Package: age-api Version: 3:0.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: helper-scripts Homepage: https://www.kicksecure.com/wiki/age-api Priority: optional Section: misc Filename: pool/main/a/age-api/age-api_0.6-1_all.deb Size: 15296 SHA256: 1cc69d38d7a494b0f890a19f1c35c34d5b9151d0a4b5f1a8158520e91c2a96e6 SHA1: d2511eefbd55265213130e55f99d359e3c93ed3b MD5sum: e29e11da00482eadd28bc51cc67314a6 Description: Local age bracket storage and query helper (age signaling) DRAFT: Nothing has been decided yet. Much better places to get further information: * https://www.kicksecure.com/wiki/age-api * https://forums.whonix.org/t/whonix-adding-age-verification/22969 . age-api provides a minimal local mechanism to store an age bracket and query it for age-signaling use cases. . The age-api-query tool outputs a machine-readable age bracket number on stdout and a human-readable description on stderr. . DRAFT: Final implementation - if any - would look much different from what is currently implemented. . See also: https://www.kicksecure.com/wiki/age-api Package: anon-apt-sources-list Version: 3:8.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 80 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_8.0-1_all.deb Size: 33404 SHA256: 91a738c45b1c6611fe94c7cc050ac760c62725c53217c3bd80a64375dad9b6a1 SHA1: 9ac0250ef5b152741740acedd062f8e85e45d54f MD5sum: d8ee6ff347ba0b4278260fab8fc25d39 Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.5-1 Architecture: all Maintainer: iry Installed-Size: 47 Depends: tor-control-panel (>= 1:8.4-1) Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: oldlibs Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.5-1_all.deb Size: 13908 SHA256: 9371c0f567da76c6e97a44c013dd8bc715ad7cc6b251a2694aa334af763387d0 SHA1: 991f9f57377bb02ac03ba5b3e394e8be5caa8ba1 MD5sum: 4c90de8604ef4eafcec4b78a40e2c253 Description: Tor Connection Configuration (ACW) (transitional package) This is a transitional dummy package, it can be safely removed. Its functionality was merged with tor-control-panel. Package: anon-shared-build-apt-sources-tpo Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.3-1_all.deb Size: 65284 SHA256: 69ed314afd354902a312e790a2d8f34440ace4d23d2e4b199323d5f8a3076d81 SHA1: 205d7daffe505faae2c75d13fd5ccd53ff812783 MD5sum: 0cb95c65ddd09d26bf6a40ce8a059511 Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 99 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.7-1_all.deb Size: 39400 SHA256: fa4cdd652a67a4191dcb253d862b773ab400d122c8b2e493e8e72919bf5e5a8a SHA1: 05a3735fb6c53b49b33347990df31c80aa499397 MD5sum: d7c21221bdb2b57451913463d4ec9a80 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.7-1_all.deb Size: 24140 SHA256: 87e892db0db1cfbb9e777cb57e803140f80d7452332daae592e51a246b0a5595 SHA1: 63f6fd859100d34e0250d3b9b46b6140dccbfaf0 MD5sum: 5abba8d6fc4062170f0f454cdd88fc88 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.3-1_all.deb Size: 27288 SHA256: 1d6d93cbc57e21ab935acc9f5713650c47cb754f4d20e93143ee0188a2cff52e SHA1: 25becc44047b543196f2aa3a07897a52c45471b8 MD5sum: e04b6408a6114387f56daa0e871de265 Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_10.0-1_all.deb Size: 35904 SHA256: af8206db3e1b72bdba397836eb589ed74e85494a9d267fb384fab93e53f42f73 SHA1: 0a30647b10c36e46e0ac2cf1ae1e39ddb40805a8 MD5sum: c4cd114dfe4ada7a2225344c06a0d8a7 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_37.8-1_all.deb Size: 90456 SHA256: af008868316b632ee4d482224c0690af3cbf22d9ebd54249c808c338353b51f4 SHA1: 6ec4de633d2000b9e81f60fff9eaf12e6e434867 MD5sum: 297c7a72147e258a1dbf1a4fe2d86b21 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.5-1_all.deb Size: 11492 SHA256: 3d78fd9075cd4974878a907f4465885df98967532df3ef317fdad8b113c502dc SHA1: 873cc93a10cb95a325968f4582a2ed78d975ea54 MD5sum: e8a66e63f8989738fda944b6afb39488 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.8-1_all.deb Size: 15896 SHA256: b7216eb4d4cb2f290e7d5bbf5b1d51640c050ca09753217ce44b37e8d0cf5e09 SHA1: 8b538e5cf4fc34756276334c7971aecc2628df25 MD5sum: 55f84913b975866902f18157628e5194 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:8.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_8.3-1_all.deb Size: 32996 SHA256: 2911f087f57f3ed502f35c979848c10f31261255cb1fc23faae5aa3f38f4c4a9 SHA1: 4c7f3ce97ccb057f278e0812ea59f6fa1968c6f1 MD5sum: ef5c13e33a7a6c1d11a270b8d80d2fd6 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:3.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 290 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_3.8-1_all.deb Size: 68292 SHA256: 3a53d30b2074e90a4fe1a82a0d5189a8c9eb320a74a5b0feb895917aaedf37b8 SHA1: 3446d77f3122cdb282d50e290910aaff39fa14d2 MD5sum: 313666520e72b2ded897d73b3c34279f Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.9-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.9-1_all.deb Size: 129384 SHA256: acb936338d60918ec0768b7b11a955c5b7d2a4cc86a745a48245ee557b46880e SHA1: c705fd8dc697d9709574428851bf3d20ea9403b1 MD5sum: de2d3bd03e3e45783d2935d358473f2d Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.9-1_all.deb Size: 14140 SHA256: 208fcd2049b3f0634bed412c64bff90a0cda0c45a63283df562cb7a4ceece401 SHA1: 4f5c9fb97688cfa33006e86d7e5f0618ba20caa7 MD5sum: 54dbb90fa710892a6050eb32ec807852 Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:6.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_6.4-1_all.deb Size: 35432 SHA256: bb6fc2aa2c0c39d81b3ab557c10545096631dd6379530bb041696f2da4866675 SHA1: a9f797e8694fe2b4bbbcf5caa350ef8d61d66692 MD5sum: 2c47f14b49933f208ec99823d81d2151 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:19.1-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 361 Depends: python3, helper-scripts, python3-pyqt6, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_19.1-1_all.deb Size: 107332 SHA256: 48bf0eb82fbbfa8a28762028b43f08a01526f64b73fb0c80fc9fb542975b3324 SHA1: 48265f908cfe86fd266559019cbce969aa5ba12d MD5sum: 52295e0fe0cc3ab016aabdcbb3ca5a40 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:19.1-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 82 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_19.1-1_all.deb Size: 53512 SHA256: deef3a5a223190836112206437dc41a722e85f32e2d5c0125577aad600f465a1 SHA1: 378ad564dbc648cae96ac2dbc3c6e09a35e22204 MD5sum: c96405d5eb9c783f27c7874d14773f65 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:62.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1137 Depends: python3, python3-debian, bc, jq, dctrl-tools, pv Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_62.3-1_all.deb Size: 587676 SHA256: 3ac5cc72125f7b6b0379170bf9f79c00967266e3e4dbddaf315e6ba1141e6e31 SHA1: 3531b372112039c841198cb524db571f2f24f35a MD5sum: 64710582dd221bf8a073d7912e8037df Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: nvme-cli, cryptsetup-initramfs, firmware-freedom Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_37.8-1_all.deb Size: 90416 SHA256: 32a2dafc2c78eab1430bb0ac01fdf49eacc518c687fe0df9306207575832b268 SHA1: 53fd7959ce1ff0024ba5446656f3981e6459695a MD5sum: 55713b04acf5efd6078b77947b4a7b82 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_37.8-1_all.deb Size: 90428 SHA256: 1a0b8a01ef671def0c7e0119feca38ff8077c781dfac7285716da8b3f304612f SHA1: 1ddb258237ff96031593e9e2211d4a8ab927cf3d MD5sum: 9bc80d5251b606349fef184532728e73 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:16.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 702 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_16.6-1_all.deb Size: 203284 SHA256: 6fb676bdb4c36988f27ba98f74f34fd906b8b0a841bf080c9ce090b9c577627d SHA1: 98ac4c28453c2138921acbbfe9c5891d769ed7a4 MD5sum: 8e069da42b853063d957bf2d45d9cd1f Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, sq, sqv, sqop, sequoia-git, sequoia-chameleon-gnupg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl, mokutil, squashfs-tools, wget, zstd, keyutils Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_37.8-1_all.deb Size: 91044 SHA256: 48d7f3ef579f1ba1965c62354dbd0a71aec500e1242a16bee940859140ed350f SHA1: a8ef20c220a1b6b16513949ce7e1977eb09026c1 MD5sum: f9d105f160c8ba7a96fdb28b312b28f0 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_37.8-1_all.deb Size: 90604 SHA256: 37cc0dfb0c6f9307112a0170dbb57493647c18bfb0ec6229e7d5b48a3616c07f SHA1: 8fbcad9319da4b3afc023412f78685778961e9c1 MD5sum: 5fcae2a4e4f5bdfe29701e761d51f9b9 Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_37.8-1_all.deb Size: 90772 SHA256: 2e0aff494a497ee93eca859637fc8013b61fef35a1c57bc772ffc08afadf56c3 SHA1: 9a5cf5c62c8efe1ac940047e62109d47cb4cef7b MD5sum: 46cac8d9851c7c2e80261f76504ff55c Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_37.8-1_all.deb Size: 90380 SHA256: 436f41986ad1479aba3a3898957dc148028506a9ab316aea1e7a151ca88ab02f SHA1: 1c54ae7cabea4376f7fc32f59255d6d221d161ed MD5sum: 271fb57a2f4b8fe73a43d8bdd4c836bf Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_37.8-1_all.deb Size: 90520 SHA256: c6bb089b92ea6ef1a23520ecf0313a1d8ab5d8369d1f567936228364df947709 SHA1: c77e03e616b467b5adcc92ff0a2222a520c626f1 MD5sum: 16cd993fb060f475fa97249b8ed81ced Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_37.8-1_all.deb Size: 90496 SHA256: 54ef6b2fc205d21db8c4d5b4510dc24029e439a50b7b03d22f4d5f8b58d70c58 SHA1: 8d89aa2b5bc9dae9acbf2250302f2858fa98dc65 MD5sum: 15542756049e098cfb0446681f5331fa Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_37.8-1_all.deb Size: 90556 SHA256: 0577ee2f7ee0e8dff2ae041a23593074d43ba40c42c9dfb8e115d7d8626c4aab SHA1: ce3a45cca0fbb55f5acd1627b5eb370b71b1a20d MD5sum: d9f78ce42de0f12d6537ca84829a1279 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_37.8-1_all.deb Size: 90460 SHA256: 4c3897098dcb4d45d6fb9d0444aba629f9a2da20264ab99a3b129fdf5401225e SHA1: acb70e34c01d545cab0091a6a3a307f0059cbc56 MD5sum: 683a1470ba8b8dd7d25300f9c000ff75 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_37.8-1_all.deb Size: 90472 SHA256: 9bb366370e91219f30c855f068ad866007397e0ea967a8f8e327949382c512e7 SHA1: f0da282f5e0b37c3b3556d6651cbe8e017bf7f0b MD5sum: 3b7bce6d4ba28c808f0c0f671a4422b7 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_37.8-1_all.deb Size: 90388 SHA256: eaba59c8e9a5abb008f835b1bec0aefb7398e0bfa2c7a4d9c7939deed9e9f10a SHA1: 7bd6d5d038286dc87c9c94478dca5fc71c4827a6 MD5sum: 6e744ba1e78216da33b0560b032fd9dd Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-system-metadata Version: 3:1.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 86 Homepage: https://github.com/Kicksecure/dist-system-metadata Priority: optional Section: misc Filename: pool/main/d/dist-system-metadata/dist-system-metadata_1.1-1_all.deb Size: 42076 SHA256: 95ce2d6578f577241ed8ae7a122002287530aabcbeb86c2a833f11c8f654d8ea SHA1: 58f6d9e29b19f73fb6aa08b79bd55e88b14f9827 MD5sum: d50468ba9551db0d44a200b15919deb5 Description: Distributed system metadata for derivative distributions Ships data and metadata that other packages consume but which changes on a faster cadence than the code packages themselves, such as pinned known-good version numbers and bundled signing keys. . Carrying this metadata in its own minimal, dependency-light package lets it be updated and migrated between distribution suites independently of the heavier code packages that would otherwise hold back such updates. . Each consumer gets its own namespaced subdirectory under /usr/share/dist-system-metadata/, so the package is extensible to further consumers beyond its initial tb-updater use case. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_37.8-1_all.deb Size: 90380 SHA256: a7df4be54a62fce76e444955d9d53e1b1892814bfed97f8ead23d3f238068a11 SHA1: ff570e56c6df00c3cc6cb162ae375bc99feb1b34 MD5sum: 6fdb1c46b6455ad94f37ac8907c5f5d1 Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_37.8-1_all.deb Size: 90428 SHA256: 77e5a49d5baf8e4ac6173f9c1c9edc99395293dc2fa1edc226b42bafd5b669e5 SHA1: 7833b26473df59bdec76609d32e53e0787d9c5d8 MD5sum: bfeaa97b7bc272622e6fb18b2f7d94fe Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_37.8-1_all.deb Size: 90420 SHA256: 1bb37bc96323ec1e4032019e8d0492f716e31ed1229af4254a5a85dbc620548c SHA1: 1e03ce6c2fc0dc1bb90f414ad099df19674d40f5 MD5sum: c9907a325619696b590400464c22f4ee Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_37.8-1_all.deb Size: 90436 SHA256: d58b442c48f69422008a39bdb488947a521315315d3b995d1ae488fce9de286b SHA1: 02baaeb0b3962caabf660a049a99864826a771f3 MD5sum: 08e7116dae3ffdf19db56821c34f03aa Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-efibootmgr Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: efibootmgr Provides: efibootmgr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-efibootmgr_37.8-1_all.deb Size: 90440 SHA256: 9bc3f577559aad7caf67ea1f04bb082e6cd2b7081d66393bf5963bca8f70ffc8 SHA1: c51ce050d4e016bc55a0b898633501effa0650b1 MD5sum: d5e22bd834e6ec6309562191e7b822a6 Description: dummy package efibootmgr A metapackage, which satisfies the dependency on efibootmgr. Because efibootmgr is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_37.8-1_all.deb Size: 90440 SHA256: e05a3ebed650eba131233f4d1a129c5a645058f427b473f84f3ace44b99cb5da SHA1: 5530c761f15513cc9b1445c624ff5c62f1117ed2 MD5sum: 631ec9ed5e4c4c5059deb4f176a90537 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_37.8-1_all.deb Size: 90432 SHA256: 73ec07277c19b3237e41df3f9efbeda20953d1563e5276c4a0dc70825571fdd2 SHA1: cfde25bc0e502f5b92b8813656fe587a9722da1c MD5sum: a83c3c8aa354b057973cb5a1c4f852e7 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_37.8-1_all.deb Size: 90424 SHA256: 7014c3f1bfcc1ecdbd7c392d8ce70103186b12d5dfb76c3456cbd89de4f4b481 SHA1: aba79f2428d419fe3d3507d8da16a75d69af82c6 MD5sum: 271e83a29bfc489a8897803f63ca54fb Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-keyutils Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: keyutils Provides: keyutils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-keyutils_37.8-1_all.deb Size: 90432 SHA256: 73005c424e66b9719c1ba483a5b12aa4a6553d48bc80a97da458bbc80dc40ac6 SHA1: 5e88e7ece5741893e12d58d23bb5aeec678f4856 MD5sum: 166e73f85fcbddc9f4b421153c418da4 Description: dummy package keyutils A metapackage, which satisfies the dependency on keyutils. Because keyutils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_37.8-1_all.deb Size: 90424 SHA256: 89a98176dac396cc30dcb9ad1b6947c2f0f92812cbed491a7f1daf0d40cce96c SHA1: aaf1845523fb257659c4f3bf064553858404aca9 MD5sum: 693eb9314af3a0416b118c098a5af45f Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_37.8-1_all.deb Size: 90464 SHA256: ca3e92590ee32629937bccf891dd752d3b927b22c4d205f9e66d8b32211242db SHA1: a65e49ace32293234564533f60be4c536121ef5f MD5sum: cdec2b39e33ef6d76240bcc7f92ed504 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mokutil Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: mokutil Provides: mokutil Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mokutil_37.8-1_all.deb Size: 90432 SHA256: f36b6cb241ecc2d84a8513366157a8f49b5c3f5f50223e49022a77f313719bec SHA1: 82f596cd708ed2d3ef5b42f1bb843c704066c252 MD5sum: 910d7abf84af5eec73f28238897e6b0a Description: dummy package mokutil A metapackage, which satisfies the dependency on mokutil. Because mokutil is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_37.8-1_all.deb Size: 90484 SHA256: 9137b08927dc87214b8ce1d210f337770cb62d605d00becc946a56f28d34735c SHA1: 8a822a853062967e58099e215aeb2b88175483a8 MD5sum: fe248bf4d3fd0cce3e68e8bef560758a Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_37.8-1_all.deb Size: 90464 SHA256: 27c90424809bc79d747c5e5de62559549b2b584128b5b361e3eff61b96429b90 SHA1: b815986593fa5e366af0bbf94cca8f0c43e35fb1 MD5sum: 18cc1eb370a0f9409fd41ba58cb69071 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sbsigntool Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: sbsigntool Provides: sbsigntool Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sbsigntool_37.8-1_all.deb Size: 90440 SHA256: ec1f9b5baa26cfe7b8e7090681a11c7e2526ed5d428fdcd51d485eab4b3f045c SHA1: 456a7b427b0be53ba9944a96e9073a16f140b7f1 MD5sum: f96003cbfa54a70d7c27d4515b58d814 Description: dummy package sbsigntool A metapackage, which satisfies the dependency on sbsigntool. Because sbsigntool is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_37.8-1_all.deb Size: 90424 SHA256: b5441c3edf69ae7ca35104875864d24d529b29a6646bd367aed488e9e1456f6f SHA1: 8718d7f0e858a123c615e2e2cf19f5b3de0da6f1 MD5sum: 8de48be736745e20af7bb4a5a98ef26c Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_37.8-1_all.deb Size: 90440 SHA256: a67ccd90746dd4c32d260b775afdeb1805fc553891010963e3521ee6c5595452 SHA1: 04b8363f30f2b768cb1e0fc17ffb7f0edf6535e8 MD5sum: 5bc1200635161112008c7b207c1092be Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_37.8-1_all.deb Size: 90440 SHA256: ec62b062822179f01c925f2d22ec22c5318f5b4b83597259e50771168f55424c SHA1: 4de747e677234b990f906e600f22d245e8565f7b MD5sum: 102c3d24a7ab3098d3234ebf6b23b1f2 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_37.8-1_all.deb Size: 90412 SHA256: 04001dedc9ca69e9ed6b6457f2724b916c1d77001d160df7722bd379e4238e18 SHA1: 601c4423457387c8a3e01a371c1c74ff8d9e335f MD5sum: fbb37258db5efe1d2048b04d7aed03c3 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-utils Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: virtualbox-guest-utils Provides: virtualbox-guest-utils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-utils_37.8-1_all.deb Size: 90456 SHA256: daeadd1bf5d27ed1bf44a0259185b66d8f50f8f14bd4de6c4c333c57adb9af51 SHA1: 444f53a6cea1074f3d28084bf336632db844c6cc MD5sum: ac5e2dbd50fb079eee1209d977c48459 Description: dummy package virtualbox-guest-utils A metapackage, which satisfies the dependency on virtualbox-guest-utils. Because virtualbox-guest-utils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-x11 Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: virtualbox-guest-x11 Provides: virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-x11_37.8-1_all.deb Size: 90452 SHA256: 0485158393929744b01f071bc0d551087910b33a7ba4b13946318e28b4b44425 SHA1: 322f747da8bc52d3c1c42f7d13abe4d67a291fa5 MD5sum: 9efe0872310dccf52917a3cc4d6c17ee Description: dummy package virtualbox-guest-x11 A metapackage, which satisfies the dependency on virtualbox-guest-x11. Because virtualbox-guest-x11 is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_37.8-1_all.deb Size: 90424 SHA256: b01094b6fa388a4d38a7f87c8863e8f7003718d1a07392af191680d6516012e7 SHA1: a07726e5bbc1ec4d25034037c5a384d451feebd8 MD5sum: e10e42567a6f0b5cc73be7b3743e9434 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_37.8-1_all.deb Size: 90440 SHA256: 5f6ae6d02abfb751414a8aaae5555e4e61aea59e298c63c21b2ad42ddb81ba67 SHA1: 4a171a13322fd632cc39c1aac323fcaf9dd60c11 MD5sum: 913125f7443c203e559a2e490416e09b Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:22.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 266 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3, dctrl-tools, bc Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_22.7-1_all.deb Size: 138484 SHA256: dc115264778136267e85cedae90cf217e9e388171e9f4c73d701dc106bb87d25 SHA1: 0e5a33a7233243cd444903919c4c480e30190219 MD5sum: 8228ac21fff0b3b753bb4605d72c98f1 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.5-1_all.deb Size: 491108 SHA256: 4693375626e0b7bcf9e5992ee0ee9a66156df6909ebc8663dc684d368a14d656 SHA1: 6005be50ce30ad4a8b616ea1148ea4ad27c1da0e MD5sum: db8bc0a9d6893876453a09b499b79899 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 127 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.5-1_all.deb Size: 47228 SHA256: da3bdb8ea9f4de6be73cb34e7ecd359099cd80ec8d367865046bdcca3011b286 SHA1: 9aefcd0144c7337adca6290b1a11d13b9e881726 MD5sum: aa29c413a4c9b9f8f8ed869aa982ce5e Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 70 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.5-1_all.deb Size: 38600 SHA256: 0d4a40757785b03efdbfd43f4eabd129266151e9e69abb4a74775e1fd9649344 SHA1: ab61fcb17b973051edad933ed97bdbd70179f8ec MD5sum: 6d842cb587a3ef462398f6f4ac547c66 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 479 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.8-1_all.deb Size: 163492 SHA256: 4805d8b1a89d2a4729369b5689b3d18b83e8af69afea9e81ad3381aae791e396 SHA1: ee9f9fa23549234b31c81872d35d4c2cf76bbc01 MD5sum: e5bd6d4899873ff9b32cd3d61f8ffb4e Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:55.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1458 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_55.6-1_all.deb Size: 475588 SHA256: 18d81aad621ec12cece252cd9275886727ccb324af10d00d0cb398783518a5b9 SHA1: 43236525ecedba613b0e241753c431ac52c7a0e8 MD5sum: 7f92bfc1f3b041a9daa0879ddac78b47 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:55.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 296 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_55.6-1_all.deb Size: 264204 SHA256: e5299e5dda9818817f964db15db1827364e876d212cef1e4f4dbdf89e3458209 SHA1: 7c1ab3d8eef7e0601d0aba87b5a4383ba3075080 MD5sum: 5152c4586fbb64277ac41831d2439457 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.4-1_all.deb Size: 1440008 SHA256: 9a3e87e94fb80ccf591bc7e75c1c0fe545d84ca59c1b6203a9850c5bfd448fb2 SHA1: 995df465d9c0f8c60fb9e4d27227f7a6e0feeea6 MD5sum: d56db62c73e8dd693f2c39a0bb74d4ff Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 102 Depends: psmisc, debsums, damngpl, safe-rm, moreutils, helper-scripts Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_9.6-1_all.deb Size: 48276 SHA256: a97e8d5a36cfbeb1cb0f6a9cb567426528bfab0bb4fa74a301787da9e07abfff SHA1: c3848d7508e5c30f653c755f418b0658821ad68d MD5sum: 4f0dc98647604defa6a45e44df6d7aaa Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_37.8-1_all.deb Size: 90468 SHA256: 81e1b6d6b84eebd1e32831a249da10c478ec86890c6f4053d8d85ff125c909f1 SHA1: 9b071f1a39c4f65b882366601a65f0d5676319d4 MD5sum: efe099136bce5ad914cfbd15072b5c5a Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-gui-all, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_37.8-1_all.deb Size: 90480 SHA256: cd6100317014a1c86c119fd68a88f45f6270d1b562b4506872b22ad8b98ec4a5 SHA1: c1aa48cdcd2678c1381213f60fae8b907a8be123 MD5sum: dfda13bce72a4706ba504d5e17f5c909 Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_37.8-1_all.deb Size: 90408 SHA256: b42125a62c2209d370d21861fe574b0657d71c0f79e899fb6b422547d70ec77d SHA1: 958950b3aab535b382d3a232578cb316f8da0816 MD5sum: 55b668de584037202738858a5b04c463 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:11.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2735 Depends: less, helper-scripts Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_11.1-1_all.deb Size: 2640356 SHA256: c54c91e69da26d8ffd15be71e40dff67eef34159630c84bee042e40a57bdffe0 SHA1: 7be774221665c5ffcf515fd89ca6788cfd9d6ff1 MD5sum: 08066ac22784c3e75c45d0411c7ed28e Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-ci-tiny-do-not-use Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-base-files, dist-base-files, initializer-dist, apparmor, apparmor-profile-dist, vm-config-dist, security-misc-server, tirdad-dkms, rads, ram-wipe, usability-misc, systemcheck, user-sysmaint-split, grub-live-dracut, bootclockrandomization, sdwdate, sudo, libpam-tmpdir, repository-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-ci-tiny-do-not-use_37.8-1_all.deb Size: 90660 SHA256: 19eeaed2c23f4ecec42c94f1ba83cb4f6e453d1dd4bcd9eeeb7497522b5f914e SHA1: e5cf65ef95f92545189da8a0cf8402c181e93528 MD5sum: 3853453d7950398513e6d81c3e1c1cd9 Description: Kicksecure minimal boot-test / debug image DANGEROUS, DO NOT USE. . A deliberately minimal package set for fast boot-test iteration: the boot chain (GRUB SMBIOS cmdline reader, RAM wipe). . Not for production use. Intended only to speed up boot/grub/systemcheck iteration for CI builds. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_37.8-1_all.deb Size: 90452 SHA256: ecee032a7cef115fa0fbaabc7382e5b9b83a9fea2bb7adf9215e17e2798da403 SHA1: 77619b283664b2f9d67b60ad167a78690762aefd MD5sum: 98e3548d5e4ac4d164b7b40cb88a383f Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_37.8-1_all.deb Size: 90504 SHA256: 92cc97895ea4864e4cf5b5cb4dac55f1e7e70f67d6174a19e389dc2e57013292 SHA1: 755b03653623cc12d8f823e64a52a73167034ad4 MD5sum: 714a0ea0c259ba9fac8c935272ba9c02 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_37.8-1_all.deb Size: 90448 SHA256: 1f49e5273d3da815f9d5260019611f8ef281ebc28b5f1384b43059de7727e0cd SHA1: 5384ed183bacac1278dcfd95c6d835666fed5b44 MD5sum: 20dadbad0b0dee628b47156a92488c0e Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_7.1-1_all.deb Size: 23092 SHA256: 868d123412250789480ecbdedd1728fe9e3af7314956154112ed4ad09432bcc3 SHA1: 6dce58e63b0e4ed28e2eb910e8b7984ab6590365 MD5sum: efe00dd9a96883ea6b77782e176e379b Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_7.1-1_all.deb Size: 19736 SHA256: 8342a329cc95f369edcbd43b9b76cef77f821d418b86442a368b11b4e0576265 SHA1: 483a6ec95cdf4c193bd93320906a087c1a57bc96 MD5sum: 46fac60d0d686416a531f94e47d286ac Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_37.8-1_all.deb Size: 90392 SHA256: dc1bebe87abe122c04cc7b83234ec6c52425401387b9fa3c70fd22077e71f31d SHA1: 6d150e5c782edd65e391864a8ef3d52a1be3e6f7 MD5sum: 251a170576c634e8632d52a5579a3df3 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_37.8-1_all.deb Size: 90400 SHA256: fcf25b40a50f73c6f8dd46beb2a1bd02596da6a36fe11295a9120f70a57de4c2 SHA1: b89a4c0b67ca2373c5e2ac371070ba019ae44e51 MD5sum: 88953814b0e89413e88a4e2a56ff304c Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_37.8-1_all.deb Size: 90428 SHA256: ff3f8dd80188f00ef9eb8e6a2d035f9f2a6dc10aaab462b786e3b8012c6bfaab SHA1: eccb99c6fcc3819e3edf38c47ff684e4eeda183a MD5sum: ef356a22316eb77ae2627ec28d9c7add Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_37.8-1_all.deb Size: 90428 SHA256: bd545676c62ecb4eaab08b7ec3ed829d773a6c9677da923cba4dbc5d476cac5a SHA1: a4f6e113387a81b702f4b5777abef0b577c81db8 MD5sum: b08266583eff43c20d269db81692fc9c Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, split-gpg2, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_37.8-1_all.deb Size: 90464 SHA256: 2c23e057aa4302a9b248fbc28671bb78407c0c5eb8fa9309524e2626045bd3b7 SHA1: bef757e7907346f45ea0b669315832924c3717ec MD5sum: 7fa4731cc5c794815e68eb141b8425fc Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_37.8-1_all.deb Size: 90388 SHA256: 4ab8e9001d4059cea8284a7eb9f2ceadcad9d39d65241eaa9b3e18bbdc3ff612 SHA1: b35b8c14e88d00db4bca6946c968196013f6956e MD5sum: 29251ba89be9f4d5948a52d8c0f0abc1 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_37.8-1_all.deb Size: 90460 SHA256: 986135dca3532107e7f418e51c60f30f98b8d2d285797e43ba935cf8bb7bb7b3 SHA1: 00ba8d01df68dc01075fd41b3a7e660f6c029438 MD5sum: 2b7c3d40192117bf5a789242b4669fba Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_37.8-1_all.deb Size: 90388 SHA256: 7a0cf0f537237f26dca6cc484bfcc25c37e20c4ffc1d51b055f3216bd1d53263 SHA1: f15f2e2d4140767df4d0f76b5ebf864f3c4aa09a MD5sum: 14da54e74921a04f332b2cc67e0455c7 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-network-conf, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_37.8-1_all.deb Size: 90440 SHA256: 8f54c9c4d8de230f385ee731f51046065eb07809529cdfafdeb3bad2b905d940 SHA1: 0d984c5c87587a354ede712ca56ef986a76a3bcf MD5sum: 5afdbdc02220533bf4195cb01af87190 Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-all Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-network-conf-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-all_37.8-1_all.deb Size: 90396 SHA256: 8e2399ed9194e258560ac25c251a17f30e1ac09bb562aaacb6318d6d5097a5db SHA1: 529146a8f397bb80d308b41032b2636eedbc383a MD5sum: d9d0cdbbb32a0908e120645fb6d27dee Description: Kicksecure systems, VMs, GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-vm-gui-all, kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-gui-all, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_37.8-1_all.deb Size: 90484 SHA256: ed59cc75419f2f1e52a3bff24759a2fca0ab8b9500be198dc7f2a76bdfb3b21b SHA1: ce36aeb30d089091d450ce4e1f1f34295bbe64b3 MD5sum: 4a1507d72d69a772c47053036503231e Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:37.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_37.8-1_all.deb Size: 90420 SHA256: ad039c0ad175b391fec9f38b64665051def8ad7d44b08309346af8846b38e55f SHA1: a8e79bf0bd50bc9f0969fa96e1dbdedc75e83b4f MD5sum: a4ca6088827cb1856687ffa3ecee99fd Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.9-1_all.deb Size: 922816 SHA256: 2edd29dd3c71da6438737d65e6b2a563dd6d49ef014eda7b4f81fe916629efd5 SHA1: bd1786b34faa351b5fbb6fe94b6fd788bc8b4b8d MD5sum: 310f6ba1a283b2ca823fd84996128ea6 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:21.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 170 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Breaks: kloak (<< 0:0.6.3-1) Replaces: kloak (<< 0:0.6.3-1), vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_21.7-1_all.deb Size: 73864 SHA256: f00ff83b1d883dd425095359c79a601d11f021736a66f21ebadc8ee0a155321d SHA1: d860cff91509184218b06e2eb2133d4f9b3848a2 MD5sum: 8ff70eece350d45dc11d7336a97a3fdd Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:12.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 146 Depends: adduser, qemu-kvm, libvirt-daemon, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, passt, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_12.7-1_all.deb Size: 67580 SHA256: 1089f304068bd2ce76a5a554dc882babb9fd934d025a388d887667131d168d7e SHA1: 3e9c8e10a1edc462f869bd76c56a3e035d8dca8c MD5sum: dc7686c155166bc543e3caf66df0b1e6 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:11.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 358 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_11.5-1_all.deb Size: 173076 SHA256: f44f9800529df5e7f163ff82a3388efc3c9b77ccbd3d8bc2025bfac6ef309864 SHA1: a4b0ca438facad6d7ece7f4dabdac7b5b14f71e0 MD5sum: 3a2be8750bc084fc807548f3d75a1d1e Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.3.0-1_all.deb Size: 342180 SHA256: 737c5dd87a7a9ed38fdec91ec7277dd11313a6a87878f15f8f565eb09d3e7f21 SHA1: eb5a76da374b9e55d7b3e4ee011fc8dcb7448f93 MD5sum: 033d3e0edaaa86f47452afb8a4b5a1b9 Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 272 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_8.2-1_all.deb Size: 92512 SHA256: 2ca13bb3e266ee434a6f2c88544ccce219fee41e8c6df3440564b992bd1eb1af SHA1: 65c7a6b049ed84e2d4a5f1aadef717de2c631e97 MD5sum: 6cb102ddcfe965e7ff3eeacffd2d211f Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:18.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 268 Depends: python3, inotify-tools, procps, safe-rm, moreutils, helper-scripts, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_18.1-1_all.deb Size: 120356 SHA256: d5ab328eb9a6e9014c2daebbf44ae5db3cb9781e4c4a95eb7cc73e3ea8b242b5 SHA1: 8a84fee26a249bb23d19836f3539187d689db413 MD5sum: b3675146cb8cfd934d6c855656ba90b8 Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:18.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_18.1-1_all.deb Size: 95568 SHA256: 3d82f6d74f2ac60c48cd30dbf52b2bd97912b79cbe01225a1f8654f9a8799bca SHA1: 254fc664f979bf996015409ef6532b0f15f35124 MD5sum: f705ab341de0fe6f249b803cfe91dc35 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils, helper-scripts Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_9.4-1_all.deb Size: 42180 SHA256: 60617dd92531483e2c1d00c4094939f0eadbe37eead52eb6ca67485ab0fabeb6 SHA1: 4a7ddc42d99c9c20fc1a291389b1415a74d6291b MD5sum: 6a78726b3cb052715be75bcf49a7de93 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 511 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_7.1-1_all.deb Size: 103468 SHA256: f7803d5590461a563944bdbd038d7b755c33775bab63422fa3711ffb90706c69 SHA1: e2d64a9440a39b42353876ba20a66ee9769870ef MD5sum: 9029011562f1c57d44b37b17cae95e6c Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:9.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 119 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_9.1-1_all.deb Size: 38944 SHA256: fd73c1b2e73b3fa8673ea005cef704fe8f205f010e31201d2f0bca318f5df448 SHA1: df08305b48cf715654c89a79920c84777c6f07b1 MD5sum: 87d0fb41e28c15ddb4d5ef77b201149e Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 82 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.6-1_all.deb Size: 25892 SHA256: e04c24d84d913e9241138e9f722aaed2391248fda8ff2a1e5f9e7eaf02c0f797 SHA1: f2f19c8dbc0a235b1c89b4fa33dbcc8021a207c9 MD5sum: 881d5e86a8bf8da7f1984d02dd20d9bf Description: Wipe RAM on shutdown and reboot Helps protect sensitive data by wiping RAM during shutdown and reboot, which can help defend against cold boot attacks. . This package requires dracut. It is incompatible with systems using initramfs-tools unless they are switched to dracut. . Implemented as the dracut module ram-wipe. . Only tested on systemd-enabled systems. . User documentation: https://www.kicksecure.com/wiki/ram-wipe . Design documentation: https://www.kicksecure.com/wiki/Dev/RAM_Wipe . Discussion: https://forums.whonix.org/t/is-ram-wipe-possible-cold-warm-boot-attack-defense . Related links: * https://www.kicksecure.com * https://www.kicksecure.com/wiki/ram-wipe * https://www.kicksecure.com/wiki/Dev/RAM_Wipe * https://www.kicksecure.com/wiki/dracut * https://www.kicksecure.com/wiki/systemd Package: repository-dist Version: 3:14.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 150 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_14.1-1_all.deb Size: 64724 SHA256: c792d5104338994587d9bbd4ac3883f43a19e4f46a8181973d158be01dcfed10 SHA1: 0d0ca2d85c8b004bc7719000009d870fa4c297d0 MD5sum: b1caf1f0d92f7e0fb8095cf3068e74c4 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:14.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 80 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_14.1-1_all.deb Size: 47112 SHA256: f39b48ee891040a61226da7b43fccdce62cc5e827a4e45a940f119d2cab4d965 SHA1: 2fa2e36620b25151e6e072e2a77af09b4591e344 MD5sum: 96da1d9cd5ba672c1c56d11f26f1d8ef Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.6-1_all.deb Size: 19880 SHA256: 173a0fdfa4782eaad88b8d8f93b73c2eaaf495dc5df7b48a0ab5bf7d67e5f3bb SHA1: af95b0d98e47c1e7ada01da7a15de79654daedd4 MD5sum: 878810b208f881cc9ffdbdc93a0301ce Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 73 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.7-1_all.deb Size: 43660 SHA256: 299780bedcd3efd4430fe8c846b69b4dba8fa0f465c45879137735c1707e26ce SHA1: a6844e52e95469df957f55b9bbc0ea39bad8dec4 MD5sum: 594e93e6d6dbaaa19e6c632887aa065f Description: Not yet implemented Remains TODO. . Currently a WIP and not for actual use. Package: sdwdate Version: 3:29.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 379 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_29.6-1_all.deb Size: 181060 SHA256: 4db2725c90a9e5a007a13bb5ba4999ab496320e5039bf5d6c0e5c9b35993d1e6 SHA1: 6a646d0f821af3cdf44c735db20dd72d44766862 MD5sum: e0e80f8bd3c46b656fe9ce2f9bb7c9a8 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:15.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 314 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_15.7-1_all.deb Size: 124320 SHA256: c0a52cdf25f31ba38278a3a966f88bba2f84cb9e0ce6770a27fee032dbd63257 SHA1: fede89ba683bb3ff99456ce467c2da01019f2990 MD5sum: 92558800a33e2598af7836000cb5eddd Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:54.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 260 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_54.2-1_all.deb Size: 222596 SHA256: 104e02908167514a04cbcea462225b11ccaa2755f44ef38994a990ad51ce471d SHA1: 3d904865633e7a4d697bd034d5c3eab0548fb579 MD5sum: 664cee45dc381be737a937a72aec870f Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:54.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 248 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_54.2-1_all.deb Size: 221520 SHA256: f2bb0983e6357b051265e643e1f1a003ac03c72837a27734ff26370a27da2944 SHA1: 41ff20903d5799e9d75d019b3b3888aec0e1daf6 MD5sum: 6417e0261e17999ed0c163c39fc7ae6c Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:54.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 875 Pre-Depends: helper-scripts Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, libcap2-bin, libdbus-1-dev, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, libsystemd-dev, memlockd, pkgconf, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0, init-system-helpers (>= 1.52) Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_54.2-1_all.deb Size: 321844 SHA256: 29c47a5d3e1c6b28fc705a475d677e08e7a33cbb71ab29daaf1127b2019daaa2 SHA1: 57d39955c65c7c66c2c883174fddcf43769610cc MD5sum: 385f802ebed9526cf15778d192a9cf56 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 68 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_5.2-1_all.deb Size: 23952 SHA256: a63c7ebdb05641791def66dcc0892f34cc2a189e9340ef5c8acd2319c5643631 SHA1: b32ecca4398cc09631c1c0ec0f769373d8f7656e MD5sum: b53122be51052367cd2c5115bdea126c Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.6-1_all.deb Size: 47748 SHA256: d6c6b490da385d34690264782a959d6b0461d98a9b84f308cbdc2767a381b76b SHA1: 4be1ec52d94ceae4dbbfbc23ad28bb876f06db1f MD5sum: d8419b10818ec96230114970f0671401 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 142 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.6-1_all.deb Size: 64064 SHA256: 9191b9ec502eb9afe011fc6a8e9ab51f908b6d356147f19d7477fc6a1f7a7397 SHA1: ec89043e6cd8aa6693ac6c503c144d589e1c2979 MD5sum: e5531c447dba938f0e5ca3040b90edd2 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.7-1_all.deb Size: 38112 SHA256: dedd1de7d2fe995048c575ca81c7caacb2a0569ab2fdfe254da39c122328a8a8 SHA1: c5d4df79ae3e270f597f8543e81be0269ba96ad5 MD5sum: 8afab731c3cdb906c5293797f648120c Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_5.6-1_all.deb Size: 35308 SHA256: 0aa1390f93b55afa7518d3c19ef2294baa81ef0506ec49757c036d63cfa22ad0 SHA1: 8374c0d8ee301a8b58470780ac8655de2d6ddea0 MD5sum: 8fa7f7b282f3ff4db63462417919cfb3 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:53.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 680 Depends: dist-base-files, helper-scripts, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, net-tools, iproute2, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm, sound-theme-freedesktop Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_53.3-1_all.deb Size: 242352 SHA256: 95c1e9eadb442545729331e2d0446e6b3b6c09d143cc7ed9bbd1161dc5940c14 SHA1: 7878cd72888a9cdbd56cc5690c294b64a724f14c MD5sum: d8fed66ca4b58700a23fdfbb4d4c9df6 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:9.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 68 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_9.4-1_all.deb Size: 35184 SHA256: f7b99e6db30ebffd38faf522ef737d069e30795953678fa0740d44b1a03f0d29 SHA1: 8f5c43c332e0e00dbafc3cd3daf3ab588b1c0830 MD5sum: 42ae8ac92ec205dd5215d563f2a445a2 Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:19.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 185 Depends: msgcollector, privleap, helper-scripts Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_19.2-1_all.deb Size: 76572 SHA256: 6a630345f7e116e4d69b8f22af2bd4dc1121a42979da351c14aeadd2b663cdc5 SHA1: 2d6fae0ff77f1069bb120fd313352230329a7905 MD5sum: 629bd508a87d10a9e7b7117add3f2dd4 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:48.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 422 Depends: msgcollector-gui, curl, psmisc, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts, sq, sqop Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_48.5-1_all.deb Size: 212160 SHA256: a02bdcc38844e08f76a7e599a7ec308ced8e8ab113827849fb0b73d278811b19 SHA1: 73525fddf2530610034c267aa02ae2093c6b29bb MD5sum: 76285541dfb9fc4b14fe2d4c33a600d3 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:10.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_10.6-1_all.deb Size: 32384 SHA256: b5bee08d72ec021d0ce0bbff4ba606e4e5d789fb8d0123896a5d8c01b0e174bb SHA1: 91d9208d95b10ddcc007b380937126869559ed84 MD5sum: 0b5b54e1f60b12bf17beab9f93fdd74b Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor Version: 0.4.9.14-1~d13.trixie+1 Architecture: arm64 Maintainer: Peter Palfrader Installed-Size: 6049 Depends: libc6 (>= 2.38), libcap2 (>= 1:2.10), libevent-2.1-7t64 (>= 2.1.8-stable), liblzma5 (>= 5.1.1alpha+20120614), libssl3t64 (>= 3.0.0), libsystemd0, libzstd1 (>= 1.5.5), zlib1g (>= 1:1.1.4), adduser, runit-helper (>= 2.14.0~), lsb-base Recommends: logrotate, tor-geoipdb, torsocks Suggests: mixmaster, torbrowser-launcher, socat, apparmor-utils, nyx, obfs4proxy Conflicts: libssl0.9.8 (<< 0.9.8g-9) Breaks: runit (<< 2.1.2-51~) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor_0.4.9.14-1~d13.trixie+1_arm64.deb Size: 2019640 SHA256: fd8f94b479d0120bce9308ec27c96b25ffd68627159df52dd009916cc0473485 SHA1: 9b6945be3463ef1e4f04a35eeb2e6afcf102e800 MD5sum: 20380efcaca9f8a739cedec5a81cc84f Description: anonymizing overlay network for TCP Tor is a connection-based low-latency anonymous communication system. . Clients choose a source-routed path through a set of relays, and negotiate a "virtual circuit" through the network, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the circuit is decrypted at each relay, which reveals the downstream relay. . Basically, Tor provides a distributed network of relays. Users bounce their TCP streams (web traffic, ftp, ssh, etc) around the relays, and recipients, observers, and even the relays themselves have difficulty learning which users connected to which destinations. . This package enables only a Tor client by default, but it can also be configured as a relay and/or a hidden service easily. . Client applications can use the Tor network by connecting to the local socks proxy interface provided by your Tor instance. If the application itself does not come with socks support, you can use a socks client such as torsocks. . Note that Tor does no protocol cleaning on application traffic. There is a danger that application protocols and associated programs can be induced to reveal information about the user. Tor depends on Torbutton and similar protocol cleaners to solve this problem. For best protection when web surfing, the Tor Project recommends that you use the Tor Browser Bundle, a standalone tarball that includes static builds of Tor, Torbutton, and a modified Firefox that is patched to fix a variety of privacy bugs. Package: tor-control-panel Version: 1:8.8-1 Architecture: all Maintainer: troubadour Installed-Size: 562 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-ipy, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Breaks: anon-connection-wizard (<< 1:11.5-1) Replaces: anon-connection-wizard (<< 1:11.5-1) Provides: anon-connection-wizard Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.8-1_all.deb Size: 355740 SHA256: b016d81c7c51a776b6a1b69586f1c1333782646406eebbbe56a3607f0cd03a1b SHA1: 468e21d9b533a2022787e6e0f089856ce04c0cf9 MD5sum: 480263a2fba2921508e69f5d1de11a08 Description: Tor Control Graphical User Interfaces WARNING: Not (yet) a standalone ready to use outside of Whonix: . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environments connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . tor-control-panel is a Tor controller. It provides the same functionality as anon-connection-wizard, but in an "expert mode" user interface that is much faster to use. It can also stop and restart Tor, display Tor logs, launch onioncircuits to view active Tor circuits, and send NEWNYM signals to Tor to request new circuits to be used for all new connections. . Both tools create and modify a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:7.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 103 Depends: tor, netcat-openbsd, xxd, safe-rm, helper-scripts Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_7.4-1_all.deb Size: 45088 SHA256: 9148a30464cc495a5194375f89b0d8b8755fe3469d0cc6a90737ac40782c6cb1 SHA1: d653c9a4e5e960c341ddb46a14098894d43714e5 MD5sum: 1a327c2e60f7e6148f4789590206cebc Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.9.14-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 26321 Depends: tor (>= 0.4.9.14-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.9.14-1~d13.trixie+1_all.deb Size: 2862080 SHA256: 4c42c6c6ea87696776518f17349fcdce867f75cac7d67a779d0baf2802d5426b SHA1: 64009b614b0db073cc65e5a60fa4f8ee7908e6fb MD5sum: 5144189a889ca47d565adfb6466cab6a Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:42.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 824 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_42.1-1_all.deb Size: 245436 SHA256: 044806c68e9fc73db3c68421fb810f12f06bd61b6fea231ec10736df69b7ff9e SHA1: 06ecd184a9f86e13cf6e7e640f66ae0e958b1c70 MD5sum: 89302eefe771f1bd4190c52c8da8abcd Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:13.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 215 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_13.1-1_all.deb Size: 63692 SHA256: 274a0c3e4fdaee7516ef647a18aedf2a3d83f6ca2ba01447ffcf67b7aca21822 SHA1: 3518a6d7da5d74d49279cb4af7ffc6b3e7ff3354 MD5sum: 4991573626d941d19dadafcee98fc037 Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: virtualbox-guest-additions-iso Version: 1:7.2.20.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 51956 Conflicts: virtualbox-2.0, virtualbox-2.1, virtualbox-2.2, virtualbox-3.0, virtualbox-3.1, virtualbox-3.2, virtualbox-4.0, virtualbox-4.1, virtualbox-4.2, virtualbox-4.3, virtualbox-5.0, virtualbox-5.1, virtualbox-5.2, virtualbox-6.0, virtualbox-7.0, virtualbox-7.1, virtualbox-7.2 Homepage: https://www.virtualbox.org Priority: optional Section: misc Filename: pool/main/v/virtualbox-guest-additions-iso/virtualbox-guest-additions-iso_7.2.20.1-1_all.deb Size: 38382112 SHA256: 1a82b668773cea029651a0f5b937aa366c4e9543c75aca918aa4e610df192336 SHA1: 61ec46f4ccc8a6129644850c92c035cdb8107816 MD5sum: 38a0a79f7201a7f35deee3446741a2e8 Description: guest additions iso image for VirtualBox VirtualBox is a free x86 virtualization solution allowing a wide range of x86 operating systems such as Windows, DOS, BSD or Linux to run on a Linux system. . This package provides an iso image which contains the guest additions for Linux, Solaris and Windows. Kicksecure uses this to install up-to-date Guest Additions automatically. Package: vm-config-dist Version: 3:18.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 249 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_18.5-1_all.deb Size: 85324 SHA256: c5ac54532ad3a2cce6720a216fb68d68ed421e87667b28dc50c7eb2b1fd61f78 SHA1: c55781638532e9c08e696221b8ea74a693206a27 MD5sum: 49a7c004e04bed1bac530bb6d5fc07d0 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . Audio: Intel HD Audio Workaround. Workaround for "VirtualBox Intel HD Audio and PipeWire Incompatibility / Audio broken after increasing ram to 5 GB / No sound after latest updates." `/etc/modprobe.d/30_vm-config-dist.conf` . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer .