Package: anon-apt-sources-list Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 77 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.5-1_all.deb Size: 30652 SHA256: 220a6d8646abc6594bacdefdb06ed05eb0522af1a415df304ba3905728e8be85 SHA1: b6e14f0086e49a37795e91d9f5cff1a8b86931cc MD5sum: c4d94aa23c594a872c1bfcd5855c939a Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:10.9-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_10.9-1_all.deb Size: 94936 SHA256: 806550e4c624ae15a8930a64d178f04bedbd947c32e50b9c08e3f52d8b5b9fc7 SHA1: 047a6b83372b7c7375dbfa6171a4c525fdbc7dfd MD5sum: 1edda6caf9def0fbd5047244fc024d93 Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_6.9-1_all.deb Size: 64780 SHA256: c53e83849293fa9f4153a14d4fd57ff31900a95aab26258d547d75bb205ee684 SHA1: 3d81aa028c66c4e3885da4bbf7345eea6d117f10 MD5sum: d27f9ca255720d1e2930e2227513462e Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 96 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_9.9-1_all.deb Size: 36024 SHA256: d5d3a6c89a89a7c1f182467b09b11cf4df65656a1a65489e6aeea5a13dbfba47 SHA1: 18d04b6bd9f198cbb225b928b850d64db9778fe9 MD5sum: 17cedace179beb1fbc96cbff415a005b Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.5-1_all.deb Size: 23912 SHA256: cde89ba8fb7e6965feeb7d72c9dedc6f6c602268122981343fb2c906b9702f0e SHA1: c3e19c274b3dea735cd3b598e11db50fc597cb59 MD5sum: b0b3af0563aa9d6afbf41fabb2ecaf69 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.1-1_all.deb Size: 27056 SHA256: 6b3734055d7123cdc291377d0beecbef74a84085af5b9dc0e9b13b8886d6df79 SHA1: 543793f64ec43200ae051cf2b292f772411deec1 MD5sum: e7b01d88386fbffff39511f7db4ee9cc Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.7-1_all.deb Size: 34852 SHA256: 8d34f303bcf7018e35bdeb17cb7c2e2e993b6eae8b683a914fc990f198c61b4f SHA1: 034631d4720819dcab967050af72446f72ded803 MD5sum: 0c8650b06d1805c0470f1666c84888a8 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_35.3-1_all.deb Size: 83604 SHA256: 2db38d60976211405991bb9d85695ad373289cd8be54c77b4ed453f6b4bb3395 SHA1: 844e87bb5543a6fd8cb979fb8f43c8a9216ddc83 MD5sum: d1fa79ae2d5455df83b6a59d0f34240e Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.3-1_all.deb Size: 11256 SHA256: 4f15f98eeded72e6f3fb11e8ac35ff178daf199e9d1e40c2e345d743d2cdffb8 SHA1: 44fd15e99f54a64915e3077725e22d2211d6518d MD5sum: 1bfff5aa44643bc8e79203beedadfce8 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.3-1_all.deb Size: 15256 SHA256: 29017256777db267e4ddcc7b5d06989c4fc5aa1c0bf596c8ada64d6107b8e9c8 SHA1: 6c8341159ffb29d5522d3fd113ed191f447fab88 MD5sum: 25442681c23e3851fc6221f2722b09ac Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 88 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_7.3-1_all.deb Size: 31132 SHA256: d0f929a80822ca4232827a1e8ff9da67fd4c946f8c6968bfa08b643760a39f57 SHA1: 28e4957b0d56e49a1a6b7eaac393cb9d8c5d399f MD5sum: 4e2af0eae617c3cddc2bb7b7f749c2c6 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 264 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.0-1_all.deb Size: 59196 SHA256: e2356c42a973b34e6e9f914c36ce60bedbaf64bc4e21dfa4afddf934b681adb2 SHA1: 223dfad2fc79740b6e4cc6ec81b648142fe0f918 MD5sum: 7335e26244d497e326634fcb3678ac7d Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.6-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.6-1_all.deb Size: 129340 SHA256: 3ff040056e9c9189e270aa23a1c8fc55d6d56939e57220b843cf74118798d1e8 SHA1: 199393af56404a62a88d7b4b0204f28dfac29021 MD5sum: 0ac6f698ddac7310c32d16c632df537b Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.6-1_all.deb Size: 13764 SHA256: 31400793c253f5e9996cd178b590add24be1ae5c698528e4e5182de7be73f89b SHA1: 9c177aa560c5f40f9bef976a2b703938f45c1e5b MD5sum: e15f39c72d57c76a51423ffce112643e Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.6-1_all.deb Size: 28028 SHA256: 86ccc6f4587c024fcb561d1022bfba8c4a2c8265d102cc150cc525f42e8c514a SHA1: 8fe5cbeaf54658fef31464737aeeb4eb2e9c21c9 MD5sum: 9d3e2cbdd3a2ec7cf683530f9b0d36c4 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:15.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 296 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_15.4-1_all.deb Size: 87948 SHA256: 391dba658e8e9561fd556094fffa511a47a5a9c742f87a4f4ed09739fb1164a9 SHA1: 7eb33308b93b25fe1bfeab1121d663cd1290af95 MD5sum: 6644033e8e5d868eb5829a43ceb1ffbf Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:15.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 71 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_15.4-1_all.deb Size: 43056 SHA256: ea82d233cedb0f8b708267ad8d49bd6966f8b825f683eaedcc89b65fdc7ba59f SHA1: b712cd734db67c8615d3d7e610b43d974088ce62 MD5sum: 9a133062219ed7e0ff8e01aa7ffc362c Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:48.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 415 Depends: python3, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_48.9-1_all.deb Size: 151972 SHA256: 807b0705d50bbac8a0f44c1c16545ab261dd187978821fb41043635296e295db SHA1: 72d007f0792fd97c2e2e7b1dd0715c09a213360d MD5sum: b066fa44ec351c2b021d67bf19bae114 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: nvme-cli, tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_35.3-1_all.deb Size: 83552 SHA256: f47bfde12f0bf13235d6e7bcbcb3c4f5b5602bfea5ca2d7f9b6ce8711b6ca79b SHA1: 95b807291687a41bdb4ed7cfa00af063964a56ca MD5sum: 95ed954990d098b1925ecbdf7853b6f4 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_35.3-1_all.deb Size: 83560 SHA256: 677d1e87243c45417c66bb78afb8e841ede6b6eb6226fee431bbc4caf90c0841 SHA1: f4ca48dcad72a2b06e81beb519ba6c69bc369ef0 MD5sum: f258e8709ee9e71670393e5dfae238e8 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 686 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.3-1_all.deb Size: 192824 SHA256: 249cc9c576bd95e3b95c6c0e50b9eb40f4d19116ae34c574ae9a60559262ad4a SHA1: 4fc9ddd8ca6ccceb0cd2cf045a703e0f2f94d074 MD5sum: 19b2f26e0f93fd55062722e0207b7efe Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, gpg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_35.3-1_all.deb Size: 84132 SHA256: bfd5693934c3df14bee03c93d38e9151a7c83812aeb1141e9d572cdfa56a074f SHA1: 235fb11cd15a3e0140c7185f7925e62906ba6eec MD5sum: 9d91840038c55882815a543795814b0f Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_35.3-1_all.deb Size: 83752 SHA256: 6b8e6c74d658fe446c82ab6116373cabd373a4720164ae380c7258cd755a2bba SHA1: 13b45e4f7fbee5aaf2084da3c944a99be6aa2588 MD5sum: 5dad6bb23adcfc0f4a69febde7c1f02d Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-admin, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-notificationd, lxqt-globalkeys, lxqt-qtplugin, pcmanfm-qt, qterminal, qtxdg-tools, lxqt-openssh-askpass, lxqt-sudo, papirus-icon-theme, qps, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_35.3-1_all.deb Size: 83872 SHA256: 2401f77f01c0c79633dfe84e9ddfa3e9d7077cc3902974062c86b6d36b2ab3d3 SHA1: 3df5f2d80f23dc3b0e584dd8fd019aab72a06dc1 MD5sum: 03b663ce035d87f557db80780cfb3d28 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_35.3-1_all.deb Size: 83520 SHA256: 18a41dca5d9baef62305ec849656dfc445f136d71128a25f7ce09d771f7da90c SHA1: 06a17508261e5836245449efdaab03fe1d4b1aad MD5sum: 4b837db51f03ed95d68b08fc9e6fe5a7 Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, tirdad, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_35.3-1_all.deb Size: 83672 SHA256: 9d51d31aec4408e7568fbaf9ce6efcf2d5307eddc60b578e616b20afc4d07d17 SHA1: 9176b2e7cc9ff6fb226459c2bd996c9e240082af MD5sum: 107d4d3c0e815a4ded3d5dbc416f6f3e Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_35.3-1_all.deb Size: 83640 SHA256: 2dbbcfe74edb1616cf568bf371b1b7d639f11acc3335f25b0368821d8c78cda6 SHA1: 5ad363eb0b6dff3e6321d2184005128e73f70729 MD5sum: 4fc6876c538b0b83349b2432c1a531dd Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-panel, lxqt-runner, lxqt-session, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_35.3-1_all.deb Size: 83680 SHA256: 315f93cc580f393ef019460a0368b255a59c1dc1ae4f58e4aa592e2a97d39f17 SHA1: 4ab9c867a7e1008f8c66ecf8be95f4a7c7e74cf2 MD5sum: c109015913130dd03a371383fe8c6e67 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm, vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_35.3-1_all.deb Size: 83624 SHA256: 84ebfd738adbca78b53e59e9c32bf005aeef4077f9e6c3e00171e754f47a79dd SHA1: bda4dd23f1d588af7d4497af9a5de501a9f3034f MD5sum: 929b16d42ba27f47d636c8b21e8c1cba Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_35.3-1_all.deb Size: 83616 SHA256: 1e896e438c31153adeb2df2d994cbeb2bf6910dd33d0704d797809f7d328e617 SHA1: 5778d0768a7b4501b036e827cf36904a2c29d26c MD5sum: a4ce1a6c13ed7aa9057baf0c708655a8 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_35.3-1_all.deb Size: 83528 SHA256: cfa119340834e0ecae6bde05dcc148ace74e1951bb5896c28d9eb343a1729689 SHA1: b8910de32c30054e3b6ab89c146680cc3778611e MD5sum: d510cbf32d123da3cb3002e1fc7f3347 Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: vm-config-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_35.3-1_all.deb Size: 83540 SHA256: f12d5b16de60a62f80f794b19cdce6dd0a2eb0956b5af802f76284346ade1626 SHA1: d688175800ff215579e7180f92fb6c44adad9422 MD5sum: d66f69cc70423900f5a8f72829954f5b Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_35.3-1_all.deb Size: 83580 SHA256: 3e6b54384de90251aa26d1d2ca5d60985fe349d775c195ceef4b8375fafc8cc1 SHA1: 0237ea4ce41dc6fa60c7fe933c7bc0fa9d749556 MD5sum: 9e52a905233266de575dd91b3571ba3c Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_35.3-1_all.deb Size: 83568 SHA256: bed8e48b7f61d8eab26e0619ba53f52e1e466d32ea0af05092eb935d9f66026e SHA1: 284b927ff19feb45d153b91e1de9fb8a58cd9afe MD5sum: a7056bbaa439b2a55100ca938388d138 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_35.3-1_all.deb Size: 83580 SHA256: 0ba2a86de44ef04169595475429f58edfc7538c44b22a2f2bc159a5408b495f6 SHA1: 9be06982ad1f4ab6658353c378bdd50fe2966e45 MD5sum: b44b5a168cc4c70820fe1269adc12b69 Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_35.3-1_all.deb Size: 83584 SHA256: c5b859d5a786efe93ab8a649bae8b5f459ff4cd6ba64b15bbfc46329d346c2b3 SHA1: 9eed99ee9c149421627515249415a08042562cfb MD5sum: 11e243e4ca342f374baf7e695701cafe Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_35.3-1_all.deb Size: 83580 SHA256: 4861c92fe3f5d324ecdd9d0786401ea1579014db6ff1366915eec2f10488a597 SHA1: da76836c237597ffd5ea077fe0d10e8598fc7f43 MD5sum: 601d8fb5c672624ff2e5899c641a6792 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_35.3-1_all.deb Size: 83576 SHA256: 6ad5c115d2be7af7889f9aee2ecd02fc368366d9638e01e6a70cc34f1a79b17c SHA1: b7fc486c5db36d3706d428a0338a4f3940ac8369 MD5sum: f88c8c1bef11eb9d19a9b00612168325 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_35.3-1_all.deb Size: 83568 SHA256: 4fefc231b82072f3b107741edd95dd91c02e38f6e4bead1ad7c6198fe23a4786 SHA1: a85e9f1d82215b81e49f5e2cc244ee7abf4e4101 MD5sum: a601d5c7b5485ffde2e480d21dbc8046 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_35.3-1_all.deb Size: 83608 SHA256: ff00991581f0bc7c9ad20f9cd764705919a4e32ddcd5c66a94d4ffcf0295bb80 SHA1: 0c8d9bc291ee52260273470f7740bfb69b5a8202 MD5sum: 5cb166f441affb99d96c95a4cb43e7d7 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_35.3-1_all.deb Size: 83620 SHA256: 57fe0c1a77e1af6e0bda8ac9c1bfc01fc9837a764ed6032518a0cbf150b0a4e8 SHA1: 3ebd4613233a5253fd3cc627f05521f3d59bed53 MD5sum: ef8fa0a46549fa83e773aedef2ab3242 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_35.3-1_all.deb Size: 83624 SHA256: f08230789a56ffed5b32662dcd7da10ee5b79fd4f7fdf1d324dadd9f8dd04397 SHA1: 31a9d8a9c1bd6e6c4d40669d7bff6fa105842125 MD5sum: fcb287a7fdc956bb3524da56cae6e770 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_35.3-1_all.deb Size: 83564 SHA256: 3cc6df01f30ec868e6b2ff31171f12c6d6db4f2a75a458c884cbe2cbf30bb64d SHA1: 138ba70442fe92ffe6f67450810227dc5f682bd1 MD5sum: 631889c74515fb91c43b06e9b9128a69 Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_35.3-1_all.deb Size: 83588 SHA256: c1c2a5249e43a62990cbc499b7ad04b373d31c71ad2deb17800910c6e67989c0 SHA1: bd42db9a21b7ba4a765f7d975e9c900ee41c7ff8 MD5sum: 0acafd32bc9d6a0a66b2c344097560ef Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_35.3-1_all.deb Size: 83588 SHA256: e99363b3f3b26ab498e1d402cc97ba9dbed878ac98d4f2595bdf1f3a318450e0 SHA1: 000808534025d6c16309cd5312c67d69054da2db MD5sum: c89f90bc91a1028d04aaf328c9760148 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_35.3-1_all.deb Size: 83564 SHA256: 207d01904558f63da0937553819cddd5dd1b7f5c23581dd780734624dc487c9f SHA1: e791ee97fbe19e3928b36c55de84ee5607794aaf MD5sum: 1730bed6ad6aef9abdf730d7c3d57cf2 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_35.3-1_all.deb Size: 83572 SHA256: 513f47663b30fc797c7657c505fe4c505349c1b4a7ee670f547c9013a427d6d2 SHA1: 345b27c82cb148e3c3d3add5238dc97feea66e33 MD5sum: 03d27752e3ce41b80991a1f7f92e38b8 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: genmkfile Version: 3:17.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 163 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_17.0-1_all.deb Size: 61152 SHA256: 41600e4155d32dbc99153c059d0e321379fb264179d02b74e031879fa54621c8 SHA1: 2505b98f722d8755c8bf372be623243619d755c4 MD5sum: 214dc516117fb4df2403c4b6bf900c51 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.2-1_all.deb Size: 490856 SHA256: b8c359ed77e422cf704cbb6edcbe6bf33577db2b954854e23a9743fcc39075fe SHA1: 1103c362c6e71b82fdd6d50273334cd7cc46fd4f MD5sum: 5a704c467d7a0c217cfbd3dde21ca370 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:10.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_10.4-1_all.deb Size: 39124 SHA256: 7ce3961844f30e3545eab06c05bef3b0dfa15cf24b50717698a54b039c1d0764 SHA1: fc84dde60ec4c0f2bf01049a340a2bbfee260b3b MD5sum: df26a053ce56559355668345f3c1180c Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:10.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 63 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_10.4-1_all.deb Size: 31016 SHA256: e10acb4cd5d6be9af4058f74d5fbaedbe00a9abc79a79e6bd6d10abe76817d05 SHA1: 3476e3aa40aa68916173e5422cdd7405ac171b93 MD5sum: 41ca9c4c4a61b243c2c76208965f085b Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.2-1_all.deb Size: 158220 SHA256: fde543735888fbf54002055ace8171e4bb0a58e7cb103c9a909b2de8d7d374a9 SHA1: d86d6c5d078bf869d7016783ac2f76939c383799 MD5sum: bb77f496c08afd14bc7ca350ba184292 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:40.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 710 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_40.7-1_all.deb Size: 213604 SHA256: a1176d7217878fc109e5b023286100866598a5772d16431643f5b264d1b8bf3d SHA1: bf4a38e709da7e396362e2489ceff6b2863a9710 MD5sum: 29c30e2b07b88119fa7a109cad4fe7b4 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:40.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 138 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_40.7-1_all.deb Size: 105480 SHA256: 6b41b4a40827d54bc97915a6327ec826ae56969be0374f36e1b4d5a253d041f5 SHA1: b2e7f90a63d4122eff223751cea18832409d4153 MD5sum: 81ab318004d3af3165a5ea437fdf0668 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2526 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.1-1_all.deb Size: 1439208 SHA256: 0468385f8a518322d4094640bdebf03d1bbb4ef025c11f46df290ba6d029c551 SHA1: 185542624547799c0bb9c49f4c990e9c06103f5f MD5sum: aa34940583b482db481faad77a7958f3 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.2-1_all.deb Size: 34088 SHA256: ea8950cb02b5596a9aaa293165a6a3abfb5652eb8491452c2f9c6cb1a126c16b SHA1: e8f1b2db12690af9d7d74cd1978c743eb2575c39 MD5sum: 4a8dad09a8dded81285bdcf43e61f04a Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_35.3-1_all.deb Size: 83584 SHA256: c178345cf271ea5fa7cb98ce706f919edf509e8d2a31e675c3c31c814ce5dc46 SHA1: c49727f62ac92fa84dfcb251bba899c91aeebbb7 MD5sum: 249f1961a151359ef4ca45d6cec180c8 Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_35.3-1_all.deb Size: 83628 SHA256: a743e38e51b82d8b3afe7ba0b5dd78386967e05296705877d3ab97218a82f162 SHA1: 08b513e48299908d8285338da0403ffc5a822daf MD5sum: fe28879ea299cbcc6a7be48d83e98fd7 Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_35.3-1_all.deb Size: 83568 SHA256: b5be818b71c584b7554bbefa8161c76a15f2274bdef850b083b35d30b44d83b8 SHA1: 084b3827a411f57658eb7760cc6e512e50a2fac1 MD5sum: d4b5b1471b4c4adecaec7299a64e15e7 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2727 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.0-1_all.deb Size: 2632028 SHA256: 9135d6d087294380ebc77a33478c0175391d0e8187f17d93fb76b818a137e753 SHA1: ebcc130292dea3cc36fb64578fcc55a41bcd4194 MD5sum: a08cb27808e152c36c070e3928460c75 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_35.3-1_all.deb Size: 83592 SHA256: 44f52661666dcc660f0155fccd9a060b4b0209463c7ad514abc7edf883f7c7ed SHA1: a02b2050eee0275c0ce73ba82381aad63e68f254 MD5sum: 269b548b99b2673cf72c54afc8a48d88 Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_35.3-1_all.deb Size: 83640 SHA256: 9e54d2094f099d12c4ad0500f4ff3ac74027a4977096986a4743cc20fbf573bf SHA1: 69807419917995964cbf7d98ba1fd9164043e859 MD5sum: e226229964f041a411aaf8cb20ef3f85 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_35.3-1_all.deb Size: 83592 SHA256: 396003d571187ba72b27c34613648995451cda337924dd69abcd17d775a66851 SHA1: 43058777c32f6e812037c7e97d42905d63c27a41 MD5sum: a558c56b8fd99a1d127239e764c021e3 Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.9-1_all.deb Size: 22864 SHA256: 655af1aaae912f74335aee678a10f8b122945b75a6d6fb33dc4785a8024a60f8 SHA1: 51384d44e39eb647f6d4e4d7c37c833fbd65abb6 MD5sum: 859df84ecaccfd70f9e928054a131392 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.9-1_all.deb Size: 19488 SHA256: 2ed67ecfc4e6d8d74360d83e3e0c30f970a33a8a62c103143af034ed76223402 SHA1: 26149acd768ae533e766b34a5a9fe6d2d73b9f80 MD5sum: 608af953ef551749d55fa14c8b21b762 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_35.3-1_all.deb Size: 83556 SHA256: 49baa06f8e1e43c02e5da35463c8fb72e0435c125697e7f3e3cec93bfd78bc9b SHA1: d219641956c1cfc0de8a0e065274d6ed564639ef MD5sum: cf4e63e5e1c4a15524eeceb729755489 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-network-conf-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_35.3-1_all.deb Size: 83560 SHA256: 9ce5e2cea4f00708d00bfc320aa8849bd4db33d6c6ada459c9fc12698ecc81e8 SHA1: 61a2101d4f3e22edf0d65afbf0b2cf5eb1ab8a7a MD5sum: 27aaa8a32e87bbc71fa81142bae3e839 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: pavucontrol-qt Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_35.3-1_all.deb Size: 83560 SHA256: c9f82d438ed2b2c4248ce2874227ba4dba4b9082ab21e932f8abcdf96589c528 SHA1: 17ded6f18c50cca19160ef40b300bd60a1470469 MD5sum: 3df3efe9af60ccc2e6872e9cc64144ca Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_35.3-1_all.deb Size: 83576 SHA256: f8f67aac9d64e7fe5644eec55db8d888f427ab557d0bb25486ca3f5c86c7f8f7 SHA1: 83adf2777a8aaf75f5a67146d4346142d3095f20 MD5sum: d569d6c291cd624e13d4d056f4276397 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: qubes-gpg-split, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant, firmware-nonfreedom-network Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_35.3-1_all.deb Size: 83596 SHA256: 8625841b1c9b45bfc48308feb88e63de5b85196b82d033ce8e3378e307af2af8 SHA1: 9a546d73ba96916772c48c68ec5941158a4db96c MD5sum: 12e197394e79aef6da8111e9a04285b1 Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_35.3-1_all.deb Size: 83532 SHA256: 6b3748d095cc0c8f669c14d031bafc301e0ee9d0d768671a8cbc3d1e865efb00 SHA1: 186ac119b53ac7537b6ead3f37b13ad518f63590 MD5sum: bdc1e2393b5e42734d46e9a0d53daf5c Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_35.3-1_all.deb Size: 83604 SHA256: 8b1dd39b66b8f54ada059415113d6d84103246326c3bfe2ba85fa6aa4292f6a5 SHA1: 72d6ffe0b7010dd022be3cb513f87818ad805cac MD5sum: 9c4875c1dc0d027c5446844dd6f574a8 Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_35.3-1_all.deb Size: 83556 SHA256: 9436964f43b54aeda51f1a1d1bdf5b1e35e4b9a4046b519021c55f3aba40b40f SHA1: e34c35c85fcd65e49fd48909f0a79b9936e5ba71 MD5sum: b67310345534e6e5d8396782dde70c9b Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_35.3-1_all.deb Size: 83548 SHA256: 9f41a8c6e955cc4548df06ad8e823461da63cbd6391c987faf8e13ac280e2b7d SHA1: 7cc229d668427522ddf59329cd8e8ecccc90e8f3 MD5sum: 33693bf87f0b34fcb03b56c1d340700f Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_35.3-1_all.deb Size: 83624 SHA256: c2b17e9238ab5b13926fe86277efdc5d0460c236a1a5099c263e6870508f743b SHA1: f46877f55695f4614bcca0f0f1a854edcce69d96 MD5sum: 82a3287f6bbe54bbb8feca53f992de25 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:35.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_35.3-1_all.deb Size: 83556 SHA256: 94fcee8c00d1406d4bd9f6a3f7e5f3b15d65d833c454405db6927fb26c7ed1bf SHA1: c23aa5bff3d6a8cf8479709257e87d8d4b1b4a3a MD5sum: 553afc55193b5a0e0bc3de77fb4009d0 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1012 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.6-1_all.deb Size: 922344 SHA256: d06e8df0b67f007a8de96790f53c1903a6257206fcbfb2fe3ceac5eff1bef933 SHA1: 43d82028512ca9095872a620c6dbbb2438b663eb MD5sum: 5e13fe17d5fd1fd458b09409bc2faf14 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:18.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 142 Depends: helper-scripts, apt-forktracer Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_18.3-1_all.deb Size: 56412 SHA256: d06379a073643e3b52f304769efca20d3c7d5621a8800885b01dd7146fe1c46d SHA1: 656c38db424c3c80c305ea3ba152f6756a506aae MD5sum: f22500e93b89472ef754433f34b2ce8c Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.7-1_all.deb Size: 55752 SHA256: 75744dd17cf0fff54f98e56c2a7d773076ce1d992e884428d056a7717c62e237 SHA1: 89e3b2600b9077f1e07ea9155bdc29770e9fe9c5 MD5sum: c6080e2401700182e1c34f87504b7956 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:9.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 303 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_9.2-1_all.deb Size: 147184 SHA256: bd0b1a97f570227c21ff237ffa87a3496ec81a5c238b1ab831b01e14ef931bc5 SHA1: e81bbdeea0a594e4a2ce5d657b4c2cff04a2144d MD5sum: e4a15b0c8cc60046d4693ed46692a6c3 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.3-1_all.deb Size: 342016 SHA256: c57eddf8013fc893eff15117c8383869ff54b605fafcff7a249ba5076a24eb5d SHA1: 36480192b369ffcb6d394a99de98a419e87caf02 MD5sum: 6eebf1a1fae5eda00daff5c2cc24293e Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 152 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_4.6-1_all.deb Size: 46256 SHA256: 0e8febbe904040aad4c3452987fe13c1a512c8b0678003176feb3ca2b2643759 SHA1: 4a06cb93eeaa886c7c418182d4e6fef6b66d8d4c MD5sum: de5c1d26f57d564e577545673cf53fda Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:15.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 214 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_15.0-1_all.deb Size: 68276 SHA256: b6153c30eb668150b87f7b8608096b94e3695aa3408e4ed929dd4315bb32590d SHA1: 8404f80209be8e391286a8db46b7fbc4241f8d3f MD5sum: ae0d194beacceae9366a65d62821afd0 Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:15.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 76 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_15.0-1_all.deb Size: 47656 SHA256: ed6c5ba2a81dd8db67a7235eec9f4f6dbdb848ef56c5cd45dbc5f3075b1adb64 SHA1: c37fa643cd50f9d966d69e130cf4bc3f27faed27 MD5sum: 5a83c02db2c614cfcfc45adcf43e6057 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_7.8-1_all.deb Size: 33748 SHA256: c4221d040babecf584215ad1c8e298a157e270b4cf89031b607f778b5c38655f SHA1: 438067132bfd41799aacf55762d0a69abc34cb62 MD5sum: 64dc91448e12903e7a62eebca5b64172 Description: Asks for confirmation before opening links Asks before a link is (accidentally) opened in a browser. Links are opened in x-www-browser. . Currently only the Tor Browser starter from the tb-starter package (by Whonix developers) supports using open-link-confirmation. Shell wrappers could be written to support other browsers as well. . On an Anonymity Gateway (when the anon-gw-base-files package is installed), it honors the $EDITOR environment variable (falls back to mousepad if unset), asks if a file should be opened in an editor before opening it and informs, that opening links on a Gateway is unsupported for security reasons. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:4.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 212 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_4.3-1_all.deb Size: 53040 SHA256: ee146a0e41ca911f6a32fd7fcdc68a69265279b4d050268738d05cfd3339eef2 SHA1: b80bc6098423f4eacff1dbf778e6f719384c0619 MD5sum: a2e2532319a4573c642850c986e56c5f Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.2-1_all.deb Size: 36324 SHA256: 8bfcc7b96fc7c17be9f449cc82a0b72e0cacdac8f4599919a997616aa02fc9a1 SHA1: 0b766770abdff492595be22f1e6a4da6b0352a05 MD5sum: f8d50ec288fe9ad043a48a8d558a1cd6 Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 98 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.1-1_all.deb Size: 26044 SHA256: 587e13aaeb4fa3660f57f6795679d563c6ef6bd0ff7b7db0825f144e334f96a8 SHA1: e4c1095ed7fc1508567b1ab1063c3c46143be1b1 MD5sum: def311cae2144e72984a9662bdccaa8e Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs-tools. Package: repository-dist Version: 3:13.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 218 Depends: helper-scripts, lsb-release, moreutils, python3:any Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.0-1_all.deb Size: 112732 SHA256: 8dfc4bc9d5f19079a5dc4767c4aa99cfd79bbac93b3c2ceb156d1b5b4166aedc SHA1: ad323db2fa2b70499f13d24d8bfdefed704965d5 MD5sum: e12933895fe7605b9e5f88164359d80d Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.0-1_all.deb Size: 41024 SHA256: 8ac82cb8bd486c1c2d693ed00a1b9464384c8b5a2beba4746e793e29500a49d2 SHA1: b5422cf81843653ee460a19faee8e18979521370 MD5sum: d27b0f0b80b07ef86fe143f005d5589a Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.4-1_all.deb Size: 19648 SHA256: f02f010e5c16e48f19d196a4cb98e331c5c8c738a13ba4def5da44f411d3ad13 SHA1: 9df20e2b5c06eba1bbcaafb0b06bbb4d9c34015f MD5sum: ee48fcae2f3ebd17dc0881c95a3b7640 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.2-1_all.deb Size: 48980 SHA256: c34533f0863e23178dcd3cc12f8211662e9f50e6c94454dbd51721df4e854151 SHA1: 2518e310f635aa367ea0b0c1ae705c51b7a177d5 MD5sum: 2a48696f8866a525ae042c271f2fb7f9 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:27.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 347 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_27.0-1_all.deb Size: 152596 SHA256: 198a12eec5a40ff694bd0329c0e9fde2095874501f5d736e531dc6c9eb2b54ec SHA1: 5c8020ad854dde421282bf4aab20a1f7a7b1749b MD5sum: 4b3bc49ba91b6bf1fbe0684e5b6cc071 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:12.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 270 Depends: privleap, python3, python3-pyqt5, qtwayland5, helper-scripts, sdwdate, adduser Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_12.5-1_all.deb Size: 100188 SHA256: 55d46b91062cd834b058101364d2731a1c10aad2085afc008f22a750b03111a8 SHA1: 2b11c7d74b916c1881ff29d514265abbec803938 MD5sum: ea6457704c0b5f0031d901a2b964b9ba Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:49.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 206 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_49.5-1_all.deb Size: 168740 SHA256: 0752ebe2f250d95a52a628407a7cd5b8edb1922f77178288b5309ab4a6c2ad19 SHA1: 7f97c42b0e2f1bcfbd790151014733ad76e9113d MD5sum: 866e8b179180f6c5b3a2afda000f0e54 Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:49.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 196 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_49.5-1_all.deb Size: 167772 SHA256: ed0cd90bf0b2c3852953d8bb9fb87826fb188c1e28c1ccd4aaccc390739a0b12 SHA1: 94764b7bf203678dabc4722142ea23af1ff3958c MD5sum: a0c38113eb3ace5cdba0851a83a3aaa3 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:49.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 729 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_49.5-1_all.deb Size: 249436 SHA256: a7bfa0dd8019f8caf623436c2d01a382c93ef546d948df526286f78204784e61 SHA1: f1714e25e02b1e0d52fad6c910fe461bbfe82cef MD5sum: 3e94a3556dc7ee04e85af5aab2d34c07 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening/7296 Package: serial-console-enable Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.6-1_all.deb Size: 18192 SHA256: c64f93f694fc6f279ae685e7c77d7dba5e8af86ff9bacc28e4eae545d30344bc SHA1: c40043a27cd2ea3f3bb19f49f4484f2db07a028f MD5sum: 26f597d3bda7dc2e56d186817799f0d1 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 137 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_11.9-1_all.deb Size: 47488 SHA256: 10ee987125b653fcc56425e41db78dfa1b8ab76959daeecbca77c361c406198d SHA1: f121b837e3719a7c0d0650296b5a675fa4fde5ce MD5sum: 1ec02fa1e08dff1b7a5c52a6e595c3bf Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.1-1_all.deb Size: 61060 SHA256: 2d0b19e99cda91bdf556ac96bc0df5562966f525c9be45e9b935ad8d65f6c01f SHA1: 6e08ba310260729938ce09c02591234d75e5468a MD5sum: 044fdcd68a3068f41c0408fb7a8450fb Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: helper-scripts, cryptsetup-bin, bc, systemd-cryptsetup Recommends: haveged, jitterentropy-rngd Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_8.6-1_all.deb Size: 33076 SHA256: f6d85fb030cf13a2d35ccd3bfa7969ea5e1b2bd585c8578b5ed8fd48eb3a01b3 SHA1: b89d4c6affd0c7278d1527577080462c6b0682ea MD5sum: c078883a8d9d650405f7cff8537aa8b6 Description: Adds encrypted swap file to the system On every boot, creates a new encrypted swapfile with a random key. . Useful for systems with low RAM such as inside virtual machines. . Has an option to shred the swapfile on shutdown. Package: sysmaint-panel Version: 3:3.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 128 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_3.9-1_all.deb Size: 29832 SHA256: 8ccfaf79cd26907e09534cf0183cd94cf70780956b3361891cdcb46ad288e263 SHA1: eeda48086c3f3d8c91237a89c8e6dcb669451317 MD5sum: 57c04bd54332e1a2e997d5887341693b Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:45.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 573 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_45.0-1_all.deb Size: 186792 SHA256: d68c3cb1d8ddb9702eebd343af4a8d2afa7441e6cfac91d66f5632f0bc3ced51 SHA1: ac6c3bf18201ea16991e36153c0198be388ad894 MD5sum: 0411891aaa1ee8fa67c40dfbe9f866e2 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_7.8-1_all.deb Size: 28304 SHA256: 768112abfb3cb0f9b3373fda1a92c7eb6c6e09935e34c3a6d6cd11fdee10c9d8 SHA1: 1dba4ca0929863d6655e211b7a8e5e57695fae3c MD5sum: 08bf76ae6c65555e2a903250a25a6fdf Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 171 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.2-1_all.deb Size: 67860 SHA256: fdb35e9dfac6ad9a5e4646ec073b7f15c8d9e7b2ad2fc6d1293e26269c09f4dc SHA1: 3a400fd3777da516c2a64cc99f646fa040621841 MD5sum: 54d04073f365f081f7c35eb78f7eed96 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:40.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 524 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3 Recommends: tb-starter, icon-pack-dist, helper-scripts Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_40.9-1_all.deb Size: 244552 SHA256: 3c54718b628160f53c347e7a6124f6d02721078518903c4bc1a1fdfc7e483c91 SHA1: 4ab33c2ab729e1a42c417e53e7edd408d2a22001 MD5sum: 168e5ca4681c25d493abc7c1b98b8654 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_7.7-1_all.deb Size: 27544 SHA256: d0251b501b594304c24e1412de11296125df32f55141bf3204524370ef269e04 SHA1: 84fe173158df228980d76a05e1a5ad230afd92d6 MD5sum: 96fac4f5e6f5e44a325d9dbd89c66557 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:7.9-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_7.9-1_all.deb Size: 71456 SHA256: 129e6078a05613404c3d657530daeca424cc3bee6b82590c5ee9c39430d397ae SHA1: cc6346f86f5ef92c47695e5e9e8f4b4f5521865f MD5sum: 770f5db67c256ad29a2ea73a1c830ba5 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.2-1_all.deb Size: 29624 SHA256: a7592f05b1f8fb6bbe363620498d3d592f1efdf8c4ce4a2e32c2589d73fde480 SHA1: f50805742b18dbd242dfdf88a9713de042a83cae MD5sum: bd05ad37b7b6d0b87d2d7f82bd425ac8 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.18-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 21151 Depends: tor (>= 0.4.8.18-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.18-1~d13.trixie+1_all.deb Size: 2480972 SHA256: 631da58912d92d7cfb07426646eb309310039437e1394f9a9dcb2897d6a25495 SHA1: 6d5edca3164679dab6270c2d496658f010259b90 MD5sum: b3f68a95b363eb504510f6730252b9ad Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:32.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 760 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_32.7-1_all.deb Size: 239684 SHA256: a077a28b017743930c90c62590a0e9020e7a1ee5eb3f7ae711d8de9d7e255859 SHA1: 09a9830e3ce5e4d9c93a900be41e5c34c392f2eb MD5sum: 1788869e377607b8a4730eabd1028276 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workarond "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 Package: user-sysmaint-split Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 190 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_9.9-1_all.deb Size: 50956 SHA256: a0545fd923867b83c21127888f6231c01f498b49a91dd97d8af871a526b7de57 SHA1: 00c9f93464da55a7081f0e99e6ae42068f7c51ad MD5sum: dd613ba14f6b0ea8ba52ff0bb6a7e835 Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:14.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 170 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_14.3-1_all.deb Size: 53404 SHA256: 089ddbde71859f1b1aea0cc488ba0567f86e72ab82a1bfe8671d5b8198941d5e SHA1: d590cbd750e30c77ff807929ff1f8a651e77a40e MD5sum: c3f4a8a37d294aea36c6205bf771ca8a Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Provides a tool for installing VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed. `/usr/bin/vbox-guest-installer`