Package: age-api Version: 3:0.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: helper-scripts Homepage: https://www.kicksecure.com/wiki/age-api Priority: optional Section: misc Filename: pool/main/a/age-api/age-api_0.6-1_all.deb Size: 15296 SHA256: 1cc69d38d7a494b0f890a19f1c35c34d5b9151d0a4b5f1a8158520e91c2a96e6 SHA1: d2511eefbd55265213130e55f99d359e3c93ed3b MD5sum: e29e11da00482eadd28bc51cc67314a6 Description: Local age bracket storage and query helper (age signaling) DRAFT: Nothing has been decided yet. Much better places to get further information: * https://www.kicksecure.com/wiki/age-api * https://forums.whonix.org/t/whonix-adding-age-verification/22969 . age-api provides a minimal local mechanism to store an age bracket and query it for age-signaling use cases. . The age-api-query tool outputs a machine-readable age bracket number on stdout and a human-readable description on stderr. . DRAFT: Final implementation - if any - would look much different from what is currently implemented. . See also: https://www.kicksecure.com/wiki/age-api Package: anon-apt-sources-list Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.8-1_all.deb Size: 31056 SHA256: 08a5a54300a86f1d0bb3bb92e1910e7fbaf6d576b22b4089b039cb324a98eccf SHA1: 68b5f37a32a0f29ba35efb69cf9c384b4996a88b MD5sum: 1c283cb59bb562e40243d61943f5b420 Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.5-1 Architecture: all Maintainer: iry Installed-Size: 47 Depends: tor-control-panel (>= 1:8.4-1) Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: oldlibs Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.5-1_all.deb Size: 13908 SHA256: 9371c0f567da76c6e97a44c013dd8bc715ad7cc6b251a2694aa334af763387d0 SHA1: 991f9f57377bb02ac03ba5b3e394e8be5caa8ba1 MD5sum: 4c90de8604ef4eafcec4b78a40e2c253 Description: Tor Connection Configuration (ACW) (transitional package) This is a transitional dummy package, it can be safely removed. Its functionality was merged with tor-control-panel. Package: anon-shared-build-apt-sources-tpo Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.3-1_all.deb Size: 65284 SHA256: 69ed314afd354902a312e790a2d8f34440ace4d23d2e4b199323d5f8a3076d81 SHA1: 205d7daffe505faae2c75d13fd5ccd53ff812783 MD5sum: 0cb95c65ddd09d26bf6a40ce8a059511 Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 97 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.2-1_all.deb Size: 36392 SHA256: 46cba5d279c0a5cfc2c9833b762164443bd061009bc9ace842f88aaca82e6378 SHA1: 937d3a47cca787b2284f305f03cac6be64e6e324 MD5sum: ab675d9d05ff2f80da9aab4902f65b7b Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.7-1_all.deb Size: 24140 SHA256: 87e892db0db1cfbb9e777cb57e803140f80d7452332daae592e51a246b0a5595 SHA1: 63f6fd859100d34e0250d3b9b46b6140dccbfaf0 MD5sum: 5abba8d6fc4062170f0f454cdd88fc88 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.3-1_all.deb Size: 27288 SHA256: 1d6d93cbc57e21ab935acc9f5713650c47cb754f4d20e93143ee0188a2cff52e SHA1: 25becc44047b543196f2aa3a07897a52c45471b8 MD5sum: e04b6408a6114387f56daa0e871de265 Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_10.0-1_all.deb Size: 35904 SHA256: af8206db3e1b72bdba397836eb589ed74e85494a9d267fb384fab93e53f42f73 SHA1: 0a30647b10c36e46e0ac2cf1ae1e39ddb40805a8 MD5sum: c4cd114dfe4ada7a2225344c06a0d8a7 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_37.0-1_all.deb Size: 86472 SHA256: 0d003ba14db1a9a8be116f808e5b72df01c63a25caa883790270491b567c15b9 SHA1: a15c1b3dbc0533b854dadf694d2c7e534afce6ff MD5sum: d566b4bba8c0ff9ddd57986f2259d6d5 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.5-1_all.deb Size: 11492 SHA256: 3d78fd9075cd4974878a907f4465885df98967532df3ef317fdad8b113c502dc SHA1: 873cc93a10cb95a325968f4582a2ed78d975ea54 MD5sum: e8a66e63f8989738fda944b6afb39488 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.8-1_all.deb Size: 15896 SHA256: b7216eb4d4cb2f290e7d5bbf5b1d51640c050ca09753217ce44b37e8d0cf5e09 SHA1: 8b538e5cf4fc34756276334c7971aecc2628df25 MD5sum: 55f84913b975866902f18157628e5194 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:8.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_8.1-1_all.deb Size: 32168 SHA256: a2e422dbe37cc98a3032c39a22bad92068859a6dbbf863454beec862853cf653 SHA1: 63c502f3d975e8eb1fc7179fc229327d001d86de MD5sum: e22548d06b7b0ceb0007e0f9c0619934 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 286 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.9-1_all.deb Size: 62796 SHA256: 8c147dfde7cef15f5b51965a87efa958c664a51073198c287eb13378735e7ae3 SHA1: 017ce900007115f7f6d5d30d7f72155438d2e4e2 MD5sum: f48e545f25c3f02037109eb600f63f16 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.9-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.9-1_all.deb Size: 129384 SHA256: acb936338d60918ec0768b7b11a955c5b7d2a4cc86a745a48245ee557b46880e SHA1: c705fd8dc697d9709574428851bf3d20ea9403b1 MD5sum: de2d3bd03e3e45783d2935d358473f2d Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.9-1_all.deb Size: 14140 SHA256: 208fcd2049b3f0634bed412c64bff90a0cda0c45a63283df562cb7a4ceece401 SHA1: 4f5c9fb97688cfa33006e86d7e5f0618ba20caa7 MD5sum: 54dbb90fa710892a6050eb32ec807852 Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 108 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.9-1_all.deb Size: 28504 SHA256: aad814eec48522f3d8fc6bf85e8c32b4136e2bb605d44370074c62f584245826 SHA1: 9a867185a784e163f183b91ea76001365eae2fe9 MD5sum: ec282178709a3ab0e0e835f67f3c4ef5 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:17.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 346 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_17.9-1_all.deb Size: 99932 SHA256: dc8806c4b1a39d5c9392a12168be21cca5571972cd166db42479e8f4510c05f4 SHA1: 3b6cb016e03b958ae102af215575a0b6852b0bdc MD5sum: 623d33220d6a2bb90c2799950f232448 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:17.9-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 76 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_17.9-1_all.deb Size: 47688 SHA256: dc13520e18d6802fa345a22ddceb05119ebf5ea9abf291f53dbc5242b8bb8e1c SHA1: 02b1ab3d779ee0df8da957d86ddc52c6677e4f89 MD5sum: 8e57805b3e5a751c66858f1df03bbf5b Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:59.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 926 Depends: python3, python3-debian, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_59.1-1_all.deb Size: 441460 SHA256: 110a08cea1abd788b4bdb7ef3ac21b403a13e6b005d63924cc5044b3a8c3c46d SHA1: 4c34a29f22467ffbbdf6d93205ddca3b7f066d73 MD5sum: 3af68883889d33814b0bbd8a39a4e31f Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: nvme-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_37.0-1_all.deb Size: 86404 SHA256: 4875997676a7a4fceaf605749cc77677fe456e3ce45f3e0548d6925f0d22058e SHA1: d7e8e4786f71ed6a71a4e4429a3e38c89eaafdeb MD5sum: 9eba4dff0b16abdd48121480f0c8af96 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: virtualbox-guest-additions-iso | virtualbox-7.2 | virtualbox-7.3 | virtualbox-7.4 | virtualbox-8.0 | virtualbox-8.1 | virtualbox-8.2 | virtualbox-8.3 | virtualbox-8.4 Breaks: virtualbox-guest-utils, virtualbox-guest-x11 Replaces: virtualbox-guest-utils, virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-all_37.0-1_all.deb Size: 86472 SHA256: 4f443ebcf7e7daa1e6c74ab43944aa4faf08378c8a82c7057c07ad92f509b823 SHA1: 657b71fd50c3d1853ec3a94a542730b4e970def2 MD5sum: d1e1fd732f891a17ec2e5057be9259db Description: All systems, physical hardware, GUI packages For all hardened systems. . For physical hardware. . Provides packages for all graphical desktop installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_37.0-1_all.deb Size: 86432 SHA256: 3a8ffba5a5c3abfb647276db44cf073497c1c715a2bbc96150e57e2a910abaa0 SHA1: a9271fa7e15c5f89d505d1ad8db4c4d22b0eb4a2 MD5sum: a0ba8f7e8026dd411265ddb77db7202b Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 693 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.9-1_all.deb Size: 194384 SHA256: 34b0f0d6d17098ce9c6c487ae3f75b92db1a2280c2184a52d1a289382af67d58 SHA1: 0a8733495f70690f3cb97abc8810963b31f80e16 MD5sum: 42a959a6c3698c73ebb06602ecc38f73 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, sq, sqv, sqop, sequoia-git, sequoia-chameleon-gnupg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl, mokutil Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_37.0-1_all.deb Size: 87036 SHA256: 15e1f424f2542b7c3d1d2db3af4247f228aeb61fbaf8917cb5a4d2976c46888e SHA1: e206a5d4cad34086b469c02c5df48526759eb551 MD5sum: af9238cafe9e97b81f822189e5a875f2 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_37.0-1_all.deb Size: 86608 SHA256: dc0927f95707593397948e4db399522aeac310136c977ab3c6d2feecb9685212 SHA1: b234e7d16de918e38c43734e5454a27ca1917e08 MD5sum: 277c3f0eb5783992dd2a124ae45a03e4 Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_37.0-1_all.deb Size: 86792 SHA256: 0d09315f39e987e9c4721f94693ba7011631a9a710a5ddf1368ff28d57b02ae0 SHA1: 886ecf95377c0fb057611010968851f0490a67f5 MD5sum: d8267084e9bb510f57f0653d7dc294db Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_37.0-1_all.deb Size: 86392 SHA256: 600008514e739d1766f305b1190e3c180b1d3e295ebd80a7b12b65bdf46d5a52 SHA1: 9ce3643e2f4303510995071719a03c9863eb1e01 MD5sum: 77e4a7251c2ea085002ace283e6503ca Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_37.0-1_all.deb Size: 86540 SHA256: 675ba1ad9b434377b59477ba834024a2f728fe0f0d56dc61ec88cf80f4326671 SHA1: 02f9755783f2c41b9132ff7b1343f62b75a763f2 MD5sum: b80c25817477bace131f7419fc716deb Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_37.0-1_all.deb Size: 86500 SHA256: 6d41208a5b75fc31463caed3f535ed337cbaa612a329833d2d307d356acc1f62 SHA1: dcb4aa44f08970b139a3a34a99fa3417ca61b0db MD5sum: 337433027c4434c74e4b5e39140a9541 Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_37.0-1_all.deb Size: 86560 SHA256: 7996756e2e54e1d2c42cb6f83f19a079e41c3a1ca0ba5c22d8fc005269e5870b SHA1: 0224ef3c15a9954f0b47473f7d006003278fcec4 MD5sum: 85e8be70a265f25aafc6b4b30ecf912a Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_37.0-1_all.deb Size: 86468 SHA256: ad4f84b68b21dceb056a1f382cd0bbce48872e625db73ac07762846429de84e3 SHA1: 401622251277c1d013ddf4db1a37d2146e3f5102 MD5sum: edd9320b83da911d5d906de0431d2609 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_37.0-1_all.deb Size: 86464 SHA256: 795c8a75a13fd057089cb88e8123f1c0cffbd86db5ed3733f27addf04549720b SHA1: 0a53742eea6d241ceb08e777721a44e94c35a5d1 MD5sum: 0396cbbfa5b719135d11bd330e80dcdc Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_37.0-1_all.deb Size: 86404 SHA256: 64cd07d6a35fec64ef756226ad032bb899e8957221c9994b5791d7ed63e12546 SHA1: 2c0030b0b39764d56b25256370d8d9b1dbe1c9e2 MD5sum: 3b955b9a13b8e5596227a21b42a42ddd Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_37.0-1_all.deb Size: 86388 SHA256: 77c839ccf3de8bdd0cff746cd3b9ddfa8b8560e30818c5ee20a449b6eb90d60b SHA1: d0c7399b93fbde6351a6617a7cce5c0913c8ffee MD5sum: 15df4dce72b7b66e854f593942a4714e Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-vm-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: virtualbox-guest-additions-iso | virtualbox-7.2 | virtualbox-7.3 | virtualbox-7.4 | virtualbox-8.0 | virtualbox-8.1 | virtualbox-8.2 | virtualbox-8.3 | virtualbox-8.4 Breaks: virtualbox-guest-utils, virtualbox-guest-x11 Replaces: virtualbox-guest-utils, virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-gui-all_37.0-1_all.deb Size: 86460 SHA256: 2a2aa0c13e266446f09ad63fb0481bc885b66c2c7bf15a3897406a317e0c321f SHA1: beb75c484e1401606278523d9a3386f6664b3bd0 MD5sum: 23f682d8c76b923d2e6fc52d22853c0f Description: All systems, VMs, GUI packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_37.0-1_all.deb Size: 86436 SHA256: 488a4ad4910054f88802a5f4eb1d5048654b8f7593ed71a1d2e48dc6f5252882 SHA1: 90d68e0e74a357146a9229f439d6196fee6769c5 MD5sum: 2dab08969dfb3f47438b39d1481963b7 Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_37.0-1_all.deb Size: 86424 SHA256: f293370910ce4041a0c2fa97d84f7c87f81bbf6fbe1fca447b9b84b683e0b6ff SHA1: c61624b7cef3a2f2d31d5bd5e8af1aecf2dd8cec MD5sum: db5cbc277f22f1a7932b6b20b0c4a36e Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_37.0-1_all.deb Size: 86444 SHA256: 5a5c5b498d4e913b3b702ddce6bcb1975f2a494db33d2dfa98f06468718ab199 SHA1: b9df7eb506abdd73bb0dbd0b62714aeca903ecb7 MD5sum: 7e3cd9643ab6d9fe9df95a5c621991c4 Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-efibootmgr Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: efibootmgr Provides: efibootmgr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-efibootmgr_37.0-1_all.deb Size: 86456 SHA256: bf19f32d7e81a66fe8cc2219e201f143c9fa5fe0cbd62ddc62e4edc4cc26860f SHA1: a8da212f03461048c4f2a78dde0a4ac8c24412a1 MD5sum: 221c6a2b1fdc93b154b45be3ddf5f93b Description: dummy package efibootmgr A metapackage, which satisfies the dependency on efibootmgr. Because efibootmgr is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_37.0-1_all.deb Size: 86444 SHA256: c0cc1a582c150f0c38f651e5eb1a1ac0661eaaca8372ae52fee76095591603d3 SHA1: e9e7d8c73a49feb01b843bec62c93126a9600f5e MD5sum: 1372214ff9b53aa7623b93bba55a47e8 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_37.0-1_all.deb Size: 86448 SHA256: c31149f025cd76c80721009870a3bbc6c37ec07a052e0f48e0f772343a31658b SHA1: 0a94f770747b49266f9264fc88089337bb22510a MD5sum: 0c88e6044f003bf435e3a3bb5805badc Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_37.0-1_all.deb Size: 86440 SHA256: 1540bee9aca4838754f5cc48dc9af5dd375afdd15ad000e48021de9160eca51e SHA1: 1e55456949769fc8ff339e06448925c05e6bc600 MD5sum: 730fc9ce82986d6b69a15ab19e188a9d Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-keyutils Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: keyutils Provides: keyutils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-keyutils_37.0-1_all.deb Size: 86432 SHA256: f000193ce5dfcee77457c099985f56ea2291854901355bad8c4168ca3fd6befb SHA1: df5c7b5ae21b7d929ef52e8d80b86c2a28b23128 MD5sum: d696af2549e8e223bc89226ff1ddc240 Description: dummy package keyutils A metapackage, which satisfies the dependency on keyutils. Because keyutils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_37.0-1_all.deb Size: 86432 SHA256: 2e96846710c14c88232732c6f6a0fea1175802379c2b6fcbf06716f3f4a7c381 SHA1: 07e76f1a93518d4bdd03b5f3283a3c43ad94cd9d MD5sum: 7d5e363c02db6eee064f87d86a713186 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_37.0-1_all.deb Size: 86464 SHA256: 2a65fe87241d635ff8285357d4f834e61c54d8d3161b111073a62efd797b49e6 SHA1: 3ef40267a2ab95ff83d3c92a574e69eb4966da40 MD5sum: 3662928e30c7d7bb665fe59fe44c8b11 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mokutil Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: mokutil Provides: mokutil Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mokutil_37.0-1_all.deb Size: 86444 SHA256: 7759978c246904e4c7f1d57341d7c7a5e15c4d61cab7ce86a1c930fe4ee64324 SHA1: b6c6cabc976e13313dd58129ebd7fe90b3710124 MD5sum: 723bd5b57d6e44ee2c9d5c708c40d864 Description: dummy package mokutil A metapackage, which satisfies the dependency on mokutil. Because mokutil is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_37.0-1_all.deb Size: 86496 SHA256: 3844be203228840692fc9a28b184232aa971db5ee9ba27a64b1c8f13cd70b3af SHA1: ff696da460d3019681ceffef1a33bb568d809f1c MD5sum: ff7b478b8160e907c76315739f3700e8 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_37.0-1_all.deb Size: 86468 SHA256: 76c91b8c2174eb2f07863cc700baa90e2a1f7fff7c113bf06663aaffa54a74e4 SHA1: d10ba3c194b50a24fcec0c05677fd527a343e8f1 MD5sum: 0c393d35284cd65bc211b11da716d536 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sbsigntool Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: sbsigntool Provides: sbsigntool Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sbsigntool_37.0-1_all.deb Size: 86456 SHA256: cdc1f3f995d2d7b10d4f8f4935f76bd1107e671de120dffd611add75e746d702 SHA1: 88c89736733ca3ce45222e2d68aeded4d65622aa MD5sum: f11efc4b3b15f498500bf0dd93b73296 Description: dummy package sbsigntool A metapackage, which satisfies the dependency on sbsigntool. Because sbsigntool is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_37.0-1_all.deb Size: 86424 SHA256: 50d0310f07691cb68ac2c70ac7a6b6c73bdce63a19bfab6cf54356daa5744501 SHA1: c09304a245a2a9ebee1cd5c3249e568dd527eafa MD5sum: be131cf73b77e6af74789766cd3b8f5e Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_37.0-1_all.deb Size: 86444 SHA256: 69f26f7c07f196412b6816a59f651accf8e552fe36262f5f901737378afe673a SHA1: 223661613fd321e260b46cb66fa675691fa216c8 MD5sum: 26ec1acf375f31c76564059e70b8d39f Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_37.0-1_all.deb Size: 86452 SHA256: 5f7e0f1950aeb04711b8fe6e758c1bd2671a3371e2705aba72b23e2d8725ff09 SHA1: ff5f10ec4e5a675decaf399d1955d87852b9e9bd MD5sum: b643f36998ec79e5c9b7f6bd9cf8e816 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_37.0-1_all.deb Size: 86432 SHA256: ee80a5a5b75222152e83f6a1b29b1618066beafe9062429cd346ba7ec13d068a SHA1: 7a55a56b8d17832f46317322a964449a1c3bf22b MD5sum: 51379698c1e013c5ad9496077a9c733c Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-utils Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: virtualbox-guest-utils Provides: virtualbox-guest-utils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-utils_37.0-1_all.deb Size: 86468 SHA256: 3d2350ec63ac8d352d033ee181dfcc03a7a324cdfb34f8f9e07c9c2315762046 SHA1: 56cb1239845882cc6b9449f45e848d6836a97f0d MD5sum: ba4b8f0942f282fae811bcda6cf390f8 Description: dummy package virtualbox-guest-utils A metapackage, which satisfies the dependency on virtualbox-guest-utils. Because virtualbox-guest-utils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-x11 Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: virtualbox-guest-x11 Provides: virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-x11_37.0-1_all.deb Size: 86468 SHA256: fe7fde989c81e4d89feef68a07722af50bb8167f16e1c71ac311830445f34fa7 SHA1: d4a5efd54559eccbede0773ad774c03701871106 MD5sum: 068ce53ff97e5df183cdbf1c41c623f8 Description: dummy package virtualbox-guest-x11 A metapackage, which satisfies the dependency on virtualbox-guest-x11. Because virtualbox-guest-x11 is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_37.0-1_all.deb Size: 86444 SHA256: e08bea12c7929ddd716efd1194c92510ae6c30b3a8ace4aa0aec7acdcb5e979c SHA1: 6c6412069aa864ccbc45d49e2ace2ece3170ecf4 MD5sum: 80efa08e0d5fc1b0eb54c82cdc9598c2 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_37.0-1_all.deb Size: 86432 SHA256: b9e180cdc6b9dab0de6dcd81433689e32cc1d43319421f3b7a88cae0b9f614e8 SHA1: 069b254428dbe44651e64703aaa99fe7fa301c6b MD5sum: c3983df982f4732403dda479f75163ab Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:21.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 217 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3, dctrl-tools Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_21.6-1_all.deb Size: 102080 SHA256: 56c2ab5382b5581cc0e40ad56c6b40b8b42b7a0b09102b3a4dae21f05aa1bae6 SHA1: 7605ca8e46e96727ee83b7b0302011a0e02eff59 MD5sum: 06434c223cec5c13b38f980622e5c6a9 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.5-1_all.deb Size: 491108 SHA256: 4693375626e0b7bcf9e5992ee0ee9a66156df6909ebc8663dc684d368a14d656 SHA1: 6005be50ce30ad4a8b616ea1148ea4ad27c1da0e MD5sum: db8bc0a9d6893876453a09b499b79899 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.3-1_all.deb Size: 42080 SHA256: 29872d109f97a0848293de799ece9251978387e1ce64803e98fb2ea8cd0f139e SHA1: bd3396141bf9d4224be1b0bf493cafaac33665bd MD5sum: 0b7ee3ab6f59936fc3edf7e1e89f5d61 Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.3-1_all.deb Size: 33548 SHA256: c595b03c7414976974a841cdd8e37de62baf0ebfa26d1aafb072f01cff6bb4cb SHA1: d61a3f717402e6a66ae315a9b4aab42774c62b36 MD5sum: 4b02e9ff71be5477a6cba990ecfa0342 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 475 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.5-1_all.deb Size: 158508 SHA256: a4b1b82341fbb23c1cea9ae3e5efa87f8bd8a5bf079657e9e1388dd90c9bcccb SHA1: 4c86585ee5c17290a81bc17a9135fc1733dfcfe5 MD5sum: 1abb77a7e5f335cd60dc43ab141dfcfa Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:53.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1243 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_53.1-1_all.deb Size: 367812 SHA256: 7f0e18353d8c4b6e1e05e4f1635a00c3ab57ff81cb6b50f78abaf940e2aa4a8d SHA1: 65828b3079ed4b13b6e4a032a07927f7cbf776ea MD5sum: 1aed9e1d708456901267ee5354aa4cec Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:53.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 219 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_53.1-1_all.deb Size: 186076 SHA256: d39c81f12aa26335a11d77110416977bced3f1faaf37b4caa54ce88db416de2f SHA1: 4781a4f1551c6df35f508b277e3a674e8ff247dd MD5sum: b1535b7011a53fc6ccebf27f0914a23d Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.4-1_all.deb Size: 1440008 SHA256: 9a3e87e94fb80ccf591bc7e75c1c0fe545d84ca59c1b6203a9850c5bfd448fb2 SHA1: 995df465d9c0f8c60fb9e4d27227f7a6e0feeea6 MD5sum: d56db62c73e8dd693f2c39a0bb74d4ff Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.7-1_all.deb Size: 35124 SHA256: e09b12b5ffe642e5ce09192fd01fce58af7523326e1a15af234e8ab99ef48148 SHA1: 6d207c589aad80f8b966a4f5012fdf5967e715bd MD5sum: 55eadd6d88865cb37bb8026186442ad6 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_37.0-1_all.deb Size: 86472 SHA256: 9c3515c09bd6d6df9ab0786cc1193f7aa363feba850752942af920eb8ccf22e8 SHA1: b1a7f28add7db603b0fab610d7ced2f18cd2ce44 MD5sum: e971b42b5754a39f8df989e7111a083f Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-gui-all, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_37.0-1_all.deb Size: 86488 SHA256: 133313240078cf2aace40e35d1eac0b829fcab078fa297dd4eba6facb41fda08 SHA1: e8571fd392bc05355e0bbcbb08e342641fce6979 MD5sum: 29e8ecfbccf8f3d46cdaf81a91ab28e9 Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_37.0-1_all.deb Size: 86428 SHA256: 726ac34577f9615ad11492264c911a6166cca4a9890ce3929f456226b9b7813c SHA1: 7f09588ae974b7a3face63f1f03d66fe39d7470d MD5sum: 5a5e44e112c6727d494cd2cd07946af8 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.7-1_all.deb Size: 2633012 SHA256: 2c6fc64131e5dd87e6d5ea4515ab09948c102f07186f209aa8ceaf5f9e9df952 SHA1: 01097648544ca8a6375a4ef60975e575f0336302 MD5sum: b983bdc8e8142833dc2889ee8acdc207 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_37.0-1_all.deb Size: 86456 SHA256: b7208a8a6514836f9e9b9a04f30d4e7e00f5fba6a94b96c786eb859140298ea9 SHA1: ddb414dc4866f92b2685867b6076ad3d837d82ab MD5sum: f1e4eb9a6f0af21ed75526618681e096 Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_37.0-1_all.deb Size: 86496 SHA256: ea9df19b58fea5728330546cf10623a571c5c45ea615bb361fdd9ee09969705d SHA1: 29c5444e7eee14553fab41bf811186abc7dc5f6e MD5sum: b49ff1948c844b8af73a4628ff8d124e Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_37.0-1_all.deb Size: 86460 SHA256: cff67f4502bd01252ac0f39b3c4f2721effd4f9f19b7d6ac0fd3dab713272d17 SHA1: c98cf4b341d595187b3047b0bc866b7ebef2d619 MD5sum: 6ffdd6936882fe99a7cb2e47781c7a2e Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_7.1-1_all.deb Size: 23092 SHA256: 868d123412250789480ecbdedd1728fe9e3af7314956154112ed4ad09432bcc3 SHA1: 6dce58e63b0e4ed28e2eb910e8b7984ab6590365 MD5sum: efe00dd9a96883ea6b77782e176e379b Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_7.1-1_all.deb Size: 19736 SHA256: 8342a329cc95f369edcbd43b9b76cef77f821d418b86442a368b11b4e0576265 SHA1: 483a6ec95cdf4c193bd93320906a087c1a57bc96 MD5sum: 46fac60d0d686416a531f94e47d286ac Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_37.0-1_all.deb Size: 86404 SHA256: b85ea5c1fb167a35dbb39a4fd7b44a77d30a35b744f42b1de5b97060bddc1293 SHA1: 59c42e8d787176ed6a94fce9fc14c4d3b18e6034 MD5sum: abb5d8f1843735cd7334ba9e9234751b Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_37.0-1_all.deb Size: 86412 SHA256: 6b385a00de340cf29a101021d7262521d885f0e1558aa7c8239fa8b8a307b177 SHA1: 5b748ffa5f2f5363d1a08eb649bf2bd4a1988f1d MD5sum: cbba44810bc0fd2dc59e1c7cd2ab43c3 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_37.0-1_all.deb Size: 86448 SHA256: da65e37ebf5e236ac73adfc0c6ddb5fea3f3370db415f0bd2d1d7e2610781d9c SHA1: 164e234e16a88429c71453d14653925307dcb5b5 MD5sum: c1d1c3bf89f0e2c72c278c6ddf0e6f3b Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_37.0-1_all.deb Size: 86440 SHA256: 6d431d2ff1d2c3ea28deda6cdea10e602339f18d554974d3a1abe2d03150e41d SHA1: 8ae6c120034bf9f9ca91d8329e29c15c6809faa6 MD5sum: 824bf1f913342e35c1445f2531c4f5ad Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, split-gpg2, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_37.0-1_all.deb Size: 86480 SHA256: 73afdf02369ced2db4fd512234989d5a37c4299bfa169cb44885de712bf1979b SHA1: df0e9cf2486b4fc88dbfa0eb6124b3591c98a2a1 MD5sum: 4da95a3a728043af61f10a7ffa927d05 Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_37.0-1_all.deb Size: 86404 SHA256: 480b46c6f8e56150275da48cd36223788c8894168b48c86256cc98cbc61ccc6f SHA1: b9bd5ed502691fd58412ed08a6ef0d36ae787ef6 MD5sum: 399af9ae71a75638b962f887daba27dd Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_37.0-1_all.deb Size: 86468 SHA256: 296730654901a9468bf237b3f335b9de08482cf3daf8f352bd397e644ac1ad73 SHA1: 66ae05c051242c8c3821564e15c89837f0d3b2a3 MD5sum: 4189302076d6b69c780bb5d699628d8a Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_37.0-1_all.deb Size: 86400 SHA256: 5018a08767bbd27a4f1068fdd56333fe3d217da1f5a914e3138a2f901cb8ae02 SHA1: e3381585dde0800ebab5fd5cfee7e578b696112e MD5sum: d07d93c81d17c766495bd2b971b66c30 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_37.0-1_all.deb Size: 86436 SHA256: b2b56450a5e73592940ea177936fa5c90e81c130e3cde59128367d50ca94c197 SHA1: 59d3901a86731c8d0acbb9ad188f4afc90d6a0a8 MD5sum: 4e753f14d877c33799b6845559ce89db Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-gui-all, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_37.0-1_all.deb Size: 86496 SHA256: 8b0943478276b523681462f10c905dec5222121b06c6b7651ce3f8071a9ac680 SHA1: 6f9bcb31a0f575d3b242d1a473c49d6dbde7a37c MD5sum: 6c2bb8a4650ea8d03829a2b106ade0b8 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:37.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_37.0-1_all.deb Size: 86420 SHA256: 371afed4f5acd0249648e0b9ebf5a7a67a9e9dd5599ca96c2ccb34dad71a1c26 SHA1: 3b554c57cdd05e0bbcf7ae50d461041e14f8ba25 MD5sum: cdca1b483259d54a19ce32c382b94021 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.9-1_all.deb Size: 922816 SHA256: 2edd29dd3c71da6438737d65e6b2a563dd6d49ef014eda7b4f81fe916629efd5 SHA1: bd1786b34faa351b5fbb6fe94b6fd788bc8b4b8d MD5sum: 310f6ba1a283b2ca823fd84996128ea6 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:20.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 157 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Breaks: kloak (<< 0:0.6.3-1) Replaces: kloak (<< 0:0.6.3-1), vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_20.9-1_all.deb Size: 63232 SHA256: 8b50ff71bd77a856cc46c9511b900aea198be79edd38b8d22294135aab129b6b SHA1: b115ca2b3faf0074b302aeb054637aa071308b2a MD5sum: 45dfb73a748710d2c995bff918599768 Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 143 Depends: adduser, qemu-kvm, libvirt-daemon, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, passt, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_12.2-1_all.deb Size: 61200 SHA256: f9939793986bd12078946fae518f172a072018660942cd520ced6c7b80c05b9f SHA1: a988a4c9f87912373c598893674250beb981f13a MD5sum: 672286d1905b701a7e7107c2a95a4c51 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:10.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_10.1-1_all.deb Size: 149000 SHA256: ecd70a75f7cb6c11a1a028946cd7a2be2eb9f96c397c4bc186969e768ea6ead5 SHA1: 8229839182ce408eff1b528173afd23e902b85b7 MD5sum: 5c1432c8fba9caf31673e753baf6b301 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.3.0-1_all.deb Size: 342180 SHA256: 737c5dd87a7a9ed38fdec91ec7277dd11313a6a87878f15f8f565eb09d3e7f21 SHA1: eb5a76da374b9e55d7b3e4ee011fc8dcb7448f93 MD5sum: 033d3e0edaaa86f47452afb8a4b5a1b9 Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 262 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_7.5-1_all.deb Size: 87588 SHA256: 0bf6549b9a918087083ca0ad6f3296b59fffce3a1f176f07c2297bb5e86bf3ab SHA1: 9320394616f3dab685720d10e31c5bceed88a19c MD5sum: 85575648b86875a3204374aaf4b9e768 Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:17.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 242 Depends: python3, inotify-tools, procps, safe-rm, moreutils, helper-scripts, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_17.3-1_all.deb Size: 89460 SHA256: 84b5ff882ac8b7b514a052a1561219576d61c9afc700f4a5f74169d69967f693 SHA1: 3c655afb83d0e53b9fdd2def6f11efa61042c2f4 MD5sum: 630468c4425e359ffcbc6f95d8e90f95 Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:17.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 93 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_17.3-1_all.deb Size: 65764 SHA256: e87360def0f4fa7d5a8560aad91a83f001f35377371977685192cf6c5a9e6a42 SHA1: 040e86cd3eae553dee25e0c84a9a2643f9b7ffa2 MD5sum: bef5ab8c86803e057d0c576bf205bd40 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:8.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 109 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils, helper-scripts Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_8.9-1_all.deb Size: 37732 SHA256: 472d1cebc93dcf601367a0680e78614970cf170997fa880ae02f1737d81bbba9 SHA1: ef2fc66a9fbfb427d278e1def5ff406394003954 MD5sum: 8e1a119bcac768d2814038d5be30ef22 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:6.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 461 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_6.1-1_all.deb Size: 83692 SHA256: 25b944798bef3af11cab2b4d604635faa8dc71c62bbe0697d5ae8583f6c52982 SHA1: 77174117f4d225b0fe84b6c063a9172189dd2a5a MD5sum: ecf681f6929e6740c0fb5a640bfd82a9 Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.8-1_all.deb Size: 37080 SHA256: 6fd01a06eb92a6107e236a5919fbdb3c9d0dcefc372c3d52a60ad084fad9ed60 SHA1: 753ef3d1917901685166bcbf5b870d8ca36cc934 MD5sum: 28adac348094e5780d0dcfe5138eb753 Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 82 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.6-1_all.deb Size: 25892 SHA256: e04c24d84d913e9241138e9f722aaed2391248fda8ff2a1e5f9e7eaf02c0f797 SHA1: f2f19c8dbc0a235b1c89b4fa33dbcc8021a207c9 MD5sum: 881d5e86a8bf8da7f1984d02dd20d9bf Description: Wipe RAM on shutdown and reboot Helps protect sensitive data by wiping RAM during shutdown and reboot, which can help defend against cold boot attacks. . This package requires dracut. It is incompatible with systems using initramfs-tools unless they are switched to dracut. . Implemented as the dracut module ram-wipe. . Only tested on systemd-enabled systems. . User documentation: https://www.kicksecure.com/wiki/ram-wipe . Design documentation: https://www.kicksecure.com/wiki/Dev/RAM_Wipe . Discussion: https://forums.whonix.org/t/is-ram-wipe-possible-cold-warm-boot-attack-defense . Related links: * https://www.kicksecure.com * https://www.kicksecure.com/wiki/ram-wipe * https://www.kicksecure.com/wiki/Dev/RAM_Wipe * https://www.kicksecure.com/wiki/dracut * https://www.kicksecure.com/wiki/systemd Package: repository-dist Version: 3:13.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 146 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.6-1_all.deb Size: 59652 SHA256: af7f5b24eb5f3755590ed3b7468d73dd6d813e087f1763a71b63a8c108f7228d SHA1: b886eb8ad68a0a302ac4fc9c28589719d6d091c1 MD5sum: fc41b72e402f98ab31e0e7a679f4b96c Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 76 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.6-1_all.deb Size: 42256 SHA256: 446aeba08b65d35939225eecf396b7d1315ff904e0025276cece2cc868c06d88 SHA1: fb8bfa69060d6dd5378e3bd852c0d1b8a7c6522e MD5sum: 42257a3b5af5b5ddb94a0e766bed0c16 Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.6-1_all.deb Size: 19880 SHA256: 173a0fdfa4782eaad88b8d8f93b73c2eaaf495dc5df7b48a0ab5bf7d67e5f3bb SHA1: af95b0d98e47c1e7ada01da7a15de79654daedd4 MD5sum: 878810b208f881cc9ffdbdc93a0301ce Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 132 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.5-1_all.deb Size: 49288 SHA256: 71d02e298531f228a3ea9895272e41a089ff48b05684f3f0a471ceeb0f3239b3 SHA1: 522f9d220772f980549c661b5bb3d456ba6125db MD5sum: 651035ef64a978e57139e3260eed0345 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:28.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 361 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_28.5-1_all.deb Size: 163328 SHA256: 3da58465027c1e3760547231541e368170a2cfcb82a3755b6ccaae4de7d61973 SHA1: 31aaa9ad85d9ad1ad774b92c340d9b149f039412 MD5sum: a9c50db25a1a192a57e822399c04e757 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:15.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 308 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_15.1-1_all.deb Size: 119448 SHA256: 28d1cf3120e2cfc045ff2c98188760b63ec9be3caa6936cae772a1fac28bef53 SHA1: 038f357426ae6e641e7790fe659f1bfaeab20246 MD5sum: 30adadfd545a16d5d03b53120a56fd13 Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:53.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 236 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_53.0-1_all.deb Size: 198168 SHA256: c103dcbaadd58bdbaf7cca1ad3379db4b85d8b1e5e50d0bcf4a903e06f8435fe SHA1: e4678aa826563a177ad430828c0ee8c0f14dd068 MD5sum: c3025348e753ab22491a1a39b4af9efd Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:53.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 224 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_53.0-1_all.deb Size: 197032 SHA256: e3aeeddd966dde28f91c62ce277903ec811a390404adb494aaaec8e25129bb23 SHA1: 521555419dcfb1d4cd9285891d81bf102ed92c16 MD5sum: e5192eed364771ad8acd3d5f7bed9ae9 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:53.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 843 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libdbus-1-dev, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, libsystemd-dev, memlockd, pkgconf, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0, init-system-helpers (>= 1.52) Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_53.0-1_all.deb Size: 295552 SHA256: 2e5cd91084081f623614990fc771542e21903b75f460d7b229bc8e2df9475558 SHA1: 84febf1c1b797dc553bd3a38788904d4b96471fa MD5sum: 17227086e31c7a534e09118cb3f5607c Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:5.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_5.0-1_all.deb Size: 20440 SHA256: 01f402e4b3647d40e292ee4730ecf4a9c390c7b89cb112a61a1ca035234c6df7 SHA1: 47b767d8dbdde6c8d6ad1cb68efda8872a4505e1 MD5sum: a977ceb25f6dc55a1d6048edbbba0250 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.3-1_all.deb Size: 43040 SHA256: a09ab1ef23e1c7c2a8df1179472769fff990fed57052df0e10fbd02e6e256c56 SHA1: 7c2038d0306125f58439a14e02be635229a45667 MD5sum: 9da09f19112df2dccdfb8696d6ec19e4 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.4-1_all.deb Size: 61424 SHA256: 6607003fd131f55085a6c71df6e34d4ba03a8ae79157a0c6b6b02d0682e5d6c2 SHA1: b36b820b8d4fb19db4c12e2f9f463cfea8114754 MD5sum: ab4904ba64dac66efd8e82af8a70337c Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.7-1_all.deb Size: 38112 SHA256: dedd1de7d2fe995048c575ca81c7caacb2a0569ab2fdfe254da39c122328a8a8 SHA1: c5d4df79ae3e270f597f8543e81be0269ba96ad5 MD5sum: 8afab731c3cdb906c5293797f648120c Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:5.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 129 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_5.1-1_all.deb Size: 33180 SHA256: 01f4d6e81fcc848a225b1e38152262847c9caaf9480b1d193531be12b83281de SHA1: 535a4694fc83cb310e1725d968c2509f8dc9ca47 MD5sum: b220d1df0eeb969fb19b505e1f91b21e Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:52.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 651 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_52.2-1_all.deb Size: 214592 SHA256: d959e62ae5a67155bb559a823d39392a19bcaf1d7ed446ccd37aed17b8b7a610 SHA1: badeae83bc38d7051f7c6137d371803e942f24d1 MD5sum: 0994bcdc1eb44fc0b2820eb34d120f4d Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:8.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 64 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_8.9-1_all.deb Size: 31296 SHA256: 5f717bc276998705fce8b531d27bf0af5babed4d2ff74ded090d6c9c85faa3bd SHA1: 935075f25174bcfb65e12c8f014bafd0ae1d4444 MD5sum: a7ece141dcc51253e50029a9150d0ff4 Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.8-1_all.deb Size: 68744 SHA256: 693f6371bb86e11cff1cdd339b11f6dfc63a38c277468131c68595da1f3a14cb SHA1: d4eb1283e79af2b380bfda4f66805ee2b9eb432a MD5sum: 25616ac92650d7ea76bb6e6870017fe3 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:47.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 549 Depends: msgcollector-gui, curl, psmisc, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts, sq, sqop Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_47.0-1_all.deb Size: 291016 SHA256: 1d2743e59c5477d2a562b19b9aec2fa5af5cc5c3c26ae322807f455c1cf038c8 SHA1: 679a71b6c68cf07ff03a578d71533bb3f0a24e92 MD5sum: e27b7cda1648dd2f7e7d0b9f100574f1 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_10.0-1_all.deb Size: 29568 SHA256: 8d1ba44bb7c1729ae41edf06fc4ed987a04d3865720621e06678444cbd69375e SHA1: 1250b0768daad5e3b5bb86d144f47205d0acc468 MD5sum: 01abd99cb9d6cf7d5221c05742dc3fb7 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:8.5-1 Architecture: all Maintainer: troubadour Installed-Size: 563 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-ipy, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Breaks: anon-connection-wizard (<< 1:11.5-1) Replaces: anon-connection-wizard (<< 1:11.5-1) Provides: anon-connection-wizard Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.5-1_all.deb Size: 354812 SHA256: 502a44d88040adcbb9b5acef2534a37eabccc0bfbdb7a7e9dc1b5eebb458f93e SHA1: bd178f12826a37ee07a40f75869798ad355683a8 MD5sum: e56d453c73a835e7edc2a63789a8d040 Description: Tor Control Graphical User Interfaces WARNING: Not (yet) a standalone ready to use outside of Whonix: . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environments connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . tor-control-panel is a Tor controller. It provides the same functionality as anon-connection-wizard, but in an "expert mode" user interface that is much faster to use. It can also stop and restart Tor, display Tor logs, launch onioncircuits to view active Tor circuits, and send NEWNYM signals to Tor to request new circuits to be used for all new connections. . Both tools create and modify a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_7.1-1_all.deb Size: 31260 SHA256: 5befaf2f28c727f3be550c235f688764374e57dac49a2418ab24e368a1ef9359 SHA1: 5ff983b72543d8f3a31f48d92d83a46624d9de71 MD5sum: 1af2fc68c1f9db241ac1ca954069f4dc Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.9.11-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 25435 Depends: tor (>= 0.4.9.11-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.9.11-1~d13.trixie+1_all.deb Size: 2777912 SHA256: aaf832aa27e4c9cd15b1243130638330b436c8062a636e77774a155ff73f1150 SHA1: 0fe55e5f18bf0f07c1d6567a622b31402b307993 MD5sum: 88022132e497ea2c4ffafa45e5c18bd6 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:40.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 797 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_40.5-1_all.deb Size: 231372 SHA256: dfd47ff0793dbad6c6512b29bb6c6e4bc87ef739377ec42bb07bc72732b8d0c8 SHA1: 1cbd24d374525048e4fb9bae478616406249bb84 MD5sum: 447e88f848d5a1437bdd46771de8b1b2 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:12.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 208 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_12.7-1_all.deb Size: 58920 SHA256: d8716c865ed4e932d3f54a5f3c0c7bff7faee79f4c6deec5d253d3a2907a871c SHA1: c796643142d1f153d16bf8024a6a61a65094768e MD5sum: a9f1c22fd5ba577520eb12c4b6bea789 Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:16.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 212 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_16.7-1_all.deb Size: 65068 SHA256: 45724520d601bc2fdf3d6419c14b9b110bb437787bc5d4ab77120520452402c3 SHA1: 7fb8a8a957909de95c01da2b2414476227be0428 MD5sum: 07a529704fc5de71898bcb0a2d1e8271 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . Audio: Intel HD Audio Workaround. Workaround for "VirtualBox Intel HD Audio and PipeWire Incompatibility / Audio broken after increasing ram to 5 GB / No sound after latest updates." `/etc/modprobe.d/30_vm-config-dist.conf` . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer .