128 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) Package: user-sysmaint-split Version: 3:9.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 179 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_9.0-1_all.deb Size: 47552 SHA256: ea722dd8f1d881a899f3a18609ec3aa41eef6ff184db540ee03c20bb0a966fbb SHA1: 19497a9afcdf50c8387f298e210aefb6162d0350 MD5sum: 95058d518ef477312f4f69681d46d46e Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:13.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 198 Depends: sudo, adduser, 7zip, helper-scripts, python3 Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_13.2-1_all.deb Size: 55912 SHA256: 72a3c5641c31ab97d8d7ed7f9de0f73a6f3c2d5adaa35b7e0a388ec83cd7fc03 SHA1: 7a2fa57a972f8f6e915bda8b5a465f0c1c743a24 MD5sum: 63acf99cc4fe31ad2ed0e43b003df771 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be saved. From usability perspective it also is counter intuitive when looking at the VM window and only seeing a black screen. Therefore it makes sense to disable power savings in VMs. `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` `/usr/share/kde-power-savings-disable-in-vms/kdedrc` `/usr/share/kde-screen-locker-disable-in-vms/kscreenlockerrc` . Optional: Disables screen locker when running in VMs because that is not useful either. This feature can be enabled in file: `/etc/X11/Xsession.d/20_kde_screen_locker_disable_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Set screen resolution 1920x1080 by default for VM in VirtualBox and KVM. Workaround for low screen resolution 1024x768 at first boot. When using lower screen resolutions, Xfce will automatically scale down. `/etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml` TODO: This may no longer be the case with Wayland. . Installs VirtualBox guest additions if package `virtualbox-guest-additions-iso` is installed if environment variable `dist_build_virtualbox=true` or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer`